@iowarp/clio-coder 0.4.5 → 0.4.7

package/src/domains/dispatch/extension.ts

@@ -1,3 +1,7 @@
+import { parseWorkerContextSeed } from "../../worker/context-seed.js";
+import { WORKER_STDIN_FRAME_MAX_BYTES } from "../../worker/protocol.js";
+import { WORKER_CONTEXT_PREAMBLE } from "../context/worker/select.js";
+import { persistWorkerContextSeed } from "../context/worker/store.js";
 /**
  * Dispatch domain wire-up (post-W5).
  *
@@ -29,7 +33,7 @@ import {
 } from "../../core/response-schema.js";
 import { isSkillActivation, type SkillActivation } from "../../core/skill-activation.js";
 import { rawDurationMs } from "../../core/timers.js";
-import { isBuiltinToolName, type ToolName, ToolNames } from "../../core/tool-names.js";
+import { isBuiltinToolName, isHarnessExtensionToolName, type ToolName, ToolNames } from "../../core/tool-names.js";
 import {
 	type AcpDelegationRunHandle,
 	type AcpDelegationRunInput,
@@ -72,6 +76,7 @@ import {
 } from "../agents/spec.js";
 import type { ConfigContract } from "../config/contract.js";
 import type { ContextContract, ProjectPromptContext, ProjectStructuredContext } from "../context/contract.js";
+import { enabledHarnessExtensionToolNames } from "../extensions/command-tools.js";
 import type { MiddlewareContract } from "../middleware/contract.js";
 import { workerSafetyOneLiner } from "../prompts/compiler.js";
 import type { PromptsContract } from "../prompts/contract.js";
@@ -706,6 +711,7 @@ function reportDispatchDiagnostic(scope: string, error: unknown): void {
 }
 
 const OUTCOME_CODE_SPECIFICITY: ReadonlyArray<RunOutcomeCode> = [
+	"worker_context_exhausted",
 	"result_contract_exhausted",
 	"loop_guard_tools_disabled_exhausted",
 	"worker_tool_call_cap_exhausted",
@@ -1181,6 +1187,24 @@ export function buildDynamicPromptMessages(
 	dynamicContext: WorkerDynamicContext = {},
 ): WorkerPromptMessage[] {
 	const messages: WorkerPromptMessage[] = [];
+	if (req.contextSeed) {
+		const seed = parseWorkerContextSeed(req.contextSeed);
+		const body =
+			seed.provenance.mode === "fork"
+				? WORKER_CONTEXT_PREAMBLE
+				: seed.messages
+						.map((message) => {
+							if (message.role !== "user") throw new Error("worker context: invalid portable packet");
+							return typeof message.content === "string"
+								? message.content
+								: message.content
+										.filter((block) => block.type === "text")
+										.map((block) => block.text)
+										.join("\n");
+						})
+						.join("\n\n");
+		messages.push({ id: "dispatch-worker-context", body, contentHash: sha256(body) });
+	}
 	if (dynamicContext.workspace) {
 		const body = renderWorkerWorkspaceContext(dynamicContext.workspace);
 		messages.push({ id: "dispatch-workspace", body, contentHash: sha256(body) });
@@ -1259,6 +1283,19 @@ export function buildDynamicPromptMessages(
 	return messages;
 }
 
+function assertWorkerContextRequest(req: DispatchRequest, native: boolean): void {
+	const mode = req.context?.mode ?? "isolated";
+	if (mode === "isolated") {
+		if (req.contextSeed !== undefined) throw new Error("worker context: isolated request cannot inherit a seed");
+		return;
+	}
+	if (!req.contextSeed) throw new Error("worker context: inheritance requires a host-captured seed");
+	const seed = parseWorkerContextSeed(req.contextSeed);
+	if (seed.provenance.mode !== mode) throw new Error("worker context: seed mode differs from admitted request");
+	if (mode === "fork" && !native)
+		throw new Error("worker context: fork requires a native Pi runtime; use splice for external agents");
+}
+
 interface ResolvedTarget {
 	target: TargetDescriptor;
 	runtime: RuntimeDescriptor;
@@ -1601,6 +1638,7 @@ function effectiveToolNames(
 	 * here rather than leaving the model to spend budget finding that out.
 	 */
 	denied: ReadonlySet<string> = new Set(),
+	cwd = process.cwd(),
 ): ReadonlyArray<ToolName> {
 	if (!targetToolCapability(target)) return [];
 	// A hermetic process registers no network plane, so the worker's registry
@@ -1609,9 +1647,13 @@ function effectiveToolNames(
 	// attests; otherwise the run is refused for a mismatch instead of simply
 	// running without network.
 	const networkStripped = networkToolsDisabled();
+	const harnessTools =
+		target.runtime.kind === "http" && !writeConfined && allowedTools.some(isHarnessExtensionToolName)
+			? enabledHarnessExtensionToolNames(cwd)
+			: new Set<string>();
 	const names = allowedTools.filter(
 		(tool): tool is ToolName =>
-			isBuiltinToolName(tool) &&
+			(isBuiltinToolName(tool) || harnessTools.has(tool)) &&
 			tool !== ToolNames.AskUser &&
 			!(networkStripped && tool === ToolNames.WebFetch) &&
 			!denied.has(tool) &&
@@ -1995,6 +2037,10 @@ function buildDispatchWorkerSpec(input: DispatchWorkerSpecInput, config?: Config
 	// autonomy can only narrow (reviewer/judge runs pin read-only); a worker
 	// never exceeds the orchestrator's authority.
 	spec.autonomy = input.effectiveAutonomy;
+	if (input.req.contextSeed && input.target.runtime.kind === "http")
+		spec.contextSeed = parseWorkerContextSeed(input.req.contextSeed);
+	if (Buffer.byteLength(JSON.stringify(spec), "utf8") + 1 > WORKER_STDIN_FRAME_MAX_BYTES)
+		throw new Error("worker context: complete WorkerSpec exceeds the stdin frame budget; use a smaller splice");
 	return spec;
 }
 
@@ -3572,6 +3618,7 @@ export function createDispatchBundle(
 				providers,
 			);
 		let target = resolveTarget();
+		assertWorkerContextRequest(req, target.runtime.kind === "http");
 		const identity = (resolved: ResolvedTarget): string =>
 			JSON.stringify([
 				resolved.target.id,
@@ -3591,7 +3638,13 @@ export function createDispatchBundle(
 		const sessionAutonomy = settings?.safety.autonomy ?? "auto-edit";
 		const effectiveAutonomy = effectiveWorkerAutonomy(sessionAutonomy, req.autonomy, spec.capabilityClass);
 		const effectiveTools = withLedgerToolNarrowing(
-			effectiveToolNames(admission.allowedTools, target, pathScope.writeBoundaries.length > 0, deniedToolNames(req)),
+			effectiveToolNames(
+				admission.allowedTools,
+				target,
+				pathScope.writeBoundaries.length > 0,
+				deniedToolNames(req),
+				req.cwd ?? process.cwd(),
+			),
 			req,
 		);
 		assertPostRuntimeToolCompatibility(req.agentId, spec, effectiveTools, target);
@@ -3652,7 +3705,11 @@ export function createDispatchBundle(
 		});
 		const projectContextProvenance = projectContextProvenanceFor(tier, dynamicPromptMessages);
 		const dynamicText = dynamicPromptMessages.map((message) => message.body).join("\n\n");
-		const compiledPromptHash = promptCompositionHash([systemPrompt, dynamicText]);
+		const compiledPromptHash = promptCompositionHash([
+			systemPrompt,
+			dynamicText,
+			...(req.contextSeed ? [req.contextSeed.provenance.contentHash] : []),
+		]);
 		const staticCompositionHash = promptHash(systemPrompt);
 		const sessionShellHash = staticCompositionHash;
 		const dynamicHash = dynamicPromptMessages.length > 0 ? sha256(dynamicText) : sha256("");
@@ -3724,6 +3781,7 @@ export function createDispatchBundle(
 			// before the external agent is started.
 			dispatchResultContract(req, spec);
 		}
+		assertWorkerContextRequest(req, false);
 		if (!settings) throw new Error("dispatch: effective settings required for ACP delegation");
 		const configured = settings.integrations.externalAgents.entries.find((entry) => entry.id === agentId);
 		if (!configured) throw new Error(`dispatch: ACP delegation agent '${agentId}' not configured`);
@@ -3765,7 +3823,11 @@ export function createDispatchBundle(
 		});
 		const projectContextProvenance = projectContextProvenanceFor(tier, dynamicPromptMessages);
 		const dynamicText = dynamicPromptMessages.map((message) => message.body).join("\n\n");
-		const compiledPromptHash = promptCompositionHash([systemPrompt, dynamicText]);
+		const compiledPromptHash = promptCompositionHash([
+			systemPrompt,
+			dynamicText,
+			...(req.contextSeed ? [req.contextSeed.provenance.contentHash] : []),
+		]);
 		const staticCompositionHash = promptHash(systemPrompt);
 		const sessionShellHash = staticCompositionHash;
 		const dynamicHash = dynamicPromptMessages.length > 0 ? sha256(dynamicText) : sha256("");
@@ -3829,6 +3891,7 @@ export function createDispatchBundle(
 		const wireModelId = lifecycle.agentConfig.id;
 		assertTargetNotCoolingDown(req, targetId, runtimeId, wireModelId);
 
+		if (req.contextSeed) persistWorkerContextSeed(req.contextSeed);
 		assertBudgetAdmitsRoute(req, { rates: null, provenance: "unknown" }, settings);
 
 		const queuedIdentity =
@@ -4084,6 +4147,7 @@ export function createDispatchBundle(
 				node: LOCAL_RUN_NODE,
 				...(lifecycle.pipeline ? { pipeline: lifecycle.pipeline } : {}),
 				...(lifecycle.briefing ? { briefing: lifecycle.briefing } : {}),
+				...(req.contextSeed ? { workerContext: structuredClone(req.contextSeed.provenance) } : {}),
 				...(req.gate !== undefined ? { gate: req.gate } : {}),
 				...(req.council !== undefined ? { council: req.council } : {}),
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
@@ -4255,6 +4319,7 @@ export function createDispatchBundle(
 				node: LOCAL_RUN_NODE,
 				...(lifecycle.pipeline ? { pipeline: lifecycle.pipeline } : {}),
 				...(lifecycle.briefing ? { briefing: lifecycle.briefing } : {}),
+				...(req.contextSeed ? { workerContext: structuredClone(req.contextSeed.provenance) } : {}),
 				...(req.gate !== undefined ? { gate: req.gate } : {}),
 				...(req.council !== undefined ? { council: req.council } : {}),
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
@@ -4720,6 +4785,7 @@ export function createDispatchBundle(
 			shadow: () => observeShadowRoute(req, placed, settings),
 		});
 
+		if (req.contextSeed) persistWorkerContextSeed(req.contextSeed);
 		const queuedIdentity =
 			req.lineage === undefined && req.runIdHint !== undefined
 				? {
@@ -4776,27 +4842,34 @@ export function createDispatchBundle(
 		const safetyDecisionCounts = { allowed: 0, blocked: 0, permissionRequested: 0 };
 		const escalationCounts = { requested: 0, approved: 0, denied: 0, timedOut: 0 };
 		const blockedAttempts: SafetyBlockedAttempt[] = [];
-		const spec = buildDispatchWorkerSpec(
-			{
-				req,
-				pathScope: lifecycle.pathScope,
-				target: lifecycle.target,
-				admission: lifecycle.admission,
-				recipe: lifecycle.recipe,
-				systemPrompt: lifecycle.systemPrompt,
-				dynamicPromptMessages: lifecycle.dynamicPromptMessages,
-				promptSignature: lifecycle.promptSignature,
-				toolSignature: lifecycle.toolSignature,
-				dynamicHash: lifecycle.dynamicHash,
-				middlewareSnapshot: middleware.snapshot(),
-				protectedArtifactState,
-				apiKey: lifecycle.apiKey,
-				effectiveAutonomy: lifecycle.effectiveAutonomy,
-				budget: lifecycle.budget,
-				...(lifecycle.settings ? { settings: lifecycle.settings } : {}),
-			},
-			config ?? undefined,
-		);
+		let spec: WorkerSpec;
+		try {
+			spec = buildDispatchWorkerSpec(
+				{
+					req,
+					pathScope: lifecycle.pathScope,
+					target: lifecycle.target,
+					admission: lifecycle.admission,
+					recipe: lifecycle.recipe,
+					systemPrompt: lifecycle.systemPrompt,
+					dynamicPromptMessages: lifecycle.dynamicPromptMessages,
+					promptSignature: lifecycle.promptSignature,
+					toolSignature: lifecycle.toolSignature,
+					dynamicHash: lifecycle.dynamicHash,
+					middlewareSnapshot: middleware.snapshot(),
+					protectedArtifactState,
+					apiKey: lifecycle.apiKey,
+					effectiveAutonomy: lifecycle.effectiveAutonomy,
+					budget: lifecycle.budget,
+					...(lifecycle.settings ? { settings: lifecycle.settings } : {}),
+				},
+				config ?? undefined,
+			);
+		} catch (error) {
+			leaseSlot.release();
+			if (req.lineage === undefined) await failQueuedAssignment(capacityLease.assignmentId);
+			throw error;
+		}
 		// The agent ledger is orchestrator-owned. The worker sends a body and
 		// nothing else; every attribution field below is stamped from this
 		// process's own admission record, so no worker-supplied value can reach
@@ -5205,6 +5278,7 @@ export function createDispatchBundle(
 					: {}),
 				...(lifecycle.pipeline ? { pipeline: lifecycle.pipeline } : {}),
 				...(lifecycle.briefing ? { briefing: lifecycle.briefing } : {}),
+				...(req.contextSeed ? { workerContext: structuredClone(req.contextSeed.provenance) } : {}),
 				...(req.gate !== undefined ? { gate: req.gate } : {}),
 				...(req.council !== undefined ? { council: req.council } : {}),
 				...(req.plan !== undefined ? { plan: req.plan } : {}),
@@ -5445,6 +5519,7 @@ export function createDispatchBundle(
 					: {}),
 				...(lifecycle.pipeline ? { pipeline: lifecycle.pipeline } : {}),
 				...(lifecycle.briefing ? { briefing: lifecycle.briefing } : {}),
+				...(req.contextSeed ? { workerContext: structuredClone(req.contextSeed.provenance) } : {}),
 				...(steering.length > 0 ? { steering: steering.map((entry) => ({ ...entry })) } : {}),
 				...(req.gate !== undefined ? { gate: req.gate } : {}),
 				...(req.council !== undefined ? { council: req.council } : {}),
@@ -6125,9 +6200,16 @@ export function createDispatchBundle(
 			targets.targetOrder,
 			providers,
 		);
+		assertWorkerContextRequest(req, target.runtime.kind === "http");
 		enforceCapabilityGate(target.target.id, target.modelCapabilities, req.requiredCapabilities);
 		const effectiveTools = withLedgerToolNarrowing(
-			effectiveToolNames(admission.allowedTools, target, pathScope.writeBoundaries.length > 0, deniedToolNames(req)),
+			effectiveToolNames(
+				admission.allowedTools,
+				target,
+				pathScope.writeBoundaries.length > 0,
+				deniedToolNames(req),
+				req.cwd ?? process.cwd(),
+			),
 			req,
 		);
 		assertPostRuntimeToolCompatibility(req.agentId, agentSpec, effectiveTools, target);

package/src/domains/dispatch/fleet-plan.ts

@@ -1,3 +1,4 @@
+import { type FleetCommandRegistry, resolveFleetCommandArgs } from "../agents/fleet-commands.js";
 /**
  * Fleet contract to execution plan.
  *
@@ -19,9 +20,11 @@ import {
 	type FleetContract,
 	type FleetContractStep,
 	type FleetStepScope,
+	fleetCodeSteps,
 	fleetLoopCheckStepId,
 	fleetLoopRepairStepId,
 	fleetStepWriteBoundary,
+	validateFleetCommands,
 } from "../agents/fleet-contract.js";
 import type { ResultContract } from "../agents/result-contract.js";
 import type { AgentAutomationAuthority } from "../agents/spec.js";
@@ -58,6 +61,8 @@ export interface FleetPlanAgentResolution {
 }
 
 export interface CompileFleetPlanInput {
+	commands?: FleetCommandRegistry | null;
+	vars?: Readonly<Record<string, string>>;
 	contract: FleetContract;
 	/**
 	 * Rendered prompt body. It describes the whole chain, so every agent node
@@ -117,6 +122,9 @@ function declaredLoops(steps: ReadonlyArray<FleetContractStep>): Map<string, Exe
 
 export function compileFleetExecutionPlan(input: CompileFleetPlanInput): ExecutionPlan {
 	const { contract, task, resolveAgent } = input;
+	if (input.commands !== undefined) validateFleetCommands(contract, input.commands, input.vars ?? {});
+	else if (fleetCodeSteps(contract).some((step) => (step.args?.length ?? 0) > 0))
+		throw new Error("fleet code args: admission requires the operator command registry");
 	const loops = declaredLoops(contract.steps);
 	const steps: ExecutionPlanStepInput[] = [];
 
@@ -206,6 +214,7 @@ export function compileFleetExecutionPlan(input: CompileFleetPlanInput): Executi
 				kind: "code",
 				id: step.id,
 				commandId: step.command,
+				...(step.args ? { args: resolveFleetCommandArgs(step.args, input.vars) } : {}),
 				scope: step.scope,
 				dependencies,
 				...boundary(step.scope, step.writes),
@@ -225,6 +234,7 @@ export function compileFleetExecutionPlan(input: CompileFleetPlanInput): Executi
 					kind: "code",
 					id: checkId,
 					commandId: step.check.command,
+					...(step.check.args ? { args: resolveFleetCommandArgs(step.check.args, input.vars) } : {}),
 					scope: step.check.scope,
 					dependencies: checkDependencies,
 					...boundary(step.check.scope, step.check.writes),

package/src/domains/dispatch/fleet-run.ts

@@ -689,6 +689,7 @@ export async function executeFleetRun(input: ExecuteFleetRunInput): Promise<Flee
 				}
 				const originalMessage = isCommit ? commitMessageFor(step, priorResults) : null;
 				const outcome = await runCodeStep({
+					...(step.args ? { args: step.args } : {}),
 					stepId: step.id,
 					command,
 					workspaceRoot,

package/src/domains/dispatch/orphan-recovery.ts

@@ -58,6 +58,7 @@ function envelopeFromReceipt(receipt: RunReceipt, status: RunStatus, receiptPath
 		task: receipt.task,
 		...(receipt.budget !== undefined ? { budget: receipt.budget } : {}),
 		...(receipt.briefing !== undefined ? { briefing: receipt.briefing } : {}),
+		...(receipt.workerContext !== undefined ? { workerContext: receipt.workerContext } : {}),
 		...(receipt.steering !== undefined ? { steering: receipt.steering } : {}),
 		targetId: receipt.targetId,
 		wireModelId: receipt.wireModelId,

package/src/domains/dispatch/receipt-integrity.ts

@@ -155,6 +155,7 @@ export const RECEIPT_INTEGRITY_FIELD_COVERAGE = {
 	ledgerContribution: true,
 	sessionId: true,
 	briefing: true,
+	workerContext: true,
 	outcomeCode: true,
 	steering: true,
 	routeDecision: true,
@@ -232,6 +233,7 @@ function ledgerDigestFields(envelope: RunEnvelope): Record<string, unknown> {
 		promptSignature: envelope.promptSignature ?? null,
 		toolSignature: envelope.toolSignature ?? null,
 		briefing: envelope.briefing ?? null,
+		...(envelope.workerContext !== undefined ? { workerContext: envelope.workerContext } : {}),
 		outcomeCode: envelope.outcomeCode ?? null,
 		steering: envelope.steering ?? null,
 	};
@@ -379,6 +381,8 @@ function firstLedgerMismatch(receipt: RunReceipt, envelope: RunEnvelope): string
 		if (!Object.is(receiptValue, ledgerValue)) return field;
 	}
 	if (canonicalJson(receipt.briefing ?? null) !== canonicalJson(envelope.briefing ?? null)) return "briefing";
+	if (canonicalJson(receipt.workerContext ?? null) !== canonicalJson(envelope.workerContext ?? null))
+		return "workerContext";
 	if (canonicalJson(receipt.budget ?? null) !== canonicalJson(envelope.budget ?? null)) return "budget";
 	if (canonicalJson(receipt.steering ?? null) !== canonicalJson(envelope.steering ?? null)) return "steering";
 	return null;

package/src/domains/dispatch/state.ts

@@ -262,6 +262,7 @@ export function openLedger(opts?: LedgerOptions): Ledger {
 				task: input.task,
 				...(input.budget !== undefined ? { budget: structuredClone(input.budget) } : {}),
 				...(input.briefing !== undefined ? { briefing: structuredClone(input.briefing) } : {}),
+				...(input.workerContext !== undefined ? { workerContext: structuredClone(input.workerContext) } : {}),
 				...(input.steering !== undefined ? { steering: structuredClone(input.steering) } : {}),
 				targetId: input.targetId,
 				wireModelId: input.wireModelId,

package/src/domains/dispatch/types.ts

@@ -1,3 +1,4 @@
+import type { WorkerContextProvenance } from "../context/worker/contract.js";
 /**
  * Shared run + receipt types for the dispatch domain (Phase 6 slice 2).
  *
@@ -43,6 +44,7 @@ export type RunOutcome =
 export type RunOutcomeCode =
 	| "vram_capacity_fit_failure"
 	| "worker_tool_call_cap_exhausted"
+	| "worker_context_exhausted"
 	| "loop_guard_tools_disabled_exhausted"
 	| "result_contract_exhausted"
 	| "worker_final_output_missing"
@@ -52,6 +54,7 @@ export function isRunOutcomeCode(value: unknown): value is RunOutcomeCode {
 	return (
 		value === "vram_capacity_fit_failure" ||
 		value === "worker_tool_call_cap_exhausted" ||
+		value === "worker_context_exhausted" ||
 		value === "loop_guard_tools_disabled_exhausted" ||
 		value === "result_contract_exhausted" ||
 		value === "worker_final_output_missing" ||
@@ -455,6 +458,7 @@ export interface RunEnvelope {
 	budget?: RunToolBudgetEnvelope;
 	/** Present only when a bounded parent briefing was sent as dynamic task data. */
 	briefing?: RunBriefingProvenance;
+	workerContext?: WorkerContextProvenance;
 	/** Sent steering provenance in stable per-run sequence order; prose is never persisted. */
 	steering?: ReadonlyArray<RunSteeringProvenance>;
 	targetId: string;
@@ -801,6 +805,7 @@ export interface RunReceipt {
 	budget?: RunToolBudgetEnvelope;
 	/** Proof of briefing content without copying its prose into the receipt. */
 	briefing?: RunBriefingProvenance;
+	workerContext?: WorkerContextProvenance;
 	/** Sent steering provenance in stable per-run sequence order; prose is never persisted. */
 	steering?: ReadonlyArray<RunSteeringProvenance>;
 	targetId: string;

package/src/domains/dispatch/validation.ts

@@ -1,3 +1,4 @@
+import { parseWorkerContextPolicy, type WorkerContextPolicy } from "../context/worker/contract.js";
 /**
  * Validate a dispatch job spec before it enters the queue. Pure function, no
  * I/O. Accepts unknown input so callers can hand it raw JSON or CLI args
@@ -74,6 +75,7 @@ export interface JobSpec {
 	task: string;
 	/** Bounded parent-composed context delivered as untrusted dynamic task data. */
 	briefing?: string;
+	context?: WorkerContextPolicy;
 	workerProfile?: string;
 	workerRuntime?: string;
 	delegationAgentId?: string;
@@ -188,6 +190,7 @@ const KNOWN_KEYS = new Set([
 	"executionRole",
 	"task",
 	"briefing",
+	"context",
 	"workerProfile",
 	"workerRuntime",
 	"delegationAgentId",
@@ -264,6 +267,14 @@ export function validateJobSpec(spec: unknown): Validated {
 		errors.push("executionRole must be a known execution role");
 	}
 
+	let context: WorkerContextPolicy | undefined;
+	if (spec.context !== undefined) {
+		try {
+			context = parseWorkerContextPolicy(spec.context);
+		} catch (error) {
+			errors.push(error instanceof Error ? error.message : String(error));
+		}
+	}
 	let briefing: string | undefined;
 	if ("briefing" in spec && spec.briefing !== undefined) {
 		if (typeof spec.briefing !== "string") {
@@ -560,6 +571,7 @@ export function validateJobSpec(spec: unknown): Validated {
 		task: task as string,
 	};
 	if (briefing !== undefined) out.briefing = briefing;
+	if (context !== undefined) out.context = context;
 	if (typeof spec.workerProfile === "string") out.workerProfile = spec.workerProfile;
 	if (typeof spec.workerRuntime === "string") out.workerRuntime = spec.workerRuntime;
 	if (typeof spec.delegationAgentId === "string") out.delegationAgentId = spec.delegationAgentId;

package/src/domains/dispatch/workspace-checkpoint.ts

@@ -14,7 +14,7 @@ export function workspaceCheckpointRef(kind: "loop" | "compete", identity: strin
  * The immutable ref makes retries idempotent and keeps the object alive across GC. */
 export function captureWorkspaceCheckpoint(cwd: string, ref: string, message: string): string {
 	if (!/^refs\/clio-coder\/(loop|compete)\/[a-f0-9]{64}$/.test(ref)) throw new Error("invalid workspace checkpoint ref");
-	const directory = mkdtempSync(join(tmpdir(), "clio-checkpoint-index-"));
+	const directory = mkdtempSync(join(tmpdir(), "clio-coder-checkpoint-index-"));
 	const env = buildSafeToolEnv({
 		GIT_INDEX_FILE: join(directory, "index"),
 		GIT_AUTHOR_NAME: "Clio checkpoint",

package/src/domains/evidence/failure-attribution.ts

@@ -18,6 +18,7 @@ export interface EvidenceFailureFacts {
  * model, harness, or environment by guesswork.
  */
 export function attributeEvidenceFailure(facts: EvidenceFailureFacts): EvidenceTag {
+	if (facts.outcomeCode === "worker_context_exhausted") return "context-overflow";
 	if (
 		facts.outcomeCode === "worker_tool_call_cap_exhausted" ||
 		facts.outcomeCode === "loop_guard_tools_disabled_exhausted"

package/src/domains/evidence/trust-status.ts

@@ -1,3 +1,4 @@
+import { parseWorkerContextProvenance } from "../../worker/context-seed.js";
 import type { GateDecisionArtifact, GateDecisionVerification } from "../dispatch/gate-decisions.js";
 import { RUN_RECEIPT_INTEGRITY_VERSION, verifyReceiptIntegrity } from "../dispatch/receipt-integrity.js";
 import type {
@@ -72,6 +73,7 @@ export type TrustArtifactKind =
 	| "gate_decision"
 	| "briefing"
 	| "project_context"
+	| "worker_context"
 	| "autonomy_policy"
 	| "finish_contract_evidence"
 	| "evidence_bundle"
@@ -206,6 +208,7 @@ const ARTIFACT_KINDS: ReadonlySet<string> = new Set([
 	"gate_decision",
 	"briefing",
 	"project_context",
+	"worker_context",
 	"autonomy_policy",
 	"finish_contract_evidence",
 	"evidence_bundle",
@@ -423,6 +426,7 @@ export type PersistedRunReceiptTrustFacts = Pick<RunReceipt, "runId"> &
 			| "validationGrounding"
 			| "briefing"
 			| "projectContext"
+			| "workerContext"
 			| "autonomyEnforcement"
 		>
 	>;
@@ -693,8 +697,21 @@ function recordedProjectContextHash(context: RunProjectContextProvenance | undef
 	return validNoneTierProjectContext(context) ? context.contentHash : undefined;
 }
 
+function validWorkerContext(value: unknown): boolean {
+	try {
+		parseWorkerContextProvenance(value);
+		return true;
+	} catch {
+		return false;
+	}
+}
+
 function contextArtifacts(receipt: PersistedRunReceiptTrustFacts): TrustArtifactReference[] {
 	const artifacts = [receiptReference(receipt)];
+	if (receipt.workerContext !== undefined && validWorkerContext(receipt.workerContext))
+		artifacts.push(
+			sha256Reference("worker_context", `${receipt.runId}:worker-context`, receipt.workerContext.contentHash),
+		);
 	if (receipt.briefing !== undefined && validBriefing(receipt.briefing)) {
 		artifacts.push(sha256Reference("briefing", `${receipt.runId}:briefing`, receipt.briefing.contentHash));
 	}
@@ -713,10 +730,12 @@ export function adaptRunReceiptContextStatus(
 	const artifacts = contextArtifacts(receipt);
 	const source = receiptSource(receipt);
 	const briefingInvalid = receipt.briefing !== undefined && !validBriefing(receipt.briefing);
-	if (briefingInvalid) return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
+	if (briefingInvalid || (receipt.workerContext !== undefined && !validWorkerContext(receipt.workerContext)))
+		return attributed("invalid", source, DISPATCH_AUTHORITY, artifacts);
 	const context = receipt.projectContext;
 	if (context === undefined) {
-		if (receipt.briefing !== undefined) return attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
+		if (receipt.briefing !== undefined || receipt.workerContext !== undefined)
+			return attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
 		return attributed("unknown", compatibilitySource(receipt, "projectContext"), COMPATIBILITY_AUTHORITY, artifacts);
 	}
 	if (context.tier === "none") {
@@ -724,7 +743,7 @@ export function adaptRunReceiptContextStatus(
 		if (bare) {
 			// Nothing structured was sent: the axis does not apply unless a
 			// briefing was recorded, which is context of its own.
-			return receipt.briefing === undefined
+			return receipt.briefing === undefined && receipt.workerContext === undefined
 				? attributed("not_applicable", source, DISPATCH_AUTHORITY, artifacts)
 				: attributed("recorded", source, DISPATCH_AUTHORITY, artifacts);
 		}