@iowarp/clio-coder 0.4.3 → 0.4.4

package/dist/{chunk-PAJQJ7BS.js → chunk-75W7L2E2.js}

@@ -1,4 +1,8 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  hashToolCall,
+  typedValidationSummary
+} from "./chunk-6QOTUPRG.js";
 import {
   ROUTE_POLICY_VERSION,
   isRouteDecisionAgentSelection,
@@ -6,50 +10,14 @@ import {
   parseRoutingIntent,
   routePriorForLatencyClass,
   sameRouteIdentity
-} from "./chunk-EKCHAPYA.js";
-import {
-  hashToolCall,
-  typedValidationSummary
-} from "./chunk-RSJ25QSL.js";
+} from "./chunk-AUPNRN7C.js";
 import {
   describeCallAction
 } from "./chunk-NEDJ26B5.js";
-import {
-  TOOL_PROFILE_NAMES,
-  assertToolProfileEnforceable,
-  isToolProfileName
-} from "./chunk-42FMPA75.js";
-import {
-  deriveExecutionRole,
-  isExecutionRole,
-  requestExecutionRole
-} from "./chunk-H7IXIC72.js";
 import {
   expandPath,
   resolveReadPath
 } from "./chunk-OQE5J4C6.js";
-import {
-  PATH_BOUNDARY_MAX_ENTRIES,
-  PathBoundaryError,
-  asDirectoryPathBoundary,
-  normalizePathBoundaryEntry,
-  pathBoundaryCovers,
-  resolvePathBoundary
-} from "./chunk-HHV2GANA.js";
-import {
-  AGENT_AUTOMATION_AUTHORITIES,
-  COUNCIL_BALLOT_SHAPE,
-  COUNCIL_BALLOT_VERDICT_MAX_BYTES,
-  agentSpecFingerprint,
-  classify
-} from "./chunk-B4OAX3SI.js";
-import {
-  commandArgumentSegments,
-  detectValidationCommand,
-  extractCommandDeleteTargets,
-  extractCommandWriteTargets,
-  toolMutationPaths
-} from "./chunk-I7ZPNEJM.js";
 import {
   DEFAULT_MAX_LINES,
   DEFAULT_TOOL_RESULT_MAX_BYTES,
@@ -65,14 +33,43 @@ import {
   toolResultDigestFor,
   truncateHead,
   truncateTail
-} from "./chunk-JDAY6FIL.js";
+} from "./chunk-NAI6ZFCY.js";
 import {
   formatSize
 } from "./chunk-OZNBF4L3.js";
 import {
-  byteLength,
-  truncateUtf8
-} from "./chunk-6XLNIQDB.js";
+  TOOL_PROFILE_NAMES,
+  assertToolProfileEnforceable,
+  isToolProfileName
+} from "./chunk-QZWQA4DE.js";
+import {
+  deriveExecutionRole,
+  isExecutionRole,
+  requestExecutionRole
+} from "./chunk-H7IXIC72.js";
+import {
+  AGENT_AUTOMATION_AUTHORITIES,
+  COUNCIL_BALLOT_SHAPE,
+  COUNCIL_BALLOT_VERDICT_MAX_BYTES,
+  agentSpecFingerprint,
+  classify
+} from "./chunk-KFV5L5SK.js";
+import {
+  commandArgumentSegments,
+  detectValidationCommand,
+  extractCommandDeleteTargets,
+  extractCommandWriteTargets,
+  toolMutationPaths
+} from "./chunk-NXYCB2VD.js";
+import {
+  isDispatchIntent,
+  resolveDispatchPathScope
+} from "./chunk-IRXAATOX.js";
+import {
+  asDirectoryPathBoundary,
+  pathBoundaryCovers,
+  resolvePathBoundary
+} from "./chunk-HHV2GANA.js";
 import {
   typebox_exports
 } from "./chunk-5B2AEOW5.js";
@@ -84,30 +81,34 @@ import {
   evaluateSkillToolSurface,
   isAutonomyLevel,
   mapAutonomy
-} from "./chunk-JGRC33J2.js";
+} from "./chunk-54X7T7DK.js";
+import {
+  byteLength,
+  truncateUtf8
+} from "./chunk-6XLNIQDB.js";
 import {
   ToolNames
-} from "./chunk-K6BSR66V.js";
+} from "./chunk-4NSRCOYP.js";
 import {
   BASH_HARD_CAP_BYTES,
   combineBashOutput,
   runBashCommand
-} from "./chunk-NMJXSHBJ.js";
+} from "./chunk-W54I7H25.js";
 import {
   boundedExternalDiagnostic
-} from "./chunk-VW6DOEDG.js";
+} from "./chunk-6OSVSQL5.js";
 import {
   THINKING_LEVELS
 } from "./chunk-UXCU4E3T.js";
-import {
-  buildSafeToolEnv,
-  resolveSafeCwd
-} from "./chunk-JSC3U7TI.js";
 import {
   GUARDRAIL_DEFAULTS,
   isWorkerToolCallCapExceededReason,
   resolveGuardrail
 } from "./chunk-S66XZJOF.js";
+import {
+  buildSafeToolEnv,
+  resolveSafeCwd
+} from "./chunk-TOIVGRUX.js";
 import {
   StringEnum
 } from "./chunk-YPC6ZR5L.js";
@@ -821,513 +822,6 @@ function createAskUserTool(deps = {}) {
   };
 }
 
-// src/domains/dispatch/intent.ts
-init_esm_shims();
-import path2 from "node:path";
-
-// src/domains/dispatch/path-scope.ts
-init_esm_shims();
-import { existsSync } from "node:fs";
-var DISPATCH_PATH_TOKEN_RE = /(?:[\w.-]+\/)+[\w.-]+|\b[\w-]+\.[A-Za-z0-9]{1,8}\b/g;
-var HTTP_URL_RE = /\bhttps?:\/\/\S+/gu;
-var POSIX_ABSOLUTE_TOKEN_RE = /(?:^|[\s("'])((?:\/[\w.~+-]+)+)/gu;
-var WINDOWS_ABSOLUTE_TOKEN_RE = /(?:^|[\s("'])([A-Za-z]:[\\/][^\s"']+)/gu;
-var BACKSLASH_PATH_RE = /\b[A-Za-z_.-][\w.-]*\\(?:(?:[\w.-]+\\)+[\w.-]+|[\w-]+\.[A-Za-z0-9]{1,8})\b/gu;
-var DOUBLE_SEPARATOR_PATH_RE = /\b[\w.-]+\/\/[\w./-]+/gu;
-var PARENT_PREFIX_RE = /^(?:\.\.\/)+/u;
-var DispatchPathScopeInferenceError = class extends Error {
-  code;
-  source;
-  token;
-  constructor(code, source, token, detail) {
-    super(`${code}: ${source} contains ${detail} '${token}'; declare intent explicitly`);
-    this.name = "DispatchPathScopeInferenceError";
-    this.code = code;
-    this.source = source;
-    this.token = token;
-  }
-};
-var DECLARED_EVIDENCE = {
-  readRoots: {
-    provenance: "declared",
-    source: "intent.read_roots",
-    confidence: "certain",
-    reason: "explicit_intent"
-  },
-  writeRoots: {
-    provenance: "declared",
-    source: "intent.write_roots",
-    confidence: "certain",
-    reason: "explicit_intent"
-  },
-  relevantPaths: {
-    provenance: "declared",
-    source: "intent.relevant_paths",
-    confidence: "certain",
-    reason: "explicit_intent"
-  }
-};
-function cloneEvidence(evidence) {
-  return { ...evidence };
-}
-function addProvenance(entries, path5, evidence) {
-  const current = entries.get(path5);
-  if (current === void 0) {
-    entries.set(path5, { path: path5, evidence: [cloneEvidence(evidence)] });
-    return;
-  }
-  if (!current.evidence.some((entry) => entry.source === evidence.source)) {
-    current.evidence.push(cloneEvidence(evidence));
-  }
-}
-function sortedEntries(entries) {
-  return [...entries.values()].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0).map((entry) => ({ path: entry.path, evidence: entry.evidence.map(cloneEvidence) }));
-}
-function declaredIntentPathProvenance(input) {
-  const entries = /* @__PURE__ */ new Map();
-  for (const path5 of input.readRoots) addProvenance(entries, path5, DECLARED_EVIDENCE.readRoots);
-  for (const path5 of input.writeRoots) addProvenance(entries, path5, DECLARED_EVIDENCE.writeRoots);
-  for (const path5 of input.relevantPaths) addProvenance(entries, path5, DECLARED_EVIDENCE.relevantPaths);
-  return sortedEntries(entries);
-}
-function inferredPaths(req, root) {
-  const paths = /* @__PURE__ */ new Set();
-  const droppedTokens = /* @__PURE__ */ new Set();
-  const text = `${req.task}
-${req.briefing ?? ""}`;
-  for (const match of text.matchAll(DISPATCH_PATH_TOKEN_RE)) {
-    const inferred = inferredPathToken(match[0], root);
-    if (inferred.kind === "dropped") {
-      droppedTokens.add(inferred.token);
-      continue;
-    }
-    const token = inferred.kind === "anchored" ? inferred.resolved : inferred.token;
-    if (token.startsWith("http://") || token.startsWith("https://")) continue;
-    paths.add(token);
-  }
-  return { paths: [...paths], droppedTokens: [...droppedTokens] };
-}
-function inferredPathToken(raw, root) {
-  const token = raw.replace(/^\.\//u, "").replace(/\.+$/u, "");
-  const parents = PARENT_PREFIX_RE.exec(token)?.[0];
-  if (parents === void 0) return { kind: "token", token };
-  const rest = token.slice(parents.length);
-  const segments = rest.split("/");
-  if (rest.length === 0 || segments.includes("..") || segments.includes(".")) return { kind: "token", token };
-  return existsSync(resolvePathBoundary(root, rest)) ? { kind: "anchored", token, resolved: rest } : { kind: "dropped", token };
-}
-function failMalformedText(text, source) {
-  const withoutUrls = text.replace(HTTP_URL_RE, (url) => " ".repeat(url.length));
-  const absolute = POSIX_ABSOLUTE_TOKEN_RE.exec(withoutUrls)?.[1];
-  POSIX_ABSOLUTE_TOKEN_RE.lastIndex = 0;
-  if (absolute !== void 0) {
-    throw new DispatchPathScopeInferenceError("legacy_scope_path_absolute", source, absolute, "an absolute path token");
-  }
-  const windowsAbsolute = WINDOWS_ABSOLUTE_TOKEN_RE.exec(withoutUrls)?.[1];
-  WINDOWS_ABSOLUTE_TOKEN_RE.lastIndex = 0;
-  if (windowsAbsolute !== void 0) {
-    throw new DispatchPathScopeInferenceError(
-      "legacy_scope_path_absolute",
-      source,
-      windowsAbsolute,
-      "an absolute path token"
-    );
-  }
-  for (const pattern of [BACKSLASH_PATH_RE, DOUBLE_SEPARATOR_PATH_RE]) {
-    const malformed = pattern.exec(withoutUrls)?.[0];
-    pattern.lastIndex = 0;
-    if (malformed !== void 0) {
-      throw new DispatchPathScopeInferenceError(
-        "legacy_scope_path_malformed",
-        source,
-        malformed,
-        "a malformed path token"
-      );
-    }
-  }
-}
-function strictInferredPaths(text, source, root) {
-  failMalformedText(text, source);
-  const withoutUrls = text.replace(HTTP_URL_RE, (url) => " ".repeat(url.length));
-  const evidence = source === "task" ? { provenance: "inferred", source, confidence: "medium", reason: "task_path_token" } : { provenance: "inferred", source, confidence: "low", reason: "briefing_path_token" };
-  const paths = [];
-  const parentTokens = [];
-  for (const match of withoutUrls.matchAll(DISPATCH_PATH_TOKEN_RE)) {
-    const inferred = inferredPathToken(match[0], root);
-    if (inferred.kind === "dropped") {
-      parentTokens.push({ token: inferred.token, resolved: null, source });
-      continue;
-    }
-    if (inferred.kind === "anchored") {
-      parentTokens.push({ token: inferred.token, resolved: inferred.resolved, source });
-    }
-    const token = inferred.kind === "anchored" ? inferred.resolved : inferred.token;
-    try {
-      paths.push({ path: normalizePathBoundaryEntry(token), evidence });
-    } catch (error) {
-      const code = error instanceof PathBoundaryError && error.code === "absolute" ? "legacy_scope_path_absolute" : "legacy_scope_path_malformed";
-      throw new DispatchPathScopeInferenceError(
-        code,
-        source,
-        token,
-        code === "legacy_scope_path_absolute" ? "an absolute path token" : "a malformed path token"
-      );
-    }
-  }
-  return { paths, parentTokens };
-}
-function legacyPathScope(req, cwd) {
-  const workingEntries = /* @__PURE__ */ new Map();
-  const writeEntries = /* @__PURE__ */ new Map();
-  const writeEvidence = {
-    provenance: "derived",
-    source: "writeRoots",
-    confidence: "high",
-    reason: "legacy_write_roots"
-  };
-  for (const root of req.writeRoots ?? []) {
-    addProvenance(workingEntries, root, writeEvidence);
-    addProvenance(writeEntries, asDirectoryPathBoundary(resolvePathBoundary(cwd, root)), writeEvidence);
-  }
-  const parentTokens = /* @__PURE__ */ new Map();
-  const recordParentTokens = (entries) => {
-    for (const entry of entries) if (!parentTokens.has(entry.token)) parentTokens.set(entry.token, entry);
-  };
-  const taskScope = strictInferredPaths(req.task, "task", cwd);
-  for (const candidate of taskScope.paths) addProvenance(workingEntries, candidate.path, candidate.evidence);
-  recordParentTokens(taskScope.parentTokens);
-  if (req.briefing !== void 0) {
-    const briefingScope = strictInferredPaths(req.briefing, "briefing", cwd);
-    for (const candidate of briefingScope.paths) addProvenance(workingEntries, candidate.path, candidate.evidence);
-    recordParentTokens(briefingScope.parentTokens);
-  }
-  const workingContext = [...workingEntries.values()].map((entry) => ({
-    path: entry.path,
-    evidence: entry.evidence.map(cloneEvidence)
-  }));
-  const writeBoundaries = [...writeEntries.values()].map((entry) => ({
-    path: entry.path,
-    evidence: entry.evidence.map(cloneEvidence)
-  }));
-  return {
-    source: "inferred",
-    workingContextPaths: workingContext.map((entry) => entry.path),
-    writeBoundaries: writeBoundaries.map((entry) => entry.path),
-    inferredOnlyPaths: [],
-    parentTokens: [...parentTokens.values()],
-    provenance: {
-      version: 1,
-      mode: "legacy-inferred",
-      workingContextPaths: workingContext,
-      writeBoundaries
-    }
-  };
-}
-function resolveDispatchPathScope(req) {
-  const cwd = req.cwd ?? process.cwd();
-  if (req.intent === void 0) return legacyPathScope(req, cwd);
-  const declaredProvenance = declaredIntentPathProvenance(req.intent);
-  const declaredPaths = declaredProvenance.map((entry) => entry.path);
-  const inferred = inferredPaths(req, cwd);
-  const inferredOnlyPaths = [
-    ...inferred.paths.filter((candidate) => !pathBoundaryCovers(declaredPaths, candidate)),
-    ...inferred.droppedTokens
-  ];
-  const writeEvidence = DECLARED_EVIDENCE.writeRoots;
-  const writeBoundaries = req.intent.writeRoots.map((root) => ({
-    path: resolvePathBoundary(cwd, root),
-    evidence: [cloneEvidence(writeEvidence)]
-  }));
-  return {
-    source: "declared",
-    workingContextPaths: declaredPaths,
-    writeBoundaries: writeBoundaries.map((entry) => entry.path),
-    inferredOnlyPaths,
-    // Empty on purpose: the declaration is the scope here, so no "../" token
-    // changed what the worker sees and there is nothing for the legacy notice
-    // to report. A dropped one still reaches the operator through
-    // inferredOnlyPaths above.
-    parentTokens: [],
-    provenance: {
-      version: 1,
-      mode: "declared",
-      workingContextPaths: declaredProvenance,
-      writeBoundaries
-    }
-  };
-}
-var REPORTABLE_OMITTED_PATH_RE = /\.(?:[cm]?[jt]sx?|json|ya?ml|md|txt|py|go|rs|c|h|cc|cpp|hpp|java|rb|sh|toml|css|html|sql|lock)(?:\/|$)|\/$/u;
-var OMITTED_PATH_REPORT_CAP = 12;
-function reportableOmittedPaths(scope) {
-  return scope.inferredOnlyPaths.filter((path5) => REPORTABLE_OMITTED_PATH_RE.test(path5));
-}
-function renderOmittedPaths(paths) {
-  if (paths.length <= OMITTED_PATH_REPORT_CAP) return paths.join(", ");
-  return `${paths.slice(0, OMITTED_PATH_REPORT_CAP).join(", ")} and ${paths.length - OMITTED_PATH_REPORT_CAP} more`;
-}
-function declaredScopeReplacementDiagnostic(scope) {
-  if (scope.source !== "declared") return null;
-  const omitted = reportableOmittedPaths(scope);
-  if (omitted.length === 0) return null;
-  return `typed_scope_replaced_inferred_paths: typed intent omitted prose-inferred paths ${renderOmittedPaths(
-    omitted
-  )}; those paths did not select project rules or expand worker authority`;
-}
-function declaredScopeReplacementNotice(scope) {
-  if (scope.source !== "declared") return null;
-  const omittedPaths = reportableOmittedPaths(scope);
-  if (omittedPaths.length === 0) return null;
-  return {
-    code: "typed_scope_replaced_inferred_paths",
-    level: "warning",
-    omittedPaths,
-    message: `[dispatch scope] typed intent replaced prose path inference; omitted paths: ${renderOmittedPaths(
-      omittedPaths
-    )}. Those paths did not select project rules or expand worker authority.`
-  };
-}
-function renderParentTokens(tokens) {
-  return renderOmittedPaths(tokens.map((entry) => `${entry.token} -> ${entry.resolved ?? "dropped"}`));
-}
-function inferredScopeParentTokenDiagnostic(scope) {
-  const tokens = scope.parentTokens;
-  if (tokens.length === 0) return null;
-  return `legacy_scope_inferred: prose inference resolved path tokens carrying a leading '../' run against the dispatch root ${renderParentTokens(
-    tokens
-  )}; an anchored token selects project rules without expanding worker authority and a dropped one took no part in scope`;
-}
-function inferredScopeParentTokenNotice(scope) {
-  const tokens = scope.parentTokens;
-  if (tokens.length === 0) return null;
-  return {
-    code: "legacy_scope_inferred",
-    level: "warning",
-    // Every entry names the raw prose token, the one spelling both outcomes
-    // share; the message carries what each one resolved to.
-    paths: tokens.map((entry) => ({
-      path: entry.token,
-      policy: "working-context",
-      provenance: "inferred",
-      source: entry.source,
-      confidence: "low"
-    })),
-    message: `[dispatch scope] prose inference resolved path tokens carrying a leading '../' run against the dispatch root: ${renderParentTokens(
-      tokens
-    )}. An anchored token selects project rules without expanding worker authority; a dropped one took no part in scope.`
-  };
-}
-
-// src/domains/dispatch/intent.ts
-var DISPATCH_INTENT_PATH_LIST_CAP = PATH_BOUNDARY_MAX_ENTRIES;
-var DISPATCH_INTENT_PATH_ENTRY_BYTES_CAP = 512;
-var DISPATCH_INTENT_VERIFICATION_CAP = 8;
-var DISPATCH_INTENT_TIMEOUT_MIN_MS = 1e3;
-var RAW_FIELDS = /* @__PURE__ */ new Set([
-  "version",
-  "read_roots",
-  "write_roots",
-  "relevant_paths",
-  "expected_outputs",
-  "verification"
-]);
-function isRecord2(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function compareCodepoints(left, right) {
-  return left < right ? -1 : left > right ? 1 : 0;
-}
-function fail(reason, message) {
-  return { ok: false, reason, message };
-}
-function checkedPathText(value, field, index) {
-  if (typeof value !== "string" || value.trim().length === 0) {
-    return fail("intent_path_malformed", `${field}[${index}] must be a non-empty repository-relative POSIX path`);
-  }
-  const trimmed = value.trim();
-  if (Buffer.byteLength(trimmed, "utf8") > DISPATCH_INTENT_PATH_ENTRY_BYTES_CAP) {
-    return fail(
-      "intent_path_over_cap",
-      `${field}[${index}] exceeds the ${DISPATCH_INTENT_PATH_ENTRY_BYTES_CAP}-byte cap`
-    );
-  }
-  return trimmed;
-}
-function normalizeScopePathEntry(value, field, index) {
-  const checked = checkedPathText(value, field, index);
-  if (typeof checked !== "string") return checked;
-  try {
-    return normalizePathBoundaryEntry(checked);
-  } catch (error) {
-    if (error instanceof PathBoundaryError) {
-      if (error.code === "absolute") {
-        return fail("intent_path_absolute", `${field}[${index}] must be a repository-relative POSIX path`);
-      }
-      if (error.code === "parent") {
-        return fail("intent_path_escapes_root", `${field}[${index}] escapes the repository root`);
-      }
-    }
-    return fail(
-      "intent_path_malformed",
-      `${field}[${index}] does not follow the repository path boundary grammar: ${error instanceof Error ? error.message : String(error)}`
-    );
-  }
-}
-function normalizeExpectedOutputEntry(value, field, index) {
-  const checked = checkedPathText(value, field, index);
-  if (typeof checked !== "string") return checked;
-  const trimmed = checked;
-  if (trimmed.includes("\\") || path2.posix.isAbsolute(trimmed) || path2.win32.isAbsolute(trimmed)) {
-    return fail("intent_path_absolute", `${field}[${index}] must be a repository-relative POSIX path`);
-  }
-  const normalized = path2.posix.normalize(trimmed.replace(/^\.\//u, "").replace(/\/{2,}/gu, "/"));
-  if (normalized === "." || normalized.length === 0) {
-    return fail("intent_path_malformed", `${field}[${index}] must not normalize to an empty path`);
-  }
-  if (normalized === ".." || normalized.startsWith("../") || normalized.split("/").includes("..")) {
-    return fail("intent_path_escapes_root", `${field}[${index}] escapes the repository root`);
-  }
-  return normalized;
-}
-function normalizePathList(value, field, normalizeEntry = normalizeScopePathEntry) {
-  if (value === void 0) return [];
-  if (!Array.isArray(value)) return fail("intent_path_malformed", `${field} must be an array`);
-  if (value.length > DISPATCH_INTENT_PATH_LIST_CAP) {
-    return fail("intent_path_over_cap", `${field} exceeds the ${DISPATCH_INTENT_PATH_LIST_CAP}-entry cap`);
-  }
-  const normalized = [];
-  for (const [index, entry] of value.entries()) {
-    if (normalizeEntry === normalizeScopePathEntry && typeof entry === "string" && /^\.\/?$/u.test(entry.trim())) {
-      continue;
-    }
-    const result = normalizeEntry(entry, field, index);
-    if (typeof result !== "string") return result;
-    normalized.push(result);
-  }
-  return [...new Set(normalized)].sort(compareCodepoints);
-}
-function declaredScopeIntent(input) {
-  const readRoots = normalizePathList(input.readRoots, "intent.read_roots");
-  if (!Array.isArray(readRoots)) return readRoots;
-  const writeRoots = normalizePathList(input.writeRoots, "intent.write_roots");
-  if (!Array.isArray(writeRoots)) return writeRoots;
-  const relevantPaths = normalizePathList(input.relevantPaths, "intent.relevant_paths");
-  if (!Array.isArray(relevantPaths)) return relevantPaths;
-  return {
-    ok: true,
-    intent: {
-      version: 2,
-      readRoots,
-      writeRoots,
-      relevantPaths,
-      pathProvenance: declaredIntentPathProvenance({ readRoots, writeRoots, relevantPaths }),
-      expectedOutputs: [],
-      verification: []
-    }
-  };
-}
-function isDispatchIntent(value) {
-  if (!isRecord2(value) || value.version !== 2) return false;
-  for (const field of ["readRoots", "writeRoots", "relevantPaths", "expectedOutputs"]) {
-    if (!Array.isArray(value[field]) || !value[field].every((entry) => typeof entry === "string")) return false;
-  }
-  const readRoots = value.readRoots;
-  const writeRoots = value.writeRoots;
-  const relevantPaths = value.relevantPaths;
-  if (!Array.isArray(value.pathProvenance) || JSON.stringify(value.pathProvenance) !== JSON.stringify(
-    declaredIntentPathProvenance({
-      readRoots,
-      writeRoots,
-      relevantPaths
-    })
-  )) {
-    return false;
-  }
-  return Array.isArray(value.verification) && value.verification.every(
-    (entry) => isRecord2(entry) && typeof entry.check === "string" && entry.check.length > 0 && typeof entry.timeoutMs === "number" && Number.isInteger(entry.timeoutMs) && entry.timeoutMs >= DISPATCH_INTENT_TIMEOUT_MIN_MS
-  );
-}
-function narrowDispatchIntentToReadOnly(intent) {
-  if (intent.writeRoots.length === 0) return intent;
-  const readRoots = [.../* @__PURE__ */ new Set([...intent.readRoots, ...intent.writeRoots])].sort(compareCodepoints);
-  return {
-    version: 2,
-    readRoots,
-    writeRoots: [],
-    relevantPaths: [...intent.relevantPaths],
-    pathProvenance: declaredIntentPathProvenance({ readRoots, writeRoots: [], relevantPaths: intent.relevantPaths }),
-    expectedOutputs: [...intent.expectedOutputs],
-    verification: intent.verification.map((entry) => ({ ...entry }))
-  };
-}
-function normalizeDispatchIntent(raw, checks) {
-  if (!isRecord2(raw)) return fail("intent_malformed", "intent must be an object");
-  const unknown = Object.keys(raw).filter((key) => !RAW_FIELDS.has(key)).sort(compareCodepoints);
-  if (unknown.length > 0) return fail("intent_malformed", `intent contains unknown field '${unknown[0]}'`);
-  if (raw.version !== void 0 && raw.version !== 2) {
-    return fail(
-      "intent_version_unsupported",
-      `intent declares version ${JSON.stringify(raw.version)}; this build speaks dispatch intent version 2. A declaration at another version is refused rather than migrated: restate read_roots, write_roots, relevant_paths, expected_outputs, and verification under version 2`
-    );
-  }
-  const readRoots = normalizePathList(raw.read_roots, "intent.read_roots");
-  if (!Array.isArray(readRoots)) return readRoots;
-  const writeRoots = normalizePathList(raw.write_roots, "intent.write_roots");
-  if (!Array.isArray(writeRoots)) return writeRoots;
-  const relevantPaths = normalizePathList(raw.relevant_paths, "intent.relevant_paths");
-  if (!Array.isArray(relevantPaths)) return relevantPaths;
-  const expectedOutputs = normalizePathList(
-    raw.expected_outputs,
-    "intent.expected_outputs",
-    normalizeExpectedOutputEntry
-  );
-  if (!Array.isArray(expectedOutputs)) return expectedOutputs;
-  const rawVerification = raw.verification ?? [];
-  if (!Array.isArray(rawVerification)) {
-    return fail("verification_malformed", "intent.verification must be an array");
-  }
-  if (rawVerification.length > DISPATCH_INTENT_VERIFICATION_CAP) {
-    return fail("verification_over_cap", `intent.verification exceeds the ${DISPATCH_INTENT_VERIFICATION_CAP}-entry cap`);
-  }
-  const verification = [];
-  for (const [index, entry] of rawVerification.entries()) {
-    if (!isRecord2(entry) || Object.keys(entry).some((key) => key !== "check" && key !== "timeout_ms")) {
-      return fail("verification_malformed", `intent.verification[${index}] must contain check and optional timeout_ms`);
-    }
-    if (typeof entry.check !== "string" || entry.check.trim().length === 0) {
-      return fail("verification_malformed", `intent.verification[${index}].check must be a non-empty declared id`);
-    }
-    const check = entry.check.trim();
-    const declared = checks.get(check);
-    if (declared === void 0 && check.toLowerCase() === "none") continue;
-    if (declared === void 0) {
-      return fail(
-        "verification_check_undeclared",
-        `verification check '${check}' is undeclared: intent.verification takes only check ids that verify() lists (package.json verification scripts or .clio-coder/verifiers.yaml entries), never a shell command; omit verification and run the check yourself after the receipt, or declare the check first`
-      );
-    }
-    if (entry.timeout_ms !== void 0 && (typeof entry.timeout_ms !== "number" || !Number.isInteger(entry.timeout_ms) || entry.timeout_ms <= 0)) {
-      return fail("verification_malformed", `intent.verification[${index}].timeout_ms must be a positive integer`);
-    }
-    const requested = typeof entry.timeout_ms === "number" ? entry.timeout_ms : declared.timeoutMs;
-    verification.push({
-      check,
-      timeoutMs: Math.min(declared.timeoutMs, Math.max(DISPATCH_INTENT_TIMEOUT_MIN_MS, requested))
-    });
-  }
-  return {
-    ok: true,
-    intent: {
-      version: 2,
-      readRoots,
-      writeRoots,
-      relevantPaths,
-      pathProvenance: declaredIntentPathProvenance({ readRoots, writeRoots, relevantPaths }),
-      expectedOutputs,
-      verification
-    }
-  };
-}
-
 // src/domains/dispatch/budget-envelope.ts
 init_esm_shims();
 var NATIVE_CLIO_CONTROLS = ["tool-calls", "read-reserve", "synthesis", "attempt-cap"];
@@ -1346,11 +840,11 @@ var BudgetAdmissionError = class extends Error {
     this.code = code;
   }
 };
-function isRecord3(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function clonePhase(value, prefix) {
-  if (!isRecord3(value)) throw new Error(`${prefix} must be an object`);
+  if (!isRecord2(value)) throw new Error(`${prefix} must be an object`);
   for (const key of Object.keys(value)) {
     if (key !== "toolCalls" && key !== "readReserve") throw new Error(`${prefix}.${key} is unknown`);
   }
@@ -1369,7 +863,7 @@ function clonePhase(value, prefix) {
   return { toolCalls, readReserve };
 }
 function cloneDispatchBudgetRequest(value, prefix = "budget") {
-  if (!isRecord3(value)) throw new Error(`${prefix} must be an object`);
+  if (!isRecord2(value)) throw new Error(`${prefix} must be an object`);
   for (const key of Object.keys(value)) {
     if (key !== "toolCalls" && key !== "readReserve" && key !== "retryRevision") {
       throw new Error(`${prefix}.${key} is unknown`);
@@ -1584,14 +1078,14 @@ function isExactStringArray(value, expected) {
 }
 function cloneRunToolBudgetEnvelope(value) {
   try {
-    if (!isRecord3(value) || value.version !== 1 || !isRecord3(value.policy) || !isRecord3(value.effective)) {
+    if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.policy) || !isRecord2(value.effective)) {
       return void 0;
     }
     const recipeId = value.policy.recipeId;
     if (typeof recipeId !== "string" || recipeId.length === 0 || typeof value.policy.exact !== "boolean") {
       return void 0;
     }
-    if (!isRecord3(value.policy.default) || typeof value.policy.default.synthesis !== "boolean") return void 0;
+    if (!isRecord2(value.policy.default) || typeof value.policy.default.synthesis !== "boolean") return void 0;
     const defaultPhase = clonePhase(
       { toolCalls: value.policy.default.toolCalls, readReserve: value.policy.default.readReserve },
       "budget.policy.default"
@@ -1611,7 +1105,7 @@ function cloneRunToolBudgetEnvelope(value) {
     }
     const reasons = [];
     for (const reason of value.reasons) {
-      if (!isRecord3(reason) || typeof reason.code !== "string" || !BUDGET_REASON_CODES.has(reason.code) || typeof reason.detail !== "string") {
+      if (!isRecord2(reason) || typeof reason.code !== "string" || !BUDGET_REASON_CODES.has(reason.code) || typeof reason.detail !== "string") {
         return void 0;
       }
       reasons.push({ code: reason.code, detail: reason.detail });
@@ -1624,7 +1118,7 @@ function cloneRunToolBudgetEnvelope(value) {
           clioControls: [...NATIVE_CLIO_CONTROLS]
         };
       }
-      if (!isRecord3(value.enforcement) || !Array.isArray(value.enforcement.clioControls)) return null;
+      if (!isRecord2(value.enforcement) || !Array.isArray(value.enforcement.clioControls)) return null;
       if (Object.keys(value.enforcement).some(
         (key) => key !== "classification" && key !== "perTool" && key !== "clioControls"
       )) {
@@ -2028,14 +1522,14 @@ var DISPATCH_INTENT_SUPPORTED_VERSIONS = [DISPATCH_INTENT_VERSION];
 function finding(code, decision, detail) {
   return { code, decision, message: `${code}: ${detail}` };
 }
-function isRecord4(value) {
+function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function declaredVersion(value) {
   return typeof value.version === "number" && Number.isInteger(value.version) ? value.version : null;
 }
 function isSupportedDispatchIntentVersion(value) {
-  if (!isRecord4(value)) return false;
+  if (!isRecord3(value)) return false;
   const version = declaredVersion(value);
   return version !== null && DISPATCH_INTENT_SUPPORTED_VERSIONS.includes(version);
 }
@@ -2099,7 +1593,7 @@ function classifyDispatchIntentCompatibility(input) {
     );
     return findings;
   }
-  if (!isRecord4(input.intent)) {
+  if (!isRecord3(input.intent)) {
     findings.push(
       finding(
         "intent_malformed",
@@ -2168,7 +1662,7 @@ function dispatchIntentScopeWidening(ceiling, narrowed) {
 
 // src/domains/dispatch/validation.ts
 init_esm_shims();
-import path3 from "node:path";
+import path2 from "node:path";
 
 // src/core/response-schema.ts
 init_esm_shims();
@@ -2280,49 +1774,49 @@ function schemaSyntaxError(value) {
   while (stack.length > 0) {
     const frame = stack.pop();
     if (!frame) break;
-    const { schema, path: path5 } = frame;
+    const { schema, path: path4 } = frame;
     for (const key of Object.keys(schema)) {
-      if (!SUPPORTED_SCHEMA_KEYS.has(key)) return `${path5}.${key} is not supported by the llama.cpp schema subset`;
+      if (!SUPPORTED_SCHEMA_KEYS.has(key)) return `${path4}.${key} is not supported by the llama.cpp schema subset`;
     }
     if (typeof schema.type !== "string" || !SUPPORTED_SCHEMA_TYPES.has(schema.type)) {
-      return `${path5}.type must be one of ${[...SUPPORTED_SCHEMA_TYPES].join(", ")}`;
+      return `${path4}.type must be one of ${[...SUPPORTED_SCHEMA_TYPES].join(", ")}`;
     }
     if (schema.type === "object") {
-      if (schema.items !== void 0) return `${path5}.items is only valid for array schemas`;
+      if (schema.items !== void 0) return `${path4}.items is only valid for array schemas`;
       if (schema.properties !== void 0 && !isPlainObject(schema.properties)) {
-        return `${path5}.properties must be a plain object`;
+        return `${path4}.properties must be a plain object`;
       }
       const properties = schema.properties ?? {};
       for (const [name, child] of Object.entries(properties)) {
-        if (!isPlainObject(child)) return `${path5}.properties.${name} must be a schema object`;
-        stack.push({ schema: child, path: `${path5}.properties.${name}` });
+        if (!isPlainObject(child)) return `${path4}.properties.${name} must be a schema object`;
+        stack.push({ schema: child, path: `${path4}.properties.${name}` });
       }
       if (schema.required !== void 0) {
         if (!Array.isArray(schema.required) || !schema.required.every((item) => typeof item === "string")) {
-          return `${path5}.required must be an array of strings`;
+          return `${path4}.required must be an array of strings`;
         }
         if (new Set(schema.required).size !== schema.required.length) {
-          return `${path5}.required must not contain duplicates`;
+          return `${path4}.required must not contain duplicates`;
         }
         for (const name of schema.required) {
-          if (!Object.hasOwn(properties, name)) return `${path5}.required names unknown property '${name}'`;
+          if (!Object.hasOwn(properties, name)) return `${path4}.required names unknown property '${name}'`;
         }
       }
       if (schema.additionalProperties !== void 0 && typeof schema.additionalProperties !== "boolean") {
-        return `${path5}.additionalProperties must be a boolean`;
+        return `${path4}.additionalProperties must be a boolean`;
       }
       continue;
     }
     if (schema.type === "array") {
-      if (!isPlainObject(schema.items)) return `${path5}.items must be a schema object`;
+      if (!isPlainObject(schema.items)) return `${path4}.items must be a schema object`;
       if (schema.properties !== void 0 || schema.required !== void 0 || schema.additionalProperties !== void 0) {
-        return `${path5} contains object-only keywords on an array schema`;
+        return `${path4} contains object-only keywords on an array schema`;
       }
-      stack.push({ schema: schema.items, path: `${path5}.items` });
+      stack.push({ schema: schema.items, path: `${path4}.items` });
       continue;
     }
     if (schema.properties !== void 0 || schema.required !== void 0 || schema.items !== void 0 || schema.additionalProperties !== void 0) {
-      return `${path5} contains container keywords on a ${schema.type} schema`;
+      return `${path4} contains container keywords on a ${schema.type} schema`;
     }
   }
   return null;
@@ -2551,7 +2045,7 @@ function validateJobSpec(spec) {
     }
   }
   if ("protectedArtifactRemap" in spec && spec.protectedArtifactRemap !== void 0) {
-    if (!isPlainObject2(spec.protectedArtifactRemap) || Object.keys(spec.protectedArtifactRemap).some((key) => key !== "sourceRoot" && key !== "workerRoot") || typeof spec.protectedArtifactRemap.sourceRoot !== "string" || !path3.isAbsolute(spec.protectedArtifactRemap.sourceRoot) || typeof spec.protectedArtifactRemap.workerRoot !== "string" || !path3.isAbsolute(spec.protectedArtifactRemap.workerRoot)) {
+    if (!isPlainObject2(spec.protectedArtifactRemap) || Object.keys(spec.protectedArtifactRemap).some((key) => key !== "sourceRoot" && key !== "workerRoot") || typeof spec.protectedArtifactRemap.sourceRoot !== "string" || !path2.isAbsolute(spec.protectedArtifactRemap.sourceRoot) || typeof spec.protectedArtifactRemap.workerRoot !== "string" || !path2.isAbsolute(spec.protectedArtifactRemap.workerRoot)) {
       errors.push("protectedArtifactRemap must carry absolute sourceRoot and workerRoot paths");
     }
   }
@@ -2736,7 +2230,7 @@ function validateJobSpec(spec) {
   const effectiveWriteRoots = Array.isArray(spec.writeRoots) && spec.writeRoots.length > 0 && spec.writeRoots.every((root) => typeof root === "string" && root.length > 0) ? spec.writeRoots : isDispatchIntent(spec.intent) && spec.intent.writeRoots.length > 0 ? spec.intent.writeRoots : void 0;
   if (effectiveWriteRoots !== void 0) {
     const jobCwd = typeof spec.cwd === "string" && spec.cwd.length > 0 ? spec.cwd : process.cwd();
-    out.writeRoots = isDispatchIntent(spec.intent) ? effectiveWriteRoots.map((root) => resolvePathBoundary(jobCwd, String(root))) : effectiveWriteRoots.map((root) => asDirectoryPathBoundary(path3.resolve(jobCwd, String(root))));
+    out.writeRoots = isDispatchIntent(spec.intent) ? effectiveWriteRoots.map((root) => resolvePathBoundary(jobCwd, String(root))) : effectiveWriteRoots.map((root) => asDirectoryPathBoundary(path2.resolve(jobCwd, String(root))));
   }
   if (typeof spec.requestOrigin === "string" && VALID_REQUEST_ORIGINS.has(spec.requestOrigin)) {
     out.requestOrigin = spec.requestOrigin;
@@ -2801,7 +2295,7 @@ function isValidPlannedNode(value) {
   return value.kind === "ssh" && typeof value.host === "string" && value.host.trim().length > 0;
 }
 function isValidProtectedArtifactRemap(value) {
-  return isPlainObject2(value) && typeof value.sourceRoot === "string" && path3.isAbsolute(value.sourceRoot) && typeof value.workerRoot === "string" && path3.isAbsolute(value.workerRoot);
+  return isPlainObject2(value) && typeof value.sourceRoot === "string" && path2.isAbsolute(value.sourceRoot) && typeof value.workerRoot === "string" && path2.isAbsolute(value.workerRoot);
 }
 var VALID_GATE_ROLES = /* @__PURE__ */ new Set(["builder", "reviewer", "candidate", "judge", "member", "synthesis"]);
 var VALID_GATE_VERDICTS = /* @__PURE__ */ new Set(["pass", "fail", "revise"]);
@@ -2837,7 +2331,7 @@ function isValidGate(value) {
   if (value.worktree !== void 0) {
     if (!isPlainObject2(value.worktree)) return false;
     if (typeof value.worktree.backend !== "string" || !VALID_WORKTREE_BACKENDS.has(value.worktree.backend)) return false;
-    if (typeof value.worktree.path !== "string" || !path3.isAbsolute(value.worktree.path)) return false;
+    if (typeof value.worktree.path !== "string" || !path2.isAbsolute(value.worktree.path)) return false;
     if (typeof value.worktree.branch !== "string" || value.worktree.branch.length === 0) return false;
     if (value.worktree.workspaceId !== void 0 && typeof value.worktree.workspaceId !== "string") return false;
     if (value.worktree.fallback !== void 0 && (typeof value.worktree.fallback !== "string" || !VALID_WORKTREE_FALLBACKS.has(value.worktree.fallback))) {
@@ -2920,7 +2414,7 @@ var DEFAULT_MAX_OUTPUT_BYTES = 2e4;
 var PERSONA_MAX_CHARS = 8e3;
 var THINKING_LEVELS2 = ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
 var VALID_THINKING2 = new Set(THINKING_LEVELS2);
-function isRecord5(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringArg(args, ...names) {
@@ -3000,7 +2494,7 @@ function dispatchRequestFromArgs(args, options) {
     if (request.worktree !== true) return { ok: false, message: "apply requires worktree: true" };
     request.apply = args.apply;
   }
-  if (Object.hasOwn(args, "gate") && isRecord5(args.intent) && Object.hasOwn(args.intent, "verification")) {
+  if (Object.hasOwn(args, "gate") && isRecord4(args.intent) && Object.hasOwn(args.intent, "verification")) {
     return { ok: false, message: "gate_and_intent_verification_conflict: gate cannot combine with intent.verification" };
   }
   let rawIntent = args.intent;
@@ -3011,7 +2505,7 @@ function dispatchRequestFromArgs(args, options) {
         message: "gate must be a non-empty declared check id: a check verify() lists, never a shell command; omit gate and run the check yourself after the receipt"
       };
     }
-    rawIntent = { ...isRecord5(rawIntent) ? rawIntent : {}, verification: [{ check: args.gate.trim() }] };
+    rawIntent = { ...isRecord4(rawIntent) ? rawIntent : {}, verification: [{ check: args.gate.trim() }] };
   }
   if (rawIntent !== void 0) {
     if (options.resolveIntent === void 0) return { ok: false, message: "intent resolver is unavailable" };
@@ -3083,9 +2577,9 @@ function dispatchRequestsFromArgs(args, options) {
   const requests = [];
   for (let index = 0; index < tasks.length; index += 1) {
     const item = tasks[index];
-    const itemArgs = isRecord5(item) ? { ...shared, ...item } : { ...shared, task: item };
-    const sharedIntent = isRecord5(shared.intent) ? shared.intent : null;
-    const itemIntent = isRecord5(item) && Object.hasOwn(item, "intent") && isRecord5(item.intent) ? item.intent : null;
+    const itemArgs = isRecord4(item) ? { ...shared, ...item } : { ...shared, task: item };
+    const sharedIntent = isRecord4(shared.intent) ? shared.intent : null;
+    const itemIntent = isRecord4(item) && Object.hasOwn(item, "intent") && isRecord4(item.intent) ? item.intent : null;
     if (sharedIntent !== null && itemIntent !== null) itemArgs.intent = { ...sharedIntent, ...itemIntent };
     const parsed = dispatchRequestFromArgs(itemArgs, options);
     if (!parsed.ok) return { ok: false, message: `dispatch: task ${index + 1}: ${parsed.message}` };
@@ -3116,7 +2610,7 @@ function prepareDispatchArguments(args) {
       }
     }
   }
-  if (isRecord5(next.tasks)) next.tasks = [next.tasks];
+  if (isRecord4(next.tasks)) next.tasks = [next.tasks];
   if (typeof next.tasks === "string") next.tasks = [next.tasks];
   if (next.tasks === void 0 && typeof next.task === "string") {
     const { task: _task, ...rest } = next;
@@ -3174,7 +2668,7 @@ function withResolvedPlanTaskPin(request, task, options = {}) {
     }
   };
 }
-function isRecord6(value) {
+function isRecord5(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function str(value) {
@@ -3232,7 +2726,7 @@ function taskViews(args) {
   const sharedNode = str(args.node);
   const sharedTarget = str(args.target);
   return tasks.map((item) => {
-    const record3 = isRecord6(item) ? item : {};
+    const record3 = isRecord5(item) ? item : {};
     const view = {
       agent: str(record3.agent) ?? sharedAgent,
       task: str(item) ?? str(record3.task) ?? "(invalid task)",
@@ -3275,7 +2769,7 @@ function canonicalCandidates(value) {
   if (!Array.isArray(value)) return null;
   const out = [];
   for (const item of value) {
-    if (!isRecord6(item)) return null;
+    if (!isRecord5(item)) return null;
     const agentId = str(item.agentId);
     const target = str(item.target);
     const model = str(item.model);
@@ -3286,10 +2780,10 @@ function canonicalCandidates(value) {
   return out.length > 0 ? out : null;
 }
 function topologyOf(args) {
-  if (isRecord6(args.apply_winner)) return "compete";
+  if (isRecord5(args.apply_winner)) return "compete";
   if (args.mode === "compete") return "compete";
   if (args.mode === "council") return "council";
-  if (args.review === true || isRecord6(args.review)) return "review";
+  if (args.review === true || isRecord5(args.review)) return "review";
   if (args.detach === true) return "detached";
   if (args.mode === "sequential") return "sequential";
   if (args.mode === "pipeline") return "pipeline";
@@ -3372,14 +2866,14 @@ function renderPlanText(topology, tasks, costCeilingUsd, deadlineMs, source, max
     lines.push(...renderLegacyPathScope(task, cwd));
     for (const check of task.resolvedVerification ?? []) {
       lines.push(
-        `    verification check=${safeField(check.check)} argv=${JSON.stringify(check.argv)} cwd=${JSON.stringify(check.cwd)} timeout_ms=${check.timeoutMs}`
+        `    verification check=${safeField(check.check)}${check.kind !== void 0 ? ` kind=${check.kind}` : ""} argv=${JSON.stringify(check.argv)} cwd=${JSON.stringify(check.cwd)} timeout_ms=${check.timeoutMs}`
       );
     }
   }
   return lines.join("\n");
 }
 function isResolvedTask(value) {
-  if (!isRecord6(value)) return false;
+  if (!isRecord5(value)) return false;
   const allowedKeys = /* @__PURE__ */ new Set([
     "agent",
     "task",
@@ -3436,7 +2930,7 @@ function isResolvedTask(value) {
   }
   if (value.position !== void 0 && (!Number.isInteger(value.position) || Number(value.position) < 1)) return false;
   if (value.council !== void 0) {
-    if (!isRecord6(value.council) || typeof value.council.label !== "string" || value.council.label.length === 0 || value.council.color !== void 0 && typeof value.council.color !== "string" || !Number.isInteger(value.council.round) || Number(value.council.round) < 1 || !Number.isInteger(value.council.rounds) || Number(value.council.rounds) < 1 || value.council.synthesis !== "none" && value.council.synthesis !== "judge" && value.council.synthesis !== "vote")
+    if (!isRecord5(value.council) || typeof value.council.label !== "string" || value.council.label.length === 0 || value.council.color !== void 0 && typeof value.council.color !== "string" || !Number.isInteger(value.council.round) || Number(value.council.round) < 1 || !Number.isInteger(value.council.rounds) || Number(value.council.rounds) < 1 || value.council.synthesis !== "none" && value.council.synthesis !== "judge" && value.council.synthesis !== "vote")
       return false;
   }
   if (value.nodeKind !== "local" && value.nodeKind !== "ssh") return false;
@@ -3464,7 +2958,7 @@ function isResolvedTask(value) {
   if (value.agentDecision !== null && !isAgentDecision(value.agentDecision)) return false;
   if (value.intent !== void 0 && !isDispatchIntent(value.intent)) return false;
   if (value.resolvedVerification !== void 0 && (!Array.isArray(value.resolvedVerification) || !value.resolvedVerification.every(
-    (check) => isRecord6(check) && typeof check.check === "string" && Array.isArray(check.argv) && check.argv.every((arg) => typeof arg === "string") && typeof check.cwd === "string" && typeof check.timeoutMs === "number"
+    (check) => isRecord5(check) && typeof check.check === "string" && Array.isArray(check.argv) && check.argv.every((arg) => typeof arg === "string") && typeof check.cwd === "string" && typeof check.timeoutMs === "number" && (check.kind === void 0 || check.kind === "numeric-compare" || check.kind === "perf-budget") && (check.numeric === void 0 || isRecord5(check.numeric) && typeof check.numeric.reference === "string") && (check.perf === void 0 || isRecord5(check.perf))
   )))
     return false;
   if (value.failover === "approved") {
@@ -3493,13 +2987,13 @@ var RESULT_CONTRACT_KINDS = /* @__PURE__ */ new Set([
   "delegation-plan"
 ]);
 function isAuthorityGrant(value) {
-  return isRecord6(value) && Object.keys(value).sort().join("\0") === "basis\0requested" && AGENT_AUTOMATION_AUTHORITIES.includes(value.requested) && (value.basis === "operator-plan-approval" || value.basis === "full-auto-policy");
+  return isRecord5(value) && Object.keys(value).sort().join("\0") === "basis\0requested" && AGENT_AUTOMATION_AUTHORITIES.includes(value.requested) && (value.basis === "operator-plan-approval" || value.basis === "full-auto-policy");
 }
 function isAgentDecision(value) {
-  return isRecord6(value) && value.policyVersion === ROUTE_POLICY_VERSION && (value.mode === "shadow" || value.mode === "active" || value.mode === "fixed") && isRecord6(value.selected) && isRecord6(value.executedRoute) && Array.isArray(value.approvedFallbacks) && Array.isArray(value.candidateEvaluations) && Array.isArray(value.hardConstraints) && Array.isArray(value.reasonCodes) && typeof value.decisionHash === "string" && /^[0-9a-f]{64}$/u.test(value.decisionHash) && isRouteDecisionAgentSelection(value.agentSelection);
+  return isRecord5(value) && value.policyVersion === ROUTE_POLICY_VERSION && (value.mode === "shadow" || value.mode === "active" || value.mode === "fixed") && isRecord5(value.selected) && isRecord5(value.executedRoute) && Array.isArray(value.approvedFallbacks) && Array.isArray(value.candidateEvaluations) && Array.isArray(value.hardConstraints) && Array.isArray(value.reasonCodes) && typeof value.decisionHash === "string" && /^[0-9a-f]{64}$/u.test(value.decisionHash) && isRouteDecisionAgentSelection(value.agentSelection);
 }
 function isResolvedAgentSelection(value) {
-  if (!isRecord6(value)) return false;
+  if (!isRecord5(value)) return false;
   if (Object.keys(value).sort().join("\0") !== ["approvedAuthorities", "authorityBasis", "baselineAgentId", "mode", "version"].sort().join("\0"))
     return false;
   if (value.version !== 1 || value.mode !== "auto") return false;
@@ -3513,7 +3007,7 @@ function isResolvedAgentSelection(value) {
 }
 function resolvedDispatchPlanFromArgs(args) {
   const value = args[RESOLVED_DISPATCH_PLAN_ARGUMENT];
-  if (!isRecord6(value) || value.version !== 3) return null;
+  if (!isRecord5(value) || value.version !== 3) return null;
   const artifactKeys = /* @__PURE__ */ new Set([
     "version",
     "topology",
@@ -3541,7 +3035,7 @@ function resolvedDispatchPlanFromArgs(args) {
   if (!Array.isArray(value.tasks) || !value.tasks.every(isResolvedTask)) return null;
   let confirmation;
   if (value.confirmation !== void 0) {
-    if (!isRecord6(value.confirmation) || !["branch\0group\0index", "branch\0cwd\0group\0index"].includes(
+    if (!isRecord5(value.confirmation) || !["branch\0group\0index", "branch\0cwd\0group\0index"].includes(
       Object.keys(value.confirmation).sort().join("\0")
     ) || typeof value.confirmation.branch !== "string" || value.confirmation.branch.trim().length === 0 || typeof value.confirmation.group !== "string" || value.confirmation.group.trim().length === 0 || value.confirmation.cwd !== void 0 && (typeof value.confirmation.cwd !== "string" || value.confirmation.cwd.trim().length === 0) || !Number.isInteger(value.confirmation.index) || Number(value.confirmation.index) < 1) {
       return null;
@@ -3620,7 +3114,7 @@ function resolvedDispatchPlanFromArgs(args) {
 }
 function parsePlanSource(value) {
   if (value === null) return null;
-  if (!isRecord6(value) || Object.keys(value).sort().join("\0") !== "executionPlanHash\0kind\0receiptDigest\0runId")
+  if (!isRecord5(value) || Object.keys(value).sort().join("\0") !== "executionPlanHash\0kind\0receiptDigest\0runId")
     return void 0;
   if (value.kind !== "scout-transition" || typeof value.runId !== "string" || value.runId.length === 0 || typeof value.receiptDigest !== "string" || !/^[0-9a-f]{64}$/u.test(value.receiptDigest) || typeof value.executionPlanHash !== "string" || !/^[0-9a-f]{64}$/u.test(value.executionPlanHash))
     return void 0;
@@ -3647,7 +3141,7 @@ function describeDispatchPlan(rawArgs) {
   const maxWorkers = resolved?.maxWorkers ?? null;
   const onFailure = resolved?.onFailure ?? null;
   const remote = tasks.some((task) => task.node !== void 0 && task.node !== "local");
-  const planScale = !preparationFailed && args.list !== true && (tasks.length > 1 || source !== null || topology === "compete" || topology === "council" || remote || tasks.some((task) => task.failover === "approved") || confirmation !== void 0 || isRecord6(args.apply_winner));
+  const planScale = !preparationFailed && args.list !== true && (tasks.length > 1 || source !== null || topology === "compete" || topology === "council" || remote || tasks.some((task) => task.failover === "approved") || confirmation !== void 0 || isRecord5(args.apply_winner));
   const text = renderPlanText(
     topology,
     tasks,
@@ -4144,7 +3638,7 @@ ${guidance}`,
 }
 function skillSurfaceBlockedVerdict(decision, tool, violation) {
   const lifetime = violation.carriedSurface ? "The narrowing stays active for the rest of the session, across the operator's later turns, until a different skill replaces it or the operator clears it with /skill off." : "The narrowing ends when the skill policy's turn or worker run ends.";
-  const reason = violation.disallowedBy.length > 0 ? `${tool} is disallowed by the active skill(s) ${violation.disallowedBy.join(", ")} (disallowed-tools). ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.` : `${tool} is outside the tool surface declared by the active skill(s) ${violation.skills.join(", ")}. Tools are narrowed to: ${(violation.mergedAllowedTools ?? []).join(", ")} (plus context and ask_user). ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.`;
+  const reason = violation.disallowedBy.length > 0 ? `${tool} is disallowed by the active skill(s) ${violation.disallowedBy.join(", ")} (disallowed-tools). ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.` : `${tool} is outside the tool surface declared by the active skill(s) ${violation.skills.join(", ")}. Tools are narrowed to: ${(violation.mergedAllowedTools ?? []).join(", ")} (plus context and ask_user). The limitation receipt is also available unless explicitly disallowed. ${lifetime} Work within the skill workflow; if it genuinely needs this step, use ask_user when available or state the blocker in your reply.`;
   const blocked = {
     kind: "block",
     classification: decision.classification,
@@ -4835,7 +4329,6 @@ function createProcessTreeTerminator(child, graceMs = 1500) {
   let sent = false;
   let timer = null;
   const signal = (name) => {
-    if (child.exitCode !== null) return;
     if (child.pid && process.platform !== "win32") {
       try {
         process.kill(-child.pid, name);
@@ -4843,6 +4336,7 @@ function createProcessTreeTerminator(child, graceMs = 1500) {
       } catch {
       }
     }
+    if (child.exitCode !== null) return;
     child.kill(name);
   };
   return {
@@ -4850,11 +4344,17 @@ function createProcessTreeTerminator(child, graceMs = 1500) {
       if (sent) return;
       sent = true;
       signal("SIGTERM");
-      timer = setTimeout(() => signal("SIGKILL"), graceMs);
+      timer = setTimeout(() => {
+        timer = null;
+        signal("SIGKILL");
+      }, graceMs);
     },
     cleanup() {
-      if (timer) clearTimeout(timer);
-      timer = null;
+      if (timer) {
+        clearTimeout(timer);
+        timer = null;
+        signal("SIGKILL");
+      }
     }
   };
 }
@@ -5221,7 +4721,6 @@ function startAntigravityWorkerRun(input, emit, dependencies = {}) {
 // src/engine/claude/subprocess-runtime.ts
 init_esm_shims();
 import { spawn as spawn2 } from "node:child_process";
-import { createInterface } from "node:readline";
 
 // src/engine/claude/session-id.ts
 init_esm_shims();
@@ -5232,6 +4731,9 @@ function isClaudeCodeSessionId(value) {
 
 // src/engine/claude/subprocess-runtime.ts
 var READ_ONLY_CLAUDE_TOOLS = ["Read", "Grep", "Glob", "LS", "WebFetch", "WebSearch"];
+var CLAUDE_BINARY = "claude";
+var CLAUDE_MAX_STREAM_LINE_BYTES = 1024 * 1024;
+var CLAUDE_MAX_STREAM_BYTES = 8 * 1024 * 1024;
 function claudeSubprocessPermissionConfigForAutonomy(level, env = process.env) {
   if (level === "full-auto" && env.CLIO_CODER_ALLOW_EXTERNAL_FULL_ACCESS === "1") {
     return {
@@ -5262,9 +4764,9 @@ function buildClaudeCodePrompt(input) {
   parts.push(input.task);
   return parts.join("\n\n");
 }
-function buildClaudeCodeArgs(input) {
+function buildClaudeCodeArgs(input, gateEnv = process.env) {
   assertToolProfileEnforceable(input.toolProfile, "claude-code");
-  const permission = claudeSubprocessPermissionConfigForAutonomy(input.autonomy);
+  const permission = claudeSubprocessPermissionConfigForAutonomy(input.autonomy, gateEnv);
   const args = [
     "-p",
     "--output-format",
@@ -5279,7 +4781,6 @@ function buildClaudeCodeArgs(input) {
   const systemPrompt = input.systemPrompt.trim();
   if (systemPrompt.length > 0) args.push("--append-system-prompt", systemPrompt);
   if (isClaudeCodeSessionId(input.sessionId)) args.push("--session-id", input.sessionId.trim());
-  args.push(buildClaudeCodePrompt(input));
   return args;
 }
 function finite2(value) {
@@ -5343,7 +4844,9 @@ function resultError(record3, stderr) {
   return stderr.trim();
 }
 function buildAssistantMessage2(input) {
-  const errorMessage = input.exitCode === 0 ? "" : resultError(input.result, input.stderr);
+  const transportError = input.transportError ?? "";
+  const failed = input.exitCode !== 0 || transportError.length > 0;
+  const errorMessage = !failed ? "" : transportError || resultError(input.result, input.stderr);
   const message = {
     role: "assistant",
     content: [{ type: "text", text: input.text }],
@@ -5351,12 +4854,12 @@ function buildAssistantMessage2(input) {
     provider: "anthropic",
     model: input.model,
     usage: normalizeUsage2(input.result?.usage, finite2(input.result?.total_cost_usd)),
-    stopReason: input.aborted ? "aborted" : input.exitCode === 0 ? "stop" : "error",
+    stopReason: input.aborted ? "aborted" : failed ? "error" : "stop",
     timestamp: Date.now()
   };
   if (typeof input.result?.request_id === "string") message.responseId = input.result.request_id;
   if (typeof input.result?.model === "string") message.responseModel = input.result.model;
-  if (errorMessage.length > 0) message.errorMessage = errorMessage;
+  if (errorMessage.length > 0) message.errorMessage = boundedExternalDiagnostic(errorMessage);
   return message;
 }
 function emitTextDelta2(emit, state, delta) {
@@ -5386,9 +4889,14 @@ function emitTextDelta2(emit, state, delta) {
   });
 }
 async function readJsonLines(child, emit, state) {
-  const rl = createInterface({ input: child.stdout });
-  for await (const line of rl) {
-    const trimmed = line.trim();
+  for await (const bounded of readBoundedLines(child.stdout, {
+    maxLineBytes: CLAUDE_MAX_STREAM_LINE_BYTES,
+    maxTotalBytes: CLAUDE_MAX_STREAM_BYTES
+  })) {
+    if (bounded.kind === "oversized") {
+      throw new Error(`claude stream-json line exceeded ${CLAUDE_MAX_STREAM_LINE_BYTES} bytes`);
+    }
+    const trimmed = bounded.line.trim();
     if (trimmed.length === 0) continue;
     let parsed;
     try {
@@ -5411,12 +4919,17 @@ async function readJsonLines(child, emit, state) {
     emitTextDelta2(emit, state, extractDelta(record3));
   }
 }
-function startClaudeCodeWorkerRun(input, emit) {
-  const args = buildClaudeCodeArgs(input);
-  const child = spawn2("claude", args, {
-    cwd: process.cwd(),
-    env: process.env,
-    stdio: ["ignore", "pipe", "pipe"]
+function startClaudeCodeWorkerRun(input, emit, dependencies = {}) {
+  const sourceEnv = dependencies.environment ?? process.env;
+  const args = buildClaudeCodeArgs(input, sourceEnv);
+  const prompt = buildClaudeCodePrompt(input);
+  const workspaceRoot = dependencies.workspaceRoot ?? process.cwd();
+  const cwd = resolveSafeCwd(input.cwd, workspaceRoot);
+  const child = spawn2(dependencies.binary ?? CLAUDE_BINARY, args, {
+    cwd,
+    env: buildSafeToolEnv({}, sourceEnv),
+    detached: process.platform !== "win32",
+    stdio: ["pipe", "pipe", "pipe"]
   });
   const streamState = {
     started: false,
@@ -5425,51 +4938,61 @@ function startClaudeCodeWorkerRun(input, emit) {
     result: null
   };
   let aborted = false;
-  let killTimer = null;
+  let settled = false;
+  let transportError = "";
+  const terminator = createProcessTreeTerminator(child, dependencies.killGraceMs ?? 1500);
   const abort = () => {
+    if (settled) return;
     aborted = true;
-    if (child.killed) return;
-    child.kill("SIGTERM");
-    killTimer = setTimeout(() => {
-      if (!child.killed) child.kill("SIGKILL");
-    }, 1500);
+    terminator.terminate();
   };
-  if (input.signal) {
-    if (input.signal.aborted) abort();
-    else input.signal.addEventListener("abort", abort, { once: true });
-  }
+  const onAbort = () => abort();
+  if (input.signal?.aborted) abort();
+  else input.signal?.addEventListener("abort", onAbort, { once: true });
+  child.once("error", (cause) => {
+    transportError ||= cause.code === "ENOENT" ? "Claude Code CLI (`claude`) is not installed or not on PATH." : cause.message;
+  });
+  child.stdin.on("error", (cause) => {
+    if (!aborted) transportError ||= `could not send prompt to Claude Code CLI: ${cause.message}`;
+  });
+  child.stdin.end(prompt);
   const promise = (async () => {
     emit({ type: "agent_start" });
-    const stderrPromise = readStderr(child);
-    const stdoutPromise = readJsonLines(child, emit, streamState);
-    const exitCode = await waitForClose(child);
-    await stdoutPromise.catch(() => {
-    });
-    const stderr = await stderrPromise.catch(() => "");
-    if (killTimer) clearTimeout(killTimer);
-    const finalText = streamState.text || resultText(streamState.result) || (exitCode === 0 ? "" : resultError(streamState.result, stderr));
-    const finalMessage = buildAssistantMessage2({
-      model: streamState.model,
-      text: finalText,
-      result: streamState.result,
-      exitCode,
-      aborted,
-      stderr
-    });
-    if (!streamState.started) emit({ type: "message_start", message: finalMessage });
-    emit({ type: "message_end", message: finalMessage });
-    const messages = [finalMessage];
-    emit({ type: "agent_end", messages });
-    if (exitCode !== 0 && stderr.trim().length > 0 && !aborted) {
-      process.stderr.write(`[worker:claude-code] ${stderr.trim()}
+    try {
+      const stderrPromise = readStderr(child);
+      const stdoutPromise = readJsonLines(child, emit, streamState).catch((cause) => {
+        transportError ||= cause instanceof Error ? cause.message : String(cause);
+        terminator.terminate();
+      });
+      const exitCode = await waitForClose(child);
+      await stdoutPromise;
+      const stderr = await stderrPromise.catch(() => "");
+      const finalText = streamState.text || resultText(streamState.result) || (exitCode === 0 ? "" : resultError(streamState.result, stderr));
+      const finalMessage = buildAssistantMessage2({
+        model: streamState.model,
+        text: finalText,
+        result: streamState.result,
+        exitCode,
+        aborted,
+        stderr,
+        transportError
+      });
+      if (!streamState.started) emit({ type: "message_start", message: finalMessage });
+      emit({ type: "message_end", message: finalMessage });
+      const messages = [finalMessage];
+      emit({ type: "agent_end", messages });
+      if (finalMessage.stopReason === "error" && finalMessage.errorMessage && !aborted) {
+        process.stderr.write(`[worker:claude-code] ${finalMessage.errorMessage}
 `);
+      }
+      return { messages, exitCode: finalMessage.stopReason === "stop" ? 0 : 1 };
+    } finally {
+      settled = true;
+      terminator.cleanup();
+      input.signal?.removeEventListener("abort", onAbort);
     }
-    return { messages, exitCode: exitCode === 0 ? 0 : 1 };
   })();
-  return {
-    promise,
-    abort
-  };
+  return { promise, abort };
 }
 
 // src/engine/worker-runtime-capabilities.ts
@@ -5491,6 +5014,7 @@ var FOLDED_WITH_DIFF = {
   failureExcerpt: true
 };
 var TOOL_PRESENTATION = {
+  [ToolNames.Evidence]: FOLDED,
   [ToolNames.Read]: FOLDED,
   [ToolNames.Grep]: FOLDED,
   [ToolNames.Find]: FOLDED,
@@ -5509,6 +5033,8 @@ var TOOL_PRESENTATION = {
   [ToolNames.Tasks]: FOLDED,
   [ToolNames.Ledger]: FOLDED,
   [ToolNames.Panes]: FOLDED,
+  [ToolNames.Limitation]: FOLDED,
+  [ToolNames.Decide]: FOLDED,
   [ToolNames.WebFetch]: FOLDED,
   [ToolNames.AskUser]: FOLDED,
   [ToolNames.Artifact]: FOLDED
@@ -5520,9 +5046,9 @@ function readStringField(args, key) {
 }
 function classifyResourceRead(toolName, args) {
   if (toolName !== ToolNames.Read) return null;
-  const path5 = readStringField(args, "path");
-  if (path5 === null) return null;
-  const normalized = path5.replace(/\\/g, "/");
+  const path4 = readStringField(args, "path");
+  if (path4 === null) return null;
+  const normalized = path4.replace(/\\/g, "/");
   const base = normalized.split("/").pop() ?? "";
   if (base === "SKILL.md") return "skill";
   if (base === "CLIO-CODER.md") return "handbook";
@@ -5891,6 +5417,13 @@ var exactMutationPolicy = {
 };
 var TOOL_METADATA = {
   // OBSERVE: read-class, parallel, envelope + shared turn budget.
+  [ToolNames.Evidence]: {
+    objective: "Inspect canonical evidence, trust status, gate decisions, and findings.",
+    uiLabel: "Evidence",
+    retrySafety: "idempotent",
+    resultSizePolicy: summaryPolicy("Inspect one run with evidence(mode=run, runId=<id>) to narrow the output."),
+    costLatency: "local_medium"
+  },
   [ToolNames.Read]: {
     objective: "Read exact UTF-8 file content with line and byte bounds.",
     uiLabel: "Read",
@@ -6078,6 +5611,30 @@ var TOOL_METADATA = {
     costLatency: "local_fast",
     promptHint: 'When the operator asks to see a dispatched agent ("show me the tester"), call panes(action="show", target=<agent id>).'
   },
+  [ToolNames.Limitation]: {
+    objective: "Record what the turn could not verify and why as a ledger receipt.",
+    uiLabel: "Limitation",
+    retrySafety: "idempotent",
+    resultSizePolicy: {
+      kind: "exact",
+      maxBytes: 4096,
+      followUpHint: "Call limitation again with a narrower scope if the first call was rejected."
+    },
+    costLatency: "local_fast"
+  },
+  [ToolNames.Decide]: {
+    objective: "Record a design decision with its rejected alternatives and rationale on the session decision board.",
+    uiLabel: "Decide",
+    // A repeated call with the same key supersedes the earlier record, so
+    // the surface as a whole is not retry safe.
+    retrySafety: "not_retry_safe",
+    resultSizePolicy: {
+      kind: "exact",
+      maxBytes: 4096,
+      followUpHint: "The decision ref in the result is what receipts and commits cite."
+    },
+    costLatency: "local_fast"
+  },
   // RETRIEVE: network-class.
   [ToolNames.WebFetch]: {
     objective: "Fetch HTTP(S) text for explicit external research.",
@@ -6142,7 +5699,7 @@ function builtin(spec, sourceInfo) {
 
 // src/domains/agents/result-contract-filesystem.ts
 init_esm_shims();
-import { existsSync as existsSync2, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import { existsSync, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
 function nodeResultContractFilesystem() {
   return {
     readFile(filePath) {
@@ -6153,7 +5710,7 @@ function nodeResultContractFilesystem() {
       }
     },
     pathExists(filePath) {
-      return existsSync2(filePath);
+      return existsSync(filePath);
     },
     isDirectory(filePath) {
       return statSync2(filePath, { throwIfNoEntry: false })?.isDirectory() === true;
@@ -6163,7 +5720,7 @@ function nodeResultContractFilesystem() {
 
 // src/domains/safety/run-effects.ts
 init_esm_shims();
-import path4 from "node:path";
+import path3 from "node:path";
 var ENUMERABLE_ACTION_CLASSES = /* @__PURE__ */ new Set(["read", "write"]);
 function toolWritesOpaquely(toolName) {
   return !ENUMERABLE_ACTION_CLASSES.has(classify({ tool: toolName }).actionClass);
@@ -6215,11 +5772,11 @@ function createRunEffectsRecorder(cwd, options = {}) {
       const verificationCommand = validationCommandOf(toolName, args, "grounding");
       const opaque = toolWritesOpaquely(toolName);
       if (!opaque && paths.length === 0 && validationCommand === null && verificationCommand === null) return;
-      const base = typeof args?.cwd === "string" && args.cwd.length > 0 ? path4.resolve(cwd, args.cwd) : cwd;
+      const base = typeof args?.cwd === "string" && args.cwd.length > 0 ? path3.resolve(cwd, args.cwd) : cwd;
       pending.set(toolCallId, {
         tool: toolName,
         toolCallId,
-        paths: paths.map((target) => path4.resolve(base, target)),
+        paths: paths.map((target) => path3.resolve(base, target)),
         validationCommand,
         verificationCommand,
         opaque
@@ -6287,8 +5844,8 @@ function claimConflicts(body, live, runId) {
   }
   return conflicts;
 }
-function citedPathKey(path5) {
-  const trimmed = path5.trim();
+function citedPathKey(path4) {
+  const trimmed = path4.trim();
   if (trimmed.length === 0) return trimmed;
   const absolute = isAbsolute(trimmed);
   const candidate = absolute ? relative(process.cwd(), trimmed) : trimmed;
@@ -6300,21 +5857,21 @@ function corroboration(entries) {
   const runsByPath = /* @__PURE__ */ new Map();
   for (const entry of entries) {
     if (entry.body.kind !== "finding") continue;
-    const path5 = entry.body.path === void 0 ? void 0 : citedPathKey(entry.body.path);
-    if (path5 === void 0) continue;
-    const runs = runsByPath.get(path5) ?? [];
+    const path4 = entry.body.path === void 0 ? void 0 : citedPathKey(entry.body.path);
+    if (path4 === void 0) continue;
+    const runs = runsByPath.get(path4) ?? [];
     if (!runs.includes(entry.runId)) runs.push(entry.runId);
-    runsByPath.set(path5, runs);
+    runsByPath.set(path4, runs);
   }
   const byEntryId = /* @__PURE__ */ new Map();
   for (const entry of entries) {
     if (entry.body.kind !== "finding") continue;
-    const path5 = entry.body.path;
-    if (path5 === void 0) {
+    const path4 = entry.body.path;
+    if (path4 === void 0) {
       byEntryId.set(entry.id, "ungrounded lead");
       continue;
     }
-    const runs = runsByPath.get(citedPathKey(path5)) ?? [];
+    const runs = runsByPath.get(citedPathKey(path4)) ?? [];
     byEntryId.set(entry.id, runs.length >= 2 ? "corroborated" : "uncorroborated");
   }
   return { byEntryId, byPath: runsByPath };
@@ -6381,7 +5938,7 @@ function renderAll(entries) {
 // src/engine/claude/tool-safety.ts
 init_esm_shims();
 import { performance as performance2 } from "node:perf_hooks";
-function isRecord7(value) {
+function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function stringField(record3, ...keys) {
@@ -6392,8 +5949,8 @@ function stringField(record3, ...keys) {
   return void 0;
 }
 function pathArgs(input) {
-  const path5 = stringField(input, "file_path", "filePath", "path", "notebook_path", "source", "target");
-  return path5 ? { ...input, path: path5 } : { ...input };
+  const path4 = stringField(input, "file_path", "filePath", "path", "notebook_path", "source", "target");
+  return path4 ? { ...input, path: path4 } : { ...input };
 }
 function commandArgs(input, cwd) {
   const command = stringField(input, "command", "cmd", "shell", "input", "description") ?? JSON.stringify(input);
@@ -6654,7 +6211,7 @@ function emitClaudeToolPermissionDecision(input) {
   return decision;
 }
 function coerceToolInput(value) {
-  return isRecord7(value) ? value : {};
+  return isRecord6(value) ? value : {};
 }
 
 export {
@@ -6692,14 +6249,6 @@ export {
   cancelledAskUserResult,
   finalizeAskUserInterviewForHost,
   createAskUserTool,
-  resolveDispatchPathScope,
-  declaredScopeReplacementDiagnostic,
-  declaredScopeReplacementNotice,
-  inferredScopeParentTokenDiagnostic,
-  inferredScopeParentTokenNotice,
-  declaredScopeIntent,
-  narrowDispatchIntentToReadOnly,
-  normalizeDispatchIntent,
   assertApprovedAssignmentRoute,
   approvedRouteCandidates,
   assertApprovedRecoveryCapability,
@@ -6759,4 +6308,4 @@ export {
   isTerminalRunEnvelope,
   runKindSupportsLiveSteering
 };
-//# sourceMappingURL=chunk-PAJQJ7BS.js.map
+//# sourceMappingURL=chunk-75W7L2E2.js.map