@moretea-labs/forge 1.8.0 → 1.8.1

package/supervisor/control-plane.ts

@@ -0,0 +1,868 @@
+import { randomUUID } from 'node:crypto';
+import { parseChatgptConversationIdentity } from './chatgpt-conversation';
+import { parseSupervisorCompletion, renderEffectMarker, renderSupervisorPrompt, sha256, validateEffectId } from './protocol';
+import { WorkflowSupervisorStore } from './store';
+import type { WorkflowAssistantObservation, WorkflowAssistantObservationResult, WorkflowContractValidation, WorkflowEffectKind, WorkflowSupervisorAutomationStatus, WorkflowSupervisorBrowserPollResult, WorkflowSupervisorBrowserTask, WorkflowSupervisorCompletion, WorkflowSupervisorDiscoveredConversation, WorkflowSupervisorEffect, WorkflowSupervisorLifecycleHooks, WorkflowSupervisorProjectScope, WorkflowSupervisorTask, WorkflowSupervisorTaskInput, WorkflowSupervisorTerminalState, WorkflowSupervisorValidators } from './types';
+
+function compactProjectIdentity(value: string): string {
+  return value.normalize('NFKC').toLocaleLowerCase().replace(/[^\p{L}\p{N}]+/gu, '');
+}
+
+function projectIdentityTokens(value: string): string[] {
+  return value.normalize('NFKC').toLocaleLowerCase().split(/[^\p{L}\p{N}]+/gu).filter(Boolean);
+}
+
+function boundedProjectIdentityMatch(expected: string, observed: string): boolean {
+  const compactExpected = compactProjectIdentity(expected);
+  const compactObserved = compactProjectIdentity(observed);
+  if (!compactExpected || !compactObserved) return false;
+  if (compactExpected === compactObserved) return true;
+  if (compactExpected.length < 4) return false;
+  const expectedTokens = projectIdentityTokens(expected);
+  const observedTokens = projectIdentityTokens(observed);
+  if (expectedTokens.length === 0 || expectedTokens.length >= observedTokens.length) return false;
+  return expectedTokens.every((token, index) => observedTokens[index] === token);
+}
+
+function projectSlugFromUrl(value: string): string | undefined {
+  try {
+    const parsed = new URL(value);
+    const match = /^\/g\/(g-p-[a-z0-9]+)(?:-([^/]+))?\/project\/?$/i.exec(parsed.pathname);
+    return match?.[2]?.toLocaleLowerCase();
+  } catch {
+    return undefined;
+  }
+}
+
+function projectMatchesScope(conversation: WorkflowSupervisorDiscoveredConversation, scope: WorkflowSupervisorProjectScope): boolean {
+  const names = [scope.title, ...(scope.aliases ?? [])]
+    .map((value) => value.trim().toLocaleLowerCase())
+    .filter(Boolean);
+  const projectTitle = conversation.projectTitle?.trim().toLocaleLowerCase();
+  if (projectTitle && names.some((name) => boundedProjectIdentityMatch(name, projectTitle))) return true;
+  const projectSlug = conversation.projectUrl ? projectSlugFromUrl(conversation.projectUrl) : undefined;
+  if (!projectSlug) return false;
+  return names.some((name) => boundedProjectIdentityMatch(name, projectSlug));
+}
+
+function effectId(): string { return `fx_${randomUUID().replaceAll('-', '')}`; }
+function stableEffectId(originKey: string): string {
+  return validateEffectId(`fx_${sha256(originKey).slice(0, 32)}`);
+}
+const rejectUnconfigured = async (): Promise<WorkflowContractValidation> => ({ valid: false, reason: 'validator_unconfigured' });
+
+export class WorkflowSupervisorControlPlane {
+  readonly validators: WorkflowSupervisorValidators;
+  readonly hooks: WorkflowSupervisorLifecycleHooks;
+  constructor(readonly store: WorkflowSupervisorStore, validators: Partial<WorkflowSupervisorValidators> = {}, hooks: WorkflowSupervisorLifecycleHooks = {}) {
+    this.validators = { completionContract: validators.completionContract ?? rejectUnconfigured, userBlockerPolicy: validators.userBlockerPolicy ?? rejectUnconfigured };
+    this.hooks = hooks;
+  }
+  registerTask(input: WorkflowSupervisorTaskInput): WorkflowSupervisorTask { return this.store.registerTask(input); }
+  reviseTaskObjective(input: {
+    taskId: string;
+    objective: string;
+    expectedObjectiveSha256: string;
+    requestId: string;
+    authorizedBy?: string;
+  }): { task: WorkflowSupervisorTask; changed: boolean; deduplicated: boolean; objectiveSha256: string; refreshedEffect?: WorkflowSupervisorEffect } {
+    const task = this.requireTask(input.taskId);
+    requireNonTerminalTask(this.store, task.taskId);
+    const objective = input.objective.trim();
+    if (!objective || objective.length > 8_000) throw new Error('WORKFLOW_SUPERVISOR_OBJECTIVE_INVALID');
+    if (!/^[0-9a-f]{64}$/i.test(input.expectedObjectiveSha256)) throw new Error('WORKFLOW_SUPERVISOR_OBJECTIVE_REVISION_EXPECTED_SHA_INVALID');
+    if (!input.requestId.trim()) throw new Error('WORKFLOW_SUPERVISOR_OBJECTIVE_REVISION_REQUEST_REQUIRED');
+    const pending = this.store.currentUnappliedEffect(task.taskId);
+    let refreshEffect: { effectId: string; expectedPrompt: string; prompt: string } | undefined;
+    if (pending && !this.store.latestEffectDispatch(pending.effectId)) {
+      const source = pending.sourceCompletionFingerprint ? this.store.getCompletion(pending.sourceCompletionFingerprint) : undefined;
+      const checkpoint = source?.proposal.reason === 'compact_receipt' ? undefined : source?.proposal.checkpoint;
+      refreshEffect = {
+        effectId: pending.effectId,
+        expectedPrompt: pending.prompt,
+        prompt: this.renderPrompt({ ...task, objective }, pending.effectId, pending.kind, checkpoint),
+      };
+    }
+    return this.store.reviseTaskObjective({
+      taskId: task.taskId,
+      objective,
+      expectedObjectiveSha256: input.expectedObjectiveSha256.toLowerCase(),
+      requestId: input.requestId.trim(),
+      authorizedBy: input.authorizedBy?.trim() || 'operator',
+      ...(refreshEffect ? { refreshEffect } : {}),
+    });
+  }
+  /**
+   * Explicit operator recovery. It is deliberately evidence-classified rather
+   * than a generic "try again": each class names the durable mechanical fact
+   * that makes exactly one bounded next step safe, and none of them can replay
+   * a submission whose outcome is unknown.
+   *
+   * - proven-un-applied effect at its retry ceiling -> refund the mechanical
+   *   budget once and re-dispatch that same effect;
+   * - unknown-outcome effect -> read-only reclassification only, unless the
+   *   operator explicitly authorizes retiring it so a *fresh* turn can run;
+   * - applied effect whose single provider resume is exhausted -> reserve one
+   *   new, separately identified recovery turn on the same conversation.
+   */
+  recoverTask(input: {
+    taskId: string;
+    sourceEffectId?: string;
+    requestId: string;
+    reason: string;
+    /** Explicit operator authority required to retire an outcome-unknown effect. */
+    supersedeUnknown?: boolean;
+    authorizedBy?: string;
+  }): { recoveryEffect: WorkflowSupervisorEffect; action: 'retry_authorized' | 'recovery_reserved' | 'unknown_superseded' } {
+    const task = this.requireTask(input.taskId);
+    requireNonTerminalTask(this.store, task.taskId);
+    if (!input.requestId.trim() || !input.reason.trim()) throw new Error('WORKFLOW_SUPERVISOR_RECOVERY_REASON_REQUIRED');
+    const authorizedBy = input.authorizedBy?.trim() || 'operator';
+    // Identity-stable replay first: an operator recovery already reserved for
+    // this exact source effect is the durable answer, whether or not it has
+    // since been dispatched.
+    const legacyOrigin = input.sourceEffectId ? `provider-recovery:${input.sourceEffectId}` : undefined;
+    const existingLegacy = legacyOrigin ? this.store.getEffectByOriginKey(legacyOrigin) : undefined;
+    if (existingLegacy?.taskId === task.taskId) return { recoveryEffect: existingLegacy, action: 'recovery_reserved' };
+    // The same explicit supersession decision is one durable fact; replaying it
+    // returns its replacement instead of failing on the now-retired source.
+    const supersedeOrigin = `operator-recovery:${input.sourceEffectId ?? ''}:${input.requestId}`;
+    const existingSupersede = this.store.getEffectByOriginKey(supersedeOrigin);
+    if (existingSupersede?.taskId === task.taskId) return { recoveryEffect: existingSupersede, action: 'unknown_superseded' };
+    const pending = this.store.currentUnappliedEffect(task.taskId);
+    if (input.sourceEffectId && pending && pending.effectId !== input.sourceEffectId) {
+      throw new Error('WORKFLOW_SUPERVISOR_RECOVERY_SOURCE_CHANGED');
+    }
+    if (pending) {
+      // Read-only reclassification first: a dispatch-owner pre-send return is a
+      // stronger fact than any operator decision and makes the effect retryable
+      // through the normal mechanical path.
+      if (this.store.reconcileNativePreSendFailure(pending.effectId, input.requestId)) {
+        return { recoveryEffect: pending, action: 'retry_authorized' };
+      }
+      try {
+        this.store.authorizeOperatorRetry({ effectId: pending.effectId, requestId: input.requestId, reason: input.reason, authorizedBy });
+        return { recoveryEffect: pending, action: 'retry_authorized' };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (message !== 'WORKFLOW_SUPERVISOR_RECOVERY_OUTCOME_UNKNOWN') throw error;
+        if (input.supersedeUnknown !== true) throw error;
+      }
+      // The operator explicitly decided to stop waiting on an unknown
+      // submission. Record that decision durably and reserve one *new* turn in
+      // the same transaction; the unknown effect is never resent and never
+      // silently discarded.
+      const origin = `operator-recovery:${pending.effectId}:${input.requestId}`;
+      const supersededId = stableEffectId(origin);
+      const prompt = this.renderPrompt(task, supersededId, 'recovery', undefined,
+        `The operator explicitly superseded outcome-unknown effect ${pending.effectId} (${input.requestId}): ${input.reason}. That effect is retired and must never be resent; read durable Forge state and continue this same task with one fresh turn.`);
+      const superseded = this.store.supersedeUnknownEffect({
+        effectId: pending.effectId, requestId: input.requestId, reason: input.reason, authorizedBy,
+        replacement: { effectId: supersededId, prompt },
+      });
+      return { recoveryEffect: superseded.recoveryEffect, action: 'unknown_superseded' };
+    }
+    const source = this.store.latestAppliedLeafEffectWithoutCompletion(task.taskId);
+    if (!source || (input.sourceEffectId && source.effectId !== input.sourceEffectId)) throw new Error('WORKFLOW_SUPERVISOR_RECOVERY_SOURCE_CHANGED');
+    const origin = `provider-recovery:${source.effectId}`;
+    const id = stableEffectId(origin);
+    if (this.store.providerResumeExhausted(source.effectId)) {
+      // The automatic resume ceiling is the exact mechanical fact that permits
+      // a further operator turn; without it this path must not exist.
+      const prompt = this.renderPrompt(task, id, 'recovery', undefined,
+        `The operator explicitly requested recovery (${input.requestId}): ${input.reason}. The single bounded provider resume for applied effect ${source.effectId} is exhausted; the source effect remains applied and must not be replayed. Read durable Forge state and continue this same task.`);
+      return { recoveryEffect: this.store.reserveOperatorProviderRecovery({
+        taskId: task.taskId, sourceEffectId: source.effectId, requestId: input.requestId, reason: input.reason,
+        authorizedBy, originKey: origin, effectId: id, prompt,
+      }), action: 'recovery_reserved' };
+    }
+    const prompt = this.renderPrompt(task, id, 'recovery', undefined,
+      `The user explicitly requested recovery (${input.requestId}): ${input.reason}. Preserve the prior applied effect and all completed source work; read durable state and continue this same task. This is one operator-authorized recovery, not a reset of automatic recovery or dispatch budgets.`);
+    return { recoveryEffect: this.store.reserveOperatorRecovery({
+      taskId: task.taskId, sourceEffectId: source.effectId, requestId: input.requestId, reason: input.reason, effectId: id, prompt,
+    }), action: 'recovery_reserved' };
+  }
+  reserveEnrollment(taskId: string, canonicalEffectId?: string): WorkflowSupervisorEffect {
+    const task = this.requireTask(taskId);
+    // A task that already reached a terminal supervisor action is not deliverable.
+    // Reserving another enrollment effect for it produced an "enrolled" result that
+    // could never be delivered, so the ControllerRound waited forever instead of
+    // surfacing the operator/provider decision that terminal state represents.
+    requireNonTerminalTask(this.store, task.taskId);
+    const originKey = `enrollment:${taskId}`;
+    // Supervisor owns the outer-turn effect identity. A lower ControllerRound may
+    // rotate when the semantic Work carrier changes, but the Requirement + exact
+    // conversation task must keep one enrollment effect. Reuse by origin before
+    // considering a newer lower-layer canonical effect id.
+    const existingForOrigin = this.store.getEffectByOriginKey(originKey);
+    let effect: WorkflowSupervisorEffect;
+    if (existingForOrigin) {
+      if (existingForOrigin.taskId !== taskId) throw new Error(`WORKFLOW_SUPERVISOR_EFFECT_TASK_CONFLICT:${originKey}`);
+      if (existingForOrigin.kind !== 'enrollment') throw new Error(`WORKFLOW_SUPERVISOR_EFFECT_KIND_CONFLICT:${originKey}`);
+      effect = existingForOrigin;
+    } else {
+      const id = canonicalEffectId ? validateEffectId(canonicalEffectId) : stableEffectId(originKey);
+      const existing = this.store.getEffect(id);
+      if (existing) {
+        if (existing.taskId !== taskId) throw new Error(`WORKFLOW_SUPERVISOR_EFFECT_TASK_CONFLICT:${originKey}`);
+        if (existing.kind !== 'enrollment') throw new Error(`WORKFLOW_SUPERVISOR_EFFECT_KIND_CONFLICT:${originKey}`);
+        effect = existing;
+      } else {
+        effect = this.store.reserveEffect({ taskId, effectId: id, kind: 'enrollment', originKey, prompt: this.renderPrompt(task, id, 'enrollment') });
+      }
+    }
+    const inheritedDispatch = this.hooks.inheritedEffectDispatch?.(task, effect);
+    if (inheritedDispatch && !this.store.effectApplied(effect.effectId)) {
+      this.store.recordEffectDispatchStarted(
+        effect.effectId,
+        inheritedDispatch.generation,
+        inheritedDispatch.dispatchId,
+        inheritedDispatch.evidence,
+      );
+    }
+    return effect;
+  }
+  observeEffect(input: { effectId: string; observationId: string; outcome: 'applied' | 'not_applied' | 'unknown'; evidence?: Record<string, unknown> }): void {
+    this.store.recordEffectObservation(validateEffectId(input.effectId), input.observationId, input.outcome, input.evidence);
+  }
+  getTask(taskId: string): WorkflowSupervisorTask | undefined { return this.store.getTask(taskId); }
+  getTaskByConversationId(conversationId: string): { task: WorkflowSupervisorTask; terminal?: WorkflowSupervisorTerminalState } | undefined {
+    const task = this.store.getTaskByConversationId(conversationId);
+    if (!task) return undefined;
+    const terminal = this.store.terminalAction(task.taskId);
+    return { task, ...(terminal ? { terminal } : {}) };
+  }
+  listTasks(activeOnly = false): WorkflowSupervisorTask[] {
+    const tasks = this.store.listTasks();
+    return activeOnly ? tasks.filter((task) => !this.store.terminalAction(task.taskId)) : tasks;
+  }
+  stopTask(taskId: string, reason = 'Stopped by operator request.'): { taskId: string; terminal: 'STOPPED'; deduplicated: boolean } {
+    return this.store.stopTask(taskId, reason);
+  }
+  bindBootstrapConversation(input: { taskId: string; conversationId: string; conversationUrl: string }): WorkflowSupervisorTask {
+    const identity = parseChatgptConversationIdentity(input.conversationUrl);
+    if (identity.conversationId !== input.conversationId) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_CONVERSATION_MISMATCH');
+    const pendingMigration = this.store.freshConversationMigrationContext(input.taskId);
+    const task = this.store.bindBootstrapConversation(input.taskId, identity.conversationId, identity.canonicalUrl);
+    this.hooks.bootstrapConversationBound?.(task, pendingMigration ? {
+      migratedFromConversationId: pendingMigration.fromConversationId,
+      migrationRequestId: pendingMigration.requestId,
+    } : undefined);
+    return task;
+  }
+  getEffect(id: string): WorkflowSupervisorEffect | undefined { return this.store.getEffect(validateEffectId(id)); }
+  /** Read-only stall classification for one task; no lifecycle authority. */
+  taskStall(taskId: string): ReturnType<WorkflowSupervisorStore['taskStall']> { return this.store.taskStall(this.requireTask(taskId).taskId); }
+  /**
+   * Explicit operator move of one task's exact conversation. Chatting in a new
+   * conversation is never an automatic answer to provider backpressure: a 429 is
+   * answered by fewer requests, and only a conversation that is durably unusable
+   * is replaced. Requires the caller's expected current conversation so a stale
+   * decision cannot silently move a task that already advanced.
+   */
+  migrateConversation(input: { taskId: string; expectedConversationId: string; conversationId?: string; conversationUrl?: string; fresh?: boolean; requestId: string; reason: string; authorizedBy?: string }): { taskId: string; conversationId: string; conversationUrl: string; migrated: boolean; freshConversation?: boolean } {
+    const task = this.requireTask(input.taskId);
+    requireNonTerminalTask(this.store, task.taskId);
+    if (!input.requestId.trim() || !input.reason.trim()) throw new Error('WORKFLOW_SUPERVISOR_MIGRATION_REASON_REQUIRED');
+    if (input.fresh === true) {
+      if (input.conversationId?.trim() || input.conversationUrl?.trim()) throw new Error('WORKFLOW_SUPERVISOR_MIGRATION_FRESH_CONVERSATION_CONFLICT');
+      const origin = `fresh-conversation:${task.taskId}:${input.requestId}`;
+      const effectId = stableEffectId(origin);
+      const migrated = this.store.migrateToFreshConversation({
+        taskId: task.taskId,
+        expectedConversationId: input.expectedConversationId,
+        requestId: input.requestId,
+        reason: input.reason,
+        authorizedBy: input.authorizedBy?.trim() || 'operator',
+        // A fresh conversation has no prior turns, so the replacement turn must
+        // carry the objective again instead of the bare "继续。" continuation.
+        replacement: { effectId, prompt: this.renderPrompt(task, effectId, 'enrollment') },
+      });
+      return { taskId: migrated.task.taskId, conversationId: migrated.task.conversationId, conversationUrl: migrated.task.conversationUrl, migrated: migrated.migrated, freshConversation: migrated.migrated };
+    }
+    if (!input.conversationId?.trim() || !input.conversationUrl?.trim()) throw new Error('WORKFLOW_SUPERVISOR_MIGRATION_CONVERSATION_REQUIRED');
+    const identity = parseChatgptConversationIdentity(input.conversationUrl);
+    if (identity.conversationId !== input.conversationId) throw new Error('WORKFLOW_SUPERVISOR_MIGRATION_CONVERSATION_MISMATCH');
+    const migrated = this.store.migrateConversation({
+      taskId: task.taskId,
+      expectedConversationId: input.expectedConversationId,
+      conversationId: identity.conversationId,
+      conversationUrl: identity.canonicalUrl,
+      requestId: input.requestId,
+      reason: input.reason,
+      authorizedBy: input.authorizedBy?.trim() || 'operator',
+    });
+    return {
+      taskId: migrated.task.taskId, conversationId: migrated.task.conversationId,
+      conversationUrl: migrated.task.conversationUrl, migrated: migrated.migrated,
+    };
+  }
+  /** Mechanical provider re-dispatch budget for one effect, used by recovery to surface exhaustion. */
+  effectDispatchBudget(effectId: string): ReturnType<WorkflowSupervisorStore['effectDispatchBudget']> {
+    return this.store.effectDispatchBudget(validateEffectId(effectId));
+  }
+  continuationProof(input: { repoId?: string; activeReleaseId: string; notBefore: string }) { return this.store.continuationProof(input); }
+  browserDiscoverySnapshot() { return this.store.discoverySnapshot(); }
+  bootstrapProjectUrl(taskId: string): string {
+    const task = this.requireTask(taskId);
+    const scope = this.hooks.projectScopeForTask?.(task);
+    const title = scope?.title.trim();
+    if (!scope || !title) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_PROJECT_SCOPE_REQUIRED');
+    const projects = new Map<string, string>();
+    for (const conversation of this.store.discoverySnapshot().conversations) {
+      if (!projectMatchesScope(conversation, scope)) continue;
+      const value = conversation.projectUrl?.trim();
+      if (!value) continue;
+      try {
+        const parsed = new URL(value);
+        if (parsed.protocol !== 'https:' || parsed.hostname !== 'chatgpt.com') continue;
+        const match = /^\/g\/(g-p-[a-z0-9]+)(?:-[^/]+)?\/project\/?$/i.exec(parsed.pathname);
+        if (!match) continue;
+        const projectId = match[1]!.toLocaleLowerCase();
+        projects.set(projectId, `https://chatgpt.com/g/${match[1]!}/project`);
+      } catch {
+        continue;
+      }
+    }
+    if (projects.size === 0) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_PROJECT_NOT_DISCOVERED');
+    if (projects.size !== 1) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_PROJECT_AMBIGUOUS');
+    return [...projects.values()][0]!;
+  }
+  recordBrowserDiscovery(source: string, conversations: readonly WorkflowSupervisorDiscoveredConversation[]) {
+    // Discovery is durable observation only. Creating a Supervisor task/effect
+    // requires the explicit Work/current-conversation enrollment path.
+    return this.store.recordDiscovery(source, conversations);
+  }
+  browserProjectScopes(): WorkflowSupervisorProjectScope[] {
+    const scopes = new Map<string, WorkflowSupervisorProjectScope>();
+    for (const task of this.store.listTasks()) {
+      const scope = this.hooks.projectScopeForTask?.(task);
+      if (!scope?.title.trim()) continue;
+      const normalized: WorkflowSupervisorProjectScope = {
+        title: scope.title.trim().slice(0, 512),
+        ...(scope.aliases?.length ? { aliases: [...new Set(scope.aliases.map((value) => value.trim().slice(0, 256)).filter(Boolean))].slice(0, 16) } : {}),
+        ...(scope.repoId?.trim() ? { repoId: scope.repoId.trim().slice(0, 256) } : {}),
+        ...(scope.controllerHome?.trim() ? { controllerHome: scope.controllerHome.trim().slice(0, 2048) } : {}),
+      };
+      const key = `${normalized.title.toLocaleLowerCase()}\n${normalized.repoId ?? ''}\n${normalized.controllerHome ?? ''}`;
+      scopes.set(key, normalized);
+    }
+    return [...scopes.values()];
+  }
+  browserTasks(): WorkflowSupervisorBrowserTask[] {
+    const active = this.store.listTasks().flatMap((task) => {
+      if (this.store.terminalAction(task.taskId)) return [];
+      // A Computer page is an ephemeral delivery surface. An applied effect
+      // awaiting its receipt remains eligible for read-only provider-health
+      // observation, so a terminal stream error can reserve its one bounded
+      // recovery effect. Rendered assistant text never decides the workflow;
+      // only a persisted receipt does that.
+      const pending = this.store.nextBrowserEffect(task.taskId);
+      // Any applied effect awaiting its receipt stays observable, including one
+      // whose bounded provider resume is already exhausted. Observation is
+      // read-only and mints nothing, so keeping it attached is what lets late
+      // provider/completion evidence resolve the turn instead of stranding it.
+      const providerTurnAwaitingReceipt = this.store.hasAppliedEffectAwaitingCompletion(task.taskId);
+      if (!pending && !providerTurnAwaitingReceipt) return [];
+      // Bootstrap has no exact conversation yet, so it cannot satisfy the
+      // normal Work-boundary predicate. Its already-persisted enrollment effect
+      // is the narrow authority to acquire one through Computer exactly once.
+      if (!task.conversationId.startsWith('bootstrap:')) {
+        // Optional lower-layer Work/Requirement compatibility must be task-local.
+        // A stale legacy task is allowed to fail closed, but it must never poison
+        // the global Supervisor delivery queue and block standalone tasks.
+        try { if (pending?.mode === 'send' && !this.browserTaskActive(task)) return []; }
+        catch { return []; }
+      }
+      return [{ task, mode: pending?.mode ?? 'reconcile' }];
+    });
+    // Fresh effects are bounded work with no prior external mutation. Outcome-
+    // unknown reconciliation remains durable and exactly-once, but cannot be
+    // allowed to monopolize the single native browser lane indefinitely.
+    active.sort((left, right) => {
+      const leftPriority = left.mode === 'send' ? 0 : 1;
+      const rightPriority = right.mode === 'send' ? 0 : 1;
+      return leftPriority - rightPriority;
+    });
+    return active.map(({ task }) => browserTask(task));
+  }
+  browserPoll(input: { conversationId: string; conversationUrl: string }): WorkflowSupervisorBrowserPollResult {
+    const task = this.requireBrowserTask(input.conversationId, input.conversationUrl);
+    const projection = browserTask(task);
+    const terminal = this.store.terminalAction(task.taskId);
+    // STOPPED is an operator terminal, not a semantic completion. Return it
+    // before the normal external-effect activity gate so an already-running
+    // browser poll observes the stop and cannot turn it into another command.
+    if (terminal === 'STOPPED') return { authorized: true, task: projection, terminal };
+    if (terminal) return { authorized: true, task: projection, terminal };
+    const pending = this.store.nextBrowserEffect(task.taskId);
+    // Read-only reconciliation belongs to the already-started effect even when
+    // its Work/conversation binding was retired. It never authorizes a resend.
+    if (pending?.mode === 'send' && !this.browserTaskActive(task)) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_TASK_INACTIVE');
+    if (!pending) return { authorized: true, task: projection };
+    return { authorized: true, task: projection, command: { mode: pending.mode, effectId: pending.effect.effectId, kind: pending.effect.kind, prompt: pending.effect.prompt, dispatchGeneration: pending.generation, conversationId: task.conversationId, conversationUrl: task.conversationUrl } };
+  }
+  bootstrapPoll(taskId: string): WorkflowSupervisorBrowserPollResult {
+    const task = this.requireTask(taskId);
+    if (!task.conversationId.startsWith('bootstrap:')) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_NOT_PENDING');
+    const terminal = this.store.terminalAction(task.taskId);
+    if (terminal === 'STOPPED') return { authorized: true, task: browserTask(task), terminal };
+    const pending = this.store.nextBrowserEffect(task.taskId);
+    if (pending) {
+      return {
+        authorized: true,
+        task: browserTask(task),
+        command: {
+          mode: pending.mode,
+          effectId: pending.effect.effectId,
+          kind: pending.effect.kind,
+          prompt: pending.effect.prompt,
+          dispatchGeneration: pending.generation,
+          conversationId: task.conversationId,
+          conversationUrl: task.conversationUrl,
+        },
+      };
+    }
+    // Provider application and bootstrap identity binding are separate facts.
+    // A confirmed send may already be applied while ChatGPT has only just
+    // canonicalized the new /c/<conversation> route. Keep one read-only
+    // reconciliation command for that applied effect so the exact conversation
+    // can be bound without manufacturing another provider generation.
+    const applied = this.store.latestAppliedEffectWithoutCompletion(task.taskId);
+    if (!applied) return { authorized: true, task: browserTask(task) };
+    const dispatch = this.store.latestEffectDispatch(applied.effectId);
+    return {
+      authorized: true,
+      task: browserTask(task),
+      command: {
+        mode: 'reconcile',
+        effectId: applied.effectId,
+        kind: applied.kind,
+        prompt: applied.prompt,
+        dispatchGeneration: dispatch?.generation ?? 1,
+        conversationId: task.conversationId,
+        conversationUrl: task.conversationUrl,
+      },
+    };
+  }
+  bootstrapBeginEffect(input: { taskId: string; effectId: string; dispatchId: string; dispatchGeneration: number }): boolean {
+    const task = this.requireTask(input.taskId);
+    requireNonTerminalTask(this.store, task.taskId);
+    if (!task.conversationId.startsWith('bootstrap:')) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_NOT_PENDING');
+    const pending = this.store.nextBrowserEffect(task.taskId);
+    if (!pending || pending.effect.effectId !== validateEffectId(input.effectId) || pending.mode !== 'send') return false;
+    return this.store.recordEffectDispatchStarted(input.effectId, input.dispatchGeneration, input.dispatchId, {
+      surface: 'computer-bootstrap',
+      ...(this.hooks.effectDispatchEvidence?.({ task, effectId: input.effectId }) ?? {}),
+    });
+  }
+  bootstrapObserveEffect(input: { taskId: string; effectId: string; observationId: string; outcome: 'applied' | 'not_applied' | 'unknown'; evidence?: Record<string, unknown> }): void {
+    const task = this.requireTask(input.taskId);
+    const effect = this.store.getEffect(validateEffectId(input.effectId));
+    if (!effect || effect.taskId !== task.taskId) throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_EFFECT_TASK_MISMATCH');
+    if (input.outcome === 'not_applied') {
+      // This path is private to the provider dispatch adapter after its exact
+      // dispatch function returned without clicking Send. It is therefore a
+      // mechanical negative proof, unlike a missing post-send conversation
+      // marker, which remains outcome-unknown and must reconcile.
+      const pending = this.store.nextBrowserEffect(task.taskId);
+      const dispatch = this.store.latestEffectDispatch(effect.effectId);
+      if (!pending || pending.effect.effectId !== effect.effectId || pending.mode !== 'reconcile'
+        || !dispatch || pending.generation !== dispatch.generation) {
+        throw new Error('WORKFLOW_SUPERVISOR_BOOTSTRAP_NOT_APPLIED_PROOF_INVALID');
+      }
+      this.store.recordEffectNotAppliedProof(effect.effectId, input.observationId, {
+        surface: 'computer-bootstrap',
+        dispatch_generation: dispatch.generation,
+        pre_send_rejection: true,
+      });
+      return;
+    }
+    const evidence = { surface: 'computer-bootstrap', ...(input.evidence ?? {}) };
+    this.observeEffect({ effectId: effect.effectId, observationId: input.observationId, outcome: input.outcome, evidence });
+    if (input.outcome === 'applied') this.hooks.effectApplied?.(task, effect, { observationId: input.observationId, evidence });
+  }
+  /** Local Computer preparation returned before Send intent; persist in the existing effect ledger. */
+  recordProviderPreparationFailure(input: { taskId: string; effectId: string; reasonCode: string }): void {
+    const task = this.requireTask(input.taskId);
+    const effect = this.store.getEffect(input.effectId);
+    if (effect?.taskId !== task.taskId) throw new Error('WORKFLOW_SUPERVISOR_PRE_SEND_EFFECT_TASK_MISMATCH');
+    this.store.recordEffectPreparationFailure(input.effectId, input.reasonCode);
+  }
+
+  browserBeginEffect(input: { conversationId: string; conversationUrl: string; effectId: string; dispatchId: string; dispatchGeneration: number; evidence?: Record<string, unknown> }): { started: boolean; mode: 'send' | 'reconcile'; generation: number } {
+    const task = this.requireBrowserTask(input.conversationId, input.conversationUrl);
+    requireNonTerminalTask(this.store, task.taskId);
+    const pending = this.store.nextBrowserEffect(task.taskId);
+    const effectId = validateEffectId(input.effectId);
+    if (!pending || pending.effect.effectId !== effectId) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_EFFECT_NOT_CURRENT');
+    if (pending.mode !== 'send' || pending.generation !== input.dispatchGeneration) return { started: false, mode: 'reconcile', generation: pending.generation };
+    // Re-check immediately before committing dispatch; a queued browser command
+    // must not outlive an explicit conversation rebind.
+    if (!this.browserTaskActive(task)) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_TASK_INACTIVE');
+    const snapshot = browserSnapshot(input.evidence);
+    if (!snapshot || browserTextHasEffect(snapshot.latestUserText, effectId) || !this.browserSnapshotMatchesSource(task, pending.effect, snapshot)) {
+      return { started: false, mode: 'reconcile', generation: pending.generation };
+    }
+    const dispatchEvidence = {
+      surface: typeof input.evidence?.surface === 'string' ? input.evidence.surface.slice(0, 128) : 'chrome-extension',
+      baseline_user_sha256: browserTextSha256(snapshot.latestUserText),
+      baseline_assistant_sha256: sha256(snapshot.latestAssistantResponse),
+      baseline_has_source_completion: Boolean(pending.effect.sourceCompletionFingerprint),
+      ...(this.hooks.effectDispatchEvidence?.({ task, effectId }) ?? {}),
+    };
+    const started = this.store.recordEffectDispatchStarted(effectId, input.dispatchGeneration, input.dispatchId, dispatchEvidence);
+    return { started, mode: started ? 'send' : 'reconcile', generation: input.dispatchGeneration };
+  }
+  browserObserveEffect(input: { conversationId: string; conversationUrl: string; effectId: string; observationId: string; outcome: 'applied' | 'not_applied' | 'unknown'; evidence?: Record<string, unknown> }): { recorded: true } {
+    const task = this.requireBrowserTask(input.conversationId, input.conversationUrl);
+    const effect = this.store.getEffect(validateEffectId(input.effectId));
+    if (!effect || effect.taskId !== task.taskId) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_EFFECT_TASK_MISMATCH');
+    if (input.outcome !== 'not_applied') {
+      const evidence = sanitizeBrowserEvidence(input.evidence);
+      this.observeEffect({ effectId: effect.effectId, observationId: input.observationId, outcome: input.outcome, evidence });
+      if (input.outcome === 'applied') this.hooks.effectApplied?.(task, effect, { observationId: input.observationId, evidence });
+      return { recorded: true };
+    }
+    // A rendered page can still be stale, including an empty composer and the
+    // exact pre-send history. Absence in that page is never proof that the
+    // provider rejected a submission. Only the dispatch owner can attest a
+    // mechanical pre-send failure (bootstrapObserveEffect); browser observers
+    // cannot authorize re-dispatch of an outcome-unknown mutation.
+    this.store.recordEffectObservation(effect.effectId, input.observationId, 'unknown', {
+      ...sanitizeBrowserEvidence(input.evidence), reconciliation: true, reason: 'not_applied_proof_incomplete',
+    });
+    return { recorded: true };
+  }
+  /** Dispatch-owner attestation. Only the adapter that reserved this generation may call it. */
+  browserObserveDispatchFailure(input: { conversationId: string; conversationUrl: string; effectId: string; observationId: string; dispatchGeneration: number; reason: string; surface?: string }): void {
+    const task = this.requireBrowserTask(input.conversationId, input.conversationUrl);
+    const effect = this.store.getEffect(input.effectId);
+    if (effect?.taskId !== task.taskId) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_EFFECT_TASK_MISMATCH');
+    const dispatch = this.store.latestEffectDispatch(input.effectId);
+    if (dispatch?.generation !== input.dispatchGeneration) throw new Error('WORKFLOW_SUPERVISOR_DISPATCH_GENERATION_CHANGED');
+    this.store.recordEffectNotAppliedProof(input.effectId, input.observationId, {
+      surface: input.surface?.trim().slice(0, 128) || 'macos-native', reason: input.reason, send_clicked: false, dispatch_generation: input.dispatchGeneration,
+      // This call is the dispatch owner's own mechanical return, produced before
+      // any Send click. Marking it as a pre-send rejection is what lets the one
+      // bounded budget refund apply, exactly as the bootstrap path does; without
+      // it a purely local obstacle permanently exhausted the effect.
+      pre_send_rejection: true,
+    });
+  }
+  browserObserveProviderTurn(input: { conversationId: string; conversationUrl: string; generating: boolean; latestAssistantResponse: string; providerActivityText?: string; providerFailureCode?: string; receiptMissing?: boolean; observedAtMs: number; graceMs: number }): { state: 'inactive' | 'none' | 'generating' | 'idle_pending' | 'recovery_reserved' | 'exhausted'; recoveryEffect?: WorkflowSupervisorEffect } {
+    const task = this.requireBrowserTask(input.conversationId, input.conversationUrl);
+    if (!this.browserTaskActiveForExternalEffect(task)) return { state: 'inactive' };
+    const sourceEffect = this.store.latestAppliedEffectWithoutCompletion(task.taskId);
+    if (!sourceEffect) return { state: 'none' };
+    const recoveryId = stableEffectId(`provider-recovery:${sourceEffect.effectId}`);
+    const providerFailureCode = input.providerFailureCode?.trim();
+    const recoveryReason = providerFailureCode
+      ? `Applied Supervisor effect ${sourceEffect.effectId} ended with provider failure ${providerFailureCode} before a committed Supervisor completion. Resume from durable Forge state; the source effect remains applied and must not be replayed.`
+      : `Applied Supervisor effect ${sourceEffect.effectId} stopped making observable provider progress without a committed Supervisor completion. Resume from durable Forge state; the source effect remains applied and must not be replayed.`;
+    return this.store.observeProviderTurn({
+      taskId: task.taskId,
+      effectId: sourceEffect.effectId,
+      generating: input.generating,
+      receiptMissing: input.receiptMissing === true,
+      assistantDigest: sha256(`${input.latestAssistantResponse}\n${input.providerActivityText ?? ''}`),
+      providerFailureCode,
+      observedAtMs: input.observedAtMs,
+      graceMs: input.graceMs,
+      recovery: { effectId: recoveryId, prompt: this.renderPrompt(task, recoveryId, 'recovery', undefined, recoveryReason) },
+    });
+  }
+  async browserObserveAssistant(input: { conversationId: string; conversationUrl: string; responseText: string }): Promise<WorkflowAssistantObservationResult> {
+    const task = this.requireBrowserTask(input.conversationId, input.conversationUrl);
+    return await this.observeAssistantTurn({ taskId: task.taskId, conversationId: task.conversationId, responseText: input.responseText });
+  }
+
+  /**
+   * Repair the crash boundary where a CONTINUE completion was durably committed
+   * before successor reservation finished in a previous Runtime. This never
+   * replays the provider response; it only reads the committed causal receipt and
+   * reserves the exactly-once successor effect.
+   */
+  async reconcileCommittedContinuations(limit = 16): Promise<{ scanned: number; reconciled: number }> {
+    const completions = this.store.listContinueCompletionsAwaitingSuccessor(limit);
+    let reconciled = 0;
+    for (const completion of completions) {
+      const task = this.store.getTask(completion.taskId);
+      if (!task || this.store.terminalAction(task.taskId)) continue;
+      const committed = this.reserveContinuation(task, completion);
+      if (committed.successorEffect) reconciled += 1;
+    }
+
+    // A non-terminal Supervisor task must always have one derivable causal
+    // obligation: an unapplied effect, an applied effect awaiting completion,
+    // or a committed completion whose successor/terminal resolution can be
+    // reconstructed from durable facts. Registration is intentionally a
+    // separate transaction from effect reservation, so a Runtime crash between
+    // them must converge here instead of leaving an "active" inert task.
+    const inertTasks = this.store.listTasksWithoutCausalObligation(limit);
+    for (const task of inertTasks) {
+      if (this.store.terminalAction(task.taskId)) continue;
+      const latest = this.store.getLatestCompletion(task.taskId);
+      if (!latest) {
+        this.reserveEnrollment(task.taskId);
+        reconciled += 1;
+        continue;
+      }
+      if (latest.action === 'CONTINUE') {
+        const committed = this.reserveContinuation(task, latest);
+        if (committed.successorEffect) reconciled += 1;
+        continue;
+      }
+      const validator = latest.action === 'DONE' ? this.validators.completionContract : this.validators.userBlockerPolicy;
+      const validation = await validator(task, latest.proposal);
+      const correctionId = validation.valid ? undefined : stableEffectId(`completion:${latest.completionFingerprint}`);
+      this.store.resolveTerminal({
+        completionFingerprint: latest.completionFingerprint,
+        taskId: task.taskId,
+        action: latest.action,
+        accepted: validation.valid,
+        reason: validation.reason,
+        ...(correctionId ? {
+          correction: {
+            effectId: correctionId,
+            prompt: this.renderPrompt(task, correctionId, 'correction', latest.proposal.checkpoint, validation.reason),
+          },
+        } : {}),
+      });
+      reconciled += 1;
+    }
+    return { scanned: completions.length + inertTasks.length, reconciled };
+  }
+
+  async observeAssistantTurn(input: WorkflowAssistantObservation): Promise<WorkflowAssistantObservationResult> {
+    const task = this.requireTask(input.taskId);
+    if (task.conversationId !== input.conversationId) throw new Error('WORKFLOW_SUPERVISOR_CONVERSATION_MISMATCH');
+    const responseSha256 = sha256(input.responseText);
+    const expectedEffect = this.store.latestAppliedEffectWithoutCompletion(task.taskId)
+      ?? this.store.latestAppliedLeafEffectWithoutCompletion(task.taskId);
+    // A live applied effect always wins: an old compact receipt must never be
+    // allowed to satisfy a newer causal obligation. Only when no effect is
+    // awaiting completion may an exact persisted response hash recover the
+    // original effect context for idempotent duplicate observation.
+    const priorCompletion = expectedEffect ? undefined : this.store.getCompletionByResponseSha256(task.taskId, responseSha256);
+    const expectedEffectId = expectedEffect?.effectId ?? priorCompletion?.sourceEffectId;
+    const parsed = parseSupervisorCompletion(
+      input.responseText,
+      expectedEffectId ? { task, effectId: expectedEffectId } : undefined,
+    );
+    const sourceEffect = this.store.getEffect(parsed.proposal.sourceEffectId);
+    if (!sourceEffect || sourceEffect.taskId !== task.taskId || !this.store.effectApplied(sourceEffect.effectId)) throw new Error('WORKFLOW_SUPERVISOR_CAUSAL_EFFECT_NOT_APPLIED');
+    const explicitIdentityProtocol = sourceEffect.prompt.includes('conversation_id=') && sourceEffect.prompt.includes('task_id=') && sourceEffect.prompt.includes('supervisor_state');
+    if (parsed.proposal.conversationId && parsed.proposal.conversationId !== task.conversationId) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_CONVERSATION_MISMATCH');
+    if (parsed.proposal.taskId && parsed.proposal.taskId !== task.taskId) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_TASK_MISMATCH');
+    if (explicitIdentityProtocol && !parsed.proposal.conversationId) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_CONVERSATION_ID_REQUIRED');
+    if (explicitIdentityProtocol && !parsed.proposal.taskId) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_TASK_ID_REQUIRED');
+    if (explicitIdentityProtocol && !parsed.proposal.supervisorState) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_STATE_REQUIRED');
+    if (explicitIdentityProtocol && !parsed.proposal.activeScope) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_ACTIVE_SCOPE_REQUIRED');
+    const expectedScope = typeof task.completionContract.requirement_id === 'string' && task.completionContract.requirement_id.trim()
+      ? `requirement:${task.completionContract.requirement_id.trim()}`
+      : typeof task.continuationPolicy.active_scope === 'string' && task.continuationPolicy.active_scope.trim()
+        ? task.continuationPolicy.active_scope.trim()
+        : undefined;
+    if (expectedScope && parsed.proposal.activeScope && parsed.proposal.activeScope !== expectedScope) throw new Error('WORKFLOW_SUPERVISOR_RESPONSE_ACTIVE_SCOPE_MISMATCH');
+    const controlBlockSha256 = sha256(parsed.controlBlock);
+    const completionFingerprint = sha256(jsonIdentity(task.taskId, task.conversationId, parsed.proposal.sourceEffectId, responseSha256, controlBlockSha256));
+    const completion: WorkflowSupervisorCompletion = { completionFingerprint, taskId: task.taskId, sourceEffectId: parsed.proposal.sourceEffectId, action: parsed.proposal.action, responseSha256, controlBlockSha256, proposal: parsed.proposal, committedAt: new Date().toISOString() };
+    const terminal = this.store.terminalAction(task.taskId);
+    if (terminal) throw new Error(`WORKFLOW_SUPERVISOR_TASK_TERMINAL:${terminal}`);
+
+    if (parsed.proposal.action === 'CONTINUE') {
+      const committed = this.reserveContinuation(task, completion);
+      return { action: 'CONTINUE', completionFingerprint, terminal: false, successorEffect: committed.successorEffect!, deduplicated: committed.deduplicated };
+    }
+    const committed = this.store.commitCompletion(completion);
+
+    const validator = parsed.proposal.action === 'DONE' ? this.validators.completionContract : this.validators.userBlockerPolicy;
+    const validation = await validator(task, parsed.proposal);
+    const correctionId = validation.valid ? undefined : stableEffectId(`completion:${completionFingerprint}`);
+    const resolved = this.store.resolveTerminal({ completionFingerprint, taskId: task.taskId, action: parsed.proposal.action, accepted: validation.valid, reason: validation.reason,
+      ...(correctionId ? { correction: { effectId: correctionId, prompt: this.renderPrompt(task, correctionId, 'correction', parsed.proposal.reason === 'compact_receipt' ? undefined : parsed.proposal.checkpoint, validation.reason) } } : {}) });
+    return { action: parsed.proposal.action, completionFingerprint, terminal: validation.valid, ...(resolved.successorEffect ? { successorEffect: resolved.successorEffect } : {}), validation, deduplicated: committed.deduplicated || resolved.deduplicated };
+  }
+
+  /**
+   * The autonomous transport records its final state through the Forge tool
+   * call, not through text rendered in the ChatGPT page.  The exact task and
+   * applied effect are derived locally; callers cannot select a different
+   * conversation or effect by supplying model-authored identifiers.
+   */
+  async observeAutomationReceipt(input: {
+    taskId: string;
+    conversationId: string;
+    status: WorkflowSupervisorAutomationStatus;
+    receiptId: string;
+  }): Promise<WorkflowAssistantObservationResult | { recorded: true }> {
+    if (input.status === 'working') return { recorded: true };
+    const task = this.requireTask(input.taskId);
+    if (task.conversationId !== input.conversationId) throw new Error('WORKFLOW_SUPERVISOR_CONVERSATION_MISMATCH');
+    const terminal = this.store.terminalAction(task.taskId);
+    if (terminal) throw new Error(`WORKFLOW_SUPERVISOR_TASK_TERMINAL:${terminal}`);
+    const expectedEffect = this.store.latestAppliedEffectWithoutCompletion(task.taskId)
+      ?? this.store.latestAppliedLeafEffectWithoutCompletion(task.taskId);
+    // A provider can reuse one tool name/status in successive outer turns.
+    // Include the locally selected effect in the durable receipt identity so a
+    // later `continue` cannot replay the first effect's completion.
+    const replayCompletion = expectedEffect ? undefined : this.store.getLatestCompletion(task.taskId);
+    if (!expectedEffect && (!replayCompletion
+      || replayCompletion.proposal.checkpoint !== `automation:${input.receiptId}:${replayCompletion.sourceEffectId}`)) {
+      throw new Error('WORKFLOW_SUPERVISOR_CAUSAL_EFFECT_NOT_APPLIED');
+    }
+    const receiptForEffect = `${input.receiptId}:${expectedEffect?.effectId ?? replayCompletion!.sourceEffectId}`;
+    const responseText = `automation:${input.status}:${receiptForEffect}`;
+    const responseSha256 = sha256(responseText);
+    const priorCompletion = expectedEffect ? undefined : this.store.getCompletionByResponseSha256(task.taskId, responseSha256);
+    const sourceEffect = expectedEffect ?? (priorCompletion ? this.store.getEffect(priorCompletion.sourceEffectId) : undefined);
+    if (!sourceEffect || sourceEffect.taskId !== task.taskId || !this.store.effectApplied(sourceEffect.effectId)) {
+      throw new Error('WORKFLOW_SUPERVISOR_CAUSAL_EFFECT_NOT_APPLIED');
+    }
+    const action = input.status === 'continue' ? 'CONTINUE' : input.status === 'done' ? 'DONE' : 'NEEDS_USER';
+    const proposal = {
+      action: action as 'CONTINUE' | 'DONE' | 'NEEDS_USER',
+      sourceEffectId: sourceEffect.effectId,
+      checkpoint: `automation:${receiptForEffect}`,
+      reason: 'automation_tool_receipt',
+      evidence: [],
+      conversationId: task.conversationId,
+      taskId: task.taskId,
+      supervisorState: action === 'CONTINUE' ? 'running' as const : action === 'DONE' ? 'done' as const : 'needs_user' as const,
+    };
+    const controlBlockSha256 = sha256(responseText);
+    const completionFingerprint = sha256(jsonIdentity(task.taskId, task.conversationId, sourceEffect.effectId, responseSha256, controlBlockSha256));
+    const completion: WorkflowSupervisorCompletion = { completionFingerprint, taskId: task.taskId, sourceEffectId: sourceEffect.effectId, action: proposal.action, responseSha256, controlBlockSha256, proposal, committedAt: new Date().toISOString() };
+    if (proposal.action === 'CONTINUE') {
+      const committed = this.reserveContinuation(task, completion);
+      return { action: 'CONTINUE', completionFingerprint, terminal: false, successorEffect: committed.successorEffect!, deduplicated: committed.deduplicated };
+    }
+    const committed = this.store.commitCompletion(completion);
+    const validation = proposal.action === 'DONE'
+      ? await this.validators.completionContract(task, proposal)
+      : await this.validators.userBlockerPolicy(task, proposal);
+    const correctionId = validation.valid ? undefined : stableEffectId(`completion:${completionFingerprint}`);
+    const resolved = this.store.resolveTerminal({
+      completionFingerprint, taskId: task.taskId, action: proposal.action, accepted: validation.valid, reason: validation.reason,
+      ...(correctionId ? { correction: { effectId: correctionId, prompt: this.renderPrompt(task, correctionId, 'correction', proposal.checkpoint, validation.reason) } } : {}),
+    });
+    return { action: proposal.action, completionFingerprint, terminal: validation.valid, ...(resolved.successorEffect ? { successorEffect: resolved.successorEffect } : {}), validation, deduplicated: committed.deduplicated || resolved.deduplicated };
+  }
+
+  /** Model CONTINUE and its causal successor commit in the same authority transaction. */
+  private reserveContinuation(task: WorkflowSupervisorTask, completion: WorkflowSupervisorCompletion) {
+    const nextId = stableEffectId(`completion:${completion.completionFingerprint}`);
+    const checkpoint = completion.proposal.reason === 'compact_receipt' ? undefined : completion.proposal.checkpoint;
+    return this.store.commitCompletion(completion, {
+      effectId: nextId,
+      kind: 'continuation',
+      prompt: this.renderPrompt(task, nextId, 'continuation', checkpoint),
+      // Rebuild from the same durable goal in a new logical conversation after
+      // a complete 15-receipt cycle; never migrate an uncompleted mutation.
+      ...(task.continuationPolicy.kind === 'standalone_supervisor'
+        ? { freshEnrollmentPrompt: this.renderPrompt(task, nextId, 'enrollment') } : {}),
+    });
+  }
+
+  private renderPrompt(
+    task: WorkflowSupervisorTask,
+    effectId: string,
+    kind: WorkflowEffectKind,
+    checkpoint?: string,
+    correctionReason?: string,
+    lowerLayerContext?: string,
+  ): string {
+    const canonicalObjective = this.hooks.canonicalObjectiveForTask?.(task)?.trim();
+    const promptTask = canonicalObjective ? { ...task, objective: canonicalObjective } : task;
+    const cognition = this.hooks.advisoryCognitionForTask?.(promptTask);
+    return renderSupervisorPrompt(promptTask, effectId, kind, checkpoint, correctionReason, lowerLayerContext, cognition);
+  }
+
+  private browserTaskActive(task: WorkflowSupervisorTask): boolean { return this.hooks.browserTaskActive?.(task) ?? true; }
+  private browserTaskActiveForExternalEffect(task: WorkflowSupervisorTask): boolean {
+    return this.store.hasAppliedEffectAwaitingCompletion(task.taskId) || this.browserTaskActive(task);
+  }
+
+  /**
+   * Progress is a mechanical change in the canonical Work this turn is meant to
+   * advance, never the provider's willingness to answer again. Both endpoints of
+   * the comparison are durable facts: the Work projection captured in this
+   * effect's dispatch evidence and the current projection. A missing signal on
+   * either side is unknown, so it proves neither progress nor its absence.
+   */
+  private automationTurnChangedNothing(task: WorkflowSupervisorTask, effectId: string): boolean {
+    const dispatched = boundedBrowserText(this.store.latestEffectDispatch(effectId)?.evidence.work_progress_fingerprint, 256);
+    const current = boundedBrowserText(this.hooks.workProgressFingerprint?.(task), 256);
+    return Boolean(dispatched && current && dispatched === current);
+  }
+
+  private browserSnapshotMatchesSource(task: WorkflowSupervisorTask, effect: WorkflowSupervisorEffect, snapshot: { latestUserText: string; latestAssistantResponse: string }): boolean {
+    if (!effect.sourceCompletionFingerprint) return true;
+    const completion = this.store.getCompletion(effect.sourceCompletionFingerprint);
+    if (!completion || completion.taskId !== task.taskId) return false;
+    // Text-parsed completions are causally anchored to the exact assistant page
+    // response that produced the Supervisor receipt. Automation tool receipts are
+    // different: their responseSha256 hashes the synthetic durable receipt carrier,
+    // not text rendered in ChatGPT. The page can also collapse the prior automated
+    // prompt to ordinary visible prose, so neither the response hash nor its effect
+    // marker is a valid prerequisite for delivering the already-reserved successor.
+    // The durable receipt has already bound task, conversation, and source effect;
+    // retain that local causal fence and skip only the unavailable page-text proof.
+    const automationToolReceipt = completion.proposal.reason === 'automation_tool_receipt';
+    const sourceEffect = this.store.getEffect(completion.sourceEffectId);
+    if (!sourceEffect || sourceEffect.taskId !== task.taskId) return false;
+    if (automationToolReceipt) return true;
+    if (sha256(snapshot.latestAssistantResponse) !== completion.responseSha256) return false;
+    return normalizeBrowserText(snapshot.latestUserText) === normalizeBrowserText(sourceEffect.prompt)
+      || browserTextHasEffect(snapshot.latestUserText, sourceEffect.effectId);
+  }
+
+  private requireTask(taskId: string): WorkflowSupervisorTask { const task = this.store.getTask(taskId); if (!task) throw new Error('WORKFLOW_SUPERVISOR_TASK_UNKNOWN'); return task; }
+  private requireBrowserTask(conversationId: string, conversationUrl: string): WorkflowSupervisorTask {
+    const observed = parseChatgptConversationIdentity(conversationUrl);
+    if (observed.conversationId !== conversationId) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_CONVERSATION_MISMATCH');
+    const task = this.store.getTaskByConversationId(conversationId);
+    if (!task) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_CONVERSATION_NOT_ENROLLED');
+    const registered = parseChatgptConversationIdentity(task.conversationUrl);
+    // Project routing is presentation metadata. A ChatGPT conversation can move
+    // between `/c/<id>` and a Project-prefixed route without becoming a different
+    // provider conversation, so the durable id is the only identity fence here.
+    if (task.conversationId !== conversationId || registered.conversationId !== conversationId || observed.conversationId !== conversationId) throw new Error('WORKFLOW_SUPERVISOR_BROWSER_CONVERSATION_MISMATCH');
+    return task;
+  }
+}
+
+function boundedBrowserText(value: unknown, max: number): string | undefined { return typeof value === 'string' && Buffer.byteLength(value, 'utf8') <= max ? value : undefined; }
+/**
+ * A task that already reached DONE/NEEDS_USER can never deliver another effect.
+ * Reserving into it reported `enrolled` and left the caller waiting for a turn
+ * that the terminal action forbids.
+ */
+function requireNonTerminalTask(store: WorkflowSupervisorStore, taskId: string): void {
+  const terminal = store.terminalAction(taskId);
+  if (terminal) throw new Error(`WORKFLOW_SUPERVISOR_TASK_TERMINAL:${terminal}`);
+}
+function browserSnapshot(evidence: Record<string, unknown> | undefined): { latestUserText: string; latestAssistantResponse: string } | undefined {
+  const latestUserText = boundedBrowserText(evidence?.latest_user_text, 128 * 1024);
+  const latestAssistantResponse = boundedBrowserText(evidence?.latest_assistant_response, 512 * 1024);
+  if (latestUserText === undefined || latestAssistantResponse === undefined) return undefined;
+  return { latestUserText, latestAssistantResponse };
+}
+function normalizeBrowserText(value: string): string { return value.replace(/\s+/g, ' ').trim(); }
+function browserTextSha256(value: string): string { return sha256(normalizeBrowserText(value)); }
+function browserTextHasEffect(value: string, effectId: string): boolean { return value.includes(renderEffectMarker(effectId)); }
+const PERSISTED_BROWSER_EVIDENCE_KEYS = new Set(['exact_user_message', 'observation_fingerprint', 'reconciliation', 'reason', 'surface', 'target_marker_present']);
+function sanitizeBrowserEvidence(evidence: Record<string, unknown> | undefined): Record<string, unknown> {
+  if (!evidence) return {};
+  const sanitized: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(evidence)) {
+    if (!PERSISTED_BROWSER_EVIDENCE_KEYS.has(key)) continue;
+    if (typeof value === 'boolean' || (typeof value === 'number' && Number.isFinite(value))) sanitized[key] = value;
+    else if (typeof value === 'string' && value.length <= 512) sanitized[key] = value;
+  }
+  return sanitized;
+}
+
+function browserTask(task: WorkflowSupervisorTask): WorkflowSupervisorBrowserTask { return { taskId: task.taskId, conversationId: task.conversationId, conversationUrl: task.conversationUrl }; }
+function jsonIdentity(...values: string[]): string { return JSON.stringify(values); }