@iowarp/clio-coder 0.4.3 → 0.4.4

package/src/domains/context/wiki/frontmatter.ts

@@ -35,6 +35,8 @@ export interface WikiPageMetadata {
 	invariants: string[];
 	/** Narrowest non-destructive commands that check this area. */
 	validate: string[];
+	/** Stable refs for recorded decisions cited in the body. */
+	decisions?: string[];
 }
 
 export interface WikiPageDocument {
@@ -47,7 +49,7 @@ export interface WikiPageDocument {
 
 const FRONTMATTER_BLOCK = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/;
 
-const LIST_FIELDS = ["sources", "symbols", "tests", "invariants", "validate"] as const;
+const LIST_FIELDS = ["sources", "symbols", "tests", "invariants", "validate", "decisions"] as const;
 
 /** Longest generated summary, so an index line stays one line. */
 const SUMMARY_MAX_CHARS = 240;
@@ -166,6 +168,7 @@ export function readWikiPage(input: ReadWikiPageInput): WikiPageDocument {
 		tests: [],
 		invariants: stringList(authored.invariants),
 		validate: stringList(authored.validate),
+		...(authored.decisions === undefined ? {} : { decisions: stringList(authored.decisions) }),
 	};
 	const unresolvedPaths: string[] = [];
 	for (const field of ["sources", "tests"] as const) {
@@ -189,7 +192,7 @@ function renderList(name: string, values: ReadonlyArray<string>): string[] {
 function renderFrontmatter(metadata: WikiPageMetadata): string {
 	const lines = [`title: ${JSON.stringify(metadata.title)}`];
 	if (metadata.summary.length > 0) lines.push(`summary: ${JSON.stringify(metadata.summary)}`);
-	for (const field of LIST_FIELDS) lines.push(...renderList(field, metadata[field]));
+	for (const field of LIST_FIELDS) lines.push(...renderList(field, metadata[field] ?? []));
 	return `---\n${lines.join("\n")}\n---\n`;
 }
 

package/src/domains/context/wiki/generate.ts

@@ -14,6 +14,7 @@ import {
 } from "node:fs";
 import { dirname, join } from "node:path";
 import type { ContextActivityPayload } from "../../../core/bus-events.js";
+import type { DecisionLedgerEntry } from "../../session/entries.js";
 import { detectProjectType } from "../../session/workspace/project-type.js";
 import type { BootstrapProgressSink } from "../bootstrap.js";
 import { coordinateCodewikiWrite } from "../codewiki/coordinator.js";
@@ -44,6 +45,8 @@ import { changedPathsSince } from "./staleness.js";
 export type { WikiDepth, WikiGenerateMode };
 
 export interface WikiGenerateInput {
+	/** The current session board, already scoped to its active branch. */
+	decisions?: ReadonlyArray<DecisionLedgerEntry>;
 	cwd: string;
 	mode: WikiGenerateMode;
 	/**
@@ -76,6 +79,8 @@ export interface WikiGenerateInput {
 export type WikiGenerate = (input: WikiGenerateInput) => void | Promise<void>;
 
 export interface RunWikiGenerateInput {
+	/** The current session board, already scoped to its active branch. */
+	decisions?: ReadonlyArray<DecisionLedgerEntry>;
 	cwd?: string;
 	mode?: WikiGenerateMode;
 	/** Repository-detail policy. Auto scales decomposition from indexed files and lines. */
@@ -473,6 +478,7 @@ export async function runWikiGenerate(
 				plan: resolved.plan,
 				resumed: resolved.resumed,
 				unclaimedAreas: resolved.unclaimedAreas,
+				...(input.decisions ? { decisions: input.decisions } : {}),
 				gitHead: existingMeta?.gitHead ?? null,
 				...(input.onProgress ? { progress: input.onProgress } : {}),
 			});

package/src/domains/context/wiki/prompts.ts

@@ -14,6 +14,7 @@ import { execFileSync } from "node:child_process";
 import { existsSync, realpathSync, statSync } from "node:fs";
 import { isAbsolute, join, relative } from "node:path";
 import { loadFragments } from "../../prompts/fragment-loader.js";
+import { type DecisionLedgerEntry, decisionRef } from "../../session/entries.js";
 import { renderCodewikiDigest } from "../codewiki/digest.js";
 import type { Codewiki } from "../codewiki/schema.js";
 import { WIKI_PLAN_FILE } from "./layout.js";
@@ -229,6 +230,8 @@ function scopedSymbols(codewiki: Codewiki, sources: ReadonlyArray<string>, limit
 }
 
 export interface BuildWikiPagePromptInput {
+	/** The current session board, already scoped to its active branch. */
+	decisions?: ReadonlyArray<DecisionLedgerEntry>;
 	cwd: string;
 	mode: WikiGenerateMode;
 	codewiki: Codewiki;
@@ -272,6 +275,8 @@ export function buildWikiPagePrompt(input: BuildWikiPagePromptInput): string {
 		"## Repository guidance",
 		repositoryGuidance(input.cwd),
 	];
+	const decisions = recordedDecisions(input);
+	if (decisions.length > 0) sections.push("# Recorded decisions", "```json", JSON.stringify(decisions, null, 2), "```");
 	if (input.seeded) {
 		sections.push(
 			"## Revision",
@@ -281,3 +286,41 @@ export function buildWikiPagePrompt(input: BuildWikiPagePromptInput): string {
 	}
 	return `${sections.join("\n\n")}\n`;
 }
+
+/** Match a source itself or a descendant, without accepting similarly named siblings. */
+function underSource(path: string, source: string): boolean {
+	const root = source.replace(/^\.\//, "").replace(/\/$/, "");
+	const candidate = path.replace(/^\.\//, "");
+	return candidate === root || candidate.startsWith(`${root}/`);
+}
+
+function recordedDecisions(input: BuildWikiPagePromptInput) {
+	const files = new Set(
+		input.codewiki.files
+			.filter((file) => input.page.sources.some((source) => underSource(file.path, source)))
+			.map((file) => file.id),
+	);
+	const symbols = new Set(
+		input.codewiki.symbols.filter((symbol) => files.has(symbol.fileId)).map((symbol) => symbol.name),
+	);
+	return (input.decisions ?? [])
+		.flatMap((entry) =>
+			entry.decisions
+				.filter((record) => {
+					if (record.status !== "active") return false;
+					if (symbols.has(record.key)) return true;
+					const paths = [record.rationale ?? "", ...(record.alternatives ?? [])].join(" ").match(/[\w@./-]+/g) ?? [];
+					return paths.some((path) => input.page.sources.some((source) => underSource(path.replace(/\.$/, ""), source)));
+				})
+				.map((record) => ({
+					ref: decisionRef(entry.interviewId, record.key),
+					key: record.key,
+					value: record.value,
+					alternatives: record.alternatives ?? [],
+					rationale: record.rationale ?? record.source_question ?? "",
+					decidedAt: record.decidedAt,
+					source: record.source ?? (entry.origin === "agent" ? "agent" : "operator"),
+				})),
+		)
+		.slice(0, 12);
+}

package/src/domains/dispatch/active-route-planner.ts

@@ -37,6 +37,9 @@ export function routeValidationProjection(
 		// Presentation-only parentage stamped by the calling tool, on the same
 		// terms: a model must not be able to author it.
 		parentToolCallId,
+		// Sealed from the parent decision board by the dispatch tool; a model
+		// must not be able to author which decisions a receipt claims.
+		decisionRefs,
 		resolvedVerification,
 		resultContractOverride,
 		fleetGateReceipt,
@@ -60,6 +63,7 @@ export function routeValidationProjection(
 			...(assignmentDeadlineAt !== undefined ? { assignmentDeadlineAt } : {}),
 			...(ledger !== undefined ? { ledger } : {}),
 			...(parentToolCallId !== undefined ? { parentToolCallId } : {}),
+			...(decisionRefs !== undefined ? { decisionRefs } : {}),
 			...(resolvedVerification !== undefined
 				? { resolvedVerification: resolvedVerification.map((check) => ({ ...check, argv: [...check.argv] })) }
 				: {}),

package/src/domains/dispatch/code-step.ts

@@ -107,6 +107,8 @@ export interface CodeStepRecord {
 export interface CodeStepOutcome {
 	report: CodeReportResult;
 	record: CodeStepRecord;
+	/** Stdout retained within the shared capture cap, for structured command judgments. */
+	stdout: string;
 	/** Canonical JSON of the report; this is the text that crosses plan edges. */
 	output: string;
 }
@@ -210,6 +212,7 @@ interface SpawnOutcome {
 	signal: string | null;
 	timedOut: boolean;
 	captured: Buffer;
+	stdout: Buffer;
 	outputBytes: number;
 	spawnError: string | null;
 }
@@ -226,6 +229,7 @@ async function spawnCommand(input: CodeStepRunInput, cwd: string, argv: Readonly
 		});
 		reportCommitAttributionDiagnostic(attribution.diagnostic);
 		const chunks: Buffer[] = [];
+		const stdoutChunks: Buffer[] = [];
 		let outputBytes = 0;
 		let captured = 0;
 		let settled = false;
@@ -239,16 +243,17 @@ async function spawnCommand(input: CodeStepRunInput, cwd: string, argv: Readonly
 			// whole tree rather than orphaning a test runner's children.
 			detached: process.platform !== "win32",
 		});
-		const collect = (chunk: Buffer): void => {
+		const collect = (chunk: Buffer, stdout: boolean): void => {
 			outputBytes += chunk.length;
 			if (captured >= CODE_STEP_CAPTURE_MAX_BYTES) return;
 			const room = CODE_STEP_CAPTURE_MAX_BYTES - captured;
 			const slice = chunk.length <= room ? chunk : chunk.subarray(0, room);
 			chunks.push(slice);
+			if (stdout) stdoutChunks.push(slice);
 			captured += slice.length;
 		};
-		child.stdout?.on("data", collect);
-		child.stderr?.on("data", collect);
+		child.stdout?.on("data", (chunk: Buffer) => collect(chunk, true));
+		child.stderr?.on("data", (chunk: Buffer) => collect(chunk, false));
 		const kill = (): void => {
 			if (child.pid === undefined) return;
 			try {
@@ -276,6 +281,7 @@ async function spawnCommand(input: CodeStepRunInput, cwd: string, argv: Readonly
 				signal,
 				timedOut,
 				captured: Buffer.concat(chunks),
+				stdout: Buffer.concat(stdoutChunks),
 				outputBytes,
 				spawnError,
 			});
@@ -317,6 +323,7 @@ export async function runCodeStep(input: CodeStepRunInput): Promise<CodeStepOutc
 				signal: null,
 				timedOut: false,
 				captured: Buffer.from(`${CODE_STEP_EMPTY_DIFF_MESSAGE}\n`, "utf8"),
+				stdout: Buffer.alloc(0),
 				outputBytes: 0,
 				spawnError: null,
 			}
@@ -383,5 +390,5 @@ export async function runCodeStep(input: CodeStepRunInput): Promise<CodeStepOutc
 		artifactPaths,
 		reportDigest: codeReportDigest(report),
 	};
-	return { report, record, output: canonicalCodeReport(report) };
+	return { report, record, stdout: spawned.stdout.toString("utf8"), output: canonicalCodeReport(report) };
 }

package/src/domains/dispatch/contract.ts

@@ -1,4 +1,7 @@
 import type { SafeEventBus } from "../../core/event-bus.js";
+import type { DeclaredCheckKind } from "../../tools/verify/catalog.js";
+import type { NumericTolerance } from "../../tools/verify/numeric.js";
+import type { PerfBudgetSpec } from "../../tools/verify/perf.js";
 import type { ResultContract } from "../agents/result-contract.js";
 import type { AgentAutomationAuthority, AgentSpec } from "../agents/spec.js";
 import type { CostProvenance } from "../providers/index.js";
@@ -15,6 +18,19 @@ import type { RunEnvelope, RunLineage, RunNodeIdentity, RunPhaseDurations, RunRe
 import type { DispatchFailoverCandidate, JobSpec } from "./validation.js";
 import type { WriteBoundaryAttribution } from "./write-boundary.js";
 
+export interface ResolvedVerificationCheck {
+	check: string;
+	argv: ReadonlyArray<string>;
+	cwd: string;
+	timeoutMs: number;
+	/** Absent means `command`, the exit-code check every receipt carried before kinds existed. */
+	kind?: DeclaredCheckKind;
+	/** Sealed at admission with the reference as an absolute path. */
+	numeric?: { reference: string; tolerance: NumericTolerance };
+	/** Sealed at admission with the baseline as an absolute path. */
+	perf?: { budget?: PerfBudgetSpec; baseline?: string; tolerance?: { relative?: number } };
+}
+
 export interface DispatchRequest extends JobSpec {
 	/** Coordinator-owned result contract override for a fleet plan step. */
 	resultContractOverride?: ResultContract;
@@ -33,13 +49,13 @@ export interface DispatchRequest extends JobSpec {
 	runIdHint?: string;
 	/** Parent checkout frozen by plan approval for task worktree application. */
 	taskWorktreeDestination?: string;
-	/** Admission-resolved commands. Model text never enters these argv vectors. */
-	resolvedVerification?: ReadonlyArray<{
-		check: string;
-		argv: ReadonlyArray<string>;
-		cwd: string;
-		timeoutMs: number;
-	}>;
+	/**
+	 * Admission-resolved commands. Model text never enters these argv vectors.
+	 * A numeric-compare or perf-budget check also seals its kind and the
+	 * absolute reference or baseline path it will judge against, so host
+	 * verification runs exactly the check the catalog declared at admission.
+	 */
+	resolvedVerification?: ReadonlyArray<ResolvedVerificationCheck>;
 	/**
 	 * Semantic role this request's first attempt runs under. Derived once by
 	 * `execution-role.ts` at request construction, never authored by a model, and
@@ -79,6 +95,14 @@ export interface DispatchRequest extends JobSpec {
 	 * validation projection strips it like the reservation and ledger refs.
 	 */
 	parentToolCallId?: string;
+	/**
+	 * Decision refs (`<interviewId>/<key>`) active on the parent session's
+	 * decision board when this request was built. Sealed by the orchestrator
+	 * from the board snapshot, never by model arguments: the validation
+	 * projection strips it like `reservation` and `ledger`. Copied onto the run
+	 * envelope and receipt so a receipt names the decisions it worked under.
+	 */
+	decisionRefs?: ReadonlyArray<string>;
 }
 
 /** Internal, non-serializable admission hook for transactional resource owners. */

package/src/domains/dispatch/execution-scheduler.ts

@@ -13,6 +13,8 @@ import {
 export interface ExecutionStepResult extends ExecutionHandoff {
 	succeeded: boolean;
 	integrityValid: boolean;
+	/** Decision refs the step's sealed receipt was made under; absent for code steps and decision-free runs. */
+	decisionRefs?: ReadonlyArray<string>;
 	/**
 	 * The step changed the workspace outside its declared boundary. Sealed by
 	 * the orchestrator after the fact, never by the step: a run that reports on

package/src/domains/dispatch/extension.ts

@@ -844,14 +844,19 @@ function renderBoundSkillBlock(recipe: AgentRecipe): string {
 	].join("\n");
 }
 
-function workerPersonaBody(
-	req: DispatchRequest,
-	recipe: AgentRecipe | null,
-	allowedTools: ReadonlyArray<ToolName>,
-): string {
+/**
+ * Whether Clio's canonical `context` tool is attached to this worker. A
+ * subprocess runtime runs its own tool loop and never receives Clio's tool
+ * surface, so the recipe's `context` entry does not make the tool available
+ * there, and bound skills must not be promised through it.
+ */
+function canonicalContextAttached(runtime: Pick<RuntimeDescriptor, "kind">, tools: ReadonlyArray<ToolName>): boolean {
+	return runtime.kind !== "subprocess" && tools.includes(ToolNames.Context);
+}
+
+function workerPersonaBody(req: DispatchRequest, recipe: AgentRecipe | null, contextAttached: boolean): string {
 	const base = req.systemPrompt && req.systemPrompt.length > 0 ? req.systemPrompt : (recipe?.body ?? "");
-	const skillBlock =
-		recipe && req.noSkills !== true && allowedTools.includes(ToolNames.Context) ? renderBoundSkillBlock(recipe) : "";
+	const skillBlock = recipe && req.noSkills !== true && contextAttached ? renderBoundSkillBlock(recipe) : "";
 	return [base, skillBlock].filter((part) => part.trim().length > 0).join("\n\n");
 }
 
@@ -1350,6 +1355,8 @@ interface DispatchLifecycleStage {
 	pipeline: RunPipelineProvenance | null;
 	briefing: RunBriefingProvenance | null;
 	personaOverride: RunPersonaOverride | null;
+	/** Decision refs sealed on the request by the dispatch tool; null when the parent board was empty. */
+	decisionRefs: ReadonlyArray<string> | null;
 	projectContext: RunProjectContextProvenance;
 	/** Rule ids the worker prompt compiler selected into this run's system prompt; [] when none matched. */
 	rulesApplied: string[];
@@ -1382,6 +1389,8 @@ interface AcpDelegationLifecycleStage {
 	pipeline: RunPipelineProvenance | null;
 	briefing: RunBriefingProvenance | null;
 	personaOverride: RunPersonaOverride | null;
+	/** Decision refs sealed on the request by the dispatch tool; null when the parent board was empty. */
+	decisionRefs: ReadonlyArray<string> | null;
 	projectContext: RunProjectContextProvenance;
 	/** ACP delegation bypasses the worker prompt compiler entirely, so this is always []. */
 	rulesApplied: string[];
@@ -1954,7 +1963,7 @@ function buildDispatchWorkerSpec(input: DispatchWorkerSpecInput, config?: Config
 	if (
 		input.req.noSkills !== true &&
 		recipeSkills.length > 0 &&
-		input.admission.allowedTools.includes(ToolNames.Context)
+		canonicalContextAttached(input.target.runtime, input.admission.allowedTools)
 	) {
 		spec.agentSkills = [...new Set(recipeSkills)];
 	}
@@ -2750,13 +2759,13 @@ export function createDispatchBundle(
 	}
 
 	/** Retries only: the first attempt's member was consumed with the planned bound. */
-	function rebindReservationSlot(
+	async function rebindReservationSlot(
 		req: DispatchRequest,
 		nodeId: string,
 		endpoint: EndpointCapacity | null,
 		costUsd: number,
 		settings: EffectiveSettings,
-	): void {
+	): Promise<void> {
 		if (req.reservation === undefined || req.lineage === undefined) return;
 		const capacity = reservationCapacitySnapshot(settings);
 		const rebind = {
@@ -2767,7 +2776,7 @@ export function createDispatchBundle(
 			capacity,
 			nowMs: now(),
 		};
-		rebindDispatchReservationMember(rebind);
+		await rebindDispatchReservationMember(rebind);
 	}
 
 	/** Process-local retry queue keyed by finished run; backoff is keyed by assignment root. */
@@ -3553,8 +3562,8 @@ export function createDispatchBundle(
 			...admission,
 			allowedTools: effectiveTools,
 		};
-		const personaBody = workerPersonaBody(req, recipe, effectiveTools);
-		const hasCanonicalContext = effectiveTools.includes(ToolNames.Context);
+		const hasCanonicalContext = canonicalContextAttached(target.runtime, effectiveTools);
+		const personaBody = workerPersonaBody(req, recipe, hasCanonicalContext);
 		const hasBoundSkills =
 			hasCanonicalContext && recipe.skills !== undefined && recipe.skills.length > 0 && req.noSkills !== true;
 		const compiledWorkerPrompt = await prompts.compileWorkerPrompt({
@@ -3639,6 +3648,7 @@ export function createDispatchBundle(
 			pipeline: pipelineProvenanceFor(req),
 			briefing: briefingProvenanceFor(req),
 			personaOverride,
+			decisionRefs: req.decisionRefs ?? null,
 			projectContext: projectContextProvenance,
 			rulesApplied: compiledWorkerPrompt.rulesApplied ?? [],
 			operatorProfileApplied: compiledWorkerPrompt.operatorProfileApplied ?? false,
@@ -3686,7 +3696,7 @@ export function createDispatchBundle(
 		}
 		const cwd = req.cwd ?? process.cwd();
 		const pathScope = resolveDispatchPathScope(req);
-		const personaBody = workerPersonaBody(req, null, []);
+		const personaBody = workerPersonaBody(req, null, false);
 		// ACP owns an unknown external tool inventory, so it receives the raw
 		// bounded persona rather than a native Clio schema-harness claim.
 		const systemPrompt = personaBody;
@@ -3728,6 +3738,7 @@ export function createDispatchBundle(
 			pipeline: pipelineProvenanceFor(req),
 			briefing: briefingProvenanceFor(req),
 			personaOverride,
+			decisionRefs: req.decisionRefs ?? null,
 			projectContext: projectContextProvenance,
 			rulesApplied: [],
 			operatorProfileApplied: false,
@@ -4009,6 +4020,7 @@ export function createDispatchBundle(
 				...(req.council !== undefined ? { council: req.council } : {}),
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
 				...(lifecycle.personaOverride ? { personaOverride: lifecycle.personaOverride } : {}),
+				...(lifecycle.decisionRefs ? { decisionRefs: lifecycle.decisionRefs } : {}),
 			});
 			observer?.onAdmitted({
 				runId: envelope.id,
@@ -4081,6 +4093,12 @@ export function createDispatchBundle(
 		});
 
 		const startedAt = envelope.startedAt;
+		let resolveFinal!: (receipt: RunReceipt) => void;
+		let rejectFinal!: (error: unknown) => void;
+		const finalPromise = new Promise<RunReceipt>((res, rej) => {
+			resolveFinal = res;
+			rejectFinal = rej;
+		});
 		const activeRun: ActiveRun = {
 			runId: envelope.id,
 			req,
@@ -4112,7 +4130,7 @@ export function createDispatchBundle(
 			meter: tokenMeter,
 			pricing: null,
 			costProvenance: "unknown",
-			finalPromise: undefined as unknown as Promise<RunReceipt>,
+			finalPromise,
 		};
 
 		const buildReceiptDraft = (
@@ -4170,6 +4188,7 @@ export function createDispatchBundle(
 				...(req.council !== undefined ? { council: req.council } : {}),
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
 				...(lifecycle.personaOverride ? { personaOverride: lifecycle.personaOverride } : {}),
+				...(lifecycle.decisionRefs ? { decisionRefs: lifecycle.decisionRefs } : {}),
 				projectContext: lifecycle.projectContext,
 				rulesApplied: lifecycle.rulesApplied,
 				operatorProfileApplied: lifecycle.operatorProfileApplied,
@@ -4295,7 +4314,6 @@ export function createDispatchBundle(
 		const assessDispatchFinishContract = (): DispatchFinishContractSnapshot | null => {
 			if (finishContractAssistantText.trim().length === 0) return null;
 			const assessment = assessFinishContract({
-				assistantText: finishContractAssistantText,
 				sessionEntries: finishContractEntries,
 				assistantTurnId: finishContractAssistantTurnId,
 			});
@@ -4316,7 +4334,7 @@ export function createDispatchBundle(
 			return { assessment, rigor };
 		};
 
-		const finalPromise = (async (): Promise<RunReceipt> => {
+		(async (): Promise<RunReceipt> => {
 			try {
 				const result = await acp.promise;
 				// The receipt reads meters the domain pump fills. Finalization
@@ -4452,9 +4470,7 @@ export function createDispatchBundle(
 			} finally {
 				leaseSlot.release();
 			}
-		})();
-
-		activeRun.finalPromise = finalPromise;
+		})().then(resolveFinal, rejectFinal);
 		active.set(envelope.id, activeRun);
 
 		return {
@@ -4562,7 +4578,7 @@ export function createDispatchBundle(
 					"dispatch: writeRoots cannot be enforced on an ACP delegation target; the external agent runs its own tool surface. Dispatch to a native or claude-sdk worker.",
 				);
 			}
-			rebindReservationSlot(req, "local", null, UNKNOWN_PRICING_ADMISSION_ESTIMATE_USD, settings);
+			await rebindReservationSlot(req, "local", null, UNKNOWN_PRICING_ADMISSION_ESTIMATE_USD, settings);
 			routeObservation = observeShadowRoute(req, undefined, settings);
 			const delegated = await dispatchAcpDelegation(req, settings, timing, routeObservation.decision, observer);
 			// An ACP member never runs host verification, so it can only ever leave
@@ -4603,7 +4619,7 @@ export function createDispatchBundle(
 		};
 		const endpoint = endpointCapacityForTarget(lifecycle.target.target.id);
 		assertRouteWithinApprovedEnvelope(req, effectiveRoute);
-		rebindReservationSlot(
+		await rebindReservationSlot(
 			req,
 			effectiveRoute.node,
 			endpoint,
@@ -5110,6 +5126,7 @@ export function createDispatchBundle(
 				...(req.council !== undefined ? { council: req.council } : {}),
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
 				...(lifecycle.personaOverride ? { personaOverride: lifecycle.personaOverride } : {}),
+				...(lifecycle.decisionRefs ? { decisionRefs: lifecycle.decisionRefs } : {}),
 				...(heartbeatAt ? { heartbeatAt: heartbeatIso(heartbeatAt) } : {}),
 			});
 			observer?.onAdmitted({
@@ -5213,6 +5230,13 @@ export function createDispatchBundle(
 
 		const startedAt = envelope.startedAt;
 
+		let resolveFinal!: (receipt: RunReceipt) => void;
+		let rejectFinal!: (error: unknown) => void;
+		const finalPromise = new Promise<RunReceipt>((res, rej) => {
+			resolveFinal = res;
+			rejectFinal = rej;
+		});
+
 		const activeRun: ActiveRun = {
 			runId: envelope.id,
 			req,
@@ -5248,7 +5272,7 @@ export function createDispatchBundle(
 			meter: tokenMeter,
 			pricing: lifecycle.target.effectivePricing.rates,
 			costProvenance: lifecycle.target.effectivePricing.provenance,
-			finalPromise: undefined as unknown as Promise<RunReceipt>,
+			finalPromise,
 		};
 
 		const buildReceiptDraft = (
@@ -5343,6 +5367,7 @@ export function createDispatchBundle(
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
 				...(fleetGate !== null ? { fleetGate } : {}),
 				...(lifecycle.personaOverride ? { personaOverride: lifecycle.personaOverride } : {}),
+				...(lifecycle.decisionRefs ? { decisionRefs: lifecycle.decisionRefs } : {}),
 				projectContext: lifecycle.projectContext,
 				rulesApplied: lifecycle.rulesApplied,
 				operatorProfileApplied: lifecycle.operatorProfileApplied,
@@ -5486,7 +5511,6 @@ export function createDispatchBundle(
 		const assessDispatchFinishContract = (): DispatchFinishContractSnapshot | null => {
 			if (finishContractAssistantText.trim().length === 0) return null;
 			const assessment = assessFinishContract({
-				assistantText: finishContractAssistantText,
 				sessionEntries: finishContractEntries,
 				assistantTurnId: finishContractAssistantTurnId,
 			});
@@ -5515,7 +5539,7 @@ export function createDispatchBundle(
 		// finalPromise settles.
 		settlement?.live(envelope.id);
 
-		const finalPromise = (async (): Promise<RunReceipt> => {
+		(async (): Promise<RunReceipt> => {
 			try {
 				const result = await workerDone;
 				// The receipt reads meters the domain pump fills. Finalization
@@ -5832,9 +5856,8 @@ export function createDispatchBundle(
 				unsubscribeAgentLedger?.();
 				leaseSlot.release();
 			}
-		})();
+		})().then(resolveFinal, rejectFinal);
 
-		activeRun.finalPromise = finalPromise;
 		active.set(envelope.id, activeRun);
 
 		return attachRouteObservation({

package/src/domains/dispatch/fleet-commit-attribution.ts

@@ -6,6 +6,8 @@ export interface FleetCommitPriorResult {
 	succeeded: boolean;
 	integrityValid: boolean;
 	receiptDigest: string;
+	/** Decision refs from the step's sealed receipt; they become `Clio-Decision:` trailers. */
+	decisionRefs?: ReadonlyArray<string>;
 }
 
 /**
@@ -23,6 +25,7 @@ export function deriveFleetCommitAttribution(input: {
 	const byId = new Map(input.plan.steps.map((step) => [step.id, step] as const));
 	let materiallyAuthored = false;
 	let receipt: CommitAttributionEvidence["receipt"];
+	let decisions: CommitAttributionEvidence["decisions"];
 	for (const candidate of input.step.commitFrom ?? []) {
 		const source = byId.get(candidate);
 		const result = input.priorResults.get(candidate);
@@ -35,6 +38,7 @@ export function deriveFleetCommitAttribution(input: {
 			continue;
 		}
 		materiallyAuthored = true;
+		if (result.decisionRefs !== undefined && result.decisionRefs.length > 0) decisions = [...result.decisionRefs];
 		if (/^[0-9a-f]{64}$/u.test(result.receiptDigest)) {
 			receipt = {
 				version: RUN_RECEIPT_INTEGRITY_VERSION,
@@ -52,5 +56,6 @@ export function deriveFleetCommitAttribution(input: {
 		validationSucceeded: input.validationFresh,
 		independentReviewPassed: input.independentReviewFresh,
 		...(receipt === undefined ? {} : { receipt }),
+		...(decisions === undefined ? {} : { decisions }),
 	};
 }

package/src/domains/dispatch/fleet-run.ts

@@ -657,6 +657,7 @@ export async function executeFleetRun(input: ExecuteFleetRunInput): Promise<Flee
 							output: receipt.output?.state === "final" ? receipt.output.text : "",
 							succeeded: stepSucceeded,
 							integrityValid,
+							...(receipt.decisionRefs !== undefined ? { decisionRefs: receipt.decisionRefs } : {}),
 							...(failureReason !== undefined ? { failureReason } : {}),
 							...(gatePathHash !== undefined ? { gatePathHash } : {}),
 							...(delegationPlanHash !== undefined ? { delegationPlanHash } : {}),