@iowarp/clio-coder 0.4.2 → 0.4.3

package/dist/{chunk-I66ZTYNP.js → chunk-AF4YM7Z4.js}

@@ -1,4 +1,16 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  applyTaskWorktree,
+  captureWorkspaceSnapshot,
+  cleanupTaskWorktree,
+  createTaskWorktree,
+  createWriteBoundaryEnforcer,
+  gitCheckoutRoot
+} from "./chunk-B4VEBZKF.js";
+import {
+  executionPlanAncestors,
+  spliceExecutionPlan
+} from "./chunk-E3TPLWFX.js";
 import {
   decideReviewGate,
   materializePendingGateDecision,
@@ -6,7 +18,7 @@ import {
   readGateDecisionArtifactsForRunIds,
   stagePendingGateDecision,
   verifyGateDecisionArtifact
-} from "./chunk-ZGNYYXQ6.js";
+} from "./chunk-WRBAGUNF.js";
 import {
   RUN_RECEIPT_INTEGRITY_ALGORITHM,
   RUN_RECEIPT_INTEGRITY_VERSION,
@@ -24,40 +36,28 @@ import {
   trustVerdict,
   verifyReceiptIntegrity,
   withReceiptIntegrity
-} from "./chunk-B74PXLU7.js";
+} from "./chunk-IWT4SF4R.js";
 import {
   protectedArtifactFromSessionEntry,
   protectedArtifactStateFromSessionEntries,
   readAuditRows,
   readSessionEntriesForId,
   responseModelIdObservationFromRecord
-} from "./chunk-X7IARSHT.js";
+} from "./chunk-JKKCYP3C.js";
+import {
+  loadEvalArtifact,
+  parseEvalArtifactV4,
+  redactArtifactForStorage,
+  sumEvalHarnessMetrics
+} from "./chunk-FTMGRKEF.js";
 import {
   codeStepDir,
   writeCodeStepRecord
-} from "./chunk-KPXDY6QF.js";
-import {
-  applyTaskWorktree,
-  captureWorkspaceSnapshot,
-  cleanupTaskWorktree,
-  createTaskWorktree,
-  createWriteBoundaryEnforcer,
-  gitCheckoutRoot
-} from "./chunk-W6NIE6OW.js";
-import {
-  executionPlanAncestors,
-  spliceExecutionPlan
-} from "./chunk-DZAW46HP.js";
+} from "./chunk-XRZT5WY5.js";
 import {
   parseRigorOverride,
   resolveRigor
 } from "./chunk-RVG5JXAL.js";
-import {
-  loadEvalArtifact,
-  parseEvalArtifactV4,
-  redactArtifactForStorage,
-  sumEvalHarnessMetrics
-} from "./chunk-5PFYMY2V.js";
 import {
   defaultRunEventJournal,
   removeRunEventJournals
@@ -69,6 +69,10 @@ import {
   durableAssistantTextFromEvent,
   startDispatchEventPump
 } from "./chunk-T56WDKA5.js";
+import {
+  FLEET_COMMAND_BASE_ENV,
+  normalizeWriteBoundary
+} from "./chunk-2VIKGWFZ.js";
 import {
   LOCAL_NODE_ID,
   computeSettingsFingerprint,
@@ -79,11 +83,7 @@ import {
   receiptAttestationFields,
   routeFactVerdict,
   spawnNativeWorker
-} from "./chunk-4JDLP6ZS.js";
-import {
-  FLEET_COMMAND_BASE_ENV,
-  normalizeWriteBoundary
-} from "./chunk-3F7VUY77.js";
+} from "./chunk-6PTFB5VS.js";
 import {
   AGENT_LEDGER_PROMPT_MAX_CHARS,
   COUNCIL_MIN_MEMBERS,
@@ -126,7 +126,7 @@ import {
   serializeWorkerRuntimeDescriptor,
   toolPromptHintsForNames,
   validateJobSpec
-} from "./chunk-IKSLQ4XV.js";
+} from "./chunk-PAJQJ7BS.js";
 import {
   decideRoute,
   defaultRoutingIntent,
@@ -144,13 +144,13 @@ import {
   routingIntentRejection,
   sameRouteIdentity,
   toRouteCandidate
-} from "./chunk-HIICAHCJ.js";
+} from "./chunk-EKCHAPYA.js";
 import {
   assessFinishContract
-} from "./chunk-IDNA72AH.js";
+} from "./chunk-RSJ25QSL.js";
 import {
   WRITE_ROOT_REFUSED_TOOLS
-} from "./chunk-FVDGR2ZL.js";
+} from "./chunk-XIVNBFZS.js";
 import {
   describeCallAction
 } from "./chunk-NEDJ26B5.js";
@@ -168,26 +168,7 @@ import {
 } from "./chunk-H7IXIC72.js";
 import {
   compareCodepoints
-} from "./chunk-VN3SHNBN.js";
-import {
-  DEFAULT_AUTONOMY_LEVEL,
-  autonomyDenyRejection,
-  isSkillActivation,
-  mapAutonomy
-} from "./chunk-FSP7CMNU.js";
-import {
-  createRedactionTally,
-  redactSecretsDeep,
-  redactSecretsText
-} from "./chunk-4BJ5BYCE.js";
-import {
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
-import {
-  canonicalJson,
-  endpointIdentityHash,
-  parseAgentLedgerBody
-} from "./chunk-VAVR4IJY.js";
+} from "./chunk-7DICMOS6.js";
 import {
   PATH_BOUNDARY_MAX_ENTRIES,
   pathBoundaryCovers,
@@ -203,10 +184,10 @@ import {
   resolveAgentToolCompatibility,
   resultContractAuthorship,
   validateRecipeResult
-} from "./chunk-PGF63K6I.js";
+} from "./chunk-B4OAX3SI.js";
 import {
   detectValidationCommand
-} from "./chunk-IKOZFYBN.js";
+} from "./chunk-I7ZPNEJM.js";
 import {
   isProjectVerifierCheckId,
   isVerificationScriptName
@@ -214,6 +195,25 @@ import {
 import {
   canonicalizeExistingPath
 } from "./chunk-ECH6PKUQ.js";
+import {
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
+import {
+  canonicalJson,
+  endpointIdentityHash,
+  parseAgentLedgerBody
+} from "./chunk-VAVR4IJY.js";
+import {
+  DEFAULT_AUTONOMY_LEVEL,
+  autonomyDenyRejection,
+  isSkillActivation,
+  mapAutonomy
+} from "./chunk-JGRC33J2.js";
+import {
+  createRedactionTally,
+  redactSecretsDeep,
+  redactSecretsText
+} from "./chunk-4BJ5BYCE.js";
 import {
   ToolNames,
   isBuiltinToolName
@@ -226,6 +226,8 @@ import {
   endpointLabel,
   firstRuntimeResolutionError,
   foregroundStreamUsage,
+  gatewayRoutingObservationFromRecord,
+  gatewayRoutingObservationLabel,
   isDispatchEligibleRuntime,
   normalizeCostProvenance,
   resolveEndpointCapacities,
@@ -233,13 +235,13 @@ import {
   resolveRuntimeTarget,
   runtimeResolutionWarnings,
   runtimeTargetSnapshot
-} from "./chunk-BYMNWQ7O.js";
+} from "./chunk-XPWWI35G.js";
 import {
   ceilChars
-} from "./chunk-CWVRRIEI.js";
+} from "./chunk-NZMNUPZZ.js";
 import {
   atomicWrite
-} from "./chunk-MQXIVJ35.js";
+} from "./chunk-HAXOFFRH.js";
 import {
   assertSafeId
 } from "./chunk-R346GLFC.js";
@@ -250,19 +252,6 @@ import {
 import {
   BusChannels
 } from "./chunk-F4EKGO4N.js";
-import {
-  attributeCommitMessage,
-  gitCommitAttributionEnabled,
-  reportCommitAttributionDiagnostic,
-  withManagedGitCommitAttributionEnvironment
-} from "./chunk-JIEGK6UF.js";
-import {
-  MAX_TIMER_DELAY_MS,
-  rawDurationMs
-} from "./chunk-EBY63B7G.js";
-import {
-  AI_AGENT_NAME
-} from "./chunk-6EJMN2Y3.js";
 import {
   readClioVersion,
   readPiMonoVersion,
@@ -278,9 +267,22 @@ import {
   GUARDRAIL_DEFAULTS,
   resolveGuardrail
 } from "./chunk-S66XZJOF.js";
+import {
+  attributeCommitMessage,
+  gitCommitAttributionEnabled,
+  reportCommitAttributionDiagnostic,
+  withManagedGitCommitAttributionEnvironment
+} from "./chunk-JIEGK6UF.js";
+import {
+  MAX_TIMER_DELAY_MS,
+  rawDurationMs
+} from "./chunk-EBY63B7G.js";
+import {
+  AI_AGENT_NAME
+} from "./chunk-6EJMN2Y3.js";
 import {
   targetRequiresAuth
-} from "./chunk-WNP7O5WZ.js";
+} from "./chunk-ID64D7PE.js";
 import {
   FILE_LOCK_ACQUIRE_TIMEOUT_MS,
   withStateFileLock,
@@ -291,15 +293,15 @@ import {
   processAlive,
   processBirthToken
 } from "./chunk-3I7MS7N2.js";
+import {
+  resolveEffectivePricing
+} from "./chunk-5OIVVPHF.js";
 import {
   clioDataDir,
   clioStateDir,
   resolveClioDirs,
   stateRootRemoved
 } from "./chunk-BYP5D4HI.js";
-import {
-  resolveEffectivePricing
-} from "./chunk-O42A54GG.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -1239,6 +1241,19 @@ function capacityLeaseUsage(options) {
   }
   return { global: leases.length, nodes, endpoints, endpointHolders };
 }
+function endpointCapacityUsage() {
+  return withStateFileLockSync(capacityStateLockPath(), () => {
+    const file = readCapacityStateUnsafe();
+    reclaim(file, Date.now(), defaultProbe);
+    const held2 = heldReservationUsage(file.reservations);
+    const usage = { ...foregroundStreamUsage() };
+    for (const [key, count] of Object.entries(held2.endpoints)) usage[key] = (usage[key] ?? 0) + count;
+    for (const lease of file.leases) {
+      if (lease.endpointKey !== void 0) usage[lease.endpointKey] = (usage[lease.endpointKey] ?? 0) + 1;
+    }
+    return usage;
+  });
+}
 function createNodeLeaseUsageReader(options) {
   const cacheMs = options.cacheMs ?? 200;
   let cache = null;
@@ -3715,6 +3730,19 @@ function createLeaseSlotGuard(controller, leaseId, ownedByAssignment) {
 }
 var PUMP_MIN_MS = 10;
 var PUMP_MAX_MS = 500;
+function foregroundEndpointBlock(input) {
+  if (input.endpointKey === void 0) return null;
+  const limit = input.limits.endpoints[input.endpointKey];
+  const active = input.usage.endpoints[input.endpointKey] ?? 0;
+  const holders = input.usage.endpointHolders?.[input.endpointKey];
+  if (limit === void 0 || active < limit || !holders || holders.foregroundStreams < 1) return null;
+  return [
+    `dispatch: admission denied: endpoint '${endpointLabel(input.endpointKey)}' cannot open a worker slot`,
+    ` while ${describeEndpointCapacityHolders(holders)} (${active}/${limit} slots).`,
+    " The foreground agent cannot release its slot until this tool call returns, so waiting here would deadlock.",
+    " Point workers at a second endpoint or raise this target's maxConcurrentRequests to the server's actual slot count."
+  ].join("");
+}
 function describeAdmissionFailure(input) {
   if (input.state === "canceled") return "dispatch: admission canceled before a capacity slot opened";
   if (input.endpointKey !== void 0) {
@@ -3805,6 +3833,14 @@ function createCapacityAdmissionController(options) {
   const controller = {
     async admit(input) {
       if (draining) throw new Error("dispatch: admission denied: this process is shutting down");
+      const limits = options.limits();
+      const usage = options.usage?.() ?? capacityLeaseUsage({ nowMs: now() });
+      const foregroundBlock = foregroundEndpointBlock({
+        ...input.endpointKey !== void 0 ? { endpointKey: input.endpointKey } : {},
+        limits,
+        usage
+      });
+      if (foregroundBlock !== null) throw new Error(foregroundBlock);
       const queuedAt = now();
       const requestId = `admit-${queuedAt.toString(36)}-${randomBytes3(5).toString("hex")}`;
       pending.set(input.assignmentId, requestId);
@@ -4367,6 +4403,7 @@ var REPORTING_CONTRACT_KINDS = /* @__PURE__ */ new Set([
   "scout-report",
   "verifier-report",
   "research-report",
+  "world-knowledge-report",
   "provenance-report",
   "debugger-report",
   "oracle-report"
@@ -6529,6 +6566,11 @@ function receiptResponseModelIdObservationLabel(receipt) {
   });
   return `response_model_id_observation=${labels.join(",")}`;
 }
+function receiptGatewayRoutingLabel(receipt) {
+  const observations = (receipt.upstreamResponses ?? []).map((response) => gatewayRoutingObservationFromRecord(response)).filter((observation) => observation !== null);
+  if (observations.length === 0) return null;
+  return observations.map(gatewayRoutingObservationLabel).join(" | ");
+}
 
 // src/tools/dispatch-run-events.ts
 var RUN_TAIL_ENTRY_LIMIT = 100;
@@ -7225,6 +7267,36 @@ function describeUngroundedValidations(grounding) {
   return grounding.basis === "no-command-executed" ? `unverifiable validation: this run claimed ${named} passed and executed no command at all (${grounding.grounded}/${grounding.claimed} claims grounded)` : `unmatched validation: this run claimed ${named} passed; it did run commands, but none the harness recognizes as that check (${grounding.grounded}/${grounding.claimed} claims grounded)`;
 }
 
+// src/domains/dispatch/worker-model-metadata.ts
+init_esm_shims();
+async function prepareWorkerModelMetadata(providers, targetId, deadlineAt, signal, now = Date.now) {
+  signal?.throwIfAborted();
+  const status = providers.list().find((entry) => entry.target.id === targetId);
+  if (status?.target.runtime !== "litellm" || status.health.lastCheckAt !== null) return;
+  const remainingMs = deadlineAt - now();
+  const deadlineError = new Error("dispatch: admission deadline expired during worker model metadata preparation");
+  if (remainingMs <= 0) throw deadlineError;
+  const controller = new AbortController();
+  const abort = () => controller.abort(signal?.reason);
+  signal?.addEventListener("abort", abort, { once: true });
+  const timer = setTimeout(() => controller.abort(deadlineError), Math.min(remainingMs, 2147483647));
+  let rejectAborted;
+  const aborted = new Promise((_resolve, reject) => {
+    rejectAborted = reject;
+  });
+  const onAbort = () => rejectAborted(controller.signal.reason);
+  controller.signal.addEventListener("abort", onAbort, { once: true });
+  try {
+    await Promise.race([providers.probeTarget(targetId, { reasoning: false, signal: controller.signal }), aborted]);
+    controller.signal.throwIfAborted();
+    if (now() >= deadlineAt) throw deadlineError;
+  } finally {
+    clearTimeout(timer);
+    signal?.removeEventListener("abort", abort);
+    controller.signal.removeEventListener("abort", onAbort);
+  }
+}
+
 // src/domains/dispatch/extension.ts
 var DEFAULT_HEARTBEAT_INTERVAL_MS = 1e3;
 var DEFAULT_RESILIENCE_COOLDOWN_MS = 15e3;
@@ -7750,6 +7822,13 @@ function runtimeLimitations(runtimeKind, runtimeId) {
       "Claude CLI subprocess executes Claude Code tools; Clio constrains permission mode and forbids dangerous bypass unless explicitly gated"
     ];
   }
+  if (runtimeKind === "subprocess" && runtimeId === "antigravity-code") {
+    return [
+      "Antigravity CLI owns its internal tools, network activity, prompts, and approvals; Clio observes only structured stream output and does not provide per-tool mediation or complete tool telemetry",
+      "Antigravity conversation ids are recorded only as opaque provider observations; Clio does not resume them",
+      "Antigravity runs are one-shot and never retried automatically"
+    ];
+  }
   return [];
 }
 function assertRuntimeCanHonorWorkerPermissionMode(runtime, onPermission) {
@@ -7772,12 +7851,6 @@ function assertWriteRootsEnforceable(runtime, writeRoots) {
     `dispatch: runtime '${runtime.id}' cannot enforce writeRoots: subprocess workers run their own tool surface without Clio per-tool mediation. Dispatch to a native or claude-sdk worker.`
   );
 }
-function assertWorkerBudgetEnforceable(runtime, hasDeclaredBudget) {
-  if (!hasDeclaredBudget || runtime.kind !== "subprocess") return;
-  throw new Error(
-    `dispatch: runtime '${runtime.id}' cannot enforce an explicit dispatch budget because subprocess workers do not expose per-tool mediation; choose a native or claude-sdk worker`
-  );
-}
 var TOOL_CARRYING_API_FAMILIES = /* @__PURE__ */ new Set([
   "openai-completions",
   "openai-responses",
@@ -7828,7 +7901,17 @@ function assertPostRuntimeToolCompatibility(agentId, spec, effectiveTools, targe
 function workerToolCallHardCap(settings) {
   return settings?.fleet.limits.toolCallsPerRun ?? GUARDRAIL_DEFAULTS.workerToolCallCap;
 }
+function assertWorkerBudgetEnforceable(runtime, hasDeclaredBudget) {
+  if (!hasDeclaredBudget || runtime.kind !== "subprocess" || runtime.externalAgentLoop !== void 0) return;
+  throw new Error(
+    `dispatch: runtime '${runtime.id}' cannot enforce an explicit dispatch budget because subprocess workers do not expose per-tool mediation; choose a native or claude-sdk worker`
+  );
+}
+function budgetEnforcementForRuntime(runtime) {
+  return runtime.kind === "subprocess" ? "external-one-shot" : "native-per-tool";
+}
 function resolveEffectiveWorkerBudget(input) {
+  assertWorkerBudgetEnforceable(input.runtime, input.declared !== null || input.req.budget !== void 0);
   const hardCap = workerToolCallHardCap(input.settings);
   const declared = input.declared ?? {
     toolCalls: hardCap,
@@ -7842,7 +7925,8 @@ function resolveEffectiveWorkerBudget(input) {
     hardCap,
     hasReadTool: input.allowedTools.includes(ToolNames.Read),
     retry: (input.req.lineage?.attempt ?? 0) > 0,
-    revision: input.req.gate?.role === "builder" && input.req.gate.cycle > 1 && input.req.gate.verdict === "revise"
+    revision: input.req.gate?.role === "builder" && input.req.gate.cycle > 1 && input.req.gate.verdict === "revise",
+    enforcement: budgetEnforcementForRuntime(input.runtime)
   });
 }
 function frozenProtectedArtifactState(state) {
@@ -8100,6 +8184,9 @@ function clampWorkerAutonomy(session, requested) {
   if (requested === void 0) return session;
   return AUTONOMY_ORDER[requested] < AUTONOMY_ORDER[session] ? requested : session;
 }
+function effectiveWorkerAutonomy(session, requested, capabilityClass) {
+  return clampWorkerAutonomy(session, capabilityClass === "read-only" ? "read-only" : requested);
+}
 function requestedAutonomyEvidence(sessionAutonomy, requestedAutonomy) {
   return requestedAutonomy === void 0 ? {} : { requestedAutonomy, sessionAutonomy };
 }
@@ -8624,7 +8711,7 @@ function createDispatchBundle(context, options) {
       reason: outcome
     });
   }
-  async function admitAssignmentCapacity(req, nodeId, timing, endpoint) {
+  async function admitAssignmentCapacity(req, nodeId, timing, endpoint, signal) {
     const queuedAt = now();
     timing.queuedAt = new Date(queuedAt).toISOString();
     const assignmentId = req.lineage?.rootRunId ?? req.runIdHint ?? `pending-${queuedAt.toString(36)}-${randomBytes5(6).toString("hex")}`;
@@ -8636,7 +8723,12 @@ function createDispatchBundle(context, options) {
       req.reservation.memberId,
       (error) => reportDispatchDiagnostic("read plan queue identity", error)
     );
+    const cancel = () => {
+      capacityAdmission.cancel(assignmentId);
+    };
+    signal?.addEventListener("abort", cancel, { once: true });
     try {
+      signal?.throwIfAborted();
       const admitted = await capacityAdmission.admit({
         assignmentId,
         nodeId,
@@ -8657,6 +8749,8 @@ function createDispatchBundle(context, options) {
         else await failQueuedAssignment(assignmentId);
       }
       throw error;
+    } finally {
+      signal?.removeEventListener("abort", cancel);
     }
   }
   function rebindReservationSlot(req, nodeId, endpoint, costUsd, settings) {
@@ -8749,6 +8843,13 @@ function createDispatchBundle(context, options) {
     if (draining) return { scheduled: false };
     const rootRunId = run.lineage.rootRunId;
     if (!retryChainIsLive(run)) return { scheduled: false };
+    if (providers.getRuntime(run.runtimeId)?.externalAgentLoop?.generatingRetry === "forbidden") {
+      retryBackoff.delete(rootRunId);
+      return {
+        scheduled: false,
+        settlementDetail: "automatic retry suppressed because this external agent loop is one-shot and Clio cannot prove replay is side-effect-free"
+      };
+    }
     if (!RETRYABLE_OUTCOMES.has(outcome)) {
       retryBackoff.delete(rootRunId);
       return { scheduled: false };
@@ -9043,6 +9144,7 @@ function createDispatchBundle(context, options) {
     const tickMonotonic = monotonicNow();
     for (const run of active.values()) {
       if (run.aborted || run.stallKilled || !run.heartbeatAt) continue;
+      if (ledger.get(run.runId)?.endedAt !== null) continue;
       const heartbeatMonotonic = heartbeatMonotonicAt(run.heartbeatAt);
       if (!Number.isFinite(heartbeatMonotonic) || !Number.isFinite(run.heartbeatAt.current)) continue;
       if (run.runtimeKind === "acp-delegation") {
@@ -9192,7 +9294,7 @@ function createDispatchBundle(context, options) {
       });
     }
   }
-  async function resolveLifecycle(req, settings) {
+  async function resolveLifecycle(req, settings, metadataDeadlineAt, signal) {
     const recipe = agents.get(req.agentId);
     if (!recipe) {
       throw new Error(`dispatch: unknown agent recipe: ${req.agentId}`);
@@ -9220,7 +9322,7 @@ function createDispatchBundle(context, options) {
     publishDispatchPathScope(req, pathScope);
     const admission = resolveDispatchAdmissionStage(req, recipe, safety, pathScope);
     const targets = readWorkerTargets(settings);
-    const target = resolveDispatchTarget(
+    const resolveTarget = () => resolveDispatchTarget(
       req,
       recipe,
       targets.workerDefault,
@@ -9229,12 +9331,24 @@ function createDispatchBundle(context, options) {
       targets.targetOrder,
       providers
     );
+    let target = resolveTarget();
+    const identity = (resolved) => JSON.stringify([
+      resolved.target.id,
+      resolved.runtime.id,
+      resolved.wireModelId,
+      endpointIdentityHash(resolved.target.url)
+    ]);
+    const selectedIdentity = identity(target);
+    await prepareWorkerModelMetadata(providers, target.target.id, metadataDeadlineAt, signal, now);
+    target = resolveTarget();
+    if (identity(target) !== selectedIdentity) {
+      throw new Error("dispatch: worker route changed during model metadata preparation; request a fresh admission");
+    }
     enforceCapabilityGate(target.target.id, target.modelCapabilities, req.requiredCapabilities);
     assertRuntimeCanHonorWorkerPermissionMode(target.runtime, settings?.fleet.permissions.mode ?? "deny");
-    assertWorkerBudgetEnforceable(target.runtime, spec.budget !== null || req.budget !== void 0);
     const cwd = req.cwd ?? process.cwd();
     const sessionAutonomy = settings?.safety.autonomy ?? "auto-edit";
-    const effectiveAutonomy = clampWorkerAutonomy(sessionAutonomy, req.autonomy);
+    const effectiveAutonomy = effectiveWorkerAutonomy(sessionAutonomy, req.autonomy, spec.capabilityClass);
     const effectiveTools = withLedgerToolNarrowing(
       effectiveToolNames(admission.allowedTools, target, pathScope.writeBoundaries.length > 0, deniedToolNames(req)),
       req
@@ -9271,7 +9385,8 @@ function createDispatchBundle(context, options) {
       recipeId: recipe.id,
       declared: spec.budget,
       allowedTools: effectiveTools,
-      settings
+      settings,
+      runtime: target.runtime
     });
     const tier = spec.projectContextTier;
     const project = projectContext && tier === "bounded" ? projectContext.projectStructuredContext(cwd) : null;
@@ -9521,11 +9636,13 @@ function createDispatchBundle(context, options) {
         const responseModelIdObservation = responseModelIdObservationFromRecord(event.message, "not-observed");
         const differingResponseModelId = readStringOrNull(event.message.responseModel);
         const providerResponseId = readStringOrNull(event.message.responseId);
+        const gatewayRouting = gatewayRoutingObservationFromRecord(event.message);
         upstreamResponses.push({
           requestedModelId,
           responseModelIdObservation,
           differingResponseModelId,
-          providerResponseId
+          providerResponseId,
+          ...gatewayRouting !== null ? { gatewayRouting } : {}
         });
         if (event.message.stopReason === "error") {
           const message = readStringOrNull(event.message.errorMessage);
@@ -10031,7 +10148,7 @@ function createDispatchBundle(context, options) {
       finalPromise
     };
   }
-  async function dispatchAttempt(req, observer, settlement) {
+  async function dispatchAttempt(req, observer, preparation, settlement) {
     const requestedAt = new Date(now()).toISOString();
     const timing = { requestedAt, decisionStartedAt: requestedAt };
     const settings = getEffectiveSettings();
@@ -10117,7 +10234,9 @@ function createDispatchBundle(context, options) {
       return attachRouteObservation({ ...delegated, effectiveRequest: req });
     }
     req = routeAroundCoolingTarget(req, settings) ?? req;
-    const lifecycle = await resolveLifecycle(req, settings);
+    const metadataDeadlineAt = req.assignmentDeadlineAt ?? Date.parse(requestedAt) + (req.routingIntent?.deadlineMs ?? 6e4);
+    const lifecycle = await resolveLifecycle(req, settings, metadataDeadlineAt, preparation?.signal);
+    preparation?.signal?.throwIfAborted();
     timing.decisionCompletedAt = new Date(now()).toISOString();
     assertResponseSchemaEnforceable(
       lifecycle.target.runtime,
@@ -10184,7 +10303,13 @@ function createDispatchBundle(context, options) {
     if (queuedIdentity !== null) publishCapacityQueued(queuedIdentity, timing, placement?.node ?? null);
     let capacityLease;
     try {
-      capacityLease = await admitAssignmentCapacity(req, placement?.node.id ?? "local", timing, endpoint);
+      capacityLease = await admitAssignmentCapacity(
+        req,
+        placement?.node.id ?? "local",
+        timing,
+        endpoint,
+        preparation?.signal
+      );
     } catch (error) {
       if (queuedIdentity !== null) publishCapacityAdmissionFailure(queuedIdentity, error);
       throw error;
@@ -10194,6 +10319,7 @@ function createDispatchBundle(context, options) {
     const leaseSlot = createLeaseSlotGuard(capacityAdmission, capacityLease.leaseId, req.lineage !== void 0);
     const ledgerRef = (() => {
       try {
+        preparation?.signal?.throwIfAborted();
         return requireLedger();
       } catch (error) {
         leaseSlot.release();
@@ -10246,6 +10372,7 @@ function createDispatchBundle(context, options) {
     };
     let worker;
     try {
+      preparation?.signal?.throwIfAborted();
       worker = (placement?.spawn ?? spawnWorker)(spec, {
         cwd: lifecycle.cwd,
         now,
@@ -10403,11 +10530,13 @@ function createDispatchBundle(context, options) {
         const responseModelIdObservation = responseModelIdObservationFromRecord(event.message, "not-observed");
         const differingResponseModelId = readStringOrNull(event.message.responseModel);
         const providerResponseId = readStringOrNull(event.message.responseId);
+        const gatewayRouting = gatewayRoutingObservationFromRecord(event.message);
         upstreamResponses.push({
           requestedModelId,
           responseModelIdObservation,
           differingResponseModelId,
-          providerResponseId
+          providerResponseId,
+          ...gatewayRouting !== null ? { gatewayRouting } : {}
         });
         if (event.message.stopReason === "error") {
           const message = readStringOrNull(event.message.errorMessage);
@@ -10926,7 +11055,7 @@ function createDispatchBundle(context, options) {
           reachedTerminalResult: resultContractWasDue(finalOutcome, outcomeCode),
           output: capturedOutput?.state === "final" ? capturedOutput.text : null,
           cwd: lifecycle.cwd,
-          networkAllowed: lifecycle.admission.allowedTools.includes(ToolNames.WebFetch),
+          networkAllowed: lifecycle.admission.allowedTools.includes(ToolNames.WebFetch) || lifecycle.target.runtime.externalAgentLoop?.network === "externally-governed-unobserved",
           observedRunEffects,
           filesystem: nodeResultContractFilesystem()
         });
@@ -11129,8 +11258,11 @@ function createDispatchBundle(context, options) {
       effectiveRequest: req
     });
   }
-  async function dispatch(req, observer, settlement) {
-    let prepared = req;
+  async function dispatch(req, observer, preparation, settlement) {
+    let prepared = preparation?.deadlineAt === void 0 ? req : {
+      ...req,
+      assignmentDeadlineAt: Math.min(req.assignmentDeadlineAt ?? Number.POSITIVE_INFINITY, preparation.deadlineAt)
+    };
     let createdWorktree;
     let writerLease;
     const writerRecipe = agents.get(req.agentId);
@@ -11162,7 +11294,7 @@ function createDispatchBundle(context, options) {
         return rel === ".." || rel.startsWith(`..${sep}`) || isAbsolute2(rel) ? entry : resolvePath(taskWorktree.path, rel);
       });
       prepared = {
-        ...req,
+        ...prepared,
         runIdHint: runId,
         taskWorktree,
         cwd: workerCwd,
@@ -11172,7 +11304,8 @@ function createDispatchBundle(context, options) {
     }
     let handle;
     try {
-      handle = await dispatchAttempt(prepared, observer, settlement);
+      preparation?.signal?.throwIfAborted();
+      handle = await dispatchAttempt(prepared, observer, preparation, settlement);
     } catch (error) {
       writerLease?.release();
       if (createdWorktree !== void 0) {
@@ -11278,7 +11411,6 @@ function createDispatchBundle(context, options) {
     );
     assertPostRuntimeToolCompatibility(req.agentId, agentSpec, effectiveTools, target);
     assertRuntimeCanHonorWorkerPermissionMode(target.runtime, settings?.fleet.permissions.mode ?? "deny");
-    assertWorkerBudgetEnforceable(target.runtime, agentSpec.budget !== null || req.budget !== void 0);
     assertResponseSchemaEnforceable(target.runtime, target.modelCapabilities, req.responseSchema, effectiveTools.length);
     assertWriteRootsEnforceable(target.runtime, pathScope.writeBoundaries);
     assertProtectedArtifactsEnforceable(
@@ -11291,7 +11423,8 @@ function createDispatchBundle(context, options) {
       recipeId: recipe.id,
       declared: agentSpec.budget,
       allowedTools: effectiveTools,
-      settings
+      settings,
+      runtime: target.runtime
     });
     const endpoint = endpointCapacityForTarget(target.target.id);
     return {
@@ -11494,13 +11627,13 @@ function createDispatchBundle(context, options) {
       yield { type: "batch_events_drained", batch: snapshotBatch(batchRef.current) };
     })();
   }
-  async function dispatchBatch(reqs) {
+  async function dispatchBatch(reqs, preparation) {
     if (reqs.length === 0) throw new Error("dispatch: batch requires at least one request");
     const settlement = reqs.length > 1 && reqs.some((req) => (req.resolvedVerification?.length ?? 0) > 0) ? createBatchVerificationGate() : void 0;
     const handles = [];
     try {
       for (const req of reqs) {
-        const handle = await dispatch(req, void 0, settlement);
+        const handle = await dispatch(req, void 0, preparation, settlement);
         handles.push({ ...handle, agentId: req.agentId });
       }
     } catch (err) {
@@ -15941,6 +16074,7 @@ export {
   setCapacityDraining,
   capacityDrain,
   capacityLeaseUsage,
+  endpointCapacityUsage,
   openAgentLedger,
   renderAgentLedgerBoard,
   closeAgentLedger,
@@ -15949,6 +16083,7 @@ export {
   UNVERIFIABLE_RECEIPT_VERIFICATION,
   assistantTextFromEvent,
   receiptResponseModelIdObservationLabel,
+  receiptGatewayRoutingLabel,
   createDispatchRunEventRegistry,
   readFleetRun,
   listFleetRuns,
@@ -15980,4 +16115,4 @@ export {
   summarizeEvalResults,
   buildEvalEvidence
 };
-//# sourceMappingURL=chunk-I66ZTYNP.js.map
+//# sourceMappingURL=chunk-AF4YM7Z4.js.map