@iowarp/clio-coder 0.4.7 → 0.4.9

package/src/interactive/renderers/tool-execution.ts

@@ -16,12 +16,13 @@ import { previewBudget, previewRows } from "./preview.js";
  */
 
 import { trustStateWord } from "../../domains/evidence/trust-projection.js";
-import { sanitizeCallTargetText } from "../../domains/safety/call-target.js";
+import { sanitizeCallTargetText, sanitizeMultilineDisplayText } from "../../domains/safety/call-target.js";
 import { redactSecretString, redactToolArgs } from "../../domains/safety/redaction.js";
 import { formatSize } from "../../engine/truncate.js";
 import { visibleWidth, wrapTextWithAnsi } from "../../engine/tui.js";
 import { classifyResourceRead, toolPresentationPolicy } from "../../tools/presentation.js";
 import { toolResultPresentationPolicy, toolResultPresentationText } from "../../tools/result-disposition.js";
+import { effectiveToolCall } from "../../tools/surface.js";
 import { mutationFactsLine } from "../mutation-preview.js";
 import type { ApprovalRequestView } from "../permission-overlay.js";
 import { clioTheme, formatCompactMs, GLYPH } from "../theme/index.js";
@@ -214,11 +215,16 @@ const PRIMARY_ARG_FIELD: Record<string, string> = {
 	bash: "command",
 	grep: "pattern",
 	find: "pattern",
+	web_read: "url",
 	web_fetch: "url",
 	git: "op",
 	verify: "check",
+	run_script: "script",
 	code_nav: "query",
 	context: "scope",
+	clio_docs: "query",
+	clio_library: "query",
+	data: "path",
 	artifact: "kind",
 	monitor: "run_id",
 	steer: "run_id",
@@ -252,10 +258,31 @@ function summarizeWebFetchArgs(args: unknown): string {
 	return truncate(jsonStringifySafe(Object.keys(compact).length > 0 ? compact : args), WEB_FETCH_ARG_PREVIEW_LIMIT);
 }
 
+/**
+ * A gateway call reads as the capability it reached: `find` and `describe`
+ * name what was asked, `call` renders the capability's own summary so a row
+ * says `git status` rather than an opaque gateway argument dump.
+ */
+function summarizeGatewayArgs(args: unknown): string {
+	if (!isPlainObject(args)) return truncate(jsonStringifySafe(redactToolArgs(args)), ARG_PREVIEW_LIMIT);
+	const op = typeof args.op === "string" ? args.op : "";
+	if (op === "find") {
+		const query = readStringField(args, "query");
+		return truncate(query === null || query.length === 0 ? "find" : `find ${query}`, ARG_PREVIEW_LIMIT);
+	}
+	const capability = readStringField(args, "capability") ?? "";
+	if (op === "describe") return truncate(`describe ${capability}`.trim(), ARG_PREVIEW_LIMIT);
+	const effective = effectiveToolCall("gateway", args);
+	if (!effective.viaGateway) return truncate(jsonStringifySafe(redactToolArgs(args)), ARG_PREVIEW_LIMIT);
+	const inner = summarizeArgs(effective.toolName, effective.args);
+	return truncate(inner.length > 0 ? `${effective.toolName} ${inner}` : effective.toolName, ARG_PREVIEW_LIMIT);
+}
+
 function summarizeArgs(toolName: string, args: unknown): string {
 	if (isEmptyArgs(args)) return "";
 	const safeArgs = redactToolArgs(args);
-	if (toolName === "web_fetch") return summarizeWebFetchArgs(safeArgs);
+	if (toolName === "web_fetch" || toolName === "web_read") return summarizeWebFetchArgs(safeArgs);
+	if (toolName === "gateway") return summarizeGatewayArgs(args);
 	const primary = capturedPrimaryArg(toolName, args);
 	if (primary !== null) return truncate(displayArg(toolName, primary), ARG_PREVIEW_LIMIT);
 	return truncate(jsonStringifySafe(safeArgs), ARG_PREVIEW_LIMIT);
@@ -589,7 +616,12 @@ function buildFieldSublineBody(
 ): string | null {
 	const value = readStringField(args, key);
 	if (value === null) return null;
-	const preview = truncate(key === "command" ? stripShellWrapperForDisplay(value) : value, ARG_PREVIEW_LIMIT);
+	// One array element is one terminal row to the diff renderer. A multi-line
+	// command or an escape sequence inside this row shifted every row below it.
+	const preview = truncate(
+		sanitizeCallTargetText(key === "command" ? stripShellWrapperForDisplay(value) : value),
+		ARG_PREVIEW_LIMIT,
+	);
 	if (options.wrapInBackticks) return `${lead}\`${preview}\``;
 	return `${lead}${preview}`;
 }
@@ -635,9 +667,32 @@ const SUBLINE_BODY_BUILDERS: Readonly<Record<string, (args: unknown) => string |
 	bash: (args) => buildFieldSublineBody(args, "command", "running ", { wrapInBackticks: true }),
 	grep: (args) => buildFieldSublineBody(args, "pattern", "searching for ", { wrapInBackticks: true }),
 	find: (args) => buildFieldSublineBody(args, "pattern", "finding ", { wrapInBackticks: true }),
+	web_read: (args) => buildFieldSublineBody(args, "url", "reading "),
 	web_fetch: (args) => buildFieldSublineBody(args, "url", "fetching "),
 	git: (args) => buildFieldSublineBody(args, "op", "git "),
 	verify: (args) => buildFieldSublineBody(args, "check", "verifying "),
+	run_script: (args) => buildFieldSublineBody(args, "script", "running ", { wrapInBackticks: true }),
+	data: (args) => {
+		const op = readStringField(args, "op") ?? "inspecting";
+		const path = readStringField(args, "path");
+		return path === null ? op : `${op} ${path}`;
+	},
+	gateway: (args) => {
+		if (!isPlainObject(args)) return null;
+		const op = typeof args.op === "string" ? args.op : "";
+		if (op === "find") {
+			const query = readStringField(args, "query");
+			return query === null || query.length === 0 ? "finding capabilities" : `finding capabilities \`${query}\``;
+		}
+		if (op === "describe") {
+			const capability = readStringField(args, "capability");
+			return capability === null ? "describing a capability" : `describing ${capability}`;
+		}
+		const effective = effectiveToolCall("gateway", args);
+		if (!effective.viaGateway) return null;
+		const inner = SUBLINE_BODY_BUILDERS[effective.toolName]?.(effective.args);
+		return inner !== null && inner !== undefined ? `${inner} (via gateway)` : `calling ${effective.toolName}`;
+	},
 	code_nav: (args) => {
 		const mode = readStringField(args, "mode");
 		const query = readStringField(args, "query")?.trim() ?? "";
@@ -715,9 +770,9 @@ function buildSublineBody(
 		}
 		return SUBLINE_BODY_BUILDERS[toolName]?.(args) ?? buildGenericToolBody(toolName, args);
 	}
-	if (toolName === "web_fetch") {
+	if (toolName === "web_fetch" || toolName === "web_read") {
 		const meta = status === undefined ? null : webFetchMeta(result);
-		const body = SUBLINE_BODY_BUILDERS.web_fetch?.(args) ?? buildGenericToolBody(toolName, args);
+		const body = SUBLINE_BODY_BUILDERS[toolName]?.(args) ?? buildGenericToolBody(toolName, args);
 		return `${body}${meta ? dim(` · ${meta}`) : ""}`;
 	}
 	if (toolName === "bash") {
@@ -909,9 +964,14 @@ function isEmptyResult(result: unknown): boolean {
 	return false;
 }
 
+/**
+ * Tool output is untrusted terminal input. Cursor movement, backspaces and
+ * carriage returns inside a row break the diff renderer's one-row-per-line
+ * accounting, so everything but the line structure is neutralized here.
+ */
 function resultText(result: unknown, limit = FULL_RESULT_PREVIEW_LIMIT): string {
-	if (typeof result === "string") return truncate(result, limit);
-	return truncate(jsonStringifySafe(result), limit);
+	const text = typeof result === "string" ? result : jsonStringifySafe(result);
+	return truncate(sanitizeMultilineDisplayText(text).text, limit);
 }
 
 function truncateRowsMiddle(rows: ReadonlyArray<string>, rowLimit: number, isError: boolean): string[] {

package/src/interactive/renderers/worker-answer.ts

@@ -0,0 +1,198 @@
+import { sanitizeMultilineDisplayText } from "../../domains/safety/call-target.js";
+import { redactSecretString } from "../../domains/safety/redaction.js";
+import { GLYPH } from "../theme/index.js";
+
+/** Sanitize complete source text before splitting, so OSC payloads cannot cross rows. */
+export function safeWorkerAnswerText(text: string): string {
+	const normalized = text
+		.replaceAll(String.fromCharCode(0x9d), "\u001b]")
+		.replaceAll(String.fromCharCode(0x9b), "\u001b[")
+		.replaceAll(String.fromCharCode(0x9c), "\u001b\\");
+	return redactSecretString(sanitizeMultilineDisplayText(normalized).text).replace(/[\p{Cf}\u0080-\u009f]/gu, "");
+}
+
+const isStringArray = (value: unknown): value is string[] =>
+	Array.isArray(value) && value.every((entry) => typeof entry === "string");
+
+function reportString(value: unknown): string | null {
+	return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
+}
+
+export interface PresentedContractAnswer {
+	lines: string[];
+	footer?: string;
+}
+
+function debuggerReport(value: Record<string, unknown>): PresentedContractAnswer | null {
+	const diagnosis = reportString(value.diagnosis);
+	const reproduction = value.reproduction;
+	if (
+		diagnosis === null ||
+		(reproduction !== "reproduced" && reproduction !== "not-reproduced" && reproduction !== "unknown") ||
+		!isStringArray(value.evidence)
+	) {
+		return null;
+	}
+	return {
+		lines: [
+			diagnosis,
+			...(value.evidence.length === 0 ? ["Evidence: none"] : ["Evidence:", ...value.evidence.map((item) => `- ${item}`)]),
+		],
+		footer: `reproduction ${reproduction}`,
+	};
+}
+
+function verifierReport(value: Record<string, unknown>): PresentedContractAnswer | null {
+	if ((value.verdict !== "pass" && value.verdict !== "fail") || !Array.isArray(value.checks)) return null;
+	const lines: string[] = [];
+	for (const raw of value.checks) {
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+		const check = raw as Record<string, unknown>;
+		const name = reportString(check.name);
+		const evidence = reportString(check.evidence);
+		if (name === null || evidence === null || typeof check.passed !== "boolean") return null;
+		lines.push(`${check.passed ? GLYPH.ok : GLYPH.error} ${name}: ${evidence}`);
+	}
+	return { lines: lines.length === 0 ? ["No checks reported."] : lines, footer: `verdict ${value.verdict}` };
+}
+
+function researchReport(value: Record<string, unknown>): PresentedContractAnswer | null {
+	if ((value.source !== "local" && value.source !== "external") || !Array.isArray(value.findings)) return null;
+	const lines: string[] = [];
+	for (const raw of value.findings) {
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+		const finding = raw as Record<string, unknown>;
+		const claim = reportString(finding.claim);
+		const evidence = reportString(finding.evidence);
+		if (claim === null || evidence === null) return null;
+		lines.push(`- ${claim}`, `  citation: ${evidence}`);
+	}
+	return { lines: lines.length === 0 ? ["No findings reported."] : lines, footer: `source ${value.source}` };
+}
+
+function worldKnowledgeReport(value: Record<string, unknown>): PresentedContractAnswer | null {
+	if (
+		(value.discovery !== "performed" &&
+			value.discovery !== "caller-supplied-only" &&
+			value.discovery !== "unavailable") ||
+		!Array.isArray(value.facts) ||
+		!isStringArray(value.synthesis) ||
+		!isStringArray(value.uncertainties) ||
+		!isStringArray(value.followUpVerification)
+	) {
+		return null;
+	}
+	const lines: string[] = [];
+	for (const raw of value.facts) {
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+		const fact = raw as Record<string, unknown>;
+		const claim = reportString(fact.claim);
+		const evidence = reportString(fact.evidence);
+		if (claim === null || evidence === null || !isStringArray(fact.sources)) return null;
+		lines.push(`- ${claim}`, `  support: ${evidence}`);
+		if (fact.sources.length > 0) lines.push(`  sources: ${fact.sources.join(", ")}`);
+	}
+	if (value.synthesis.length > 0) lines.push("Synthesis:", ...value.synthesis.map((item) => `- ${item}`));
+	if (value.uncertainties.length > 0) lines.push("Uncertainties:", ...value.uncertainties.map((item) => `- ${item}`));
+	if (value.followUpVerification.length > 0) {
+		lines.push("Verify next:", ...value.followUpVerification.map((item) => `- ${item}`));
+	}
+	return {
+		lines: lines.length === 0 ? ["No findings reported."] : lines,
+		footer: `discovery ${value.discovery}; uncertainties ${value.uncertainties.length}; follow-up ${value.followUpVerification.length}`,
+	};
+}
+
+function scoutReport(value: Record<string, unknown>): PresentedContractAnswer | null {
+	if (!Array.isArray(value.findings) || typeof value.needsSplit !== "boolean") return null;
+	const lines: string[] = [];
+	for (const raw of value.findings) {
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+		const finding = raw as Record<string, unknown>;
+		const claim = reportString(finding.claim);
+		if (claim === null) return null;
+		const path = reportString(finding.path);
+		const line = typeof finding.line === "number" && Number.isSafeInteger(finding.line) ? finding.line : null;
+		lines.push(path !== null && line !== null ? `- ${claim} — ${path}:${line}` : `- ${claim} (ungrounded lead)`);
+	}
+	if (value.needsSplit) {
+		if (!Array.isArray(value.proposedSubtasks)) return null;
+		lines.push("Split recommended:");
+		for (const raw of value.proposedSubtasks) {
+			if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
+			const subtask = raw as Record<string, unknown>;
+			const task = reportString(subtask.task);
+			const id = reportString(subtask.id);
+			if (task === null || id === null) return null;
+			lines.push(`- ${id}: ${task}`);
+		}
+	}
+	return {
+		lines: lines.length === 0 ? ["No findings reported."] : lines,
+		footer: value.needsSplit ? "split needed" : "no split needed",
+	};
+}
+
+function isObject(value: unknown): value is Record<string, unknown> {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+/** Only a whole object, optionally enclosed by one whole code fence, is a preview payload. */
+export function exactWorkerAnswerObject(text: string): Record<string, unknown> | null {
+	const trimmed = text.trim();
+	const fenced = /^```[A-Za-z0-9_-]*[^\S\r\n]*\r?\n([\s\S]*?)\r?\n```$/u.exec(trimmed);
+	const source = fenced?.[1] ?? trimmed;
+	try {
+		const value: unknown = JSON.parse(source);
+		return isObject(value) ? value : null;
+	} catch {
+		return null;
+	}
+}
+
+/** Receipt identity and conformance are facts supplied by the caller, never inferred here. */
+export function presentWorkerContractAnswer(
+	text: string,
+	contract: { kind: string; conformance: string } | undefined,
+	complete: boolean,
+	settled: boolean,
+): PresentedContractAnswer | null {
+	if (!settled || !complete || contract?.conformance !== "pass") return null;
+	const value = exactWorkerAnswerObject(text);
+	if (value === null) return null;
+	// Match complete JSON strings before numbers, so escaped property names
+	// and digits inside strings cannot bypass or confuse the token check.
+	// Conservatively keep raw Scout source if any number cannot round-trip.
+	if (contract.kind === "scout-report") {
+		for (const match of text.matchAll(/"(?:[^"\\]|\\[\s\S])*"|-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/gu)) {
+			const token = match[0];
+			if (token.startsWith('"')) continue;
+			if (!Number.isSafeInteger(Number(token)) || String(Number(token)) !== token) return null;
+		}
+	}
+	let answer: PresentedContractAnswer | null;
+	switch (contract.kind) {
+		case "debugger-report":
+			answer = debuggerReport(value);
+			break;
+		case "verifier-report":
+			answer = verifierReport(value);
+			break;
+		case "research-report":
+			answer = researchReport(value);
+			break;
+		case "world-knowledge-report":
+			answer = worldKnowledgeReport(value);
+			break;
+		case "scout-report":
+			answer = scoutReport(value);
+			break;
+		default:
+			return null;
+	}
+	if (answer === null) return null;
+	return {
+		lines: answer.lines.map(safeWorkerAnswerText),
+		...(answer.footer ? { footer: safeWorkerAnswerText(answer.footer) } : {}),
+	};
+}

package/src/interactive/renderers/worker-entry.ts

@@ -2,19 +2,21 @@ import { redactSecretString } from "../../domains/safety/redaction.js";
 import type { TranscriptDetailPolicy } from "../transcript-detail.js";
 import { transcriptDetail } from "../transcript-detail.js";
 import { previewBudget, previewRows } from "./preview.js";
+import {
+	exactWorkerAnswerObject,
+	type PresentedContractAnswer,
+	presentWorkerContractAnswer,
+	safeWorkerAnswerText,
+} from "./worker-answer.js";
+
 /** Bounded worker summaries share the main transcript's output style. */
 
-import { parseJsonObjectPayload } from "../../core/json-payload.js";
 import { trustStateWord } from "../../domains/evidence/trust-projection.js";
+import { retiredIntegrityVersionOf } from "../../domains/evidence/trust-status.js";
 import { truncateToWidth, visibleWidth, wrapTextWithAnsi } from "../../engine/tui.js";
 import { formatFooterTokens } from "../footer-panel.js";
 import { type ClioToken, clioTheme, fitUnits, formatCompactMs, GLYPH } from "../theme/index.js";
-import {
-	type WorkerEntryState,
-	type WorkerPresentedResultContract,
-	type WorkerReceiptSummary,
-	workerAskedByModel,
-} from "../worker-stream.js";
+import { type WorkerEntryState, type WorkerReceiptSummary, workerAskedByModel } from "../worker-stream.js";
 
 const theme = clioTheme();
 const dim = (text: string): string => theme.fg("dim", text);
@@ -88,7 +90,11 @@ const CHECKPOINT_PREFIX = /^\s*(?:needs_input\b|task_blocked\b|##\s*CHECKPOINT R
 const CHECKPOINT_PREVIEW_ROWS = 16;
 
 export function workerNeedsInput(entry: Pick<WorkerEntryState, "text" | "receipt">): boolean {
-	return entry.receipt !== undefined && entry.receipt.stillRunning !== true && CHECKPOINT_PREFIX.test(entry.text);
+	return (
+		entry.receipt !== undefined &&
+		entry.receipt.stillRunning !== true &&
+		CHECKPOINT_PREFIX.test(entry.text.trim().replace(/^```[A-Za-z0-9_-]*[^\S\r\n]*\r?\n/u, ""))
+	);
 }
 
 function needsInputUnit(): string {
@@ -144,152 +150,21 @@ function railLines(text: string, token: ClioToken, width: number): string[] {
 	return wrapTextWithAnsi(text, contentWidth).map((row) => `${dim(RAIL)}${theme.fg(token, row)}`);
 }
 
-/** A worker's terminal JSON payload, using the same tolerant reader as its result contract. */
-function structuredAnswer(text: string): Record<string, unknown> | null {
-	const parsed = parseJsonObjectPayload(text);
-	return parsed.ok ? parsed.value : null;
+function presentedContractAnswer(entry: WorkerEntryState): PresentedContractAnswer | null {
+	if (entry.receipt?.trust?.artifactIntegrity.state !== "verified") return null;
+	const kind = entry.receipt?.contractKind;
+	const conformance = entry.receipt?.contract;
+	return presentWorkerContractAnswer(
+		entry.text,
+		kind && conformance ? { kind, conformance } : undefined,
+		entry.droppedLines === 0 && (entry.progress?.droppedBytes ?? 0) === 0,
+		!entry.pending && !isPending(entry),
+	);
 }
 
 const isStringArray = (value: unknown): value is string[] =>
 	Array.isArray(value) && value.every((entry) => typeof entry === "string");
 
-function reportString(value: unknown): string | null {
-	return typeof value === "string" && value.trim().length > 0 ? value.trim() : null;
-}
-
-interface PresentedContractAnswer {
-	lines: string[];
-	footer?: string;
-}
-
-function debuggerReport(value: Record<string, unknown>): PresentedContractAnswer | null {
-	const diagnosis = reportString(value.diagnosis);
-	const reproduction = value.reproduction;
-	if (
-		diagnosis === null ||
-		(reproduction !== "reproduced" && reproduction !== "not-reproduced" && reproduction !== "unknown") ||
-		!isStringArray(value.evidence)
-	) {
-		return null;
-	}
-	return {
-		lines: [
-			diagnosis,
-			...(value.evidence.length === 0 ? ["Evidence: none"] : ["Evidence:", ...value.evidence.map((item) => `- ${item}`)]),
-		],
-		footer: `reproduction ${reproduction}`,
-	};
-}
-
-function verifierReport(value: Record<string, unknown>): PresentedContractAnswer | null {
-	if ((value.verdict !== "pass" && value.verdict !== "fail") || !Array.isArray(value.checks)) return null;
-	const lines: string[] = [];
-	for (const raw of value.checks) {
-		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
-		const check = raw as Record<string, unknown>;
-		const name = reportString(check.name);
-		const evidence = reportString(check.evidence);
-		if (name === null || evidence === null || typeof check.passed !== "boolean") return null;
-		lines.push(`${check.passed ? GLYPH.ok : GLYPH.error} ${name}: ${evidence}`);
-	}
-	return { lines: lines.length === 0 ? ["No checks reported."] : lines, footer: `verdict ${value.verdict}` };
-}
-
-function researchReport(value: Record<string, unknown>): PresentedContractAnswer | null {
-	if ((value.source !== "local" && value.source !== "external") || !Array.isArray(value.findings)) return null;
-	const lines: string[] = [];
-	for (const raw of value.findings) {
-		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
-		const finding = raw as Record<string, unknown>;
-		const claim = reportString(finding.claim);
-		const evidence = reportString(finding.evidence);
-		if (claim === null || evidence === null) return null;
-		lines.push(`- ${claim}`, `  citation: ${evidence}`);
-	}
-	return { lines: lines.length === 0 ? ["No findings reported."] : lines, footer: `source ${value.source}` };
-}
-
-function worldKnowledgeReport(value: Record<string, unknown>): PresentedContractAnswer | null {
-	if (
-		(value.discovery !== "performed" &&
-			value.discovery !== "caller-supplied-only" &&
-			value.discovery !== "unavailable") ||
-		!Array.isArray(value.facts) ||
-		!isStringArray(value.synthesis) ||
-		!isStringArray(value.uncertainties) ||
-		!isStringArray(value.followUpVerification)
-	) {
-		return null;
-	}
-	const lines: string[] = [];
-	for (const raw of value.facts) {
-		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
-		const fact = raw as Record<string, unknown>;
-		const claim = reportString(fact.claim);
-		const evidence = reportString(fact.evidence);
-		if (claim === null || evidence === null || !isStringArray(fact.sources)) return null;
-		lines.push(`- ${claim}`, `  support: ${evidence}`);
-		if (fact.sources.length > 0) lines.push(`  sources: ${fact.sources.join(", ")}`);
-	}
-	if (value.synthesis.length > 0) lines.push("Synthesis:", ...value.synthesis.map((item) => `- ${item}`));
-	if (value.uncertainties.length > 0) lines.push("Uncertainties:", ...value.uncertainties.map((item) => `- ${item}`));
-	if (value.followUpVerification.length > 0) {
-		lines.push("Verify next:", ...value.followUpVerification.map((item) => `- ${item}`));
-	}
-	return { lines: lines.length === 0 ? ["No findings reported."] : lines, footer: `discovery ${value.discovery}` };
-}
-
-function scoutReport(value: Record<string, unknown>): PresentedContractAnswer | null {
-	if (!Array.isArray(value.findings) || typeof value.needsSplit !== "boolean") return null;
-	const lines: string[] = [];
-	for (const raw of value.findings) {
-		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
-		const finding = raw as Record<string, unknown>;
-		const claim = reportString(finding.claim);
-		if (claim === null) return null;
-		const path = reportString(finding.path);
-		const line = typeof finding.line === "number" && Number.isSafeInteger(finding.line) ? finding.line : null;
-		lines.push(path !== null && line !== null ? `- ${claim} — ${path}:${line}` : `- ${claim} (ungrounded lead)`);
-	}
-	if (value.needsSplit) {
-		if (!Array.isArray(value.proposedSubtasks)) return null;
-		lines.push("Split recommended:");
-		for (const raw of value.proposedSubtasks) {
-			if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return null;
-			const subtask = raw as Record<string, unknown>;
-			const task = reportString(subtask.task);
-			const id = reportString(subtask.id);
-			if (task === null || id === null) return null;
-			lines.push(`- ${id}: ${task}`);
-		}
-	}
-	return {
-		lines: lines.length === 0 ? ["No findings reported."] : lines,
-		footer: value.needsSplit ? "split needed" : "no split needed",
-	};
-}
-
-function presentedContractAnswer(entry: WorkerEntryState): PresentedContractAnswer | null {
-	if (entry.receipt?.contract !== "pass" || entry.receipt.contractKind === undefined || entry.droppedLines !== 0) {
-		return null;
-	}
-	const value = structuredAnswer(entry.text);
-	if (value === null) return null;
-	const kind: WorkerPresentedResultContract = entry.receipt.contractKind;
-	switch (kind) {
-		case "debugger-report":
-			return debuggerReport(value);
-		case "verifier-report":
-			return verifierReport(value);
-		case "research-report":
-			return researchReport(value);
-		case "world-knowledge-report":
-			return worldKnowledgeReport(value);
-		case "scout-report":
-			return scoutReport(value);
-	}
-}
-
 /**
  * A mutation report as prose: the paths it changed, each validation with its
  * verdict and evidence, then the summary and commit line. Null when the object
@@ -317,16 +192,23 @@ function mutationReportLines(value: Record<string, unknown>): string[] | null {
 
 /**
  * The body's source lines. A structured answer (a result-contract JSON object)
- * never reaches the rail raw: a mutation report reads as prose, and any other
- * object is pretty-printed so its keys line up instead of wrapping mid-string.
+ * uses its receipt identity for a readable preview. Unknown objects retain
+ * their original numeric source tokens instead of being parsed and reserialized.
  * Truncated text is not one object and passes through as the prose it is.
  */
 function bodySourceLines(entry: WorkerEntryState): string[] {
-	const structured = entry.droppedLines === 0 ? structuredAnswer(entry.text) : null;
-	if (structured === null) return entry.text.split("\n");
+	if (
+		entry.pending ||
+		entry.receipt?.trust?.artifactIntegrity.state !== "verified" ||
+		entry.droppedLines !== 0 ||
+		(entry.progress?.droppedBytes ?? 0) !== 0
+	)
+		return safeWorkerAnswerText(entry.text).split("\n");
+	const structured = entry.droppedLines === 0 ? exactWorkerAnswerObject(entry.text) : null;
+	if (structured === null) return safeWorkerAnswerText(entry.text).split("\n");
 	const presented = presentedContractAnswer(entry);
 	if (presented !== null) return presented.lines;
-	return mutationReportLines(structured) ?? JSON.stringify(structured, null, 2).split("\n");
+	return mutationReportLines(structured)?.map(safeWorkerAnswerText) ?? safeWorkerAnswerText(entry.text).split("\n");
 }
 
 function bodyLines(entry: WorkerEntryState, width: number, unbounded: boolean): string[] {
@@ -334,7 +216,7 @@ function bodyLines(entry: WorkerEntryState, width: number, unbounded: boolean):
 	// its first token) gets no rail at all rather than one blank rail row.
 	if (entry.text.length === 0) return [];
 	const contentWidth = Math.max(1, width - RAIL_WIDTH);
-	const source = bodySourceLines(entry);
+	const source = unbounded ? safeWorkerAnswerText(entry.text).split("\n") : bodySourceLines(entry);
 	const capped = unbounded || source.length <= BODY_LINE_LIMIT ? source : source.slice(0, BODY_LINE_LIMIT);
 	const hiddenLines = entry.droppedLines + (source.length - capped.length);
 	const out: string[] = [];
@@ -417,6 +299,15 @@ export function renderWorkerEntryLines(
 	options: WorkerEntryRenderOptions,
 ): string[] {
 	const safeWidth = Math.max(1, Math.floor(width));
+	const integrity = entry.receipt?.trust;
+	const provenance =
+		isPending(entry) || integrity?.artifactIntegrity.state === "verified"
+			? []
+			: railLines(
+					`receipt: ${integrity ? (retiredIntegrityVersionOf(integrity.artifactIntegrity) !== null ? "seal retired" : trustStateWord("artifactIntegrity", integrity.artifactIntegrity.state)) : "integrity unavailable"}; raw output, not admitted as evidence`,
+					"warning",
+					safeWidth,
+				);
 	const quality = isPending(entry)
 		? []
 		: railLines(
@@ -434,6 +325,7 @@ export function renderWorkerEntryLines(
 			...(tools ? [tools] : []),
 			...failureLines(entry, safeWidth),
 			footerLine(entry, safeWidth),
+			...provenance,
 			...quality,
 		].map(redactSecretString);
 	}
@@ -446,14 +338,15 @@ export function renderWorkerEntryLines(
 	const summary = bodySourceLines(entry).flatMap((line) =>
 		railLines(redactSecretString(line), needsInput ? "warning" : "muted", safeWidth),
 	);
-	const actions = entry.progress
-		? [...entry.progress.recentActions]
-				.reverse()
-				.concat(entry.progress.currentAction ? [entry.progress.currentAction] : [])
-		: [];
-	const trail = actions.flatMap((action) =>
+	// Current work leads the bounded preview; completed calls remain explicitly historical.
+	const current = isPending(entry) ? entry.progress?.currentAction : null;
+	const actions = [
+		...(current ? [{ action: current, label: "now" }] : []),
+		...(entry.progress?.recentActions ?? []).map((action) => ({ action, label: "last" })),
+	];
+	const trail = actions.flatMap(({ action, label }) =>
 		railLines(
-			`${GLYPH.phaseTool} ${action.descriptor ? `${action.descriptor.verb} ${action.descriptor.object}` : action.tool}`,
+			`${GLYPH.phaseTool} ${label}: ${action.descriptor ? `${action.descriptor.verb} ${action.descriptor.object}` : action.tool}`,
 			"muted",
 			safeWidth,
 		),
@@ -466,7 +359,7 @@ export function renderWorkerEntryLines(
 		...(detail.workerRows > 0 || needsInput ? previewRows(summary, summaryRows, safeWidth, entry.pending) : []),
 		...previewRows(attemptLines(entry, safeWidth), budget(detail.errorRows), safeWidth, true),
 		...(tools ? [tools] : []),
-		...(detail.workerActivity ? previewRows(trail, budget(4), safeWidth, true) : []),
+		...(detail.workerActivity ? previewRows(trail, budget(4), safeWidth) : []),
 		...failure,
 		...(presented ? railLines(presented, "muted", safeWidth) : []),
 		...(entry.receipt?.abandonedDetail ? railLines(entry.receipt.abandonedDetail, "warning", safeWidth) : []),
@@ -478,6 +371,7 @@ export function renderWorkerEntryLines(
 					safeWidth,
 				)
 			: []),
+		...provenance,
 		...quality,
 	].map(redactSecretString);
 }

package/src/interactive/session-usage-reseed.ts

@@ -35,6 +35,7 @@ export interface SessionUsageSink {
 			output: number;
 			cacheRead: number;
 			cacheWrite: number;
+			cacheWrite1h?: number;
 			reasoningTokens: number;
 			totalTokens: number;
 			apiCalls?: number;
@@ -86,6 +87,7 @@ export function reseedSessionUsageFromLedger(
 				output: call.output,
 				cacheRead: call.cacheRead,
 				cacheWrite: call.cacheWrite,
+				...(call.cacheWrite1h === undefined ? {} : { cacheWrite1h: call.cacheWrite1h }),
 				reasoningTokens: call.reasoningTokens,
 				totalTokens: call.totalTokens,
 				apiCalls: call.apiCalls ?? 1,

package/src/interactive/side-question.ts

@@ -41,6 +41,7 @@ export interface SideQuestionUsage {
 	output: number;
 	cacheRead: number;
 	cacheWrite: number;
+	cacheWrite1h?: number;
 	reasoning: number;
 	totalTokens: number;
 	costUsd: number;
@@ -117,6 +118,7 @@ export function sideQuestionUsage(raw: unknown): SideQuestionUsage | null {
 		output,
 		cacheRead,
 		cacheWrite,
+		...(usage.cacheWrite1h === undefined ? {} : { cacheWrite1h: positive(usage.cacheWrite1h) }),
 		reasoning: positive(usage.reasoning),
 		totalTokens,
 		costUsd: positive(usage.cost?.total),