@iowarp/clio-coder 0.3.9 → 0.4.0

package/dist/{chunk-TEO2TLVN.js → chunk-BUMFYQFY.js}

@@ -1,4 +1,12 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  decideReviewGate,
+  materializePendingGateDecision,
+  readGateDecisionArtifacts,
+  readGateDecisionArtifactsForRunIds,
+  stagePendingGateDecision,
+  verifyGateDecisionArtifact
+} from "./chunk-X75E3D2N.js";
 import {
   RUN_RECEIPT_INTEGRITY_ALGORITHM,
   RUN_RECEIPT_INTEGRITY_VERSION,
@@ -10,24 +18,20 @@ import {
   inspectRunReceiptTrustStatus,
   isReceiptIntegrity,
   isTrustStatusIdentifier,
-  loadEvalArtifact,
   normalizeTrustStatus,
-  parseEvalArtifactV4,
-  redactArtifactForStorage,
   retiredIntegrityVersionOf,
   sha256,
-  sumEvalHarnessMetrics,
   trustVerdict,
   verifyReceiptIntegrity,
   withReceiptIntegrity
-} from "./chunk-MLOK6ZOS.js";
+} from "./chunk-B7OBL7PK.js";
 import {
   protectedArtifactFromSessionEntry,
   protectedArtifactStateFromSessionEntries,
   readAuditRows,
   readSessionEntriesForId,
   responseModelIdObservationFromRecord
-} from "./chunk-LXPJXFM5.js";
+} from "./chunk-QREDIESB.js";
 import {
   applyTaskWorktree,
   captureWorkspaceSnapshot,
@@ -35,19 +39,32 @@ import {
   createTaskWorktree,
   createWriteBoundaryEnforcer,
   gitCheckoutRoot
-} from "./chunk-ECUO3KDP.js";
+} from "./chunk-U77AMWDL.js";
 import {
   executionPlanAncestors,
   spliceExecutionPlan
-} from "./chunk-HKO36JWF.js";
+} from "./chunk-QBJA7R7N.js";
 import {
   parseRigorOverride,
   resolveRigor
 } from "./chunk-RVG5JXAL.js";
 import {
-  FLEET_COMMAND_BASE_ENV,
-  normalizeWriteBoundary
-} from "./chunk-HPCTNZM2.js";
+  loadEvalArtifact,
+  parseEvalArtifactV4,
+  redactArtifactForStorage,
+  sumEvalHarnessMetrics
+} from "./chunk-NHLBIGRH.js";
+import {
+  defaultRunEventJournal,
+  removeRunEventJournals
+} from "./chunk-IQ7KR472.js";
+import {
+  AdmissionCanceledError,
+  EVENT_TEE_LIMIT,
+  createWorkerOutputCapture,
+  durableAssistantTextFromEvent,
+  startDispatchEventPump
+} from "./chunk-T56WDKA5.js";
 import {
   LOCAL_NODE_ID,
   computeSettingsFingerprint,
@@ -58,9 +75,14 @@ import {
   receiptAttestationFields,
   routeFactVerdict,
   spawnNativeWorker
-} from "./chunk-5HFBWUMU.js";
+} from "./chunk-QLFS5GO2.js";
+import {
+  FLEET_COMMAND_BASE_ENV,
+  normalizeWriteBoundary
+} from "./chunk-CTJ4RNAA.js";
 import {
   AGENT_LEDGER_PROMPT_MAX_CHARS,
+  COUNCIL_MIN_MEMBERS,
   RETRYABLE_OUTCOMES,
   UnsupportedResponseSchemaError,
   WORKER_EXIT_PERMISSION_REQUIRED,
@@ -70,24 +92,23 @@ import {
   agentRoleReadinessReport,
   agentRouteCandidates,
   antigravitySubprocessConfigForAutonomy,
-  applyToolProfile,
   approvedRouteCandidates,
   assertApprovedAssignmentRoute,
   assertApprovedRecoveryCapability,
-  assertToolProfileEnforceable,
   claimConflicts,
   classifyAgentTask,
   claudeSubprocessPermissionConfigForAutonomy,
   competeStanceLiner,
   createRunEffectsRecorder,
+  declaredScopeIntent,
   declaredScopeReplacementDiagnostic,
   declaredScopeReplacementNotice,
-  describeCallAction,
   isBoundedGateRolePrompt,
   isClaudeCanonicalTool,
   isResponseSchemaRejection,
   isRunOutcomeCode,
   networkToolsDisabled,
+  nodeResultContractFilesystem,
   projectExecutionHandoffs,
   renderAgentLedger,
   resolveDispatchPathScope,
@@ -98,7 +119,7 @@ import {
   serializeWorkerRuntimeDescriptor,
   toolPromptHintsForNames,
   validateJobSpec
-} from "./chunk-4H6ULJ3H.js";
+} from "./chunk-J4W7KFM7.js";
 import {
   decideRoute,
   defaultRoutingIntent,
@@ -116,7 +137,20 @@ import {
   routingIntentRejection,
   sameRouteIdentity,
   toRouteCandidate
-} from "./chunk-VPTUJU4P.js";
+} from "./chunk-SJ5ZKQ4S.js";
+import {
+  assessFinishContract
+} from "./chunk-GKF55TAZ.js";
+import {
+  WRITE_ROOT_REFUSED_TOOLS
+} from "./chunk-32KWKNSF.js";
+import {
+  describeCallAction
+} from "./chunk-TVHHYFHE.js";
+import {
+  applyToolProfile,
+  assertToolProfileEnforceable
+} from "./chunk-42FMPA75.js";
 import {
   appliesRecipeResultContract,
   gateRouteCorrelation,
@@ -126,14 +160,30 @@ import {
   withAttemptRole
 } from "./chunk-H7IXIC72.js";
 import {
-  assessFinishContract
-} from "./chunk-7C6RYZGQ.js";
+  compareCodepoints
+} from "./chunk-5LXZXPKX.js";
 import {
-  WRITE_ROOT_REFUSED_TOOLS
-} from "./chunk-N3PBVRTZ.js";
+  DEFAULT_AUTONOMY_LEVEL,
+  autonomyDenyRejection,
+  isSkillActivation,
+  mapAutonomy
+} from "./chunk-RAPCMZL4.js";
 import {
-  compareCodepoints
-} from "./chunk-A2NJGIB3.js";
+  createRedactionTally,
+  redactSecretsDeep,
+  redactSecretsText
+} from "./chunk-4BJ5BYCE.js";
+import {
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
+import {
+  canonicalJson,
+  endpointIdentityHash,
+  parseAgentLedgerBody
+} from "./chunk-CMZWFGD2.js";
+import {
+  pathBoundaryCovers
+} from "./chunk-HHV2GANA.js";
 import {
   agentSpecFingerprint,
   assertAgentSpecPolicy,
@@ -141,78 +191,61 @@ import {
   isUserVisibleAgent,
   normalizeAgentSpec,
   parseJsonObjectPayload,
-  parseVerifierResult,
-  pathBoundaryCovers,
   resolveAgentToolCompatibility,
   resultContractAuthorship,
   validateRecipeResult
-} from "./chunk-S4COXYBG.js";
+} from "./chunk-DYJP44XW.js";
 import {
   detectValidationCommand
-} from "./chunk-MV3K5QF2.js";
-import {
-  DEFAULT_AUTONOMY_LEVEL,
-  autonomyDenyRejection,
-  isSkillActivation,
-  mapAutonomy
-} from "./chunk-RAPCMZL4.js";
+} from "./chunk-GCSMB2KY.js";
 import {
   isProjectVerifierCheckId,
   isVerificationScriptName
 } from "./chunk-UL3WSD3F.js";
-import {
-  createRedactionTally,
-  redactSecretsDeep,
-  redactSecretsText
-} from "./chunk-4BJ5BYCE.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
-import {
-  canonicalJson,
-  endpointIdentityHash,
-  parseAgentLedgerBody
-} from "./chunk-CMZWFGD2.js";
-import {
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
 import {
   ToolNames,
   isBuiltinToolName
-} from "./chunk-CGKSTWHD.js";
+} from "./chunk-K6BSR66V.js";
 import {
   canonicalizeWireModelId,
-  endpointCapacitiesForStatuses,
+  endpointCapacityFor,
   endpointCapacityForStatus,
   endpointLabel,
   firstRuntimeResolutionError,
   foregroundStreamUsage,
   isDispatchEligibleRuntime,
+  normalizeCostProvenance,
+  resolveEndpointCapacities,
   resolveModelCapabilities,
   resolveRuntimeTarget,
   runtimeResolutionWarnings,
   runtimeTargetSnapshot
-} from "./chunk-MIX5N5AC.js";
+} from "./chunk-DQITNCXG.js";
 import {
   ceilChars
-} from "./chunk-AEYBF3TB.js";
+} from "./chunk-UM7N4G5A.js";
+import {
+  BusChannels
+} from "./chunk-HLW2MRKE.js";
+import {
+  atomicWrite
+} from "./chunk-76ONBSIA.js";
+import {
+  assertSafeId
+} from "./chunk-R346GLFC.js";
 import {
   attributeCommitMessage,
   gitCommitAttributionEnabled,
   reportCommitAttributionDiagnostic,
   withManagedGitCommitAttributionEnvironment
-} from "./chunk-B5CSFE7B.js";
+} from "./chunk-BBVJUZHB.js";
 import {
   MAX_TIMER_DELAY_MS,
   rawDurationMs
 } from "./chunk-FQ4SKYE4.js";
-import {
-  BusChannels
-} from "./chunk-RKRLDWD3.js";
-import {
-  assertSafeId,
-  atomicWrite
-} from "./chunk-KV2AOLDF.js";
 import {
   AI_AGENT_NAME
 } from "./chunk-6EJMN2Y3.js";
@@ -226,14 +259,14 @@ import {
   DEFAULT_DELEGATION_TURN_TIMEOUT_MS,
   DEFAULT_SETTINGS,
   THINKING_LEVELS
-} from "./chunk-XDOQXGFO.js";
+} from "./chunk-GXNLGKAB.js";
 import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
 } from "./chunk-4ZG3XFUR.js";
 import {
   targetRequiresAuth
-} from "./chunk-EQ63NRB7.js";
+} from "./chunk-BBVYXMFO.js";
 import {
   FILE_LOCK_ACQUIRE_TIMEOUT_MS,
   withStateFileLock,
@@ -248,7 +281,7 @@ import {
   clioDataDir,
   clioStateDir,
   stateRootRemoved
-} from "./chunk-BNAZZHFG.js";
+} from "./chunk-BYP5D4HI.js";
 import {
   resolveEffectivePricing
 } from "./chunk-VO2LKSTM.js";
@@ -409,8 +442,8 @@ var StdioJsonRpcTransport = class {
   constructor(command, args, options = {}) {
     this.terminationGraceMs = boundedMilliseconds(options.terminationGraceMs, 500);
     this.terminationWaitMs = boundedMilliseconds(options.terminationWaitMs, 2e3);
-    this.childClosePromise = new Promise((resolve5) => {
-      this.resolveChildClose = resolve5;
+    this.childClosePromise = new Promise((resolve4) => {
+      this.resolveChildClose = resolve4;
     });
     const childEnvironment = options.env ? { ...process.env, ...options.env } : process.env;
     const attribution = withManagedGitCommitAttributionEnvironment(childEnvironment, {
@@ -467,10 +500,10 @@ var StdioJsonRpcTransport = class {
     const requestTimeoutMs = validateRequestTimeout(method, timeoutMs);
     const id = this.nextId++;
     const message = { jsonrpc: "2.0", id, method, params };
-    const promise = new Promise((resolve5, reject) => {
+    const promise = new Promise((resolve4, reject) => {
       const pending = {
         method,
-        resolve: (value) => resolve5(value),
+        resolve: (value) => resolve4(value),
         reject
       };
       if (requestTimeoutMs !== void 0) {
@@ -657,9 +690,9 @@ var StdioJsonRpcTransport = class {
       if (remaining <= 0) return this.terminationObserved();
       const interval = Math.min(10, remaining);
       if (this.childHandlesClosed) {
-        await new Promise((resolve5) => setTimeout(resolve5, interval));
+        await new Promise((resolve4) => setTimeout(resolve4, interval));
       } else {
-        await Promise.race([this.childClosePromise, new Promise((resolve5) => setTimeout(resolve5, interval))]);
+        await Promise.race([this.childClosePromise, new Promise((resolve4) => setTimeout(resolve4, interval))]);
       }
     }
     return true;
@@ -724,10 +757,10 @@ var StreamJsonRpcPeerTransport = class {
     const requestTimeoutMs = validateRequestTimeout(method, timeoutMs);
     const id = this.nextId++;
     const message = { jsonrpc: "2.0", id, method, params };
-    const promise = new Promise((resolve5, reject) => {
+    const promise = new Promise((resolve4, reject) => {
       const pending = {
         method,
-        resolve: (value) => resolve5(value),
+        resolve: (value) => resolve4(value),
         reject
       };
       if (requestTimeoutMs !== void 0) {
@@ -891,162 +924,6 @@ function createStdioServerTransport(options = {}) {
   return new StreamJsonRpcPeerTransport(options);
 }
 
-// src/domains/dispatch/event-pump.ts
-init_esm_shims();
-var EVENT_TEE_LIMIT = 1024;
-function startDispatchEventPump(source, fold, options = {}) {
-  const limit = options.limit ?? EVENT_TEE_LIMIT;
-  const pending = [...options.prelude ?? []];
-  const waiters = [];
-  let finished = false;
-  let abandoned = false;
-  let dropped = 0;
-  const push = (value) => {
-    if (abandoned) return;
-    const waiter = waiters.shift();
-    if (waiter) {
-      waiter({ value, done: false });
-      return;
-    }
-    pending.push(value);
-    while (pending.length > limit) {
-      pending.shift();
-      dropped += 1;
-    }
-  };
-  const end = () => {
-    finished = true;
-    while (waiters.length > 0) {
-      waiters.shift()?.({ value: void 0, done: true });
-    }
-  };
-  const notify = (event) => {
-    try {
-      options.onEvent?.(event);
-    } catch (error) {
-      options.onError?.(error);
-    }
-  };
-  const done = (async () => {
-    try {
-      for (const event of options.prelude ?? []) notify(event);
-      for await (const event of source) {
-        try {
-          fold(event);
-        } catch (error) {
-          options.onError?.(error);
-        }
-        notify(event);
-        push(event);
-      }
-    } catch (error) {
-      options.onError?.(error);
-    } finally {
-      end();
-    }
-  })();
-  const events = {
-    next() {
-      if (pending.length > 0) {
-        return Promise.resolve({ value: pending.shift(), done: false });
-      }
-      if (finished || abandoned) return Promise.resolve({ value: void 0, done: true });
-      return new Promise((resolve5) => {
-        waiters.push(resolve5);
-      });
-    },
-    return() {
-      abandoned = true;
-      pending.length = 0;
-      while (waiters.length > 0) {
-        waiters.shift()?.({ value: void 0, done: true });
-      }
-      return Promise.resolve({ value: void 0, done: true });
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    }
-  };
-  return { events, done, droppedEvents: () => dropped };
-}
-var WORKER_OUTPUT_MAX_BYTES = 8192;
-var WORKER_OUTPUT_TRUNCATION_MARKER = "\n[worker output truncated]";
-function isRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function assistantTextFromContent(content) {
-  if (typeof content === "string") return content;
-  if (!Array.isArray(content)) return "";
-  return content.map((block) => {
-    if (typeof block === "string") return block;
-    if (!isRecord2(block)) return "";
-    return typeof block.text === "string" ? block.text : "";
-  }).join("");
-}
-function isDurableAssistantMessage(message) {
-  const stopReason = message.stopReason;
-  if (stopReason === "toolUse" || stopReason === "error" || stopReason === "aborted" || stopReason === "cancelled") {
-    return false;
-  }
-  if (!Array.isArray(message.content)) return true;
-  return !message.content.some((block) => isRecord2(block) && block.type === "toolCall");
-}
-function durableAssistantTextFromEvent(event) {
-  if (!isRecord2(event) || event.type !== "message_end" || !isRecord2(event.message)) return "";
-  if (event.message.role !== "assistant" || !isDurableAssistantMessage(event.message)) return "";
-  return assistantTextFromContent(event.message.content);
-}
-function boundedOutput(state, text) {
-  const bytes = Buffer.byteLength(text, "utf8");
-  const bounded = truncateUtf8(text, WORKER_OUTPUT_MAX_BYTES, WORKER_OUTPUT_TRUNCATION_MARKER);
-  return { state, text: bounded, bytes, truncated: bounded !== text };
-}
-function createWorkerOutputCapture() {
-  let finalText = null;
-  let partialText = "";
-  let partialBytes = 0;
-  let partialStored = 0;
-  return {
-    observe(event) {
-      if (!isRecord2(event)) return;
-      if (event.type === "message_end") {
-        const message = isRecord2(event.message) ? event.message : null;
-        partialText = "";
-        partialBytes = 0;
-        partialStored = 0;
-        if (message === null || message.role !== "assistant") return;
-        if (!isDurableAssistantMessage(message)) return;
-        const text = assistantTextFromContent(message.content).trim();
-        if (text.length > 0) finalText = text;
-        return;
-      }
-      if (event.type !== "message_update") return;
-      const assistantEvent = isRecord2(event.assistantMessageEvent) ? event.assistantMessageEvent : null;
-      if (assistantEvent === null || assistantEvent.type !== "text_delta") return;
-      const delta = assistantEvent.delta;
-      if (typeof delta !== "string" || delta.length === 0) return;
-      partialBytes += Buffer.byteLength(delta, "utf8");
-      if (partialStored < WORKER_OUTPUT_MAX_BYTES) {
-        partialText += delta;
-        partialStored += Buffer.byteLength(delta, "utf8");
-      }
-    },
-    snapshot() {
-      if (partialBytes > 0 && partialText.trim().length > 0) {
-        const bounded = truncateUtf8(partialText.trim(), WORKER_OUTPUT_MAX_BYTES, WORKER_OUTPUT_TRUNCATION_MARKER);
-        return {
-          state: "partial",
-          text: bounded,
-          bytes: partialBytes,
-          truncated: bounded !== partialText.trim() || partialBytes > partialStored
-        };
-      }
-      if (finalText !== null) return boundedOutput("final", finalText);
-      return void 0;
-    }
-  };
-}
-
 // src/domains/dispatch/capacity-lease.ts
 init_esm_shims();
 import { randomBytes } from "node:crypto";
@@ -1186,6 +1063,11 @@ function describeEndpointCapacityHolders(holders) {
   const total = holders.leases + holders.reservations + holders.foregroundStreams;
   return `${named} ${total === 1 ? "holds" : "hold"} ${total === 1 ? "the slot" : "the slots"}`;
 }
+function endpointCapacityRemedy(input) {
+  const ways = "set this target's maxConcurrentRequests to the slot count the server was started with, collect in-flight runs, or point workers at a second server";
+  if (input?.rosterFloor === void 0) return `reduce the same-wave worker count, ${ways}`;
+  return `a council runs its whole roster in one wave and cannot go below ${input.rosterFloor} members, so ${ways}`;
+}
 function assertCapacity(file, nodeId, endpointKey, limits) {
   const held2 = heldReservationUsage(file.reservations);
   const globalUsed = file.leases.length + held2.global;
@@ -1214,7 +1096,7 @@ function assertCapacity(file, nodeId, endpointKey, limits) {
       const used = holders.leases + holders.reservations + holders.foregroundStreams;
       if (used >= endpointLimit)
         throw new Error(
-          `dispatch: admission denied: endpoint '${endpointLabel(endpointKey)}' capacity reached (${used}/${endpointLimit} slots): ${describeEndpointCapacityHolders(holders)}; collect in-flight runs or point workers at a second server`
+          `dispatch: admission denied: endpoint '${endpointLabel(endpointKey)}' capacity reached (${used}/${endpointLimit} slots): ${describeEndpointCapacityHolders(holders)}; ${endpointCapacityRemedy()}`
         );
     }
   }
@@ -1548,7 +1430,7 @@ function renderDispatchReviewerTask(originalTask, builderRunId, cycle, intent) {
 
 // src/domains/dispatch/receipt-findings.ts
 init_esm_shims();
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 
 // src/domains/evidence/index.ts
 init_esm_shims();
@@ -1556,15 +1438,15 @@ init_esm_shims();
 // src/domains/evidence/build.ts
 init_esm_shims();
 import { mkdir, readFile as readFile2, writeFile } from "node:fs/promises";
-import { join as join17 } from "node:path";
+import { join as join16 } from "node:path";
 
 // src/domains/dispatch/index.ts
 init_esm_shims();
 
 // src/domains/dispatch/extension.ts
 init_esm_shims();
-import { createHash as createHash8, randomBytes as randomBytes6 } from "node:crypto";
-import { existsSync as existsSync12, readdirSync as readdirSync4, readFileSync as readFileSync12 } from "node:fs";
+import { createHash as createHash7, randomBytes as randomBytes5 } from "node:crypto";
+import { readdirSync as readdirSync4, readFileSync as readFileSync11 } from "node:fs";
 import { isAbsolute as isAbsolute2, relative, resolve as resolvePath, sep } from "node:path";
 import { performance as performance5 } from "node:perf_hooks";
 
@@ -1575,20 +1457,20 @@ import { performance as performance4 } from "node:perf_hooks";
 // src/engine/acp/event-mapper.ts
 init_esm_shims();
 import { performance as performance2 } from "node:perf_hooks";
-function isRecord3(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function textFromContent(value) {
   if (typeof value === "string") return value;
-  if (!isRecord3(value)) return "";
+  if (!isRecord2(value)) return "";
   if (value.type === "text" && typeof value.text === "string") return value.text;
-  if (isRecord3(value.content)) return textFromContent(value.content);
+  if (isRecord2(value.content)) return textFromContent(value.content);
   return "";
 }
 function toolContentText(value) {
   if (typeof value === "string") return value;
   if (Array.isArray(value)) return value.map(toolContentText).filter(Boolean).join("\n");
-  if (!isRecord3(value)) return "";
+  if (!isRecord2(value)) return "";
   const direct = textFromContent(value);
   if (direct.length > 0) return direct;
   return "";
@@ -1611,8 +1493,8 @@ var AcpEventMapper = class {
   /** Tool-call id to its `performance.now()` start mark; spans only, never an instant. */
   toolStarts = /* @__PURE__ */ new Map();
   mapUpdate(params) {
-    const record = isRecord3(params) ? params : {};
-    const update = isRecord3(record.update) ? record.update : {};
+    const record = isRecord2(params) ? params : {};
+    const update = isRecord2(record.update) ? record.update : {};
     const kind = typeof update.sessionUpdate === "string" ? update.sessionUpdate : "";
     if (kind === "agent_message_chunk" || kind === "user_message_chunk") {
       const text = textFromContent(update.content);
@@ -1779,7 +1661,7 @@ var MOVE_DESTINATION_PATH_KEYS = [
   "new_path",
   "target"
 ];
-function isRecord4(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringField(record, ...keys) {
@@ -1913,7 +1795,7 @@ function extractLocationPaths(locations, cwd) {
   const paths = [];
   const errors = [];
   for (const value of locations) {
-    if (!isRecord4(value)) {
+    if (!isRecord3(value)) {
       errors.push("locations contains a non-object entry");
       continue;
     }
@@ -1928,11 +1810,11 @@ function extractLocationPaths(locations, cwd) {
   return { paths, provided: true, errors };
 }
 function mutationTargets(toolCall, kind, cwd) {
-  const rawInput = isRecord4(toolCall?.rawInput) ? toolCall.rawInput : {};
+  const rawInput = isRecord3(toolCall?.rawInput) ? toolCall.rawInput : {};
   const raw = extractRawMutationPaths(rawInput, kind, cwd);
   const locations = extractLocationPaths(toolCall?.locations, cwd);
   const errors = [...raw.errors, ...locations.errors];
-  if (toolCall?.rawInput !== void 0 && !isRecord4(toolCall.rawInput)) {
+  if (toolCall?.rawInput !== void 0 && !isRecord3(toolCall.rawInput)) {
     errors.push("rawInput must be an object");
   }
   if (raw.provided && locations.provided && !samePathSet(raw.paths, locations.paths)) {
@@ -2002,11 +1884,11 @@ function mapMutationToolCall(toolCall, kind, displayTool, cwd, metadataError) {
   };
 }
 function mapPathBearingToolCall(toolCall, tool, displayTool, cwd, targetRequired) {
-  const rawInput = isRecord4(toolCall?.rawInput) ? toolCall.rawInput : {};
+  const rawInput = isRecord3(toolCall?.rawInput) ? toolCall.rawInput : {};
   const raw = extractPathFields(rawInput, SINGLE_MUTATION_PATH_KEYS, MULTI_MUTATION_PATH_KEYS, cwd, "rawInput");
   const locations = extractLocationPaths(toolCall?.locations, cwd);
   const errors = [...raw.errors, ...locations.errors];
-  if (toolCall?.rawInput !== void 0 && !isRecord4(toolCall.rawInput)) errors.push("rawInput must be an object");
+  if (toolCall?.rawInput !== void 0 && !isRecord3(toolCall.rawInput)) errors.push("rawInput must be an object");
   if (raw.provided && locations.provided && !samePathSet(raw.paths, locations.paths)) {
     errors.push("rawInput and locations contain conflicting path targets");
   }
@@ -2027,7 +1909,7 @@ function mapPathBearingToolCall(toolCall, tool, displayTool, cwd, targetRequired
 }
 function mapToolCall(toolCall, cwd) {
   const kind = typeof toolCall?.kind === "string" ? toolCall.kind.toLowerCase() : "";
-  const rawInput = isRecord4(toolCall?.rawInput) ? toolCall.rawInput : {};
+  const rawInput = isRecord3(toolCall?.rawInput) ? toolCall.rawInput : {};
   const rawTool = stringField(rawInput, "tool", "toolName", "tool_name", "name");
   const title = typeof toolCall?.title === "string" ? toolCall.title : void 0;
   const displayTool = rawTool ?? kind ?? title ?? "unknown";
@@ -2131,9 +2013,9 @@ var AcpToolMediator = class {
   async handle(params) {
     const startedAt = performance3.now();
     this.requested += 1;
-    const parsed = isRecord4(params) ? params : {};
+    const parsed = isRecord3(params) ? params : {};
     const options = Array.isArray(parsed.options) ? parsed.options : [];
-    const toolCall = isRecord4(parsed.toolCall) ? parsed.toolCall : void 0;
+    const toolCall = isRecord3(parsed.toolCall) ? parsed.toolCall : void 0;
     const mapped = mapToolCall(toolCall, this.input.cwd);
     let decision = "denied";
     let reason;
@@ -2236,6 +2118,7 @@ var AcpToolMediator = class {
 init_esm_shims();
 var ACP_USAGE_META_KEY = "clio-coder/usage";
 var ACP_SESSION_META_KEY = "clio-coder/session";
+var ACP_AGENT_META_KEY = "clio-coder/agent";
 var ACP_MAX_STRING_BYTES = 4096;
 var ACP_MAX_RAW_RECORD_BYTES = 32768;
 var ACP_MAX_CHUNK_BYTES = 16384;
@@ -2254,7 +2137,7 @@ var AsyncEventQueue = class {
     const value = this.values.shift();
     if (value !== void 0) return Promise.resolve({ done: false, value });
     if (this.done) return Promise.resolve({ done: true, value: void 0 });
-    return new Promise((resolve5) => this.waiters.push(resolve5));
+    return new Promise((resolve4) => this.waiters.push(resolve4));
   }
   push(value) {
     if (this.done) return;
@@ -2274,22 +2157,22 @@ var AsyncEventQueue = class {
     }
   }
 };
-function isRecord5(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function sessionIdFrom(value) {
   if (typeof value === "string" && value.length > 0) return value;
-  if (!isRecord5(value)) return null;
+  if (!isRecord4(value)) return null;
   const sessionId = value.sessionId ?? value.id;
   return typeof sessionId === "string" && sessionId.length > 0 ? sessionId : null;
 }
 function supportsSessionClose(init) {
   const caps = init?.agentCapabilities;
-  if (!isRecord5(caps)) return false;
-  const meta = isRecord5(caps._meta) ? caps._meta[ACP_SESSION_META_KEY] : void 0;
-  if (isRecord5(meta) && meta.close === true) return true;
+  if (!isRecord4(caps)) return false;
+  const meta = isRecord4(caps._meta) ? caps._meta[ACP_SESSION_META_KEY] : void 0;
+  if (isRecord4(meta) && meta.close === true) return true;
   const sessionCaps = caps.sessionCapabilities;
-  return isRecord5(sessionCaps) && isRecord5(sessionCaps.close);
+  return isRecord4(sessionCaps) && isRecord4(sessionCaps.close);
 }
 function flattenPrompt(input) {
   const parts = [
@@ -2313,7 +2196,7 @@ function finite(value) {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
 }
 function mergeUsage(into, raw) {
-  if (!isRecord5(raw)) return;
+  if (!isRecord4(raw)) return;
   into.inputTokens += finite(raw.input) + finite(raw.inputTokens) + finite(raw.input_tokens);
   into.outputTokens += finite(raw.output) + finite(raw.outputTokens) + finite(raw.output_tokens);
   into.cacheReadTokens += finite(raw.cacheRead) + finite(raw.cacheReadTokens) + finite(raw.cache_read_tokens);
@@ -2459,7 +2342,7 @@ function startAcpDelegationRun(input) {
         },
         turnTimeoutMs
       );
-      const metaUsage = isRecord5(promptResponse?._meta) ? promptResponse._meta[ACP_USAGE_META_KEY] : void 0;
+      const metaUsage = isRecord4(promptResponse?._meta) ? promptResponse._meta[ACP_USAGE_META_KEY] : void 0;
       if (metaUsage !== void 0) {
         mergeUsage(usage, metaUsage);
       } else {
@@ -2977,8 +2860,8 @@ function createAssignmentEventStream(options = {}) {
         return Promise.resolve({ value: pending.shift(), done: false });
       }
       if (finished || abandoned) return Promise.resolve({ value: void 0, done: true });
-      return new Promise((resolve5) => {
-        waiters.push(resolve5);
+      return new Promise((resolve4) => {
+        waiters.push(resolve4);
       });
     },
     return() {
@@ -3082,10 +2965,10 @@ var AssignmentRegistry = class {
     const id = asAssignmentId(rootRunId);
     const existing = this.#assignments.get(id);
     if (existing) return this.#snapshot(existing);
-    let resolve5;
+    let resolve4;
     let reject;
     const terminal = new Promise((resolvePromise, rejectPromise) => {
-      resolve5 = resolvePromise;
+      resolve4 = resolvePromise;
       reject = rejectPromise;
     });
     const assignment = {
@@ -3100,7 +2983,7 @@ var AssignmentRegistry = class {
       outcomeDetail: null,
       terminal,
       stream: createAssignmentEventStream(this.#onStreamError !== void 0 ? { onError: this.#onStreamError } : {}),
-      resolve: resolve5,
+      resolve: resolve4,
       reject
     };
     this.#assignments.set(id, assignment);
@@ -3340,10 +3223,10 @@ function createAdmissionQueue(options) {
       const effectiveDeadline = Math.min(request.deadlineAt, request.queuedAt + options.finiteCeilingMs);
       if (!Number.isFinite(effectiveDeadline))
         return Promise.reject(new Error("dispatch: queued request requires a finite deadline"));
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve4, reject) => {
         const bounded = { ...request, deadlineAt: effectiveDeadline };
         const timer = setTimeout(() => remove(request.requestId, "timed_out"), Math.max(0, effectiveDeadline - now()));
-        entries.set(request.requestId, { request: bounded, resolve: resolve5, reject, timer });
+        entries.set(request.requestId, { request: bounded, resolve: resolve4, reject, timer });
       });
     },
     cancel(requestId) {
@@ -3407,7 +3290,8 @@ import { randomBytes as randomBytes2 } from "node:crypto";
 var MAX_RESERVATION_RECORDS = 500;
 var DEFAULT_RESERVATION_TTL_MS = 15 * 6e4;
 function endpointCapacityDenial(input) {
-  return `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' capacity exceeded (${input.used + input.requested}/${input.limit} slots): ${describeEndpointCapacityHolders(input)}; reduce the same-wave worker count, collect in-flight runs, or point workers at a second server`;
+  const remedy = endpointCapacityRemedy(input.topology === "council" ? { rosterFloor: COUNCIL_MIN_MEMBERS } : void 0);
+  return `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' capacity exceeded (${input.used + input.requested}/${input.limit} slots): ${describeEndpointCapacityHolders(input)}; ${remedy}`;
 }
 function copyRecord(record) {
   return { ...record, members: record.members.map((member) => ({ ...member })) };
@@ -3415,7 +3299,7 @@ function copyRecord(record) {
 function validRecord(value) {
   if (typeof value !== "object" || value === null) return false;
   const record = value;
-  return typeof record.ownerId === "string" && typeof record.ownerPid === "number" && Number.isInteger(record.ownerPid) && record.ownerPid > 0 && (record.topology === "parallel" || record.topology === "detached" || record.topology === "sequential" || record.topology === "pipeline" || record.topology === "review" || record.topology === "compete") && (record.status === "active" || record.status === "released" || record.status === "rolled_back" || record.status === "expired") && typeof record.createdAt === "string" && typeof record.expiresAt === "string" && (record.settledAt === null || typeof record.settledAt === "string") && Array.isArray(record.members) && record.members.every(
+  return typeof record.ownerId === "string" && typeof record.ownerPid === "number" && Number.isInteger(record.ownerPid) && record.ownerPid > 0 && (record.topology === "parallel" || record.topology === "detached" || record.topology === "sequential" || record.topology === "pipeline" || record.topology === "review" || record.topology === "compete" || record.topology === "council") && (record.status === "active" || record.status === "released" || record.status === "rolled_back" || record.status === "expired") && typeof record.createdAt === "string" && typeof record.expiresAt === "string" && (record.settledAt === null || typeof record.settledAt === "string") && Array.isArray(record.members) && record.members.every(
     (member) => typeof member.memberId === "string" && Number.isInteger(member.wave) && typeof member.nodeId === "string" && (member.endpointKey === void 0 || typeof member.endpointKey === "string") && typeof member.costUpperBoundUsd === "number" && Number.isFinite(member.costUpperBoundUsd) && member.costUpperBoundUsd >= 0 && (member.status === "held" || member.status === "consumed" || member.status === "released") && (member.consumedAt === null || typeof member.consumedAt === "string") && (member.releasedAt === null || typeof member.releasedAt === "string")
   );
 }
@@ -3469,7 +3353,7 @@ function outstandingTasks(record) {
 function outstandingBudget(record) {
   return record.members.filter((member) => member.status === "held" || member.status === "consumed").reduce((sum, member) => sum + member.costUpperBoundUsd, 0);
 }
-function allocateReservation(tasks, existing, capacity) {
+function allocateReservation(tasks, existing, capacity, topology) {
   if (tasks.length === 0) return { ok: false, reason: "reservation requires at least one task" };
   const duplicate = tasks.find((task, index) => tasks.slice(0, index).some((entry) => entry.memberId === task.memberId));
   if (duplicate) return { ok: false, reason: `duplicate reservation member '${duplicate.memberId}'` };
@@ -3507,7 +3391,8 @@ function allocateReservation(tasks, existing, capacity) {
           requested: slots,
           leases: endpoint.leases ?? endpoint.active - (endpoint.foregroundStreams ?? 0),
           reservations: heldSlots,
-          foregroundStreams: endpoint.foregroundStreams ?? 0
+          foregroundStreams: endpoint.foregroundStreams ?? 0,
+          ...topology === void 0 ? {} : { topology }
         })
       };
     }
@@ -3535,7 +3420,7 @@ function createDispatchReservation(input) {
         `dispatch: reservation denied: capacity is draining (requested by pid ${drain.requestedByPid} at ${drain.requestedAt})`
       );
     }
-    const planned = allocateReservation(input.tasks, records, input.capacity);
+    const planned = allocateReservation(input.tasks, records, input.capacity, input.topology);
     if (!planned.ok) {
       replaceReservations(state, records);
       writeCapacityStateUnsafe(state);
@@ -3802,7 +3687,12 @@ function describeAdmissionFailure(input) {
     if (endpointLimit !== void 0 && endpointActive >= endpointLimit) {
       const holders = input.usage.endpointHolders?.[input.endpointKey];
       const occupancy = holders === void 0 ? "the supplied capacity snapshot does not attribute the occupied slots" : describeEndpointCapacityHolders(holders);
-      return `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' capacity reached (${endpointActive}/${endpointLimit} slots): ${occupancy}; collect in-flight runs or point workers at a second server`;
+      const queued2 = input.queueDepth > 0 ? `, ${input.queueDepth} more queued` : "";
+      return [
+        `dispatch: admission timed out after ${Math.round(input.waitedMs)}ms waiting for an endpoint slot`,
+        ` on '${endpointLabel(input.endpointKey)}' (${endpointActive}/${endpointLimit} slots${queued2}): ${occupancy}.`,
+        " Wait for the running request to settle or dispatch this work again."
+      ].join("");
     }
   }
   const nodeLimit = input.limits.nodes[input.nodeId];
@@ -3846,10 +3736,6 @@ function createCapacityAdmissionController(options) {
           admittedLease = request.value();
           return true;
         } catch (error) {
-          if (error instanceof Error && /endpoint '.*' capacity reached/u.test(error.message)) {
-            queue.fail(request.requestId, error);
-            return false;
-          }
           if (error instanceof Error && /capacity reached/.test(error.message)) return false;
           queue.fail(request.requestId, error instanceof Error ? error : new Error(String(error)));
           return false;
@@ -3914,18 +3800,18 @@ function createCapacityAdmissionController(options) {
         pumpNow();
         const outcome = await outcomePromise;
         if (outcome.state !== "admitted") {
-          throw new Error(
-            describeAdmissionFailure({
-              state: outcome.state,
-              nodeId: input.nodeId,
-              ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
-              waitedMs: now() - queuedAt,
-              overdueAtQueueMs: queuedAt - input.deadlineAt,
-              queueDepth: queue.size(),
-              limits: options.limits(),
-              usage: options.usage?.() ?? capacityLeaseUsage({ nowMs: now() })
-            })
-          );
+          const detail = describeAdmissionFailure({
+            state: outcome.state,
+            nodeId: input.nodeId,
+            ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
+            waitedMs: now() - queuedAt,
+            overdueAtQueueMs: queuedAt - input.deadlineAt,
+            queueDepth: queue.size(),
+            limits: options.limits(),
+            usage: options.usage?.() ?? capacityLeaseUsage({ nowMs: now() })
+          });
+          if (outcome.state === "canceled") throw new AdmissionCanceledError(detail);
+          throw new Error(detail);
         }
         const lease = acquired.get(input.assignmentId);
         if (!lease) throw new Error("dispatch: admitted request has no capacity lease");
@@ -5737,697 +5623,46 @@ function collectReproducibilityMetadata(cwd, safety) {
       commit,
       dirty: dirtyEntries === null ? null : dirtyEntries > 0,
       dirtyEntries,
-      statusHash: status === null ? null : sha2564(status)
-    },
-    safetyPolicy: {
-      version: safety?.version ?? 1,
-      rulePackHash: safety?.rulePackHash ?? null,
-      rulePackVersion: safety?.rulePackVersion ?? null,
-      projectPolicyPath: safety?.projectPolicyPath ?? null,
-      projectPolicyHash: safety?.projectPolicyHash ?? null,
-      projectPolicyValid: safety?.projectPolicyValid ?? null
-    }
-  };
-}
-function git(cwd, args) {
-  const result = spawnSync("git", [...args], {
-    cwd,
-    encoding: "utf8",
-    timeout: 1e3,
-    stdio: ["ignore", "pipe", "ignore"]
-  });
-  if (result.status !== 0 || typeof result.stdout !== "string") return null;
-  const trimmed = result.stdout.trim();
-  return trimmed.length > 0 ? trimmed : null;
-}
-function sha2564(input) {
-  return createHash5("sha256").update(input, "utf8").digest("hex");
-}
-
-// src/domains/dispatch/route-observer.ts
-init_esm_shims();
-import { appendFileSync, existsSync as existsSync10, mkdirSync as mkdirSync5, readdirSync as readdirSync3, readFileSync as readFileSync10, renameSync as renameSync4, statSync } from "node:fs";
-import { join as join12 } from "node:path";
-
-// src/domains/dispatch/gate-decisions.ts
-init_esm_shims();
-import { createHash as createHash6, randomBytes as randomBytes4 } from "node:crypto";
-import { closeSync, existsSync as existsSync8, fsyncSync, mkdirSync as mkdirSync4, openSync, readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync } from "node:fs";
-import { dirname as dirname3, join as join10, resolve as resolve4 } from "node:path";
-function parseReviewGateResult(output) {
-  const result = parseVerifierResult(output);
-  return result === null ? { ok: false, reason: "reviewer did not return a valid verifier report" } : { ok: true, result };
-}
-function decideReviewGate(input) {
-  const base = {
-    group: input.group,
-    topology: "review",
-    cycle: input.cycle,
-    subjects: input.subjects,
-    decider: input.decider,
-    correlation: input.correlation
-  };
-  const parsed = parseReviewGateResult(input.output);
-  if (!parsed.ok) {
-    return {
-      draft: { ...base, outcome: "exhausted", detail: parsed.reason },
-      verdict: null,
-      findings: null,
-      needsDecision: `review gate produced no structured verdict in cycle ${input.cycle}: ${parsed.reason}`
-    };
-  }
-  if (parsed.result.verdict === "pass" || input.terminalCycle) {
-    return {
-      draft: { ...base, outcome: parsed.result.verdict },
-      verdict: parsed.result.verdict,
-      findings: null,
-      needsDecision: null
-    };
-  }
-  const failed = parsed.result.checks.filter((check) => !check.passed);
-  return {
-    draft: { ...base, outcome: "revise", detail: `reviewer reported ${failed.length} failed check(s)` },
-    verdict: null,
-    findings: JSON.stringify({ verdict: "fail", checks: failed }),
-    needsDecision: null
-  };
-}
-function parseGateChecks(value) {
-  if (!Array.isArray(value) || value.length === 0) return null;
-  const checks = [];
-  for (const entry of value) {
-    if (!isRecord6(entry)) return null;
-    const keys = Object.keys(entry);
-    if (keys.some((key) => key !== "name" && key !== "passed" && key !== "evidence") || typeof entry.name !== "string" || entry.name.trim().length === 0 || typeof entry.passed !== "boolean" || typeof entry.evidence !== "string" || entry.evidence.trim().length === 0) {
-      return null;
-    }
-    checks.push({ name: entry.name, passed: entry.passed, evidence: entry.evidence });
-  }
-  return checks;
-}
-function parseCompeteGateResult(output, candidateCount) {
-  const parsed = parseJsonObjectPayload(output);
-  if (!parsed.ok) {
-    return {
-      ok: false,
-      reason: parsed.reason === "not-object" ? "judge result must be a JSON object" : "judge result must be valid JSON"
-    };
-  }
-  const value = parsed.value;
-  if (Object.keys(value).some((key) => key !== "winner" && key !== "checks")) {
-    return { ok: false, reason: "judge result has unknown fields" };
-  }
-  const winner = value.winner;
-  if (typeof winner !== "number" || !Number.isSafeInteger(winner) || winner < 1 || winner > candidateCount) {
-    return { ok: false, reason: `judge winner must be an integer 1..${candidateCount}` };
-  }
-  const checks = parseGateChecks(value.checks);
-  if (checks === null) return { ok: false, reason: "judge result must carry typed checks with evidence" };
-  return { ok: true, result: { winner, checks } };
-}
-function decisionsDirectory(stateDir = clioStateDir()) {
-  return join10(stateDir, "gate-decisions");
-}
-function pendingDecisionsDirectory(stateDir = clioStateDir()) {
-  return join10(decisionsDirectory(stateDir), "pending");
-}
-function isRecord6(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function isSubjectRef(value) {
-  if (!isRecord6(value) || typeof value.runId !== "string" || value.runId.trim().length === 0) return false;
-  return typeof value.digest === "string" && /^[0-9a-f]{64}$/.test(value.digest);
-}
-function isSafeDecisionId(value) {
-  return typeof value === "string" && value.length > 0 && value.length <= 256 && /^[A-Za-z0-9._-]+$/.test(value);
-}
-function isCorrelation(value) {
-  if (!isRecord6(value)) return false;
-  const fields = ["agent", "target", "modelFamily", "runtime", "node", "independent"];
-  if (Object.keys(value).some((key) => !fields.includes(key))) return false;
-  if (!fields.every((field) => typeof value[field] === "boolean")) return false;
-  return value.independent === (!value.agent && !value.modelFamily);
-}
-function semanticError(value) {
-  if (!isRecord6(value)) return "gate decision is not an object";
-  if (value.version !== 2) return "unsupported gate decision version";
-  if (!isSafeDecisionId(value.id)) return "gate decision id invalid";
-  if (typeof value.group !== "string" || value.group.length === 0) return "gate decision group invalid";
-  if (value.topology !== "review" && value.topology !== "compete") return "gate decision topology invalid";
-  if (typeof value.cycle !== "number" || !Number.isInteger(value.cycle) || value.cycle < 1) {
-    return "gate decision cycle invalid";
-  }
-  const reviewOutcome = value.outcome === "pass" || value.outcome === "fail" || value.outcome === "revise" || value.outcome === "exhausted";
-  const competeOutcome = value.outcome === "winner" || value.outcome === "no-winner" || value.outcome === "operator-confirmed" || value.outcome === "full-auto-applied";
-  if (value.topology === "review" && !reviewOutcome || value.topology === "compete" && !competeOutcome) {
-    return "gate decision outcome is incompatible with topology";
-  }
-  if (!Array.isArray(value.subjects) || value.subjects.length === 0 || !value.subjects.every(isSubjectRef)) {
-    return "gate decision subjects invalid";
-  }
-  if (value.decider !== void 0 && !isSubjectRef(value.decider)) return "gate decision decider invalid";
-  if (value.decider === void 0) {
-    if (value.correlation !== void 0) return "gate decision correlation requires a decider";
-  } else if (!isCorrelation(value.correlation)) {
-    return "gate decision correlation invalid";
-  }
-  if (typeof value.createdAt !== "string" || !Number.isFinite(Date.parse(value.createdAt))) {
-    return "gate decision timestamp invalid";
-  }
-  const needsWinner = value.outcome === "winner" || value.outcome === "operator-confirmed" || value.outcome === "full-auto-applied";
-  if (needsWinner) {
-    if (!isRecord6(value.winner) || typeof value.winner.index !== "number" || !Number.isInteger(value.winner.index) || value.winner.index < 1 || !isSubjectRef(value.winner.subject) || typeof value.winner.branch !== "string" || value.winner.branch !== `clio/compete/${value.group}/${value.winner.index}`) {
-      return "gate decision winner invalid";
-    }
-    const winnerSubject = value.winner.subject;
-    if (!value.subjects.some((subject) => subject.runId === winnerSubject.runId)) {
-      return "gate decision winner is not a subject";
-    }
-  } else if (value.winner !== void 0) {
-    return "gate decision winner is not valid for this outcome";
-  }
-  const needsConfirmation = value.outcome === "operator-confirmed" || value.outcome === "full-auto-applied";
-  if (needsConfirmation) {
-    if (!isRecord6(value.confirmation) || typeof value.confirmation.id !== "string" || value.confirmation.id.length === 0 || typeof value.confirmation.digest !== "string" || !/^[0-9a-f]{64}$/.test(value.confirmation.digest)) {
-      return "gate decision confirmation invalid";
-    }
-  } else if (value.confirmation !== void 0) {
-    return "gate decision confirmation is not valid for this outcome";
-  }
-  if (value.detail !== void 0 && typeof value.detail !== "string") return "gate decision detail invalid";
-  if (!isRecord6(value.integrity) || value.integrity.algorithm !== "sha256" || typeof value.integrity.digest !== "string") {
-    return "gate decision integrity invalid";
-  }
-  return null;
-}
-function safeGroup(group) {
-  const safe = group.replace(/[^A-Za-z0-9._-]/g, "_").slice(0, 128);
-  return safe.length > 0 ? safe : "gate";
-}
-function newDecisionId(group) {
-  return `${safeGroup(group)}-${Date.now().toString(36)}-${randomBytes4(6).toString("hex")}`;
-}
-function decisionArtifactPath(id, stateDir = clioStateDir()) {
-  return join10(decisionsDirectory(stateDir), `${id}.json`);
-}
-function pendingDecisionPath(id, stateDir = clioStateDir()) {
-  return join10(pendingDecisionsDirectory(stateDir), `${id}.json`);
-}
-function decisionPayload(decision) {
-  return {
-    contract: "clio.gateDecision.integrity",
-    version: decision.version,
-    id: decision.id,
-    group: decision.group,
-    topology: decision.topology,
-    cycle: decision.cycle,
-    outcome: decision.outcome,
-    subjects: decision.subjects.map((subject) => ({ runId: subject.runId, digest: subject.digest })),
-    ...decision.decider !== void 0 ? { decider: { runId: decision.decider.runId, digest: decision.decider.digest } } : {},
-    ...decision.correlation !== void 0 ? { correlation: { ...decision.correlation } } : {},
-    ...decision.winner !== void 0 ? {
-      winner: {
-        index: decision.winner.index,
-        subject: {
-          runId: decision.winner.subject.runId,
-          digest: decision.winner.subject.digest
-        },
-        branch: decision.winner.branch
-      }
-    } : {},
-    ...decision.confirmation !== void 0 ? { confirmation: { id: decision.confirmation.id, digest: decision.confirmation.digest } } : {},
-    ...decision.detail !== void 0 ? { detail: decision.detail } : {},
-    createdAt: decision.createdAt
-  };
-}
-function decisionDigest(decision) {
-  return createHash6("sha256").update(JSON.stringify(decisionPayload(decision)), "utf8").digest("hex");
-}
-function artifactWithoutIntegrity(artifact) {
-  const result = {
-    version: artifact.version,
-    id: artifact.id,
-    group: artifact.group,
-    topology: artifact.topology,
-    cycle: artifact.cycle,
-    outcome: artifact.outcome,
-    subjects: artifact.subjects.map((subject) => ({ ...subject })),
-    createdAt: artifact.createdAt
-  };
-  if (artifact.decider !== void 0) result.decider = { ...artifact.decider };
-  if (artifact.correlation !== void 0) result.correlation = { ...artifact.correlation };
-  if (artifact.winner !== void 0) {
-    result.winner = {
-      index: artifact.winner.index,
-      subject: { ...artifact.winner.subject },
-      branch: artifact.winner.branch
-    };
-  }
-  if (artifact.confirmation !== void 0) result.confirmation = { ...artifact.confirmation };
-  if (artifact.detail !== void 0) result.detail = artifact.detail;
-  return result;
-}
-function verifyGateDecisionArtifact(artifact) {
-  const invalid = semanticError(artifact);
-  if (invalid !== null) return { ok: false, reason: invalid };
-  if (!/^[0-9a-f]{64}$/.test(artifact.integrity.digest)) return { ok: false, reason: "gate decision integrity invalid" };
-  return decisionDigest(artifactWithoutIntegrity(artifact)) === artifact.integrity.digest ? { ok: true } : { ok: false, reason: "gate decision integrity mismatch" };
-}
-function buildGateDecisionArtifact(draft, id = newDecisionId(draft.group), createdAt = draft.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()) {
-  if (draft.group.trim().length === 0) throw new Error("gate decision group is required");
-  if (!Number.isInteger(draft.cycle) || draft.cycle < 1)
-    throw new Error("gate decision cycle must be a positive integer");
-  if (draft.subjects.length === 0) throw new Error("gate decision requires at least one subject receipt");
-  const withoutIntegrity = {
-    version: 2,
-    id,
-    group: draft.group,
-    topology: draft.topology,
-    cycle: draft.cycle,
-    outcome: draft.outcome,
-    subjects: draft.subjects.map((subject) => ({ ...subject })),
-    createdAt
-  };
-  if (draft.decider !== void 0) withoutIntegrity.decider = { ...draft.decider };
-  if (draft.correlation !== void 0) withoutIntegrity.correlation = { ...draft.correlation };
-  if (draft.winner !== void 0) {
-    withoutIntegrity.winner = {
-      index: draft.winner.index,
-      subject: { ...draft.winner.subject },
-      branch: draft.winner.branch
-    };
-  }
-  if (draft.confirmation !== void 0) withoutIntegrity.confirmation = { ...draft.confirmation };
-  if (draft.detail !== void 0) withoutIntegrity.detail = draft.detail;
-  const artifact = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: decisionDigest(withoutIntegrity) }
-  };
-  const verification = verifyGateDecisionArtifact(artifact);
-  if (!verification.ok) throw new Error(verification.reason);
-  return artifact;
-}
-function readVerifiedArtifact(path2) {
-  let value;
-  try {
-    value = JSON.parse(readFileSync8(path2, "utf8"));
-  } catch (error) {
-    throw new Error(
-      `gate decision artifact is unreadable at ${path2}: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-  const artifact = value;
-  const verification = verifyGateDecisionArtifact(artifact);
-  if (!verification.ok) throw new Error(`gate decision artifact is invalid at ${path2}: ${verification.reason}`);
-  return artifact;
-}
-function persistGateDecisionArtifact(artifact, stateDir, allowIdenticalExisting) {
-  const verification = verifyGateDecisionArtifact(artifact);
-  if (!verification.ok) throw new Error(verification.reason);
-  const directory = decisionsDirectory(stateDir);
-  mkdirSync4(directory, { recursive: true });
-  const path2 = decisionArtifactPath(artifact.id, stateDir);
-  if (existsSync8(path2)) {
-    const existing = readVerifiedArtifact(path2);
-    if (allowIdenticalExisting && existing.id === artifact.id && existing.integrity.digest === artifact.integrity.digest) {
-      return { artifact: existing, path: path2 };
-    }
-    throw new Error(`gate decision artifact collision: ${artifact.id}`);
-  }
-  atomicWrite(path2, JSON.stringify(artifact, null, 2));
-  return { artifact, path: path2 };
-}
-function cloneGateDecisionArtifact(artifact) {
-  return {
-    ...artifactWithoutIntegrity(artifact),
-    integrity: { ...artifact.integrity }
-  };
-}
-function pendingRecordPayload(record) {
-  if (record.kind === "output") {
-    return {
-      contract: "clio.gateDecision.pending",
-      version: record.version,
-      kind: record.kind,
-      id: record.id,
-      group: record.group,
-      topology: record.topology,
-      cycle: record.cycle,
-      subjects: record.subjects.map((subject) => ({ runId: subject.runId, digest: subject.digest })),
-      deciderRunId: record.deciderRunId,
-      finalOutput: record.finalOutput,
-      ...record.terminalCycle !== void 0 ? { terminalCycle: record.terminalCycle } : {},
-      ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-      createdAt: record.createdAt
-    };
-  }
-  const decisionWithoutIntegrity = artifactWithoutIntegrity(record.decision);
-  return {
-    contract: "clio.gateDecision.pending",
-    version: record.version,
-    kind: record.kind,
-    id: record.id,
-    decision: {
-      ...decisionPayload(decisionWithoutIntegrity),
-      integrity: { ...record.decision.integrity }
-    },
-    ...record.finalOutput !== void 0 ? { finalOutput: record.finalOutput } : {},
-    ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-    createdAt: record.createdAt
-  };
-}
-function pendingRecordDigest(record) {
-  return createHash6("sha256").update(JSON.stringify(pendingRecordPayload(record)), "utf8").digest("hex");
-}
-function pendingRecordWithoutIntegrity(record) {
-  if (record.kind === "output") {
-    return {
-      version: record.version,
-      kind: record.kind,
-      id: record.id,
-      group: record.group,
-      topology: record.topology,
-      cycle: record.cycle,
-      subjects: record.subjects.map((subject) => ({ ...subject })),
-      deciderRunId: record.deciderRunId,
-      finalOutput: record.finalOutput,
-      ...record.terminalCycle !== void 0 ? { terminalCycle: record.terminalCycle } : {},
-      ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-      createdAt: record.createdAt
-    };
-  }
-  return {
-    version: record.version,
-    kind: record.kind,
-    id: record.id,
-    decision: cloneGateDecisionArtifact(record.decision),
-    ...record.finalOutput !== void 0 ? { finalOutput: record.finalOutput } : {},
-    ...record.resourceRoot !== void 0 ? { resourceRoot: record.resourceRoot } : {},
-    createdAt: record.createdAt
-  };
-}
-function pendingSemanticError(value) {
-  if (!isRecord6(value)) return "pending gate decision is not an object";
-  if (value.version !== 1) return "unsupported pending gate decision version";
-  if (!isSafeDecisionId(value.id)) return "pending gate decision id invalid";
-  if (typeof value.createdAt !== "string" || !Number.isFinite(Date.parse(value.createdAt))) {
-    return "pending gate decision timestamp invalid";
-  }
-  if (!isRecord6(value.integrity) || value.integrity.algorithm !== "sha256" || typeof value.integrity.digest !== "string" || !/^[0-9a-f]{64}$/.test(value.integrity.digest)) {
-    return "pending gate decision integrity invalid";
-  }
-  if (value.kind === "output") {
-    if (typeof value.group !== "string" || value.group.trim().length === 0) {
-      return "pending gate output group invalid";
-    }
-    if (value.topology !== "review" && value.topology !== "compete") {
-      return "pending gate output topology invalid";
-    }
-    if (typeof value.cycle !== "number" || !Number.isInteger(value.cycle) || value.cycle < 1) {
-      return "pending gate output cycle invalid";
-    }
-    if (!Array.isArray(value.subjects) || value.subjects.length === 0 || !value.subjects.every(isSubjectRef)) {
-      return "pending gate output subjects invalid";
-    }
-    if (typeof value.deciderRunId !== "string" || value.deciderRunId.trim().length === 0) {
-      return "pending gate output decider run id invalid";
-    }
-    if (typeof value.finalOutput !== "string") return "pending gate output text invalid";
-    if (value.terminalCycle !== void 0 && typeof value.terminalCycle !== "boolean") {
-      return "pending gate output terminal-cycle marker invalid";
-    }
-    if (value.resourceRoot !== void 0 && (typeof value.resourceRoot !== "string" || value.resourceRoot.length === 0)) {
-      return "pending gate output resource root invalid";
-    }
-    return null;
-  }
-  if (value.kind !== "decision") return "pending gate decision kind invalid";
-  if (!isRecord6(value.decision)) return "pending gate decision artifact invalid";
-  const verification = verifyGateDecisionArtifact(value.decision);
-  if (!verification.ok) return `pending gate decision artifact invalid: ${verification.reason}`;
-  if (value.decision.id !== value.id) return "pending gate decision artifact id mismatch";
-  if (value.decision.createdAt !== value.createdAt) return "pending gate decision artifact timestamp mismatch";
-  if (value.finalOutput !== void 0 && typeof value.finalOutput !== "string") {
-    return "pending gate decision output invalid";
-  }
-  if (value.resourceRoot !== void 0 && (typeof value.resourceRoot !== "string" || value.resourceRoot.length === 0)) {
-    return "pending gate decision resource root invalid";
-  }
-  return null;
-}
-function verifyPendingGateDecisionRecord(record) {
-  const invalid = pendingSemanticError(record);
-  if (invalid !== null) return { ok: false, reason: invalid };
-  return pendingRecordDigest(pendingRecordWithoutIntegrity(record)) === record.integrity.digest ? { ok: true } : { ok: false, reason: "pending gate decision integrity mismatch" };
-}
-function clonePendingGateDecisionRecord(record) {
-  const without = pendingRecordWithoutIntegrity(record);
-  return {
-    ...without,
-    integrity: { ...record.integrity }
-  };
-}
-function parsePendingGateDecisionRecord(value) {
-  const invalid = pendingSemanticError(value);
-  if (invalid !== null) throw new Error(invalid);
-  const record = clonePendingGateDecisionRecord(value);
-  const verification = verifyPendingGateDecisionRecord(record);
-  if (!verification.ok) throw new Error(verification.reason);
-  return record;
-}
-function assertPendingHandlePath(handle) {
-  const expected = pendingDecisionPath(handle.record.id, handle.stateDir);
-  if (resolve4(handle.path) !== resolve4(expected)) {
-    throw new Error(`pending gate decision path does not match id ${handle.record.id}`);
-  }
-}
-function pendingHandle(record, stateDir) {
-  return {
-    record: clonePendingGateDecisionRecord(record),
-    path: pendingDecisionPath(record.id, stateDir),
-    stateDir
-  };
-}
-function persistPendingGateDecision(record, stateDir, allowReplace) {
-  const verification = verifyPendingGateDecisionRecord(record);
-  if (!verification.ok) throw new Error(verification.reason);
-  const path2 = pendingDecisionPath(record.id, stateDir);
-  mkdirSync4(dirname3(path2), { recursive: true });
-  if (!allowReplace && existsSync8(path2)) throw new Error(`pending gate decision collision: ${record.id}`);
-  atomicWrite(path2, JSON.stringify(record, null, 2));
-  return pendingHandle(record, stateDir);
-}
-function loadPendingGateDecision(handle) {
-  assertPendingHandlePath(handle);
-  if (!existsSync8(handle.path)) return null;
-  const record = parsePendingGateDecisionRecord(JSON.parse(readFileSync8(handle.path, "utf8")));
-  if (record.id !== handle.record.id) throw new Error("pending gate decision changed identity on disk");
-  return pendingHandle(record, handle.stateDir);
-}
-function fsyncDirectoryBestEffort(path2) {
-  let fd = null;
-  try {
-    fd = openSync(path2, "r");
-    fsyncSync(fd);
-  } catch {
-  } finally {
-    if (fd !== null) closeSync(fd);
-  }
-}
-function clearPendingGateDecision(handle) {
-  assertPendingHandlePath(handle);
-  rmSync(handle.path, { force: true });
-  fsyncDirectoryBestEffort(dirname3(handle.path));
-}
-function sameSubjectRefs(left, right) {
-  return left.length === right.length && left.every((subject, index) => {
-    const other = right[index];
-    return other !== void 0 && subject.runId === other.runId && subject.digest === other.digest;
-  });
-}
-function stagePendingGateOutput(draft, stateDir = clioStateDir()) {
-  const id = newDecisionId(draft.group);
-  const withoutIntegrity = {
-    version: 1,
-    kind: "output",
-    id,
-    group: draft.group,
-    topology: draft.topology,
-    cycle: draft.cycle,
-    subjects: draft.subjects.map((subject) => ({ ...subject })),
-    deciderRunId: draft.deciderRunId,
-    finalOutput: draft.finalOutput,
-    ...draft.terminalCycle !== void 0 ? { terminalCycle: draft.terminalCycle } : {},
-    ...draft.resourceRoot !== void 0 ? { resourceRoot: draft.resourceRoot } : {},
-    createdAt: draft.createdAt ?? (/* @__PURE__ */ new Date()).toISOString()
-  };
-  const record = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: pendingRecordDigest(withoutIntegrity) }
-  };
-  if (existsSync8(decisionArtifactPath(id, stateDir))) throw new Error(`gate decision artifact collision: ${id}`);
-  return persistPendingGateDecision(record, stateDir, false);
-}
-function stagePendingGateDecision(draft, options = {}) {
-  const stateDir = options.stateDir ?? clioStateDir();
-  const id = newDecisionId(draft.group);
-  const createdAt = draft.createdAt ?? (/* @__PURE__ */ new Date()).toISOString();
-  const decision = buildGateDecisionArtifact(draft, id, createdAt);
-  const withoutIntegrity = {
-    version: 1,
-    kind: "decision",
-    id,
-    decision,
-    ...options.finalOutput !== void 0 ? { finalOutput: options.finalOutput } : {},
-    ...options.resourceRoot !== void 0 ? { resourceRoot: options.resourceRoot } : {},
-    createdAt
-  };
-  const record = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: pendingRecordDigest(withoutIntegrity) }
-  };
-  if (existsSync8(decisionArtifactPath(id, stateDir))) throw new Error(`gate decision artifact collision: ${id}`);
-  return persistPendingGateDecision(record, stateDir, false);
-}
-function resolvePendingGateDecision(handle, draft) {
-  const loaded = loadPendingGateDecision(handle);
-  if (loaded === null) throw new Error(`pending gate decision is missing: ${handle.record.id}`);
-  if (loaded.record.kind === "decision") {
-    const expected = buildGateDecisionArtifact(draft, loaded.record.id, loaded.record.createdAt);
-    if (expected.integrity.digest !== loaded.record.decision.integrity.digest) {
-      throw new Error("pending gate decision was already resolved to a different artifact");
-    }
-    return loaded;
-  }
-  const pending = loaded.record;
-  if (draft.group !== pending.group || draft.topology !== pending.topology || draft.cycle !== pending.cycle || !sameSubjectRefs(draft.subjects, pending.subjects)) {
-    throw new Error("resolved gate decision does not match staged output context");
-  }
-  if (draft.decider === void 0 || draft.decider.runId !== pending.deciderRunId) {
-    throw new Error("resolved gate decision does not match staged decider run");
-  }
-  if (draft.createdAt !== void 0 && draft.createdAt !== pending.createdAt) {
-    throw new Error("resolved gate decision cannot change the staged timestamp");
-  }
-  const decision = buildGateDecisionArtifact(draft, pending.id, pending.createdAt);
-  const withoutIntegrity = {
-    version: 1,
-    kind: "decision",
-    id: pending.id,
-    decision,
-    finalOutput: pending.finalOutput,
-    ...pending.resourceRoot !== void 0 ? { resourceRoot: pending.resourceRoot } : {},
-    createdAt: pending.createdAt
-  };
-  const resolvedRecord = {
-    ...withoutIntegrity,
-    integrity: { algorithm: "sha256", digest: pendingRecordDigest(withoutIntegrity) }
-  };
-  return persistPendingGateDecision(resolvedRecord, loaded.stateDir, true);
-}
-function materializePendingGateDecision(handle) {
-  const loaded = loadPendingGateDecision(handle);
-  if (loaded === null) {
-    if (handle.record.kind !== "decision") {
-      throw new Error(`pending gate output is missing before resolution: ${handle.record.id}`);
-    }
-    const path2 = decisionArtifactPath(handle.record.decision.id, handle.stateDir);
-    if (!existsSync8(path2)) throw new Error(`pending gate decision and artifact are both missing: ${handle.record.id}`);
-    const artifact = readVerifiedArtifact(path2);
-    if (artifact.integrity.digest !== handle.record.decision.integrity.digest) {
-      throw new Error(`gate decision artifact conflicts with completed pending record: ${handle.record.id}`);
-    }
-    return { artifact, path: path2 };
-  }
-  if (loaded.record.kind !== "decision") {
-    throw new Error(`pending gate output requires receipt resolution: ${loaded.record.id}`);
-  }
-  const written = persistGateDecisionArtifact(loaded.record.decision, loaded.stateDir, true);
-  const persisted = readVerifiedArtifact(written.path);
-  if (persisted.integrity.digest !== loaded.record.decision.integrity.digest) {
-    throw new Error(`materialized gate decision does not match pending record: ${loaded.record.id}`);
-  }
-  clearPendingGateDecision(loaded);
-  return { artifact: persisted, path: written.path };
-}
-function finalizePendingGateDecision(handle, draft) {
-  return materializePendingGateDecision(resolvePendingGateDecision(handle, draft));
-}
-function readPendingGateDecisions(stateDir = clioStateDir()) {
-  const directory = pendingDecisionsDirectory(stateDir);
-  if (!existsSync8(directory)) return { records: [], errors: [] };
-  const records = [];
-  const errors = [];
-  for (const name of readdirSync2(directory).filter((entry) => entry.endsWith(".json")).sort()) {
-    const path2 = join10(directory, name);
-    try {
-      const record = parsePendingGateDecisionRecord(JSON.parse(readFileSync8(path2, "utf8")));
-      if (name !== `${record.id}.json`) throw new Error("pending gate decision filename does not match its id");
-      records.push({ record, path: path2, stateDir });
-    } catch (error) {
-      errors.push({ path: path2, message: error instanceof Error ? error.message : String(error) });
-    }
-  }
-  return { records, errors };
-}
-function preflightPendingGateDecisionMaterialization(handles) {
-  for (const handle of handles) {
-    if (handle.record.kind !== "decision") continue;
-    const path2 = decisionArtifactPath(handle.record.decision.id, handle.stateDir);
-    if (!existsSync8(path2)) continue;
-    const existing = readVerifiedArtifact(path2);
-    if (existing.integrity.digest !== handle.record.decision.integrity.digest) {
-      throw new Error(`gate decision artifact conflicts with pending record: ${handle.record.id}`);
-    }
-  }
-}
-function preparePendingGateDecisionRecovery(stateDir = clioStateDir()) {
-  const pending = readPendingGateDecisions(stateDir);
-  if (pending.errors.length > 0) {
-    throw new Error(
-      `pending gate decision journal is untrustworthy: ${pending.errors.map((entry) => `${entry.path}: ${entry.message}`).join("; ")}`
-    );
-  }
-  const ready = pending.records.filter((handle) => handle.record.kind === "decision");
-  preflightPendingGateDecisionMaterialization(ready);
-  return {
-    ready,
-    unresolved: pending.records.filter((handle) => handle.record.kind === "output")
-  };
-}
-function readGateDecisionArtifacts(group, stateDir = clioStateDir()) {
-  const directory = decisionsDirectory(stateDir);
-  if (!existsSync8(directory)) return [];
-  const out = [];
-  for (const name of readdirSync2(directory).filter((entry) => entry.endsWith(".json")).sort()) {
-    const path2 = join10(directory, name);
-    try {
-      const artifact = JSON.parse(readFileSync8(path2, "utf8"));
-      if (group !== void 0 && artifact.group !== group) continue;
-      if (!verifyGateDecisionArtifact(artifact).ok) continue;
-      out.push({ artifact, path: path2 });
-    } catch {
+      statusHash: status === null ? null : sha2564(status)
+    },
+    safetyPolicy: {
+      version: safety?.version ?? 1,
+      rulePackHash: safety?.rulePackHash ?? null,
+      rulePackVersion: safety?.rulePackVersion ?? null,
+      projectPolicyPath: safety?.projectPolicyPath ?? null,
+      projectPolicyHash: safety?.projectPolicyHash ?? null,
+      projectPolicyValid: safety?.projectPolicyValid ?? null
     }
-  }
-  return out;
+  };
 }
-function readGateDecisionArtifactsForRunIds(runIds, stateDir = clioStateDir()) {
-  if (runIds.size === 0) return [];
-  return readGateDecisionArtifacts(void 0, stateDir).filter(({ artifact }) => {
-    if (artifact.subjects.some((subject) => runIds.has(subject.runId))) return true;
-    if (artifact.decider !== void 0 && runIds.has(artifact.decider.runId)) return true;
-    return artifact.winner !== void 0 && runIds.has(artifact.winner.subject.runId);
+function git(cwd, args) {
+  const result = spawnSync("git", [...args], {
+    cwd,
+    encoding: "utf8",
+    timeout: 1e3,
+    stdio: ["ignore", "pipe", "ignore"]
   });
+  if (result.status !== 0 || typeof result.stdout !== "string") return null;
+  const trimmed = result.stdout.trim();
+  return trimmed.length > 0 ? trimmed : null;
+}
+function sha2564(input) {
+  return createHash5("sha256").update(input, "utf8").digest("hex");
 }
 
-// src/domains/dispatch/route-history.ts
+// src/domains/dispatch/route-observer.ts
 init_esm_shims();
-import { existsSync as existsSync9, readFileSync as readFileSync9, renameSync as renameSync3 } from "node:fs";
+import { appendFileSync, existsSync as existsSync9, mkdirSync as mkdirSync4, readdirSync as readdirSync2, readFileSync as readFileSync9, renameSync as renameSync4, statSync } from "node:fs";
 import { join as join11 } from "node:path";
+
+// src/domains/dispatch/route-history.ts
+init_esm_shims();
+import { existsSync as existsSync8, readFileSync as readFileSync8, renameSync as renameSync3 } from "node:fs";
+import { join as join10 } from "node:path";
 var ROUTE_HISTORY_VERSION = 3;
 var DEFAULT_MAX_RECORDS = 4096;
 function historyPath(stateDir) {
-  return join11(stateDir, "route-history.json");
+  return join10(stateDir, "route-history.json");
 }
 function clone2(record) {
   return structuredClone(record);
@@ -6436,7 +5671,7 @@ function compareRecords(left, right) {
   return left.settledAt.localeCompare(right.settledAt) || left.receiptDigest.localeCompare(right.receiptDigest);
 }
 function validateRecord(value) {
-  if (!isRecord7(value) || value.version !== ROUTE_HISTORY_VERSION)
+  if (!isRecord5(value) || value.version !== ROUTE_HISTORY_VERSION)
     throw new Error("route history record has unsupported version");
   if (!isDigest(value.receiptDigest)) throw new Error("route history receipt digest invalid");
   if (typeof value.assignmentId !== "string" || value.assignmentId.length === 0)
@@ -6480,8 +5715,8 @@ function validateRecord(value) {
   };
 }
 function readHistory(path2) {
-  if (!existsSync9(path2)) return [];
-  const raw = readFileSync9(path2, "utf8").trim();
+  if (!existsSync8(path2)) return [];
+  const raw = readFileSync8(path2, "utf8").trim();
   if (raw.length === 0) return [];
   let parsed;
   try {
@@ -6489,7 +5724,7 @@ function readHistory(path2) {
   } catch (error) {
     throw new Error(`route history unreadable: ${error instanceof Error ? error.message : String(error)}`);
   }
-  if (!isRecord7(parsed) || !Array.isArray(parsed.records)) throw new Error("route history has unsupported format");
+  if (!isRecord5(parsed) || !Array.isArray(parsed.records)) throw new Error("route history has unsupported format");
   if (parsed.version !== ROUTE_HISTORY_VERSION) {
     retireHistory(path2, parsed.version);
     return [];
@@ -6549,14 +5784,14 @@ function createRouteHistoryStore(options = {}) {
     }
   };
 }
-function isRecord7(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isDigest(value) {
   return typeof value === "string" && /^[0-9a-f]{64}$/u.test(value);
 }
 function isRouteCandidate(value) {
-  if (!isRecord7(value)) return false;
+  if (!isRecord5(value)) return false;
   if (!isExecutionRole(value.executionRole)) return false;
   return [
     value.agentId,
@@ -6572,7 +5807,7 @@ function isRouteCandidate(value) {
   ].every((field) => typeof field === "string");
 }
 function isPhaseTiming(value) {
-  if (!isRecord7(value)) return false;
+  if (!isRecord5(value)) return false;
   return [
     "requestToDecisionMs",
     "decisionMs",
@@ -6588,7 +5823,7 @@ function isPhaseTiming(value) {
 
 // src/domains/dispatch/route-quality.ts
 init_esm_shims();
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 function compareStrings(left, right) {
   return left < right ? -1 : left > right ? 1 : 0;
 }
@@ -6703,7 +5938,7 @@ function reduceRouteQuality(input) {
   return { label, checks, correlatedGates, sourceDigests: [...sourceDigests].sort(compareStrings) };
 }
 function routeQualityEvalDigest(artifact) {
-  return createHash7("sha256").update(canonicalJson2(artifact), "utf8").digest("hex");
+  return createHash6("sha256").update(canonicalJson2(artifact), "utf8").digest("hex");
 }
 function canonicalJson2(value) {
   if (value === null) return "null";
@@ -6776,28 +6011,28 @@ function createRouteLearner(capacity = LEARNER_CAPACITY) {
 }
 var OBSERVATION_LOG_MAX_BYTES = 1024 * 1024;
 function durableQualitySources(stateDir) {
-  const runsPath2 = join12(stateDir, "runs.json");
-  if (!existsSync10(runsPath2)) return { receipts: [], gates: [], evals: [] };
+  const runsPath2 = join11(stateDir, "runs.json");
+  if (!existsSync9(runsPath2)) return { receipts: [], gates: [], evals: [] };
   try {
-    const parsed = JSON.parse(readFileSync10(runsPath2, "utf8"));
+    const parsed = JSON.parse(readFileSync9(runsPath2, "utf8"));
     if (!Array.isArray(parsed)) return { receipts: [], gates: [], evals: [] };
     const receipts = [];
     for (const envelope of parsed) {
       if (typeof envelope !== "object" || envelope === null || Array.isArray(envelope)) continue;
       const run = envelope;
-      const path2 = run.receiptPath ?? join12(stateDir, "receipts", `${run.id}.json`);
-      if (!existsSync10(path2)) continue;
-      const receipt = JSON.parse(readFileSync10(path2, "utf8"));
+      const path2 = run.receiptPath ?? join11(stateDir, "receipts", `${run.id}.json`);
+      if (!existsSync9(path2)) continue;
+      const receipt = JSON.parse(readFileSync9(path2, "utf8"));
       if (typeof receipt === "object" && receipt !== null && !Array.isArray(receipt)) {
         receipts.push({ receipt, envelope: run });
       }
     }
     const evals = [];
-    const evalDirectory = join12(clioDataDir(), "evals");
-    if (existsSync10(evalDirectory)) {
-      for (const name of readdirSync3(evalDirectory).filter((entry) => entry.endsWith(".json")).sort()) {
+    const evalDirectory = join11(clioDataDir(), "evals");
+    if (existsSync9(evalDirectory)) {
+      for (const name of readdirSync2(evalDirectory).filter((entry) => entry.endsWith(".json")).sort()) {
         try {
-          const artifact = parseEvalArtifactV4(JSON.parse(readFileSync10(join12(evalDirectory, name), "utf8")), name);
+          const artifact = parseEvalArtifactV4(JSON.parse(readFileSync9(join11(evalDirectory, name), "utf8")), name);
           evals.push({ artifact, digest: routeQualityEvalDigest(artifact) });
         } catch {
         }
@@ -6809,8 +6044,8 @@ function durableQualitySources(stateDir) {
   }
 }
 function appendObservationLine(dir, record) {
-  mkdirSync5(dir, { recursive: true });
-  const path2 = join12(dir, "observations.jsonl");
+  mkdirSync4(dir, { recursive: true });
+  const path2 = join11(dir, "observations.jsonl");
   try {
     if (statSync(path2).size > OBSERVATION_LOG_MAX_BYTES) {
       renameSync4(path2, `${path2}.1`);
@@ -6842,7 +6077,7 @@ function createRouteObserver(options) {
   const PENDING_LIMIT = 512;
   let totalObservations = 0;
   let sequence = 0;
-  const logDir = () => options.logDir ?? join12(clioStateDir(), "route-decisions");
+  const logDir = () => options.logDir ?? join11(clioStateDir(), "route-decisions");
   const reconcileHistory = () => {
     const sources = durableQualitySources(options.stateDir ?? clioStateDir());
     if (sources.receipts.length === 0) return;
@@ -7013,6 +6248,326 @@ function createRouteObserver(options) {
   };
 }
 
+// src/domains/dispatch/run-event-journal-bridge.ts
+init_esm_shims();
+
+// src/tools/dispatch-run-events.ts
+init_esm_shims();
+
+// src/tools/dispatch-event-text.ts
+init_esm_shims();
+function assistantTextFromEvent(event) {
+  return durableAssistantTextFromEvent(event).trim();
+}
+function receiptResponseModelIdObservationLabel(receipt) {
+  const responses = receipt.upstreamResponses ?? [];
+  if (responses.length === 0) return null;
+  const labels = responses.map((response) => {
+    const observation = responseModelIdObservationFromRecord(
+      response,
+      "legacy-difference-only"
+    );
+    if (observation.state === "reported") return `reported:${observation.reportedModelId}`;
+    if (observation.state === "not-reported") return "not-reported";
+    if (observation.state === "not-observed") return "not-observed";
+    return `legacy-difference-only:${observation.differingModelId ?? "none"}`;
+  });
+  return `response_model_id_observation=${labels.join(",")}`;
+}
+
+// src/tools/dispatch-run-events.ts
+var RUN_TAIL_ENTRY_LIMIT = 100;
+var RUN_TAIL_RUN_LIMIT = 64;
+var RUN_TAIL_TEXT_LIMIT = 600;
+function isRecord6(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function eventDetail(event) {
+  const text = assistantTextFromEvent(event);
+  if (text.length > 0) return truncateUtf8(text, RUN_TAIL_TEXT_LIMIT, "...");
+  if (!isRecord6(event)) return void 0;
+  if (event.type === "clio_tool_finish" && isRecord6(event.payload)) {
+    const tool = typeof event.payload.tool === "string" ? event.payload.tool : "tool";
+    const outcome = typeof event.payload.outcome === "string" ? event.payload.outcome : "";
+    return `${tool} ${outcome}`.trim();
+  }
+  if (event.type === "attempt_start") {
+    const attempt = typeof event.attempt === "number" ? event.attempt : "?";
+    const runId = typeof event.runId === "string" ? event.runId : "?";
+    const reason = typeof event.reason === "string" ? event.reason : "retry";
+    return truncateUtf8(`attempt ${attempt} -> ${runId}: ${reason}`, RUN_TAIL_TEXT_LIMIT, "...");
+  }
+  return void 0;
+}
+function runTailEntryFromEvent(event, at = (/* @__PURE__ */ new Date()).toISOString()) {
+  const type = isRecord6(event) && typeof event.type === "string" ? event.type : "unknown";
+  if (type === "heartbeat" || type === "message_update") return null;
+  const entry = { at, type };
+  const detail = eventDetail(event);
+  if (detail !== void 0) entry.detail = detail;
+  return entry;
+}
+var REGISTRY_FAILURE_OUTCOME = "failed";
+var REGISTRY_UNKNOWN_OUTCOME = "unknown";
+function errorText(error) {
+  return error instanceof Error ? error.message : String(error);
+}
+function createDispatchRunEventRegistry(options = {}) {
+  const runTails = /* @__PURE__ */ new Map();
+  const activeRuns = /* @__PURE__ */ new Set();
+  const activeBatches = /* @__PURE__ */ new Set();
+  const journal = options.journal === void 0 ? defaultRunEventJournal() : options.journal;
+  const journalSeal = (logicalRunId, receipt) => {
+    if (journal === null || !isRecord6(receipt)) return;
+    const digest = receipt.integrity?.digest;
+    const outcome = typeof receipt.outcome === "string" ? receipt.outcome : REGISTRY_UNKNOWN_OUTCOME;
+    journal.receipt(logicalRunId, {
+      outcome,
+      exitCode: typeof receipt.exitCode === "number" ? receipt.exitCode : null,
+      ...typeof digest === "string" ? { digest } : {},
+      ...receipt.runId !== logicalRunId ? { attemptRunId: receipt.runId } : {}
+    });
+    journal.terminal(logicalRunId, outcome, receipt.outcomeDetail ?? void 0);
+  };
+  const sealBatchJournals = (assignmentIds, receipts) => {
+    if (journal === null || !Array.isArray(receipts)) return;
+    if (assignmentIds.length === receipts.length) {
+      for (const [index, runId] of assignmentIds.entries()) {
+        const receipt = receipts[index];
+        if (receipt !== void 0) journalSeal(runId, receipt);
+      }
+      return;
+    }
+    for (const receipt of receipts) {
+      if (receipt != null && typeof receipt.runId === "string") journalSeal(receipt.runId, receipt);
+    }
+  };
+  const pruneRunTails = () => {
+    while (runTails.size > RUN_TAIL_RUN_LIMIT) {
+      let oldestKey = null;
+      let oldestSeen = Number.POSITIVE_INFINITY;
+      for (const [key, state] of runTails) {
+        if (activeRuns.has(key) || state.lastSeenAt >= oldestSeen) continue;
+        oldestKey = key;
+        oldestSeen = state.lastSeenAt;
+      }
+      if (oldestKey === null) break;
+      runTails.delete(oldestKey);
+    }
+  };
+  const recordRunEvent = (runId, agentId, event) => {
+    const entry = runTailEntryFromEvent(event);
+    if (entry === null) return;
+    const state = runTails.get(runId) ?? { agentId, entries: [], lastSeenAt: Date.now() };
+    state.lastSeenAt = Date.now();
+    state.entries.push(entry);
+    if (state.entries.length > RUN_TAIL_ENTRY_LIMIT) {
+      state.entries.splice(0, state.entries.length - RUN_TAIL_ENTRY_LIMIT);
+    }
+    runTails.set(runId, state);
+    pruneRunTails();
+    journal?.append(runId, entry);
+  };
+  const drainSingle = async (runId, agentId, events, bus) => {
+    const summary = {
+      count: 0,
+      types: [],
+      lastAssistantText: "",
+      terminalAttemptRunId: runId
+    };
+    for await (const event of events) {
+      summary.count += 1;
+      const type = isRecord6(event) && typeof event.type === "string" ? event.type : "unknown";
+      summary.types.push(type);
+      if (type === "attempt_start") summary.lastAssistantText = "";
+      const text = durableAssistantTextFromEvent(event);
+      if (text.trim().length > 0) summary.lastAssistantText = text;
+      recordRunEvent(runId, agentId, event);
+      if (type !== "heartbeat") bus?.emit(BusChannels.DispatchProgress, { runId, agentId, event });
+    }
+    return summary;
+  };
+  const drainBatch = async (batchId, events, bus) => {
+    const summaries = /* @__PURE__ */ new Map();
+    for await (const event of events) {
+      if (!isRecord6(event) || event.type !== "batch_run_event") continue;
+      const runId = typeof event.runId === "string" ? event.runId : batchId;
+      const agentId = typeof event.agentId === "string" ? event.agentId : "batch";
+      const inner = event.event;
+      const summary = summaries.get(runId) ?? {
+        count: 0,
+        types: [],
+        lastAssistantText: "",
+        terminalAttemptRunId: runId
+      };
+      summary.count += 1;
+      const type = isRecord6(inner) && typeof inner.type === "string" ? inner.type : "unknown";
+      summary.types.push(type);
+      const text = durableAssistantTextFromEvent(inner);
+      if (text.trim().length > 0) summary.lastAssistantText = text;
+      summaries.set(runId, summary);
+      recordRunEvent(runId, agentId, inner);
+      if (type !== "heartbeat") bus?.emit(BusChannels.DispatchProgress, { runId, agentId, event: inner });
+    }
+    return summaries;
+  };
+  return {
+    registerSingle(handle, agentId, bus) {
+      if (activeRuns.has(handle.runId)) {
+        throw new Error(`dispatch event registry: run '${handle.runId}' is already registered`);
+      }
+      activeRuns.add(handle.runId);
+      journal?.open(handle.runId, agentId);
+      const summaryPromise = drainSingle(handle.runId, agentId, handle.events, bus);
+      const completion = Promise.allSettled([summaryPromise, handle.finalPromise]).then(
+        ([summaryResult, receiptResult]) => {
+          if (summaryResult.status === "rejected") throw summaryResult.reason;
+          if (receiptResult.status === "rejected") throw receiptResult.reason;
+          return { receipt: receiptResult.value, summary: summaryResult.value };
+        }
+      );
+      const releaseSingle = () => {
+        activeRuns.delete(handle.runId);
+        pruneRunTails();
+      };
+      void completion.then(
+        ({ receipt }) => {
+          journalSeal(handle.runId, receipt);
+          releaseSingle();
+        },
+        (error) => {
+          journal?.terminal(handle.runId, REGISTRY_FAILURE_OUTCOME, errorText(error));
+          releaseSingle();
+        }
+      );
+      return { runId: handle.runId, completion };
+    },
+    registerBatch(handle, agentIds, bus) {
+      if (activeBatches.has(handle.batchId)) {
+        throw new Error(`dispatch event registry: batch '${handle.batchId}' is already registered`);
+      }
+      const duplicateRunId = handle.assignmentIds.find(
+        (runId, index) => handle.assignmentIds.slice(0, index).includes(runId)
+      );
+      if (duplicateRunId !== void 0) {
+        throw new Error(`dispatch event registry: batch '${handle.batchId}' repeats run '${duplicateRunId}'`);
+      }
+      const activeRunId = handle.assignmentIds.find((runId) => activeRuns.has(runId));
+      if (activeRunId !== void 0) {
+        throw new Error(`dispatch event registry: run '${activeRunId}' is already registered`);
+      }
+      activeBatches.add(handle.batchId);
+      for (const runId of handle.assignmentIds) activeRuns.add(runId);
+      for (const [index, runId] of handle.assignmentIds.entries()) {
+        journal?.open(runId, agentIds[index] ?? "unknown");
+      }
+      const completion = Promise.allSettled([drainBatch(handle.batchId, handle.events, bus), handle.finalPromise]).then(
+        ([summariesResult, receiptsResult]) => {
+          if (summariesResult.status === "rejected") throw summariesResult.reason;
+          if (receiptsResult.status === "rejected") throw receiptsResult.reason;
+          return { receipts: receiptsResult.value, summaries: summariesResult.value };
+        }
+      );
+      const releaseBatch = () => {
+        activeBatches.delete(handle.batchId);
+        for (const runId of handle.assignmentIds) activeRuns.delete(runId);
+        pruneRunTails();
+      };
+      void completion.then(
+        ({ receipts }) => {
+          sealBatchJournals(handle.assignmentIds, receipts);
+          releaseBatch();
+        },
+        (error) => {
+          const detail = errorText(error);
+          for (const runId of handle.assignmentIds) {
+            journal?.terminal(runId, REGISTRY_FAILURE_OUTCOME, detail);
+          }
+          releaseBatch();
+        }
+      );
+      for (const [index, runId] of handle.assignmentIds.entries()) {
+        if (!runTails.has(runId)) {
+          runTails.set(runId, {
+            agentId: agentIds[index] ?? "unknown",
+            entries: [],
+            lastSeenAt: Date.now()
+          });
+        }
+      }
+      return { batchId: handle.batchId, assignmentIds: handle.assignmentIds, completion };
+    },
+    recordEvent: recordRunEvent,
+    eventTail(runId) {
+      const state = runTails.get(runId);
+      return state === void 0 ? null : { agentId: state.agentId, entries: [...state.entries] };
+    }
+  };
+}
+
+// src/domains/dispatch/run-event-journal-bridge.ts
+var OPENED_RUN_LIMIT = 512;
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function runIdentity(payload) {
+  if (!isRecord7(payload)) return null;
+  if (typeof payload.runId !== "string" || payload.runId.length === 0) return null;
+  return { runId: payload.runId, agentId: typeof payload.agentId === "string" ? payload.agentId : "unknown" };
+}
+function attachRunEventJournalBridge(bus, options = {}) {
+  const journal = options.journal ?? defaultRunEventJournal();
+  const opened = /* @__PURE__ */ new Set();
+  const ensureOpen = (runId, agentId) => {
+    if (opened.has(runId)) return;
+    opened.add(runId);
+    while (opened.size > OPENED_RUN_LIMIT) {
+      const oldest = opened.values().next();
+      if (oldest.done === true) break;
+      opened.delete(oldest.value);
+    }
+    journal.open(runId, agentId);
+  };
+  const seal = (outcome, detail, payload) => {
+    const identity = runIdentity(payload);
+    if (identity === null) return;
+    ensureOpen(identity.runId, identity.agentId);
+    const exitCode = isRecord7(payload) && typeof payload.exitCode === "number" ? payload.exitCode : null;
+    journal.receipt(identity.runId, { outcome, exitCode });
+    journal.terminal(identity.runId, outcome, detail ?? void 0);
+    opened.delete(identity.runId);
+  };
+  const unsubscribes = [
+    bus.on(BusChannels.DispatchProgress, (payload) => {
+      const identity = runIdentity(payload);
+      if (identity === null) return;
+      const entry = runTailEntryFromEvent(payload.event);
+      if (entry === null) return;
+      ensureOpen(identity.runId, identity.agentId);
+      const message = isRecord7(payload.event) && typeof payload.event.message === "string" ? payload.event.message : void 0;
+      journal.append(
+        identity.runId,
+        entry.detail === void 0 && message !== void 0 ? { ...entry, detail: message } : entry
+      );
+    }),
+    bus.on(BusChannels.DispatchCompleted, (payload) => {
+      seal(payload.outcome, payload.outcomeDetail, payload);
+    }),
+    bus.on(BusChannels.DispatchFailed, (payload) => {
+      seal(payload.outcome, payload.outcomeDetail, payload);
+    })
+  ];
+  let stopped = false;
+  return {
+    stop() {
+      if (stopped) return;
+      stopped = true;
+      for (const unsubscribe of unsubscribes) unsubscribe();
+      opened.clear();
+    }
+  };
+}
+
 // src/domains/dispatch/run-identity.ts
 init_esm_shims();
 import { hostname as hostname3, userInfo } from "node:os";
@@ -7062,27 +6617,27 @@ function detectRunIdentity(env = process.env) {
 
 // src/domains/dispatch/state.ts
 init_esm_shims();
-import { randomBytes as randomBytes5 } from "node:crypto";
-import { existsSync as existsSync11, readFileSync as readFileSync11 } from "node:fs";
-import { join as join13 } from "node:path";
+import { randomBytes as randomBytes4 } from "node:crypto";
+import { existsSync as existsSync10, readdirSync as readdirSync3, readFileSync as readFileSync10 } from "node:fs";
+import { join as join12 } from "node:path";
 function newRunId() {
-  const n = BigInt(`0x${randomBytes5(8).toString("hex")}`);
+  const n = BigInt(`0x${randomBytes4(8).toString("hex")}`);
   const raw = n.toString(36);
   if (raw.length >= 12) return raw.slice(0, 12);
   return raw.padStart(12, "0");
 }
 function runsPath() {
-  return join13(clioStateDir(), "runs.json");
+  return join12(clioStateDir(), "runs.json");
 }
 function receiptPathFor(runId) {
-  return join13(clioStateDir(), "receipts", `${runId}.json`);
+  return join12(clioStateDir(), "receipts", `${runId}.json`);
 }
 function fleetRunPath(runId) {
-  return join13(clioStateDir(), "fleet-runs", `${runId}.json`);
+  return join12(clioStateDir(), "fleet-runs", `${runId}.json`);
 }
 function readFleetRun(runId) {
   try {
-    const parsed = JSON.parse(readFileSync11(fleetRunPath(runId), "utf8"));
+    const parsed = JSON.parse(readFileSync10(fleetRunPath(runId), "utf8"));
     return parsed.version === 1 && parsed.id === runId ? structuredClone(parsed) : null;
   } catch {
     return null;
@@ -7092,10 +6647,27 @@ async function writeFleetRun(record) {
   await atomicWrite(fleetRunPath(record.id), `${JSON.stringify(record, null, 2)}
 `);
 }
+var MAX_FLEET_RUN_SCAN = 64;
+function listFleetRuns(limit = MAX_FLEET_RUN_SCAN) {
+  let entries;
+  try {
+    entries = readdirSync3(join12(clioStateDir(), "fleet-runs"));
+  } catch {
+    return [];
+  }
+  const records = [];
+  for (const name of entries.slice(0, MAX_FLEET_RUN_SCAN)) {
+    if (!name.endsWith(".json")) continue;
+    const record = readFleetRun(name.slice(0, -".json".length));
+    if (record !== null) records.push(record);
+  }
+  records.sort((a, b) => (Date.parse(b.startedAt) || 0) - (Date.parse(a.startedAt) || 0));
+  return records.slice(0, Math.max(0, limit));
+}
 function readRuns() {
   const path2 = runsPath();
-  if (!existsSync11(path2)) return [];
-  const raw = readFileSync11(path2, "utf8").trim();
+  if (!existsSync10(path2)) return [];
+  const raw = readFileSync10(path2, "utf8").trim();
   if (raw.length === 0) return [];
   const parsed = JSON.parse(raw);
   if (!Array.isArray(parsed)) return [];
@@ -7253,6 +6825,10 @@ function openLedger(opts) {
         const capped = capRuns(merged, maxRuns);
         runs = capped;
         atomicWrite(target, JSON.stringify(capped, null, 2));
+        if (merged.length > capped.length) {
+          const kept = new Set(capped.map((run) => run.id));
+          removeRunEventJournals(merged.filter((run) => !kept.has(run.id)).map((run) => run.id));
+        }
         dirty.clear();
       });
     },
@@ -7421,7 +6997,7 @@ function requestOriginFor(req) {
   return req.requestOrigin ?? "agent";
 }
 function sha2565(input) {
-  return createHash8("sha256").update(input, "utf8").digest("hex");
+  return createHash7("sha256").update(input, "utf8").digest("hex");
 }
 function promptHash(systemPrompt) {
   return systemPrompt.length > 0 ? sha2565(systemPrompt) : null;
@@ -7563,8 +7139,8 @@ var DISPATCH_DRAIN_GRACE_MS = 2e3;
 var RUN_WRITE_TARGET_HISTORY = 512;
 async function awaitEventDrain(drained, graceMs = DISPATCH_DRAIN_GRACE_MS) {
   let timer;
-  const grace = new Promise((resolve5) => {
-    timer = setTimeout(() => resolve5(false), graceMs);
+  const grace = new Promise((resolve4) => {
+    timer = setTimeout(() => resolve4(false), graceMs);
   });
   try {
     return await Promise.race([drained.then(() => true), grace]);
@@ -8648,6 +8224,7 @@ function createDispatchBundle(context, options) {
   let ledger = null;
   let heartbeatTimer = null;
   const active = /* @__PURE__ */ new Map();
+  const pendingCapacity = /* @__PURE__ */ new Map();
   const targetCooldowns = /* @__PURE__ */ new Map();
   const ownedReservations = /* @__PURE__ */ new Set();
   const runWriteAttributions = /* @__PURE__ */ new Map();
@@ -8675,18 +8252,23 @@ function createDispatchBundle(context, options) {
       onError: (error) => reportDispatchDiagnostic("read capacity lease usage", error)
     })
   );
+  function configuredEndpointCapacities() {
+    return resolveEndpointCapacities({
+      statuses: providers.list(),
+      targets: getEffectiveSettings()?.targets ?? [],
+      runtimeFor: (runtimeId) => providers.getRuntime(runtimeId)
+    });
+  }
   function configuredEndpointLimits() {
-    return Object.fromEntries(
-      Object.entries(endpointCapacitiesForStatuses(providers.list())).map(([key, value]) => [key, value.limit])
-    );
+    return Object.fromEntries(Object.entries(configuredEndpointCapacities()).map(([key, value]) => [key, value.limit]));
   }
   function endpointCapacityForTarget(targetId) {
     const status = providers.list().find((entry) => entry.target.id === targetId);
-    if (status === void 0) return null;
-    const endpoint = endpointCapacityForStatus(status);
+    const target = status?.target ?? providers.getTarget(targetId);
+    if (target === null || target === void 0) return null;
+    const endpoint = status === void 0 ? endpointCapacityFor({ target, runtime: providers.getRuntime(target.runtime) }) : endpointCapacityForStatus(status);
     if (endpoint === null) return null;
-    const configured = endpointCapacitiesForStatuses(providers.list())[endpoint.key];
-    return configured ?? endpoint;
+    return configuredEndpointCapacities()[endpoint.key] ?? endpoint;
   }
   function reservationCapacitySnapshot(settings) {
     const preflight = scheduling.preflight();
@@ -8763,10 +8345,24 @@ function createDispatchBundle(context, options) {
     const configured = settings?.budget.concurrency;
     return scheduling.maxWorkers?.() ?? (configured === "auto" || configured === void 0 ? 4 : Math.max(1, configured));
   }
+  function publishCapacityQueued(identity, timing, node) {
+    pendingCapacity.set(identity.runId, { identity, timing, node });
+    context.bus.emit(BusChannels.DispatchEnqueued, identity);
+  }
+  function publishCapacityAdmissionFailure(identity, error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    const outcome = error instanceof AdmissionCanceledError ? "canceled" : /admission timed out/u.test(detail) ? "timed_out" : "denied_by_policy";
+    context.bus.emit(BusChannels.DispatchFailed, {
+      ...identity,
+      outcome,
+      outcomeDetail: detail,
+      reason: outcome
+    });
+  }
   async function admitAssignmentCapacity(req, nodeId, timing, endpoint) {
     const queuedAt = now();
     timing.queuedAt = new Date(queuedAt).toISOString();
-    const assignmentId = req.lineage?.rootRunId ?? `pending-${queuedAt.toString(36)}-${randomBytes6(6).toString("hex")}`;
+    const assignmentId = req.lineage?.rootRunId ?? req.runIdHint ?? `pending-${queuedAt.toString(36)}-${randomBytes5(6).toString("hex")}`;
     const requestedAt = Date.parse(timing.requestedAt ?? timing.queuedAt);
     const deadlineAt = req.assignmentDeadlineAt ?? requestedAt + (req.routingIntent?.deadlineMs ?? 6e4);
     if (req.lineage === void 0) await registerAssignment(assignmentId);
@@ -9010,6 +8606,7 @@ function createDispatchBundle(context, options) {
         depth: run.lineage.depth
       }
     };
+    delete retryReq.runIdHint;
     const reasonKey = retryReasonKey(run.lineage.rootRunId, attempt);
     retryReasons.set(reasonKey, reason);
     try {
@@ -9536,7 +9133,26 @@ function createDispatchBundle(context, options) {
     const wireModelId = lifecycle.agentConfig.id;
     assertTargetNotCoolingDown(req, targetId, runtimeId, wireModelId);
     assertBudgetAdmitsRoute(req, { rates: null, provenance: "unknown" }, settings);
-    const capacityLease = await admitAssignmentCapacity(req, "local", timing, null);
+    const queuedIdentity = req.lineage === void 0 && req.runIdHint !== void 0 ? {
+      runId: req.runIdHint,
+      agentId: req.agentId,
+      task: req.task,
+      requestOrigin: lifecycle.requestOrigin,
+      targetId,
+      wireModelId,
+      runtimeId,
+      runtimeKind: "acp-delegation"
+    } : null;
+    if (queuedIdentity !== null) publishCapacityQueued(queuedIdentity, timing, null);
+    let capacityLease;
+    try {
+      capacityLease = await admitAssignmentCapacity(req, "local", timing, null);
+    } catch (error) {
+      if (queuedIdentity !== null) publishCapacityAdmissionFailure(queuedIdentity, error);
+      throw error;
+    } finally {
+      if (queuedIdentity !== null) pendingCapacity.delete(queuedIdentity.runId);
+    }
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
@@ -9705,8 +9321,10 @@ function createDispatchBundle(context, options) {
       runIdForPermissionAudit = envelope.id;
       lineage = lineageFor(req, envelope.id);
       if (req.lineage === void 0) {
-        capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
-        await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        if (capacityLease.assignmentId !== lineage.rootRunId) {
+          capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
+          await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        }
         leaseSlot.transferToAssignment();
       }
       identity = detectRunIdentity();
@@ -9730,16 +9348,18 @@ function createDispatchBundle(context, options) {
         runtimeKind: "acp-delegation"
       });
       await ledgerRef.persist();
-      context.bus.emit(BusChannels.DispatchEnqueued, {
-        runId: envelope.id,
-        agentId: req.agentId,
-        task: req.task,
-        requestOrigin: lifecycle.requestOrigin,
-        targetId,
-        wireModelId,
-        runtimeId,
-        runtimeKind: "acp-delegation"
-      });
+      if (req.lineage !== void 0) {
+        context.bus.emit(BusChannels.DispatchEnqueued, {
+          runId: envelope.id,
+          agentId: req.agentId,
+          task: req.task,
+          requestOrigin: lifecycle.requestOrigin,
+          targetId,
+          wireModelId,
+          runtimeId,
+          runtimeKind: "acp-delegation"
+        });
+      }
       context.bus.emit(BusChannels.DispatchStarted, {
         runId: envelope.id,
         agentId: req.agentId,
@@ -10146,6 +9766,7 @@ function createDispatchBundle(context, options) {
       throw new Error(`dispatch: invalid spec: ${validated.errors.join("; ")}`);
     }
     req = validation.restore(validated.spec);
+    if (req.lineage === void 0 && req.runIdHint === void 0) req = { ...req, runIdHint: newRunId() };
     let activeRouteObservation = null;
     if (req.delegationAgentId === void 0) {
       const recipe = agents.get(req.agentId);
@@ -10264,7 +9885,34 @@ function createDispatchBundle(context, options) {
       },
       shadow: () => observeShadowRoute(req, placed, settings)
     });
-    const capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing, endpoint);
+    const queuedIdentity = req.lineage === void 0 && req.runIdHint !== void 0 ? {
+      runId: req.runIdHint,
+      agentId: req.agentId,
+      task: req.task,
+      agentAudience: lifecycle.agentAudience,
+      requestOrigin: lifecycle.requestOrigin,
+      targetId: lifecycle.target.target.id,
+      wireModelId: lifecycle.target.wireModelId,
+      runtimeId: lifecycle.target.runtime.id,
+      runtimeKind: lifecycle.runtimeKind,
+      budget: lifecycle.budgetEnvelope,
+      ...endpoint !== null ? { endpoint: { key: endpoint.key, label: endpoint.label, limit: endpoint.limit } } : {},
+      ...placement !== null ? { node: placement.node.id } : {},
+      ...req.gate !== void 0 ? { gate: { role: req.gate.role, cycle: req.gate.cycle } } : {},
+      ...req.council !== void 0 ? { council: req.council } : {},
+      ...req.reroutes !== void 0 && req.reroutes.length > 0 ? { rerouteCount: req.reroutes.length } : {},
+      ...lifecycle.target.modelCapabilities !== void 0 && lifecycle.target.modelCapabilities !== null && lifecycle.target.modelCapabilities.contextWindow > 0 ? { contextWindow: lifecycle.target.modelCapabilities.contextWindow } : {}
+    } : null;
+    if (queuedIdentity !== null) publishCapacityQueued(queuedIdentity, timing, placement?.node ?? null);
+    let capacityLease;
+    try {
+      capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing, endpoint);
+    } catch (error) {
+      if (queuedIdentity !== null) publishCapacityAdmissionFailure(queuedIdentity, error);
+      throw error;
+    } finally {
+      if (queuedIdentity !== null) pendingCapacity.delete(queuedIdentity.runId);
+    }
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
@@ -10462,6 +10110,7 @@ function createDispatchBundle(context, options) {
           ...ruleId !== null ? { ruleId } : {},
           ...policySource !== null ? { policySource } : {},
           ...typeof event.payload.timeoutMs === "number" ? { timeoutMs: event.payload.timeoutMs } : {},
+          fallback: spec.escalation?.fallback ?? "deny",
           escalation: true
         });
       }
@@ -10519,6 +10168,7 @@ function createDispatchBundle(context, options) {
           decidedBy,
           actionClass,
           reason,
+          ...source === "timeout" ? { fallback: spec.escalation?.fallback ?? "deny" } : {},
           ...runIdForPermissionAudit !== null ? { requestedBy: runIdForPermissionAudit } : {}
         });
       }
@@ -10571,8 +10221,10 @@ function createDispatchBundle(context, options) {
       runIdForPermissionAudit = envelope.id;
       lineage = lineageFor(req, envelope.id);
       if (req.lineage === void 0) {
-        capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
-        await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        if (capacityLease.assignmentId !== lineage.rootRunId) {
+          capacityAdmission.rename(capacityLease.leaseId, lineage.rootRunId);
+          await renameStoredAssignment(capacityLease.assignmentId, lineage.rootRunId);
+        }
         leaseSlot.transferToAssignment();
       }
       if (agentLedgerId !== null) {
@@ -10621,18 +10273,20 @@ function createDispatchBundle(context, options) {
         ...req.reroutes !== void 0 && req.reroutes.length > 0 ? { rerouteCount: req.reroutes.length } : {},
         ...lifecycle.target.modelCapabilities !== void 0 && lifecycle.target.modelCapabilities !== null && lifecycle.target.modelCapabilities.contextWindow > 0 ? { contextWindow: lifecycle.target.modelCapabilities.contextWindow } : {}
       };
-      context.bus.emit(BusChannels.DispatchEnqueued, {
-        runId: envelope.id,
-        agentId: req.agentId,
-        task: req.task,
-        agentAudience: lifecycle.agentAudience,
-        requestOrigin: lifecycle.requestOrigin,
-        targetId: lifecycle.target.target.id,
-        wireModelId: lifecycle.target.wireModelId,
-        runtimeId: lifecycle.target.runtime.id,
-        runtimeKind: lifecycle.runtimeKind,
-        ...fleetIdentity
-      });
+      if (req.lineage !== void 0) {
+        context.bus.emit(BusChannels.DispatchEnqueued, {
+          runId: envelope.id,
+          agentId: req.agentId,
+          task: req.task,
+          agentAudience: lifecycle.agentAudience,
+          requestOrigin: lifecycle.requestOrigin,
+          targetId: lifecycle.target.target.id,
+          wireModelId: lifecycle.target.wireModelId,
+          runtimeId: lifecycle.target.runtime.id,
+          runtimeKind: lifecycle.runtimeKind,
+          ...fleetIdentity
+        });
+      }
       context.bus.emit(BusChannels.DispatchStarted, {
         runId: envelope.id,
         agentId: req.agentId,
@@ -10737,10 +10391,10 @@ function createDispatchBundle(context, options) {
       const fleetGate = (() => {
         if (req.fleetGateReceipt === void 0) return null;
         try {
-          const content = readFileSync12(resolvePath(lifecycle.cwd, req.fleetGateReceipt.path));
-          return { path: req.fleetGateReceipt.path, pathHash: createHash8("sha256").update(content).digest("hex") };
+          const content = readFileSync11(resolvePath(lifecycle.cwd, req.fleetGateReceipt.path));
+          return { path: req.fleetGateReceipt.path, pathHash: createHash7("sha256").update(content).digest("hex") };
         } catch {
-          return { path: req.fleetGateReceipt.path, pathHash: createHash8("sha256").update("").digest("hex") };
+          return { path: req.fleetGateReceipt.path, pathHash: createHash7("sha256").update("").digest("hex") };
         }
       })();
       const ledgerContribution = (() => {
@@ -10995,18 +10649,7 @@ function createDispatchBundle(context, options) {
           cwd: lifecycle.cwd,
           networkAllowed: lifecycle.admission.allowedTools.includes(ToolNames.WebFetch),
           observedRunEffects,
-          filesystem: {
-            readFile(filePath) {
-              try {
-                return readFileSync12(filePath, "utf8");
-              } catch {
-                return null;
-              }
-            },
-            pathExists(filePath) {
-              return existsSync12(filePath);
-            }
-          }
+          filesystem: nodeResultContractFilesystem()
         });
         const resultValidation = resultContract?.applicable === true ? resultContract.validation : null;
         if (finalOutcome === "succeeded" && resultValidation?.conformance === "fail") {
@@ -11715,8 +11358,10 @@ function createDispatchBundle(context, options) {
     });
     return receipt;
   }
+  let journalBridge = null;
   const extension = {
     async start() {
+      if (options?.journalRunEvents === true) journalBridge = attachRunEventJournalBridge(context.bus);
       cleanupDispatchReservations({ startup: true, nowMs: now() });
       ledger = openLedger();
       try {
@@ -11768,6 +11413,8 @@ function createDispatchBundle(context, options) {
       for (const ownerId of ownedReservations) rollbackDispatchReservation(ownerId, now());
       ownedReservations.clear();
       await Promise.allSettled([...assignmentWrites]);
+      journalBridge?.stop();
+      journalBridge = null;
     }
   };
   function emitRunAborted(run, source) {
@@ -11788,6 +11435,26 @@ function createDispatchBundle(context, options) {
     const running = [];
     const totals = { ...finalizedTotals };
     const costAmounts = [...finalizedCosts];
+    for (const pending of pendingCapacity.values()) {
+      const startedAt = pending.timing.queuedAt ?? pending.timing.requestedAt ?? new Date(tickNow).toISOString();
+      running.push({
+        runId: pending.identity.runId,
+        agentId: pending.identity.agentId,
+        ...pending.identity.task !== void 0 ? { task: pending.identity.task } : {},
+        ...pending.identity.budget !== void 0 ? { budget: pending.identity.budget } : {},
+        runtimeKind: pending.identity.runtimeKind,
+        outcomePhase: "queued",
+        heartbeat: "n/a",
+        lineage: { parentRunId: null, rootRunId: pending.identity.runId, attempt: 0, depth: 0 },
+        startedAt,
+        elapsedMs: 0,
+        timing: deriveRunPhaseDurations(pending.timing, startedAt, new Date(tickNow).toISOString()),
+        tokens: { input: 0, output: 0, total: 0 },
+        costUsd: 0,
+        costProvenance: "unknown",
+        node: pending.node === null ? null : { ...pending.node }
+      });
+    }
     for (const run of active.values()) {
       let heartbeat = "n/a";
       if (run.heartbeatAt && Number.isFinite(heartbeatMonotonicAt(run.heartbeatAt))) {
@@ -11952,6 +11619,17 @@ function createDispatchBundle(context, options) {
     },
     abort(runId, reason) {
       const rootRunId = assignmentRootFor(runId);
+      const queued = pendingCapacity.get(rootRunId);
+      if (queued !== void 0 && capacityAdmission.cancel(rootRunId)) {
+        persistAssignment(cancelStoredAssignment(rootRunId), `${rootRunId}:cancel-queued`);
+        context.bus.emit(BusChannels.RunAborted, {
+          source: "dispatch_abort",
+          runId: rootRunId,
+          startedAt: null,
+          elapsedMs: null,
+          reason: reason?.detail ?? "operator abort while waiting for an endpoint slot"
+        });
+      }
       const assignment = assignments.get(rootRunId);
       if (assignment?.status === "running") {
         assignments.cancel(assignment.id);
@@ -12052,12 +11730,12 @@ var DispatchManifest = {
 
 // src/domains/dispatch/code-step-store.ts
 init_esm_shims();
-import { join as join14 } from "node:path";
+import { join as join13 } from "node:path";
 function codeStepDir(rootId) {
-  return join14(clioStateDir(), "code-steps", rootId);
+  return join13(clioStateDir(), "code-steps", rootId);
 }
 function codeStepRecordPath(rootId, runId) {
-  return join14(codeStepDir(rootId), `${runId}.json`);
+  return join13(codeStepDir(rootId), `${runId}.json`);
 }
 async function writeCodeStepRecord(rootId, record) {
   const path2 = codeStepRecordPath(rootId, record.runId);
@@ -12068,7 +11746,7 @@ async function writeCodeStepRecord(rootId, record) {
 
 // src/domains/dispatch/delegation-plan.ts
 init_esm_shims();
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 var DELEGATION_PROPOSAL_BRIEFING_MAX_BYTES = 12e3;
 function buildDelegationProposalBriefing(proposals) {
   const value = proposals.map((proposal) => `PROPOSAL ${proposal.agent}
@@ -12176,7 +11854,7 @@ function validateDelegationPlan(input) {
     }
   }
   const plan = { tasks };
-  return { ok: true, plan, hash: createHash9("sha256").update(JSON.stringify(plan)).digest("hex") };
+  return { ok: true, plan, hash: createHash8("sha256").update(JSON.stringify(plan)).digest("hex") };
 }
 
 // src/domains/dispatch/execution-scheduler.ts
@@ -12604,9 +12282,125 @@ function gateFailureLines(output) {
 
 // src/domains/dispatch/fleet-run.ts
 init_esm_shims();
-import { createHash as createHash10 } from "node:crypto";
-import { readFileSync as readFileSync13 } from "node:fs";
-import { join as join15 } from "node:path";
+import { createHash as createHash9 } from "node:crypto";
+import { readFileSync as readFileSync12 } from "node:fs";
+import { join as join14 } from "node:path";
+
+// src/domains/observability/cost.ts
+init_esm_shims();
+function emptyCostAggregate() {
+  return { knownUsd: 0, hasEstimated: false, hasUnknown: false, allKnownFree: false, calls: 0 };
+}
+function costWasMeasured(cost) {
+  return cost !== null && cost !== void 0 && cost.calls > 0;
+}
+function accumulateCostAmount(aggregate, amount, first) {
+  return {
+    knownUsd: aggregate.knownUsd + (amount.provenance === "unknown" ? 0 : amount.usd),
+    hasEstimated: aggregate.hasEstimated || amount.provenance === "estimated",
+    hasUnknown: aggregate.hasUnknown || amount.provenance === "unknown",
+    allKnownFree: amount.provenance === "known_free" && (first || aggregate.allKnownFree),
+    calls: aggregate.calls + 1
+  };
+}
+function aggregateCostAmounts(amounts) {
+  return amounts.reduce(
+    (aggregate, amount, index) => accumulateCostAmount(aggregate, amount, index === 0),
+    emptyCostAggregate()
+  );
+}
+function formatUsdAmount(value) {
+  if (!Number.isFinite(value) || value <= 0) return "$0.00";
+  return value < 0.01 ? `$${value.toFixed(4)}` : `$${value.toFixed(2)}`;
+}
+function formatCostAggregate(cost) {
+  if (!costWasMeasured(cost)) return null;
+  if (cost.allKnownFree) return "$0.00 local";
+  if (cost.hasUnknown) return cost.knownUsd > 0 ? `${formatUsdAmount(cost.knownUsd)} +?` : null;
+  if (cost.hasEstimated) return `~${formatUsdAmount(cost.knownUsd)} est`;
+  return formatUsdAmount(cost.knownUsd);
+}
+var COST_NOT_MEASURED = "not measured";
+function costAggregateForAmount(usd, provenance) {
+  return aggregateCostAmounts([{ usd, provenance: normalizeCostProvenance(provenance) }]);
+}
+function renderCostAggregate(cost) {
+  return formatCostAggregate(cost) ?? COST_NOT_MEASURED;
+}
+function renderCostAmount(usd, provenance) {
+  return renderCostAggregate(costAggregateForAmount(usd, provenance));
+}
+function emptyBreakdown() {
+  return { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, reasoningTokens: 0, totalTokens: 0 };
+}
+function createCostTracker() {
+  const log = [];
+  let total = 0;
+  const totals = emptyBreakdown();
+  return {
+    accumulate(providerId, attributedModelId, tokens, usd, breakdown, costProvenance, modelIdFacts, label) {
+      const resolvedUsd = usd ?? 0;
+      const provenance = normalizeCostProvenance(costProvenance);
+      const input = breakdown?.input ?? 0;
+      const output = breakdown?.output ?? 0;
+      const cacheRead = breakdown?.cacheRead ?? 0;
+      const cacheWrite = breakdown?.cacheWrite ?? 0;
+      const reasoningTokens = breakdown?.reasoningTokens ?? 0;
+      const apiCalls = breakdown?.apiCalls;
+      log.push({
+        providerId,
+        attributedModelId,
+        requestedModelIds: [...modelIdFacts?.requestedModelIds ?? [attributedModelId]],
+        responseModelIdObservationCounts: modelIdFacts ? { ...modelIdFacts.responseModelIdObservationCounts } : {
+          reportedCalls: 0,
+          notReportedCalls: 0,
+          notObservedCalls: apiCalls ?? 1,
+          legacyDifferenceOnlyCalls: 0
+        },
+        tokens,
+        usd: resolvedUsd,
+        provenance,
+        input,
+        output,
+        cacheRead,
+        cacheWrite,
+        reasoningTokens,
+        ...apiCalls !== void 0 ? { apiCalls } : {},
+        ...label !== void 0 ? { label } : {}
+      });
+      total += resolvedUsd;
+      totals.input += input;
+      totals.output += output;
+      totals.cacheRead += cacheRead;
+      totals.cacheWrite += cacheWrite;
+      totals.reasoningTokens += reasoningTokens;
+      totals.totalTokens += tokens;
+      return resolvedUsd;
+    },
+    sessionTotal() {
+      return total;
+    },
+    sessionCost() {
+      return aggregateCostAmounts(log.map((entry) => ({ usd: entry.usd, provenance: entry.provenance })));
+    },
+    sessionTokens() {
+      return { ...totals };
+    },
+    entries() {
+      return log;
+    },
+    reset() {
+      log.length = 0;
+      total = 0;
+      totals.input = 0;
+      totals.output = 0;
+      totals.cacheRead = 0;
+      totals.cacheWrite = 0;
+      totals.reasoningTokens = 0;
+      totals.totalTokens = 0;
+    }
+  };
+}
 
 // src/domains/dispatch/fleet-commit-attribution.ts
 init_esm_shims();
@@ -12698,6 +12492,11 @@ function fleetGateCorrelation(subject, decider) {
   );
   return { agent, target, modelFamily: modelFamily2, runtime, node, independent };
 }
+function fleetStepIntent(writes) {
+  if (writes === void 0 || writes.length === 0) return null;
+  const built = declaredScopeIntent({ relevantPaths: writes });
+  return built.ok ? built.intent : null;
+}
 function fleetPlanWaveIndex(plan, stepId) {
   return plan.waves.findIndex((wave) => wave.includes(stepId));
 }
@@ -12769,7 +12568,7 @@ async function executeFleetRun(input) {
   for (const [stepId, replayedResult] of replayed) {
     try {
       const receipt = JSON.parse(
-        readFileSync13(join15(clioStateDir(), "receipts", `${replayedResult.terminalRunId}.json`), "utf8")
+        readFileSync12(join14(clioStateDir(), "receipts", `${replayedResult.terminalRunId}.json`), "utf8")
       );
       receiptsByStep.set(stepId, receipt);
     } catch {
@@ -12790,6 +12589,9 @@ async function executeFleetRun(input) {
       succeeded: true,
       terminalRunId: replayedResult.terminalRunId,
       costUsd: receiptsByStep.get(stepId)?.costUsd ?? 0,
+      // A replay whose receipt no longer exists on disk has no cost claim at
+      // all, which is `unknown` rather than a zero the projection invented.
+      costProvenance: receiptsByStep.get(stepId)?.costProvenance ?? "unknown",
       result: replayedResult
     });
     await fileStepAttempt(replayedResult.terminalRunId);
@@ -12859,11 +12661,13 @@ async function executeFleetRun(input) {
         if (step.planParentId !== void 0 && parentReceipt === void 0) {
           throw new Error(`fleet dynamic step '${step.id}' has no terminal plan-step receipt`);
         }
+        const stepIntent = fleetStepIntent(step.writes);
         const request = {
           agentId: step.agentId,
           executionRole: step.executionRole,
           task: step.task,
           cwd: workspaceRoot,
+          ...stepIntent === null ? {} : { intent: stepIntent },
           predecessorHandoffs: handoffs,
           requestOrigin: "user",
           lineage: {
@@ -12951,11 +12755,11 @@ async function executeFleetRun(input) {
             if (step.gate !== void 0 && succeeded) {
               let gateBytes = "";
               try {
-                gateBytes = readFileSync13(join15(workspaceRoot, step.gate.path), "utf8");
+                gateBytes = readFileSync12(join14(workspaceRoot, step.gate.path), "utf8");
               } catch {
                 gateBytes = "";
               }
-              gatePathHash = createHash10("sha256").update(gateBytes).digest("hex");
+              gatePathHash = createHash9("sha256").update(gateBytes).digest("hex");
               const command = input.commands?.commands.get(step.gate.commandId);
               if (gateBytes.length === 0 || command === void 0) {
                 stepSucceeded = false;
@@ -13007,11 +12811,12 @@ async function executeFleetRun(input) {
               succeeded: stepSucceeded,
               terminalRunId: receipt.runId,
               costUsd: receipt.costUsd,
+              costProvenance: receipt.costProvenance,
               receipt,
               ...failureReason !== void 0 ? { failureReason } : {}
             });
             notice(
-              `step ${step.id} ${step.agentId}: ${stepSucceeded ? "succeeded" : "failed"}${failureReason !== void 0 ? ` reason=${failureReason}` : ""} assignment=${handle.runId} terminal-run=${receipt.runId} cost=$${receipt.costUsd.toFixed(4)}`
+              `step ${step.id} ${step.agentId}: ${stepSucceeded ? "succeeded" : "failed"}${failureReason !== void 0 ? ` reason=${failureReason}` : ""} assignment=${handle.runId} terminal-run=${receipt.runId} cost=${renderCostAmount(receipt.costUsd, receipt.costProvenance)}`
             );
             return {
               stepId: step.id,
@@ -13070,6 +12875,8 @@ async function executeFleetRun(input) {
           succeeded: outcome.report.passed,
           terminalRunId: outcome.record.runId,
           costUsd: 0,
+          // No model ran, so nothing needed pricing. This zero was observed.
+          costProvenance: "known_free",
           codeStep: outcome.record,
           recordPath
         });
@@ -13193,6 +13000,9 @@ async function executeFleetRun(input) {
     result,
     receipts,
     totalCostUsd: receipts.reduce((sum, receipt) => sum + receipt.costUsd, 0),
+    totalCost: aggregateCostAmounts(
+      receipts.map((receipt) => ({ usd: receipt.costUsd, provenance: receipt.costProvenance }))
+    ),
     requiredStepCount: required.length,
     succeededStepCount,
     resolvedLoopCount: result.loops.length - failedLoops.length,
@@ -13420,6 +13230,37 @@ init_esm_shims();
 // src/domains/evidence/types.ts
 init_esm_shims();
 var EVIDENCE_VERSION = 1;
+var EVIDENCE_TAGS = [
+  "audit-linked",
+  "audit-missing",
+  "best-effort-link",
+  "timeout",
+  "context-overflow",
+  "provider-transient",
+  "missing-dependency",
+  "wrong-runtime",
+  "proxy-validation",
+  "no-validation",
+  "destructive-cleanup",
+  "blocked-tool",
+  "escalation",
+  "external-bypass",
+  "external-approximation",
+  "independent-review",
+  "context-provenance",
+  "completion-evidence",
+  "receipt-integrity",
+  "receipt-retired",
+  "protected-artifact",
+  "tool-loop",
+  "test-failure",
+  "build-failure",
+  "cwd-missing",
+  "session-linked",
+  "session-missing",
+  "auth-failure",
+  "unknown"
+];
 var FAILURE_CAUSE_TAG_ORDER = [
   "timeout",
   "auth-failure",
@@ -13484,7 +13325,7 @@ function latestGateDecisionForRun(decisions, runId) {
 // src/domains/evidence/store.ts
 init_esm_shims();
 import { readdir, readFile } from "node:fs/promises";
-import { join as join16 } from "node:path";
+import { join as join15 } from "node:path";
 var EVIDENCE_FILES = [
   "overview.json",
   "transcript.md",
@@ -13500,11 +13341,11 @@ var EVIDENCE_FILES = [
   "findings.md"
 ];
 function evidenceRoot(dataDir) {
-  return join16(dataDir, "evidence");
+  return join15(dataDir, "evidence");
 }
 function evidenceDirectory(dataDir, evidenceId) {
   assertSafeId(evidenceId, "evidence");
-  return join16(evidenceRoot(dataDir), evidenceId);
+  return join15(evidenceRoot(dataDir), evidenceId);
 }
 var EvidenceNotFoundError = class extends Error {
   constructor(evidenceId) {
@@ -13520,7 +13361,7 @@ function isMissingFile(error) {
 async function loadEvidenceOverview(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "overview.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "overview.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) throw new EvidenceNotFoundError(evidenceId);
     throw error;
@@ -13532,7 +13373,7 @@ async function inspectEvidence(dataDir, evidenceId) {
   const overview = await loadEvidenceOverview(dataDir, evidenceId);
   let findingsRaw;
   try {
-    findingsRaw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "findings.json"), "utf8");
+    findingsRaw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "findings.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) throw new Error(`evidence artifact ${evidenceId} is missing findings.json`);
     throw error;
@@ -13544,7 +13385,7 @@ async function inspectEvidence(dataDir, evidenceId) {
 async function loadEvidenceTrustStatus(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "trust-status.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "trust-status.json"), "utf8");
   } catch (error) {
     if (isMissingFile(error)) {
       return { version: 1, evidenceId, projection: "historical_format", runs: [] };
@@ -13577,7 +13418,7 @@ async function loadEvidenceTrustStatus(dataDir, evidenceId) {
 async function loadEvidenceRunProvenance(dataDir, evidenceId) {
   let raw;
   try {
-    raw = await readFile(join16(evidenceDirectory(dataDir, evidenceId), "receipt.json"), "utf8");
+    raw = await readFile(join15(evidenceDirectory(dataDir, evidenceId), "receipt.json"), "utf8");
   } catch (error) {
     const err = error;
     if (err.code === "ENOENT") return [];
@@ -13631,6 +13472,7 @@ function parseOverview(value, source) {
   const totals = readTotals(value.totals, `${source}.totals`);
   const tags = readStringArray(value, source, "tags");
   const files = readStringArray(value, source, "files");
+  const redactionCount = typeof value.redactionCount === "number" && Number.isFinite(value.redactionCount) ? value.redactionCount : void 0;
   return {
     version: 1,
     evidenceId,
@@ -13649,7 +13491,8 @@ function parseOverview(value, source) {
     modelIds,
     totals,
     tags,
-    files
+    files,
+    ...redactionCount === void 0 ? {} : { redactionCount }
   };
 }
 function parseFindingsFile(value, source) {
@@ -14149,22 +13992,22 @@ function finding(index, severity, tag, runId, message) {
 }
 async function writeEvidenceFiles(directory, overview, runSources, findings, sessionLinks, auditLinks, toolEventRows, gateDecisions, trustStatus, protectedArtifacts, transcript) {
   await mkdir(directory, { recursive: true });
-  await writeJson(join17(directory, "overview.json"), overview);
+  await writeJson(join16(directory, "overview.json"), overview);
   await writeFile(
-    join17(directory, "transcript.md"),
+    join16(directory, "transcript.md"),
     transcript ?? renderTranscript(overview, runSources, sessionLinks, trustStatus),
     "utf8"
   );
-  await writeJsonl(join17(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
-  await writeJsonl(join17(directory, "trace.cleaned.jsonl"), cleanedTraceRows(runSources, findings, toolEventRows));
-  await writeJsonl(join17(directory, "tool-events.jsonl"), toolEventRows);
-  await writeJsonl(join17(directory, "audit-linked.jsonl"), auditLinks.rows);
-  await writeJson(join17(directory, "receipt.json"), receiptsFile(runSources));
-  await writeJson(join17(directory, "gate-decisions.json"), gateDecisions);
-  await writeJson(join17(directory, "trust-status.json"), trustStatus);
-  await writeJson(join17(directory, "protected-artifacts.json"), protectedArtifacts);
-  await writeJson(join17(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile(join17(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
+  await writeJsonl(join16(directory, "trace.raw.jsonl"), rawTraceRows(runSources));
+  await writeJsonl(join16(directory, "trace.cleaned.jsonl"), cleanedTraceRows(runSources, findings, toolEventRows));
+  await writeJsonl(join16(directory, "tool-events.jsonl"), toolEventRows);
+  await writeJsonl(join16(directory, "audit-linked.jsonl"), auditLinks.rows);
+  await writeJson(join16(directory, "receipt.json"), receiptsFile(runSources));
+  await writeJson(join16(directory, "gate-decisions.json"), gateDecisions);
+  await writeJson(join16(directory, "trust-status.json"), trustStatus);
+  await writeJson(join16(directory, "protected-artifacts.json"), protectedArtifacts);
+  await writeJson(join16(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
+  await writeFile(join16(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
 }
 function rawTraceRows(runSources) {
   const rows = [];
@@ -14842,7 +14685,7 @@ function axisFindings(offset, source, status) {
   return out;
 }
 async function readRunLedger(stateDir) {
-  const target = join17(stateDir, "runs.json");
+  const target = join16(stateDir, "runs.json");
   let raw;
   try {
     raw = await readFile2(target, "utf8");
@@ -14863,7 +14706,7 @@ function selectRunEnvelopes(ledger, source) {
   });
 }
 async function readReceipt(stateDir, envelope) {
-  const receiptPath = envelope.receiptPath ?? join17(stateDir, "receipts", `${envelope.id}.json`);
+  const receiptPath = envelope.receiptPath ?? join16(stateDir, "receipts", `${envelope.id}.json`);
   let raw;
   try {
     raw = await readFile2(receiptPath, "utf8");
@@ -15152,7 +14995,7 @@ function sanitizeEvidenceId(value) {
 // src/domains/evidence/eval.ts
 init_esm_shims();
 import { mkdir as mkdir2, readdir as readdir2, readFile as readFile3, writeFile as writeFile2 } from "node:fs/promises";
-import { join as join18 } from "node:path";
+import { join as join17 } from "node:path";
 
 // src/domains/eval/index.ts
 init_esm_shims();
@@ -15353,19 +15196,19 @@ async function writeEvalEvidenceFiles(directory, artifact, overview, findings, t
   };
   const redactedArtifact = redactArtifactForStorage(artifact);
   await mkdir2(directory, { recursive: true });
-  await writeJson2(join18(directory, "overview.json"), overview);
-  await writeFile2(join18(directory, "transcript.md"), renderEvalTranscript(redactedArtifact, overview), "utf8");
-  await writeJsonl2(join18(directory, "trace.raw.jsonl"), rawEvalTraceRows(redactedArtifact));
-  await writeJsonl2(join18(directory, "trace.cleaned.jsonl"), cleanedEvalTraceRows(redactedArtifact, findings));
-  await writeJsonl2(join18(directory, "tool-events.jsonl"), redactArtifactForStorage(toolEventRows));
-  await writeJsonl2(join18(directory, "audit-linked.jsonl"), linkedRuns.auditRows);
-  await writeJson2(join18(directory, "receipt.json"), receiptsFile2);
-  await writeJson2(join18(directory, "gate-decisions.json"), gateDecisions);
-  await writeJson2(join18(directory, "trust-status.json"), trustStatus);
-  await writeJson2(join18(directory, "protected-artifacts.json"), emptyProtected);
-  await writeJson2(join18(directory, "eval-result.json"), redactedArtifact);
-  await writeJson2(join18(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
-  await writeFile2(join18(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
+  await writeJson2(join17(directory, "overview.json"), overview);
+  await writeFile2(join17(directory, "transcript.md"), renderEvalTranscript(redactedArtifact, overview), "utf8");
+  await writeJsonl2(join17(directory, "trace.raw.jsonl"), rawEvalTraceRows(redactedArtifact));
+  await writeJsonl2(join17(directory, "trace.cleaned.jsonl"), cleanedEvalTraceRows(redactedArtifact, findings));
+  await writeJsonl2(join17(directory, "tool-events.jsonl"), redactArtifactForStorage(toolEventRows));
+  await writeJsonl2(join17(directory, "audit-linked.jsonl"), linkedRuns.auditRows);
+  await writeJson2(join17(directory, "receipt.json"), receiptsFile2);
+  await writeJson2(join17(directory, "gate-decisions.json"), gateDecisions);
+  await writeJson2(join17(directory, "trust-status.json"), trustStatus);
+  await writeJson2(join17(directory, "protected-artifacts.json"), emptyProtected);
+  await writeJson2(join17(directory, "eval-result.json"), redactedArtifact);
+  await writeJson2(join17(directory, "findings.json"), findingsFile(overview.evidenceId, [...findings]));
+  await writeFile2(join17(directory, "findings.md"), renderEvidenceFindingsMarkdown(findings, trustStatus), "utf8");
 }
 function rawEvalTraceRows(artifact) {
   return artifact.results.map((result) => ({
@@ -15506,7 +15349,7 @@ async function linkEvalRuns(stateDir, artifact) {
 }
 async function readRunLedger2(stateDir) {
   try {
-    const raw = await readFile3(join18(stateDir, "runs.json"), "utf8");
+    const raw = await readFile3(join17(stateDir, "runs.json"), "utf8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed) ? parsed.filter(isRecord12) : [];
   } catch {
@@ -15517,7 +15360,7 @@ function evalRunMatches(artifact, envelope) {
   return artifact.results.some((result) => result.runId === envelope.id);
 }
 async function readReceiptForRun(stateDir, envelope) {
-  const path2 = envelope.receiptPath ?? join18(stateDir, "receipts", `${envelope.id}.json`);
+  const path2 = envelope.receiptPath ?? join17(stateDir, "receipts", `${envelope.id}.json`);
   try {
     const parsed = JSON.parse(await readFile3(path2, "utf8"));
     return isRecord12(parsed) ? parsed : null;
@@ -15546,7 +15389,7 @@ async function countSessionEntries(stateDir, sessionIds) {
   return count;
 }
 async function findSessionLedgerPath(stateDir, sessionId) {
-  const root = join18(stateDir, "sessions");
+  const root = join17(stateDir, "sessions");
   let cwdHashes;
   try {
     cwdHashes = await readdir2(root);
@@ -15554,7 +15397,7 @@ async function findSessionLedgerPath(stateDir, sessionId) {
     return null;
   }
   for (const cwdHash of cwdHashes) {
-    const path2 = join18(root, cwdHash, sessionId, "current.jsonl");
+    const path2 = join17(root, cwdHash, sessionId, "current.jsonl");
     try {
       await readFile3(path2, "utf8");
       return path2;
@@ -15564,7 +15407,7 @@ async function findSessionLedgerPath(stateDir, sessionId) {
   return null;
 }
 async function linkedEvalAuditRows(stateDir, runIds, artifact) {
-  const root = join18(stateDir, "audit");
+  const root = join17(stateDir, "audit");
   let files;
   try {
     files = await readdir2(root);
@@ -15573,7 +15416,7 @@ async function linkedEvalAuditRows(stateDir, runIds, artifact) {
   }
   const rows = [];
   for (const file of files.filter((name) => name.endsWith(".jsonl")).sort(compareCodepoints)) {
-    const raw = await readFile3(join18(root, file), "utf8").catch(() => "");
+    const raw = await readFile3(join17(root, file), "utf8").catch(() => "");
     const lines = raw.split("\n");
     for (let index = 0; index < lines.length; index += 1) {
       const line = lines[index];
@@ -15684,12 +15527,12 @@ function canonicalJson3(value) {
   throw new Error(`response schema digest cannot represent ${typeof value}`);
 }
 function canonicalResponseSchemaDigest(schema) {
-  return createHash11("sha256").update(canonicalJson3(schema), "utf8").digest("hex");
+  return createHash10("sha256").update(canonicalJson3(schema), "utf8").digest("hex");
 }
 function typedValidationFactsFromToolStats(toolStats) {
   return toolStats.filter((stat) => stat.tool === "verify" && stat.count > 0).map((stat) => ({
     sourceId: "tool:verify",
-    validatorDigest: createHash11("sha256").update(canonicalJson3(stat), "utf8").digest("hex"),
+    validatorDigest: createHash10("sha256").update(canonicalJson3(stat), "utf8").digest("hex"),
     passed: stat.ok === stat.count && stat.errors === 0 && stat.blocked === 0
   }));
 }
@@ -15812,14 +15655,13 @@ export {
   createStdioServerTransport,
   ACP_USAGE_META_KEY,
   ACP_SESSION_META_KEY,
+  ACP_AGENT_META_KEY,
   ACP_MAX_STRING_BYTES,
   ACP_MAX_RAW_RECORD_BYTES,
   ACP_MAX_CHUNK_BYTES,
   ACP_MAX_TOOL_CALL_ID_BYTES,
   compile,
   compileWorker,
-  WORKER_OUTPUT_MAX_BYTES,
-  durableAssistantTextFromEvent,
   setCapacityDraining,
   capacityDrain,
   capacityLeaseUsage,
@@ -15829,20 +15671,20 @@ export {
   renderDispatchReviewerTask,
   createRunReceiptQuality,
   UNVERIFIABLE_RECEIPT_VERIFICATION,
-  decideReviewGate,
-  parseCompeteGateResult,
-  stagePendingGateOutput,
-  stagePendingGateDecision,
-  resolvePendingGateDecision,
-  materializePendingGateDecision,
-  finalizePendingGateDecision,
-  readPendingGateDecisions,
-  preflightPendingGateDecisionMaterialization,
-  preparePendingGateDecisionRecovery,
-  readGateDecisionArtifacts,
+  assistantTextFromEvent,
+  receiptResponseModelIdObservationLabel,
+  createDispatchRunEventRegistry,
   readFleetRun,
+  listFleetRuns,
   openLedger,
   executePlan,
+  aggregateCostAmounts,
+  formatCostAggregate,
+  COST_NOT_MEASURED,
+  costAggregateForAmount,
+  renderCostAggregate,
+  renderCostAmount,
+  createCostTracker,
   planFleetResume,
   executeFleetRun,
   DispatchDomainModule,
@@ -15850,14 +15692,16 @@ export {
   extractRunProvenance,
   provenanceTranscriptLines,
   provenanceCompactSuffix,
+  EVIDENCE_TAGS,
   FAILURE_CAUSE_TAGS,
   evidenceDirectory,
   EvidenceNotFoundError,
   inspectEvidence,
+  loadEvidenceTrustStatus,
   loadEvidenceRunProvenance,
   listEvidenceOverviews,
   buildEvidence,
   summarizeEvalResults,
   buildEvalEvidence
 };
-//# sourceMappingURL=chunk-TEO2TLVN.js.map
+//# sourceMappingURL=chunk-BUMFYQFY.js.map