@iowarp/clio-coder 0.4.2 → 0.4.4

package/dist/{chunk-IKSLQ4XV.js → chunk-75W7L2E2.js}

@@ -1,4 +1,8 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  hashToolCall,
+  typedValidationSummary
+} from "./chunk-6QOTUPRG.js";
 import {
   ROUTE_POLICY_VERSION,
   isRouteDecisionAgentSelection,
@@ -6,37 +10,14 @@ import {
   parseRoutingIntent,
   routePriorForLatencyClass,
   sameRouteIdentity
-} from "./chunk-HIICAHCJ.js";
-import {
-  hashToolCall,
-  typedValidationSummary
-} from "./chunk-IDNA72AH.js";
+} from "./chunk-AUPNRN7C.js";
 import {
   describeCallAction
 } from "./chunk-NEDJ26B5.js";
-import {
-  TOOL_PROFILE_NAMES,
-  assertToolProfileEnforceable,
-  isToolProfileName
-} from "./chunk-42FMPA75.js";
-import {
-  deriveExecutionRole,
-  isExecutionRole,
-  requestExecutionRole
-} from "./chunk-H7IXIC72.js";
 import {
   expandPath,
   resolveReadPath
 } from "./chunk-OQE5J4C6.js";
-import {
-  DEFAULT_AUTONOMY_EXPOSURE,
-  DEFAULT_AUTONOMY_LEVEL,
-  autonomyAskRejection,
-  autonomyDenyRejection,
-  evaluateSkillToolSurface,
-  isAutonomyLevel,
-  mapAutonomy
-} from "./chunk-FSP7CMNU.js";
 import {
   DEFAULT_MAX_LINES,
   DEFAULT_TOOL_RESULT_MAX_BYTES,
@@ -52,50 +33,70 @@ import {
   toolResultDigestFor,
   truncateHead,
   truncateTail
-} from "./chunk-B7HM5Z7T.js";
+} from "./chunk-NAI6ZFCY.js";
 import {
   formatSize
 } from "./chunk-OZNBF4L3.js";
 import {
-  byteLength,
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
-import {
-  BASH_HARD_CAP_BYTES,
-  combineBashOutput,
-  runBashCommand
-} from "./chunk-NMJXSHBJ.js";
+  TOOL_PROFILE_NAMES,
+  assertToolProfileEnforceable,
+  isToolProfileName
+} from "./chunk-QZWQA4DE.js";
 import {
-  PATH_BOUNDARY_MAX_ENTRIES,
-  PathBoundaryError,
-  asDirectoryPathBoundary,
-  normalizePathBoundaryEntry,
-  pathBoundaryCovers,
-  resolvePathBoundary
-} from "./chunk-HHV2GANA.js";
+  deriveExecutionRole,
+  isExecutionRole,
+  requestExecutionRole
+} from "./chunk-H7IXIC72.js";
 import {
   AGENT_AUTOMATION_AUTHORITIES,
   COUNCIL_BALLOT_SHAPE,
   COUNCIL_BALLOT_VERDICT_MAX_BYTES,
   agentSpecFingerprint,
   classify
-} from "./chunk-PGF63K6I.js";
+} from "./chunk-KFV5L5SK.js";
 import {
+  commandArgumentSegments,
   detectValidationCommand,
   extractCommandDeleteTargets,
   extractCommandWriteTargets,
-  tokenizeShellLike,
   toolMutationPaths
-} from "./chunk-IKOZFYBN.js";
+} from "./chunk-NXYCB2VD.js";
+import {
+  isDispatchIntent,
+  resolveDispatchPathScope
+} from "./chunk-IRXAATOX.js";
+import {
+  asDirectoryPathBoundary,
+  pathBoundaryCovers,
+  resolvePathBoundary
+} from "./chunk-HHV2GANA.js";
 import {
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
+import {
+  DEFAULT_AUTONOMY_EXPOSURE,
+  DEFAULT_AUTONOMY_LEVEL,
+  autonomyAskRejection,
+  autonomyDenyRejection,
+  evaluateSkillToolSurface,
+  isAutonomyLevel,
+  mapAutonomy
+} from "./chunk-54X7T7DK.js";
+import {
+  byteLength,
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
 import {
   ToolNames
-} from "./chunk-K6BSR66V.js";
+} from "./chunk-4NSRCOYP.js";
 import {
-  resolveSafeCwd
-} from "./chunk-HJWWJ6IL.js";
+  BASH_HARD_CAP_BYTES,
+  combineBashOutput,
+  runBashCommand
+} from "./chunk-W54I7H25.js";
+import {
+  boundedExternalDiagnostic
+} from "./chunk-6OSVSQL5.js";
 import {
   THINKING_LEVELS
 } from "./chunk-UXCU4E3T.js";
@@ -105,11 +106,15 @@ import {
   resolveGuardrail
 } from "./chunk-S66XZJOF.js";
 import {
-  clioStateDir
-} from "./chunk-BYP5D4HI.js";
+  buildSafeToolEnv,
+  resolveSafeCwd
+} from "./chunk-TOIVGRUX.js";
 import {
   StringEnum
-} from "./chunk-VXMFAE2W.js";
+} from "./chunk-YPC6ZR5L.js";
+import {
+  clioStateDir
+} from "./chunk-BYP5D4HI.js";
 import {
   init_esm_shims
 } from "./chunk-3R73A4XB.js";
@@ -817,515 +822,16 @@ function createAskUserTool(deps = {}) {
   };
 }
 
-// src/domains/dispatch/intent.ts
-init_esm_shims();
-import path2 from "node:path";
-
-// src/domains/dispatch/path-scope.ts
-init_esm_shims();
-import { existsSync } from "node:fs";
-var DISPATCH_PATH_TOKEN_RE = /(?:[\w.-]+\/)+[\w.-]+|\b[\w-]+\.[A-Za-z0-9]{1,8}\b/g;
-var HTTP_URL_RE = /\bhttps?:\/\/\S+/gu;
-var POSIX_ABSOLUTE_TOKEN_RE = /(?:^|[\s("'])((?:\/[\w.~+-]+)+)/gu;
-var WINDOWS_ABSOLUTE_TOKEN_RE = /(?:^|[\s("'])([A-Za-z]:[\\/][^\s"']+)/gu;
-var BACKSLASH_PATH_RE = /\b[A-Za-z_.-][\w.-]*\\(?:(?:[\w.-]+\\)+[\w.-]+|[\w-]+\.[A-Za-z0-9]{1,8})\b/gu;
-var DOUBLE_SEPARATOR_PATH_RE = /\b[\w.-]+\/\/[\w./-]+/gu;
-var PARENT_PREFIX_RE = /^(?:\.\.\/)+/u;
-var DispatchPathScopeInferenceError = class extends Error {
-  code;
-  source;
-  token;
-  constructor(code, source, token, detail) {
-    super(`${code}: ${source} contains ${detail} '${token}'; declare intent explicitly`);
-    this.name = "DispatchPathScopeInferenceError";
-    this.code = code;
-    this.source = source;
-    this.token = token;
-  }
-};
-var DECLARED_EVIDENCE = {
-  readRoots: {
-    provenance: "declared",
-    source: "intent.read_roots",
-    confidence: "certain",
-    reason: "explicit_intent"
-  },
-  writeRoots: {
-    provenance: "declared",
-    source: "intent.write_roots",
-    confidence: "certain",
-    reason: "explicit_intent"
-  },
-  relevantPaths: {
-    provenance: "declared",
-    source: "intent.relevant_paths",
-    confidence: "certain",
-    reason: "explicit_intent"
-  }
-};
-function cloneEvidence(evidence) {
-  return { ...evidence };
-}
-function addProvenance(entries, path5, evidence) {
-  const current = entries.get(path5);
-  if (current === void 0) {
-    entries.set(path5, { path: path5, evidence: [cloneEvidence(evidence)] });
-    return;
-  }
-  if (!current.evidence.some((entry) => entry.source === evidence.source)) {
-    current.evidence.push(cloneEvidence(evidence));
-  }
-}
-function sortedEntries(entries) {
-  return [...entries.values()].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0).map((entry) => ({ path: entry.path, evidence: entry.evidence.map(cloneEvidence) }));
-}
-function declaredIntentPathProvenance(input) {
-  const entries = /* @__PURE__ */ new Map();
-  for (const path5 of input.readRoots) addProvenance(entries, path5, DECLARED_EVIDENCE.readRoots);
-  for (const path5 of input.writeRoots) addProvenance(entries, path5, DECLARED_EVIDENCE.writeRoots);
-  for (const path5 of input.relevantPaths) addProvenance(entries, path5, DECLARED_EVIDENCE.relevantPaths);
-  return sortedEntries(entries);
-}
-function inferredPaths(req, root) {
-  const paths = /* @__PURE__ */ new Set();
-  const droppedTokens = /* @__PURE__ */ new Set();
-  const text = `${req.task}
-${req.briefing ?? ""}`;
-  for (const match of text.matchAll(DISPATCH_PATH_TOKEN_RE)) {
-    const inferred = inferredPathToken(match[0], root);
-    if (inferred.kind === "dropped") {
-      droppedTokens.add(inferred.token);
-      continue;
-    }
-    const token = inferred.kind === "anchored" ? inferred.resolved : inferred.token;
-    if (token.startsWith("http://") || token.startsWith("https://")) continue;
-    paths.add(token);
-  }
-  return { paths: [...paths], droppedTokens: [...droppedTokens] };
-}
-function inferredPathToken(raw, root) {
-  const token = raw.replace(/^\.\//u, "").replace(/\.+$/u, "");
-  const parents = PARENT_PREFIX_RE.exec(token)?.[0];
-  if (parents === void 0) return { kind: "token", token };
-  const rest = token.slice(parents.length);
-  const segments = rest.split("/");
-  if (rest.length === 0 || segments.includes("..") || segments.includes(".")) return { kind: "token", token };
-  return existsSync(resolvePathBoundary(root, rest)) ? { kind: "anchored", token, resolved: rest } : { kind: "dropped", token };
-}
-function failMalformedText(text, source) {
-  const withoutUrls = text.replace(HTTP_URL_RE, (url) => " ".repeat(url.length));
-  const absolute = POSIX_ABSOLUTE_TOKEN_RE.exec(withoutUrls)?.[1];
-  POSIX_ABSOLUTE_TOKEN_RE.lastIndex = 0;
-  if (absolute !== void 0) {
-    throw new DispatchPathScopeInferenceError("legacy_scope_path_absolute", source, absolute, "an absolute path token");
-  }
-  const windowsAbsolute = WINDOWS_ABSOLUTE_TOKEN_RE.exec(withoutUrls)?.[1];
-  WINDOWS_ABSOLUTE_TOKEN_RE.lastIndex = 0;
-  if (windowsAbsolute !== void 0) {
-    throw new DispatchPathScopeInferenceError(
-      "legacy_scope_path_absolute",
-      source,
-      windowsAbsolute,
-      "an absolute path token"
-    );
-  }
-  for (const pattern of [BACKSLASH_PATH_RE, DOUBLE_SEPARATOR_PATH_RE]) {
-    const malformed = pattern.exec(withoutUrls)?.[0];
-    pattern.lastIndex = 0;
-    if (malformed !== void 0) {
-      throw new DispatchPathScopeInferenceError(
-        "legacy_scope_path_malformed",
-        source,
-        malformed,
-        "a malformed path token"
-      );
-    }
-  }
-}
-function strictInferredPaths(text, source, root) {
-  failMalformedText(text, source);
-  const withoutUrls = text.replace(HTTP_URL_RE, (url) => " ".repeat(url.length));
-  const evidence = source === "task" ? { provenance: "inferred", source, confidence: "medium", reason: "task_path_token" } : { provenance: "inferred", source, confidence: "low", reason: "briefing_path_token" };
-  const paths = [];
-  const parentTokens = [];
-  for (const match of withoutUrls.matchAll(DISPATCH_PATH_TOKEN_RE)) {
-    const inferred = inferredPathToken(match[0], root);
-    if (inferred.kind === "dropped") {
-      parentTokens.push({ token: inferred.token, resolved: null, source });
-      continue;
-    }
-    if (inferred.kind === "anchored") {
-      parentTokens.push({ token: inferred.token, resolved: inferred.resolved, source });
-    }
-    const token = inferred.kind === "anchored" ? inferred.resolved : inferred.token;
-    try {
-      paths.push({ path: normalizePathBoundaryEntry(token), evidence });
-    } catch (error) {
-      const code = error instanceof PathBoundaryError && error.code === "absolute" ? "legacy_scope_path_absolute" : "legacy_scope_path_malformed";
-      throw new DispatchPathScopeInferenceError(
-        code,
-        source,
-        token,
-        code === "legacy_scope_path_absolute" ? "an absolute path token" : "a malformed path token"
-      );
-    }
-  }
-  return { paths, parentTokens };
-}
-function legacyPathScope(req, cwd) {
-  const workingEntries = /* @__PURE__ */ new Map();
-  const writeEntries = /* @__PURE__ */ new Map();
-  const writeEvidence = {
-    provenance: "derived",
-    source: "writeRoots",
-    confidence: "high",
-    reason: "legacy_write_roots"
-  };
-  for (const root of req.writeRoots ?? []) {
-    addProvenance(workingEntries, root, writeEvidence);
-    addProvenance(writeEntries, asDirectoryPathBoundary(resolvePathBoundary(cwd, root)), writeEvidence);
-  }
-  const parentTokens = /* @__PURE__ */ new Map();
-  const recordParentTokens = (entries) => {
-    for (const entry of entries) if (!parentTokens.has(entry.token)) parentTokens.set(entry.token, entry);
-  };
-  const taskScope = strictInferredPaths(req.task, "task", cwd);
-  for (const candidate of taskScope.paths) addProvenance(workingEntries, candidate.path, candidate.evidence);
-  recordParentTokens(taskScope.parentTokens);
-  if (req.briefing !== void 0) {
-    const briefingScope = strictInferredPaths(req.briefing, "briefing", cwd);
-    for (const candidate of briefingScope.paths) addProvenance(workingEntries, candidate.path, candidate.evidence);
-    recordParentTokens(briefingScope.parentTokens);
-  }
-  const workingContext = [...workingEntries.values()].map((entry) => ({
-    path: entry.path,
-    evidence: entry.evidence.map(cloneEvidence)
-  }));
-  const writeBoundaries = [...writeEntries.values()].map((entry) => ({
-    path: entry.path,
-    evidence: entry.evidence.map(cloneEvidence)
-  }));
-  return {
-    source: "inferred",
-    workingContextPaths: workingContext.map((entry) => entry.path),
-    writeBoundaries: writeBoundaries.map((entry) => entry.path),
-    inferredOnlyPaths: [],
-    parentTokens: [...parentTokens.values()],
-    provenance: {
-      version: 1,
-      mode: "legacy-inferred",
-      workingContextPaths: workingContext,
-      writeBoundaries
-    }
-  };
-}
-function resolveDispatchPathScope(req) {
-  const cwd = req.cwd ?? process.cwd();
-  if (req.intent === void 0) return legacyPathScope(req, cwd);
-  const declaredProvenance = declaredIntentPathProvenance(req.intent);
-  const declaredPaths = declaredProvenance.map((entry) => entry.path);
-  const inferred = inferredPaths(req, cwd);
-  const inferredOnlyPaths = [
-    ...inferred.paths.filter((candidate) => !pathBoundaryCovers(declaredPaths, candidate)),
-    ...inferred.droppedTokens
-  ];
-  const writeEvidence = DECLARED_EVIDENCE.writeRoots;
-  const writeBoundaries = req.intent.writeRoots.map((root) => ({
-    path: resolvePathBoundary(cwd, root),
-    evidence: [cloneEvidence(writeEvidence)]
-  }));
-  return {
-    source: "declared",
-    workingContextPaths: declaredPaths,
-    writeBoundaries: writeBoundaries.map((entry) => entry.path),
-    inferredOnlyPaths,
-    // Empty on purpose: the declaration is the scope here, so no "../" token
-    // changed what the worker sees and there is nothing for the legacy notice
-    // to report. A dropped one still reaches the operator through
-    // inferredOnlyPaths above.
-    parentTokens: [],
-    provenance: {
-      version: 1,
-      mode: "declared",
-      workingContextPaths: declaredProvenance,
-      writeBoundaries
-    }
-  };
-}
-var REPORTABLE_OMITTED_PATH_RE = /\.(?:[cm]?[jt]sx?|json|ya?ml|md|txt|py|go|rs|c|h|cc|cpp|hpp|java|rb|sh|toml|css|html|sql|lock)(?:\/|$)|\/$/u;
-var OMITTED_PATH_REPORT_CAP = 12;
-function reportableOmittedPaths(scope) {
-  return scope.inferredOnlyPaths.filter((path5) => REPORTABLE_OMITTED_PATH_RE.test(path5));
-}
-function renderOmittedPaths(paths) {
-  if (paths.length <= OMITTED_PATH_REPORT_CAP) return paths.join(", ");
-  return `${paths.slice(0, OMITTED_PATH_REPORT_CAP).join(", ")} and ${paths.length - OMITTED_PATH_REPORT_CAP} more`;
-}
-function declaredScopeReplacementDiagnostic(scope) {
-  if (scope.source !== "declared") return null;
-  const omitted = reportableOmittedPaths(scope);
-  if (omitted.length === 0) return null;
-  return `typed_scope_replaced_inferred_paths: typed intent omitted prose-inferred paths ${renderOmittedPaths(
-    omitted
-  )}; those paths did not select project rules or expand worker authority`;
-}
-function declaredScopeReplacementNotice(scope) {
-  if (scope.source !== "declared") return null;
-  const omittedPaths = reportableOmittedPaths(scope);
-  if (omittedPaths.length === 0) return null;
-  return {
-    code: "typed_scope_replaced_inferred_paths",
-    level: "warning",
-    omittedPaths,
-    message: `[dispatch scope] typed intent replaced prose path inference; omitted paths: ${renderOmittedPaths(
-      omittedPaths
-    )}. Those paths did not select project rules or expand worker authority.`
-  };
-}
-function renderParentTokens(tokens) {
-  return renderOmittedPaths(tokens.map((entry) => `${entry.token} -> ${entry.resolved ?? "dropped"}`));
-}
-function inferredScopeParentTokenDiagnostic(scope) {
-  const tokens = scope.parentTokens;
-  if (tokens.length === 0) return null;
-  return `legacy_scope_inferred: prose inference resolved path tokens carrying a leading '../' run against the dispatch root ${renderParentTokens(
-    tokens
-  )}; an anchored token selects project rules without expanding worker authority and a dropped one took no part in scope`;
-}
-function inferredScopeParentTokenNotice(scope) {
-  const tokens = scope.parentTokens;
-  if (tokens.length === 0) return null;
-  return {
-    code: "legacy_scope_inferred",
-    level: "warning",
-    // Every entry names the raw prose token, the one spelling both outcomes
-    // share; the message carries what each one resolved to.
-    paths: tokens.map((entry) => ({
-      path: entry.token,
-      policy: "working-context",
-      provenance: "inferred",
-      source: entry.source,
-      confidence: "low"
-    })),
-    message: `[dispatch scope] prose inference resolved path tokens carrying a leading '../' run against the dispatch root: ${renderParentTokens(
-      tokens
-    )}. An anchored token selects project rules without expanding worker authority; a dropped one took no part in scope.`
-  };
-}
-
-// src/domains/dispatch/intent.ts
-var DISPATCH_INTENT_PATH_LIST_CAP = PATH_BOUNDARY_MAX_ENTRIES;
-var DISPATCH_INTENT_PATH_ENTRY_BYTES_CAP = 512;
-var DISPATCH_INTENT_VERIFICATION_CAP = 8;
-var DISPATCH_INTENT_TIMEOUT_MIN_MS = 1e3;
-var RAW_FIELDS = /* @__PURE__ */ new Set([
-  "version",
-  "read_roots",
-  "write_roots",
-  "relevant_paths",
-  "expected_outputs",
-  "verification"
-]);
-function isRecord2(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function compareCodepoints(left, right) {
-  return left < right ? -1 : left > right ? 1 : 0;
-}
-function fail(reason, message) {
-  return { ok: false, reason, message };
-}
-function checkedPathText(value, field, index) {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    return fail("intent_path_malformed", `${field}[${index}] must be a non-empty repository-relative POSIX path`);
-  }
-  const trimmed = value.trim();
-  if (Buffer.byteLength(trimmed, "utf8") > DISPATCH_INTENT_PATH_ENTRY_BYTES_CAP) {
-    return fail(
-      "intent_path_over_cap",
-      `${field}[${index}] exceeds the ${DISPATCH_INTENT_PATH_ENTRY_BYTES_CAP}-byte cap`
-    );
-  }
-  return trimmed;
-}
-function normalizeScopePathEntry(value, field, index) {
-  const checked = checkedPathText(value, field, index);
-  if (typeof checked !== "string") return checked;
-  try {
-    return normalizePathBoundaryEntry(checked);
-  } catch (error) {
-    if (error instanceof PathBoundaryError) {
-      if (error.code === "absolute") {
-        return fail("intent_path_absolute", `${field}[${index}] must be a repository-relative POSIX path`);
-      }
-      if (error.code === "parent") {
-        return fail("intent_path_escapes_root", `${field}[${index}] escapes the repository root`);
-      }
-    }
-    return fail(
-      "intent_path_malformed",
-      `${field}[${index}] does not follow the repository path boundary grammar: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-}
-function normalizeExpectedOutputEntry(value, field, index) {
-  const checked = checkedPathText(value, field, index);
-  if (typeof checked !== "string") return checked;
-  const trimmed = checked;
-  if (trimmed.includes("\\") || path2.posix.isAbsolute(trimmed) || path2.win32.isAbsolute(trimmed)) {
-    return fail("intent_path_absolute", `${field}[${index}] must be a repository-relative POSIX path`);
-  }
-  const normalized = path2.posix.normalize(trimmed.replace(/^\.\//u, "").replace(/\/{2,}/gu, "/"));
-  if (normalized === "." || normalized.length === 0) {
-    return fail("intent_path_malformed", `${field}[${index}] must not normalize to an empty path`);
-  }
-  if (normalized === ".." || normalized.startsWith("../") || normalized.split("/").includes("..")) {
-    return fail("intent_path_escapes_root", `${field}[${index}] escapes the repository root`);
-  }
-  return normalized;
-}
-function normalizePathList(value, field, normalizeEntry = normalizeScopePathEntry) {
-  if (value === void 0) return [];
-  if (!Array.isArray(value)) return fail("intent_path_malformed", `${field} must be an array`);
-  if (value.length > DISPATCH_INTENT_PATH_LIST_CAP) {
-    return fail("intent_path_over_cap", `${field} exceeds the ${DISPATCH_INTENT_PATH_LIST_CAP}-entry cap`);
-  }
-  const normalized = [];
-  for (const [index, entry] of value.entries()) {
-    if (normalizeEntry === normalizeScopePathEntry && typeof entry === "string" && /^\.\/?$/u.test(entry.trim())) {
-      continue;
-    }
-    const result = normalizeEntry(entry, field, index);
-    if (typeof result !== "string") return result;
-    normalized.push(result);
-  }
-  return [...new Set(normalized)].sort(compareCodepoints);
-}
-function declaredScopeIntent(input) {
-  const readRoots = normalizePathList(input.readRoots, "intent.read_roots");
-  if (!Array.isArray(readRoots)) return readRoots;
-  const writeRoots = normalizePathList(input.writeRoots, "intent.write_roots");
-  if (!Array.isArray(writeRoots)) return writeRoots;
-  const relevantPaths = normalizePathList(input.relevantPaths, "intent.relevant_paths");
-  if (!Array.isArray(relevantPaths)) return relevantPaths;
-  return {
-    ok: true,
-    intent: {
-      version: 2,
-      readRoots,
-      writeRoots,
-      relevantPaths,
-      pathProvenance: declaredIntentPathProvenance({ readRoots, writeRoots, relevantPaths }),
-      expectedOutputs: [],
-      verification: []
-    }
-  };
-}
-function isDispatchIntent(value) {
-  if (!isRecord2(value) || value.version !== 2) return false;
-  for (const field of ["readRoots", "writeRoots", "relevantPaths", "expectedOutputs"]) {
-    if (!Array.isArray(value[field]) || !value[field].every((entry) => typeof entry === "string")) return false;
-  }
-  const readRoots = value.readRoots;
-  const writeRoots = value.writeRoots;
-  const relevantPaths = value.relevantPaths;
-  if (!Array.isArray(value.pathProvenance) || JSON.stringify(value.pathProvenance) !== JSON.stringify(
-    declaredIntentPathProvenance({
-      readRoots,
-      writeRoots,
-      relevantPaths
-    })
-  )) {
-    return false;
-  }
-  return Array.isArray(value.verification) && value.verification.every(
-    (entry) => isRecord2(entry) && typeof entry.check === "string" && entry.check.length > 0 && typeof entry.timeoutMs === "number" && Number.isInteger(entry.timeoutMs) && entry.timeoutMs >= DISPATCH_INTENT_TIMEOUT_MIN_MS
-  );
-}
-function narrowDispatchIntentToReadOnly(intent) {
-  if (intent.writeRoots.length === 0) return intent;
-  const readRoots = [.../* @__PURE__ */ new Set([...intent.readRoots, ...intent.writeRoots])].sort(compareCodepoints);
-  return {
-    version: 2,
-    readRoots,
-    writeRoots: [],
-    relevantPaths: [...intent.relevantPaths],
-    pathProvenance: declaredIntentPathProvenance({ readRoots, writeRoots: [], relevantPaths: intent.relevantPaths }),
-    expectedOutputs: [...intent.expectedOutputs],
-    verification: intent.verification.map((entry) => ({ ...entry }))
-  };
-}
-function normalizeDispatchIntent(raw, checks) {
-  if (!isRecord2(raw)) return fail("intent_malformed", "intent must be an object");
-  const unknown = Object.keys(raw).filter((key) => !RAW_FIELDS.has(key)).sort(compareCodepoints);
-  if (unknown.length > 0) return fail("intent_malformed", `intent contains unknown field '${unknown[0]}'`);
-  if (raw.version !== void 0 && raw.version !== 2) {
-    return fail(
-      "intent_version_unsupported",
-      `intent declares version ${JSON.stringify(raw.version)}; this build speaks dispatch intent version 2. A declaration at another version is refused rather than migrated: restate read_roots, write_roots, relevant_paths, expected_outputs, and verification under version 2`
-    );
-  }
-  const readRoots = normalizePathList(raw.read_roots, "intent.read_roots");
-  if (!Array.isArray(readRoots)) return readRoots;
-  const writeRoots = normalizePathList(raw.write_roots, "intent.write_roots");
-  if (!Array.isArray(writeRoots)) return writeRoots;
-  const relevantPaths = normalizePathList(raw.relevant_paths, "intent.relevant_paths");
-  if (!Array.isArray(relevantPaths)) return relevantPaths;
-  const expectedOutputs = normalizePathList(
-    raw.expected_outputs,
-    "intent.expected_outputs",
-    normalizeExpectedOutputEntry
-  );
-  if (!Array.isArray(expectedOutputs)) return expectedOutputs;
-  const rawVerification = raw.verification ?? [];
-  if (!Array.isArray(rawVerification)) {
-    return fail("verification_malformed", "intent.verification must be an array");
-  }
-  if (rawVerification.length > DISPATCH_INTENT_VERIFICATION_CAP) {
-    return fail("verification_over_cap", `intent.verification exceeds the ${DISPATCH_INTENT_VERIFICATION_CAP}-entry cap`);
-  }
-  const verification = [];
-  for (const [index, entry] of rawVerification.entries()) {
-    if (!isRecord2(entry) || Object.keys(entry).some((key) => key !== "check" && key !== "timeout_ms")) {
-      return fail("verification_malformed", `intent.verification[${index}] must contain check and optional timeout_ms`);
-    }
-    if (typeof entry.check !== "string" || entry.check.trim().length === 0) {
-      return fail("verification_malformed", `intent.verification[${index}].check must be a non-empty declared id`);
-    }
-    const check = entry.check.trim();
-    const declared = checks.get(check);
-    if (declared === void 0 && check.toLowerCase() === "none") continue;
-    if (declared === void 0) {
-      return fail(
-        "verification_check_undeclared",
-        `verification check '${check}' is undeclared: intent.verification takes only check ids that verify() lists (package.json verification scripts or .clio-coder/verifiers.yaml entries), never a shell command; omit verification and run the check yourself after the receipt, or declare the check first`
-      );
-    }
-    if (entry.timeout_ms !== void 0 && (typeof entry.timeout_ms !== "number" || !Number.isInteger(entry.timeout_ms) || entry.timeout_ms <= 0)) {
-      return fail("verification_malformed", `intent.verification[${index}].timeout_ms must be a positive integer`);
-    }
-    const requested = typeof entry.timeout_ms === "number" ? entry.timeout_ms : declared.timeoutMs;
-    verification.push({
-      check,
-      timeoutMs: Math.min(declared.timeoutMs, Math.max(DISPATCH_INTENT_TIMEOUT_MIN_MS, requested))
-    });
-  }
-  return {
-    ok: true,
-    intent: {
-      version: 2,
-      readRoots,
-      writeRoots,
-      relevantPaths,
-      pathProvenance: declaredIntentPathProvenance({ readRoots, writeRoots, relevantPaths }),
-      expectedOutputs,
-      verification
-    }
-  };
-}
-
 // src/domains/dispatch/budget-envelope.ts
 init_esm_shims();
+var NATIVE_CLIO_CONTROLS = ["tool-calls", "read-reserve", "synthesis", "attempt-cap"];
+var EXTERNAL_CLIO_CONTROLS = [
+  "single-launch",
+  "wall-clock",
+  "output-cap",
+  "cancellation",
+  "result-contract"
+];
 var BudgetAdmissionError = class extends Error {
   code;
   constructor(code, message) {
@@ -1334,11 +840,11 @@ var BudgetAdmissionError = class extends Error {
     this.code = code;
   }
 };
-function isRecord3(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function clonePhase(value, prefix) {
-  if (!isRecord3(value)) throw new Error(`${prefix} must be an object`);
+  if (!isRecord2(value)) throw new Error(`${prefix} must be an object`);
   for (const key of Object.keys(value)) {
     if (key !== "toolCalls" && key !== "readReserve") throw new Error(`${prefix}.${key} is unknown`);
   }
@@ -1357,7 +863,7 @@ function clonePhase(value, prefix) {
   return { toolCalls, readReserve };
 }
 function cloneDispatchBudgetRequest(value, prefix = "budget") {
-  if (!isRecord3(value)) throw new Error(`${prefix} must be an object`);
+  if (!isRecord2(value)) throw new Error(`${prefix} must be an object`);
   for (const key of Object.keys(value)) {
     if (key !== "toolCalls" && key !== "readReserve" && key !== "retryRevision") {
       throw new Error(`${prefix}.${key} is unknown`);
@@ -1368,6 +874,8 @@ function cloneDispatchBudgetRequest(value, prefix = "budget") {
   return { ...phase, ...retryRevision === void 0 ? {} : { retryRevision } };
 }
 function freezeEnvelope(envelope) {
+  Object.freeze(envelope.enforcement.clioControls);
+  Object.freeze(envelope.enforcement);
   Object.freeze(envelope.policy.default);
   Object.freeze(envelope.policy.maximum);
   Object.freeze(envelope.policy);
@@ -1506,6 +1014,15 @@ function resolveToolBudgetEnvelope(input) {
   const authoredMaximum = input.policy.maximum ?? input.policy;
   return freezeEnvelope({
     version: 1,
+    enforcement: input.enforcement === "external-one-shot" ? {
+      classification: "external-one-shot",
+      perTool: "unobserved-not-enforced",
+      clioControls: [...EXTERNAL_CLIO_CONTROLS]
+    } : {
+      classification: "native-per-tool",
+      perTool: "enforced",
+      clioControls: [...NATIVE_CLIO_CONTROLS]
+    },
     policy: {
       recipeId: input.recipeId,
       default: {
@@ -1541,7 +1058,8 @@ function formatBudgetRequest(envelope) {
 function formatEffectiveBudget(envelope) {
   const budget = envelope.effective;
   const revision = budget.revision ? `, result revision ${budget.revision.toolCalls}/${budget.revision.readReserve}` : "";
-  return `${budget.toolCalls}/${budget.readReserve}${revision}, lifetime cap ${budget.hardCap}, synthesis=${budget.synthesis ? "on" : "off"}`;
+  const enforcement = envelope.enforcement.classification === "external-one-shot" ? "external one-shot; per-tool unobserved/not enforced" : "native per-tool enforced";
+  return `${budget.toolCalls}/${budget.readReserve}${revision}, lifetime cap ${budget.hardCap}, synthesis=${budget.synthesis ? "on" : "off"}; ${enforcement}`;
 }
 function formatBudgetReasons(envelope) {
   return envelope.reasons.length === 0 ? "none" : envelope.reasons.map((reason) => reason.code).join(",");
@@ -1555,16 +1073,19 @@ var BUDGET_REASON_CODES = /* @__PURE__ */ new Set([
   "revision-growth-authorized",
   "revision-growth-denied"
 ]);
+function isExactStringArray(value, expected) {
+  return value.length === expected.length && value.every((item, index) => item === expected[index]);
+}
 function cloneRunToolBudgetEnvelope(value) {
   try {
-    if (!isRecord3(value) || value.version !== 1 || !isRecord3(value.policy) || !isRecord3(value.effective)) {
+    if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.policy) || !isRecord2(value.effective)) {
       return void 0;
     }
     const recipeId = value.policy.recipeId;
     if (typeof recipeId !== "string" || recipeId.length === 0 || typeof value.policy.exact !== "boolean") {
       return void 0;
     }
-    if (!isRecord3(value.policy.default) || typeof value.policy.default.synthesis !== "boolean") return void 0;
+    if (!isRecord2(value.policy.default) || typeof value.policy.default.synthesis !== "boolean") return void 0;
     const defaultPhase = clonePhase(
       { toolCalls: value.policy.default.toolCalls, readReserve: value.policy.default.readReserve },
       "budget.policy.default"
@@ -1584,13 +1105,45 @@ function cloneRunToolBudgetEnvelope(value) {
     }
     const reasons = [];
     for (const reason of value.reasons) {
-      if (!isRecord3(reason) || typeof reason.code !== "string" || !BUDGET_REASON_CODES.has(reason.code) || typeof reason.detail !== "string") {
+      if (!isRecord2(reason) || typeof reason.code !== "string" || !BUDGET_REASON_CODES.has(reason.code) || typeof reason.detail !== "string") {
         return void 0;
       }
       reasons.push({ code: reason.code, detail: reason.detail });
     }
+    const enforcement = (() => {
+      if (value.enforcement === void 0) {
+        return {
+          classification: "native-per-tool",
+          perTool: "enforced",
+          clioControls: [...NATIVE_CLIO_CONTROLS]
+        };
+      }
+      if (!isRecord2(value.enforcement) || !Array.isArray(value.enforcement.clioControls)) return null;
+      if (Object.keys(value.enforcement).some(
+        (key) => key !== "classification" && key !== "perTool" && key !== "clioControls"
+      )) {
+        return null;
+      }
+      if (value.enforcement.classification === "external-one-shot" && value.enforcement.perTool === "unobserved-not-enforced" && isExactStringArray(value.enforcement.clioControls, EXTERNAL_CLIO_CONTROLS)) {
+        return {
+          classification: "external-one-shot",
+          perTool: "unobserved-not-enforced",
+          clioControls: [...EXTERNAL_CLIO_CONTROLS]
+        };
+      }
+      if (value.enforcement.classification === "native-per-tool" && value.enforcement.perTool === "enforced" && isExactStringArray(value.enforcement.clioControls, NATIVE_CLIO_CONTROLS)) {
+        return {
+          classification: "native-per-tool",
+          perTool: "enforced",
+          clioControls: [...NATIVE_CLIO_CONTROLS]
+        };
+      }
+      return null;
+    })();
+    if (enforcement === null) return void 0;
     return freezeEnvelope({
       version: 1,
+      enforcement,
       policy: {
         recipeId,
         default: { ...defaultPhase, synthesis: value.policy.default.synthesis },
@@ -1795,6 +1348,10 @@ var TASK_TYPE_RULES = [
   ["debug", /\b(debug|fix|bug|crash|failure|broken|regression)\b/i],
   ["refactor", /\b(refactor|clean ?up|restructure|rename|extract|simplify)\b/i],
   ["config", /\b(config|configuration|settings|setup|install|ci pipeline|workflow file)\b/i],
+  [
+    "world_knowledge",
+    /\b(?:open[- ]world|ecosystem landscape|industry landscape|state of (?:the )?art|current alternatives|latest alternatives|advisory second opinion)\b/i
+  ],
   ["research", /\b(research|investigate|explore|survey|compare|find out)\b/i],
   ["code_read", /\b(read|explain|understand|summarize|describe|walk through|map|locate|trace)\b/i],
   ["code_write", /\b(write|implement|add|create|build|develop|introduce)\b/i]
@@ -1870,6 +1427,11 @@ function agentRouteCandidates(input) {
 var TASK_SIGNALS = {
   code_read: { ids: ["scout"], tags: ["reconnaissance", "symbols", "codewiki"], contracts: ["scout-report"] },
   research: { ids: ["researcher"], tags: ["sources", "external-context", "papers"], contracts: ["research-report"] },
+  world_knowledge: {
+    ids: ["world-knowledge"],
+    tags: ["open-world", "ecosystem", "current-context", "second-opinion"],
+    contracts: ["world-knowledge-report"]
+  },
   code_review: { ids: ["verifier"], tags: ["review", "verification"], contracts: ["verifier-report"] },
   debug: { ids: ["debugger"], tags: ["debugging", "root-cause"], contracts: ["debugger-report"] },
   test: { ids: ["verifier", "tester"], tags: ["tests", "validation", "regression"], contracts: ["verifier-report"] },
@@ -1960,14 +1522,14 @@ var DISPATCH_INTENT_SUPPORTED_VERSIONS = [DISPATCH_INTENT_VERSION];
 function finding(code, decision, detail) {
   return { code, decision, message: `${code}: ${detail}` };
 }
-function isRecord4(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function declaredVersion(value) {
   return typeof value.version === "number" && Number.isInteger(value.version) ? value.version : null;
 }
 function isSupportedDispatchIntentVersion(value) {
-  if (!isRecord4(value)) return false;
+  if (!isRecord3(value)) return false;
   const version = declaredVersion(value);
   return version !== null && DISPATCH_INTENT_SUPPORTED_VERSIONS.includes(version);
 }
@@ -2031,7 +1593,7 @@ function classifyDispatchIntentCompatibility(input) {
     );
     return findings;
   }
-  if (!isRecord4(input.intent)) {
+  if (!isRecord3(input.intent)) {
     findings.push(
       finding(
         "intent_malformed",
@@ -2100,7 +1662,7 @@ function dispatchIntentScopeWidening(ceiling, narrowed) {
 
 // src/domains/dispatch/validation.ts
 init_esm_shims();
-import path3 from "node:path";
+import path2 from "node:path";
 
 // src/core/response-schema.ts
 init_esm_shims();
@@ -2212,49 +1774,49 @@ function schemaSyntaxError(value) {
   while (stack.length > 0) {
     const frame = stack.pop();
     if (!frame) break;
-    const { schema, path: path5 } = frame;
+    const { schema, path: path4 } = frame;
     for (const key of Object.keys(schema)) {
-      if (!SUPPORTED_SCHEMA_KEYS.has(key)) return `${path5}.${key} is not supported by the llama.cpp schema subset`;
+      if (!SUPPORTED_SCHEMA_KEYS.has(key)) return `${path4}.${key} is not supported by the llama.cpp schema subset`;
     }
     if (typeof schema.type !== "string" || !SUPPORTED_SCHEMA_TYPES.has(schema.type)) {
-      return `${path5}.type must be one of ${[...SUPPORTED_SCHEMA_TYPES].join(", ")}`;
+      return `${path4}.type must be one of ${[...SUPPORTED_SCHEMA_TYPES].join(", ")}`;
     }
     if (schema.type === "object") {
-      if (schema.items !== void 0) return `${path5}.items is only valid for array schemas`;
+      if (schema.items !== void 0) return `${path4}.items is only valid for array schemas`;
       if (schema.properties !== void 0 && !isPlainObject(schema.properties)) {
-        return `${path5}.properties must be a plain object`;
+        return `${path4}.properties must be a plain object`;
       }
       const properties = schema.properties ?? {};
       for (const [name, child] of Object.entries(properties)) {
-        if (!isPlainObject(child)) return `${path5}.properties.${name} must be a schema object`;
-        stack.push({ schema: child, path: `${path5}.properties.${name}` });
+        if (!isPlainObject(child)) return `${path4}.properties.${name} must be a schema object`;
+        stack.push({ schema: child, path: `${path4}.properties.${name}` });
       }
       if (schema.required !== void 0) {
         if (!Array.isArray(schema.required) || !schema.required.every((item) => typeof item === "string")) {
-          return `${path5}.required must be an array of strings`;
+          return `${path4}.required must be an array of strings`;
         }
         if (new Set(schema.required).size !== schema.required.length) {
-          return `${path5}.required must not contain duplicates`;
+          return `${path4}.required must not contain duplicates`;
         }
         for (const name of schema.required) {
-          if (!Object.hasOwn(properties, name)) return `${path5}.required names unknown property '${name}'`;
+          if (!Object.hasOwn(properties, name)) return `${path4}.required names unknown property '${name}'`;
         }
       }
       if (schema.additionalProperties !== void 0 && typeof schema.additionalProperties !== "boolean") {
-        return `${path5}.additionalProperties must be a boolean`;
+        return `${path4}.additionalProperties must be a boolean`;
       }
       continue;
     }
     if (schema.type === "array") {
-      if (!isPlainObject(schema.items)) return `${path5}.items must be a schema object`;
+      if (!isPlainObject(schema.items)) return `${path4}.items must be a schema object`;
       if (schema.properties !== void 0 || schema.required !== void 0 || schema.additionalProperties !== void 0) {
-        return `${path5} contains object-only keywords on an array schema`;
+        return `${path4} contains object-only keywords on an array schema`;
       }
-      stack.push({ schema: schema.items, path: `${path5}.items` });
+      stack.push({ schema: schema.items, path: `${path4}.items` });
       continue;
     }
     if (schema.properties !== void 0 || schema.required !== void 0 || schema.items !== void 0 || schema.additionalProperties !== void 0) {
-      return `${path5} contains container keywords on a ${schema.type} schema`;
+      return `${path4} contains container keywords on a ${schema.type} schema`;
     }
   }
   return null;
@@ -2483,7 +2045,7 @@ function validateJobSpec(spec) {
     }
   }
   if ("protectedArtifactRemap" in spec && spec.protectedArtifactRemap !== void 0) {
-    if (!isPlainObject2(spec.protectedArtifactRemap) || Object.keys(spec.protectedArtifactRemap).some((key) => key !== "sourceRoot" && key !== "workerRoot") || typeof spec.protectedArtifactRemap.sourceRoot !== "string" || !path3.isAbsolute(spec.protectedArtifactRemap.sourceRoot) || typeof spec.protectedArtifactRemap.workerRoot !== "string" || !path3.isAbsolute(spec.protectedArtifactRemap.workerRoot)) {
+    if (!isPlainObject2(spec.protectedArtifactRemap) || Object.keys(spec.protectedArtifactRemap).some((key) => key !== "sourceRoot" && key !== "workerRoot") || typeof spec.protectedArtifactRemap.sourceRoot !== "string" || !path2.isAbsolute(spec.protectedArtifactRemap.sourceRoot) || typeof spec.protectedArtifactRemap.workerRoot !== "string" || !path2.isAbsolute(spec.protectedArtifactRemap.workerRoot)) {
       errors.push("protectedArtifactRemap must carry absolute sourceRoot and workerRoot paths");
     }
   }
@@ -2668,7 +2230,7 @@ function validateJobSpec(spec) {
   const effectiveWriteRoots = Array.isArray(spec.writeRoots) && spec.writeRoots.length > 0 && spec.writeRoots.every((root) => typeof root === "string" && root.length > 0) ? spec.writeRoots : isDispatchIntent(spec.intent) && spec.intent.writeRoots.length > 0 ? spec.intent.writeRoots : void 0;
   if (effectiveWriteRoots !== void 0) {
     const jobCwd = typeof spec.cwd === "string" && spec.cwd.length > 0 ? spec.cwd : process.cwd();
-    out.writeRoots = isDispatchIntent(spec.intent) ? effectiveWriteRoots.map((root) => resolvePathBoundary(jobCwd, String(root))) : effectiveWriteRoots.map((root) => asDirectoryPathBoundary(path3.resolve(jobCwd, String(root))));
+    out.writeRoots = isDispatchIntent(spec.intent) ? effectiveWriteRoots.map((root) => resolvePathBoundary(jobCwd, String(root))) : effectiveWriteRoots.map((root) => asDirectoryPathBoundary(path2.resolve(jobCwd, String(root))));
   }
   if (typeof spec.requestOrigin === "string" && VALID_REQUEST_ORIGINS.has(spec.requestOrigin)) {
     out.requestOrigin = spec.requestOrigin;
@@ -2733,7 +2295,7 @@ function isValidPlannedNode(value) {
   return value.kind === "ssh" && typeof value.host === "string" && value.host.trim().length > 0;
 }
 function isValidProtectedArtifactRemap(value) {
-  return isPlainObject2(value) && typeof value.sourceRoot === "string" && path3.isAbsolute(value.sourceRoot) && typeof value.workerRoot === "string" && path3.isAbsolute(value.workerRoot);
+  return isPlainObject2(value) && typeof value.sourceRoot === "string" && path2.isAbsolute(value.sourceRoot) && typeof value.workerRoot === "string" && path2.isAbsolute(value.workerRoot);
 }
 var VALID_GATE_ROLES = /* @__PURE__ */ new Set(["builder", "reviewer", "candidate", "judge", "member", "synthesis"]);
 var VALID_GATE_VERDICTS = /* @__PURE__ */ new Set(["pass", "fail", "revise"]);
@@ -2769,7 +2331,7 @@ function isValidGate(value) {
   if (value.worktree !== void 0) {
     if (!isPlainObject2(value.worktree)) return false;
     if (typeof value.worktree.backend !== "string" || !VALID_WORKTREE_BACKENDS.has(value.worktree.backend)) return false;
-    if (typeof value.worktree.path !== "string" || !path3.isAbsolute(value.worktree.path)) return false;
+    if (typeof value.worktree.path !== "string" || !path2.isAbsolute(value.worktree.path)) return false;
     if (typeof value.worktree.branch !== "string" || value.worktree.branch.length === 0) return false;
     if (value.worktree.workspaceId !== void 0 && typeof value.worktree.workspaceId !== "string") return false;
     if (value.worktree.fallback !== void 0 && (typeof value.worktree.fallback !== "string" || !VALID_WORKTREE_FALLBACKS.has(value.worktree.fallback))) {
@@ -2836,6 +2398,7 @@ var AUTO_BASELINE_BY_TASK_TYPE = {
   // Read-only shapes.
   code_review: "verifier",
   research: "researcher",
+  world_knowledge: "world-knowledge",
   code_read: "scout",
   unknown: "scout"
 };
@@ -2851,7 +2414,7 @@ var DEFAULT_MAX_OUTPUT_BYTES = 2e4;
 var PERSONA_MAX_CHARS = 8e3;
 var THINKING_LEVELS2 = ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 var VALID_THINKING2 = new Set(THINKING_LEVELS2);
-function isRecord5(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringArg(args, ...names) {
@@ -2931,7 +2494,7 @@ function dispatchRequestFromArgs(args, options) {
     if (request.worktree !== true) return { ok: false, message: "apply requires worktree: true" };
     request.apply = args.apply;
   }
-  if (Object.hasOwn(args, "gate") && isRecord5(args.intent) && Object.hasOwn(args.intent, "verification")) {
+  if (Object.hasOwn(args, "gate") && isRecord4(args.intent) && Object.hasOwn(args.intent, "verification")) {
     return { ok: false, message: "gate_and_intent_verification_conflict: gate cannot combine with intent.verification" };
   }
   let rawIntent = args.intent;
@@ -2942,7 +2505,7 @@ function dispatchRequestFromArgs(args, options) {
         message: "gate must be a non-empty declared check id: a check verify() lists, never a shell command; omit gate and run the check yourself after the receipt"
       };
     }
-    rawIntent = { ...isRecord5(rawIntent) ? rawIntent : {}, verification: [{ check: args.gate.trim() }] };
+    rawIntent = { ...isRecord4(rawIntent) ? rawIntent : {}, verification: [{ check: args.gate.trim() }] };
   }
   if (rawIntent !== void 0) {
     if (options.resolveIntent === void 0) return { ok: false, message: "intent resolver is unavailable" };
@@ -3014,9 +2577,9 @@ function dispatchRequestsFromArgs(args, options) {
   const requests = [];
   for (let index = 0; index < tasks.length; index += 1) {
     const item = tasks[index];
-    const itemArgs = isRecord5(item) ? { ...shared, ...item } : { ...shared, task: item };
-    const sharedIntent = isRecord5(shared.intent) ? shared.intent : null;
-    const itemIntent = isRecord5(item) && Object.hasOwn(item, "intent") && isRecord5(item.intent) ? item.intent : null;
+    const itemArgs = isRecord4(item) ? { ...shared, ...item } : { ...shared, task: item };
+    const sharedIntent = isRecord4(shared.intent) ? shared.intent : null;
+    const itemIntent = isRecord4(item) && Object.hasOwn(item, "intent") && isRecord4(item.intent) ? item.intent : null;
     if (sharedIntent !== null && itemIntent !== null) itemArgs.intent = { ...sharedIntent, ...itemIntent };
     const parsed = dispatchRequestFromArgs(itemArgs, options);
     if (!parsed.ok) return { ok: false, message: `dispatch: task ${index + 1}: ${parsed.message}` };
@@ -3047,7 +2610,7 @@ function prepareDispatchArguments(args) {
       }
     }
   }
-  if (isRecord5(next.tasks)) next.tasks = [next.tasks];
+  if (isRecord4(next.tasks)) next.tasks = [next.tasks];
   if (typeof next.tasks === "string") next.tasks = [next.tasks];
   if (next.tasks === void 0 && typeof next.task === "string") {
     const { task: _task, ...rest } = next;
@@ -3105,7 +2668,7 @@ function withResolvedPlanTaskPin(request, task, options = {}) {
     }
   };
 }
-function isRecord6(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function str(value) {
@@ -3163,10 +2726,10 @@ function taskViews(args) {
   const sharedNode = str(args.node);
   const sharedTarget = str(args.target);
   return tasks.map((item) => {
-    const record2 = isRecord6(item) ? item : {};
+    const record3 = isRecord5(item) ? item : {};
     const view = {
-      agent: str(record2.agent) ?? sharedAgent,
-      task: str(item) ?? str(record2.task) ?? "(invalid task)",
+      agent: str(record3.agent) ?? sharedAgent,
+      task: str(item) ?? str(record3.task) ?? "(invalid task)",
       routeApproval: null,
       agentSelection: null,
       stepId: null,
@@ -3177,23 +2740,23 @@ function taskViews(args) {
       agentDecision: null,
       wave: null
     };
-    const briefing = "briefing" in record2 ? str(record2.briefing) : str(args.briefing);
+    const briefing = "briefing" in record3 ? str(record3.briefing) : str(args.briefing);
     if (briefing !== void 0) view.briefing = briefing;
-    const worktree = "worktree" in record2 ? record2.worktree : args.worktree;
+    const worktree = "worktree" in record3 ? record3.worktree : args.worktree;
     if (worktree === true) {
       view.worktree = true;
-      const apply = "apply" in record2 ? record2.apply : args.apply;
+      const apply = "apply" in record3 ? record3.apply : args.apply;
       view.apply = apply === "preserve" ? "preserve" : "merge";
     }
-    const model = str(record2.model) ?? sharedModel;
+    const model = str(record3.model) ?? sharedModel;
     if (model !== void 0) view.model = model;
-    const node = str(record2.node) ?? sharedNode;
+    const node = str(record3.node) ?? sharedNode;
     if (node !== void 0) view.node = node;
-    const target = str(record2.target) ?? sharedTarget;
+    const target = str(record3.target) ?? sharedTarget;
     if (target !== void 0) view.target = target;
-    const failover = failoverModeOf(record2.failover) ?? failoverModeOf(args.failover);
+    const failover = failoverModeOf(record3.failover) ?? failoverModeOf(args.failover);
     if (failover !== void 0) view.failover = failover;
-    const rawCandidates = "allowedCandidates" in record2 ? record2.allowedCandidates : args.allowedCandidates;
+    const rawCandidates = "allowedCandidates" in record3 ? record3.allowedCandidates : args.allowedCandidates;
     const candidates = canonicalCandidates(rawCandidates);
     if (failover === "approved" && candidates !== null) view.allowedCandidates = candidates;
     return view;
@@ -3206,7 +2769,7 @@ function canonicalCandidates(value) {
   if (!Array.isArray(value)) return null;
   const out = [];
   for (const item of value) {
-    if (!isRecord6(item)) return null;
+    if (!isRecord5(item)) return null;
     const agentId = str(item.agentId);
     const target = str(item.target);
     const model = str(item.model);
@@ -3217,10 +2780,10 @@ function canonicalCandidates(value) {
   return out.length > 0 ? out : null;
 }
 function topologyOf(args) {
-  if (isRecord6(args.apply_winner)) return "compete";
+  if (isRecord5(args.apply_winner)) return "compete";
   if (args.mode === "compete") return "compete";
   if (args.mode === "council") return "council";
-  if (args.review === true || isRecord6(args.review)) return "review";
+  if (args.review === true || isRecord5(args.review)) return "review";
   if (args.detach === true) return "detached";
   if (args.mode === "sequential") return "sequential";
   if (args.mode === "pipeline") return "pipeline";
@@ -3303,14 +2866,14 @@ function renderPlanText(topology, tasks, costCeilingUsd, deadlineMs, source, max
     lines.push(...renderLegacyPathScope(task, cwd));
     for (const check of task.resolvedVerification ?? []) {
       lines.push(
-        `    verification check=${safeField(check.check)} argv=${JSON.stringify(check.argv)} cwd=${JSON.stringify(check.cwd)} timeout_ms=${check.timeoutMs}`
+        `    verification check=${safeField(check.check)}${check.kind !== void 0 ? ` kind=${check.kind}` : ""} argv=${JSON.stringify(check.argv)} cwd=${JSON.stringify(check.cwd)} timeout_ms=${check.timeoutMs}`
       );
     }
   }
   return lines.join("\n");
 }
 function isResolvedTask(value) {
-  if (!isRecord6(value)) return false;
+  if (!isRecord5(value)) return false;
   const allowedKeys = /* @__PURE__ */ new Set([
     "agent",
     "task",
@@ -3367,7 +2930,7 @@ function isResolvedTask(value) {
   }
   if (value.position !== void 0 && (!Number.isInteger(value.position) || Number(value.position) < 1)) return false;
   if (value.council !== void 0) {
-    if (!isRecord6(value.council) || typeof value.council.label !== "string" || value.council.label.length === 0 || value.council.color !== void 0 && typeof value.council.color !== "string" || !Number.isInteger(value.council.round) || Number(value.council.round) < 1 || !Number.isInteger(value.council.rounds) || Number(value.council.rounds) < 1 || value.council.synthesis !== "none" && value.council.synthesis !== "judge" && value.council.synthesis !== "vote")
+    if (!isRecord5(value.council) || typeof value.council.label !== "string" || value.council.label.length === 0 || value.council.color !== void 0 && typeof value.council.color !== "string" || !Number.isInteger(value.council.round) || Number(value.council.round) < 1 || !Number.isInteger(value.council.rounds) || Number(value.council.rounds) < 1 || value.council.synthesis !== "none" && value.council.synthesis !== "judge" && value.council.synthesis !== "vote")
       return false;
   }
   if (value.nodeKind !== "local" && value.nodeKind !== "ssh") return false;
@@ -3395,7 +2958,7 @@ function isResolvedTask(value) {
   if (value.agentDecision !== null && !isAgentDecision(value.agentDecision)) return false;
   if (value.intent !== void 0 && !isDispatchIntent(value.intent)) return false;
   if (value.resolvedVerification !== void 0 && (!Array.isArray(value.resolvedVerification) || !value.resolvedVerification.every(
-    (check) => isRecord6(check) && typeof check.check === "string" && Array.isArray(check.argv) && check.argv.every((arg) => typeof arg === "string") && typeof check.cwd === "string" && typeof check.timeoutMs === "number"
+    (check) => isRecord5(check) && typeof check.check === "string" && Array.isArray(check.argv) && check.argv.every((arg) => typeof arg === "string") && typeof check.cwd === "string" && typeof check.timeoutMs === "number" && (check.kind === void 0 || check.kind === "numeric-compare" || check.kind === "perf-budget") && (check.numeric === void 0 || isRecord5(check.numeric) && typeof check.numeric.reference === "string") && (check.perf === void 0 || isRecord5(check.perf))
   )))
     return false;
   if (value.failover === "approved") {
@@ -3414,6 +2977,7 @@ var RESULT_CONTRACT_KINDS = /* @__PURE__ */ new Set([
   "council-report",
   "debugger-report",
   "research-report",
+  "world-knowledge-report",
   "mutation-report",
   "provenance-report",
   "oracle-report",
@@ -3423,13 +2987,13 @@ var RESULT_CONTRACT_KINDS = /* @__PURE__ */ new Set([
   "delegation-plan"
 ]);
 function isAuthorityGrant(value) {
-  return isRecord6(value) && Object.keys(value).sort().join("\0") === "basis\0requested" && AGENT_AUTOMATION_AUTHORITIES.includes(value.requested) && (value.basis === "operator-plan-approval" || value.basis === "full-auto-policy");
+  return isRecord5(value) && Object.keys(value).sort().join("\0") === "basis\0requested" && AGENT_AUTOMATION_AUTHORITIES.includes(value.requested) && (value.basis === "operator-plan-approval" || value.basis === "full-auto-policy");
 }
 function isAgentDecision(value) {
-  return isRecord6(value) && value.policyVersion === ROUTE_POLICY_VERSION && (value.mode === "shadow" || value.mode === "active" || value.mode === "fixed") && isRecord6(value.selected) && isRecord6(value.executedRoute) && Array.isArray(value.approvedFallbacks) && Array.isArray(value.candidateEvaluations) && Array.isArray(value.hardConstraints) && Array.isArray(value.reasonCodes) && typeof value.decisionHash === "string" && /^[0-9a-f]{64}$/u.test(value.decisionHash) && isRouteDecisionAgentSelection(value.agentSelection);
+  return isRecord5(value) && value.policyVersion === ROUTE_POLICY_VERSION && (value.mode === "shadow" || value.mode === "active" || value.mode === "fixed") && isRecord5(value.selected) && isRecord5(value.executedRoute) && Array.isArray(value.approvedFallbacks) && Array.isArray(value.candidateEvaluations) && Array.isArray(value.hardConstraints) && Array.isArray(value.reasonCodes) && typeof value.decisionHash === "string" && /^[0-9a-f]{64}$/u.test(value.decisionHash) && isRouteDecisionAgentSelection(value.agentSelection);
 }
 function isResolvedAgentSelection(value) {
-  if (!isRecord6(value)) return false;
+  if (!isRecord5(value)) return false;
   if (Object.keys(value).sort().join("\0") !== ["approvedAuthorities", "authorityBasis", "baselineAgentId", "mode", "version"].sort().join("\0"))
     return false;
   if (value.version !== 1 || value.mode !== "auto") return false;
@@ -3443,7 +3007,7 @@ function isResolvedAgentSelection(value) {
 }
 function resolvedDispatchPlanFromArgs(args) {
   const value = args[RESOLVED_DISPATCH_PLAN_ARGUMENT];
-  if (!isRecord6(value) || value.version !== 3) return null;
+  if (!isRecord5(value) || value.version !== 3) return null;
   const artifactKeys = /* @__PURE__ */ new Set([
     "version",
     "topology",
@@ -3471,7 +3035,7 @@ function resolvedDispatchPlanFromArgs(args) {
   if (!Array.isArray(value.tasks) || !value.tasks.every(isResolvedTask)) return null;
   let confirmation;
   if (value.confirmation !== void 0) {
-    if (!isRecord6(value.confirmation) || !["branch\0group\0index", "branch\0cwd\0group\0index"].includes(
+    if (!isRecord5(value.confirmation) || !["branch\0group\0index", "branch\0cwd\0group\0index"].includes(
       Object.keys(value.confirmation).sort().join("\0")
     ) || typeof value.confirmation.branch !== "string" || value.confirmation.branch.trim().length === 0 || typeof value.confirmation.group !== "string" || value.confirmation.group.trim().length === 0 || value.confirmation.cwd !== void 0 && (typeof value.confirmation.cwd !== "string" || value.confirmation.cwd.trim().length === 0) || !Number.isInteger(value.confirmation.index) || Number(value.confirmation.index) < 1) {
       return null;
@@ -3550,7 +3114,7 @@ function resolvedDispatchPlanFromArgs(args) {
 }
 function parsePlanSource(value) {
   if (value === null) return null;
-  if (!isRecord6(value) || Object.keys(value).sort().join("\0") !== "executionPlanHash\0kind\0receiptDigest\0runId")
+  if (!isRecord5(value) || Object.keys(value).sort().join("\0") !== "executionPlanHash\0kind\0receiptDigest\0runId")
     return void 0;
   if (value.kind !== "scout-transition" || typeof value.runId !== "string" || value.runId.length === 0 || typeof value.receiptDigest !== "string" || !/^[0-9a-f]{64}$/u.test(value.receiptDigest) || typeof value.executionPlanHash !== "string" || !/^[0-9a-f]{64}$/u.test(value.executionPlanHash))
     return void 0;
@@ -3577,7 +3141,7 @@ function describeDispatchPlan(rawArgs) {
   const maxWorkers = resolved?.maxWorkers ?? null;
   const onFailure = resolved?.onFailure ?? null;
   const remote = tasks.some((task) => task.node !== void 0 && task.node !== "local");
-  const planScale = !preparationFailed && args.list !== true && (tasks.length > 1 || source !== null || topology === "compete" || topology === "council" || remote || tasks.some((task) => task.failover === "approved") || confirmation !== void 0 || isRecord6(args.apply_winner));
+  const planScale = !preparationFailed && args.list !== true && (tasks.length > 1 || source !== null || topology === "compete" || topology === "council" || remote || tasks.some((task) => task.failover === "approved") || confirmation !== void 0 || isRecord5(args.apply_winner));
   const text = renderPlanText(
     topology,
     tasks,
@@ -4073,7 +3637,8 @@ ${guidance}`,
   return { kind: "blocked", reason, decision: blocked };
 }
 function skillSurfaceBlockedVerdict(decision, tool, violation) {
-  const reason = violation.disallowedBy.length > 0 ? `${tool} is disallowed by the active skill(s) ${violation.disallowedBy.join(", ")} (disallowed-tools). The narrowing ends when the skill policy's turn or worker run ends. Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.` : `${tool} is outside the tool surface declared by the active skill(s) ${violation.skills.join(", ")}. Tools are narrowed to: ${(violation.mergedAllowedTools ?? []).join(", ")} (plus context and ask_user). The narrowing ends when the skill policy's turn or worker run ends. Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.`;
+  const lifetime = violation.carriedSurface ? "The narrowing stays active for the rest of the session, across the operator's later turns, until a different skill replaces it or the operator clears it with /skill off." : "The narrowing ends when the skill policy's turn or worker run ends.";
+  const reason = violation.disallowedBy.length > 0 ? `${tool} is disallowed by the active skill(s) ${violation.disallowedBy.join(", ")} (disallowed-tools). ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.` : `${tool} is outside the tool surface declared by the active skill(s) ${violation.skills.join(", ")}. Tools are narrowed to: ${(violation.mergedAllowedTools ?? []).join(", ")} (plus context and ask_user). The limitation receipt is also available unless explicitly disallowed. ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.`;
   const blocked = {
     kind: "block",
     classification: decision.classification,
@@ -4230,7 +3795,8 @@ var RUNTIME_API_FAMILIES = [
   "rerank-http",
   "embeddings-http",
   "claude-agent-sdk",
-  "claude-code-subprocess"
+  "claude-code-subprocess",
+  "external-agent-subprocess"
 ];
 var RUNTIME_AUTHS = [
   "api-key",
@@ -4303,15 +3869,15 @@ function readString(value, source, options) {
   if (!options?.allowEmpty && value.length === 0) throw new Error(`${source} must be a non-empty string`);
   return value;
 }
-function readOptionalString(record2, key, source) {
-  if (record2[key] !== void 0) readString(record2[key], `${source}.${key}`);
+function readOptionalString(record3, key, source) {
+  if (record3[key] !== void 0) readString(record3[key], `${source}.${key}`);
 }
-function readOptionalBoolean(record2, key, source) {
-  const value = record2[key];
+function readOptionalBoolean(record3, key, source) {
+  const value = record3[key];
   if (value !== void 0 && typeof value !== "boolean") throw new Error(`${source}.${key} must be a boolean`);
 }
-function readOptionalNumber(record2, key, source) {
-  const value = record2[key];
+function readOptionalNumber(record3, key, source) {
+  const value = record3[key];
   if (value !== void 0 && (typeof value !== "number" || !Number.isFinite(value))) {
     throw new Error(`${source}.${key} must be a finite number`);
   }
@@ -4322,15 +3888,15 @@ function readEnum(value, source, allowed) {
   }
   return value;
 }
-function readOptionalEnum(record2, key, source, allowed) {
-  if (record2[key] !== void 0) readEnum(record2[key], `${source}.${key}`, allowed);
+function readOptionalEnum(record3, key, source, allowed) {
+  if (record3[key] !== void 0) readEnum(record3[key], `${source}.${key}`, allowed);
 }
 function readStringArray(value, source) {
   if (!Array.isArray(value)) throw new Error(`${source} must be an array`);
   return value.map((item, index) => readString(item, `${source}[${index}]`));
 }
-function readOptionalStringArray(record2, key, source) {
-  if (record2[key] !== void 0) readStringArray(record2[key], `${source}.${key}`);
+function readOptionalStringArray(record3, key, source) {
+  if (record3[key] !== void 0) readStringArray(record3[key], `${source}.${key}`);
 }
 function validateProtectedModels(value) {
   if (value === void 0) return;
@@ -4397,6 +3963,9 @@ function validateCapabilityPatch(value, source) {
   for (const key of ["contextWindow", "maxTokens"]) {
     readOptionalNumber(caps, key, source);
   }
+  if (caps.thinkingControlRuntime !== void 0) {
+    readEnum(caps.thinkingControlRuntime, `${source}.thinkingControlRuntime`, ["lmstudio", "llamacpp"]);
+  }
   for (const key of ["toolCallFormat", "thinkingFormat", "structuredOutputs"]) {
     readOptionalString(caps, key, source);
   }
@@ -4698,31 +4267,118 @@ import { spawn } from "node:child_process";
 
 // src/engine/external-subprocess.ts
 init_esm_shims();
+async function* readBoundedLines(readable, options) {
+  let segments = [];
+  let lineBytes = 0;
+  let totalBytes = 0;
+  let discarding = false;
+  const finishLine = () => {
+    if (discarding) {
+      segments = [];
+      lineBytes = 0;
+      discarding = false;
+      return { kind: "oversized" };
+    }
+    if (lineBytes === 0) return { kind: "line", line: "" };
+    const joined = Buffer.concat(segments, lineBytes);
+    segments = [];
+    lineBytes = 0;
+    const end = joined.at(-1) === 13 ? joined.length - 1 : joined.length;
+    return { kind: "line", line: joined.subarray(0, end).toString("utf8") };
+  };
+  for await (const raw of readable) {
+    const chunk = Buffer.isBuffer(raw) ? raw : Buffer.from(String(raw));
+    totalBytes += chunk.byteLength;
+    if (totalBytes > options.maxTotalBytes) throw new Error("external stdout exceeded the cumulative output limit");
+    let offset = 0;
+    while (offset < chunk.length) {
+      const newline = chunk.indexOf(10, offset);
+      const end = newline === -1 ? chunk.length : newline;
+      const piece = chunk.subarray(offset, end);
+      if (!discarding && piece.length > 0) {
+        if (lineBytes + piece.length > options.maxLineBytes) {
+          segments = [];
+          lineBytes = 0;
+          discarding = true;
+        } else {
+          segments.push(piece);
+          lineBytes += piece.length;
+        }
+      }
+      if (newline === -1) break;
+      const line = finishLine();
+      if (line) yield line;
+      offset = newline + 1;
+    }
+  }
+  if (discarding || lineBytes > 0) {
+    const line = finishLine();
+    if (line) yield line;
+  }
+}
 async function readStderr(child) {
-  let stderr = "";
+  let tail = Buffer.alloc(0);
   for await (const chunk of child.stderr) {
-    stderr += String(chunk);
-    if (stderr.length > 8192) stderr = stderr.slice(-8192);
+    const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
+    tail = Buffer.concat([tail, bytes]);
+    if (tail.byteLength > 8192) tail = tail.subarray(tail.byteLength - 8192);
   }
-  return stderr;
+  return boundedExternalDiagnostic(tail.toString("utf8"));
+}
+function createProcessTreeTerminator(child, graceMs = 1500) {
+  let sent = false;
+  let timer = null;
+  const signal = (name) => {
+    if (child.pid && process.platform !== "win32") {
+      try {
+        process.kill(-child.pid, name);
+        return;
+      } catch {
+      }
+    }
+    if (child.exitCode !== null) return;
+    child.kill(name);
+  };
+  return {
+    terminate() {
+      if (sent) return;
+      sent = true;
+      signal("SIGTERM");
+      timer = setTimeout(() => {
+        timer = null;
+        signal("SIGKILL");
+      }, graceMs);
+    },
+    cleanup() {
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+        signal("SIGKILL");
+      }
+    }
+  };
 }
 function waitForClose(child) {
   return new Promise((resolve) => {
-    child.once("error", () => resolve(1));
-    child.once("close", (code) => resolve(code ?? 1));
+    let settled = false;
+    const finish = (code) => {
+      if (settled) return;
+      settled = true;
+      resolve(code);
+    };
+    child.once("error", () => finish(1));
+    child.once("close", (code) => finish(code ?? 1));
   });
 }
 
 // src/engine/antigravity/subprocess-runtime.ts
 var ANTIGRAVITY_BINARY = "agy";
-var ZERO_USAGE = {
-  input: 0,
-  output: 0,
-  cacheRead: 0,
-  cacheWrite: 0,
-  totalTokens: 0,
-  cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 }
-};
+var ANTIGRAVITY_MAX_STREAM_LINE_BYTES = 1024 * 1024;
+var ANTIGRAVITY_MAX_STREAM_BYTES = 8 * 1024 * 1024;
+var ANTIGRAVITY_MAX_RESPONSE_BYTES = 4 * 1024 * 1024;
+var ANTIGRAVITY_MAX_PROMPT_BYTES = 4 * 1024 * 1024;
+var MAX_PROTOCOL_DIAGNOSTICS = 32;
+var MAX_CONVERSATION_ID_BYTES = 4096;
 function antigravitySubprocessConfigForAutonomy(level, env = process.env) {
   if (level === "full-auto" && env.CLIO_CODER_ALLOW_EXTERNAL_FULL_ACCESS === "1") {
     return {
@@ -4739,7 +4395,7 @@ function antigravitySubprocessConfigForAutonomy(level, env = process.env) {
   if (level === "read-only") {
     return { extraArgs: ["--mode", "plan", "--sandbox"], dangerousBypass: false, externalMode: "plan+sandbox" };
   }
-  return { extraArgs: [], dangerousBypass: false, externalMode: "agy-settings-default" };
+  return { extraArgs: ["--mode", "accept-edits"], dangerousBypass: false, externalMode: "accept-edits" };
 }
 function buildAntigravityPrompt(input) {
   const parts = [];
@@ -4752,120 +4408,319 @@ function buildAntigravityPrompt(input) {
   parts.push(input.task);
   return parts.join("\n\n");
 }
-function buildAgyArgs(input) {
+function buildAgyStdinLine(input) {
+  const content = buildAntigravityPrompt(input);
+  if (Buffer.byteLength(content, "utf8") > ANTIGRAVITY_MAX_PROMPT_BYTES) {
+    throw new Error(`Antigravity work order exceeded ${ANTIGRAVITY_MAX_PROMPT_BYTES} bytes`);
+  }
+  return `${JSON.stringify({ event: "user", message: { content } })}
+`;
+}
+function buildAgyArgs(input, gateEnv = process.env) {
   assertToolProfileEnforceable(input.toolProfile, "antigravity-code");
-  const permission = antigravitySubprocessConfigForAutonomy(input.autonomy);
-  const args = ["--print", ...permission.extraArgs];
+  const permission = antigravitySubprocessConfigForAutonomy(input.autonomy, gateEnv);
+  const args = [
+    ...permission.extraArgs,
+    "--input-format",
+    "stream-json",
+    "--output-format",
+    "stream-json",
+    "--disable-slash-commands"
+  ];
   if (input.wireModelId.trim().length > 0) args.push("--model", input.wireModelId.trim());
-  args.push(buildAntigravityPrompt(input));
   return args;
 }
-function buildAssistantMessage(input) {
-  const message = {
-    role: "assistant",
-    content: [{ type: "text", text: input.text }],
-    api: "google-generative-ai",
-    provider: "google",
-    model: input.model,
-    usage: ZERO_USAGE,
-    stopReason: input.aborted ? "aborted" : input.exitCode === 0 ? "stop" : "error",
-    timestamp: Date.now()
+function record2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function parseAntigravityStreamLine(line) {
+  let decoded;
+  try {
+    decoded = JSON.parse(line);
+  } catch {
+    return null;
+  }
+  const envelope = record2(decoded);
+  if (!envelope || typeof envelope.event !== "string") return null;
+  if (envelope.event === "init") {
+    return {
+      event: "init",
+      conversationId: typeof envelope.conversation_id === "string" ? envelope.conversation_id : null,
+      model: typeof envelope.model === "string" ? envelope.model : null
+    };
+  }
+  if (envelope.event === "step_update") {
+    const update = record2(envelope.step_update);
+    if (!update) return null;
+    if (update.step_type !== "agent_response" || typeof update.text_delta !== "string") {
+      return { event: "other" };
+    }
+    return {
+      event: "text",
+      conversationId: typeof update.conversation_id === "string" ? update.conversation_id : null,
+      delta: update.text_delta
+    };
+  }
+  if (envelope.event === "result") {
+    const result = record2(envelope.result);
+    return result ? { event: "result", result } : null;
+  }
+  return { event: "other" };
+}
+function finite(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.min(value, Number.MAX_SAFE_INTEGER) : 0;
+}
+function normalizeUsage(raw) {
+  const source = record2(raw) ?? {};
+  const input = finite(source.input_tokens);
+  const output = finite(source.output_tokens);
+  const cacheRead = finite(source.cache_read_tokens);
+  const reasoningTokens = finite(source.thinking_tokens);
+  const usage = {
+    input,
+    output,
+    cacheRead,
+    cacheWrite: 0,
+    totalTokens: finite(source.total_tokens) || input + output + reasoningTokens,
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 }
   };
-  if (input.exitCode !== 0 && !input.aborted) {
-    const detail = input.stderr.trim();
-    if (detail.length > 0) message.errorMessage = detail;
+  if (reasoningTokens > 0) usage.reasoningTokens = reasoningTokens;
+  return usage;
+}
+function appendBoundedText(current, delta) {
+  if (Buffer.byteLength(current, "utf8") + Buffer.byteLength(delta, "utf8") > ANTIGRAVITY_MAX_RESPONSE_BYTES) {
+    throw new Error(`Antigravity response exceeded ${ANTIGRAVITY_MAX_RESPONSE_BYTES} bytes`);
   }
-  return message;
+  return current + delta;
+}
+function boundedProviderField(value, field) {
+  if (typeof value !== "string") return "";
+  if (Buffer.byteLength(value, "utf8") > ANTIGRAVITY_MAX_RESPONSE_BYTES) {
+    throw new Error(`Antigravity terminal ${field} exceeded ${ANTIGRAVITY_MAX_RESPONSE_BYTES} bytes`);
+  }
+  return value;
+}
+function boundedConversationId(value) {
+  if (typeof value !== "string" || value.length === 0) return null;
+  return Buffer.byteLength(value, "utf8") <= MAX_CONVERSATION_ID_BYTES ? value : null;
+}
+function protocolFailure(state, detail) {
+  if (state.protocolDiagnostics.length < MAX_PROTOCOL_DIAGNOSTICS) state.protocolDiagnostics.push(detail);
 }
 function emitTextDelta(emit, state, delta) {
   if (delta.length === 0) return;
-  state.text += delta;
-  const message = buildAssistantMessage({
-    model: state.model,
-    text: state.text,
-    exitCode: 0,
-    aborted: false,
-    stderr: ""
-  });
+  state.text = appendBoundedText(state.text, delta);
   if (!state.started) {
     state.started = true;
-    emit({ type: "message_start", message });
+    emit({
+      type: "message_start",
+      message: buildAssistantMessage({
+        model: state.model,
+        text: "",
+        result: null,
+        conversationId: null,
+        exitCode: 0,
+        aborted: false,
+        diagnostic: ""
+      })
+    });
   }
   emit({
     type: "message_update",
-    message,
-    assistantMessageEvent: {
-      type: "text_delta",
-      contentIndex: 0,
-      delta,
-      partial: message
-    }
+    assistantMessageEvent: { type: "text_delta", contentIndex: 0, delta }
   });
 }
-async function readStdout(child, emit, state) {
-  for await (const chunk of child.stdout) {
-    emitTextDelta(emit, state, String(chunk));
+async function readStream(child, emit, state) {
+  for await (const bounded of readBoundedLines(child.stdout, {
+    maxLineBytes: ANTIGRAVITY_MAX_STREAM_LINE_BYTES,
+    maxTotalBytes: ANTIGRAVITY_MAX_STREAM_BYTES
+  })) {
+    if (bounded.kind === "oversized") {
+      protocolFailure(state, "oversized structured output line");
+      continue;
+    }
+    const line = bounded.line;
+    if (!line.trim()) continue;
+    const event = parseAntigravityStreamLine(line);
+    if (!event) {
+      protocolFailure(state, "unreadable structured output line");
+      continue;
+    }
+    if (state.terminalSeen) {
+      protocolFailure(state, "event after terminal result");
+      continue;
+    }
+    switch (event.event) {
+      case "init":
+        if (state.initSeen) {
+          protocolFailure(state, "duplicate init event");
+          break;
+        }
+        state.initSeen = true;
+        state.conversationId = boundedConversationId(event.conversationId);
+        if (event.model?.trim()) state.model = event.model.trim();
+        break;
+      case "text":
+        if (!state.initSeen) {
+          protocolFailure(state, "text event before init");
+          break;
+        }
+        state.conversationId = boundedConversationId(event.conversationId) ?? state.conversationId;
+        emitTextDelta(emit, state, event.delta);
+        break;
+      case "result":
+        if (!state.initSeen) {
+          protocolFailure(state, "terminal result before init");
+          break;
+        }
+        state.terminalSeen = true;
+        state.result = event.result;
+        state.conversationId = boundedConversationId(event.result.conversation_id) ?? state.conversationId;
+        break;
+      case "other":
+        if (!state.initSeen) protocolFailure(state, "event before init");
+        break;
+    }
   }
 }
-function startAntigravityWorkerRun(input, emit) {
-  const args = buildAgyArgs(input);
-  const child = spawn(ANTIGRAVITY_BINARY, args, {
-    cwd: process.cwd(),
-    env: process.env,
-    stdio: ["ignore", "pipe", "pipe"]
+function resultDiagnostic(input) {
+  if (input.aborted) return "Antigravity run was cancelled";
+  if (input.spawnError) return input.spawnError;
+  if (input.streamError) return input.streamError;
+  if (input.protocolDiagnostics.length > 0) {
+    return `Antigravity structured output violated the protocol: ${input.protocolDiagnostics.join("; ")}`;
+  }
+  if (input.result === null) {
+    return "Antigravity CLI ended without a terminal stream result. Update `agy` and verify stream-json support.";
+  }
+  if (input.result.status !== "SUCCESS") {
+    const providerError = boundedProviderField(input.result.error, "error").trim();
+    return providerError || `Antigravity returned terminal status ${String(input.result.status ?? "missing")}`;
+  }
+  if (input.exitCode !== 0) return `Antigravity returned SUCCESS but exited with status ${input.exitCode}`;
+  if (typeof input.result.response !== "string") return "Antigravity SUCCESS result omitted its required response";
+  return "";
+}
+function buildAssistantMessage(input) {
+  const succeeded = !input.aborted && input.exitCode === 0 && input.result?.status === "SUCCESS" && typeof input.result.response === "string" && input.diagnostic.length === 0;
+  const message = {
+    role: "assistant",
+    content: [{ type: "text", text: input.text }],
+    api: "external-agent-subprocess",
+    provider: "antigravity",
+    model: input.model,
+    usage: normalizeUsage(input.result?.usage),
+    stopReason: input.aborted ? "aborted" : succeeded ? "stop" : "error",
+    timestamp: Date.now()
+  };
+  if (input.conversationId) message.responseId = input.conversationId;
+  if (input.diagnostic) message.errorMessage = boundedExternalDiagnostic(input.diagnostic);
+  return message;
+}
+function startAntigravityWorkerRun(input, emit, dependencies = {}) {
+  const sourceEnv = dependencies.environment ?? process.env;
+  const args = buildAgyArgs(input, sourceEnv);
+  const stdinLine = buildAgyStdinLine(input);
+  const workspaceRoot = dependencies.workspaceRoot ?? process.cwd();
+  const cwd = resolveSafeCwd(input.cwd, workspaceRoot);
+  const child = spawn(dependencies.binary ?? ANTIGRAVITY_BINARY, args, {
+    cwd,
+    env: buildSafeToolEnv({}, sourceEnv),
+    detached: process.platform !== "win32",
+    stdio: ["pipe", "pipe", "pipe"]
   });
-  const streamState = { started: false, text: "", model: input.wireModelId };
+  const streamState = {
+    started: false,
+    text: "",
+    model: input.wireModelId,
+    result: null,
+    conversationId: null,
+    initSeen: false,
+    terminalSeen: false,
+    protocolDiagnostics: []
+  };
   let aborted = false;
-  let killTimer = null;
+  let spawnError = "";
+  let streamError = "";
+  const terminator = createProcessTreeTerminator(child, dependencies.killGraceMs ?? 1500);
   const abort = () => {
+    if (child.exitCode !== null) return;
     aborted = true;
-    if (child.killed) return;
-    child.kill("SIGTERM");
-    killTimer = setTimeout(() => {
-      if (!child.killed) child.kill("SIGKILL");
-    }, 1500);
+    terminator.terminate();
   };
-  if (input.signal) {
-    if (input.signal.aborted) abort();
-    else input.signal.addEventListener("abort", abort, { once: true });
-  }
+  const onAbort = () => abort();
+  if (input.signal?.aborted) abort();
+  else input.signal?.addEventListener("abort", onAbort, { once: true });
+  child.once("error", (cause) => {
+    spawnError = cause.code === "ENOENT" ? "Antigravity CLI (`agy`) is not installed or not on PATH." : boundedExternalDiagnostic(cause.message);
+  });
+  child.stdin.on("error", (cause) => {
+    if (!aborted) spawnError ||= boundedExternalDiagnostic(`could not send work order to Antigravity: ${cause.message}`);
+  });
+  child.stdin.end(stdinLine);
   const promise = (async () => {
     emit({ type: "agent_start" });
-    const stderrPromise = readStderr(child);
-    const stdoutPromise = readStdout(child, emit, streamState);
-    const exitCode = await waitForClose(child);
-    await stdoutPromise.catch(() => {
-    });
-    const stderr = await stderrPromise.catch(() => "");
-    if (killTimer) clearTimeout(killTimer);
-    const finalText = streamState.text || (exitCode === 0 ? "" : stderr.trim());
-    const finalMessage = buildAssistantMessage({
-      model: streamState.model,
-      text: finalText,
-      exitCode,
-      aborted,
-      stderr
-    });
-    if (!streamState.started) emit({ type: "message_start", message: finalMessage });
-    emit({ type: "message_end", message: finalMessage });
-    const messages = [finalMessage];
-    emit({ type: "agent_end", messages });
-    if (exitCode !== 0 && stderr.trim().length > 0 && !aborted) {
-      process.stderr.write(`[worker:antigravity-code] ${stderr.trim()}
+    try {
+      const stderrPromise = readStderr(child);
+      const stdoutPromise = readStream(child, emit, streamState).catch((cause) => {
+        streamError = boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause));
+        terminator.terminate();
+      });
+      const exitCode = await waitForClose(child);
+      await stdoutPromise;
+      const stderr = await stderrPromise.catch(
+        (cause) => boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause))
+      );
+      let terminalResponse = "";
+      try {
+        terminalResponse = boundedProviderField(streamState.result?.response, "response");
+      } catch (cause) {
+        streamError ||= boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause));
+      }
+      let diagnostic = "";
+      try {
+        diagnostic = resultDiagnostic({
+          result: streamState.result,
+          exitCode,
+          spawnError,
+          stderr,
+          protocolDiagnostics: streamState.protocolDiagnostics,
+          streamError,
+          aborted
+        });
+      } catch (cause) {
+        diagnostic = boundedExternalDiagnostic(cause instanceof Error ? cause.message : String(cause));
+      }
+      const finalText = terminalResponse || streamState.text;
+      const finalMessage = buildAssistantMessage({
+        model: streamState.model,
+        text: finalText,
+        result: streamState.result,
+        conversationId: streamState.conversationId,
+        exitCode,
+        aborted,
+        diagnostic
+      });
+      if (!streamState.started) emit({ type: "message_start", message: finalMessage });
+      emit({ type: "message_end", message: finalMessage });
+      const messages = [finalMessage];
+      emit({ type: "agent_end", messages });
+      if (finalMessage.stopReason === "error" && diagnostic && !aborted) {
+        process.stderr.write(`[worker:antigravity-code] ${boundedExternalDiagnostic(diagnostic)}
 `);
+      }
+      return { messages, exitCode: finalMessage.stopReason === "stop" ? 0 : 1 };
+    } finally {
+      terminator.cleanup();
+      input.signal?.removeEventListener("abort", onAbort);
     }
-    return { messages, exitCode: exitCode === 0 ? 0 : 1 };
   })();
-  return {
-    promise,
-    abort
-  };
+  return { promise, abort };
 }
 
 // src/engine/claude/subprocess-runtime.ts
 init_esm_shims();
 import { spawn as spawn2 } from "node:child_process";
-import { createInterface } from "node:readline";
 
 // src/engine/claude/session-id.ts
 init_esm_shims();
@@ -4876,6 +4731,9 @@ function isClaudeCodeSessionId(value) {
 
 // src/engine/claude/subprocess-runtime.ts
 var READ_ONLY_CLAUDE_TOOLS = ["Read", "Grep", "Glob", "LS", "WebFetch", "WebSearch"];
+var CLAUDE_BINARY = "claude";
+var CLAUDE_MAX_STREAM_LINE_BYTES = 1024 * 1024;
+var CLAUDE_MAX_STREAM_BYTES = 8 * 1024 * 1024;
 function claudeSubprocessPermissionConfigForAutonomy(level, env = process.env) {
   if (level === "full-auto" && env.CLIO_CODER_ALLOW_EXTERNAL_FULL_ACCESS === "1") {
     return {
@@ -4906,9 +4764,9 @@ function buildClaudeCodePrompt(input) {
   parts.push(input.task);
   return parts.join("\n\n");
 }
-function buildClaudeCodeArgs(input) {
+function buildClaudeCodeArgs(input, gateEnv = process.env) {
   assertToolProfileEnforceable(input.toolProfile, "claude-code");
-  const permission = claudeSubprocessPermissionConfigForAutonomy(input.autonomy);
+  const permission = claudeSubprocessPermissionConfigForAutonomy(input.autonomy, gateEnv);
   const args = [
     "-p",
     "--output-format",
@@ -4923,20 +4781,19 @@ function buildClaudeCodeArgs(input) {
   const systemPrompt = input.systemPrompt.trim();
   if (systemPrompt.length > 0) args.push("--append-system-prompt", systemPrompt);
   if (isClaudeCodeSessionId(input.sessionId)) args.push("--session-id", input.sessionId.trim());
-  args.push(buildClaudeCodePrompt(input));
   return args;
 }
-function finite(value) {
+function finite2(value) {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
 }
-function normalizeUsage(raw, totalCostUsd = 0) {
-  const record2 = typeof raw === "object" && raw !== null ? raw : {};
-  const input = finite(record2.input_tokens) + finite(record2.inputTokens) + finite(record2.input) + finite(record2.prompt_tokens) + finite(record2.promptTokens);
-  const output = finite(record2.output_tokens) + finite(record2.outputTokens) + finite(record2.output) + finite(record2.completion_tokens) + finite(record2.completionTokens);
-  const cacheRead = finite(record2.cache_read_input_tokens) + finite(record2.cacheReadInputTokens) + finite(record2.cacheRead) + finite(record2.cacheReadTokens);
-  const cacheWrite = finite(record2.cache_creation_input_tokens) + finite(record2.cacheCreationInputTokens) + finite(record2.cacheWrite) + finite(record2.cacheWriteTokens);
+function normalizeUsage2(raw, totalCostUsd = 0) {
+  const record3 = typeof raw === "object" && raw !== null ? raw : {};
+  const input = finite2(record3.input_tokens) + finite2(record3.inputTokens) + finite2(record3.input) + finite2(record3.prompt_tokens) + finite2(record3.promptTokens);
+  const output = finite2(record3.output_tokens) + finite2(record3.outputTokens) + finite2(record3.output) + finite2(record3.completion_tokens) + finite2(record3.completionTokens);
+  const cacheRead = finite2(record3.cache_read_input_tokens) + finite2(record3.cacheReadInputTokens) + finite2(record3.cacheRead) + finite2(record3.cacheReadTokens);
+  const cacheWrite = finite2(record3.cache_creation_input_tokens) + finite2(record3.cacheCreationInputTokens) + finite2(record3.cacheWrite) + finite2(record3.cacheWriteTokens);
   const totalTokens = input + output + cacheRead + cacheWrite;
-  const total = finite(totalCostUsd) + finite(record2.costUSD) + finite(record2.cost_usd);
+  const total = finite2(totalCostUsd) + finite2(record3.costUSD) + finite2(record3.cost_usd);
   return {
     input,
     output,
@@ -4946,8 +4803,8 @@ function normalizeUsage(raw, totalCostUsd = 0) {
     cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total }
   };
 }
-function nestedRecord(record2, key) {
-  const value = record2[key];
+function nestedRecord(record3, key) {
+  const value = record3[key];
   return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
 }
 function extractContentText(content) {
@@ -4955,52 +4812,54 @@ function extractContentText(content) {
   let out = "";
   for (const block of content) {
     if (typeof block !== "object" || block === null) continue;
-    const record2 = block;
-    if (record2.type === "text" && typeof record2.text === "string") out += record2.text;
+    const record3 = block;
+    if (record3.type === "text" && typeof record3.text === "string") out += record3.text;
   }
   return out;
 }
-function extractDelta(record2) {
-  const delta = nestedRecord(record2, "delta");
+function extractDelta(record3) {
+  const delta = nestedRecord(record3, "delta");
   if (delta && typeof delta.text === "string") return delta.text;
   if (delta && typeof delta.thinking === "string") return "";
-  const contentBlock = nestedRecord(record2, "content_block");
+  const contentBlock = nestedRecord(record3, "content_block");
   if (contentBlock && contentBlock.type === "text" && typeof contentBlock.text === "string") return contentBlock.text;
-  if (typeof record2.delta === "string") return record2.delta;
+  if (typeof record3.delta === "string") return record3.delta;
   return "";
 }
-function assistantTextFromEvent(record2) {
-  const message = nestedRecord(record2, "message");
+function assistantTextFromEvent(record3) {
+  const message = nestedRecord(record3, "message");
   if (message) return extractContentText(message.content);
-  return extractContentText(record2.content);
+  return extractContentText(record3.content);
 }
-function resultText(record2) {
-  if (!record2) return "";
-  return typeof record2.result === "string" ? record2.result : "";
+function resultText(record3) {
+  if (!record3) return "";
+  return typeof record3.result === "string" ? record3.result : "";
 }
-function resultError(record2, stderr) {
-  if (record2) {
-    if (typeof record2.error === "string") return record2.error;
-    if (Array.isArray(record2.errors)) return record2.errors.map(String).join("; ");
-    if (record2.subtype !== void 0 && record2.subtype !== "success") return String(record2.subtype);
+function resultError(record3, stderr) {
+  if (record3) {
+    if (typeof record3.error === "string") return record3.error;
+    if (Array.isArray(record3.errors)) return record3.errors.map(String).join("; ");
+    if (record3.subtype !== void 0 && record3.subtype !== "success") return String(record3.subtype);
   }
   return stderr.trim();
 }
 function buildAssistantMessage2(input) {
-  const errorMessage = input.exitCode === 0 ? "" : resultError(input.result, input.stderr);
+  const transportError = input.transportError ?? "";
+  const failed = input.exitCode !== 0 || transportError.length > 0;
+  const errorMessage = !failed ? "" : transportError || resultError(input.result, input.stderr);
   const message = {
     role: "assistant",
     content: [{ type: "text", text: input.text }],
     api: "claude-code-subprocess",
     provider: "anthropic",
     model: input.model,
-    usage: normalizeUsage(input.result?.usage, finite(input.result?.total_cost_usd)),
-    stopReason: input.aborted ? "aborted" : input.exitCode === 0 ? "stop" : "error",
+    usage: normalizeUsage2(input.result?.usage, finite2(input.result?.total_cost_usd)),
+    stopReason: input.aborted ? "aborted" : failed ? "error" : "stop",
     timestamp: Date.now()
   };
   if (typeof input.result?.request_id === "string") message.responseId = input.result.request_id;
   if (typeof input.result?.model === "string") message.responseModel = input.result.model;
-  if (errorMessage.length > 0) message.errorMessage = errorMessage;
+  if (errorMessage.length > 0) message.errorMessage = boundedExternalDiagnostic(errorMessage);
   return message;
 }
 function emitTextDelta2(emit, state, delta) {
@@ -5030,9 +4889,14 @@ function emitTextDelta2(emit, state, delta) {
   });
 }
 async function readJsonLines(child, emit, state) {
-  const rl = createInterface({ input: child.stdout });
-  for await (const line of rl) {
-    const trimmed = line.trim();
+  for await (const bounded of readBoundedLines(child.stdout, {
+    maxLineBytes: CLAUDE_MAX_STREAM_LINE_BYTES,
+    maxTotalBytes: CLAUDE_MAX_STREAM_BYTES
+  })) {
+    if (bounded.kind === "oversized") {
+      throw new Error(`claude stream-json line exceeded ${CLAUDE_MAX_STREAM_LINE_BYTES} bytes`);
+    }
+    const trimmed = bounded.line.trim();
     if (trimmed.length === 0) continue;
     let parsed;
     try {
@@ -5041,26 +4905,31 @@ async function readJsonLines(child, emit, state) {
       continue;
     }
     if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) continue;
-    const record2 = parsed;
-    if (record2.type === "system" && typeof record2.model === "string") state.model = record2.model;
-    if (record2.type === "result") {
-      state.result = record2;
+    const record3 = parsed;
+    if (record3.type === "system" && typeof record3.model === "string") state.model = record3.model;
+    if (record3.type === "result") {
+      state.result = record3;
       continue;
     }
-    if (record2.type === "assistant") {
-      const text = assistantTextFromEvent(record2);
+    if (record3.type === "assistant") {
+      const text = assistantTextFromEvent(record3);
       if (text.length > 0 && text.length >= state.text.length) state.text = text;
       continue;
     }
-    emitTextDelta2(emit, state, extractDelta(record2));
+    emitTextDelta2(emit, state, extractDelta(record3));
   }
 }
-function startClaudeCodeWorkerRun(input, emit) {
-  const args = buildClaudeCodeArgs(input);
-  const child = spawn2("claude", args, {
-    cwd: process.cwd(),
-    env: process.env,
-    stdio: ["ignore", "pipe", "pipe"]
+function startClaudeCodeWorkerRun(input, emit, dependencies = {}) {
+  const sourceEnv = dependencies.environment ?? process.env;
+  const args = buildClaudeCodeArgs(input, sourceEnv);
+  const prompt = buildClaudeCodePrompt(input);
+  const workspaceRoot = dependencies.workspaceRoot ?? process.cwd();
+  const cwd = resolveSafeCwd(input.cwd, workspaceRoot);
+  const child = spawn2(dependencies.binary ?? CLAUDE_BINARY, args, {
+    cwd,
+    env: buildSafeToolEnv({}, sourceEnv),
+    detached: process.platform !== "win32",
+    stdio: ["pipe", "pipe", "pipe"]
   });
   const streamState = {
     started: false,
@@ -5069,51 +4938,61 @@ function startClaudeCodeWorkerRun(input, emit) {
     result: null
   };
   let aborted = false;
-  let killTimer = null;
+  let settled = false;
+  let transportError = "";
+  const terminator = createProcessTreeTerminator(child, dependencies.killGraceMs ?? 1500);
   const abort = () => {
+    if (settled) return;
     aborted = true;
-    if (child.killed) return;
-    child.kill("SIGTERM");
-    killTimer = setTimeout(() => {
-      if (!child.killed) child.kill("SIGKILL");
-    }, 1500);
+    terminator.terminate();
   };
-  if (input.signal) {
-    if (input.signal.aborted) abort();
-    else input.signal.addEventListener("abort", abort, { once: true });
-  }
+  const onAbort = () => abort();
+  if (input.signal?.aborted) abort();
+  else input.signal?.addEventListener("abort", onAbort, { once: true });
+  child.once("error", (cause) => {
+    transportError ||= cause.code === "ENOENT" ? "Claude Code CLI (`claude`) is not installed or not on PATH." : cause.message;
+  });
+  child.stdin.on("error", (cause) => {
+    if (!aborted) transportError ||= `could not send prompt to Claude Code CLI: ${cause.message}`;
+  });
+  child.stdin.end(prompt);
   const promise = (async () => {
     emit({ type: "agent_start" });
-    const stderrPromise = readStderr(child);
-    const stdoutPromise = readJsonLines(child, emit, streamState);
-    const exitCode = await waitForClose(child);
-    await stdoutPromise.catch(() => {
-    });
-    const stderr = await stderrPromise.catch(() => "");
-    if (killTimer) clearTimeout(killTimer);
-    const finalText = streamState.text || resultText(streamState.result) || (exitCode === 0 ? "" : resultError(streamState.result, stderr));
-    const finalMessage = buildAssistantMessage2({
-      model: streamState.model,
-      text: finalText,
-      result: streamState.result,
-      exitCode,
-      aborted,
-      stderr
-    });
-    if (!streamState.started) emit({ type: "message_start", message: finalMessage });
-    emit({ type: "message_end", message: finalMessage });
-    const messages = [finalMessage];
-    emit({ type: "agent_end", messages });
-    if (exitCode !== 0 && stderr.trim().length > 0 && !aborted) {
-      process.stderr.write(`[worker:claude-code] ${stderr.trim()}
+    try {
+      const stderrPromise = readStderr(child);
+      const stdoutPromise = readJsonLines(child, emit, streamState).catch((cause) => {
+        transportError ||= cause instanceof Error ? cause.message : String(cause);
+        terminator.terminate();
+      });
+      const exitCode = await waitForClose(child);
+      await stdoutPromise;
+      const stderr = await stderrPromise.catch(() => "");
+      const finalText = streamState.text || resultText(streamState.result) || (exitCode === 0 ? "" : resultError(streamState.result, stderr));
+      const finalMessage = buildAssistantMessage2({
+        model: streamState.model,
+        text: finalText,
+        result: streamState.result,
+        exitCode,
+        aborted,
+        stderr,
+        transportError
+      });
+      if (!streamState.started) emit({ type: "message_start", message: finalMessage });
+      emit({ type: "message_end", message: finalMessage });
+      const messages = [finalMessage];
+      emit({ type: "agent_end", messages });
+      if (finalMessage.stopReason === "error" && finalMessage.errorMessage && !aborted) {
+        process.stderr.write(`[worker:claude-code] ${finalMessage.errorMessage}
 `);
+      }
+      return { messages, exitCode: finalMessage.stopReason === "stop" ? 0 : 1 };
+    } finally {
+      settled = true;
+      terminator.cleanup();
+      input.signal?.removeEventListener("abort", onAbort);
     }
-    return { messages, exitCode: exitCode === 0 ? 0 : 1 };
   })();
-  return {
-    promise,
-    abort
-  };
+  return { promise, abort };
 }
 
 // src/engine/worker-runtime-capabilities.ts
@@ -5135,6 +5014,7 @@ var FOLDED_WITH_DIFF = {
   failureExcerpt: true
 };
 var TOOL_PRESENTATION = {
+  [ToolNames.Evidence]: FOLDED,
   [ToolNames.Read]: FOLDED,
   [ToolNames.Grep]: FOLDED,
   [ToolNames.Find]: FOLDED,
@@ -5153,6 +5033,8 @@ var TOOL_PRESENTATION = {
   [ToolNames.Tasks]: FOLDED,
   [ToolNames.Ledger]: FOLDED,
   [ToolNames.Panes]: FOLDED,
+  [ToolNames.Limitation]: FOLDED,
+  [ToolNames.Decide]: FOLDED,
   [ToolNames.WebFetch]: FOLDED,
   [ToolNames.AskUser]: FOLDED,
   [ToolNames.Artifact]: FOLDED
@@ -5164,9 +5046,9 @@ function readStringField(args, key) {
 }
 function classifyResourceRead(toolName, args) {
   if (toolName !== ToolNames.Read) return null;
-  const path5 = readStringField(args, "path");
-  if (path5 === null) return null;
-  const normalized = path5.replace(/\\/g, "/");
+  const path4 = readStringField(args, "path");
+  if (path4 === null) return null;
+  const normalized = path4.replace(/\\/g, "/");
   const base = normalized.split("/").pop() ?? "";
   if (base === "SKILL.md") return "skill";
   if (base === "CLIO-CODER.md") return "handbook";
@@ -5535,6 +5417,13 @@ var exactMutationPolicy = {
 };
 var TOOL_METADATA = {
   // OBSERVE: read-class, parallel, envelope + shared turn budget.
+  [ToolNames.Evidence]: {
+    objective: "Inspect canonical evidence, trust status, gate decisions, and findings.",
+    uiLabel: "Evidence",
+    retrySafety: "idempotent",
+    resultSizePolicy: summaryPolicy("Inspect one run with evidence(mode=run, runId=<id>) to narrow the output."),
+    costLatency: "local_medium"
+  },
   [ToolNames.Read]: {
     objective: "Read exact UTF-8 file content with line and byte bounds.",
     uiLabel: "Read",
@@ -5722,6 +5611,30 @@ var TOOL_METADATA = {
     costLatency: "local_fast",
     promptHint: 'When the operator asks to see a dispatched agent ("show me the tester"), call panes(action="show", target=<agent id>).'
   },
+  [ToolNames.Limitation]: {
+    objective: "Record what the turn could not verify and why as a ledger receipt.",
+    uiLabel: "Limitation",
+    retrySafety: "idempotent",
+    resultSizePolicy: {
+      kind: "exact",
+      maxBytes: 4096,
+      followUpHint: "Call limitation again with a narrower scope if the first call was rejected."
+    },
+    costLatency: "local_fast"
+  },
+  [ToolNames.Decide]: {
+    objective: "Record a design decision with its rejected alternatives and rationale on the session decision board.",
+    uiLabel: "Decide",
+    // A repeated call with the same key supersedes the earlier record, so
+    // the surface as a whole is not retry safe.
+    retrySafety: "not_retry_safe",
+    resultSizePolicy: {
+      kind: "exact",
+      maxBytes: 4096,
+      followUpHint: "The decision ref in the result is what receipts and commits cite."
+    },
+    costLatency: "local_fast"
+  },
   // RETRIEVE: network-class.
   [ToolNames.WebFetch]: {
     objective: "Fetch HTTP(S) text for explicit external research.",
@@ -5786,7 +5699,7 @@ function builtin(spec, sourceInfo) {
 
 // src/domains/agents/result-contract-filesystem.ts
 init_esm_shims();
-import { existsSync as existsSync2, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import { existsSync, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
 function nodeResultContractFilesystem() {
   return {
     readFile(filePath) {
@@ -5797,7 +5710,7 @@ function nodeResultContractFilesystem() {
       }
     },
     pathExists(filePath) {
-      return existsSync2(filePath);
+      return existsSync(filePath);
     },
     isDirectory(filePath) {
       return statSync2(filePath, { throwIfNoEntry: false })?.isDirectory() === true;
@@ -5807,7 +5720,7 @@ function nodeResultContractFilesystem() {
 
 // src/domains/safety/run-effects.ts
 init_esm_shims();
-import path4 from "node:path";
+import path3 from "node:path";
 var ENUMERABLE_ACTION_CLASSES = /* @__PURE__ */ new Set(["read", "write"]);
 function toolWritesOpaquely(toolName) {
   return !ENUMERABLE_ACTION_CLASSES.has(classify({ tool: toolName }).actionClass);
@@ -5815,7 +5728,7 @@ function toolWritesOpaquely(toolName) {
 var GIT_PATH_MUTATIONS = /* @__PURE__ */ new Set(["mv", "rm"]);
 function gitPathOperands(command) {
   const targets = [];
-  for (const segment of splitCommandSegments(command)) {
+  for (const segment of commandArgumentSegments(command)) {
     if (segment[0] !== "git") continue;
     const subcommand = segment[1];
     if (subcommand === void 0 || !GIT_PATH_MUTATIONS.has(subcommand)) continue;
@@ -5826,20 +5739,6 @@ function gitPathOperands(command) {
   }
   return targets;
 }
-function splitCommandSegments(command) {
-  const segments = [];
-  let current = [];
-  for (const token of tokenizeShellLike(command)) {
-    if (token === ";" || token === "&&" || token === "||" || token === "|") {
-      if (current.length > 0) segments.push(current);
-      current = [];
-      continue;
-    }
-    current.push(token);
-  }
-  if (current.length > 0) segments.push(current);
-  return segments;
-}
 function commandOf(args) {
   const command = args?.command;
   return typeof command === "string" && command.length > 0 ? command : null;
@@ -5873,11 +5772,11 @@ function createRunEffectsRecorder(cwd, options = {}) {
       const verificationCommand = validationCommandOf(toolName, args, "grounding");
       const opaque = toolWritesOpaquely(toolName);
       if (!opaque && paths.length === 0 && validationCommand === null && verificationCommand === null) return;
-      const base = typeof args?.cwd === "string" && args.cwd.length > 0 ? path4.resolve(cwd, args.cwd) : cwd;
+      const base = typeof args?.cwd === "string" && args.cwd.length > 0 ? path3.resolve(cwd, args.cwd) : cwd;
       pending.set(toolCallId, {
         tool: toolName,
         toolCallId,
-        paths: paths.map((target) => path4.resolve(base, target)),
+        paths: paths.map((target) => path3.resolve(base, target)),
         validationCommand,
         verificationCommand,
         opaque
@@ -5945,8 +5844,8 @@ function claimConflicts(body, live, runId) {
   }
   return conflicts;
 }
-function citedPathKey(path5) {
-  const trimmed = path5.trim();
+function citedPathKey(path4) {
+  const trimmed = path4.trim();
   if (trimmed.length === 0) return trimmed;
   const absolute = isAbsolute(trimmed);
   const candidate = absolute ? relative(process.cwd(), trimmed) : trimmed;
@@ -5958,21 +5857,21 @@ function corroboration(entries) {
   const runsByPath = /* @__PURE__ */ new Map();
   for (const entry of entries) {
     if (entry.body.kind !== "finding") continue;
-    const path5 = entry.body.path === void 0 ? void 0 : citedPathKey(entry.body.path);
-    if (path5 === void 0) continue;
-    const runs = runsByPath.get(path5) ?? [];
+    const path4 = entry.body.path === void 0 ? void 0 : citedPathKey(entry.body.path);
+    if (path4 === void 0) continue;
+    const runs = runsByPath.get(path4) ?? [];
     if (!runs.includes(entry.runId)) runs.push(entry.runId);
-    runsByPath.set(path5, runs);
+    runsByPath.set(path4, runs);
   }
   const byEntryId = /* @__PURE__ */ new Map();
   for (const entry of entries) {
     if (entry.body.kind !== "finding") continue;
-    const path5 = entry.body.path;
-    if (path5 === void 0) {
+    const path4 = entry.body.path;
+    if (path4 === void 0) {
       byEntryId.set(entry.id, "ungrounded lead");
       continue;
     }
-    const runs = runsByPath.get(citedPathKey(path5)) ?? [];
+    const runs = runsByPath.get(citedPathKey(path4)) ?? [];
     byEntryId.set(entry.id, runs.length >= 2 ? "corroborated" : "uncorroborated");
   }
   return { byEntryId, byPath: runsByPath };
@@ -6039,19 +5938,19 @@ function renderAll(entries) {
 // src/engine/claude/tool-safety.ts
 init_esm_shims();
 import { performance as performance2 } from "node:perf_hooks";
-function isRecord7(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function stringField(record2, ...keys) {
+function stringField(record3, ...keys) {
   for (const key of keys) {
-    const value = record2[key];
+    const value = record3[key];
     if (typeof value === "string" && value.trim().length > 0) return value.trim();
   }
   return void 0;
 }
 function pathArgs(input) {
-  const path5 = stringField(input, "file_path", "filePath", "path", "notebook_path", "source", "target");
-  return path5 ? { ...input, path: path5 } : { ...input };
+  const path4 = stringField(input, "file_path", "filePath", "path", "notebook_path", "source", "target");
+  return path4 ? { ...input, path: path4 } : { ...input };
 }
 function commandArgs(input, cwd) {
   const command = stringField(input, "command", "cmd", "shell", "input", "description") ?? JSON.stringify(input);
@@ -6312,7 +6211,7 @@ function emitClaudeToolPermissionDecision(input) {
   return decision;
 }
 function coerceToolInput(value) {
-  return isRecord7(value) ? value : {};
+  return isRecord6(value) ? value : {};
 }
 
 export {
@@ -6350,14 +6249,6 @@ export {
   cancelledAskUserResult,
   finalizeAskUserInterviewForHost,
   createAskUserTool,
-  resolveDispatchPathScope,
-  declaredScopeReplacementDiagnostic,
-  declaredScopeReplacementNotice,
-  inferredScopeParentTokenDiagnostic,
-  inferredScopeParentTokenNotice,
-  declaredScopeIntent,
-  narrowDispatchIntentToReadOnly,
-  normalizeDispatchIntent,
   assertApprovedAssignmentRoute,
   approvedRouteCandidates,
   assertApprovedRecoveryCapability,
@@ -6417,4 +6308,4 @@ export {
   isTerminalRunEnvelope,
   runKindSupportsLiveSteering
 };
-//# sourceMappingURL=chunk-IKSLQ4XV.js.map
+//# sourceMappingURL=chunk-75W7L2E2.js.map