@iowarp/clio-coder 0.3.8 → 0.4.0

package/dist/{chunk-TLQJPP24.js → chunk-BUMFYQFY.js}

@@ -1,30 +1,37 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
-  protectedArtifactFromSessionEntry,
-  protectedArtifactStateFromSessionEntries,
-  readAuditRows,
-  readSessionEntriesForId,
-  responseModelIdObservationFromRecord
-} from "./chunk-YS5VLNH5.js";
+  decideReviewGate,
+  materializePendingGateDecision,
+  readGateDecisionArtifacts,
+  readGateDecisionArtifactsForRunIds,
+  stagePendingGateDecision,
+  verifyGateDecisionArtifact
+} from "./chunk-X75E3D2N.js";
 import {
   RUN_RECEIPT_INTEGRITY_ALGORITHM,
   RUN_RECEIPT_INTEGRITY_VERSION,
-  adaptFinishContractCompletionStatus,
   adaptGateDecisionReviewStatus,
   adaptGroundedEvidenceValidationStatus,
   composeTrustStatus,
+  formatTrustAxes,
+  formatTrustSummary,
   inspectRunReceiptTrustStatus,
   isReceiptIntegrity,
   isTrustStatusIdentifier,
-  loadEvalArtifact,
   normalizeTrustStatus,
-  parseEvalArtifactV4,
-  redactArtifactForStorage,
   retiredIntegrityVersionOf,
-  sumEvalHarnessMetrics,
+  sha256,
+  trustVerdict,
   verifyReceiptIntegrity,
   withReceiptIntegrity
-} from "./chunk-K4XHGFR5.js";
+} from "./chunk-B7OBL7PK.js";
+import {
+  protectedArtifactFromSessionEntry,
+  protectedArtifactStateFromSessionEntries,
+  readAuditRows,
+  readSessionEntriesForId,
+  responseModelIdObservationFromRecord
+} from "./chunk-QREDIESB.js";
 import {
   applyTaskWorktree,
   captureWorkspaceSnapshot,
@@ -32,19 +39,32 @@ import {
   createTaskWorktree,
   createWriteBoundaryEnforcer,
   gitCheckoutRoot
-} from "./chunk-MXKJU4JB.js";
+} from "./chunk-U77AMWDL.js";
 import {
   executionPlanAncestors,
   spliceExecutionPlan
-} from "./chunk-J3YUBZWY.js";
+} from "./chunk-QBJA7R7N.js";
 import {
   parseRigorOverride,
   resolveRigor
 } from "./chunk-RVG5JXAL.js";
 import {
-  FLEET_COMMAND_BASE_ENV,
-  normalizeWriteBoundary
-} from "./chunk-E77JEWSD.js";
+  loadEvalArtifact,
+  parseEvalArtifactV4,
+  redactArtifactForStorage,
+  sumEvalHarnessMetrics
+} from "./chunk-NHLBIGRH.js";
+import {
+  defaultRunEventJournal,
+  removeRunEventJournals
+} from "./chunk-IQ7KR472.js";
+import {
+  AdmissionCanceledError,
+  EVENT_TEE_LIMIT,
+  createWorkerOutputCapture,
+  durableAssistantTextFromEvent,
+  startDispatchEventPump
+} from "./chunk-T56WDKA5.js";
 import {
   LOCAL_NODE_ID,
   computeSettingsFingerprint,
@@ -55,9 +75,14 @@ import {
   receiptAttestationFields,
   routeFactVerdict,
   spawnNativeWorker
-} from "./chunk-2HEJ2F35.js";
+} from "./chunk-QLFS5GO2.js";
+import {
+  FLEET_COMMAND_BASE_ENV,
+  normalizeWriteBoundary
+} from "./chunk-CTJ4RNAA.js";
 import {
   AGENT_LEDGER_PROMPT_MAX_CHARS,
+  COUNCIL_MIN_MEMBERS,
   RETRYABLE_OUTCOMES,
   UnsupportedResponseSchemaError,
   WORKER_EXIT_PERMISSION_REQUIRED,
@@ -67,24 +92,23 @@ import {
   agentRoleReadinessReport,
   agentRouteCandidates,
   antigravitySubprocessConfigForAutonomy,
-  applyToolProfile,
   approvedRouteCandidates,
   assertApprovedAssignmentRoute,
   assertApprovedRecoveryCapability,
-  assertToolProfileEnforceable,
   claimConflicts,
   classifyAgentTask,
   claudeSubprocessPermissionConfigForAutonomy,
   competeStanceLiner,
   createRunEffectsRecorder,
+  declaredScopeIntent,
   declaredScopeReplacementDiagnostic,
   declaredScopeReplacementNotice,
-  describeCallAction,
   isBoundedGateRolePrompt,
   isClaudeCanonicalTool,
   isResponseSchemaRejection,
   isRunOutcomeCode,
   networkToolsDisabled,
+  nodeResultContractFilesystem,
   projectExecutionHandoffs,
   renderAgentLedger,
   resolveDispatchPathScope,
@@ -95,7 +119,7 @@ import {
   serializeWorkerRuntimeDescriptor,
   toolPromptHintsForNames,
   validateJobSpec
-} from "./chunk-A3WNZD3P.js";
+} from "./chunk-J4W7KFM7.js";
 import {
   decideRoute,
   defaultRoutingIntent,
@@ -113,7 +137,20 @@ import {
   routingIntentRejection,
   sameRouteIdentity,
   toRouteCandidate
-} from "./chunk-P43ETTHK.js";
+} from "./chunk-SJ5ZKQ4S.js";
+import {
+  assessFinishContract
+} from "./chunk-GKF55TAZ.js";
+import {
+  WRITE_ROOT_REFUSED_TOOLS
+} from "./chunk-32KWKNSF.js";
+import {
+  describeCallAction
+} from "./chunk-TVHHYFHE.js";
+import {
+  applyToolProfile,
+  assertToolProfileEnforceable
+} from "./chunk-42FMPA75.js";
 import {
   appliesRecipeResultContract,
   gateRouteCorrelation,
@@ -122,94 +159,93 @@ import {
   routeCorrelationFactsForRun,
   withAttemptRole
 } from "./chunk-H7IXIC72.js";
-import {
-  WRITE_ROOT_REFUSED_TOOLS,
-  assessFinishContract
-} from "./chunk-5H3GB5BO.js";
 import {
   compareCodepoints
-} from "./chunk-A2NJGIB3.js";
-import {
-  isSkillActivation
-} from "./chunk-GOXNB3AO.js";
+} from "./chunk-5LXZXPKX.js";
 import {
   DEFAULT_AUTONOMY_LEVEL,
   autonomyDenyRejection,
+  isSkillActivation,
   mapAutonomy
-} from "./chunk-HWUFFB6L.js";
+} from "./chunk-RAPCMZL4.js";
 import {
-  parseJsonObjectPayload,
-  parseVerifierResult,
-  pathBoundaryCovers,
-  resultContractAuthorship,
-  validateRecipeResult
-} from "./chunk-TTHACPOM.js";
+  createRedactionTally,
+  redactSecretsDeep,
+  redactSecretsText
+} from "./chunk-4BJ5BYCE.js";
+import {
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
+import {
+  canonicalJson,
+  endpointIdentityHash,
+  parseAgentLedgerBody
+} from "./chunk-CMZWFGD2.js";
+import {
+  pathBoundaryCovers
+} from "./chunk-HHV2GANA.js";
 import {
   agentSpecFingerprint,
   assertAgentSpecPolicy,
   classify,
   isUserVisibleAgent,
   normalizeAgentSpec,
-  resolveAgentToolCompatibility
-} from "./chunk-AOCYTWAV.js";
+  parseJsonObjectPayload,
+  resolveAgentToolCompatibility,
+  resultContractAuthorship,
+  validateRecipeResult
+} from "./chunk-DYJP44XW.js";
 import {
   detectValidationCommand
-} from "./chunk-MV3K5QF2.js";
+} from "./chunk-GCSMB2KY.js";
 import {
   isProjectVerifierCheckId,
   isVerificationScriptName
 } from "./chunk-UL3WSD3F.js";
-import {
-  createRedactionTally,
-  redactSecretsDeep,
-  redactSecretsText
-} from "./chunk-4BJ5BYCE.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
-import {
-  canonicalJson,
-  endpointIdentityHash,
-  parseAgentLedgerBody
-} from "./chunk-CMZWFGD2.js";
-import {
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
 import {
   ToolNames,
   isBuiltinToolName
-} from "./chunk-CGKSTWHD.js";
+} from "./chunk-K6BSR66V.js";
 import {
   canonicalizeWireModelId,
+  endpointCapacityFor,
+  endpointCapacityForStatus,
+  endpointLabel,
   firstRuntimeResolutionError,
+  foregroundStreamUsage,
   isDispatchEligibleRuntime,
+  normalizeCostProvenance,
+  resolveEndpointCapacities,
   resolveModelCapabilities,
   resolveRuntimeTarget,
   runtimeResolutionWarnings,
   runtimeTargetSnapshot
-} from "./chunk-7RFXX52T.js";
+} from "./chunk-DQITNCXG.js";
 import {
   ceilChars
-} from "./chunk-RWSI4YD7.js";
+} from "./chunk-UM7N4G5A.js";
+import {
+  BusChannels
+} from "./chunk-HLW2MRKE.js";
+import {
+  atomicWrite
+} from "./chunk-76ONBSIA.js";
+import {
+  assertSafeId
+} from "./chunk-R346GLFC.js";
 import {
   attributeCommitMessage,
   gitCommitAttributionEnabled,
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-B5CSFE7B.js";
+} from "./chunk-BBVJUZHB.js";
 import {
   MAX_TIMER_DELAY_MS,
   rawDurationMs
 } from "./chunk-FQ4SKYE4.js";
-import {
-  BusChannels
-} from "./chunk-TT36MB5S.js";
-import {
-  atomicWrite
-} from "./chunk-3BINW3FP.js";
-import {
-  assertSafeId
-} from "./chunk-R346GLFC.js";
 import {
   AI_AGENT_NAME
 } from "./chunk-6EJMN2Y3.js";
@@ -223,14 +259,14 @@ import {
   DEFAULT_DELEGATION_TURN_TIMEOUT_MS,
   DEFAULT_SETTINGS,
   THINKING_LEVELS
-} from "./chunk-4DGYLA73.js";
+} from "./chunk-GXNLGKAB.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
 } from "./chunk-4ZG3XFUR.js";
 import {
   targetRequiresAuth
-} from "./chunk-EQ63NRB7.js";
+} from "./chunk-BBVYXMFO.js";
 import {
   FILE_LOCK_ACQUIRE_TIMEOUT_MS,
   withStateFileLock,
@@ -245,10 +281,10 @@ import {
   clioDataDir,
   clioStateDir,
   stateRootRemoved
-} from "./chunk-BNAZZHFG.js";
+} from "./chunk-BYP5D4HI.js";
 import {
   resolveEffectivePricing
-} from "./chunk-PT7HYKEM.js";
+} from "./chunk-VO2LKSTM.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -406,8 +442,8 @@ var StdioJsonRpcTransport = class {
   constructor(command, args, options = {}) {
     this.terminationGraceMs = boundedMilliseconds(options.terminationGraceMs, 500);
     this.terminationWaitMs = boundedMilliseconds(options.terminationWaitMs, 2e3);
-    this.childClosePromise = new Promise((resolve5) => {
-      this.resolveChildClose = resolve5;
+    this.childClosePromise = new Promise((resolve4) => {
+      this.resolveChildClose = resolve4;
     });
     const childEnvironment = options.env ? { ...process.env, ...options.env } : process.env;
     const attribution = withManagedGitCommitAttributionEnvironment(childEnvironment, {
@@ -464,10 +500,10 @@ var StdioJsonRpcTransport = class {
     const requestTimeoutMs = validateRequestTimeout(method, timeoutMs);
     const id = this.nextId++;
     const message = { jsonrpc: "2.0", id, method, params };
-    const promise = new Promise((resolve5, reject) => {
+    const promise = new Promise((resolve4, reject) => {
       const pending = {
         method,
-        resolve: (value) => resolve5(value),
+        resolve: (value) => resolve4(value),
         reject
       };
       if (requestTimeoutMs !== void 0) {
@@ -654,9 +690,9 @@ var StdioJsonRpcTransport = class {
       if (remaining <= 0) return this.terminationObserved();
       const interval = Math.min(10, remaining);
       if (this.childHandlesClosed) {
-        await new Promise((resolve5) => setTimeout(resolve5, interval));
+        await new Promise((resolve4) => setTimeout(resolve4, interval));
       } else {
-        await Promise.race([this.childClosePromise, new Promise((resolve5) => setTimeout(resolve5, interval))]);
+        await Promise.race([this.childClosePromise, new Promise((resolve4) => setTimeout(resolve4, interval))]);
       }
     }
     return true;
@@ -721,10 +757,10 @@ var StreamJsonRpcPeerTransport = class {
     const requestTimeoutMs = validateRequestTimeout(method, timeoutMs);
     const id = this.nextId++;
     const message = { jsonrpc: "2.0", id, method, params };
-    const promise = new Promise((resolve5, reject) => {
+    const promise = new Promise((resolve4, reject) => {
       const pending = {
         method,
-        resolve: (value) => resolve5(value),
+        resolve: (value) => resolve4(value),
         reject
       };
       if (requestTimeoutMs !== void 0) {
@@ -888,162 +924,6 @@ function createStdioServerTransport(options = {}) {
   return new StreamJsonRpcPeerTransport(options);
 }
 
-// src/domains/dispatch/event-pump.ts
-init_esm_shims();
-var EVENT_TEE_LIMIT = 1024;
-function startDispatchEventPump(source, fold, options = {}) {
-  const limit = options.limit ?? EVENT_TEE_LIMIT;
-  const pending = [...options.prelude ?? []];
-  const waiters = [];
-  let finished = false;
-  let abandoned = false;
-  let dropped = 0;
-  const push = (value) => {
-    if (abandoned) return;
-    const waiter = waiters.shift();
-    if (waiter) {
-      waiter({ value, done: false });
-      return;
-    }
-    pending.push(value);
-    while (pending.length > limit) {
-      pending.shift();
-      dropped += 1;
-    }
-  };
-  const end = () => {
-    finished = true;
-    while (waiters.length > 0) {
-      waiters.shift()?.({ value: void 0, done: true });
-    }
-  };
-  const notify = (event) => {
-    try {
-      options.onEvent?.(event);
-    } catch (error) {
-      options.onError?.(error);
-    }
-  };
-  const done = (async () => {
-    try {
-      for (const event of options.prelude ?? []) notify(event);
-      for await (const event of source) {
-        try {
-          fold(event);
-        } catch (error) {
-          options.onError?.(error);
-        }
-        notify(event);
-        push(event);
-      }
-    } catch (error) {
-      options.onError?.(error);
-    } finally {
-      end();
-    }
-  })();
-  const events = {
-    next() {
-      if (pending.length > 0) {
-        return Promise.resolve({ value: pending.shift(), done: false });
-      }
-      if (finished || abandoned) return Promise.resolve({ value: void 0, done: true });
-      return new Promise((resolve5) => {
-        waiters.push(resolve5);
-      });
-    },
-    return() {
-      abandoned = true;
-      pending.length = 0;
-      while (waiters.length > 0) {
-        waiters.shift()?.({ value: void 0, done: true });
-      }
-      return Promise.resolve({ value: void 0, done: true });
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    }
-  };
-  return { events, done, droppedEvents: () => dropped };
-}
-var WORKER_OUTPUT_MAX_BYTES = 8192;
-var WORKER_OUTPUT_TRUNCATION_MARKER = "\n[worker output truncated]";
-function isRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function assistantTextFromContent(content) {
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  return content.map((block) => {
-    if (typeof block === "string") return block;
-    if (!isRecord2(block)) return "";
-    return typeof block.text === "string" ? block.text : "";
-  }).join("");
-}
-function isDurableAssistantMessage(message) {
-  const stopReason = message.stopReason;
-  if (stopReason === "toolUse" || stopReason === "error" || stopReason === "aborted" || stopReason === "cancelled") {
-    return false;
-  }
-  if (!Array.isArray(message.content)) return true;
-  return !message.content.some((block) => isRecord2(block) && block.type === "toolCall");
-}
-function durableAssistantTextFromEvent(event) {
-  if (!isRecord2(event) || event.type !== "message_end" || !isRecord2(event.message)) return "";
-  if (event.message.role !== "assistant" || !isDurableAssistantMessage(event.message)) return "";
-  return assistantTextFromContent(event.message.content);
-}
-function boundedOutput(state, text) {
-  const bytes = Buffer.byteLength(text, "utf8");
-  const bounded = truncateUtf8(text, WORKER_OUTPUT_MAX_BYTES, WORKER_OUTPUT_TRUNCATION_MARKER);
-  return { state, text: bounded, bytes, truncated: bounded !== text };
-}
-function createWorkerOutputCapture() {
-  let finalText = null;
-  let partialText = "";
-  let partialBytes = 0;
-  let partialStored = 0;
-  return {
-    observe(event) {
-      if (!isRecord2(event)) return;
-      if (event.type === "message_end") {
-        const message = isRecord2(event.message) ? event.message : null;
-        partialText = "";
-        partialBytes = 0;
-        partialStored = 0;
-        if (message === null || message.role !== "assistant") return;
-        if (!isDurableAssistantMessage(message)) return;
-        const text = assistantTextFromContent(message.content).trim();
-        if (text.length > 0) finalText = text;
-        return;
-      }
-      if (event.type !== "message_update") return;
-      const assistantEvent = isRecord2(event.assistantMessageEvent) ? event.assistantMessageEvent : null;
-      if (assistantEvent === null || assistantEvent.type !== "text_delta") return;
-      const delta = assistantEvent.delta;
-      if (typeof delta !== "string" || delta.length === 0) return;
-      partialBytes += Buffer.byteLength(delta, "utf8");
-      if (partialStored < WORKER_OUTPUT_MAX_BYTES) {
-        partialText += delta;
-        partialStored += Buffer.byteLength(delta, "utf8");
-      }
-    },
-    snapshot() {
-      if (partialBytes > 0 && partialText.trim().length > 0) {
-        const bounded = truncateUtf8(partialText.trim(), WORKER_OUTPUT_MAX_BYTES, WORKER_OUTPUT_TRUNCATION_MARKER);
-        return {
-          state: "partial",
-          text: bounded,
-          bytes: partialBytes,
-          truncated: bounded !== partialText.trim() || partialBytes > partialStored
-        };
-      }
-      if (finalText !== null) return boundedOutput("final", finalText);
-      return void 0;
-    }
-  };
-}
-
 // src/domains/dispatch/capacity-lease.ts
 init_esm_shims();
 import { randomBytes } from "node:crypto";
@@ -1069,7 +949,7 @@ function clone(lease) {
 function valid(value) {
   if (typeof value !== "object" || value === null) return false;
   const lease = value;
-  return typeof lease.leaseId === "string" && typeof lease.assignmentId === "string" && typeof lease.nodeId === "string" && (lease.host === void 0 || typeof lease.host === "string") && Number.isInteger(lease.ownerPid) && typeof lease.processBirthToken === "string" && typeof lease.acquiredAt === "string" && typeof lease.expiresAt === "string" && typeof lease.heartbeatAt === "string" && (lease.reservationOwnerId === null || typeof lease.reservationOwnerId === "string") && (lease.reservationMemberId === null || typeof lease.reservationMemberId === "string");
+  return typeof lease.leaseId === "string" && typeof lease.assignmentId === "string" && typeof lease.nodeId === "string" && (lease.endpointKey === void 0 || typeof lease.endpointKey === "string") && (lease.host === void 0 || typeof lease.host === "string") && Number.isInteger(lease.ownerPid) && typeof lease.processBirthToken === "string" && typeof lease.acquiredAt === "string" && typeof lease.expiresAt === "string" && typeof lease.heartbeatAt === "string" && (lease.reservationOwnerId === null || typeof lease.reservationOwnerId === "string") && (lease.reservationMemberId === null || typeof lease.reservationMemberId === "string");
 }
 function validTimestamp(value) {
   if (typeof value !== "string") return false;
@@ -1133,6 +1013,7 @@ var MEMBER_STATUSES = /* @__PURE__ */ new Set(["held", "consumed", "released"]);
 function heldReservationUsage(values) {
   let global = 0;
   const nodes = {};
+  const endpoints = {};
   for (const value of values) {
     if (typeof value !== "object" || value === null)
       throw new Error("dispatch capacity store has invalid reservation records");
@@ -1142,6 +1023,7 @@ function heldReservationUsage(values) {
     if (record.status !== "active") continue;
     const byWave = /* @__PURE__ */ new Map();
     const byNodeWave = /* @__PURE__ */ new Map();
+    const byEndpointWave = /* @__PURE__ */ new Map();
     for (const raw of record.members) {
       if (typeof raw !== "object" || raw === null)
         throw new Error("dispatch capacity store has invalid reservation records");
@@ -1154,13 +1036,39 @@ function heldReservationUsage(values) {
       const nodeWaves = byNodeWave.get(member.nodeId) ?? /* @__PURE__ */ new Map();
       nodeWaves.set(wave, (nodeWaves.get(wave) ?? 0) + 1);
       byNodeWave.set(member.nodeId, nodeWaves);
+      if (member.endpointKey !== void 0 && typeof member.endpointKey !== "string")
+        throw new Error("dispatch capacity store has invalid reservation records");
+      if (typeof member.endpointKey === "string") {
+        const endpointWaves = byEndpointWave.get(member.endpointKey) ?? /* @__PURE__ */ new Map();
+        endpointWaves.set(wave, (endpointWaves.get(wave) ?? 0) + 1);
+        byEndpointWave.set(member.endpointKey, endpointWaves);
+      }
     }
     global += Math.max(0, ...byWave.values());
     for (const [id, waves] of byNodeWave) nodes[id] = (nodes[id] ?? 0) + Math.max(0, ...waves.values());
+    for (const [key, waves] of byEndpointWave) endpoints[key] = (endpoints[key] ?? 0) + Math.max(0, ...waves.values());
   }
-  return { global, nodes };
+  return { global, nodes, endpoints };
 }
-function assertCapacity(file, nodeId, limits) {
+function describeEndpointCapacityHolders(holders) {
+  const parts = [];
+  const add = (count, singular, plural) => {
+    if (count > 0) parts.push(`${count} ${count === 1 ? singular : plural}`);
+  };
+  add(holders.leases, "active lease", "active leases");
+  add(holders.reservations, "held reservation", "held reservations");
+  add(holders.foregroundStreams, "foreground stream", "foreground streams");
+  if (parts.length === 0) return "no active lease, held reservation, or foreground stream currently holds a slot";
+  const named = parts.length === 1 ? parts[0] : parts.length === 2 ? `${parts[0]} and ${parts[1]}` : `${parts.slice(0, -1).join(", ")}, and ${parts.at(-1)}`;
+  const total = holders.leases + holders.reservations + holders.foregroundStreams;
+  return `${named} ${total === 1 ? "holds" : "hold"} ${total === 1 ? "the slot" : "the slots"}`;
+}
+function endpointCapacityRemedy(input) {
+  const ways = "set this target's maxConcurrentRequests to the slot count the server was started with, collect in-flight runs, or point workers at a second server";
+  if (input?.rosterFloor === void 0) return `reduce the same-wave worker count, ${ways}`;
+  return `a council runs its whole roster in one wave and cannot go below ${input.rosterFloor} members, so ${ways}`;
+}
+function assertCapacity(file, nodeId, endpointKey, limits) {
   const held2 = heldReservationUsage(file.reservations);
   const globalUsed = file.leases.length + held2.global;
   if (globalUsed >= limits.global) {
@@ -1175,6 +1083,23 @@ function assertCapacity(file, nodeId, limits) {
     if (used >= nodeLimit)
       throw new Error(`dispatch: admission denied: node '${nodeId}' capacity reached (${used}/${nodeLimit})`);
   }
+  if (endpointKey !== void 0) {
+    const endpointLimit = limits.endpoints[endpointKey];
+    if (endpointLimit !== void 0) {
+      if (endpointLimit < 1)
+        throw new Error(`dispatch: admission denied: endpoint '${endpointLabel(endpointKey)}' capacity unavailable`);
+      const holders = {
+        leases: file.leases.filter((lease) => lease.endpointKey === endpointKey).length,
+        reservations: held2.endpoints[endpointKey] ?? 0,
+        foregroundStreams: foregroundStreamUsage()[endpointKey] ?? 0
+      };
+      const used = holders.leases + holders.reservations + holders.foregroundStreams;
+      if (used >= endpointLimit)
+        throw new Error(
+          `dispatch: admission denied: endpoint '${endpointLabel(endpointKey)}' capacity reached (${used}/${endpointLimit} slots): ${describeEndpointCapacityHolders(holders)}; ${endpointCapacityRemedy()}`
+        );
+    }
+  }
 }
 function acquireCapacityLease(input) {
   return withStateFileLockSync(capacityStateLockPath(), () => {
@@ -1188,10 +1113,12 @@ function acquireCapacityLease(input) {
       );
     const existing = file.leases.find((lease2) => lease2.assignmentId === input.assignmentId);
     if (existing) {
-      if (existing.nodeId !== input.nodeId) {
+      if (existing.nodeId !== input.nodeId || existing.endpointKey !== input.endpointKey) {
         const without = { ...file, leases: file.leases.filter((lease2) => lease2 !== existing) };
-        assertCapacity(without, input.nodeId, input.limits);
+        assertCapacity(without, input.nodeId, input.endpointKey, input.limits);
         existing.nodeId = input.nodeId;
+        if (input.endpointKey === void 0) delete existing.endpointKey;
+        else existing.endpointKey = input.endpointKey;
       }
       existing.heartbeatAt = new Date(nowMs).toISOString();
       existing.expiresAt = new Date(nowMs + (input.ttlMs ?? DEFAULT_CAPACITY_LEASE_TTL_MS)).toISOString();
@@ -1199,7 +1126,7 @@ function acquireCapacityLease(input) {
       return clone(existing);
     }
     input.onAcquiredUnderLock?.(file);
-    assertCapacity(file, input.nodeId, input.limits);
+    assertCapacity(file, input.nodeId, input.endpointKey, input.limits);
     const token = input.processBirthToken ?? processBirthToken(input.ownerPid ?? process.pid);
     if (!token) throw new Error("dispatch: cannot establish process birth token");
     const at = new Date(nowMs).toISOString();
@@ -1207,6 +1134,7 @@ function acquireCapacityLease(input) {
       leaseId: `lease-${nowMs.toString(36)}-${randomBytes(6).toString("hex")}`,
       assignmentId: input.assignmentId,
       nodeId: input.nodeId,
+      ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
       host: hostname(),
       ownerPid: input.ownerPid ?? process.pid,
       processBirthToken: token,
@@ -1278,8 +1206,23 @@ function capacityDrain(nowMs = Date.now()) {
 function capacityLeaseUsage(options) {
   const leases = listCapacityLeases(options);
   const nodes = {};
-  for (const lease of leases) nodes[lease.nodeId] = (nodes[lease.nodeId] ?? 0) + 1;
-  return { global: leases.length, nodes };
+  const foreground = foregroundStreamUsage();
+  const endpoints = { ...foreground };
+  const endpointHolders = Object.fromEntries(
+    Object.entries(foreground).map(([endpointKey, foregroundStreams]) => [
+      endpointKey,
+      { leases: 0, reservations: 0, foregroundStreams }
+    ])
+  );
+  for (const lease of leases) {
+    nodes[lease.nodeId] = (nodes[lease.nodeId] ?? 0) + 1;
+    if (lease.endpointKey !== void 0) {
+      endpoints[lease.endpointKey] = (endpoints[lease.endpointKey] ?? 0) + 1;
+      const holders = endpointHolders[lease.endpointKey] ?? { leases: 0, reservations: 0, foregroundStreams: 0 };
+      endpointHolders[lease.endpointKey] = { ...holders, leases: holders.leases + 1 };
+    }
+  }
+  return { global: leases.length, nodes, endpoints, endpointHolders };
 }
 function createNodeLeaseUsageReader(options) {
   const cacheMs = options.cacheMs ?? 200;
@@ -1487,7 +1430,7 @@ function renderDispatchReviewerTask(originalTask, builderRunId, cycle, intent) {
 
 // src/domains/dispatch/receipt-findings.ts
 init_esm_shims();
-import { createHash as createHash12 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 
 // src/domains/evidence/index.ts
 init_esm_shims();
@@ -1495,37 +1438,39 @@ init_esm_shims();
 // src/domains/evidence/build.ts
 init_esm_shims();
 import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
-import { join as join17 } from "node:path";
+import { join as join16 } from "node:path";
 
 // src/domains/dispatch/index.ts
 init_esm_shims();
 
 // src/domains/dispatch/extension.ts
 init_esm_shims();
-import { createHash as createHash9, randomBytes as randomBytes6 } from "node:crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync4, readFileSync as readFileSync12 } from "node:fs";
+import { createHash as createHash7, randomBytes as randomBytes5 } from "node:crypto";
+import { readdirSync as readdirSync4, readFileSync as readFileSync11 } from "node:fs";
 import { isAbsolute as isAbsolute2, relative, resolve as resolvePath, sep } from "node:path";
+import { performance as performance5 } from "node:perf_hooks";
 
 // src/engine/acp/adapter.ts
 init_esm_shims();
+import { performance as performance4 } from "node:perf_hooks";
 
 // src/engine/acp/event-mapper.ts
 init_esm_shims();
 import { performance as performance2 } from "node:perf_hooks";
-function isRecord3(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function textFromContent(value) {
   if (typeof value === "string") return value;
-  if (!isRecord3(value)) return "";
+  if (!isRecord2(value)) return "";
   if (value.type === "text" && typeof value.text === "string") return value.text;
-  if (isRecord3(value.content)) return textFromContent(value.content);
+  if (isRecord2(value.content)) return textFromContent(value.content);
   return "";
 }
 function toolContentText(value) {
   if (typeof value === "string") return value;
   if (Array.isArray(value)) return value.map(toolContentText).filter(Boolean).join("\n");
-  if (!isRecord3(value)) return "";
+  if (!isRecord2(value)) return "";
   const direct = textFromContent(value);
   if (direct.length > 0) return direct;
   return "";
@@ -1548,8 +1493,8 @@ var AcpEventMapper = class {
   /** Tool-call id to its `performance.now()` start mark; spans only, never an instant. */
   toolStarts = /* @__PURE__ */ new Map();
   mapUpdate(params) {
-    const record = isRecord3(params) ? params : {};
-    const update = isRecord3(record.update) ? record.update : {};
+    const record = isRecord2(params) ? params : {};
+    const update = isRecord2(record.update) ? record.update : {};
     const kind = typeof update.sessionUpdate === "string" ? update.sessionUpdate : "";
     if (kind === "agent_message_chunk" || kind === "user_message_chunk") {
       const text = textFromContent(update.content);
@@ -1716,7 +1661,7 @@ var MOVE_DESTINATION_PATH_KEYS = [
   "new_path",
   "target"
 ];
-function isRecord4(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringField(record, ...keys) {
@@ -1850,7 +1795,7 @@ function extractLocationPaths(locations, cwd) {
   const paths = [];
   const errors = [];
   for (const value of locations) {
-    if (!isRecord4(value)) {
+    if (!isRecord3(value)) {
       errors.push("locations contains a non-object entry");
       continue;
     }
@@ -1865,11 +1810,11 @@ function extractLocationPaths(locations, cwd) {
   return { paths, provided: true, errors };
 }
 function mutationTargets(toolCall, kind, cwd) {
-  const rawInput = isRecord4(toolCall?.rawInput) ? toolCall.rawInput : {};
+  const rawInput = isRecord3(toolCall?.rawInput) ? toolCall.rawInput : {};
   const raw = extractRawMutationPaths(rawInput, kind, cwd);
   const locations = extractLocationPaths(toolCall?.locations, cwd);
   const errors = [...raw.errors, ...locations.errors];
-  if (toolCall?.rawInput !== void 0 && !isRecord4(toolCall.rawInput)) {
+  if (toolCall?.rawInput !== void 0 && !isRecord3(toolCall.rawInput)) {
     errors.push("rawInput must be an object");
   }
   if (raw.provided && locations.provided && !samePathSet(raw.paths, locations.paths)) {
@@ -1939,11 +1884,11 @@ function mapMutationToolCall(toolCall, kind, displayTool, cwd, metadataError) {
   };
 }
 function mapPathBearingToolCall(toolCall, tool, displayTool, cwd, targetRequired) {
-  const rawInput = isRecord4(toolCall?.rawInput) ? toolCall.rawInput : {};
+  const rawInput = isRecord3(toolCall?.rawInput) ? toolCall.rawInput : {};
   const raw = extractPathFields(rawInput, SINGLE_MUTATION_PATH_KEYS, MULTI_MUTATION_PATH_KEYS, cwd, "rawInput");
   const locations = extractLocationPaths(toolCall?.locations, cwd);
   const errors = [...raw.errors, ...locations.errors];
-  if (toolCall?.rawInput !== void 0 && !isRecord4(toolCall.rawInput)) errors.push("rawInput must be an object");
+  if (toolCall?.rawInput !== void 0 && !isRecord3(toolCall.rawInput)) errors.push("rawInput must be an object");
   if (raw.provided && locations.provided && !samePathSet(raw.paths, locations.paths)) {
     errors.push("rawInput and locations contain conflicting path targets");
   }
@@ -1964,7 +1909,7 @@ function mapPathBearingToolCall(toolCall, tool, displayTool, cwd, targetRequired
 }
 function mapToolCall(toolCall, cwd) {
   const kind = typeof toolCall?.kind === "string" ? toolCall.kind.toLowerCase() : "";
-  const rawInput = isRecord4(toolCall?.rawInput) ? toolCall.rawInput : {};
+  const rawInput = isRecord3(toolCall?.rawInput) ? toolCall.rawInput : {};
   const rawTool = stringField(rawInput, "tool", "toolName", "tool_name", "name");
   const title = typeof toolCall?.title === "string" ? toolCall.title : void 0;
   const displayTool = rawTool ?? kind ?? title ?? "unknown";
@@ -2068,9 +2013,9 @@ var AcpToolMediator = class {
   async handle(params) {
     const startedAt = performance3.now();
     this.requested += 1;
-    const parsed = isRecord4(params) ? params : {};
+    const parsed = isRecord3(params) ? params : {};
     const options = Array.isArray(parsed.options) ? parsed.options : [];
-    const toolCall = isRecord4(parsed.toolCall) ? parsed.toolCall : void 0;
+    const toolCall = isRecord3(parsed.toolCall) ? parsed.toolCall : void 0;
     const mapped = mapToolCall(toolCall, this.input.cwd);
     let decision = "denied";
     let reason;
@@ -2173,6 +2118,7 @@ var AcpToolMediator = class {
 init_esm_shims();
 var ACP_USAGE_META_KEY = "clio-coder/usage";
 var ACP_SESSION_META_KEY = "clio-coder/session";
+var ACP_AGENT_META_KEY = "clio-coder/agent";
 var ACP_MAX_STRING_BYTES = 4096;
 var ACP_MAX_RAW_RECORD_BYTES = 32768;
 var ACP_MAX_CHUNK_BYTES = 16384;
@@ -2191,7 +2137,7 @@ var AsyncEventQueue = class {
     const value = this.values.shift();
     if (value !== void 0) return Promise.resolve({ done: false, value });
     if (this.done) return Promise.resolve({ done: true, value: void 0 });
-    return new Promise((resolve5) => this.waiters.push(resolve5));
+    return new Promise((resolve4) => this.waiters.push(resolve4));
   }
   push(value) {
     if (this.done) return;
@@ -2211,22 +2157,22 @@ var AsyncEventQueue = class {
     }
   }
 };
-function isRecord5(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sessionIdFrom(value) {
   if (typeof value === "string" && value.length > 0) return value;
-  if (!isRecord5(value)) return null;
+  if (!isRecord4(value)) return null;
   const sessionId = value.sessionId ?? value.id;
   return typeof sessionId === "string" && sessionId.length > 0 ? sessionId : null;
 }
 function supportsSessionClose(init) {
   const caps = init?.agentCapabilities;
-  if (!isRecord5(caps)) return false;
-  const meta = isRecord5(caps._meta) ? caps._meta[ACP_SESSION_META_KEY] : void 0;
-  if (isRecord5(meta) && meta.close === true) return true;
+  if (!isRecord4(caps)) return false;
+  const meta = isRecord4(caps._meta) ? caps._meta[ACP_SESSION_META_KEY] : void 0;
+  if (isRecord4(meta) && meta.close === true) return true;
   const sessionCaps = caps.sessionCapabilities;
-  return isRecord5(sessionCaps) && isRecord5(sessionCaps.close);
+  return isRecord4(sessionCaps) && isRecord4(sessionCaps.close);
 }
 function flattenPrompt(input) {
   const parts = [
@@ -2250,7 +2196,7 @@ function finite(value) {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
 }
 function mergeUsage(into, raw) {
-  if (!isRecord5(raw)) return;
+  if (!isRecord4(raw)) return;
   into.inputTokens += finite(raw.input) + finite(raw.inputTokens) + finite(raw.input_tokens);
   into.outputTokens += finite(raw.output) + finite(raw.outputTokens) + finite(raw.output_tokens);
   into.cacheReadTokens += finite(raw.cacheRead) + finite(raw.cacheReadTokens) + finite(raw.cache_read_tokens);
@@ -2276,7 +2222,14 @@ function errorEvents(messageText2) {
 function startAcpDelegationRun(input) {
   const connectTimeoutMs = input.agent.connectTimeoutMs ?? DEFAULT_DELEGATION_CONNECT_TIMEOUT_MS;
   const turnTimeoutMs = input.agent.turnTimeoutMs ?? DEFAULT_DELEGATION_TURN_TIMEOUT_MS;
-  const heartbeatAt = { current: Date.now() };
+  const now = input.now ?? Date.now;
+  const monotonicNow = input.monotonicNow ?? (() => performance4.now());
+  const heartbeatWallAnchor = now();
+  const heartbeatMonotonicAnchor = monotonicNow();
+  const heartbeatAt = {
+    current: heartbeatWallAnchor,
+    monotonic: heartbeatMonotonicAnchor
+  };
   const queue = new AsyncEventQueue();
   const usage = emptyUsage();
   const mapper = new AcpEventMapper();
@@ -2303,7 +2256,9 @@ function startAcpDelegationRun(input) {
     cancelTimer = null;
   };
   const emit = (event) => {
-    heartbeatAt.current = Date.now();
+    const stamp = monotonicNow();
+    heartbeatAt.monotonic = stamp;
+    heartbeatAt.current = heartbeatWallAnchor + (stamp - heartbeatMonotonicAnchor);
     queue.push(event);
   };
   const mediator = new AcpToolMediator({
@@ -2387,7 +2342,7 @@ function startAcpDelegationRun(input) {
         },
         turnTimeoutMs
       );
-      const metaUsage = isRecord5(promptResponse?._meta) ? promptResponse._meta[ACP_USAGE_META_KEY] : void 0;
+      const metaUsage = isRecord4(promptResponse?._meta) ? promptResponse._meta[ACP_USAGE_META_KEY] : void 0;
       if (metaUsage !== void 0) {
         mergeUsage(usage, metaUsage);
       } else {
@@ -2478,62 +2433,6 @@ function startAcpDelegationRun(input) {
 // src/domains/prompts/compiler.ts
 init_esm_shims();
 import { join as join3 } from "node:path";
-
-// src/domains/prompts/hash.ts
-init_esm_shims();
-import { createHash as createHash2 } from "node:crypto";
-function sha256(input) {
-  return createHash2("sha256").update(input, "utf8").digest("hex");
-}
-function canonicalJson2(value) {
-  return serialize(value);
-}
-function serialize(value) {
-  if (value === null) return "null";
-  if (typeof value === "number") {
-    if (!Number.isFinite(value)) {
-      throw new Error(`canonicalJson: non-finite number ${String(value)} is not representable`);
-    }
-    return JSON.stringify(value);
-  }
-  if (typeof value === "string" || typeof value === "boolean") {
-    return JSON.stringify(value);
-  }
-  if (typeof value === "bigint") {
-    throw new Error("canonicalJson: bigint is not representable");
-  }
-  if (typeof value === "symbol" || typeof value === "function") {
-    throw new Error(`canonicalJson: ${typeof value} is not representable`);
-  }
-  if (value === void 0) {
-    throw new Error("canonicalJson: undefined is not representable at root");
-  }
-  if (Array.isArray(value)) {
-    const parts = [];
-    for (let i = 0; i < value.length; i++) {
-      if (!(i in value) || value[i] === void 0) {
-        parts.push("null");
-        continue;
-      }
-      parts.push(serialize(value[i]));
-    }
-    return `[${parts.join(",")}]`;
-  }
-  if (typeof value === "object") {
-    const obj = value;
-    const keys = Object.keys(obj).sort();
-    const parts = [];
-    for (const key of keys) {
-      const child = obj[key];
-      if (child === void 0) continue;
-      parts.push(`${JSON.stringify(key)}:${serialize(child)}`);
-    }
-    return `{${parts.join(",")}}`;
-  }
-  throw new Error(`canonicalJson: unsupported value of type ${typeof value}`);
-}
-
-// src/domains/prompts/compiler.ts
 var FLEET_ROUTING_GUIDANCE = 'Fleet routing: pin the `agent` id from the Fleet section; agent:"auto" baselines from the task text and is a fallback, not a router.';
 var WORKER_CLAIM_GUIDANCE = 'Never claim a completion, a validation, or a file change that no tool call in this run supports. If you did not run it or write it here, say "not verified" and report what you did do.';
 function lookupFragment(table, id, role) {
@@ -2745,15 +2644,45 @@ function renderProjectBlock(contextFiles) {
 
 ${trimmedFiles}`;
 }
-function renderMemoryBlock(memorySection) {
+function renderMemoryBlock(memorySection, legacyDuplicateHeader = false) {
   const trimmed = memorySection?.trim() ?? "";
-  return trimmed.length === 0 ? "" : `# Memory
+  if (trimmed.length === 0) return "";
+  if (legacyDuplicateHeader) return `# Memory
+
+${trimmed}`;
+  return /^#\s+Memory\s*$/.test(trimmed.split("\n", 1)[0] ?? "") ? trimmed : `# Memory
 
 ${trimmed}`;
 }
 function estimatePromptTokens(text) {
   return ceilChars(text.trim().length);
 }
+var SESSION_PROMPT_SECTION_ORDER = [
+  "identity",
+  "operating-contract",
+  "delegation",
+  "skills",
+  "safety",
+  "tool-contract",
+  "fleet",
+  "retrieval-hints",
+  "project-context",
+  "memory",
+  "runtime"
+];
+var LEGACY_SESSION_PROMPT_SECTION_ORDER = [
+  "identity",
+  "operating-contract",
+  "delegation",
+  "skills",
+  "safety",
+  "runtime",
+  "tool-contract",
+  "fleet",
+  "retrieval-hints",
+  "memory",
+  "project-context"
+];
 function compile(table, inputs) {
   const identity = lookupFragment(table, inputs.identity, "identity");
   const operatingContract = lookupFragment(table, inputs.operatingContract, "operating contract");
@@ -2773,24 +2702,29 @@ function compile(table, inputs) {
   const docsRouting = selfAwareness && sessionHasContext(session) ? table.byId.get("identity.docs-routing") : void 0;
   if (selfAwareness) {
     const packageRoot = resolvePackageRoot();
-    const rendered = selfAwareness.body.replace("{CLIO_DOCS_PATH}", join3(packageRoot, "docs")).replace("{CLIO_SRC_PATH}", join3(packageRoot, "src")).replace("{CLIO_CODEWIKI_PATH}", join3(packageRoot, "dist", "assets", "codewiki.json"));
-    identityBody = [identity.body.trim(), rendered.trim(), ...docsRouting ? [docsRouting.body.trim()] : []].join(
+    const rendered2 = selfAwareness.body.replace("{CLIO_DOCS_PATH}", join3(packageRoot, "docs")).replace("{CLIO_SRC_PATH}", join3(packageRoot, "src")).replace("{CLIO_CODEWIKI_PATH}", join3(packageRoot, "dist", "assets", "codewiki.json"));
+    identityBody = [identity.body.trim(), rendered2.trim(), ...docsRouting ? [docsRouting.body.trim()] : []].join(
       "\n\n"
     );
   }
   const delegation = sessionCanDispatch(session) ? table.byId.get("operating.delegation") : void 0;
   const skills = sessionHasContext(session) ? table.byId.get("operating.skills") : void 0;
-  push("identity", identityBody);
-  push("operating-contract", operatingContract.body);
-  if (delegation) push("delegation", delegation.body);
-  if (skills) push("skills", skills.body);
-  push("safety", renderSafetySection(safety, autonomyLevel));
-  push("runtime", renderRuntimeBlock(session));
-  push("tool-contract", renderToolContractBlock(session));
-  push("fleet", renderFleetBlock(session));
-  push("retrieval-hints", renderRetrievalHintsBlock(session));
-  push("memory", renderMemoryBlock(session.memorySection));
-  push("project-context", renderProjectBlock(session.contextFiles));
+  const legacy = inputs.sectionOrder === "legacy-0.3.8";
+  const rendered = /* @__PURE__ */ new Map([
+    ["identity", identityBody],
+    ["operating-contract", operatingContract.body],
+    ["delegation", delegation?.body ?? ""],
+    ["skills", skills?.body ?? ""],
+    ["safety", renderSafetySection(safety, autonomyLevel)],
+    ["runtime", renderRuntimeBlock(session)],
+    ["tool-contract", renderToolContractBlock(session)],
+    ["fleet", renderFleetBlock(session)],
+    ["retrieval-hints", renderRetrievalHintsBlock(session)],
+    ["memory", renderMemoryBlock(session.memorySection, legacy)],
+    ["project-context", renderProjectBlock(session.contextFiles)]
+  ]);
+  const order = legacy ? LEGACY_SESSION_PROMPT_SECTION_ORDER : SESSION_PROMPT_SECTION_ORDER;
+  for (const id of order) push(id, rendered.get(id) ?? "");
   for (const fragment of inputs.additionalFragments ?? []) {
     push(fragment.id, fragment.body);
   }
@@ -2926,8 +2860,8 @@ function createAssignmentEventStream(options = {}) {
         return Promise.resolve({ value: pending.shift(), done: false });
       }
       if (finished || abandoned) return Promise.resolve({ value: void 0, done: true });
-      return new Promise((resolve5) => {
-        waiters.push(resolve5);
+      return new Promise((resolve4) => {
+        waiters.push(resolve4);
       });
     },
     return() {
@@ -3031,10 +2965,10 @@ var AssignmentRegistry = class {
     const id = asAssignmentId(rootRunId);
     const existing = this.#assignments.get(id);
     if (existing) return this.#snapshot(existing);
-    let resolve5;
+    let resolve4;
     let reject;
     const terminal = new Promise((resolvePromise, rejectPromise) => {
-      resolve5 = resolvePromise;
+      resolve4 = resolvePromise;
       reject = rejectPromise;
     });
     const assignment = {
@@ -3049,7 +2983,7 @@ var AssignmentRegistry = class {
       outcomeDetail: null,
       terminal,
       stream: createAssignmentEventStream(this.#onStreamError !== void 0 ? { onError: this.#onStreamError } : {}),
-      resolve: resolve5,
+      resolve: resolve4,
       reject
     };
     this.#assignments.set(id, assignment);
@@ -3289,10 +3223,10 @@ function createAdmissionQueue(options) {
       const effectiveDeadline = Math.min(request.deadlineAt, request.queuedAt + options.finiteCeilingMs);
       if (!Number.isFinite(effectiveDeadline))
         return Promise.reject(new Error("dispatch: queued request requires a finite deadline"));
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve4, reject) => {
         const bounded = { ...request, deadlineAt: effectiveDeadline };
         const timer = setTimeout(() => remove(request.requestId, "timed_out"), Math.max(0, effectiveDeadline - now()));
-        entries.set(request.requestId, { request: bounded, resolve: resolve5, reject, timer });
+        entries.set(request.requestId, { request: bounded, resolve: resolve4, reject, timer });
       });
     },
     cancel(requestId) {
@@ -3355,14 +3289,18 @@ init_esm_shims();
 import { randomBytes as randomBytes2 } from "node:crypto";
 var MAX_RESERVATION_RECORDS = 500;
 var DEFAULT_RESERVATION_TTL_MS = 15 * 6e4;
+function endpointCapacityDenial(input) {
+  const remedy = endpointCapacityRemedy(input.topology === "council" ? { rosterFloor: COUNCIL_MIN_MEMBERS } : void 0);
+  return `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' capacity exceeded (${input.used + input.requested}/${input.limit} slots): ${describeEndpointCapacityHolders(input)}; ${remedy}`;
+}
 function copyRecord(record) {
   return { ...record, members: record.members.map((member) => ({ ...member })) };
 }
 function validRecord(value) {
   if (typeof value !== "object" || value === null) return false;
   const record = value;
-  return typeof record.ownerId === "string" && typeof record.ownerPid === "number" && Number.isInteger(record.ownerPid) && record.ownerPid > 0 && (record.topology === "parallel" || record.topology === "detached" || record.topology === "sequential" || record.topology === "pipeline" || record.topology === "review" || record.topology === "compete") && (record.status === "active" || record.status === "released" || record.status === "rolled_back" || record.status === "expired") && typeof record.createdAt === "string" && typeof record.expiresAt === "string" && (record.settledAt === null || typeof record.settledAt === "string") && Array.isArray(record.members) && record.members.every(
-    (member) => typeof member.memberId === "string" && Number.isInteger(member.wave) && typeof member.nodeId === "string" && typeof member.costUpperBoundUsd === "number" && Number.isFinite(member.costUpperBoundUsd) && member.costUpperBoundUsd >= 0 && (member.status === "held" || member.status === "consumed" || member.status === "released") && (member.consumedAt === null || typeof member.consumedAt === "string") && (member.releasedAt === null || typeof member.releasedAt === "string")
+  return typeof record.ownerId === "string" && typeof record.ownerPid === "number" && Number.isInteger(record.ownerPid) && record.ownerPid > 0 && (record.topology === "parallel" || record.topology === "detached" || record.topology === "sequential" || record.topology === "pipeline" || record.topology === "review" || record.topology === "compete" || record.topology === "council") && (record.status === "active" || record.status === "released" || record.status === "rolled_back" || record.status === "expired") && typeof record.createdAt === "string" && typeof record.expiresAt === "string" && (record.settledAt === null || typeof record.settledAt === "string") && Array.isArray(record.members) && record.members.every(
+    (member) => typeof member.memberId === "string" && Number.isInteger(member.wave) && typeof member.nodeId === "string" && (member.endpointKey === void 0 || typeof member.endpointKey === "string") && typeof member.costUpperBoundUsd === "number" && Number.isFinite(member.costUpperBoundUsd) && member.costUpperBoundUsd >= 0 && (member.status === "held" || member.status === "consumed" || member.status === "released") && (member.consumedAt === null || typeof member.consumedAt === "string") && (member.releasedAt === null || typeof member.releasedAt === "string")
   );
 }
 function parseReservations(values) {
@@ -3399,9 +3337,13 @@ function reservationAllocation(tasks) {
     )
   );
   const nodeSlots = peakBy(tasks.map((task) => ({ wave: task.wave, key: task.nodeId })));
+  const endpointSlots = peakBy(
+    tasks.flatMap((task) => task.endpointKey === void 0 ? [] : [{ wave: task.wave, key: task.endpointKey }])
+  );
   return {
     globalSlots,
     nodeSlots,
+    endpointSlots,
     budgetUsd: tasks.reduce((sum, task) => sum + task.costUpperBoundUsd, 0)
   };
 }
@@ -3411,7 +3353,7 @@ function outstandingTasks(record) {
 function outstandingBudget(record) {
   return record.members.filter((member) => member.status === "held" || member.status === "consumed").reduce((sum, member) => sum + member.costUpperBoundUsd, 0);
 }
-function allocateReservation(tasks, existing, capacity) {
+function allocateReservation(tasks, existing, capacity, topology) {
   if (tasks.length === 0) return { ok: false, reason: "reservation requires at least one task" };
   const duplicate = tasks.find((task, index) => tasks.slice(0, index).some((entry) => entry.memberId === task.memberId));
   if (duplicate) return { ok: false, reason: `duplicate reservation member '${duplicate.memberId}'` };
@@ -3434,6 +3376,27 @@ function allocateReservation(tasks, existing, capacity) {
       return { ok: false, reason: `node '${nodeId}' capacity exceeded (${used + slots}/${node.limit})` };
     }
   }
+  for (const [endpointKey, slots] of Object.entries(requested.endpointSlots)) {
+    const endpoint = capacity.endpoints[endpointKey];
+    if (!endpoint || !Number.isFinite(endpoint.limit)) continue;
+    const heldSlots = held2.reduce((sum, allocation) => sum + (allocation.endpointSlots[endpointKey] ?? 0), 0);
+    const used = endpoint.active + heldSlots;
+    if (used + slots > endpoint.limit) {
+      return {
+        ok: false,
+        reason: endpointCapacityDenial({
+          endpointKey,
+          limit: endpoint.limit,
+          used,
+          requested: slots,
+          leases: endpoint.leases ?? endpoint.active - (endpoint.foregroundStreams ?? 0),
+          reservations: heldSlots,
+          foregroundStreams: endpoint.foregroundStreams ?? 0,
+          ...topology === void 0 ? {} : { topology }
+        })
+      };
+    }
+  }
   const existingBudget = activeRecords.reduce((sum, record) => sum + outstandingBudget(record), 0);
   const projected = capacity.budget.currentUsd + existingBudget + requested.budgetUsd;
   if (projected >= capacity.budget.ceilingUsd) {
@@ -3457,11 +3420,13 @@ function createDispatchReservation(input) {
         `dispatch: reservation denied: capacity is draining (requested by pid ${drain.requestedByPid} at ${drain.requestedAt})`
       );
     }
-    const planned = allocateReservation(input.tasks, records, input.capacity);
+    const planned = allocateReservation(input.tasks, records, input.capacity, input.topology);
     if (!planned.ok) {
       replaceReservations(state, records);
       writeCapacityStateUnsafe(state);
-      throw new Error(`dispatch: reservation denied: ${planned.reason}`);
+      throw new Error(
+        planned.reason.startsWith("dispatch:") ? planned.reason : `dispatch: reservation denied: ${planned.reason}`
+      );
     }
     const createdAt = new Date(nowMs).toISOString();
     const record = {
@@ -3484,6 +3449,7 @@ function transferDispatchReservationToLease(input) {
   return acquireCapacityLease({
     assignmentId: input.assignmentId,
     nodeId: input.nodeId,
+    ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
     limits: input.limits,
     nowMs,
     ...input.ttlMs !== void 0 ? { ttlMs: input.ttlMs } : {},
@@ -3511,10 +3477,37 @@ function rebindDispatchReservationMember(input) {
     if (member.status === "released") {
       throw new Error(`dispatch: reservation member '${input.memberId}' was already released`);
     }
-    if (member.nodeId === input.nodeId && member.costUpperBoundUsd === input.costUpperBoundUsd) {
+    if (member.nodeId === input.nodeId && member.endpointKey === input.endpointKey && member.costUpperBoundUsd === input.costUpperBoundUsd) {
       return copyRecord(record);
     }
     const others = records.filter((entry) => entry.status === "active" && entry.ownerId !== input.ownerId);
+    if (member.endpointKey !== input.endpointKey && input.endpointKey !== void 0) {
+      const endpointKey = input.endpointKey;
+      const endpoint = input.capacity.endpoints[endpointKey];
+      if (endpoint !== void 0 && Number.isFinite(endpoint.limit)) {
+        const siblingSlots = record.members.filter(
+          (entry) => entry !== member && entry.status !== "released" && entry.endpointKey === endpointKey
+        ).length;
+        const otherHeld = others.reduce(
+          (sum, entry) => sum + (reservationAllocation(outstandingTasks(entry)).endpointSlots[endpointKey] ?? 0),
+          0
+        );
+        const used = endpoint.active + otherHeld + siblingSlots;
+        if (used + 1 > endpoint.limit) {
+          throw new Error(
+            endpointCapacityDenial({
+              endpointKey,
+              limit: endpoint.limit,
+              used,
+              requested: 1,
+              leases: endpoint.leases ?? endpoint.active - (endpoint.foregroundStreams ?? 0),
+              reservations: otherHeld + siblingSlots,
+              foregroundStreams: endpoint.foregroundStreams ?? 0
+            })
+          );
+        }
+      }
+    }
     if (member.nodeId !== input.nodeId) {
       const node = input.capacity.nodes[input.nodeId];
       if (node !== void 0 && Number.isFinite(node.limit)) {
@@ -3542,6 +3535,8 @@ function rebindDispatchReservationMember(input) {
       );
     }
     member.nodeId = input.nodeId;
+    if (input.endpointKey === void 0) delete member.endpointKey;
+    else member.endpointKey = input.endpointKey;
     member.costUpperBoundUsd = Math.max(0, input.costUpperBoundUsd);
     writeStore2(records);
     return copyRecord(record);
@@ -3564,6 +3559,24 @@ function releaseDispatchReservationMember(ownerId, memberId, nowMs = Date.now())
     return copyRecord(record);
   });
 }
+function releaseDispatchReservation(ownerId, nowMs = Date.now()) {
+  return withStateFileLockSync(capacityStateLockPath(), () => {
+    const records = readStore2();
+    const record = records.find((entry) => entry.ownerId === ownerId);
+    if (!record) return null;
+    if (record.status !== "active") return copyRecord(record);
+    const settledAt = new Date(nowMs).toISOString();
+    for (const member of record.members) {
+      if (member.status === "released") continue;
+      member.status = "released";
+      member.releasedAt = settledAt;
+    }
+    record.status = "released";
+    record.settledAt = settledAt;
+    writeStore2(records);
+    return copyRecord(record);
+  });
+}
 function rollbackDispatchReservation(ownerId, nowMs = Date.now()) {
   return withStateFileLockSync(capacityStateLockPath(), () => {
     const records = readStore2();
@@ -3668,6 +3681,20 @@ var PUMP_MIN_MS = 10;
 var PUMP_MAX_MS = 500;
 function describeAdmissionFailure(input) {
   if (input.state === "canceled") return "dispatch: admission canceled before a capacity slot opened";
+  if (input.endpointKey !== void 0) {
+    const endpointLimit = input.limits.endpoints[input.endpointKey];
+    const endpointActive = input.usage.endpoints[input.endpointKey] ?? 0;
+    if (endpointLimit !== void 0 && endpointActive >= endpointLimit) {
+      const holders = input.usage.endpointHolders?.[input.endpointKey];
+      const occupancy = holders === void 0 ? "the supplied capacity snapshot does not attribute the occupied slots" : describeEndpointCapacityHolders(holders);
+      const queued2 = input.queueDepth > 0 ? `, ${input.queueDepth} more queued` : "";
+      return [
+        `dispatch: admission timed out after ${Math.round(input.waitedMs)}ms waiting for an endpoint slot`,
+        ` on '${endpointLabel(input.endpointKey)}' (${endpointActive}/${endpointLimit} slots${queued2}): ${occupancy}.`,
+        " Wait for the running request to settle or dispatch this work again."
+      ].join("");
+    }
+  }
   const nodeLimit = input.limits.nodes[input.nodeId];
   const nodeActive = input.usage.nodes[input.nodeId] ?? 0;
   const where = nodeLimit === void 0 ? `${input.usage.global}/${input.limits.global} worker slots in use` : `${nodeActive}/${nodeLimit} worker slots in use on '${input.nodeId}', ${input.usage.global}/${input.limits.global} globally`;
@@ -3759,11 +3786,13 @@ function createCapacityAdmissionController(options) {
             memberId: input.reservation.memberId,
             assignmentId: input.assignmentId,
             nodeId: input.nodeId,
+            ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
             limits: options.limits(),
             nowMs: now()
           }) : acquireCapacityLease({
             assignmentId: input.assignmentId,
             nodeId: input.nodeId,
+            ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
             limits: options.limits(),
             nowMs: now()
           })
@@ -3771,17 +3800,18 @@ function createCapacityAdmissionController(options) {
         pumpNow();
         const outcome = await outcomePromise;
         if (outcome.state !== "admitted") {
-          throw new Error(
-            describeAdmissionFailure({
-              state: outcome.state,
-              nodeId: input.nodeId,
-              waitedMs: now() - queuedAt,
-              overdueAtQueueMs: queuedAt - input.deadlineAt,
-              queueDepth: queue.size(),
-              limits: options.limits(),
-              usage: options.usage?.() ?? capacityLeaseUsage({ nowMs: now() })
-            })
-          );
+          const detail = describeAdmissionFailure({
+            state: outcome.state,
+            nodeId: input.nodeId,
+            ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
+            waitedMs: now() - queuedAt,
+            overdueAtQueueMs: queuedAt - input.deadlineAt,
+            queueDepth: queue.size(),
+            limits: options.limits(),
+            usage: options.usage?.() ?? capacityLeaseUsage({ nowMs: now() })
+          });
+          if (outcome.state === "canceled") throw new AdmissionCanceledError(detail);
+          throw new Error(detail);
         }
         const lease = acquired.get(input.assignmentId);
         if (!lease) throw new Error("dispatch: admitted request has no capacity lease");
@@ -4344,7 +4374,7 @@ function assessCapabilityMismatch(input) {
 
 // src/domains/dispatch/checkout-writer-lease.ts
 init_esm_shims();
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 import { existsSync as existsSync5, mkdirSync, readFileSync as readFileSync5, realpathSync, unlinkSync } from "node:fs";
 import { dirname, join as join6 } from "node:path";
 var held = /* @__PURE__ */ new Map();
@@ -4354,7 +4384,7 @@ function canonicalCheckout(checkout) {
 }
 function checkoutWriterLeasePath(checkout) {
   const canonical = canonicalCheckout(checkout);
-  const key = createHash3("sha256").update(canonical, "utf8").digest("hex");
+  const key = createHash2("sha256").update(canonical, "utf8").digest("hex");
   return join6(clioStateDir(), "checkout-writer-leases", `${key}.json`);
 }
 function validRecord3(value) {
@@ -4554,8 +4584,11 @@ function isInfrastructureFailure(failureClass) {
 // src/domains/dispatch/heartbeat.ts
 init_esm_shims();
 var DEFAULT_HEARTBEAT_SPEC = { windowMs: 5e3, graceMs: 1e4 };
-function classifyHeartbeat(heartbeatAt, now, spec) {
-  const age = now - heartbeatAt;
+function heartbeatMonotonicAt(heartbeat) {
+  return heartbeat.monotonic ?? heartbeat.current;
+}
+function classifyHeartbeat(heartbeatMonotonicAt2, monotonicNow, spec) {
+  const age = monotonicNow - heartbeatMonotonicAt2;
   if (age <= spec.windowMs) return "alive";
   if (age <= spec.windowMs + spec.graceMs) return "stale";
   return "dead";
@@ -4564,14 +4597,14 @@ function classifyHeartbeat(heartbeatAt, now, spec) {
 // src/domains/dispatch/host-verification.ts
 init_esm_shims();
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash as createHash5, randomUUID } from "node:crypto";
+import { createHash as createHash4, randomUUID } from "node:crypto";
 import { existsSync as existsSync6, mkdirSync as mkdirSync3, readFileSync as readFileSync6, renameSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join8, resolve as resolve3 } from "node:path";
 
 // src/domains/dispatch/code-step.ts
 init_esm_shims();
 import { execFileSync, spawn as spawn2 } from "node:child_process";
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { mkdirSync as mkdirSync2, writeFileSync } from "node:fs";
 import { isAbsolute, join as join7, resolve as resolve2 } from "node:path";
 var CODE_STEP_CAPTURE_MAX_BYTES = 1048576;
@@ -4591,10 +4624,10 @@ function canonicalCodeReport(report) {
   });
 }
 function codeReportDigest(report) {
-  return createHash4("sha256").update(canonicalCodeReport(report), "utf8").digest("hex");
+  return createHash3("sha256").update(canonicalCodeReport(report), "utf8").digest("hex");
 }
 function sha2562(value) {
-  return createHash4("sha256").update(value, "utf8").digest("hex");
+  return createHash3("sha256").update(value, "utf8").digest("hex");
 }
 function tailUtf8(value, limit, marker) {
   if (value.length <= limit) return { text: value.toString("utf8"), truncated: false };
@@ -4644,7 +4677,7 @@ function workspaceHasChanges(root) {
   return status.trim().length > 0;
 }
 function newCodeRunId() {
-  return `code-${createHash4("sha256").update(`${process.pid}:${Date.now()}:${Math.random()}`).digest("hex").slice(0, 12)}`;
+  return `code-${createHash3("sha256").update(`${process.pid}:${Date.now()}:${Math.random()}`).digest("hex").slice(0, 12)}`;
 }
 async function spawnCommand(input, cwd, argv) {
   const command = input.command;
@@ -4808,7 +4841,7 @@ ${spawned.spawnError}
 var OUTPUT_TAIL_BYTES = 2048;
 var MEMO_VERSION = 1;
 function sha2563(value) {
-  return createHash5("sha256").update(value, "utf8").digest("hex");
+  return createHash4("sha256").update(value, "utf8").digest("hex");
 }
 function outputTail(value) {
   const bytes = Buffer.from(value, "utf8");
@@ -5577,7 +5610,7 @@ function selectApprovedRecoveryCandidates(input) {
 // src/domains/dispatch/reproducibility.ts
 init_esm_shims();
 import { spawnSync } from "node:child_process";
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 function collectReproducibilityMetadata(cwd, safety) {
   const branch = git(cwd, ["rev-parse", "--abbrev-ref", "HEAD"]);
   const commit = git(cwd, ["rev-parse", "HEAD"]);
@@ -5614,673 +5647,22 @@ function git(cwd, args) {
   return trimmed.length > 0 ? trimmed : null;
 }
 function sha2564(input) {
-  return createHash6("sha256").update(input, "utf8").digest("hex");
+  return createHash5("sha256").update(input, "utf8").digest("hex");
 }
 
 // src/domains/dispatch/route-observer.ts
 init_esm_shims();
-import { appendFileSync, existsSync as existsSync10, mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync10, renameSync as renameSync4, statSync } from "node:fs";
-import { join as join12 } from "node:path";
-
-// src/domains/dispatch/gate-decisions.ts
-init_esm_shims();
-import { createHash as createHash7, randomBytes as randomBytes4 } from "node:crypto";
-import { closeSync, existsSync as existsSync8, fsyncSync, mkdirSync as mkdirSync4, openSync, readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync } from "node:fs";
-import { dirname as dirname3, join as join10, resolve as resolve4 } from "node:path";
-function parseReviewGateResult(output) {
-  const result = parseVerifierResult(output);
-  return result === null ? { ok: false, reason: "reviewer did not return a valid verifier report" } : { ok: true, result };
-}
-function decideReviewGate(input) {
-  const base = {
-    group: input.group,
-    topology: "review",
-    cycle: input.cycle,
-    subjects: input.subjects,
-    decider: input.decider,
-    correlation: input.correlation
-  };
-  const parsed = parseReviewGateResult(input.output);
-  if (!parsed.ok) {
-    return {
-      draft: { ...base, outcome: "exhausted", detail: parsed.reason },
-      verdict: null,
-      findings: null,
-      needsDecision: `review gate produced no structured verdict in cycle ${input.cycle}: ${parsed.reason}`
-    };
-  }
-  if (parsed.result.verdict === "pass" || input.terminalCycle) {
-    return {
-      draft: { ...base, outcome: parsed.result.verdict },
-      verdict: parsed.result.verdict,
-      findings: null,
-      needsDecision: null
-    };
-  }
-  const failed = parsed.result.checks.filter((check) => !check.passed);
-  return {
-    draft: { ...base, outcome: "revise", detail: `reviewer reported ${failed.length} failed check(s)` },
-    verdict: null,
-    findings: JSON.stringify({ verdict: "fail", checks: failed }),
-    needsDecision: null
-  };
-}
-function parseGateChecks(value) {
-  if (!Array.isArray(value) || value.length === 0) return null;
-  const checks = [];
-  for (const entry of value) {
-    if (!isRecord6(entry)) return null;
-    const keys = Object.keys(entry);
-    if (keys.some((key) => key !== "name" && key !== "passed" && key !== "evidence") || typeof entry.name !== "string" || entry.name.trim().length === 0 || typeof entry.passed !== "boolean" || typeof entry.evidence !== "string" || entry.evidence.trim().length === 0) {
-      return null;
-    }
-    checks.push({ name: entry.name, passed: entry.passed, evidence: entry.evidence });
-  }
-  return checks;
-}
-function parseCompeteGateResult(output, candidateCount) {
-  const parsed = parseJsonObjectPayload(output);
-  if (!parsed.ok) {
-    return {
-      ok: false,
-      reason: parsed.reason === "not-object" ? "judge result must be a JSON object" : "judge result must be valid JSON"
-    };
-  }
-  const value = parsed.value;
-  if (Object.keys(value).some((key) => key !== "winner" && key !== "checks")) {
-    return { ok: false, reason: "judge result has unknown fields" };
-  }
-  const winner = value.winner;
-  if (typeof winner !== "number" || !Number.isSafeInteger(winner) || winner < 1 || winner > candidateCount) {
-    return { ok: false, reason: `judge winner must be an integer 1..${candidateCount}` };
-  }
-  const checks = parseGateChecks(value.checks);
-  if (checks === null) return { ok: false, reason: "judge result must carry typed checks with evidence" };
-  return { ok: true, result: { winner, checks } };
-}
-function decisionsDirectory(stateDir = clioStateDir()) {
-  return join10(stateDir, "gate-decisions");
-}
-function pendingDecisionsDirectory(stateDir = clioStateDir()) {
-  return join10(decisionsDirectory(stateDir), "pending");
-}
-function isRecord6(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isSubjectRef(value) {
-  if (!isRecord6(value) || typeof value.runId !== "string" || value.runId.trim().length === 0) return false;
-  return typeof value.digest === "string" && /^[0-9a-f]{64}$/.test(value.digest);
-}
-function isSafeDecisionId(value) {
-  return typeof value === "string" && value.length > 0 && value.length <= 256 && /^[A-Za-z0-9._-]+$/.test(value);
-}
-function isCorrelation(value) {
-  if (!isRecord6(value)) return false;
-  const fields = ["agent", "target", "modelFamily", "runtime", "node", "independent"];
-  if (Object.keys(value).some((key) => !fields.includes(key))) return false;
-  if (!fields.every((field) => typeof value[field] === "boolean")) return false;
-  return value.independent === (!value.agent && !value.modelFamily);
-}
-function semanticError(value) {
-  if (!isRecord6(value)) return "gate decision is not an object";
-  if (value.version !== 2) return "unsupported gate decision version";
-  if (!isSafeDecisionId(value.id)) return "gate decision id invalid";
-  if (typeof value.group !== "string" || value.group.length === 0) return "gate decision group invalid";
-  if (value.topology !== "review" && value.topology !== "compete") return "gate decision topology invalid";
-  if (typeof value.cycle !== "number" || !Number.isInteger(value.cycle) || value.cycle < 1) {
-    return "gate decision cycle invalid";
-  }
-  const reviewOutcome = value.outcome === "pass" || value.outcome === "fail" || value.outcome === "revise" || value.outcome === "exhausted";
-  const competeOutcome = value.outcome === "winner" || value.outcome === "no-winner" || value.outcome === "operator-confirmed" || value.outcome === "full-auto-applied";
-  if (value.topology === "review" && !reviewOutcome || value.topology === "compete" && !competeOutcome) {
-    return "gate decision outcome is incompatible with topology";
-  }
-  if (!Array.isArray(value.subjects) || value.subjects.length === 0 || !value.subjects.every(isSubjectRef)) {
-    return "gate decision subjects invalid";
-  }
-  if (value.decider !== void 0 && !isSubjectRef(value.decider)) return "gate decision decider invalid";
-  if (value.decider === void 0) {
-    if (value.correlation !== void 0) return "gate decision correlation requires a decider";
-  } else if (!isCorrelation(value.correlation)) {
-    return "gate decision correlation invalid";
-  }
-  if (typeof value.createdAt !== "string" || !Number.isFinite(Date.parse(value.createdAt))) {
-    return "gate decision timestamp invalid";
-  }
-  const needsWinner = value.outcome === "winner" || value.outcome === "operator-confirmed" || value.outcome === "full-auto-applied";
-  if (needsWinner) {
-    if (!isRecord6(value.winner) || typeof value.winner.index !== "number" || !Number.isInteger(value.winner.index) || value.winner.index < 1 || !isSubjectRef(value.winner.subject) || typeof value.winner.branch !== "string" || value.winner.branch !== `clio/compete/${value.group}/${value.winner.index}`) {
-      return "gate decision winner invalid";
-    }
-    const winnerSubject = value.winner.subject;
-    if (!value.subjects.some((subject) => subject.runId === winnerSubject.runId)) {
-      return "gate decision winner is not a subject";
-    }
-  } else if (value.winner !== void 0) {
-    return "gate decision winner is not valid for this outcome";
-  }
-  const needsConfirmation = value.outcome === "operator-confirmed" || value.outcome === "full-auto-applied";
-  if (needsConfirmation) {
-    if (!isRecord6(value.confirmation) || typeof value.confirmation.id !== "string" || value.confirmation.id.length === 0 || typeof value.confirmation.digest !== "string" || !/^[0-9a-f]{64}$/.test(value.confirmation.digest)) {
-      return "gate decision confirmation invalid";
-    }
-  } else if (value.confirmation !== void 0) {
-    return "gate decision confirmation is not valid for this outcome";
-  }
-  if (value.detail !== void 0 && typeof value.detail !== "string") return "gate decision detail invalid";
-  if (!isRecord6(value.integrity) || value.integrity.algorithm !== "sha256" || typeof value.integrity.digest !== "string") {
-    return "gate decision integrity invalid";
-  }
-  return null;
-}
-function safeGroup(group) {
-  const safe = group.replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 128);
-  return safe.length > 0 ? safe : "gate";
-}
-function newDecisionId(group) {
-  return `${safeGroup(group)}-${Date.now().toString(36)}-${randomBytes4(6).toString("hex")}`;
-}
-function decisionArtifactPath(id, stateDir = clioStateDir()) {
-  return join10(decisionsDirectory(stateDir), `${id}.json`);
-}
-function pendingDecisionPath(id, stateDir = clioStateDir()) {
-  return join10(pendingDecisionsDirectory(stateDir), `${id}.json`);
-}
-function decisionPayload(decision) {
-  return {
-    contract: "clio.gateDecision.integrity",
-    version: decision.version,
-    id: decision.id,
-    group: decision.group,
-    topology: decision.topology,
-    cycle: decision.cycle,
-    outcome: decision.outcome,
-    subjects: decision.subjects.map((subject) => ({ runId: subject.runId, digest: subject.digest })),
-    ...decision.decider !== void 0 ? { decider: { runId: decision.decider.runId, digest: decision.decider.digest } } : {},
-    ...decision.correlation !== void 0 ? { correlation: { ...decision.correlation } } : {},
-    ...decision.winner !== void 0 ? {
-      winner: {
-        index: decision.winner.index,
-        subject: {
-          runId: decision.winner.subject.runId,
-          digest: decision.winner.subject.digest
-        },
-        branch: decision.winner.branch
-      }
-    } : {},
-    ...decision.confirmation !== void 0 ? { confirmation: { id: decision.confirmation.id, digest: decision.confirmation.digest } } : {},
-    ...decision.detail !== void 0 ? { detail: decision.detail } : {},
-    createdAt: decision.createdAt
-  };
-}
-function decisionDigest(decision) {
-  return createHash7("sha256").update(JSON.stringify(decisionPayload(decision)), "utf8").digest("hex");
-}
-function artifactWithoutIntegrity(artifact) {
-  const result = {
-    version: artifact.version,
-    id: artifact.id,
-    group: artifact.group,
-    topology: artifact.topology,
-    cycle: artifact.cycle,
-    outcome: artifact.outcome,
-    subjects: artifact.subjects.map((subject) => ({ ...subject })),
-    createdAt: artifact.createdAt
-  };
-  if (artifact.decider !== void 0) result.decider = { ...artifact.decider };
-  if (artifact.correlation !== void 0) result.correlation = { ...artifact.correlation };
-  if (artifact.winner !== void 0) {
-    result.winner = {
-      index: artifact.winner.index,
-      subject: { ...artifact.winner.subject },
-      branch: artifact.winner.branch
-    };
-  }
-  if (artifact.confirmation !== void 0) result.confirmation = { ...artifact.confirmation };
-  if (artifact.detail !== void 0) result.detail = artifact.detail;
-  return result;
-}
-function verifyGateDecisionArtifact(artifact) {
-  const invalid = semanticError(artifact);
-  if (invalid !== null) return { ok: false, reason: invalid };
-  if (!/^[0-9a-f]{64}$/.test(artifact.integrity.digest)) return { ok: false, reason: "gate decision integrity invalid" };
-  return decisionDigest(artifactWithoutIntegrity(artifact)) === artifact.integrity.digest ? { ok: true } : { ok: false, reason: "gate decision integrity mismatch" };
-}
-function buildGateDecisionArtifact(draft, id = newDecisionId(draft.group), createdAt = draft.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()) {
-  if (draft.group.trim().length === 0) throw new Error("gate decision group is required");
-  if (!Number.isInteger(draft.cycle) || draft.cycle < 1)
-    throw new Error("gate decision cycle must be a positive integer");
-  if (draft.subjects.length === 0) throw new Error("gate decision requires at least one subject receipt");
-  const withoutIntegrity = {
-    version: 2,
-    id,
-    group: draft.group,
-    topology: draft.topology,
-    cycle: draft.cycle,
-    outcome: draft.outcome,
-    subjects: draft.subjects.map((subject) => ({ ...subject })),
-    createdAt
-  };
-  if (draft.decider !== void 0) withoutIntegrity.decider = { ...draft.decider };
-  if (draft.correlation !== void 0) withoutIntegrity.correlation = { ...draft.correlation };
-  if (draft.winner !== void 0) {
-    withoutIntegrity.winner = {
-      index: draft.winner.index,
-      subject: { ...draft.winner.subject },
-      branch: draft.winner.branch
-    };
-  }
-  if (draft.confirmation !== void 0) withoutIntegrity.confirmation = { ...draft.confirmation };
-  if (draft.detail !== void 0) withoutIntegrity.detail = draft.detail;
-  const artifact = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: decisionDigest(withoutIntegrity) }
-  };
-  const verification = verifyGateDecisionArtifact(artifact);
-  if (!verification.ok) throw new Error(verification.reason);
-  return artifact;
-}
-function readVerifiedArtifact(path2) {
-  let value;
-  try {
-    value = JSON.parse(readFileSync8(path2, "utf8"));
-  } catch (error) {
-    throw new Error(
-      `gate decision artifact is unreadable at ${path2}: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-  const artifact = value;
-  const verification = verifyGateDecisionArtifact(artifact);
-  if (!verification.ok) throw new Error(`gate decision artifact is invalid at ${path2}: ${verification.reason}`);
-  return artifact;
-}
-function persistGateDecisionArtifact(artifact, stateDir, allowIdenticalExisting) {
-  const verification = verifyGateDecisionArtifact(artifact);
-  if (!verification.ok) throw new Error(verification.reason);
-  const directory = decisionsDirectory(stateDir);
-  mkdirSync4(directory, { recursive: true });
-  const path2 = decisionArtifactPath(artifact.id, stateDir);
-  if (existsSync8(path2)) {
-    const existing = readVerifiedArtifact(path2);
-    if (allowIdenticalExisting && existing.id === artifact.id && existing.integrity.digest === artifact.integrity.digest) {
-      return { artifact: existing, path: path2 };
-    }
-    throw new Error(`gate decision artifact collision: ${artifact.id}`);
-  }
-  atomicWrite(path2, JSON.stringify(artifact, null, 2));
-  return { artifact, path: path2 };
-}
-function cloneGateDecisionArtifact(artifact) {
-  return {
-    ...artifactWithoutIntegrity(artifact),
-    integrity: { ...artifact.integrity }
-  };
-}
-function pendingRecordPayload(record) {
-  if (record.kind === "output") {
-    return {
-      contract: "clio.gateDecision.pending",
-      version: record.version,
-      kind: record.kind,
-      id: record.id,
-      group: record.group,
-      topology: record.topology,
-      cycle: record.cycle,
-      subjects: record.subjects.map((subject) => ({ runId: subject.runId, digest: subject.digest })),
-      deciderRunId: record.deciderRunId,
-      finalOutput: record.finalOutput,
-      ...record.terminalCycle !== void 0 ? { terminalCycle: record.terminalCycle } : {},
-      ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-      createdAt: record.createdAt
-    };
-  }
-  const decisionWithoutIntegrity = artifactWithoutIntegrity(record.decision);
-  return {
-    contract: "clio.gateDecision.pending",
-    version: record.version,
-    kind: record.kind,
-    id: record.id,
-    decision: {
-      ...decisionPayload(decisionWithoutIntegrity),
-      integrity: { ...record.decision.integrity }
-    },
-    ...record.finalOutput !== void 0 ? { finalOutput: record.finalOutput } : {},
-    ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-    createdAt: record.createdAt
-  };
-}
-function pendingRecordDigest(record) {
-  return createHash7("sha256").update(JSON.stringify(pendingRecordPayload(record)), "utf8").digest("hex");
-}
-function pendingRecordWithoutIntegrity(record) {
-  if (record.kind === "output") {
-    return {
-      version: record.version,
-      kind: record.kind,
-      id: record.id,
-      group: record.group,
-      topology: record.topology,
-      cycle: record.cycle,
-      subjects: record.subjects.map((subject) => ({ ...subject })),
-      deciderRunId: record.deciderRunId,
-      finalOutput: record.finalOutput,
-      ...record.terminalCycle !== void 0 ? { terminalCycle: record.terminalCycle } : {},
-      ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-      createdAt: record.createdAt
-    };
-  }
-  return {
-    version: record.version,
-    kind: record.kind,
-    id: record.id,
-    decision: cloneGateDecisionArtifact(record.decision),
-    ...record.finalOutput !== void 0 ? { finalOutput: record.finalOutput } : {},
-    ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-    createdAt: record.createdAt
-  };
-}
-function pendingSemanticError(value) {
-  if (!isRecord6(value)) return "pending gate decision is not an object";
-  if (value.version !== 1) return "unsupported pending gate decision version";
-  if (!isSafeDecisionId(value.id)) return "pending gate decision id invalid";
-  if (typeof value.createdAt !== "string" || !Number.isFinite(Date.parse(value.createdAt))) {
-    return "pending gate decision timestamp invalid";
-  }
-  if (!isRecord6(value.integrity) || value.integrity.algorithm !== "sha256" || typeof value.integrity.digest !== "string" || !/^[0-9a-f]{64}$/.test(value.integrity.digest)) {
-    return "pending gate decision integrity invalid";
-  }
-  if (value.kind === "output") {
-    if (typeof value.group !== "string" || value.group.trim().length === 0) {
-      return "pending gate output group invalid";
-    }
-    if (value.topology !== "review" && value.topology !== "compete") {
-      return "pending gate output topology invalid";
-    }
-    if (typeof value.cycle !== "number" || !Number.isInteger(value.cycle) || value.cycle < 1) {
-      return "pending gate output cycle invalid";
-    }
-    if (!Array.isArray(value.subjects) || value.subjects.length === 0 || !value.subjects.every(isSubjectRef)) {
-      return "pending gate output subjects invalid";
-    }
-    if (typeof value.deciderRunId !== "string" || value.deciderRunId.trim().length === 0) {
-      return "pending gate output decider run id invalid";
-    }
-    if (typeof value.finalOutput !== "string") return "pending gate output text invalid";
-    if (value.terminalCycle !== void 0 && typeof value.terminalCycle !== "boolean") {
-      return "pending gate output terminal-cycle marker invalid";
-    }
-    if (value.resourceRoot !== void 0 && (typeof value.resourceRoot !== "string" || value.resourceRoot.length === 0)) {
-      return "pending gate output resource root invalid";
-    }
-    return null;
-  }
-  if (value.kind !== "decision") return "pending gate decision kind invalid";
-  if (!isRecord6(value.decision)) return "pending gate decision artifact invalid";
-  const verification = verifyGateDecisionArtifact(value.decision);
-  if (!verification.ok) return `pending gate decision artifact invalid: ${verification.reason}`;
-  if (value.decision.id !== value.id) return "pending gate decision artifact id mismatch";
-  if (value.decision.createdAt !== value.createdAt) return "pending gate decision artifact timestamp mismatch";
-  if (value.finalOutput !== void 0 && typeof value.finalOutput !== "string") {
-    return "pending gate decision output invalid";
-  }
-  if (value.resourceRoot !== void 0 && (typeof value.resourceRoot !== "string" || value.resourceRoot.length === 0)) {
-    return "pending gate decision resource root invalid";
-  }
-  return null;
-}
-function verifyPendingGateDecisionRecord(record) {
-  const invalid = pendingSemanticError(record);
-  if (invalid !== null) return { ok: false, reason: invalid };
-  return pendingRecordDigest(pendingRecordWithoutIntegrity(record)) === record.integrity.digest ? { ok: true } : { ok: false, reason: "pending gate decision integrity mismatch" };
-}
-function clonePendingGateDecisionRecord(record) {
-  const without = pendingRecordWithoutIntegrity(record);
-  return {
-    ...without,
-    integrity: { ...record.integrity }
-  };
-}
-function parsePendingGateDecisionRecord(value) {
-  const invalid = pendingSemanticError(value);
-  if (invalid !== null) throw new Error(invalid);
-  const record = clonePendingGateDecisionRecord(value);
-  const verification = verifyPendingGateDecisionRecord(record);
-  if (!verification.ok) throw new Error(verification.reason);
-  return record;
-}
-function assertPendingHandlePath(handle) {
-  const expected = pendingDecisionPath(handle.record.id, handle.stateDir);
-  if (resolve4(handle.path) !== resolve4(expected)) {
-    throw new Error(`pending gate decision path does not match id ${handle.record.id}`);
-  }
-}
-function pendingHandle(record, stateDir) {
-  return {
-    record: clonePendingGateDecisionRecord(record),
-    path: pendingDecisionPath(record.id, stateDir),
-    stateDir
-  };
-}
-function persistPendingGateDecision(record, stateDir, allowReplace) {
-  const verification = verifyPendingGateDecisionRecord(record);
-  if (!verification.ok) throw new Error(verification.reason);
-  const path2 = pendingDecisionPath(record.id, stateDir);
-  mkdirSync4(dirname3(path2), { recursive: true });
-  if (!allowReplace && existsSync8(path2)) throw new Error(`pending gate decision collision: ${record.id}`);
-  atomicWrite(path2, JSON.stringify(record, null, 2));
-  return pendingHandle(record, stateDir);
-}
-function loadPendingGateDecision(handle) {
-  assertPendingHandlePath(handle);
-  if (!existsSync8(handle.path)) return null;
-  const record = parsePendingGateDecisionRecord(JSON.parse(readFileSync8(handle.path, "utf8")));
-  if (record.id !== handle.record.id) throw new Error("pending gate decision changed identity on disk");
-  return pendingHandle(record, handle.stateDir);
-}
-function fsyncDirectoryBestEffort(path2) {
-  let fd = null;
-  try {
-    fd = openSync(path2, "r");
-    fsyncSync(fd);
-  } catch {
-  } finally {
-    if (fd !== null) closeSync(fd);
-  }
-}
-function clearPendingGateDecision(handle) {
-  assertPendingHandlePath(handle);
-  rmSync(handle.path, { force: true });
-  fsyncDirectoryBestEffort(dirname3(handle.path));
-}
-function sameSubjectRefs(left, right) {
-  return left.length === right.length && left.every((subject, index) => {
-    const other = right[index];
-    return other !== void 0 && subject.runId === other.runId && subject.digest === other.digest;
-  });
-}
-function stagePendingGateOutput(draft, stateDir = clioStateDir()) {
-  const id = newDecisionId(draft.group);
-  const withoutIntegrity = {
-    version: 1,
-    kind: "output",
-    id,
-    group: draft.group,
-    topology: draft.topology,
-    cycle: draft.cycle,
-    subjects: draft.subjects.map((subject) => ({ ...subject })),
-    deciderRunId: draft.deciderRunId,
-    finalOutput: draft.finalOutput,
-    ...draft.terminalCycle !== void 0 ? { terminalCycle: draft.terminalCycle } : {},
-    ...draft.resourceRoot !== void 0 ? { resourceRoot: draft.resourceRoot } : {},
-    createdAt: draft.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
-  };
-  const record = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: pendingRecordDigest(withoutIntegrity) }
-  };
-  if (existsSync8(decisionArtifactPath(id, stateDir))) throw new Error(`gate decision artifact collision: ${id}`);
-  return persistPendingGateDecision(record, stateDir, false);
-}
-function stagePendingGateDecision(draft, options = {}) {
-  const stateDir = options.stateDir ?? clioStateDir();
-  const id = newDecisionId(draft.group);
-  const createdAt = draft.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
-  const decision = buildGateDecisionArtifact(draft, id, createdAt);
-  const withoutIntegrity = {
-    version: 1,
-    kind: "decision",
-    id,
-    decision,
-    ...options.finalOutput !== void 0 ? { finalOutput: options.finalOutput } : {},
-    ...options.resourceRoot !== void 0 ? { resourceRoot: options.resourceRoot } : {},
-    createdAt
-  };
-  const record = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: pendingRecordDigest(withoutIntegrity) }
-  };
-  if (existsSync8(decisionArtifactPath(id, stateDir))) throw new Error(`gate decision artifact collision: ${id}`);
-  return persistPendingGateDecision(record, stateDir, false);
-}
-function resolvePendingGateDecision(handle, draft) {
-  const loaded = loadPendingGateDecision(handle);
-  if (loaded === null) throw new Error(`pending gate decision is missing: ${handle.record.id}`);
-  if (loaded.record.kind === "decision") {
-    const expected = buildGateDecisionArtifact(draft, loaded.record.id, loaded.record.createdAt);
-    if (expected.integrity.digest !== loaded.record.decision.integrity.digest) {
-      throw new Error("pending gate decision was already resolved to a different artifact");
-    }
-    return loaded;
-  }
-  const pending = loaded.record;
-  if (draft.group !== pending.group || draft.topology !== pending.topology || draft.cycle !== pending.cycle || !sameSubjectRefs(draft.subjects, pending.subjects)) {
-    throw new Error("resolved gate decision does not match staged output context");
-  }
-  if (draft.decider === void 0 || draft.decider.runId !== pending.deciderRunId) {
-    throw new Error("resolved gate decision does not match staged decider run");
-  }
-  if (draft.createdAt !== void 0 && draft.createdAt !== pending.createdAt) {
-    throw new Error("resolved gate decision cannot change the staged timestamp");
-  }
-  const decision = buildGateDecisionArtifact(draft, pending.id, pending.createdAt);
-  const withoutIntegrity = {
-    version: 1,
-    kind: "decision",
-    id: pending.id,
-    decision,
-    finalOutput: pending.finalOutput,
-    ...pending.resourceRoot !== void 0 ? { resourceRoot: pending.resourceRoot } : {},
-    createdAt: pending.createdAt
-  };
-  const resolvedRecord = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: pendingRecordDigest(withoutIntegrity) }
-  };
-  return persistPendingGateDecision(resolvedRecord, loaded.stateDir, true);
-}
-function materializePendingGateDecision(handle) {
-  const loaded = loadPendingGateDecision(handle);
-  if (loaded === null) {
-    if (handle.record.kind !== "decision") {
-      throw new Error(`pending gate output is missing before resolution: ${handle.record.id}`);
-    }
-    const path2 = decisionArtifactPath(handle.record.decision.id, handle.stateDir);
-    if (!existsSync8(path2)) throw new Error(`pending gate decision and artifact are both missing: ${handle.record.id}`);
-    const artifact = readVerifiedArtifact(path2);
-    if (artifact.integrity.digest !== handle.record.decision.integrity.digest) {
-      throw new Error(`gate decision artifact conflicts with completed pending record: ${handle.record.id}`);
-    }
-    return { artifact, path: path2 };
-  }
-  if (loaded.record.kind !== "decision") {
-    throw new Error(`pending gate output requires receipt resolution: ${loaded.record.id}`);
-  }
-  const written = persistGateDecisionArtifact(loaded.record.decision, loaded.stateDir, true);
-  const persisted = readVerifiedArtifact(written.path);
-  if (persisted.integrity.digest !== loaded.record.decision.integrity.digest) {
-    throw new Error(`materialized gate decision does not match pending record: ${loaded.record.id}`);
-  }
-  clearPendingGateDecision(loaded);
-  return { artifact: persisted, path: written.path };
-}
-function finalizePendingGateDecision(handle, draft) {
-  return materializePendingGateDecision(resolvePendingGateDecision(handle, draft));
-}
-function readPendingGateDecisions(stateDir = clioStateDir()) {
-  const directory = pendingDecisionsDirectory(stateDir);
-  if (!existsSync8(directory)) return { records: [], errors: [] };
-  const records = [];
-  const errors = [];
-  for (const name of readdirSync2(directory).filter((entry) => entry.endsWith(".json")).sort()) {
-    const path2 = join10(directory, name);
-    try {
-      const record = parsePendingGateDecisionRecord(JSON.parse(readFileSync8(path2, "utf8")));
-      if (name !== `${record.id}.json`) throw new Error("pending gate decision filename does not match its id");
-      records.push({ record, path: path2, stateDir });
-    } catch (error) {
-      errors.push({ path: path2, message: error instanceof Error ? error.message : String(error) });
-    }
-  }
-  return { records, errors };
-}
-function preflightPendingGateDecisionMaterialization(handles) {
-  for (const handle of handles) {
-    if (handle.record.kind !== "decision") continue;
-    const path2 = decisionArtifactPath(handle.record.decision.id, handle.stateDir);
-    if (!existsSync8(path2)) continue;
-    const existing = readVerifiedArtifact(path2);
-    if (existing.integrity.digest !== handle.record.decision.integrity.digest) {
-      throw new Error(`gate decision artifact conflicts with pending record: ${handle.record.id}`);
-    }
-  }
-}
-function preparePendingGateDecisionRecovery(stateDir = clioStateDir()) {
-  const pending = readPendingGateDecisions(stateDir);
-  if (pending.errors.length > 0) {
-    throw new Error(
-      `pending gate decision journal is untrustworthy: ${pending.errors.map((entry) => `${entry.path}: ${entry.message}`).join("; ")}`
-    );
-  }
-  const ready = pending.records.filter((handle) => handle.record.kind === "decision");
-  preflightPendingGateDecisionMaterialization(ready);
-  return {
-    ready,
-    unresolved: pending.records.filter((handle) => handle.record.kind === "output")
-  };
-}
-function readGateDecisionArtifacts(group, stateDir = clioStateDir()) {
-  const directory = decisionsDirectory(stateDir);
-  if (!existsSync8(directory)) return [];
-  const out = [];
-  for (const name of readdirSync2(directory).filter((entry) => entry.endsWith(".json")).sort()) {
-    const path2 = join10(directory, name);
-    try {
-      const artifact = JSON.parse(readFileSync8(path2, "utf8"));
-      if (group !== void 0 && artifact.group !== group) continue;
-      if (!verifyGateDecisionArtifact(artifact).ok) continue;
-      out.push({ artifact, path: path2 });
-    } catch {
-    }
-  }
-  return out;
-}
-function readGateDecisionArtifactsForRunIds(runIds, stateDir = clioStateDir()) {
-  if (runIds.size === 0) return [];
-  return readGateDecisionArtifacts(void 0, stateDir).filter(({ artifact }) => {
-    if (artifact.subjects.some((subject) => runIds.has(subject.runId))) return true;
-    if (artifact.decider !== void 0 && runIds.has(artifact.decider.runId)) return true;
-    return artifact.winner !== void 0 && runIds.has(artifact.winner.subject.runId);
-  });
-}
+import { appendFileSync, existsSync as existsSync9, mkdirSync as mkdirSync4, readdirSync as readdirSync2, readFileSync as readFileSync9, renameSync as renameSync4, statSync } from "node:fs";
+import { join as join11 } from "node:path";
 
 // src/domains/dispatch/route-history.ts
 init_esm_shims();
-import { existsSync as existsSync9, readFileSync as readFileSync9, renameSync as renameSync3 } from "node:fs";
-import { join as join11 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync8, renameSync as renameSync3 } from "node:fs";
+import { join as join10 } from "node:path";
 var ROUTE_HISTORY_VERSION = 3;
 var DEFAULT_MAX_RECORDS = 4096;
 function historyPath(stateDir) {
-  return join11(stateDir, "route-history.json");
+  return join10(stateDir, "route-history.json");
 }
 function clone2(record) {
   return structuredClone(record);
@@ -6289,7 +5671,7 @@ function compareRecords(left, right) {
   return left.settledAt.localeCompare(right.settledAt) || left.receiptDigest.localeCompare(right.receiptDigest);
 }
 function validateRecord(value) {
-  if (!isRecord7(value) || value.version !== ROUTE_HISTORY_VERSION)
+  if (!isRecord5(value) || value.version !== ROUTE_HISTORY_VERSION)
     throw new Error("route history record has unsupported version");
   if (!isDigest(value.receiptDigest)) throw new Error("route history receipt digest invalid");
   if (typeof value.assignmentId !== "string" || value.assignmentId.length === 0)
@@ -6333,8 +5715,8 @@ function validateRecord(value) {
   };
 }
 function readHistory(path2) {
-  if (!existsSync9(path2)) return [];
-  const raw = readFileSync9(path2, "utf8").trim();
+  if (!existsSync8(path2)) return [];
+  const raw = readFileSync8(path2, "utf8").trim();
   if (raw.length === 0) return [];
   let parsed;
   try {
@@ -6342,7 +5724,7 @@ function readHistory(path2) {
   } catch (error) {
     throw new Error(`route history unreadable: ${error instanceof Error ? error.message : String(error)}`);
   }
-  if (!isRecord7(parsed) || !Array.isArray(parsed.records)) throw new Error("route history has unsupported format");
+  if (!isRecord5(parsed) || !Array.isArray(parsed.records)) throw new Error("route history has unsupported format");
   if (parsed.version !== ROUTE_HISTORY_VERSION) {
     retireHistory(path2, parsed.version);
     return [];
@@ -6402,14 +5784,14 @@ function createRouteHistoryStore(options = {}) {
     }
   };
 }
-function isRecord7(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isDigest(value) {
   return typeof value === "string" && /^[0-9a-f]{64}$/u.test(value);
 }
 function isRouteCandidate(value) {
-  if (!isRecord7(value)) return false;
+  if (!isRecord5(value)) return false;
   if (!isExecutionRole(value.executionRole)) return false;
   return [
     value.agentId,
@@ -6425,7 +5807,7 @@ function isRouteCandidate(value) {
   ].every((field) => typeof field === "string");
 }
 function isPhaseTiming(value) {
-  if (!isRecord7(value)) return false;
+  if (!isRecord5(value)) return false;
   return [
     "requestToDecisionMs",
     "decisionMs",
@@ -6441,7 +5823,7 @@ function isPhaseTiming(value) {
 
 // src/domains/dispatch/route-quality.ts
 init_esm_shims();
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 function compareStrings(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -6556,19 +5938,19 @@ function reduceRouteQuality(input) {
   return { label, checks, correlatedGates, sourceDigests: [...sourceDigests].sort(compareStrings) };
 }
 function routeQualityEvalDigest(artifact) {
-  return createHash8("sha256").update(canonicalJson3(artifact), "utf8").digest("hex");
+  return createHash6("sha256").update(canonicalJson2(artifact), "utf8").digest("hex");
 }
-function canonicalJson3(value) {
+function canonicalJson2(value) {
   if (value === null) return "null";
   if (typeof value === "string" || typeof value === "boolean") return JSON.stringify(value);
   if (typeof value === "number") {
     if (!Number.isFinite(value)) throw new Error("route quality eval digest requires finite numbers");
     return JSON.stringify(value);
   }
-  if (Array.isArray(value)) return `[${value.map(canonicalJson3).join(",")}]`;
+  if (Array.isArray(value)) return `[${value.map(canonicalJson2).join(",")}]`;
   if (typeof value === "object") {
     const record = value;
-    return `{${Object.keys(record).sort(compareStrings).map((key) => `${JSON.stringify(key)}:${canonicalJson3(record[key])}`).join(",")}}`;
+    return `{${Object.keys(record).sort(compareStrings).map((key) => `${JSON.stringify(key)}:${canonicalJson2(record[key])}`).join(",")}}`;
   }
   throw new Error(`route quality eval digest cannot represent ${typeof value}`);
 }
@@ -6629,28 +6011,28 @@ function createRouteLearner(capacity = LEARNER_CAPACITY) {
 }
 var OBSERVATION_LOG_MAX_BYTES = 1024 * 1024;
 function durableQualitySources(stateDir) {
-  const runsPath2 = join12(stateDir, "runs.json");
-  if (!existsSync10(runsPath2)) return { receipts: [], gates: [], evals: [] };
+  const runsPath2 = join11(stateDir, "runs.json");
+  if (!existsSync9(runsPath2)) return { receipts: [], gates: [], evals: [] };
   try {
-    const parsed = JSON.parse(readFileSync10(runsPath2, "utf8"));
+    const parsed = JSON.parse(readFileSync9(runsPath2, "utf8"));
     if (!Array.isArray(parsed)) return { receipts: [], gates: [], evals: [] };
     const receipts = [];
     for (const envelope of parsed) {
       if (typeof envelope !== "object" || envelope === null || Array.isArray(envelope)) continue;
       const run = envelope;
-      const path2 = run.receiptPath ?? join12(stateDir, "receipts", `${run.id}.json`);
-      if (!existsSync10(path2)) continue;
-      const receipt = JSON.parse(readFileSync10(path2, "utf8"));
+      const path2 = run.receiptPath ?? join11(stateDir, "receipts", `${run.id}.json`);
+      if (!existsSync9(path2)) continue;
+      const receipt = JSON.parse(readFileSync9(path2, "utf8"));
       if (typeof receipt === "object" && receipt !== null && !Array.isArray(receipt)) {
         receipts.push({ receipt, envelope: run });
       }
     }
     const evals = [];
-    const evalDirectory = join12(clioDataDir(), "evals");
-    if (existsSync10(evalDirectory)) {
-      for (const name of readdirSync3(evalDirectory).filter((entry) => entry.endsWith(".json")).sort()) {
+    const evalDirectory = join11(clioDataDir(), "evals");
+    if (existsSync9(evalDirectory)) {
+      for (const name of readdirSync2(evalDirectory).filter((entry) => entry.endsWith(".json")).sort()) {
         try {
-          const artifact = parseEvalArtifactV4(JSON.parse(readFileSync10(join12(evalDirectory, name), "utf8")), name);
+          const artifact = parseEvalArtifactV4(JSON.parse(readFileSync9(join11(evalDirectory, name), "utf8")), name);
           evals.push({ artifact, digest: routeQualityEvalDigest(artifact) });
         } catch {
         }
@@ -6662,8 +6044,8 @@ function durableQualitySources(stateDir) {
   }
 }
 function appendObservationLine(dir, record) {
-  mkdirSync5(dir, { recursive: true });
-  const path2 = join12(dir, "observations.jsonl");
+  mkdirSync4(dir, { recursive: true });
+  const path2 = join11(dir, "observations.jsonl");
   try {
     if (statSync(path2).size > OBSERVATION_LOG_MAX_BYTES) {
       renameSync4(path2, `${path2}.1`);
@@ -6695,7 +6077,7 @@ function createRouteObserver(options) {
   const PENDING_LIMIT = 512;
   let totalObservations = 0;
   let sequence = 0;
-  const logDir = () => options.logDir ?? join12(clioStateDir(), "route-decisions");
+  const logDir = () => options.logDir ?? join11(clioStateDir(), "route-decisions");
   const reconcileHistory = () => {
     const sources = durableQualitySources(options.stateDir ?? clioStateDir());
     if (sources.receipts.length === 0) return;
@@ -6860,8 +6242,328 @@ function createRouteObserver(options) {
       } catch {
       }
     },
-    summary() {
-      return learner.summary(totalObservations);
+    summary() {
+      return learner.summary(totalObservations);
+    }
+  };
+}
+
+// src/domains/dispatch/run-event-journal-bridge.ts
+init_esm_shims();
+
+// src/tools/dispatch-run-events.ts
+init_esm_shims();
+
+// src/tools/dispatch-event-text.ts
+init_esm_shims();
+function assistantTextFromEvent(event) {
+  return durableAssistantTextFromEvent(event).trim();
+}
+function receiptResponseModelIdObservationLabel(receipt) {
+  const responses = receipt.upstreamResponses ?? [];
+  if (responses.length === 0) return null;
+  const labels = responses.map((response) => {
+    const observation = responseModelIdObservationFromRecord(
+      response,
+      "legacy-difference-only"
+    );
+    if (observation.state === "reported") return `reported:${observation.reportedModelId}`;
+    if (observation.state === "not-reported") return "not-reported";
+    if (observation.state === "not-observed") return "not-observed";
+    return `legacy-difference-only:${observation.differingModelId ?? "none"}`;
+  });
+  return `response_model_id_observation=${labels.join(",")}`;
+}
+
+// src/tools/dispatch-run-events.ts
+var RUN_TAIL_ENTRY_LIMIT = 100;
+var RUN_TAIL_RUN_LIMIT = 64;
+var RUN_TAIL_TEXT_LIMIT = 600;
+function isRecord6(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function eventDetail(event) {
+  const text = assistantTextFromEvent(event);
+  if (text.length > 0) return truncateUtf8(text, RUN_TAIL_TEXT_LIMIT, "...");
+  if (!isRecord6(event)) return void 0;
+  if (event.type === "clio_tool_finish" && isRecord6(event.payload)) {
+    const tool = typeof event.payload.tool === "string" ? event.payload.tool : "tool";
+    const outcome = typeof event.payload.outcome === "string" ? event.payload.outcome : "";
+    return `${tool} ${outcome}`.trim();
+  }
+  if (event.type === "attempt_start") {
+    const attempt = typeof event.attempt === "number" ? event.attempt : "?";
+    const runId = typeof event.runId === "string" ? event.runId : "?";
+    const reason = typeof event.reason === "string" ? event.reason : "retry";
+    return truncateUtf8(`attempt ${attempt} -> ${runId}: ${reason}`, RUN_TAIL_TEXT_LIMIT, "...");
+  }
+  return void 0;
+}
+function runTailEntryFromEvent(event, at = (/* @__PURE__ */ new Date()).toISOString()) {
+  const type = isRecord6(event) && typeof event.type === "string" ? event.type : "unknown";
+  if (type === "heartbeat" || type === "message_update") return null;
+  const entry = { at, type };
+  const detail = eventDetail(event);
+  if (detail !== void 0) entry.detail = detail;
+  return entry;
+}
+var REGISTRY_FAILURE_OUTCOME = "failed";
+var REGISTRY_UNKNOWN_OUTCOME = "unknown";
+function errorText(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function createDispatchRunEventRegistry(options = {}) {
+  const runTails = /* @__PURE__ */ new Map();
+  const activeRuns = /* @__PURE__ */ new Set();
+  const activeBatches = /* @__PURE__ */ new Set();
+  const journal = options.journal === void 0 ? defaultRunEventJournal() : options.journal;
+  const journalSeal = (logicalRunId, receipt) => {
+    if (journal === null || !isRecord6(receipt)) return;
+    const digest = receipt.integrity?.digest;
+    const outcome = typeof receipt.outcome === "string" ? receipt.outcome : REGISTRY_UNKNOWN_OUTCOME;
+    journal.receipt(logicalRunId, {
+      outcome,
+      exitCode: typeof receipt.exitCode === "number" ? receipt.exitCode : null,
+      ...typeof digest === "string" ? { digest } : {},
+      ...receipt.runId !== logicalRunId ? { attemptRunId: receipt.runId } : {}
+    });
+    journal.terminal(logicalRunId, outcome, receipt.outcomeDetail ?? void 0);
+  };
+  const sealBatchJournals = (assignmentIds, receipts) => {
+    if (journal === null || !Array.isArray(receipts)) return;
+    if (assignmentIds.length === receipts.length) {
+      for (const [index, runId] of assignmentIds.entries()) {
+        const receipt = receipts[index];
+        if (receipt !== void 0) journalSeal(runId, receipt);
+      }
+      return;
+    }
+    for (const receipt of receipts) {
+      if (receipt != null && typeof receipt.runId === "string") journalSeal(receipt.runId, receipt);
+    }
+  };
+  const pruneRunTails = () => {
+    while (runTails.size > RUN_TAIL_RUN_LIMIT) {
+      let oldestKey = null;
+      let oldestSeen = Number.POSITIVE_INFINITY;
+      for (const [key, state] of runTails) {
+        if (activeRuns.has(key) || state.lastSeenAt >= oldestSeen) continue;
+        oldestKey = key;
+        oldestSeen = state.lastSeenAt;
+      }
+      if (oldestKey === null) break;
+      runTails.delete(oldestKey);
+    }
+  };
+  const recordRunEvent = (runId, agentId, event) => {
+    const entry = runTailEntryFromEvent(event);
+    if (entry === null) return;
+    const state = runTails.get(runId) ?? { agentId, entries: [], lastSeenAt: Date.now() };
+    state.lastSeenAt = Date.now();
+    state.entries.push(entry);
+    if (state.entries.length > RUN_TAIL_ENTRY_LIMIT) {
+      state.entries.splice(0, state.entries.length - RUN_TAIL_ENTRY_LIMIT);
+    }
+    runTails.set(runId, state);
+    pruneRunTails();
+    journal?.append(runId, entry);
+  };
+  const drainSingle = async (runId, agentId, events, bus) => {
+    const summary = {
+      count: 0,
+      types: [],
+      lastAssistantText: "",
+      terminalAttemptRunId: runId
+    };
+    for await (const event of events) {
+      summary.count += 1;
+      const type = isRecord6(event) && typeof event.type === "string" ? event.type : "unknown";
+      summary.types.push(type);
+      if (type === "attempt_start") summary.lastAssistantText = "";
+      const text = durableAssistantTextFromEvent(event);
+      if (text.trim().length > 0) summary.lastAssistantText = text;
+      recordRunEvent(runId, agentId, event);
+      if (type !== "heartbeat") bus?.emit(BusChannels.DispatchProgress, { runId, agentId, event });
+    }
+    return summary;
+  };
+  const drainBatch = async (batchId, events, bus) => {
+    const summaries = /* @__PURE__ */ new Map();
+    for await (const event of events) {
+      if (!isRecord6(event) || event.type !== "batch_run_event") continue;
+      const runId = typeof event.runId === "string" ? event.runId : batchId;
+      const agentId = typeof event.agentId === "string" ? event.agentId : "batch";
+      const inner = event.event;
+      const summary = summaries.get(runId) ?? {
+        count: 0,
+        types: [],
+        lastAssistantText: "",
+        terminalAttemptRunId: runId
+      };
+      summary.count += 1;
+      const type = isRecord6(inner) && typeof inner.type === "string" ? inner.type : "unknown";
+      summary.types.push(type);
+      const text = durableAssistantTextFromEvent(inner);
+      if (text.trim().length > 0) summary.lastAssistantText = text;
+      summaries.set(runId, summary);
+      recordRunEvent(runId, agentId, inner);
+      if (type !== "heartbeat") bus?.emit(BusChannels.DispatchProgress, { runId, agentId, event: inner });
+    }
+    return summaries;
+  };
+  return {
+    registerSingle(handle, agentId, bus) {
+      if (activeRuns.has(handle.runId)) {
+        throw new Error(`dispatch event registry: run '${handle.runId}' is already registered`);
+      }
+      activeRuns.add(handle.runId);
+      journal?.open(handle.runId, agentId);
+      const summaryPromise = drainSingle(handle.runId, agentId, handle.events, bus);
+      const completion = Promise.allSettled([summaryPromise, handle.finalPromise]).then(
+        ([summaryResult, receiptResult]) => {
+          if (summaryResult.status === "rejected") throw summaryResult.reason;
+          if (receiptResult.status === "rejected") throw receiptResult.reason;
+          return { receipt: receiptResult.value, summary: summaryResult.value };
+        }
+      );
+      const releaseSingle = () => {
+        activeRuns.delete(handle.runId);
+        pruneRunTails();
+      };
+      void completion.then(
+        ({ receipt }) => {
+          journalSeal(handle.runId, receipt);
+          releaseSingle();
+        },
+        (error) => {
+          journal?.terminal(handle.runId, REGISTRY_FAILURE_OUTCOME, errorText(error));
+          releaseSingle();
+        }
+      );
+      return { runId: handle.runId, completion };
+    },
+    registerBatch(handle, agentIds, bus) {
+      if (activeBatches.has(handle.batchId)) {
+        throw new Error(`dispatch event registry: batch '${handle.batchId}' is already registered`);
+      }
+      const duplicateRunId = handle.assignmentIds.find(
+        (runId, index) => handle.assignmentIds.slice(0, index).includes(runId)
+      );
+      if (duplicateRunId !== void 0) {
+        throw new Error(`dispatch event registry: batch '${handle.batchId}' repeats run '${duplicateRunId}'`);
+      }
+      const activeRunId = handle.assignmentIds.find((runId) => activeRuns.has(runId));
+      if (activeRunId !== void 0) {
+        throw new Error(`dispatch event registry: run '${activeRunId}' is already registered`);
+      }
+      activeBatches.add(handle.batchId);
+      for (const runId of handle.assignmentIds) activeRuns.add(runId);
+      for (const [index, runId] of handle.assignmentIds.entries()) {
+        journal?.open(runId, agentIds[index] ?? "unknown");
+      }
+      const completion = Promise.allSettled([drainBatch(handle.batchId, handle.events, bus), handle.finalPromise]).then(
+        ([summariesResult, receiptsResult]) => {
+          if (summariesResult.status === "rejected") throw summariesResult.reason;
+          if (receiptsResult.status === "rejected") throw receiptsResult.reason;
+          return { receipts: receiptsResult.value, summaries: summariesResult.value };
+        }
+      );
+      const releaseBatch = () => {
+        activeBatches.delete(handle.batchId);
+        for (const runId of handle.assignmentIds) activeRuns.delete(runId);
+        pruneRunTails();
+      };
+      void completion.then(
+        ({ receipts }) => {
+          sealBatchJournals(handle.assignmentIds, receipts);
+          releaseBatch();
+        },
+        (error) => {
+          const detail = errorText(error);
+          for (const runId of handle.assignmentIds) {
+            journal?.terminal(runId, REGISTRY_FAILURE_OUTCOME, detail);
+          }
+          releaseBatch();
+        }
+      );
+      for (const [index, runId] of handle.assignmentIds.entries()) {
+        if (!runTails.has(runId)) {
+          runTails.set(runId, {
+            agentId: agentIds[index] ?? "unknown",
+            entries: [],
+            lastSeenAt: Date.now()
+          });
+        }
+      }
+      return { batchId: handle.batchId, assignmentIds: handle.assignmentIds, completion };
+    },
+    recordEvent: recordRunEvent,
+    eventTail(runId) {
+      const state = runTails.get(runId);
+      return state === void 0 ? null : { agentId: state.agentId, entries: [...state.entries] };
+    }
+  };
+}
+
+// src/domains/dispatch/run-event-journal-bridge.ts
+var OPENED_RUN_LIMIT = 512;
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function runIdentity(payload) {
+  if (!isRecord7(payload)) return null;
+  if (typeof payload.runId !== "string" || payload.runId.length === 0) return null;
+  return { runId: payload.runId, agentId: typeof payload.agentId === "string" ? payload.agentId : "unknown" };
+}
+function attachRunEventJournalBridge(bus, options = {}) {
+  const journal = options.journal ?? defaultRunEventJournal();
+  const opened = /* @__PURE__ */ new Set();
+  const ensureOpen = (runId, agentId) => {
+    if (opened.has(runId)) return;
+    opened.add(runId);
+    while (opened.size > OPENED_RUN_LIMIT) {
+      const oldest = opened.values().next();
+      if (oldest.done === true) break;
+      opened.delete(oldest.value);
+    }
+    journal.open(runId, agentId);
+  };
+  const seal = (outcome, detail, payload) => {
+    const identity = runIdentity(payload);
+    if (identity === null) return;
+    ensureOpen(identity.runId, identity.agentId);
+    const exitCode = isRecord7(payload) && typeof payload.exitCode === "number" ? payload.exitCode : null;
+    journal.receipt(identity.runId, { outcome, exitCode });
+    journal.terminal(identity.runId, outcome, detail ?? void 0);
+    opened.delete(identity.runId);
+  };
+  const unsubscribes = [
+    bus.on(BusChannels.DispatchProgress, (payload) => {
+      const identity = runIdentity(payload);
+      if (identity === null) return;
+      const entry = runTailEntryFromEvent(payload.event);
+      if (entry === null) return;
+      ensureOpen(identity.runId, identity.agentId);
+      const message = isRecord7(payload.event) && typeof payload.event.message === "string" ? payload.event.message : void 0;
+      journal.append(
+        identity.runId,
+        entry.detail === void 0 && message !== void 0 ? { ...entry, detail: message } : entry
+      );
+    }),
+    bus.on(BusChannels.DispatchCompleted, (payload) => {
+      seal(payload.outcome, payload.outcomeDetail, payload);
+    }),
+    bus.on(BusChannels.DispatchFailed, (payload) => {
+      seal(payload.outcome, payload.outcomeDetail, payload);
+    })
+  ];
+  let stopped = false;
+  return {
+    stop() {
+      if (stopped) return;
+      stopped = true;
+      for (const unsubscribe of unsubscribes) unsubscribe();
+      opened.clear();
     }
   };
 }
@@ -6915,27 +6617,27 @@ function detectRunIdentity(env = process.env) {
 
 // src/domains/dispatch/state.ts
 init_esm_shims();
-import { randomBytes as randomBytes5 } from "node:crypto";
-import { existsSync as existsSync11, readFileSync as readFileSync11 } from "node:fs";
-import { join as join13 } from "node:path";
+import { randomBytes as randomBytes4 } from "node:crypto";
+import { existsSync as existsSync10, readdirSync as readdirSync3, readFileSync as readFileSync10 } from "node:fs";
+import { join as join12 } from "node:path";
 function newRunId() {
-  const n = BigInt(`0x${randomBytes5(8).toString("hex")}`);
+  const n = BigInt(`0x${randomBytes4(8).toString("hex")}`);
   const raw = n.toString(36);
   if (raw.length >= 12) return raw.slice(0, 12);
   return raw.padStart(12, "0");
 }
 function runsPath() {
-  return join13(clioStateDir(), "runs.json");
+  return join12(clioStateDir(), "runs.json");
 }
 function receiptPathFor(runId) {
-  return join13(clioStateDir(), "receipts", `${runId}.json`);
+  return join12(clioStateDir(), "receipts", `${runId}.json`);
 }
 function fleetRunPath(runId) {
-  return join13(clioStateDir(), "fleet-runs", `${runId}.json`);
+  return join12(clioStateDir(), "fleet-runs", `${runId}.json`);
 }
 function readFleetRun(runId) {
   try {
-    const parsed = JSON.parse(readFileSync11(fleetRunPath(runId), "utf8"));
+    const parsed = JSON.parse(readFileSync10(fleetRunPath(runId), "utf8"));
     return parsed.version === 1 && parsed.id === runId ? structuredClone(parsed) : null;
   } catch {
     return null;
@@ -6945,10 +6647,27 @@ async function writeFleetRun(record) {
   await atomicWrite(fleetRunPath(record.id), `${JSON.stringify(record, null, 2)}
 `);
 }
+var MAX_FLEET_RUN_SCAN = 64;
+function listFleetRuns(limit = MAX_FLEET_RUN_SCAN) {
+  let entries;
+  try {
+    entries = readdirSync3(join12(clioStateDir(), "fleet-runs"));
+  } catch {
+    return [];
+  }
+  const records = [];
+  for (const name of entries.slice(0, MAX_FLEET_RUN_SCAN)) {
+    if (!name.endsWith(".json")) continue;
+    const record = readFleetRun(name.slice(0, -".json".length));
+    if (record !== null) records.push(record);
+  }
+  records.sort((a, b) => (Date.parse(b.startedAt) || 0) - (Date.parse(a.startedAt) || 0));
+  return records.slice(0, Math.max(0, limit));
+}
 function readRuns() {
   const path2 = runsPath();
-  if (!existsSync11(path2)) return [];
-  const raw = readFileSync11(path2, "utf8").trim();
+  if (!existsSync10(path2)) return [];
+  const raw = readFileSync10(path2, "utf8").trim();
   if (raw.length === 0) return [];
   const parsed = JSON.parse(raw);
   if (!Array.isArray(parsed)) return [];
@@ -7106,6 +6825,10 @@ function openLedger(opts) {
         const capped = capRuns(merged, maxRuns);
         runs = capped;
         atomicWrite(target, JSON.stringify(capped, null, 2));
+        if (merged.length > capped.length) {
+          const kept = new Set(capped.map((run) => run.id));
+          removeRunEventJournals(merged.filter((run) => !kept.has(run.id)).map((run) => run.id));
+        }
         dirty.clear();
       });
     },
@@ -7274,7 +6997,7 @@ function requestOriginFor(req) {
   return req.requestOrigin ?? "agent";
 }
 function sha2565(input) {
-  return createHash9("sha256").update(input, "utf8").digest("hex");
+  return createHash7("sha256").update(input, "utf8").digest("hex");
 }
 function promptHash(systemPrompt) {
   return systemPrompt.length > 0 ? sha2565(systemPrompt) : null;
@@ -7416,8 +7139,8 @@ var DISPATCH_DRAIN_GRACE_MS = 2e3;
 var RUN_WRITE_TARGET_HISTORY = 512;
 async function awaitEventDrain(drained, graceMs = DISPATCH_DRAIN_GRACE_MS) {
   let timer;
-  const grace = new Promise((resolve5) => {
-    timer = setTimeout(() => resolve5(false), graceMs);
+  const grace = new Promise((resolve4) => {
+    timer = setTimeout(() => resolve4(false), graceMs);
   });
   try {
     return await Promise.race([drained.then(() => true), grace]);
@@ -8496,19 +8219,21 @@ function createDispatchBundle(context, options) {
     return DEFAULT_RESILIENCE_COOLDOWN_MS;
   };
   const now = options?.now ?? (() => Date.now());
+  const monotonicNow = options?.monotonicNow ?? (() => performance5.now());
   const routeObserver = options?.routeObserver ?? createRouteObserver({});
   let ledger = null;
   let heartbeatTimer = null;
   const active = /* @__PURE__ */ new Map();
+  const pendingCapacity = /* @__PURE__ */ new Map();
   const targetCooldowns = /* @__PURE__ */ new Map();
   const ownedReservations = /* @__PURE__ */ new Set();
-  const runWriteTargets = /* @__PURE__ */ new Map();
-  const recordRunWriteTargets = (runId, paths) => {
-    runWriteTargets.set(runId, paths);
-    while (runWriteTargets.size > RUN_WRITE_TARGET_HISTORY) {
-      const oldest = runWriteTargets.keys().next();
+  const runWriteAttributions = /* @__PURE__ */ new Map();
+  const recordRunWriteAttribution = (runId, attribution) => {
+    runWriteAttributions.set(runId, attribution);
+    while (runWriteAttributions.size > RUN_WRITE_TARGET_HISTORY) {
+      const oldest = runWriteAttributions.keys().next();
       if (oldest.done === true) break;
-      runWriteTargets.delete(oldest.value);
+      runWriteAttributions.delete(oldest.value);
     }
   };
   const capacityAdmission = createCapacityAdmissionController({
@@ -8516,7 +8241,7 @@ function createDispatchBundle(context, options) {
       const settings = getEffectiveSettings();
       const nodes = { local: configuredGlobalCapacity(settings) };
       for (const node of settings?.fleet?.nodes ?? []) nodes[node.id] = node.maxWorkers;
-      return { global: configuredGlobalCapacity(settings), nodes };
+      return { global: configuredGlobalCapacity(settings), nodes, endpoints: configuredEndpointLimits() };
     },
     now,
     reservedPlanPeak: (planId) => reservedPlanPeakSlots(planId, (error) => reportDispatchDiagnostic("read reserved plan peak", error))
@@ -8527,6 +8252,24 @@ function createDispatchBundle(context, options) {
       onError: (error) => reportDispatchDiagnostic("read capacity lease usage", error)
     })
   );
+  function configuredEndpointCapacities() {
+    return resolveEndpointCapacities({
+      statuses: providers.list(),
+      targets: getEffectiveSettings()?.targets ?? [],
+      runtimeFor: (runtimeId) => providers.getRuntime(runtimeId)
+    });
+  }
+  function configuredEndpointLimits() {
+    return Object.fromEntries(Object.entries(configuredEndpointCapacities()).map(([key, value]) => [key, value.limit]));
+  }
+  function endpointCapacityForTarget(targetId) {
+    const status = providers.list().find((entry) => entry.target.id === targetId);
+    const target = status?.target ?? providers.getTarget(targetId);
+    if (target === null || target === void 0) return null;
+    const endpoint = status === void 0 ? endpointCapacityFor({ target, runtime: providers.getRuntime(target.runtime) }) : endpointCapacityForStatus(status);
+    if (endpoint === null) return null;
+    return configuredEndpointCapacities()[endpoint.key] ?? endpoint;
+  }
   function reservationCapacitySnapshot(settings) {
     const preflight = scheduling.preflight();
     const usage = capacityLeaseUsage();
@@ -8535,9 +8278,21 @@ function createDispatchBundle(context, options) {
     };
     for (const node of settings?.fleet?.nodes ?? [])
       nodes[node.id] = { active: usage.nodes[node.id] ?? 0, limit: node.maxWorkers };
+    const endpoints = Object.fromEntries(
+      Object.entries(configuredEndpointLimits()).map(([key, limit]) => [
+        key,
+        {
+          active: usage.endpoints[key] ?? 0,
+          limit,
+          leases: usage.endpointHolders[key]?.leases ?? 0,
+          foregroundStreams: usage.endpointHolders[key]?.foregroundStreams ?? 0
+        }
+      ])
+    );
     return {
       global: { active: usage.global, limit: configuredGlobalCapacity(settings) },
       nodes,
+      endpoints,
       budget: { currentUsd: preflight.currentUsd, ceilingUsd: preflight.ceilingUsd }
     };
   }
@@ -8548,6 +8303,7 @@ function createDispatchBundle(context, options) {
         memberId: task.memberId,
         wave: task.wave,
         nodeId: task.resolution.node.id,
+        ...task.resolution.endpoint !== void 0 ? { endpointKey: task.resolution.endpoint.key } : {},
         costUpperBoundUsd: task.resolution.routeApproval?.totalCostUpperBoundUsd ?? task.resolution.costUpperBoundUsd
       })),
       capacity: reservationCapacitySnapshot(getEffectiveSettings()),
@@ -8589,10 +8345,24 @@ function createDispatchBundle(context, options) {
     const configured = settings?.budget.concurrency;
     return scheduling.maxWorkers?.() ?? (configured === "auto" || configured === void 0 ? 4 : Math.max(1, configured));
   }
-  async function admitAssignmentCapacity(req, nodeId, timing) {
+  function publishCapacityQueued(identity, timing, node) {
+    pendingCapacity.set(identity.runId, { identity, timing, node });
+    context.bus.emit(BusChannels.DispatchEnqueued, identity);
+  }
+  function publishCapacityAdmissionFailure(identity, error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    const outcome = error instanceof AdmissionCanceledError ? "canceled" : /admission timed out/u.test(detail) ? "timed_out" : "denied_by_policy";
+    context.bus.emit(BusChannels.DispatchFailed, {
+      ...identity,
+      outcome,
+      outcomeDetail: detail,
+      reason: outcome
+    });
+  }
+  async function admitAssignmentCapacity(req, nodeId, timing, endpoint) {
     const queuedAt = now();
     timing.queuedAt = new Date(queuedAt).toISOString();
-    const assignmentId = req.lineage?.rootRunId ?? `pending-${queuedAt.toString(36)}-${randomBytes6(6).toString("hex")}`;
+    const assignmentId = req.lineage?.rootRunId ?? req.runIdHint ?? `pending-${queuedAt.toString(36)}-${randomBytes5(6).toString("hex")}`;
     const requestedAt = Date.parse(timing.requestedAt ?? timing.queuedAt);
     const deadlineAt = req.assignmentDeadlineAt ?? requestedAt + (req.routingIntent?.deadlineMs ?? 6e4);
     if (req.lineage === void 0) await registerAssignment(assignmentId);
@@ -8605,9 +8375,14 @@ function createDispatchBundle(context, options) {
       const admitted = await capacityAdmission.admit({
         assignmentId,
         nodeId,
+        ...endpoint !== null && endpoint !== void 0 ? { endpointKey: endpoint.key } : {},
         deadlineAt,
         ...plan,
-        ...req.reservation !== void 0 && req.lineage === void 0 ? { reservation: req.reservation } : {}
+        // A fleet's first attempt carries lineage and still owns the held
+        // reservation member that admission must transfer into its lease.
+        // Retries carry the same reservation identity after that member was
+        // consumed, so they reacquire/rebind the assignment lease normally.
+        ...req.reservation !== void 0 && (req.lineage === void 0 || req.lineage.attempt === 0) ? { reservation: req.reservation } : {}
       });
       timing.admittedAt = new Date(admitted.admittedAt).toISOString();
       return admitted.lease;
@@ -8619,12 +8394,13 @@ function createDispatchBundle(context, options) {
       throw error;
     }
   }
-  function rebindReservationSlot(req, nodeId, costUsd, settings) {
+  function rebindReservationSlot(req, nodeId, endpoint, costUsd, settings) {
     if (req.reservation === void 0 || req.lineage === void 0) return;
     const capacity = reservationCapacitySnapshot(settings);
     const rebind = {
       ...req.reservation,
       nodeId,
+      ...endpoint !== null ? { endpointKey: endpoint.key } : {},
       costUpperBoundUsd: req.routeApproval?.totalCostUpperBoundUsd ?? costUsd,
       capacity,
       nowMs: now()
@@ -8691,10 +8467,23 @@ function createDispatchBundle(context, options) {
     persistAssignment(settleStoredAssignment(rootRunId, attemptRunId, "failed"), `${rootRunId}:finalize-error`);
     capacityAdmission.releaseAssignment(rootRunId);
   }
+  function retryChainIsLive(run) {
+    if (run.aborted) return false;
+    const reservation = run.req.reservation;
+    if (reservation === void 0) return assignments.get(run.lineage.rootRunId)?.status === "running";
+    try {
+      const record = getDispatchReservation(reservation.ownerId);
+      const member = record?.members.find((entry) => entry.memberId === reservation.memberId);
+      return record?.status === "active" && member !== void 0 && member.status !== "released";
+    } catch (error) {
+      reportDispatchDiagnostic(`read retry liveness for reservation member ${reservation.memberId}`, error);
+      return false;
+    }
+  }
   function maybeScheduleRetry(run, outcome, detail, receipt, failureClass) {
     if (draining) return { scheduled: false };
     const rootRunId = run.lineage.rootRunId;
-    if (assignments.get(rootRunId)?.status !== "running") return { scheduled: false };
+    if (!retryChainIsLive(run)) return { scheduled: false };
     if (!RETRYABLE_OUTCOMES.has(outcome)) {
       retryBackoff.delete(rootRunId);
       return { scheduled: false };
@@ -8803,7 +8592,7 @@ function createDispatchBundle(context, options) {
     });
   }
   async function executeRetry(run, attempt, reason = "retry", decision = decideRetry("internal", run.lineage.attempt, assignmentPolicyFor(run.req).maxRetries)) {
-    if (draining || assignments.get(run.lineage.rootRunId)?.status !== "running") return;
+    if (draining || !retryChainIsLive(run)) return;
     const excludesNode = decision.excludedRouteParts.includes("node");
     const rerouteHops = excludesNode && run.node !== null ? [...run.req.reroutes ?? [], { attempt, fromNode: run.node.id, toNode: "", reason }] : run.req.reroutes;
     const retryReq = {
@@ -8817,6 +8606,7 @@ function createDispatchBundle(context, options) {
         depth: run.lineage.depth
       }
     };
+    delete retryReq.runIdHint;
     const reasonKey = retryReasonKey(run.lineage.rootRunId, attempt);
     retryReasons.set(reasonKey, reason);
     try {
@@ -8959,8 +8749,8 @@ function createDispatchBundle(context, options) {
       fleetRegistry.recordChannelSuccess(run.node.id);
     }
   }
-  function heartbeatIso(heartbeatMs) {
-    return new Date(heartbeatMs).toISOString();
+  function heartbeatIso(heartbeat) {
+    return new Date(heartbeat.current).toISOString();
   }
   function heartbeatRunStatus(status) {
     return status === "alive" ? "running" : status;
@@ -8979,22 +8769,22 @@ function createDispatchBundle(context, options) {
       event: {
         type: "heartbeat_status",
         status,
-        heartbeatAt: run.heartbeatAt ? heartbeatIso(run.heartbeatAt.current) : null
+        heartbeatAt: run.heartbeatAt ? heartbeatIso(run.heartbeatAt) : null
       }
     });
   }
   function checkActiveHeartbeats() {
     if (!ledger) return;
-    const tickNow = now();
+    const tickMonotonic = monotonicNow();
     for (const run of active.values()) {
       if (run.aborted || run.stallKilled || !run.heartbeatAt) continue;
-      const heartbeatMs = run.heartbeatAt.current;
-      if (!Number.isFinite(heartbeatMs)) continue;
+      const heartbeatMonotonic = heartbeatMonotonicAt(run.heartbeatAt);
+      if (!Number.isFinite(heartbeatMonotonic) || !Number.isFinite(run.heartbeatAt.current)) continue;
       if (run.runtimeKind === "acp-delegation") {
-        ledger.update(run.runId, { heartbeatAt: heartbeatIso(heartbeatMs) });
+        ledger.update(run.runId, { heartbeatAt: heartbeatIso(run.heartbeatAt) });
         const stallMs = run.stallTimeoutMs;
         if (stallMs === null || stallMs <= 0) continue;
-        if (tickNow - heartbeatMs <= stallMs) continue;
+        if (tickMonotonic - heartbeatMonotonic <= stallMs) continue;
         run.stallKilled = true;
         run.heartbeatStatus = "dead";
         emitHeartbeatStatus(run, "dead");
@@ -9004,10 +8794,10 @@ function createDispatchBundle(context, options) {
         }
         continue;
       }
-      const status = classifyHeartbeat(heartbeatMs, tickNow, heartbeatSpec);
+      const status = classifyHeartbeat(heartbeatMonotonic, tickMonotonic, heartbeatSpec);
       const patch = {
         status: heartbeatRunStatus(status),
-        heartbeatAt: heartbeatIso(heartbeatMs)
+        heartbeatAt: heartbeatIso(run.heartbeatAt)
       };
       ledger.update(run.runId, patch);
       if (status === "alive" && run.node !== null && run.node.kind === "ssh") {
@@ -9343,7 +9133,26 @@ function createDispatchBundle(context, options) {
     const wireModelId = lifecycle.agentConfig.id;
     assertTargetNotCoolingDown(req, targetId, runtimeId, wireModelId);
     assertBudgetAdmitsRoute(req, { rates: null, provenance: "unknown" }, settings);
-    const capacityLease = await admitAssignmentCapacity(req, "local", timing);
+    const queuedIdentity = req.lineage === void 0 && req.runIdHint !== void 0 ? {
+      runId: req.runIdHint,
+      agentId: req.agentId,
+      task: req.task,
+      requestOrigin: lifecycle.requestOrigin,
+      targetId,
+      wireModelId,
+      runtimeId,
+      runtimeKind: "acp-delegation"
+    } : null;
+    if (queuedIdentity !== null) publishCapacityQueued(queuedIdentity, timing, null);
+    let capacityLease;
+    try {
+      capacityLease = await admitAssignmentCapacity(req, "local", timing, null);
+    } catch (error) {
+      if (queuedIdentity !== null) publishCapacityAdmissionFailure(queuedIdentity, error);
+      throw error;
+    } finally {
+      if (queuedIdentity !== null) pendingCapacity.delete(queuedIdentity.runId);
+    }
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
@@ -9365,7 +9174,9 @@ function createDispatchBundle(context, options) {
         cwd: lifecycle.cwd,
         safety,
         autonomy: lifecycle.autonomy,
-        clientVersion: readClioVersion()
+        clientVersion: readClioVersion(),
+        now,
+        monotonicNow
       });
     } catch (error) {
       leaseSlot.release();
@@ -9510,15 +9321,17 @@ function createDispatchBundle(context, options) {
       runIdForPermissionAudit = envelope.id;
       lineage = lineageFor(req, envelope.id);
       if (req.lineage === void 0) {
-        capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
-        await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        if (capacityLease.assignmentId !== lineage.rootRunId) {
+          capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
+          await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        }
         leaseSlot.transferToAssignment();
       }
       identity = detectRunIdentity();
       ledgerRef.update(envelope.id, {
         status: "running",
         pid: acp.pid,
-        heartbeatAt: heartbeatIso(acp.heartbeatAt.current),
+        heartbeatAt: heartbeatIso(acp.heartbeatAt),
         lineage,
         identity,
         node: LOCAL_RUN_NODE,
@@ -9535,16 +9348,18 @@ function createDispatchBundle(context, options) {
         runtimeKind: "acp-delegation"
       });
       await ledgerRef.persist();
-      context.bus.emit(BusChannels.DispatchEnqueued, {
-        runId: envelope.id,
-        agentId: req.agentId,
-        task: req.task,
-        requestOrigin: lifecycle.requestOrigin,
-        targetId,
-        wireModelId,
-        runtimeId,
-        runtimeKind: "acp-delegation"
-      });
+      if (req.lineage !== void 0) {
+        context.bus.emit(BusChannels.DispatchEnqueued, {
+          runId: envelope.id,
+          agentId: req.agentId,
+          task: req.task,
+          requestOrigin: lifecycle.requestOrigin,
+          targetId,
+          wireModelId,
+          runtimeId,
+          runtimeKind: "acp-delegation"
+        });
+      }
       context.bus.emit(BusChannels.DispatchStarted, {
         runId: envelope.id,
         agentId: req.agentId,
@@ -9878,7 +9693,7 @@ function createDispatchBundle(context, options) {
           cacheReadTokenCount: receiptDraft.cacheReadTokenCount ?? 0,
           cacheWriteTokenCount: receiptDraft.cacheWriteTokenCount ?? 0,
           reasoningTokenCount: receiptDraft.reasoningTokenCount ?? 0,
-          heartbeatAt: heartbeatIso(acp.heartbeatAt.current)
+          heartbeatAt: heartbeatIso(acp.heartbeatAt)
         };
         ledgerRef.update(envelope.id, ledgerPatch);
         const receipt = ledgerRef.recordReceipt(envelope.id, sealRouteDecision(receiptDraft, routeDecision));
@@ -9951,6 +9766,7 @@ function createDispatchBundle(context, options) {
       throw new Error(`dispatch: invalid spec: ${validated.errors.join("; ")}`);
     }
     req = validation.restore(validated.spec);
+    if (req.lineage === void 0 && req.runIdHint === void 0) req = { ...req, runIdHint: newRunId() };
     let activeRouteObservation = null;
     if (req.delegationAgentId === void 0) {
       const recipe = agents.get(req.agentId);
@@ -10015,7 +9831,7 @@ function createDispatchBundle(context, options) {
           "dispatch: writeRoots cannot be enforced on an ACP delegation target; the external agent runs its own tool surface. Dispatch to a native or claude-sdk worker."
         );
       }
-      rebindReservationSlot(req, "local", UNKNOWN_PRICING_ADMISSION_ESTIMATE_USD, settings);
+      rebindReservationSlot(req, "local", null, UNKNOWN_PRICING_ADMISSION_ESTIMATE_USD, settings);
       routeObservation = observeShadowRoute(req, void 0, settings);
       return attachRouteObservation({
         ...await dispatchAcpDelegation(req, settings, timing, routeObservation.decision, observer),
@@ -10046,10 +9862,12 @@ function createDispatchBundle(context, options) {
       model: lifecycle.target.wireModelId,
       node: placement?.node?.id ?? "local"
     };
+    const endpoint = endpointCapacityForTarget(lifecycle.target.target.id);
     assertRouteWithinApprovedEnvelope(req, effectiveRoute);
     rebindReservationSlot(
       req,
       effectiveRoute.node,
+      endpoint,
       conservativeRouteAdmissionEstimateUsd(lifecycle.target.effectivePricing, admissionMaxOutputTokens(settings)),
       settings
     );
@@ -10067,7 +9885,34 @@ function createDispatchBundle(context, options) {
       },
       shadow: () => observeShadowRoute(req, placed, settings)
     });
-    const capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing);
+    const queuedIdentity = req.lineage === void 0 && req.runIdHint !== void 0 ? {
+      runId: req.runIdHint,
+      agentId: req.agentId,
+      task: req.task,
+      agentAudience: lifecycle.agentAudience,
+      requestOrigin: lifecycle.requestOrigin,
+      targetId: lifecycle.target.target.id,
+      wireModelId: lifecycle.target.wireModelId,
+      runtimeId: lifecycle.target.runtime.id,
+      runtimeKind: lifecycle.runtimeKind,
+      budget: lifecycle.budgetEnvelope,
+      ...endpoint !== null ? { endpoint: { key: endpoint.key, label: endpoint.label, limit: endpoint.limit } } : {},
+      ...placement !== null ? { node: placement.node.id } : {},
+      ...req.gate !== void 0 ? { gate: { role: req.gate.role, cycle: req.gate.cycle } } : {},
+      ...req.council !== void 0 ? { council: req.council } : {},
+      ...req.reroutes !== void 0 && req.reroutes.length > 0 ? { rerouteCount: req.reroutes.length } : {},
+      ...lifecycle.target.modelCapabilities !== void 0 && lifecycle.target.modelCapabilities !== null && lifecycle.target.modelCapabilities.contextWindow > 0 ? { contextWindow: lifecycle.target.modelCapabilities.contextWindow } : {}
+    } : null;
+    if (queuedIdentity !== null) publishCapacityQueued(queuedIdentity, timing, placement?.node ?? null);
+    let capacityLease;
+    try {
+      capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing, endpoint);
+    } catch (error) {
+      if (queuedIdentity !== null) publishCapacityAdmissionFailure(queuedIdentity, error);
+      throw error;
+    } finally {
+      if (queuedIdentity !== null) pendingCapacity.delete(queuedIdentity.runId);
+    }
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
@@ -10125,6 +9970,8 @@ function createDispatchBundle(context, options) {
     try {
       worker = (placement?.spawn ?? spawnWorker)(spec, {
         cwd: lifecycle.cwd,
+        now,
+        monotonicNow,
         ...agentLedgerId !== null ? { onLedgerPost } : {}
       });
     } catch (error) {
@@ -10174,7 +10021,18 @@ function createDispatchBundle(context, options) {
     const upstreamResponses = [];
     const skillActivations = [];
     const finishContractEntries = [];
-    const runEffects = createRunEffectsRecorder(lifecycle.cwd);
+    let runIdForPermissionAudit = null;
+    const runEffects = createRunEffectsRecorder(lifecycle.cwd, {
+      onWriteRecordDowngraded(downgrade) {
+        const runId = runIdForPermissionAudit;
+        if (runId === null) return;
+        context.bus.emit(BusChannels.DispatchProgress, {
+          runId,
+          agentId: req.agentId,
+          event: { type: "clio_write_record_downgraded", payload: downgrade }
+        });
+      }
+    });
     let finishContractAssistantText = "";
     let finishContractAssistantTurnId = null;
     let failureMessage;
@@ -10182,7 +10040,6 @@ function createDispatchBundle(context, options) {
     const trustedOutcomeCodes = /* @__PURE__ */ new Set();
     let reportedUntrustedOutcome = false;
     const acceptsOutcomeCodeEvents = lifecycle.runtimeKind === "http" || lifecycle.runtimeKind === "sdk" && lifecycle.target.runtime.id === "claude-sdk";
-    let runIdForPermissionAudit = null;
     let workerPolicyPermissionCounter = 0;
     const outputCapture = createWorkerOutputCapture();
     const markObservedPhase = (field) => {
@@ -10253,6 +10110,7 @@ function createDispatchBundle(context, options) {
           ...ruleId !== null ? { ruleId } : {},
           ...policySource !== null ? { policySource } : {},
           ...typeof event.payload.timeoutMs === "number" ? { timeoutMs: event.payload.timeoutMs } : {},
+          fallback: spec.escalation?.fallback ?? "deny",
           escalation: true
         });
       }
@@ -10310,6 +10168,7 @@ function createDispatchBundle(context, options) {
           decidedBy,
           actionClass,
           reason,
+          ...source === "timeout" ? { fallback: spec.escalation?.fallback ?? "deny" } : {},
           ...runIdForPermissionAudit !== null ? { requestedBy: runIdForPermissionAudit } : {}
         });
       }
@@ -10362,8 +10221,10 @@ function createDispatchBundle(context, options) {
       runIdForPermissionAudit = envelope.id;
       lineage = lineageFor(req, envelope.id);
       if (req.lineage === void 0) {
-        capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
-        await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        if (capacityLease.assignmentId !== lineage.rootRunId) {
+          capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
+          await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        }
         leaseSlot.transferToAssignment();
       }
       if (agentLedgerId !== null) {
@@ -10395,7 +10256,7 @@ function createDispatchBundle(context, options) {
         ...req.council !== void 0 ? { council: req.council } : {},
         ...req.plan !== void 0 ? { plan: req.plan } : {},
         ...lifecycle.personaOverride ? { personaOverride: lifecycle.personaOverride } : {},
-        ...heartbeatAt ? { heartbeatAt: heartbeatIso(heartbeatAt.current) } : {}
+        ...heartbeatAt ? { heartbeatAt: heartbeatIso(heartbeatAt) } : {}
       });
       observer?.onAdmitted({
         runId: envelope.id,
@@ -10405,24 +10266,27 @@ function createDispatchBundle(context, options) {
       await ledgerRef.persist();
       const fleetIdentity = {
         budget: lifecycle.budgetEnvelope,
+        ...endpoint !== null ? { endpoint: { key: endpoint.key, label: endpoint.label, limit: endpoint.limit } } : {},
         ...placement !== void 0 && placement !== null ? { node: placement.node.id } : {},
         ...req.gate !== void 0 ? { gate: { role: req.gate.role, cycle: req.gate.cycle } } : {},
         ...req.council !== void 0 ? { council: req.council } : {},
         ...req.reroutes !== void 0 && req.reroutes.length > 0 ? { rerouteCount: req.reroutes.length } : {},
         ...lifecycle.target.modelCapabilities !== void 0 && lifecycle.target.modelCapabilities !== null && lifecycle.target.modelCapabilities.contextWindow > 0 ? { contextWindow: lifecycle.target.modelCapabilities.contextWindow } : {}
       };
-      context.bus.emit(BusChannels.DispatchEnqueued, {
-        runId: envelope.id,
-        agentId: req.agentId,
-        task: req.task,
-        agentAudience: lifecycle.agentAudience,
-        requestOrigin: lifecycle.requestOrigin,
-        targetId: lifecycle.target.target.id,
-        wireModelId: lifecycle.target.wireModelId,
-        runtimeId: lifecycle.target.runtime.id,
-        runtimeKind: lifecycle.runtimeKind,
-        ...fleetIdentity
-      });
+      if (req.lineage !== void 0) {
+        context.bus.emit(BusChannels.DispatchEnqueued, {
+          runId: envelope.id,
+          agentId: req.agentId,
+          task: req.task,
+          agentAudience: lifecycle.agentAudience,
+          requestOrigin: lifecycle.requestOrigin,
+          targetId: lifecycle.target.target.id,
+          wireModelId: lifecycle.target.wireModelId,
+          runtimeId: lifecycle.target.runtime.id,
+          runtimeKind: lifecycle.runtimeKind,
+          ...fleetIdentity
+        });
+      }
       context.bus.emit(BusChannels.DispatchStarted, {
         runId: envelope.id,
         agentId: req.agentId,
@@ -10527,10 +10391,10 @@ function createDispatchBundle(context, options) {
       const fleetGate = (() => {
         if (req.fleetGateReceipt === void 0) return null;
         try {
-          const content = readFileSync12(resolvePath(lifecycle.cwd, req.fleetGateReceipt.path));
-          return { path: req.fleetGateReceipt.path, pathHash: createHash9("sha256").update(content).digest("hex") };
+          const content = readFileSync11(resolvePath(lifecycle.cwd, req.fleetGateReceipt.path));
+          return { path: req.fleetGateReceipt.path, pathHash: createHash7("sha256").update(content).digest("hex") };
         } catch {
-          return { path: req.fleetGateReceipt.path, pathHash: createHash9("sha256").update("").digest("hex") };
+          return { path: req.fleetGateReceipt.path, pathHash: createHash7("sha256").update("").digest("hex") };
         }
       })();
       const ledgerContribution = (() => {
@@ -10785,18 +10649,7 @@ function createDispatchBundle(context, options) {
           cwd: lifecycle.cwd,
           networkAllowed: lifecycle.admission.allowedTools.includes(ToolNames.WebFetch),
           observedRunEffects,
-          filesystem: {
-            readFile(filePath) {
-              try {
-                return readFileSync12(filePath, "utf8");
-              } catch {
-                return null;
-              }
-            },
-            pathExists(filePath) {
-              return existsSync12(filePath);
-            }
-          }
+          filesystem: nodeResultContractFilesystem()
         });
         const resultValidation = resultContract?.applicable === true ? resultContract.validation : null;
         if (finalOutcome === "succeeded" && resultValidation?.conformance === "fail") {
@@ -10887,15 +10740,35 @@ function createDispatchBundle(context, options) {
           dynamicHash: receiptDraft.dynamicHash ?? null,
           ...receiptDraft.cacheReadTokenCount !== void 0 ? { cacheReadTokenCount: receiptDraft.cacheReadTokenCount } : {},
           ...receiptDraft.cacheWriteTokenCount !== void 0 ? { cacheWriteTokenCount: receiptDraft.cacheWriteTokenCount } : {},
-          ...activeRun.heartbeatAt ? { heartbeatAt: heartbeatIso(activeRun.heartbeatAt.current) } : {}
+          ...activeRun.heartbeatAt ? { heartbeatAt: heartbeatIso(activeRun.heartbeatAt) } : {}
         };
         if (receiptDraft.reasoningTokenCount !== void 0) {
           ledgerPatch.reasoningTokenCount = receiptDraft.reasoningTokenCount;
         }
         ledgerRef.update(envelope.id, ledgerPatch);
         const receipt = ledgerRef.recordReceipt(envelope.id, sealRouteDecision(receiptDraft, routeObservation.decision));
-        const writeRecordUsable = receipt.safety?.toolTelemetry?.coverage === "complete" && observedRunEffects.writeRecordComplete;
-        recordRunWriteTargets(envelope.id, writeRecordUsable ? [...observedRunEffects.mutatedPaths] : null);
+        const toolTelemetryComplete = receipt.safety?.toolTelemetry?.coverage === "complete";
+        const downgrades = observedRunEffects.writeRecordDowngrades.map((entry) => ({
+          reason: entry.reason,
+          tool: entry.tool,
+          toolCallId: entry.toolCallId,
+          runId: envelope.id,
+          stepId: null
+        }));
+        if (!toolTelemetryComplete) {
+          downgrades.push({
+            reason: "incomplete_tool_telemetry",
+            tool: null,
+            toolCallId: null,
+            runId: envelope.id,
+            stepId: null
+          });
+        }
+        recordRunWriteAttribution(envelope.id, {
+          recorded: [...observedRunEffects.mutatedPaths],
+          complete: toolTelemetryComplete && observedRunEffects.writeRecordComplete,
+          downgrades
+        });
         await ledgerRef.persist();
         if (worktreeReceipt?.applied === true && req.taskWorktree !== void 0) {
           try {
@@ -11136,12 +11009,14 @@ function createDispatchBundle(context, options) {
       allowedTools: effectiveTools,
       settings
     });
+    const endpoint = endpointCapacityForTarget(target.target.id);
     return {
       agentId: req.agentId,
       specFingerprint: agentSpecFingerprint(agentSpec),
       targetId: target.target.id,
       wireModelId: target.wireModelId,
       runtimeId: target.runtime.id,
+      ...endpoint !== null ? { endpoint: { key: endpoint.key, label: endpoint.label, limit: endpoint.limit } } : {},
       node: previewNode(req).node,
       thinkingLevel: target.thinkingLevel,
       toolSignature: toolSignature(effectiveTools),
@@ -11483,8 +11358,10 @@ function createDispatchBundle(context, options) {
     });
     return receipt;
   }
+  let journalBridge = null;
   const extension = {
     async start() {
+      if (options?.journalRunEvents === true) journalBridge = attachRunEventJournalBridge(context.bus);
       cleanupDispatchReservations({ startup: true, nowMs: now() });
       ledger = openLedger();
       try {
@@ -11536,6 +11413,8 @@ function createDispatchBundle(context, options) {
       for (const ownerId of ownedReservations) rollbackDispatchReservation(ownerId, now());
       ownedReservations.clear();
       await Promise.allSettled([...assignmentWrites]);
+      journalBridge?.stop();
+      journalBridge = null;
     }
   };
   function emitRunAborted(run, source) {
@@ -11552,19 +11431,41 @@ function createDispatchBundle(context, options) {
   }
   function snapshot() {
     const tickNow = now();
+    const tickMonotonic = monotonicNow();
     const running = [];
     const totals = { ...finalizedTotals };
     const costAmounts = [...finalizedCosts];
+    for (const pending of pendingCapacity.values()) {
+      const startedAt = pending.timing.queuedAt ?? pending.timing.requestedAt ?? new Date(tickNow).toISOString();
+      running.push({
+        runId: pending.identity.runId,
+        agentId: pending.identity.agentId,
+        ...pending.identity.task !== void 0 ? { task: pending.identity.task } : {},
+        ...pending.identity.budget !== void 0 ? { budget: pending.identity.budget } : {},
+        runtimeKind: pending.identity.runtimeKind,
+        outcomePhase: "queued",
+        heartbeat: "n/a",
+        lineage: { parentRunId: null, rootRunId: pending.identity.runId, attempt: 0, depth: 0 },
+        startedAt,
+        elapsedMs: 0,
+        timing: deriveRunPhaseDurations(pending.timing, startedAt, new Date(tickNow).toISOString()),
+        tokens: { input: 0, output: 0, total: 0 },
+        costUsd: 0,
+        costProvenance: "unknown",
+        node: pending.node === null ? null : { ...pending.node }
+      });
+    }
     for (const run of active.values()) {
       let heartbeat = "n/a";
-      if (run.heartbeatAt && Number.isFinite(run.heartbeatAt.current)) {
+      if (run.heartbeatAt && Number.isFinite(heartbeatMonotonicAt(run.heartbeatAt))) {
+        const heartbeatMonotonic = heartbeatMonotonicAt(run.heartbeatAt);
         if (run.runtimeKind === "acp-delegation") {
           const stallMs = run.stallTimeoutMs;
           if (stallMs !== null && stallMs > 0) {
-            heartbeat = tickNow - run.heartbeatAt.current > stallMs ? "dead" : "alive";
+            heartbeat = tickMonotonic - heartbeatMonotonic > stallMs ? "dead" : "alive";
           }
         } else {
-          heartbeat = classifyHeartbeat(run.heartbeatAt.current, tickNow, heartbeatSpec);
+          heartbeat = classifyHeartbeat(heartbeatMonotonic, tickMonotonic, heartbeatSpec);
         }
       }
       const meter = run.meter;
@@ -11678,6 +11579,7 @@ function createDispatchBundle(context, options) {
     routeCandidates,
     reservations: {
       prepare: prepareReservation,
+      release: (ownerId) => releaseDispatchReservation(ownerId, now()),
       rollback: (ownerId) => rollbackDispatchReservation(ownerId, now()),
       rollbackUnconsumed: (ownerId) => rollbackUnconsumedDispatchReservation(ownerId, now()),
       get: getDispatchReservation
@@ -11696,7 +11598,17 @@ function createDispatchBundle(context, options) {
       return ledger.get(runId);
     },
     observedRunWrites(runId) {
-      return runWriteTargets.get(runId) ?? null;
+      const attribution = runWriteAttributions.get(runId);
+      return attribution?.complete === true ? [...attribution.recorded] : null;
+    },
+    observedRunWriteAttribution(runId) {
+      const attribution = runWriteAttributions.get(runId);
+      if (attribution === void 0) return null;
+      return {
+        recorded: [...attribution.recorded],
+        complete: attribution.complete,
+        downgrades: attribution.downgrades?.map((entry) => ({ ...entry })) ?? []
+      };
     },
     assignments: {
       get: (id) => assignments.get(id),
@@ -11707,6 +11619,17 @@ function createDispatchBundle(context, options) {
     },
     abort(runId, reason) {
       const rootRunId = assignmentRootFor(runId);
+      const queued = pendingCapacity.get(rootRunId);
+      if (queued !== void 0 && capacityAdmission.cancel(rootRunId)) {
+        persistAssignment(cancelStoredAssignment(rootRunId), `${rootRunId}:cancel-queued`);
+        context.bus.emit(BusChannels.RunAborted, {
+          source: "dispatch_abort",
+          runId: rootRunId,
+          startedAt: null,
+          elapsedMs: null,
+          reason: reason?.detail ?? "operator abort while waiting for an endpoint slot"
+        });
+      }
       const assignment = assignments.get(rootRunId);
       if (assignment?.status === "running") {
         assignments.cancel(assignment.id);
@@ -11807,12 +11730,12 @@ var DispatchManifest = {
 
 // src/domains/dispatch/code-step-store.ts
 init_esm_shims();
-import { join as join14 } from "node:path";
+import { join as join13 } from "node:path";
 function codeStepDir(rootId) {
-  return join14(clioStateDir(), "code-steps", rootId);
+  return join13(clioStateDir(), "code-steps", rootId);
 }
 function codeStepRecordPath(rootId, runId) {
-  return join14(codeStepDir(rootId), `${runId}.json`);
+  return join13(codeStepDir(rootId), `${runId}.json`);
 }
 async function writeCodeStepRecord(rootId, record) {
   const path2 = codeStepRecordPath(rootId, record.runId);
@@ -11823,7 +11746,7 @@ async function writeCodeStepRecord(rootId, record) {
 
 // src/domains/dispatch/delegation-plan.ts
 init_esm_shims();
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 var DELEGATION_PROPOSAL_BRIEFING_MAX_BYTES = 12e3;
 function buildDelegationProposalBriefing(proposals) {
   const value = proposals.map((proposal) => `PROPOSAL ${proposal.agent}
@@ -11931,7 +11854,7 @@ function validateDelegationPlan(input) {
     }
   }
   const plan = { tasks };
-  return { ok: true, plan, hash: createHash10("sha256").update(JSON.stringify(plan)).digest("hex") };
+  return { ok: true, plan, hash: createHash8("sha256").update(JSON.stringify(plan)).digest("hex") };
 }
 
 // src/domains/dispatch/execution-scheduler.ts
@@ -12359,9 +12282,125 @@ function gateFailureLines(output) {
 
 // src/domains/dispatch/fleet-run.ts
 init_esm_shims();
-import { createHash as createHash11 } from "node:crypto";
-import { readFileSync as readFileSync13 } from "node:fs";
-import { join as join15 } from "node:path";
+import { createHash as createHash9 } from "node:crypto";
+import { readFileSync as readFileSync12 } from "node:fs";
+import { join as join14 } from "node:path";
+
+// src/domains/observability/cost.ts
+init_esm_shims();
+function emptyCostAggregate() {
+  return { knownUsd: 0, hasEstimated: false, hasUnknown: false, allKnownFree: false, calls: 0 };
+}
+function costWasMeasured(cost) {
+  return cost !== null && cost !== void 0 && cost.calls > 0;
+}
+function accumulateCostAmount(aggregate, amount, first) {
+  return {
+    knownUsd: aggregate.knownUsd + (amount.provenance === "unknown" ? 0 : amount.usd),
+    hasEstimated: aggregate.hasEstimated || amount.provenance === "estimated",
+    hasUnknown: aggregate.hasUnknown || amount.provenance === "unknown",
+    allKnownFree: amount.provenance === "known_free" && (first || aggregate.allKnownFree),
+    calls: aggregate.calls + 1
+  };
+}
+function aggregateCostAmounts(amounts) {
+  return amounts.reduce(
+    (aggregate, amount, index) => accumulateCostAmount(aggregate, amount, index === 0),
+    emptyCostAggregate()
+  );
+}
+function formatUsdAmount(value) {
+  if (!Number.isFinite(value) || value <= 0) return "$0.00";
+  return value < 0.01 ? `$${value.toFixed(4)}` : `$${value.toFixed(2)}`;
+}
+function formatCostAggregate(cost) {
+  if (!costWasMeasured(cost)) return null;
+  if (cost.allKnownFree) return "$0.00 local";
+  if (cost.hasUnknown) return cost.knownUsd > 0 ? `${formatUsdAmount(cost.knownUsd)} +?` : null;
+  if (cost.hasEstimated) return `~${formatUsdAmount(cost.knownUsd)} est`;
+  return formatUsdAmount(cost.knownUsd);
+}
+var COST_NOT_MEASURED = "not measured";
+function costAggregateForAmount(usd, provenance) {
+  return aggregateCostAmounts([{ usd, provenance: normalizeCostProvenance(provenance) }]);
+}
+function renderCostAggregate(cost) {
+  return formatCostAggregate(cost) ?? COST_NOT_MEASURED;
+}
+function renderCostAmount(usd, provenance) {
+  return renderCostAggregate(costAggregateForAmount(usd, provenance));
+}
+function emptyBreakdown() {
+  return { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, reasoningTokens: 0, totalTokens: 0 };
+}
+function createCostTracker() {
+  const log = [];
+  let total = 0;
+  const totals = emptyBreakdown();
+  return {
+    accumulate(providerId, attributedModelId, tokens, usd, breakdown, costProvenance, modelIdFacts, label) {
+      const resolvedUsd = usd ?? 0;
+      const provenance = normalizeCostProvenance(costProvenance);
+      const input = breakdown?.input ?? 0;
+      const output = breakdown?.output ?? 0;
+      const cacheRead = breakdown?.cacheRead ?? 0;
+      const cacheWrite = breakdown?.cacheWrite ?? 0;
+      const reasoningTokens = breakdown?.reasoningTokens ?? 0;
+      const apiCalls = breakdown?.apiCalls;
+      log.push({
+        providerId,
+        attributedModelId,
+        requestedModelIds: [...modelIdFacts?.requestedModelIds ?? [attributedModelId]],
+        responseModelIdObservationCounts: modelIdFacts ? { ...modelIdFacts.responseModelIdObservationCounts } : {
+          reportedCalls: 0,
+          notReportedCalls: 0,
+          notObservedCalls: apiCalls ?? 1,
+          legacyDifferenceOnlyCalls: 0
+        },
+        tokens,
+        usd: resolvedUsd,
+        provenance,
+        input,
+        output,
+        cacheRead,
+        cacheWrite,
+        reasoningTokens,
+        ...apiCalls !== void 0 ? { apiCalls } : {},
+        ...label !== void 0 ? { label } : {}
+      });
+      total += resolvedUsd;
+      totals.input += input;
+      totals.output += output;
+      totals.cacheRead += cacheRead;
+      totals.cacheWrite += cacheWrite;
+      totals.reasoningTokens += reasoningTokens;
+      totals.totalTokens += tokens;
+      return resolvedUsd;
+    },
+    sessionTotal() {
+      return total;
+    },
+    sessionCost() {
+      return aggregateCostAmounts(log.map((entry) => ({ usd: entry.usd, provenance: entry.provenance })));
+    },
+    sessionTokens() {
+      return { ...totals };
+    },
+    entries() {
+      return log;
+    },
+    reset() {
+      log.length = 0;
+      total = 0;
+      totals.input = 0;
+      totals.output = 0;
+      totals.cacheRead = 0;
+      totals.cacheWrite = 0;
+      totals.reasoningTokens = 0;
+      totals.totalTokens = 0;
+    }
+  };
+}
 
 // src/domains/dispatch/fleet-commit-attribution.ts
 init_esm_shims();
@@ -12453,6 +12492,11 @@ function fleetGateCorrelation(subject, decider) {
   );
   return { agent, target, modelFamily: modelFamily2, runtime, node, independent };
 }
+function fleetStepIntent(writes) {
+  if (writes === void 0 || writes.length === 0) return null;
+  const built = declaredScopeIntent({ relevantPaths: writes });
+  return built.ok ? built.intent : null;
+}
 function fleetPlanWaveIndex(plan, stepId) {
   return plan.waves.findIndex((wave) => wave.includes(stepId));
 }
@@ -12490,10 +12534,29 @@ async function executeFleetRun(input) {
     boundaryFor: (stepId) => livePlan.steps.find((step) => step.id === stepId)?.writes,
     recordedWritesFor: (stepId) => {
       const step = livePlan.steps.find((entry) => entry.id === stepId);
-      if (step === void 0 || step.kind !== "agent") return null;
+      if (step === void 0) return null;
+      if (step.kind !== "agent") {
+        return {
+          recorded: [],
+          complete: false,
+          downgrades: [
+            {
+              reason: "code_step_untracked",
+              tool: null,
+              toolCallId: null,
+              runId: null,
+              stepId
+            }
+          ]
+        };
+      }
       const receipt = receiptsByStep.get(stepId);
       if (receipt === void 0) return null;
-      return dispatch.observedRunWrites?.(receipt.runId) ?? null;
+      if (dispatch.observedRunWriteAttribution !== void 0) {
+        return dispatch.observedRunWriteAttribution(receipt.runId);
+      }
+      const recorded = dispatch.observedRunWrites?.(receipt.runId) ?? null;
+      return recorded === null ? null : { recorded, complete: true, downgrades: [] };
     },
     onVerdict(verdict, path2) {
       if (verdict.detail === null) return;
@@ -12505,7 +12568,7 @@ async function executeFleetRun(input) {
   for (const [stepId, replayedResult] of replayed) {
     try {
       const receipt = JSON.parse(
-        readFileSync13(join15(clioStateDir(), "receipts", `${replayedResult.terminalRunId}.json`), "utf8")
+        readFileSync12(join14(clioStateDir(), "receipts", `${replayedResult.terminalRunId}.json`), "utf8")
       );
       receiptsByStep.set(stepId, receipt);
     } catch {
@@ -12526,6 +12589,9 @@ async function executeFleetRun(input) {
       succeeded: true,
       terminalRunId: replayedResult.terminalRunId,
       costUsd: receiptsByStep.get(stepId)?.costUsd ?? 0,
+      // A replay whose receipt no longer exists on disk has no cost claim at
+      // all, which is `unknown` rather than a zero the projection invented.
+      costProvenance: receiptsByStep.get(stepId)?.costProvenance ?? "unknown",
       result: replayedResult
     });
     await fileStepAttempt(replayedResult.terminalRunId);
@@ -12595,11 +12661,13 @@ async function executeFleetRun(input) {
         if (step.planParentId !== void 0 && parentReceipt === void 0) {
           throw new Error(`fleet dynamic step '${step.id}' has no terminal plan-step receipt`);
         }
+        const stepIntent = fleetStepIntent(step.writes);
         const request = {
           agentId: step.agentId,
           executionRole: step.executionRole,
           task: step.task,
           cwd: workspaceRoot,
+          ...stepIntent === null ? {} : { intent: stepIntent },
           predecessorHandoffs: handoffs,
           requestOrigin: "user",
           lineage: {
@@ -12687,11 +12755,11 @@ async function executeFleetRun(input) {
             if (step.gate !== void 0 && succeeded) {
               let gateBytes = "";
               try {
-                gateBytes = readFileSync13(join15(workspaceRoot, step.gate.path), "utf8");
+                gateBytes = readFileSync12(join14(workspaceRoot, step.gate.path), "utf8");
               } catch {
                 gateBytes = "";
               }
-              gatePathHash = createHash11("sha256").update(gateBytes).digest("hex");
+              gatePathHash = createHash9("sha256").update(gateBytes).digest("hex");
               const command = input.commands?.commands.get(step.gate.commandId);
               if (gateBytes.length === 0 || command === void 0) {
                 stepSucceeded = false;
@@ -12743,11 +12811,12 @@ async function executeFleetRun(input) {
               succeeded: stepSucceeded,
               terminalRunId: receipt.runId,
               costUsd: receipt.costUsd,
+              costProvenance: receipt.costProvenance,
               receipt,
               ...failureReason !== void 0 ? { failureReason } : {}
             });
             notice(
-              `step ${step.id} ${step.agentId}: ${stepSucceeded ? "succeeded" : "failed"}${failureReason !== void 0 ? ` reason=${failureReason}` : ""} assignment=${handle.runId} terminal-run=${receipt.runId} cost=$${receipt.costUsd.toFixed(4)}`
+              `step ${step.id} ${step.agentId}: ${stepSucceeded ? "succeeded" : "failed"}${failureReason !== void 0 ? ` reason=${failureReason}` : ""} assignment=${handle.runId} terminal-run=${receipt.runId} cost=${renderCostAmount(receipt.costUsd, receipt.costProvenance)}`
             );
             return {
               stepId: step.id,
@@ -12806,6 +12875,8 @@ async function executeFleetRun(input) {
           succeeded: outcome.report.passed,
           terminalRunId: outcome.record.runId,
           costUsd: 0,
+          // No model ran, so nothing needed pricing. This zero was observed.
+          costProvenance: "known_free",
           codeStep: outcome.record,
           recordPath
         });
@@ -12864,7 +12935,7 @@ async function executeFleetRun(input) {
       cancel: (assignmentId) => dispatch.abort(assignmentId),
       release: (ownerId) => {
         if (ownerId === NO_WORKER_RESERVATION) return;
-        dispatch.reservations?.rollbackUnconsumed(ownerId);
+        dispatch.reservations?.release(ownerId);
       },
       releaseUnconsumed: (ownerId) => {
         if (ownerId === NO_WORKER_RESERVATION) return;
@@ -12929,6 +13000,9 @@ async function executeFleetRun(input) {
     result,
     receipts,
     totalCostUsd: receipts.reduce((sum, receipt) => sum + receipt.costUsd, 0),
+    totalCost: aggregateCostAmounts(
+      receipts.map((receipt) => ({ usd: receipt.costUsd, provenance: receipt.costProvenance }))
+    ),
     requiredStepCount: required.length,
     succeededStepCount,
     resolvedLoopCount: result.loops.length - failedLoops.length,
@@ -12977,6 +13051,36 @@ function attributeEvidenceFailure(facts) {
   return "unknown";
 }
 
+// src/domains/evidence/findings-markdown.ts
+init_esm_shims();
+function renderEvidenceFindingsMarkdown(findings, trustStatus) {
+  const lines = ["# Findings", "", "## Canonical trust", ""];
+  if (trustStatus.runs.length === 0) {
+    lines.push("No linked run trust status.");
+  } else {
+    for (const run of trustStatus.runs) {
+      lines.push(
+        `- run=${run.runId}`,
+        `  tier: ${trustVerdict(run.status)}`,
+        `  summary: ${formatTrustSummary(run.status)}`,
+        `  axes: ${formatTrustAxes(run.status)}`
+      );
+    }
+  }
+  lines.push("", "## Finding records", "");
+  if (findings.length === 0) {
+    lines.push("No findings.");
+  } else {
+    for (const item of findings) {
+      const run = item.runId === null ? "" : ` run=${item.runId}`;
+      lines.push(`- ${item.id} [${item.severity}] ${item.tag}${run}: ${item.message}`);
+    }
+  }
+  lines.push("");
+  return `${lines.join("\n")}
+`;
+}
+
 // src/domains/evidence/provenance.ts
 init_esm_shims();
 var PERSONA_HASH_PREFIX_CHARS = 12;
@@ -13126,6 +13230,37 @@ init_esm_shims();
 // src/domains/evidence/types.ts
 init_esm_shims();
 var EVIDENCE_VERSION = 1;
+var EVIDENCE_TAGS = [
+  "audit-linked",
+  "audit-missing",
+  "best-effort-link",
+  "timeout",
+  "context-overflow",
+  "provider-transient",
+  "missing-dependency",
+  "wrong-runtime",
+  "proxy-validation",
+  "no-validation",
+  "destructive-cleanup",
+  "blocked-tool",
+  "escalation",
+  "external-bypass",
+  "external-approximation",
+  "independent-review",
+  "context-provenance",
+  "completion-evidence",
+  "receipt-integrity",
+  "receipt-retired",
+  "protected-artifact",
+  "tool-loop",
+  "test-failure",
+  "build-failure",
+  "cwd-missing",
+  "session-linked",
+  "session-missing",
+  "auth-failure",
+  "unknown"
+];
 var FAILURE_CAUSE_TAG_ORDER = [
   "timeout",
   "auth-failure",
@@ -13148,7 +13283,6 @@ function buildEvidenceTrustStatusFile(input) {
         evidenceId: input.evidenceId,
         source,
         gateDecisions: input.gateDecisions,
-        auditRows: input.auditRows,
         validationEvidence: input.validationEvidence?.get(source.envelope.id) ?? []
       })
     }))
@@ -13156,7 +13290,6 @@ function buildEvidenceTrustStatusFile(input) {
 }
 function composeEvidenceRunTrustStatus(input) {
   const inspection = inspectRunReceiptTrustStatus(input.source.receipt, input.source.envelope);
-  const receiptRejected = inspection.status.artifactIntegrity.state === "failed";
   let status = inspection.status;
   const grounded = input.validationEvidence.filter((artifact) => isTrustStatusIdentifier(artifact.id));
   if (grounded.length > 0 && (status.validationGrounding.state === "absent" || status.validationGrounding.state === "unknown")) {
@@ -13181,21 +13314,6 @@ function composeEvidenceRunTrustStatus(input) {
       independentReview: adaptGateDecisionReviewStatus(gate, input.source.envelope.id, verification)
     });
   }
-  const finish = latestFinishContractForRun(input.auditRows, input.source.envelope.id);
-  if (finish !== null) {
-    const completion = adaptFinishContractCompletionStatus(finish.assessment, {
-      sourceId: finish.sourceId,
-      artifacts: finish.artifacts
-    });
-    status = composeTrustStatus(status, {
-      completionEvidence: receiptRejected && completion.state === "evidenced" ? {
-        state: "unknown",
-        source: { kind: "finish_contract", id: finish.sourceId },
-        authority: { kind: "clio", id: "finish-contract" },
-        artifacts: finish.artifacts
-      } : completion
-    });
-  }
   return status;
 }
 function latestGateDecisionForRun(decisions, runId) {
@@ -13203,60 +13321,11 @@ function latestGateDecisionForRun(decisions, runId) {
     (left, right) => compareCodepoints(left.createdAt, right.createdAt) || left.cycle - right.cycle || compareCodepoints(left.id, right.id)
   ).at(-1) ?? null;
 }
-function latestFinishContractForRun(rows, runId) {
-  const candidates = rows.filter((row) => row.auditKind === "completion_contract" && row.runId === runId && row.confidence === "exact").flatMap((row) => {
-    const assessment = finishContractAssessmentFromAudit(row.row);
-    if (assessment === null) return [];
-    const correlationId = readOptionalString(row.row.correlationId) ?? `${runId}:completion-contract`;
-    if (!isTrustStatusIdentifier(correlationId)) return [];
-    const turnId = readOptionalString(row.row.turnId);
-    const artifacts = [
-      { kind: "finish_contract_evidence", id: correlationId },
-      ...turnId === null || !isTrustStatusIdentifier(turnId) ? [] : [{ kind: "session_entry", id: turnId }]
-    ];
-    return [{ sourceId: correlationId, assessment, artifacts, timestamp: row.ts ?? "" }];
-  }).sort(
-    (left, right) => compareCodepoints(left.timestamp, right.timestamp) || compareCodepoints(left.sourceId, right.sourceId)
-  );
-  const latest2 = candidates.at(-1);
-  return latest2 === void 0 ? null : { sourceId: latest2.sourceId, assessment: latest2.assessment, artifacts: latest2.artifacts };
-}
-function finishContractAssessmentFromAudit(row) {
-  const reason = readOptionalString(row.reason);
-  const decision = readOptionalString(row.decision);
-  const mutatedPaths = Array.isArray(row.mutatedPaths) ? row.mutatedPaths.filter((entry) => typeof entry === "string") : [];
-  const turnId = readOptionalString(row.turnId);
-  const evidenceKinds = Array.isArray(row.evidenceKinds) ? row.evidenceKinds.filter(isFinishContractEvidenceKind) : [];
-  const evidence = evidenceKinds.map((kind) => ({
-    kind,
-    summary: "recorded by the finish contract",
-    ...turnId === null ? {} : { turnId }
-  }));
-  if (decision === "ok" && reason === "no_mutation") {
-    return { kind: "ok", reason, evidence: [], mutatedPaths };
-  }
-  if (decision === "ok" && reason === "validation_evidence") {
-    return { kind: "ok", reason, evidence, mutatedPaths };
-  }
-  if (decision === "ok" && reason === "explicit_limitation") {
-    return { kind: "ok", reason, evidence: [], mutatedPaths };
-  }
-  if (decision === "engage" && reason === "unvalidated_mutation") {
-    return { kind: "engage", reason, message: "finish contract engaged", evidence: [], mutatedPaths };
-  }
-  return null;
-}
-function isFinishContractEvidenceKind(value) {
-  return value === "validation_command" || value === "protected_artifact" || value === "dispatch_receipt";
-}
-function readOptionalString(value) {
-  return typeof value === "string" && value.trim().length > 0 ? value : null;
-}
 
 // src/domains/evidence/store.ts
 init_esm_shims();
 import { readdir, readFile } from "node:fs/promises";
-import { join as join16 } from "node:path";
+import { join as join15 } from "node:path";
 var EVIDENCE_FILES = [
   "overview.json",
   "transcript.md",
@@ -13272,11 +13341,11 @@ var EVIDENCE_FILES = [
   "findings.md"
 ];
 function evidenceRoot(dataDir) {
-  return join16(dataDir, "evidence");
+  return join15(dataDir, "evidence");
 }
 function evidenceDirectory(dataDir, evidenceId) {
   assertSafeId(evidenceId, "evidence");
-  return join16(evidenceRoot(dataDir), evidenceId);
+  return join15(evidenceRoot(dataDir), evidenceId);
 }
 var EvidenceNotFoundError = class extends Error {
   constructor(evidenceId) {
@@ -13292,7 +13361,7 @@ function isMissingFile(error) {
 async function loadEvidenceOverview(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "overview.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "overview.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) throw new EvidenceNotFoundError(evidenceId);
     throw error;
@@ -13304,7 +13373,7 @@ async function inspectEvidence(dataDir, evidenceId) {
   const overview = await loadEvidenceOverview(dataDir, evidenceId);
   let findingsRaw;
   try {
-    findingsRaw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "findings.json"), "utf8");
+    findingsRaw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "findings.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) throw new Error(`evidence artifact ${evidenceId} is missing findings.json`);
     throw error;
@@ -13316,7 +13385,7 @@ async function inspectEvidence(dataDir, evidenceId) {
 async function loadEvidenceTrustStatus(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "trust-status.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "trust-status.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) {
       return { version: 1, evidenceId, projection: "historical_format", runs: [] };
@@ -13349,7 +13418,7 @@ async function loadEvidenceTrustStatus(dataDir, evidenceId) {
 async function loadEvidenceRunProvenance(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "receipt.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "receipt.json"), "utf8");
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") return [];
@@ -13403,6 +13472,7 @@ function parseOverview(value, source) {
   const totals = readTotals(value.totals, `${source}.totals`);
   const tags = readStringArray(value, source, "tags");
   const files = readStringArray(value, source, "files");
+  const redactionCount = typeof value.redactionCount === "number" && Number.isFinite(value.redactionCount) ? value.redactionCount : void 0;
   return {
     version: 1,
     evidenceId,
@@ -13421,7 +13491,8 @@ function parseOverview(value, source) {
     modelIds,
     totals,
     tags,
-    files
+    files,
+    ...redactionCount === void 0 ? {} : { redactionCount }
   };
 }
 function parseFindingsFile(value, source) {
@@ -13564,7 +13635,6 @@ async function buildEvidence(options) {
     evidenceId,
     runSources,
     gateDecisions: gateDecisions.decisions,
-    auditRows: auditLinks.rows,
     validationEvidence
   });
   const findings = buildFindings(runSources, trustStatusRaw, sessionLinks, auditLinks, protectedArtifactsRaw);
@@ -13887,15 +13957,15 @@ function validationToolCallSummary(toolName, args) {
   const parsed = parseMaybeJson(args);
   const argRecord = isRecord11(parsed) ? parsed : null;
   if (toolName === "bash") {
-    const command = readOptionalString2(argRecord?.command);
+    const command = readOptionalString(argRecord?.command);
     if (command === null) return null;
     const detected = detectValidationCommand(command);
     return detected.kind === "validation" ? detected.matched : null;
   }
   if (toolName === "verify") {
-    const check = readOptionalString2(argRecord?.check);
+    const check = readOptionalString(argRecord?.check);
     if (check === "frontend") {
-      const target = readOptionalString2(argRecord?.path) ?? "artifact";
+      const target = readOptionalString(argRecord?.path) ?? "artifact";
       return `verify frontend ${target}`;
     }
     if (check === null) return null;
@@ -13922,22 +13992,22 @@ function finding(index, severity, tag, runId, message) {
 }
 async function writeEvidenceFiles(directory, overview, runSources, findings, sessionLinks, auditLinks, toolEventRows, gateDecisions, trustStatus, protectedArtifacts, transcript) {
   await mkdir(directory, { recursive: true });
-  await writeJson(join17(directory, "overview.json"), overview);
+  await writeJson(join16(directory, "overview.json"), overview);
   await writeFile(
-    join17(directory, "transcript.md"),
+    join16(directory, "transcript.md"),
     transcript ?? renderTranscript(overview, runSources, sessionLinks, trustStatus),
     "utf8"
   );
-  await writeJsonl(join17(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
-  await writeJsonl(join17(directory, "trace.cleaned.jsonl"), cleanedTraceRows(runSources, findings, toolEventRows));
-  await writeJsonl(join17(directory, "tool-events.jsonl"), toolEventRows);
-  await writeJsonl(join17(directory, "audit-linked.jsonl"), auditLinks.rows);
-  await writeJson(join17(directory, "receipt.json"), receiptsFile(runSources));
-  await writeJson(join17(directory, "gate-decisions.json"), gateDecisions);
-  await writeJson(join17(directory, "trust-status.json"), trustStatus);
-  await writeJson(join17(directory, "protected-artifacts.json"), protectedArtifacts);
-  await writeJson(join17(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile(join17(directory, "findings.md"), renderFindings(findings), "utf8");
+  await writeJsonl(join16(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
+  await writeJsonl(join16(directory, "trace.cleaned.jsonl"), cleanedTraceRows(runSources, findings, toolEventRows));
+  await writeJsonl(join16(directory, "tool-events.jsonl"), toolEventRows);
+  await writeJsonl(join16(directory, "audit-linked.jsonl"), auditLinks.rows);
+  await writeJson(join16(directory, "receipt.json"), receiptsFile(runSources));
+  await writeJson(join16(directory, "gate-decisions.json"), gateDecisions);
+  await writeJson(join16(directory, "trust-status.json"), trustStatus);
+  await writeJson(join16(directory, "protected-artifacts.json"), protectedArtifacts);
+  await writeJson(join16(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
+  await writeFile(join16(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
 }
 function rawTraceRows(runSources) {
   const rows = [];
@@ -14082,12 +14152,12 @@ function attributionWindows(ledger, runSources, sessionIds) {
   const linkedSessions = new Set(sessionIds);
   for (const row of ledger.rows) {
     if (!isRecord11(row)) continue;
-    const id = readOptionalString2(row.id);
-    const startedAt = readOptionalString2(row.startedAt);
-    const sessionId = readOptionalString2(row.sessionId);
+    const id = readOptionalString(row.id);
+    const startedAt = readOptionalString(row.startedAt);
+    const sessionId = readOptionalString(row.sessionId);
     if (id === null || startedAt === null || sessionId === null) continue;
     if (windows.has(id) || !linkedSessions.has(sessionId)) continue;
-    windows.set(id, { runId: id, startedAt, endedAt: readOptionalString2(row.endedAt) });
+    windows.set(id, { runId: id, startedAt, endedAt: readOptionalString(row.endedAt) });
   }
   return [...windows.values()].sort((left, right) => compareCodepoints(left.runId, right.runId));
 }
@@ -14202,16 +14272,16 @@ function extractSessionToolCall(entry, linked) {
   const payload = payloadObject(entry.payload);
   const block = firstContentBlock(entry.payload, "toolCall");
   const fn = payloadObject(payload?.function);
-  const id = readOptionalString2(payload?.id) ?? readOptionalString2(payload?.toolCallId) ?? readOptionalString2(payload?.tool_call_id) ?? readOptionalString2(block?.id) ?? entry.turnId;
-  const tool = readOptionalString2(payload?.name) ?? readOptionalString2(payload?.toolName) ?? readOptionalString2(payload?.tool) ?? readOptionalString2(fn?.name) ?? readOptionalString2(block?.name) ?? "tool";
+  const id = readOptionalString(payload?.id) ?? readOptionalString(payload?.toolCallId) ?? readOptionalString(payload?.tool_call_id) ?? readOptionalString(block?.id) ?? entry.turnId;
+  const tool = readOptionalString(payload?.name) ?? readOptionalString(payload?.toolName) ?? readOptionalString(payload?.tool) ?? readOptionalString(fn?.name) ?? readOptionalString(block?.name) ?? "tool";
   const args = payload?.arguments ?? payload?.args ?? payload?.input ?? parseMaybeJson(fn?.arguments) ?? block?.arguments ?? block?.args ?? void 0;
   return { id, tool, args, timestamp: entry.timestamp, link: linked.link, sessionId: linked.sessionId };
 }
 function extractSessionToolResult(entry, linked) {
   const payload = payloadObject(entry.payload);
   const contentText = extractTextFromPayload(entry.payload);
-  const id = readOptionalString2(payload?.toolCallId) ?? readOptionalString2(payload?.tool_call_id) ?? readOptionalString2(payload?.id) ?? null;
-  const tool = readOptionalString2(payload?.toolName) ?? readOptionalString2(payload?.name) ?? readOptionalString2(payload?.tool) ?? "tool";
+  const id = readOptionalString(payload?.toolCallId) ?? readOptionalString(payload?.tool_call_id) ?? readOptionalString(payload?.id) ?? null;
+  const tool = readOptionalString(payload?.toolName) ?? readOptionalString(payload?.name) ?? readOptionalString(payload?.tool) ?? "tool";
   const result = payload?.result ?? payload?.output ?? payload?.out ?? payload?.content ?? (contentText.length > 0 ? contentText : entry.payload);
   return {
     id,
@@ -14238,12 +14308,12 @@ async function linkAuditRows(stateDir, source, runSources, sessionLinks) {
     runSources.map((item) => [item.envelope.id, item.envelope.sessionId ?? item.receipt?.sessionId ?? null])
   );
   for (const audit of auditRows.rows) {
-    const directRunId = readOptionalString2(audit.row.runId);
+    const directRunId = readOptionalString(audit.row.runId);
     if (directRunId !== null && runIds.has(directRunId)) {
       rows.push(
         auditLinkedRow(audit, {
           runId: directRunId,
-          sessionId: readOptionalString2(audit.row.sessionId) ?? runSessionIds.get(directRunId) ?? null,
+          sessionId: readOptionalString(audit.row.sessionId) ?? runSessionIds.get(directRunId) ?? null,
           linkKind: "run-id",
           confidence: "exact",
           reasons: ["audit runId matched run ledger"]
@@ -14251,7 +14321,7 @@ async function linkAuditRows(stateDir, source, runSources, sessionLinks) {
       );
       continue;
     }
-    const directSessionId = readOptionalString2(audit.row.sessionId);
+    const directSessionId = readOptionalString(audit.row.sessionId);
     if (directSessionId !== null && sessionIds.has(directSessionId)) {
       rows.push(
         auditLinkedRow(audit, {
@@ -14286,7 +14356,7 @@ function auditLinkedRow(audit, fields) {
 }
 function bestEffortAuditLink(audit, source, runSources, sessionIds) {
   if (audit.auditKind !== "tool_call") return null;
-  const tool = readOptionalString2(audit.row.tool);
+  const tool = readOptionalString(audit.row.tool);
   if (tool === null || audit.ts === null) return null;
   const candidates = runSources.filter((item) => {
     if (!timestampInRunWindow(audit.ts ?? "", item.envelope)) return false;
@@ -14350,9 +14420,9 @@ function auditToolEvents(rows) {
   const events = [];
   for (const row of rows) {
     if (row.auditKind !== "tool_call") continue;
-    const tool = readOptionalString2(row.row.tool);
+    const tool = readOptionalString(row.row.tool);
     if (tool === null) continue;
-    const decision = readOptionalString2(row.row.decision);
+    const decision = readOptionalString(row.row.decision);
     if (decision === "classified") continue;
     const event = {
       source: "audit-row",
@@ -14369,7 +14439,7 @@ function auditToolEvents(rows) {
     };
     if (row.ts !== null) event.timestamp = row.ts;
     if (decision !== null) event.decision = decision;
-    const actionClass = readOptionalString2(row.row.actionClass);
+    const actionClass = readOptionalString(row.row.actionClass);
     if (actionClass !== null) event.actionClass = actionClass;
     events.push(event);
   }
@@ -14380,8 +14450,8 @@ function compareAuditLinkedRows(a, b) {
   if (byTs !== 0) return byTs;
   const byKind = compareCodepoints(a.auditKind, b.auditKind);
   if (byKind !== 0) return byKind;
-  const aCorrelation = readOptionalString2(a.row.correlationId) ?? "";
-  const bCorrelation = readOptionalString2(b.row.correlationId) ?? "";
+  const aCorrelation = readOptionalString(a.row.correlationId) ?? "";
+  const bCorrelation = readOptionalString(b.row.correlationId) ?? "";
   if (aCorrelation !== bCorrelation) return compareCodepoints(aCorrelation, bCorrelation);
   return compareCodepoints(JSON.stringify(a.row), JSON.stringify(b.row));
 }
@@ -14614,19 +14684,8 @@ function axisFindings(offset, source, status) {
   }
   return out;
 }
-function renderFindings(findings) {
-  if (findings.length === 0) return "# Findings\n\nNo findings.\n";
-  const lines = ["# Findings", ""];
-  for (const item of findings) {
-    const run = item.runId === null ? "" : ` run=${item.runId}`;
-    lines.push(`- ${item.id} [${item.severity}] ${item.tag}${run}: ${item.message}`);
-  }
-  lines.push("");
-  return `${lines.join("\n")}
-`;
-}
 async function readRunLedger(stateDir) {
-  const target = join17(stateDir, "runs.json");
+  const target = join16(stateDir, "runs.json");
   let raw;
   try {
     raw = await readFile2(target, "utf8");
@@ -14647,7 +14706,7 @@ function selectRunEnvelopes(ledger, source) {
   });
 }
 async function readReceipt(stateDir, envelope) {
-  const receiptPath = envelope.receiptPath ?? join17(stateDir, "receipts", `${envelope.id}.json`);
+  const receiptPath = envelope.receiptPath ?? join16(stateDir, "receipts", `${envelope.id}.json`);
   let raw;
   try {
     raw = await readFile2(receiptPath, "utf8");
@@ -14713,7 +14772,7 @@ function parseRunReceipt(value, source) {
   const integrity = value.integrity;
   if (!isRecord11(integrity)) throw new Error(`${source}.integrity: expected object`);
   const reasoningTokenCount = readOptionalNumber2(value, source, "reasoningTokenCount");
-  const failureMessage = readOptionalString2(value.failureMessage);
+  const failureMessage = readOptionalString(value.failureMessage);
   return {
     ...value,
     runId: readString2(value, source, "runId"),
@@ -14805,7 +14864,7 @@ function readNullableNumber(record, source, field) {
     throw new Error(`${source}.${field}: expected number or null`);
   return value;
 }
-function readOptionalString2(value) {
+function readOptionalString(value) {
   return typeof value === "string" && value.length > 0 ? value : null;
 }
 function parseJson2(raw, source) {
@@ -14936,7 +14995,7 @@ function sanitizeEvidenceId(value) {
 // src/domains/evidence/eval.ts
 init_esm_shims();
 import { mkdir as mkdir2, readdir as readdir2, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { join as join17 } from "node:path";
 
 // src/domains/eval/index.ts
 init_esm_shims();
@@ -14947,9 +15006,6 @@ init_esm_shims();
 // src/domains/eval/report.ts
 init_esm_shims();
 
-// src/domains/eval/run-compare.ts
-init_esm_shims();
-
 // src/domains/eval/runner.ts
 init_esm_shims();
 function summarizeEvalResults(records) {
@@ -15018,8 +15074,7 @@ async function buildEvalEvidence(options) {
   const trustStatus = buildEvidenceTrustStatusFile({
     evidenceId,
     runSources: linkedRuns.runSources,
-    gateDecisions: gateDecisions.decisions,
-    auditRows: linkedRuns.auditRows
+    gateDecisions: gateDecisions.decisions
   });
   await writeEvalEvidenceFiles(
     directory,
@@ -15141,19 +15196,19 @@ async function writeEvalEvidenceFiles(directory, artifact, overview, findings, t
   };
   const redactedArtifact = redactArtifactForStorage(artifact);
   await mkdir2(directory, { recursive: true });
-  await writeJson2(join18(directory, "overview.json"), overview);
-  await writeFile2(join18(directory, "transcript.md"), renderEvalTranscript(redactedArtifact, overview), "utf8");
-  await writeJsonl2(join18(directory, "trace.raw.jsonl"), rawEvalTraceRows(redactedArtifact));
-  await writeJsonl2(join18(directory, "trace.cleaned.jsonl"), cleanedEvalTraceRows(redactedArtifact, findings));
-  await writeJsonl2(join18(directory, "tool-events.jsonl"), redactArtifactForStorage(toolEventRows));
-  await writeJsonl2(join18(directory, "audit-linked.jsonl"), linkedRuns.auditRows);
-  await writeJson2(join18(directory, "receipt.json"), receiptsFile2);
-  await writeJson2(join18(directory, "gate-decisions.json"), gateDecisions);
-  await writeJson2(join18(directory, "trust-status.json"), trustStatus);
-  await writeJson2(join18(directory, "protected-artifacts.json"), emptyProtected);
-  await writeJson2(join18(directory, "eval-result.json"), redactedArtifact);
-  await writeJson2(join18(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile2(join18(directory, "findings.md"), renderFindings2(findings), "utf8");
+  await writeJson2(join17(directory, "overview.json"), overview);
+  await writeFile2(join17(directory, "transcript.md"), renderEvalTranscript(redactedArtifact, overview), "utf8");
+  await writeJsonl2(join17(directory, "trace.raw.jsonl"), rawEvalTraceRows(redactedArtifact));
+  await writeJsonl2(join17(directory, "trace.cleaned.jsonl"), cleanedEvalTraceRows(redactedArtifact, findings));
+  await writeJsonl2(join17(directory, "tool-events.jsonl"), redactArtifactForStorage(toolEventRows));
+  await writeJsonl2(join17(directory, "audit-linked.jsonl"), linkedRuns.auditRows);
+  await writeJson2(join17(directory, "receipt.json"), receiptsFile2);
+  await writeJson2(join17(directory, "gate-decisions.json"), gateDecisions);
+  await writeJson2(join17(directory, "trust-status.json"), trustStatus);
+  await writeJson2(join17(directory, "protected-artifacts.json"), emptyProtected);
+  await writeJson2(join17(directory, "eval-result.json"), redactedArtifact);
+  await writeJson2(join17(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
+  await writeFile2(join17(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
 }
 function rawEvalTraceRows(artifact) {
   return artifact.results.map((result) => ({
@@ -15243,16 +15298,6 @@ function renderEvalTranscript(artifact, overview) {
   return `${lines.join("\n")}
 `;
 }
-function renderFindings2(findings) {
-  if (findings.length === 0) return "No findings.\n";
-  const lines = ["# Findings", ""];
-  for (const finding2 of findings) {
-    lines.push(`- ${finding2.id} [${finding2.severity}] ${finding2.tag}: ${finding2.message}`);
-  }
-  lines.push("");
-  return `${lines.join("\n")}
-`;
-}
 async function writeJson2(path2, value) {
   await writeFile2(path2, `${JSON.stringify(value, null, 2)}
 `, "utf8");
@@ -15304,7 +15349,7 @@ async function linkEvalRuns(stateDir, artifact) {
 }
 async function readRunLedger2(stateDir) {
   try {
-    const raw = await readFile3(join18(stateDir, "runs.json"), "utf8");
+    const raw = await readFile3(join17(stateDir, "runs.json"), "utf8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed) ? parsed.filter(isRecord12) : [];
   } catch {
@@ -15315,7 +15360,7 @@ function evalRunMatches(artifact, envelope) {
   return artifact.results.some((result) => result.runId === envelope.id);
 }
 async function readReceiptForRun(stateDir, envelope) {
-  const path2 = envelope.receiptPath ?? join18(stateDir, "receipts", `${envelope.id}.json`);
+  const path2 = envelope.receiptPath ?? join17(stateDir, "receipts", `${envelope.id}.json`);
   try {
     const parsed = JSON.parse(await readFile3(path2, "utf8"));
     return isRecord12(parsed) ? parsed : null;
@@ -15344,7 +15389,7 @@ async function countSessionEntries(stateDir, sessionIds) {
   return count;
 }
 async function findSessionLedgerPath(stateDir, sessionId) {
-  const root = join18(stateDir, "sessions");
+  const root = join17(stateDir, "sessions");
   let cwdHashes;
   try {
     cwdHashes = await readdir2(root);
@@ -15352,7 +15397,7 @@ async function findSessionLedgerPath(stateDir, sessionId) {
     return null;
   }
   for (const cwdHash of cwdHashes) {
-    const path2 = join18(root, cwdHash, sessionId, "current.jsonl");
+    const path2 = join17(root, cwdHash, sessionId, "current.jsonl");
     try {
       await readFile3(path2, "utf8");
       return path2;
@@ -15362,7 +15407,7 @@ async function findSessionLedgerPath(stateDir, sessionId) {
   return null;
 }
 async function linkedEvalAuditRows(stateDir, runIds, artifact) {
-  const root = join18(stateDir, "audit");
+  const root = join17(stateDir, "audit");
   let files;
   try {
     files = await readdir2(root);
@@ -15371,7 +15416,7 @@ async function linkedEvalAuditRows(stateDir, runIds, artifact) {
   }
   const rows = [];
   for (const file of files.filter((name) => name.endsWith(".jsonl")).sort(compareCodepoints)) {
-    const raw = await readFile3(join18(root, file), "utf8").catch(() => "");
+    const raw = await readFile3(join17(root, file), "utf8").catch(() => "");
     const lines = raw.split("\n");
     for (let index = 0; index < lines.length; index += 1) {
       const line = lines[index];
@@ -15464,30 +15509,30 @@ init_esm_shims();
 function lower(value) {
   return (value ?? "").toLowerCase();
 }
-function canonicalJson4(value) {
+function canonicalJson3(value) {
   if (value === null) return "null";
   if (typeof value === "string" || typeof value === "boolean") return JSON.stringify(value);
   if (typeof value === "number") {
     if (!Number.isFinite(value)) throw new Error("response schema digest requires finite numbers");
     return JSON.stringify(value);
   }
-  if (Array.isArray(value)) return `[${value.map(canonicalJson4).join(",")}]`;
+  if (Array.isArray(value)) return `[${value.map(canonicalJson3).join(",")}]`;
   if (typeof value === "object") {
     const record = value;
     return `{${Object.keys(record).sort().map((key) => {
       if (record[key] === void 0) throw new Error("response schema digest cannot contain undefined");
-      return `${JSON.stringify(key)}:${canonicalJson4(record[key])}`;
+      return `${JSON.stringify(key)}:${canonicalJson3(record[key])}`;
     }).join(",")}}`;
   }
   throw new Error(`response schema digest cannot represent ${typeof value}`);
 }
 function canonicalResponseSchemaDigest(schema) {
-  return createHash12("sha256").update(canonicalJson4(schema), "utf8").digest("hex");
+  return createHash10("sha256").update(canonicalJson3(schema), "utf8").digest("hex");
 }
 function typedValidationFactsFromToolStats(toolStats) {
   return toolStats.filter((stat) => stat.tool === "verify" && stat.count > 0).map((stat) => ({
     sourceId: "tool:verify",
-    validatorDigest: createHash12("sha256").update(canonicalJson4(stat), "utf8").digest("hex"),
+    validatorDigest: createHash10("sha256").update(canonicalJson3(stat), "utf8").digest("hex"),
     passed: stat.ok === stat.count && stat.errors === 0 && stat.blocked === 0
   }));
 }
@@ -15610,38 +15655,36 @@ export {
   createStdioServerTransport,
   ACP_USAGE_META_KEY,
   ACP_SESSION_META_KEY,
+  ACP_AGENT_META_KEY,
   ACP_MAX_STRING_BYTES,
   ACP_MAX_RAW_RECORD_BYTES,
   ACP_MAX_CHUNK_BYTES,
   ACP_MAX_TOOL_CALL_ID_BYTES,
-  sha256,
-  canonicalJson2 as canonicalJson,
   compile,
   compileWorker,
-  WORKER_OUTPUT_MAX_BYTES,
-  durableAssistantTextFromEvent,
   setCapacityDraining,
   capacityDrain,
+  capacityLeaseUsage,
   openAgentLedger,
   renderAgentLedgerBoard,
   closeAgentLedger,
   renderDispatchReviewerTask,
   createRunReceiptQuality,
   UNVERIFIABLE_RECEIPT_VERIFICATION,
-  decideReviewGate,
-  parseCompeteGateResult,
-  stagePendingGateOutput,
-  stagePendingGateDecision,
-  resolvePendingGateDecision,
-  materializePendingGateDecision,
-  finalizePendingGateDecision,
-  readPendingGateDecisions,
-  preflightPendingGateDecisionMaterialization,
-  preparePendingGateDecisionRecovery,
-  readGateDecisionArtifacts,
+  assistantTextFromEvent,
+  receiptResponseModelIdObservationLabel,
+  createDispatchRunEventRegistry,
   readFleetRun,
+  listFleetRuns,
   openLedger,
   executePlan,
+  aggregateCostAmounts,
+  formatCostAggregate,
+  COST_NOT_MEASURED,
+  costAggregateForAmount,
+  renderCostAggregate,
+  renderCostAmount,
+  createCostTracker,
   planFleetResume,
   executeFleetRun,
   DispatchDomainModule,
@@ -15649,14 +15692,16 @@ export {
   extractRunProvenance,
   provenanceTranscriptLines,
   provenanceCompactSuffix,
+  EVIDENCE_TAGS,
   FAILURE_CAUSE_TAGS,
   evidenceDirectory,
   EvidenceNotFoundError,
   inspectEvidence,
+  loadEvidenceTrustStatus,
   loadEvidenceRunProvenance,
   listEvidenceOverviews,
   buildEvidence,
   summarizeEvalResults,
   buildEvalEvidence
 };
-//# sourceMappingURL=chunk-TLQJPP24.js.map
+//# sourceMappingURL=chunk-BUMFYQFY.js.map