@mrciphersmith/keryx 0.3.123 → 0.3.124

package/dist/cli.js

@@ -23312,7 +23312,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@mrciphersmith/keryx",
-    version: "0.3.123",
+    version: "0.3.124",
     description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
     private: false,
     publishConfig: {
@@ -43746,6 +43746,12 @@ var init_scope = __esm(() => {
 });
 
 // src/review/types.ts
+function cardPressFields(source) {
+  return {
+    ...source?.pressedBy === undefined ? {} : { pressedBy: source.pressedBy },
+    ...source?.pressedAt === undefined ? {} : { pressedAt: source.pressedAt }
+  };
+}
 var MANAGED_REVIEW_MODES, REVIEW_TARGET_KINDS, REVIEW_PACKAGE_STATUSES, REVIEW_COVERAGE_STATUSES, REVIEW_FINDING_SEVERITIES, REVIEW_FINDING_CONFIDENCES, FINDING_DISPOSITION_STATES, FINDING_DISMISSAL_STATES, EXTERNAL_TERMINAL_DISPOSITIONS, VERIFICATION_VERDICTS, VERIFICATION_METHODS, REASONING_CAPPED_VERDICT = "unverifiable", VERIFICATION_MODES, DEFAULT_VERIFICATION_MODE = "annotate", PREMISE_VERDICTS, HELD_PREMISE_VERDICTS;
 var init_types4 = __esm(() => {
   MANAGED_REVIEW_MODES = ["attach-review", "review-flow", "ingest"];
@@ -48993,6 +48999,7 @@ async function recordPremiseDecisionAfter(packageDir, input, applyFirst) {
     at: input.at,
     actor: PREMISE_DECISION_ACTOR,
     confirmedVia: input.confirmedVia,
+    ...cardPressFields(input),
     subject: input.subject,
     ...input.carriedFrom === undefined ? {} : { carriedFrom: input.carriedFrom }
   };
@@ -49032,7 +49039,7 @@ async function recordOperatorDecision(packageDir, decision) {
   if (!validGateDecision(decision))
     throw new Error("an operator decision needs a kind, the operator's words, a reason, how it was confirmed and the time");
   const subject = decision.subject === undefined ? undefined : { ...decision.subject.head === undefined ? {} : { head: decision.subject.head }, items: [...new Set(decision.subject.items)].sort() };
-  const entry = { ...decision, quote: decision.quote.trim(), reason: decision.reason.trim(), ...subject === undefined ? {} : { subject } };
+  const entry = { ...decision, quote: decision.quote.trim(), reason: decision.reason.trim(), ...cardPressFields(decision), ...subject === undefined ? {} : { subject } };
   await withOperatorDecisionsLock(packageDir, () => appendDecision(packageDir, entry));
   return decision;
 }
@@ -49046,6 +49053,7 @@ var OPERATOR_DECISIONS_FILE = "operator-decisions.json", OPERATOR_DECISIONS_LOCK
 var init_operator_decisions = __esm(() => {
   init_fs();
   init_json();
+  init_types4();
   OPERATOR_DECISION_KINDS = ["mutation-waiver", "reviewer-override"];
   VIAS = ["tui-card", "remote-card", "terminal"];
 });
@@ -51490,14 +51498,14 @@ function recordChunkEstimate(packageDir, estimate, mode) {
     return record;
   });
 }
-async function answerChunkEstimate(packageDir, value, quote, now = new Date, confirmedVia) {
+async function answerChunkEstimate(packageDir, value, quote, now = new Date, confirmedVia, press) {
   if (quote.trim() === "")
     throw new Error("The answer needs the operator's own words (--quote).");
   return withChunkStateLock(packageDir, async () => {
     const previous = await readChunkEstimate(packageDir);
     if (previous === undefined)
       throw new Error("No chunk estimate is recorded; run `keryx review chunks estimate` first.");
-    const record = { ...previous, asked: true, answer: { value, quote: quote.trim(), at: now.toISOString(), ...confirmedVia === undefined ? {} : { confirmedVia } } };
+    const record = { ...previous, asked: true, answer: { value, quote: quote.trim(), at: now.toISOString(), ...confirmedVia === undefined ? {} : { confirmedVia }, ...cardPressFields(press) } };
     await writeFileAtomic(path117.join(packageDir, CHUNK_ESTIMATE_FILE), `${JSON.stringify(record, null, 2)}
 `);
     return record;
@@ -51543,6 +51551,7 @@ var init_chunks_estimate = __esm(() => {
   init_chunks();
   init_blast_radius();
   init_json();
+  init_types4();
   DEFAULT_CHUNK_LIMITS = { maxPasses: DEFAULT_MAX_PASSES, inputUsdPerMTok: 3, outputUsdPerMTok: 15, secondsPerPass: 150, source: "default" };
 });
 
@@ -68822,7 +68831,7 @@ async function collectProjectRules(projectRoot, warnings) {
 function selectRules(candidates, files, taskType, bundled) {
   const selected = [];
   for (const candidate of candidates) {
-    const shadowsPath = candidate.refs.map((ref) => bundled.get(ref)).find((found) => found !== undefined);
+    const shadowsPath = candidate.refs.map((ref) => bundled.get(ref) ?? bundled.get(withoutCorePrefix(ref))).find((found) => found !== undefined);
     const matching = candidate.front.globs.filter((glob) => files.some((file) => matchesAnyGlobWithBraces(file, [glob])));
     const base = { candidate, ...shadowsPath !== undefined ? { shadows: shadowsPath } : {} };
     if (matching.length > 0) {
@@ -69095,7 +69104,7 @@ var init_context_resolver = __esm(() => {
     service_api: ["code-style-patterns", "nestjs-dto", "api-contracts"]
   };
   TEST_RULES = ["tdd-workflow", "testing-conventions"];
-  CITATION = /`([^`\s]+\.mdc?)`/g;
+  CITATION = /`([^`\s#]+\.mdc?)(?:#[^`\s]*)?`/g;
 });
 
 // src/memory/relevant.ts
@@ -73358,7 +73367,9 @@ function readCoverageWaiver(dispatch) {
     return;
   const files = Array.isArray(waiver.files) ? waiver.files.filter(text2) : [];
   const via = waiver.confirmedVia === "tui-card" || waiver.confirmedVia === "remote-card" ? waiver.confirmedVia : undefined;
-  return { operatorQuote: waiver.operatorQuote, time: waiver.time, files, ...via === undefined ? {} : { confirmedVia: via } };
+  const pressedBy = typeof waiver.pressedBy === "number" && Number.isSafeInteger(waiver.pressedBy) ? waiver.pressedBy : undefined;
+  const pressedAt = text2(waiver.pressedAt) ? waiver.pressedAt : undefined;
+  return { operatorQuote: waiver.operatorQuote, time: waiver.time, files, ...via === undefined ? {} : { confirmedVia: via }, ...cardPressFields({ pressedBy, pressedAt }) };
 }
 async function computeCoverage(packageDir, options = {}) {
   const research = options.research ?? await readJson4(path172.join(packageDir, "research.json"));
@@ -73458,7 +73469,7 @@ function coverageLine(report) {
   const { inScope, covered, omitted, uncovered } = report.counts;
   return `coverage: in scope ${inScope}, covered ${covered}, omitted ${omitted}${reasons === "" ? "" : ` (${reasons})`}, uncovered ${uncovered}`;
 }
-async function recordCoverageWaiver(packageDir, operatorQuote, now = new Date, confirmedVia) {
+async function recordCoverageWaiver(packageDir, operatorQuote, now = new Date, confirmedVia, press) {
   const quote = operatorQuote.replace(/-{0,2}waive[- ]?coverage/gi, "").trim();
   if (quote.length < MIN_WAIVER_QUOTE_CHARS || !/[\p{L}\p{N}]/u.test(quote)) {
     throw new Error(`--waive-coverage needs the operator's own words as its value: at least ${MIN_WAIVER_QUOTE_CHARS} characters, with letters or digits in them.`);
@@ -73472,7 +73483,7 @@ async function recordCoverageWaiver(packageDir, operatorQuote, now = new Date, c
   const uncovered = report.files.filter((entry) => entry.status === "uncovered").map((entry) => entry.file);
   if (!report.tracked || uncovered.length === 0)
     return;
-  const waiver = { operatorQuote: quote, time: now.toISOString(), files: uncovered, ...confirmedVia === undefined ? {} : { confirmedVia } };
+  const waiver = { operatorQuote: quote, time: now.toISOString(), files: uncovered, ...confirmedVia === undefined ? {} : { confirmedVia }, ...cardPressFields(press) };
   await writeFileAtomic(file, `${JSON.stringify({ ...research, dispatch: { ...dispatch, coverageWaiver: waiver } }, null, 2)}
 `);
   return waiver;
@@ -73503,6 +73514,7 @@ var init_coverage_complete = __esm(() => {
   init_chunks();
   init_blast_radius();
   init_coverage();
+  init_types4();
   init_json();
 });
 
@@ -77566,7 +77578,9 @@ function flowStateSchema() {
                     description: "The completion target the token was minted for: `pr:<url>` or `merged`."
                   }
                 }
-              }
+              },
+              pressedBy: { type: "integer", description: "Flow 464: on a remote-card token, the Telegram user id that pressed the card." },
+              pressedAt: { type: "string", description: "Flow 464: on a remote-card token, the shell's clock when the press arrived." }
             }
           }
         }
@@ -77828,7 +77842,9 @@ async function mintConfirmationToken(cwd, dir, binding, deps) {
     mintedAt: mintedAt.toISOString(),
     expiresAt: new Date(mintedAt.getTime() + CONFIRMATION_TOKEN_TTL_MS).toISOString(),
     ...binding.confirmedVia !== undefined ? { confirmedVia: binding.confirmedVia } : {},
-    ...binding.confirmationQuote !== undefined ? { confirmationQuote: binding.confirmationQuote } : {}
+    ...binding.confirmationQuote !== undefined ? { confirmationQuote: binding.confirmationQuote } : {},
+    ...binding.pressedBy !== undefined ? { pressedBy: binding.pressedBy } : {},
+    ...binding.pressedAt !== undefined ? { pressedAt: binding.pressedAt } : {}
   };
   await writeFileAtomic(confirmTokenPath2(cwd, dir), `${JSON.stringify(stored, null, 2)}
 `);
@@ -77886,7 +77902,9 @@ async function consumeConfirmationToken(cwd, dir, stored, now) {
     tokenRef: stored.tokenRef,
     mintedAt: stored.mintedAt,
     consumedAt,
-    boundTo: { kind: stored.kind, acChecksum: stored.acChecksum, target: stored.target }
+    boundTo: { kind: stored.kind, acChecksum: stored.acChecksum, target: stored.target },
+    ...stored.pressedBy !== undefined ? { pressedBy: stored.pressedBy } : {},
+    ...stored.pressedAt !== undefined ? { pressedAt: stored.pressedAt } : {}
   };
 }
 function describeConfirmationFailure(reason, flowId) {
@@ -80494,7 +80512,12 @@ function createFlowService(deps) {
           flowId: flow.id,
           acChecksum: flow.acChecksum,
           target: completionTarget({ merged: merged === true, prUrl: flow.pr.url }),
-          ...confirmation !== undefined ? { confirmedVia: confirmation.confirmedVia, confirmationQuote: confirmation.quote } : {}
+          ...confirmation !== undefined ? {
+            confirmedVia: confirmation.confirmedVia,
+            confirmationQuote: confirmation.quote,
+            ...confirmation.pressedBy !== undefined ? { pressedBy: confirmation.pressedBy } : {},
+            ...confirmation.pressedAt !== undefined ? { pressedAt: confirmation.pressedAt } : {}
+          } : {}
         }, { now: deps.now });
         flow = await save(cwd, dir, flow, "confirmation-minted", `token ${stored.tokenRef}, expires ${stored.expiresAt}`);
         return {
@@ -82187,6 +82210,7 @@ var init_unattended = __esm(() => {
     "review_comments_reply",
     "review_confirm_plan",
     "review_decide_premise",
+    "review_complete",
     "flow_confirm",
     "external_apply",
     "learn_accept",
@@ -84680,6 +84704,10 @@ var init_schedule_verify = __esm(() => {
 function cardSafe(text) {
   return text.replace(/\u001b\[[0-?]*[ -/]*[@-~]/g, "").replace(/\u001b[\]P^_][\s\S]*?(?:\u0007|\u001b\\)/g, "").replace(/\r\n|\r|\n/g, " \u23CE ").replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f\u200e\u200f\u202a-\u202e\u2066-\u2069]/g, "").replace(/\t/g, " ");
 }
+function hiddenInCard(text) {
+  return cardSafe(text) !== text || /[\p{Cf}\p{Zl}\p{Zp}]/u.test(text);
+}
+var HIDDEN_IN_CARD = "holds control, escape, newline, bidi or zero-width characters the card would hide or rewrite; send plain single-line text";
 
 // src/trigger/schedules.ts
 import { execFile as execFile4 } from "child_process";
@@ -85180,6 +85208,9 @@ function parseEvidenceLevel(report) {
   }
   return { ok: false, reason: "the evidence level must start with `static only` or `ran`" };
 }
+function evidenceLevelLine(report) {
+  return withoutFences(report).find((line) => LINE.test(line))?.trim();
+}
 var REPORT_FIELD_EVIDENCE_LEVEL = "evidence-level", LINE, SEPARATORS, PLACEHOLDER;
 var init_evidence_level = __esm(() => {
   LINE = /^\s*(?:[-*+]\s+)?(?:\*\*|__)?evidence level\s*:?\s*(?:\*\*|__)?\s*:?\s*(.*)$/i;
@@ -87995,7 +88026,7 @@ async function waiveReadiness(packageDir, selectors, operatorQuote, options = {}
   const manifest = JSON.parse(await readFile109(manifestPath, "utf8"));
   const time = (options.now ?? new Date).toISOString();
   const kept = (manifest.readiness_waivers ?? []).filter((waiver) => !ids.includes(waiver.item));
-  const added = ids.map((item) => ({ item, operator_quote: quote, time, ...options.confirmedVia === undefined ? {} : { confirmedVia: options.confirmedVia } }));
+  const added = ids.map((item) => ({ item, operator_quote: quote, time, ...options.confirmedVia === undefined ? {} : { confirmedVia: options.confirmedVia }, ...cardPressFields(options) }));
   const all = [...kept, ...added].sort((a, b) => READINESS_ITEMS.findIndex((i) => i.id === a.item) - READINESS_ITEMS.findIndex((i) => i.id === b.item));
   await writeFileAtomic(manifestPath, `${JSON.stringify({ ...manifest, readiness_waivers: all }, null, 2)}
 `);
@@ -89927,6 +89958,18 @@ async function recordDispositions(packageDir, records) {
 async function recordDispositionsLocked(packageDir, records) {
   const findingsPath = path211.join(packageDir, "findings.json");
   const findings = JSON.parse(await readFile110(findingsPath, "utf8"));
+  const pending = await resolveDispositions(findings, records);
+  for (const { finding, disposition } of pending) {
+    finding.disposition = disposition;
+  }
+  await writeFileAtomic(findingsPath, `${JSON.stringify(findings, null, 2)}
+`);
+}
+async function checkDispositions(packageDir, records) {
+  const findings = JSON.parse(await readFile110(path211.join(packageDir, "findings.json"), "utf8"));
+  await resolveDispositions(findings, records);
+}
+async function resolveDispositions(findings, records) {
   const schema = await loadSchema("review-finding");
   const dispositionSchema = schema.properties?.["disposition"];
   if (!dispositionSchema) {
@@ -89958,11 +90001,7 @@ async function recordDispositionsLocked(packageDir, records) {
     }
     pending.push({ finding, disposition });
   }
-  for (const { finding, disposition } of pending) {
-    finding.disposition = disposition;
-  }
-  await writeFileAtomic(findingsPath, `${JSON.stringify(findings, null, 2)}
-`);
+  return pending;
 }
 function embeddedFence(tag) {
   return new RegExp("^ {0,3}(`{3,}|~{3,})[^\\n]*\\bkeryx:" + tag + "\\b[^\\n]*$", "gm");
@@ -91073,22 +91112,25 @@ function sessionStartedAt(history) {
   }
   return Date.now();
 }
-function nextStep(open) {
+function closeStep(card) {
+  return card ? "call the `review_complete` card (the operator answers it; you never run `keryx review complete` yourself)" : "run `keryx review complete`";
+}
+function nextStep(open, card) {
   if (open.packageDir === "") {
-    return "Next: to continue a review opened in an earlier session, name its package (`keryx review status <review-id-or-path>`); otherwise `keryx review start --pr <n> --report <path>` opens the package; then dispatch the reviewers per slice, save each result, `keryx review ledger build <input-dir> --package <review-dir>`, `keryx review ingest ... --research <review-dir>/research.json`, then `keryx review complete`.";
+    return `Next: to continue a review opened in an earlier session, name its package (\`keryx review status <review-id-or-path>\`); otherwise \`keryx review start --pr <n> --report <path>\` opens the package; then dispatch the reviewers per slice, save each result, \`keryx review ledger build <input-dir> --package <review-dir>\`, \`keryx review ingest ... --research <review-dir>/research.json\`, then ${closeStep(card)}.`;
   }
   if (open.blockers.some((b) => /research|dispatch/.test(b))) {
-    return "Next: dispatch the reviewers per slice, build the research ledger with `keryx review ledger build <input-dir> --package <review-dir>` (it names every gap), `keryx review ingest ... --research <review-dir>/research.json`, then `keryx review complete`.";
+    return `Next: dispatch the reviewers per slice, build the research ledger with \`keryx review ledger build <input-dir> --package <review-dir>\` (it names every gap), \`keryx review ingest ... --research <review-dir>/research.json\`, then ${closeStep(card)}.`;
   }
-  return "Next: write or ingest the missing artifacts (`keryx review ingest`), then `keryx review complete`.";
+  return `Next: write or ingest the missing artifacts (\`keryx review ingest\`), then ${closeStep(card)}.`;
 }
 function nudgeLine(blocker) {
   const flat = blocker.replace(/[\u0000-\u001f\u007f-\u009f\u2028\u2029]+/g, " ").trim();
   return flat.length > MAX_NUDGE_BLOCKER_CHARS ? `${flat.slice(0, MAX_NUDGE_BLOCKER_CHARS)}\u2026` : flat;
 }
-function describeBlockers(open) {
+function describeBlockers(open, card = true) {
   if (open.blockers.length === 0)
-    return "- none listed; run `keryx review complete` to close the package";
+    return `- none listed; ${card ? "call the `review_complete` card" : "run `keryx review complete`"} to close the package`;
   const shown = open.blockers.slice(0, MAX_NUDGE_BLOCKERS).map((b) => `- ${nudgeLine(b)}`);
   const more = open.blockers.length - shown.length;
   return [...shown, ...more > 0 ? [`- \u2026 and ${more} more (\`keryx review complete\` lists them all)`] : []].join(`
@@ -91098,22 +91140,23 @@ function decideReviewGate(input) {
   const { open } = input;
   if (open === null || !input.runSeen)
     return { action: "accept" };
+  const card = input.cardAvailable !== false;
   const stalls = input.lastSignature === open.signature ? input.stalls + 1 : 0;
   if (input.continues >= MAX_REVIEW_GATE_CONTINUES || stalls >= MAX_REVIEW_GATE_STALLS) {
     return {
       action: "stop",
-      report: `Review ${open.reviewId} is not complete after ${input.continues} continue(s)` + `${stalls >= MAX_REVIEW_GATE_STALLS ? " and no new artifact in the last " + stalls : ""}. ` + `\`keryx review complete\` still refuses on:
-${describeBlockers(open)}`
+      report: `Review ${open.reviewId} is not complete after ${input.continues} continue(s)` + `${stalls >= MAX_REVIEW_GATE_STALLS ? " and no new artifact in the last " + stalls : ""}. ` + `${card ? "The review_complete card" : "`keryx review complete`"} would still be refused on:
+${describeBlockers(open, card)}`
     };
   }
   return {
     action: "continue",
     stalls,
     signature: open.signature,
-    message: `The managed review ${open.reviewId} is not finished: it is finished when \`keryx review complete\` accepts the package, not when you stop writing. ` + `It still refuses on:
-${describeBlockers(open)}
-` + `${nextStep(open)}
-` + "Do the next missing step now. Step 1 (Build Review Context Pack) has no CLI command; it is a prose step, so mark it done and move on. " + "A command that is refused is not a blocker: run `keryx review --help` for the accepted usage and retry with the right flags. " + "A plan item you marked blocked for such a reason is not blocked: mark it in_progress. " + "A tool loop guard or an empty child result is not a reason to ask the operator to resend the request or to continue: change the arguments, retry the failed pass on a smaller slice, and keep going. " + "Stop only after `review complete` succeeds, or report the one real blocker with its evidence."
+    message: `The managed review ${open.reviewId} is not finished: it is finished when the package is closed (${card ? "the operator answers the `review_complete` card and its gates pass" : "`keryx review complete` accepts it"}), not when you stop writing. ` + `It still refuses on:
+${describeBlockers(open, card)}
+` + `${nextStep(open, card)}
+` + "Do the next missing step now. Step 1 (Build Review Context Pack) has no CLI command; it is a prose step, so mark it done and move on. " + "A command that is refused is not a blocker: run `keryx review --help` for the accepted usage and retry with the right flags. " + "A plan item you marked blocked for such a reason is not blocked: mark it in_progress. " + "A tool loop guard or an empty child result is not a reason to ask the operator to resend the request or to continue: change the arguments, retry the failed pass on a smaller slice, and keep going. " + `Stop only after ${card ? "the `review_complete` card has" : "`keryx review complete` has"} closed the package, or report the one real blocker with its evidence.`
   };
 }
 var MAX_REVIEW_GATE_CONTINUES = 20, MAX_REVIEW_GATE_STALLS = 3, MAX_HASHED_FILES = 4096, RACY_WINDOW_MS = 2000, fileHashes, METAPROJECT = ".metaproject", REVIEWS = "reviews", PREFIX_DELIMITERS, MAX_PREFIX_CHARS = 1024, MAX_NAME_CHARS = 255, MAX_SESSION_REVIEW_ROOTS = 8, MAX_SESSION_REVIEW_DIRS = 32, MAX_SESSION_REVIEW_IDS = 32, MAX_PENDING_CALLS = 64, SAFE_REVIEW_ID, isPathDelimiter = (ch) => PREFIX_DELIMITERS.has(ch) || /\s/.test(ch), isSeparator = (ch) => ch === "/" || ch === "\\", OPENING_SUBCOMMANDS, PACKAGE_ARG_SUBCOMMANDS, VALUELESS_FLAGS, OWN_OUTPUT_LINE, KERYX_PACKAGE, PIPE_FILTERS, NO_VALUE_OPTIONS, HEAD_TAIL_VALUE_OPTIONS, GREP_VALUE_OPTIONS, READER_VALUE_OPTIONS, GREP_PATTERN_OPTIONS, GREP_TREE_OPTION, KERYX_PACKAGE_NAMES, nextIs = (line, at, chars) => at + 1 < line.length && chars.includes(line[at + 1]), baseName2 = (word) => path212.posix.basename(word.replace(/\\/g, "/")), trackers, SCAN_CONCURRENCY = 16, NO_PACKAGE_BLOCKER = "no review package this session opened or named: `keryx review start` has not opened one, and no `keryx review` command in this session names an open package by its path or review id", MAX_NUDGE_BLOCKERS = 20, MAX_NUDGE_BLOCKER_CHARS = 300;
@@ -105865,7 +105908,8 @@ ${line}`;
       runSeen,
       continues: reviewGateContinues,
       stalls: reviewGateStalls,
-      lastSignature: lastReviewGateSignature
+      lastSignature: lastReviewGateSignature,
+      cardAvailable: deps.tools.some((tool) => tool.definition.name === "review_complete")
     });
     if (gate.action === "continue") {
       reviewGateContinues += 1;
@@ -107270,6 +107314,8 @@ async function executeCallUnbounded(call, toolByName, requestApproval, permissio
   const hookInteractive = hooks?.runtime.interactive ?? true;
   let confirmationToken;
   let confirmationVia;
+  let confirmationPressedBy;
+  let confirmationPressedAt;
   if (tool.confirmation !== undefined && risk !== "write") {
     return { output: `tool "${call.name}" needs operator confirmation but is not a write tool; refused`, isError: true };
   }
@@ -107458,8 +107504,12 @@ async function executeCallUnbounded(call, toolByName, requestApproval, permissio
           isError: true
         };
       }
-      if (card !== undefined)
-        confirmationVia = typeof response === "object" && response.via === "remote" ? "remote" : "local";
+      if (card !== undefined) {
+        const remote = typeof response === "object" && response.via === "remote" ? response : undefined;
+        confirmationVia = remote !== undefined ? "remote" : "local";
+        confirmationPressedBy = remote?.pressedBy;
+        confirmationPressedAt = remote?.pressedAt;
+      }
       if (hookResult?.decisions.some((d) => d.hookId === IMPACT_EVIDENCE_HOOK_ID && d.decision === "ask")) {
         hooks?.runtime.acknowledgeImpactEvidence?.(extractFilePathsFromToolInput(input));
       }
@@ -107501,6 +107551,8 @@ async function executeCallUnbounded(call, toolByName, requestApproval, permissio
     ...signal !== undefined ? { signal } : {},
     ...confirmationToken !== undefined ? { confirmationToken } : {},
     ...confirmationToken !== undefined && confirmationVia !== undefined ? { confirmationVia } : {},
+    ...confirmationToken !== undefined && confirmationVia === "remote" && confirmationPressedBy !== undefined ? { confirmationPressedBy } : {},
+    ...confirmationToken !== undefined && confirmationVia === "remote" && confirmationPressedAt !== undefined ? { confirmationPressedAt } : {},
     ...untrustedContentSeen ? { untrustedContentSeen: true } : {}
   });
   if (review !== undefined && call.name === "shell_exec" && typeof input.command === "string") {
@@ -115600,7 +115652,7 @@ async function landWriteRun(input, deps = {}) {
       decision: "landed",
       branch,
       commit,
-      ...input.confirmation !== undefined ? { confirmedVia: input.confirmation.confirmedVia, quote: input.confirmation.quote } : {}
+      ...input.confirmation !== undefined ? { confirmedVia: input.confirmation.confirmedVia, quote: input.confirmation.quote, ...input.confirmation.pressedBy !== undefined ? { pressedBy: input.confirmation.pressedBy } : {}, ...input.confirmation.pressedAt !== undefined ? { pressedAt: input.confirmation.pressedAt } : {} } : {}
     }));
     if (!won) {
       await git(["branch", "-D", branch], repo).catch(() => {
@@ -122586,7 +122638,7 @@ class RemoteClient {
   }
   async askApproval(prompt, timeoutMs, options = {}) {
     if (!this.connected || options.signal?.aborted === true) {
-      return { decision: "deny" };
+      return { decision: "deny", undelivered: true };
     }
     const body = {
       sessionId: this.options.sessionId,
@@ -122598,15 +122650,15 @@ class RemoteClient {
     try {
       const response = await this.post("approval", body);
       if (!response.ok) {
-        return { decision: "deny" };
+        return { decision: "deny", undelivered: true };
       }
       const id = (await response.json())?.approvalId;
       if (typeof id !== "string" || id.length === 0) {
-        return { decision: "deny" };
+        return { decision: "deny", undelivered: true };
       }
       approvalId = id;
     } catch {
-      return { decision: "deny" };
+      return { decision: "deny", undelivered: true };
     }
     const early = this.earlyDecisions.get(approvalId);
     if (early !== undefined) {
@@ -124734,13 +124786,13 @@ function sha25610(value) {
 function contentDigest(value) {
   return sha25610(JSON.stringify(value ?? null));
 }
-function limited(lines) {
-  if (lines.length <= MAX_LISTED)
-    return [...lines];
-  return [...lines.slice(0, MAX_LISTED), `  ... and ${lines.length - MAX_LISTED} more`];
-}
 function record4(confirmation) {
-  return { confirmedVia: confirmation.confirmedVia, quote: confirmation.quote };
+  return {
+    confirmedVia: confirmation.confirmedVia,
+    quote: confirmation.quote,
+    ...confirmation.pressedBy === undefined ? {} : { pressedBy: confirmation.pressedBy },
+    ...confirmation.pressedAt === undefined ? {} : { pressedAt: confirmation.pressedAt }
+  };
 }
 async function captureConsole(fn) {
   const lines = [];
@@ -124904,8 +124956,8 @@ function externalApplySpec(seams) {
           `branch: ${branch} (new, local; cut from base commit ${cardSafe(run.baseCommit)})`,
           `patch hash (sha256): ${hash}`,
           `changed files: ${run.files.length}`,
-          ...limited(files),
-          ...run.flaggedPaths.length > 0 ? [`FLAGGED PATHS (${run.flaggedPaths.length}) - repo plumbing, CI, hooks or agent config:`, ...limited(run.flaggedPaths.map((p) => `  ! ${cardSafe(p)}`))] : [],
+          ...files,
+          ...run.flaggedPaths.length > 0 ? [`FLAGGED PATHS (${run.flaggedPaths.length}) - repo plumbing, CI, hooks or agent config:`, ...run.flaggedPaths.map((p) => `  ! ${cardSafe(p)}`)] : [],
           "effect: your current branch, HEAD, index and working tree are never touched"
         ],
         subject: `${branch} @ sha256:${hash}`,
@@ -125270,7 +125322,7 @@ function otherConfirmSpecs(seams = {}) {
     scheduleSpec("remove", seams)
   ];
 }
-var MAX_LISTED = 12, SCOPES2, SCHEDULE_DESCRIPTIONS;
+var SCOPES2, SCHEDULE_DESCRIPTIONS;
 var init_operator_confirm_other = __esm(() => {
   init_service11();
   init_record2();
@@ -125287,9 +125339,101 @@ var init_operator_confirm_other = __esm(() => {
   };
 });
 
+// src/review/routing-check.ts
+import { readFileSync as readFileSync33 } from "fs";
+import path286 from "path";
+function narrowedSlices(manifest, readText, fix) {
+  const originals = manifest.slices.filter((entry) => entry.retryOf === undefined && Array.isArray(entry.roles));
+  const changedFiles = [...new Set(manifest.slices.filter((entry) => entry.retryOf === undefined).flatMap((entry) => entry.files))];
+  const narrowed = [];
+  const unreadable = [];
+  for (const entry of originals) {
+    const text = readText(entry);
+    if (text === undefined) {
+      unreadable.push(entry.id);
+      continue;
+    }
+    const needed = routeSliceRegions(entry.id, parseScopedDiff(text), { changedFiles });
+    const backedFix = fixClaimBacked(entry, fix, text);
+    const backedSecondLook = secondLookClaimBacked(entry, fix, text);
+    const roles = backedSecondLook ? [...SECOND_LOOK_ROLES] : backedFix ? expectedFixRoles(entry, fix, text) : needed.roles;
+    const recorded = new Set(entry.roles ?? []);
+    const missingRoles = roles.filter((role) => !recorded.has(role)).sort();
+    const shallow = (backedFix || backedSecondLook || needed.depth === "deep") && entry.depth !== "deep";
+    if (missingRoles.length > 0 || shallow) {
+      narrowed.push({ id: entry.id, missingRoles, ...shallow ? { depth: { recorded: entry.depth ?? "unset", needed: "deep" } } : {} });
+    }
+  }
+  return { narrowed, unreadable };
+}
+function sliceTextReader(manifestDir) {
+  return (entry) => {
+    try {
+      return readFileSync33(path286.resolve(manifestDir, entry.path), "utf8");
+    } catch {
+      return;
+    }
+  };
+}
+function packageRoutingRefusal(packageDir, projectRoot, options = {}) {
+  const shared = path286.join(projectRoot, ".metaproject", "data", "review", "slices");
+  const own = path286.join(packageDir, "slices");
+  for (const [file, dirs] of [[path286.join(own, "manifest.json"), [own]], [path286.join(packageDir, "slice-manifest.json"), [own, shared]]]) {
+    let manifest;
+    try {
+      const parsed = JSON.parse(readFileSync33(file, "utf8"));
+      manifest = Array.isArray(parsed.slices) ? { slices: parsed.slices } : undefined;
+    } catch {
+      manifest = undefined;
+    }
+    if (manifest === undefined)
+      continue;
+    const readers = dirs.map((dir) => sliceTextReader(dir));
+    const { narrowed, unreadable } = narrowedSlices(manifest, (entry) => readers.map((read) => read(entry)).find((text) => text !== undefined), fixContextOf(packageDir));
+    const label = path286.relative(projectRoot, file) || file;
+    const refusal = routingRefusal(label, narrowed);
+    if (refusal !== undefined || options.refuseUnreadable !== true || unreadable.length === 0)
+      return refusal;
+    return `${label} lists ${unreadable.length} slice(s) whose text is missing (${unreadable.slice(0, 8).join(", ")}${unreadable.length > 8 ? ", \u2026" : ""}), so their routing cannot be checked against their content. ` + "Restore the slice files next to the manifest, or re-run `keryx review slice` and the round";
+  }
+  return;
+}
+function routingRefusal(manifestLabel, narrowed) {
+  if (narrowed.length === 0)
+    return;
+  const lines = narrowed.slice(0, 8).map((entry) => `${entry.id}: ${[
+    entry.missingRoles.length > 0 ? `roles ${entry.missingRoles.join(", ")} are missing` : undefined,
+    entry.depth !== undefined ? `recorded ${entry.depth.recorded}, its content needs deep` : undefined
+  ].filter(Boolean).join("; ")}`);
+  return `${manifestLabel} routes ${narrowed.length} slice(s) narrower than their content needs (${lines.join(" | ")}${narrowed.length > 8 ? ` | \u2026 and ${narrowed.length - 8} more` : ""}). ` + "Routing is recomputed from each slice's text and the manifest may only be wider. Re-run `keryx review slice` to route the slices again, and do not edit roles or depth by hand.";
+}
+var init_routing_check = __esm(() => {
+  init_slice();
+  init_slice_routing();
+  init_round_split();
+});
+
+// src/review/complete-gated.ts
+async function completeReviewGated(cwd, ref, options) {
+  const packageDir = await resolveReviewPackagePath(cwd, ref);
+  const profileMissing = runProfileRefusal(packageDir);
+  if (profileMissing !== undefined)
+    throw new Error(`review complete refused: ${profileMissing}`);
+  const narrowedRouting = packageRoutingRefusal(packageDir, resolveProjectRoot2(cwd), { refuseUnreadable: true });
+  if (narrowedRouting !== undefined)
+    throw new Error(`review complete refused: ${narrowedRouting}`);
+  return completeManagedReview(cwd, ref, options);
+}
+var init_complete_gated = __esm(() => {
+  init_contained_path();
+  init_managed();
+  init_run_profile();
+  init_routing_check();
+});
+
 // src/review/publish.ts
 import { readFile as readFile131 } from "fs/promises";
-import path286 from "path";
+import path287 from "path";
 function reviewEvent(value) {
   const wanted = (value ?? "COMMENT").trim().toUpperCase();
   const found = REVIEW_EVENTS.find((event) => event === wanted);
@@ -125385,7 +125529,7 @@ function buildRoundBlock(input) {
   return { ...base, findings: kept, ...kept.length < listed.length ? { truncated: listed.length - kept.length } : {} };
 }
 async function publishReview(packageDir, options) {
-  const manifest = await readJsonFileOr(path286.join(packageDir, "manifest.json"), undefined);
+  const manifest = await readJsonFileOr(path287.join(packageDir, "manifest.json"), undefined);
   if (manifest === undefined)
     throw new Error(`Managed review package has no readable manifest.json: ${packageDir}`);
   if (!isPrBound(manifest.target)) {
@@ -125400,7 +125544,7 @@ async function publishReview(packageDir, options) {
   if (partial && event === "APPROVE") {
     throw new Error(`A partial review cannot approve: ${failing.length} readiness item(s) are failing (${failing.map((item) => item.id).join(", ")}). Use --event COMMENT or REQUEST_CHANGES, or repair the items.`);
   }
-  const report = (await readFile131(path286.join(packageDir, "report.md"), "utf8").catch(() => "")).trim();
+  const report = (await readFile131(path287.join(packageDir, "report.md"), "utf8").catch(() => "")).trim();
   if (report === "")
     throw new Error(`Review ${manifest.reviewId} has no report.md body to publish.`);
   const head = `${partial ? `${partialPublishHeader(readiness).join(`
@@ -125411,7 +125555,7 @@ async function publishReview(packageDir, options) {
   const minors = minorSection((await computeVerdict(packageDir)).minors, report, PUBLISHED_BODY_LIMIT - head.length - foot.length - ROUND_BLOCK_LIMIT);
   const visible = `${head}${minors}${foot}`;
   const reviewedHead = manifest.target.head ?? null;
-  const findings = await readJsonFileOr(path286.join(packageDir, "findings.json"), []);
+  const findings = await readJsonFileOr(path287.join(packageDir, "findings.json"), []);
   const roundBlock = buildRoundBlock({ body: visible, round: readRoundNumber(packageDir) ?? 1, reviewId: manifest.reviewId, reviewedHead, findings: Array.isArray(findings) ? findings : [] });
   const body = `${visible}
 ${renderRoundBlock(roundBlock)}
@@ -125421,7 +125565,7 @@ ${renderRoundBlock(roundBlock)}
   const result = await options.post(manifest.target.ref, event, body);
   if (!result.ok)
     throw new Error(`GitHub refused the review: ${result.detail}`);
-  await writeFileAtomic(path286.join(packageDir, "published.json"), `${JSON.stringify({ pr: manifest.target.ref, reviewId: manifest.reviewId, head: reviewedHead, round: roundBlock.round, event, partial, failing: failing.map((item) => item.id), time: (options.now?.() ?? new Date).toISOString(), ...options.confirmedVia === undefined ? {} : { confirmedVia: options.confirmedVia } }, null, 2)}
+  await writeFileAtomic(path287.join(packageDir, "published.json"), `${JSON.stringify({ pr: manifest.target.ref, reviewId: manifest.reviewId, head: reviewedHead, round: roundBlock.round, event, partial, failing: failing.map((item) => item.id), time: (options.now?.() ?? new Date).toISOString(), ...options.confirmedVia === undefined ? {} : { confirmedVia: options.confirmedVia }, ...cardPressFields(options) }, null, 2)}
 `);
   const registered = recordFinishedRound(packageDir, "publish");
   return { readiness, body, event, partial, posted: true, ...registered.error === undefined ? {} : { registryWarning: `round not recorded in the local round registry: ${registered.error}` } };
@@ -125437,6 +125581,7 @@ var init_publish = __esm(() => {
   init_round_registry();
   init_verdict();
   init_readiness();
+  init_types4();
   REVIEW_EVENTS = ["COMMENT", "REQUEST_CHANGES", "APPROVE"];
 });
 
@@ -125444,16 +125589,16 @@ var init_publish = __esm(() => {
 import { createHash as createHash81 } from "crypto";
 import { existsSync as existsSync56, realpathSync as realpathSync19 } from "fs";
 import { readFile as readFile132 } from "fs/promises";
-import path287 from "path";
+import path288 from "path";
 async function findHeldFinding(packageDir, ref) {
   const wanted = ref.trim();
   if (wanted === "")
     return { ok: false, refusal: "a finding id is required" };
-  const findings = await readJsonFileOr(path287.join(packageDir, FINDINGS_FILE), undefined);
+  const findings = await readJsonFileOr(path288.join(packageDir, FINDINGS_FILE), undefined);
   const records = Array.isArray(findings) ? findings.map(obj).filter((entry) => entry !== undefined) : [];
   const named = records.filter((record) => str3(record["global_id"]) === wanted || str3(record["id"]) === wanted);
   if (named.length === 0)
-    return { ok: false, refusal: `No finding "${wanted}" in ${path287.basename(packageDir)}/${FINDINGS_FILE}. Name a finding by its global_id or id.` };
+    return { ok: false, refusal: `No finding "${wanted}" in ${path288.basename(packageDir)}/${FINDINGS_FILE}. Name a finding by its global_id or id.` };
   const keys = new Set(named.map((record) => str3(record["global_id"]) ?? str3(record["id"]) ?? wanted));
   if (keys.size > 1)
     return { ok: false, refusal: `"${wanted}" names ${keys.size} findings (${[...keys].join(", ")}); name one by its global_id.` };
@@ -125482,13 +125627,13 @@ async function carryPremiseDecisions(packageDir, previousDir, carriedIds, carrie
   if (carriedIds.length === 0 || !isReviewPackageDir(previousDir, options.projectRoot))
     return [];
   const realPrevious = realpathSync19(previousDir);
-  const realPackage = existsSync56(packageDir) ? realpathSync19(packageDir) : path287.resolve(packageDir);
-  if (realPrevious === realPackage || realPackage.startsWith(`${realPrevious}${path287.sep}`))
+  const realPackage = existsSync56(packageDir) ? realpathSync19(packageDir) : path288.resolve(packageDir);
+  if (realPrevious === realPackage || realPackage.startsWith(`${realPrevious}${path288.sep}`))
     return [];
   const previous = await readPremiseDecisions(realPrevious);
   if (previous.length === 0)
     return [];
-  const findings = await readJsonFileOr(path287.join(realPrevious, FINDINGS_FILE), undefined);
+  const findings = await readJsonFileOr(path288.join(realPrevious, FINDINGS_FILE), undefined);
   const records = Array.isArray(findings) ? findings.map(obj).filter((entry) => entry !== undefined) : [];
   const have = await readPremiseDecisions(packageDir);
   const carried = [];
@@ -125510,13 +125655,13 @@ async function carryPremiseDecisions(packageDir, previousDir, carriedIds, carrie
   return carried;
 }
 async function answerPremiseQuestion(packageDir, input, registry = {}) {
-  const { decision, applied: vouched } = await recordPremiseDecisionAfter(packageDir, { finding: input.finding.key, answer: input.answer, reason: input.reason, quote: input.quote, at: input.at, confirmedVia: input.confirmedVia, subject: input.finding.subject }, (kept) => applyAnswerToFindings(packageDir, kept, registry));
+  const { decision, applied: vouched } = await recordPremiseDecisionAfter(packageDir, { finding: input.finding.key, answer: input.answer, reason: input.reason, quote: input.quote, at: input.at, confirmedVia: input.confirmedVia, ...cardPressFields(input), subject: input.finding.subject }, (kept) => applyAnswerToFindings(packageDir, kept, registry));
   if (vouched === true)
     reRecordRegistry(packageDir, registry);
   return decision;
 }
 async function applyAnswerToFindings(packageDir, kept, registry) {
-  const file = path287.join(packageDir, FINDINGS_FILE);
+  const file = path288.join(packageDir, FINDINGS_FILE);
   const before = await readFile132(file, "utf8").catch(() => {
     return;
   });
@@ -125561,14 +125706,15 @@ var init_premise_question = __esm(() => {
   init_json();
   init_operator_decisions();
   init_package_location();
+  init_types4();
   init_premise();
   init_round_registry();
 });
 
 // src/review/estimate.ts
 import { createHash as createHash82 } from "crypto";
-import { existsSync as existsSync57, readFileSync as readFileSync33 } from "fs";
-import path288 from "path";
+import { existsSync as existsSync57, readFileSync as readFileSync34 } from "fs";
+import path289 from "path";
 function planKeyOf(estimate) {
   const roles = [...estimate.perRole].sort((a, b) => a.role.localeCompare(b.role)).map((entry) => ({ role: entry.role, waves: entry.waves }));
   const slices = [...estimate.slicePlan].sort((a, b) => a.id.localeCompare(b.id)).map((entry) => ({ id: entry.id, roles: [...entry.roles].sort(), depth: entry.depth ?? null }));
@@ -125648,7 +125794,7 @@ function estimateRound(roles, manifest, depth = "unrecorded", thresholds = { max
 }
 async function readPlanThresholds(projectRoot) {
   const defaults = { maxDispatches: DEFAULT_MAX_DISPATCHES, maxMinutes: DEFAULT_MAX_MINUTES, source: "default" };
-  const file = path288.join(projectRoot, "routing.config.json");
+  const file = path289.join(projectRoot, "routing.config.json");
   if (!await pathExists(file))
     return defaults;
   const read = await readJsonObjectFile(file);
@@ -125672,7 +125818,7 @@ function isPlanConfirmation(value) {
 }
 function readPlanConfirmation(packageDir) {
   try {
-    const parsed = JSON.parse(readFileSync33(path288.join(packageDir, PLAN_CONFIRMATION_FILE), "utf8"));
+    const parsed = JSON.parse(readFileSync34(path289.join(packageDir, PLAN_CONFIRMATION_FILE), "utf8"));
     return isPlanConfirmation(parsed) ? parsed : undefined;
   } catch {
     return;
@@ -125687,7 +125833,7 @@ function planConfirmationFor(estimate, quote, confirmedVia, now = new Date) {
   return { planKey: planKeyOf(estimate), dispatches: estimate.dispatches, minutes: [estimate.minutes.min, estimate.minutes.max], quote: quote.trim(), confirmedVia, at: now.toISOString() };
 }
 async function writePlanConfirmation(packageDir, confirmation) {
-  const file = path288.join(packageDir, PLAN_CONFIRMATION_FILE);
+  const file = path289.join(packageDir, PLAN_CONFIRMATION_FILE);
   await writeFileAtomic(file, `${JSON.stringify(confirmation, null, 2)}
 `);
   return file;
@@ -125712,9 +125858,9 @@ async function packagePlanGate(packageDir, options = {}) {
 }
 function manifestCandidates(packageDir, root) {
   return [
-    path288.join(packageDir, "slices", "manifest.json"),
-    path288.join(packageDir, "slice-manifest.json"),
-    path288.join(root, ".metaproject", "data", "review", "slices", "manifest.json")
+    path289.join(packageDir, "slices", "manifest.json"),
+    path289.join(packageDir, "slice-manifest.json"),
+    path289.join(root, ".metaproject", "data", "review", "slices", "manifest.json")
   ];
 }
 async function readManifest3(candidates) {
@@ -125737,15 +125883,15 @@ async function estimatePackage(packageDir, options = {}) {
     depth: recorded?.depth
   });
   const read = await readManifest3(options.manifest === undefined ? manifestCandidates(packageDir, root) : [options.manifest]);
-  const found = options.manifestValue === undefined ? read : { manifest: options.manifestValue, file: read?.file ?? options.manifest ?? path288.join(packageDir, "slices", "manifest.json") };
+  const found = options.manifestValue === undefined ? read : { manifest: options.manifestValue, file: read?.file ?? options.manifest ?? path289.join(packageDir, "slices", "manifest.json") };
   if (options.manifest !== undefined && found === undefined)
     throw new Error(`${options.manifest} is not a slice manifest (no readable JSON with a slices array); run \`keryx review slice\` first`);
   const problem = found === undefined ? undefined : manifestSizeProblem(found.manifest);
   if (problem !== undefined)
-    throw new Error(`${path288.relative(root, found.file)}: ${problem}`);
+    throw new Error(`${path289.relative(root, found.file)}: ${problem}`);
   const thresholds = await readPlanThresholds(root);
   const roles = [...new Set([...set.required, ...found === undefined ? [] : manifestRosterRoles(found.manifest)])].sort();
-  return { ...estimateRound(roles, found?.manifest, recorded?.depth ?? "unrecorded", thresholds), manifest: found === undefined ? undefined : path288.relative(root, found.file) };
+  return { ...estimateRound(roles, found?.manifest, recorded?.depth ?? "unrecorded", thresholds), manifest: found === undefined ? undefined : path289.relative(root, found.file) };
 }
 function renderEstimate(estimate) {
   const lines = [
@@ -125781,7 +125927,7 @@ var init_estimate = __esm(() => {
 });
 
 // src/review/plan-confirmation.ts
-import path289 from "path";
+import path290 from "path";
 function planOverThreshold(estimate) {
   return estimate.overThreshold;
 }
@@ -125800,21 +125946,23 @@ async function recordPlanConfirmation(packageDir, estimate, confirmation) {
     minutes: [estimate.minutes.min, estimate.minutes.max],
     quote: confirmation.quote.trim(),
     confirmedVia: confirmation.confirmedVia,
+    ...cardPressFields(confirmation),
     at: confirmation.at
   };
-  await writeFileAtomic(path289.join(packageDir, PLAN_CONFIRMATION_FILE), `${JSON.stringify(record, null, 2)}
+  await writeFileAtomic(path290.join(packageDir, PLAN_CONFIRMATION_FILE), `${JSON.stringify(record, null, 2)}
 `);
   return record;
 }
 var init_plan_confirmation = __esm(() => {
   init_fs();
   init_estimate();
+  init_types4();
 });
 
 // src/review/severity-audit.ts
 import { existsSync as existsSync58 } from "fs";
 import { readFile as readFile133, readdir as readdir48, writeFile as writeFile43 } from "fs/promises";
-import path290 from "path";
+import path291 from "path";
 function cited(finding) {
   const evidence = typeof finding.evidence === "string" ? finding.evidence : "";
   return [...new Set([...evidence.matchAll(CITATION2)].map((m) => m[1]))];
@@ -125892,14 +126040,14 @@ function auditSeverity(findings, records, options = {}) {
   return { findings: audited, changes };
 }
 async function loadMutationRecords(packageDir) {
-  const dir = path290.join(packageDir, EVIDENCE_DIR);
+  const dir = path291.join(packageDir, EVIDENCE_DIR);
   if (!existsSync58(dir))
     return [];
   const names = (await readdir48(dir)).filter((n) => /^mutation-\d+\.json$/.test(n)).sort((a, b) => Number(/\d+/.exec(a)[0]) - Number(/\d+/.exec(b)[0]));
   const out = [];
   for (const name of names) {
     try {
-      out.push({ name, record: JSON.parse(await readFile133(path290.join(dir, name), "utf8")) });
+      out.push({ name, record: JSON.parse(await readFile133(path291.join(dir, name), "utf8")) });
     } catch {
       continue;
     }
@@ -125907,7 +126055,7 @@ async function loadMutationRecords(packageDir) {
   return out;
 }
 async function auditPackage(packageDir, options = {}) {
-  const file = path290.join(packageDir, "findings.json");
+  const file = path291.join(packageDir, "findings.json");
   const raw = JSON.parse(await readFile133(file, "utf8"));
   if (!Array.isArray(raw))
     throw new Error(`${file} must hold an array of findings`);
@@ -125928,7 +126076,7 @@ var init_severity_audit = __esm(() => {
 
 // src/review/context-collect.ts
 import { mkdir as mkdir70, readFile as readFile134, writeFile as writeFile44 } from "fs/promises";
-import path291 from "path";
+import path292 from "path";
 function extractBackendPins(texts) {
   const pins = [];
   const seen = new Set;
@@ -126031,7 +126179,7 @@ function renderPrContext(ctx) {
 }
 async function readPrContext(packageDir) {
   try {
-    const parsed = JSON.parse(await readFile134(path291.join(packageDir, PR_CONTEXT_JSON), "utf8"));
+    const parsed = JSON.parse(await readFile134(path292.join(packageDir, PR_CONTEXT_JSON), "utf8"));
     return parsed?.schemaVersion === 1 ? parsed : undefined;
   } catch {
     return;
@@ -126053,8 +126201,8 @@ async function collectPrContext(input) {
   ]);
   const context = buildPrContext({ repo: input.repo, number: input.number, pull: pullText(pull), comments: collected.comments, checks: input.checks, previous, now: input.now });
   await mkdir70(input.packageDir, { recursive: true });
-  const json = path291.join(input.packageDir, PR_CONTEXT_JSON);
-  const md = path291.join(input.packageDir, PR_CONTEXT_MD);
+  const json = path292.join(input.packageDir, PR_CONTEXT_JSON);
+  const md = path292.join(input.packageDir, PR_CONTEXT_MD);
   await writeFile44(json, `${JSON.stringify(context, null, 2)}
 `, "utf8");
   await writeFile44(md, renderPrContext(context), "utf8");
@@ -126086,7 +126234,7 @@ var init_context_collect = __esm(() => {
 // src/review/compare-reference.ts
 import { existsSync as existsSync59 } from "fs";
 import { readFile as readFile135, readdir as readdir49 } from "fs/promises";
-import path292 from "path";
+import path293 from "path";
 function locationsOf(text) {
   const found = [];
   const pattern = /`?([A-Za-z0-9_./-]+\.(?:tsx?|jsx?|css|scss|md|json|ya?ml))(?::(\d+)(?:-(\d+))?)?`?/g;
@@ -126164,17 +126312,17 @@ async function readJson11(file) {
   }
 }
 async function rawReplies(inputDir) {
-  const dir = path292.join(inputDir, "raw");
+  const dir = path293.join(inputDir, "raw");
   if (!existsSync59(dir))
     return [];
   const out = [];
   for (const name of (await readdir49(dir)).filter((n) => n.endsWith(".txt")).sort()) {
-    out.push({ id: `raw/${name}`, text: await readFile135(path292.join(dir, name), "utf8") });
+    out.push({ id: `raw/${name}`, text: await readFile135(path293.join(dir, name), "utf8") });
   }
   return out;
 }
 async function loadPackageEvidence(packageDir, inputDir) {
-  const findingsRaw = await readJson11(path292.join(packageDir, "findings.json"));
+  const findingsRaw = await readJson11(path293.join(packageDir, "findings.json"));
   const findings = (Array.isArray(findingsRaw) ? findingsRaw : []).map((f) => ({
     id: asText(f.id),
     severity: asText(f.severity) || undefined,
@@ -126184,7 +126332,7 @@ async function loadPackageEvidence(packageDir, inputDir) {
 `)
   }));
   const canonicalIds = new Set(findings.map((f) => f.id));
-  const research = asRecord2(await readJson11(path292.join(packageDir, "research.json")));
+  const research = asRecord2(await readJson11(path293.join(packageDir, "research.json")));
   const dispatch = asRecord2(research?.dispatch);
   const rows = (value) => Array.isArray(value) ? value.filter((r) => r !== null && typeof r === "object") : [];
   const selected = Array.isArray(dispatch?.selected) ? dispatch.selected : [];
@@ -126202,7 +126350,7 @@ async function loadPackageEvidence(packageDir, inputDir) {
   }
   if (inputDir !== undefined)
     lost.push(...await rawReplies(inputDir));
-  const evidenceDir = path292.join(packageDir, "research-evidence");
+  const evidenceDir = path293.join(packageDir, "research-evidence");
   const mutationPass = existsSync59(evidenceDir) && (await readdir49(evidenceDir)).some((n) => /^mutation-\d+\.(json|md)$/i.test(n));
   return { ran: [...ran].sort(), findings, lost, mutationPass };
 }
@@ -126213,14 +126361,14 @@ function score2(item, evidence) {
     if (haystack.includes(identifier))
       points += 1;
   for (const loc of item.locations) {
-    const base = path292.basename(loc.file).toLowerCase();
+    const base = path293.basename(loc.file).toLowerCase();
     if (!haystack.includes(base))
       continue;
     if (loc.line === undefined) {
       points += 1;
       continue;
     }
-    const near = [...haystack.matchAll(new RegExp(`${base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}:(\\d+)`, "g"))].some((m) => Math.abs(Number(m[1]) - loc.line) <= LINE_WINDOW2) || evidence.file !== undefined && path292.basename(evidence.file).toLowerCase() === base && evidence.line !== undefined && Math.abs(evidence.line - loc.line) <= LINE_WINDOW2;
+    const near = [...haystack.matchAll(new RegExp(`${base.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}:(\\d+)`, "g"))].some((m) => Math.abs(Number(m[1]) - loc.line) <= LINE_WINDOW2) || evidence.file !== undefined && path293.basename(evidence.file).toLowerCase() === base && evidence.line !== undefined && Math.abs(evidence.line - loc.line) <= LINE_WINDOW2;
     points += near ? 2 : 1;
   }
   return points;
@@ -126285,7 +126433,7 @@ var init_compare_reference = __esm(() => {
 // src/review/driver-read.ts
 import { existsSync as existsSync60 } from "fs";
 import { readFile as readFile136, readdir as readdir50 } from "fs/promises";
-import path293 from "path";
+import path294 from "path";
 async function readJson12(file) {
   try {
     return JSON.parse(await readFile136(file, "utf8"));
@@ -126298,7 +126446,7 @@ function definitionCandidates(driver) {
   return [driver.definition, driver.skill_path, payload.definition, payload.skill_path].filter((v) => typeof v === "string" && v.trim() !== "");
 }
 async function jsonFiles(dir) {
-  return existsSync60(dir) ? (await readdir50(dir)).filter((n) => n.endsWith(".json")).sort().map((n) => path293.join(dir, n)) : [];
+  return existsSync60(dir) ? (await readdir50(dir)).filter((n) => n.endsWith(".json")).sort().map((n) => path294.join(dir, n)) : [];
 }
 async function readDrivers(inputDir, root) {
   const payloadSlices = {};
@@ -126310,7 +126458,7 @@ async function readDrivers(inputDir, root) {
   const replyFiles = new Set;
   const replyReviewers = new Set;
   const dropped = [];
-  for (const file of await jsonFiles(path293.join(inputDir, "drivers"))) {
+  for (const file of await jsonFiles(path294.join(inputDir, "drivers"))) {
     const driver = await readJson12(file);
     if (typeof driver?.reviewer !== "string")
       continue;
@@ -126319,11 +126467,11 @@ async function readDrivers(inputDir, root) {
     const slices = readSliceIds(driver.slices, "assigned");
     const complete = Array.isArray(driver.slices) && slices.unusable === 0;
     if (slices.unusable > 0)
-      dropped.push({ file: path293.basename(file), reviewer: driver.reviewer, unusable: slices.unusable });
+      dropped.push({ file: path294.basename(file), reviewer: driver.reviewer, unusable: slices.unusable });
     if (complete)
       (payloadSlices[driver.reviewer] ??= []).push(...slices.ids);
     if (typeof driver.result === "string") {
-      replyFiles.add(path293.basename(driver.result));
+      replyFiles.add(path294.basename(driver.result));
       if (complete) {
         const key = `${driver.reviewer}\x00${driver.result}`;
         const matches = assignments.get(key) ?? [];
@@ -126336,9 +126484,9 @@ async function readDrivers(inputDir, root) {
     if (typeof driver.model === "string" && driver.model.trim() !== "")
       models[driver.reviewer] = driver.model.trim();
     for (const candidate of definitionCandidates(driver)) {
-      const definition = path293.resolve(root, candidate);
+      const definition = path294.resolve(root, candidate);
       if (existsSync60(definition)) {
-        ruleFiles[driver.reviewer] = path293.relative(root, definition);
+        ruleFiles[driver.reviewer] = path294.relative(root, definition);
         break;
       }
     }
@@ -126352,7 +126500,7 @@ var init_driver_read = __esm(() => {
 // src/review/wave-drivers.ts
 import { existsSync as existsSync61 } from "fs";
 import { mkdir as mkdir71, readFile as readFile137, readdir as readdir51, rm as rm23 } from "fs/promises";
-import path294 from "path";
+import path295 from "path";
 async function packageReviewers(packageDir, manifest, options = {}) {
   const root = projectRootOfPackage(packageDir);
   const names = new Set;
@@ -126376,21 +126524,21 @@ async function packageReviewers(packageDir, manifest, options = {}) {
 async function writeWaveDrivers(input) {
   const { packageDir, manifest, sliceDir } = input;
   const root = projectRootOfPackage(packageDir);
-  const dir = path294.join(packageDir, DRIVERS_DIR);
+  const dir = path295.join(packageDir, DRIVERS_DIR);
   await mkdir71(dir, { recursive: true });
   const kept = new Map;
   for (const name of existsSync61(dir) ? await readdir51(dir) : []) {
     if (!/-w\d+\.json$/.test(name))
       continue;
     try {
-      kept.set(name, JSON.parse(await readFile137(path294.join(dir, name), "utf8")));
+      kept.set(name, JSON.parse(await readFile137(path295.join(dir, name), "utf8")));
     } catch {}
-    await rm23(path294.join(dir, name), { force: true });
+    await rm23(path295.join(dir, name), { force: true });
   }
   const written = [];
   for (const reviewer of [...input.reviewers].sort()) {
     const waves = roleDispatchWaves(manifest, reviewer);
-    const definition = DEFINITION_CANDIDATES(reviewer).find((candidate) => existsSync61(path294.resolve(root, candidate)));
+    const definition = DEFINITION_CANDIDATES(reviewer).find((candidate) => existsSync61(path295.resolve(root, candidate)));
     for (const [at, wave] of waves.entries()) {
       const number = at + 1;
       const name = `${reviewer}-w${number}.json`;
@@ -126400,15 +126548,15 @@ async function writeWaveDrivers(input) {
         wave: number,
         waves: waves.length,
         slices: wave.map((entry) => entry.id),
-        slicePaths: wave.map((entry) => ({ id: entry.id, path: path294.resolve(sliceDir, entry.path), bytes: entry.bytes })),
+        slicePaths: wave.map((entry) => ({ id: entry.id, path: path295.resolve(sliceDir, entry.path), bytes: entry.bytes })),
         result: `${RAW_DIR}/${reviewer}-w${number}.txt`,
         ...definition === undefined ? {} : { definition },
         ...typeof prior?.model === "string" && prior.model.trim() !== "" ? { model: prior.model } : {},
         ...typeof prior?.toolLog === "string" && prior.toolLog.trim() !== "" ? { toolLog: prior.toolLog } : {}
       };
-      await writeFileAtomic(path294.join(dir, name), `${JSON.stringify(driver, null, 2)}
+      await writeFileAtomic(path295.join(dir, name), `${JSON.stringify(driver, null, 2)}
 `);
-      written.push(path294.join(dir, name));
+      written.push(path295.join(dir, name));
     }
   }
   return written;
@@ -126428,7 +126576,7 @@ var init_wave_drivers = __esm(() => {
 // src/commands/review-plan.ts
 import { existsSync as existsSync62 } from "fs";
 import { readFile as readFile138 } from "fs/promises";
-import path295 from "path";
+import path296 from "path";
 function printPlanHelp() {
   console.log(`keryx review plan --target <pr-url|branch> [--ref <base>] [--head <sha>] [--host ${REVIEW_HOSTS.join("|")}]
                   [--memory-query "<query>"] [--unattended] [--json]
@@ -126461,7 +126609,7 @@ function packagePathOf(startOutput, cwd) {
   if (line === undefined)
     return;
   const value = line.slice("path: ".length).trim();
-  return value === "" ? undefined : path295.resolve(cwd, value);
+  return value === "" ? undefined : path296.resolve(cwd, value);
 }
 function slicesByKind(manifest) {
   const originals = manifest.slices.filter((entry) => entry.retryOf === undefined);
@@ -126485,7 +126633,7 @@ function renderPlanSummary(plan) {
     `estimate: ${plan.dispatches} dispatches, ${plan.minutes.min}-${plan.minutes.max} min${plan.overThreshold ? ` \u2014 over threshold (${plan.overReasons.join("; ")})` : ""}`,
     ...plan.warnings.map((warning) => `warning: ${warning}`),
     `next: ${plan.next}`,
-    `written: ${path295.join(plan.package, PLAN_FILE)}`
+    `written: ${path296.join(plan.package, PLAN_FILE)}`
   ];
   return lines.join(`
 `);
@@ -126532,7 +126680,7 @@ async function runPlan2(args, deps) {
   const scoped = await deps.run(["scope", "--json", ...baseRef === undefined ? [] : ["--ref", baseRef, ...head === undefined ? [] : ["--head", head]]]);
   if (scoped.exitCode !== 0)
     fail2("scope", scoped);
-  const scopeFile = path295.join(packageDir, "scope.json");
+  const scopeFile = path296.join(packageDir, "scope.json");
   await writeFileAtomic(scopeFile, scoped.stdout.endsWith(`
 `) ? scoped.stdout : `${scoped.stdout}
 `);
@@ -126543,19 +126691,19 @@ async function runPlan2(args, deps) {
     throw new Error("review plan: `review scope --json` printed no JSON; the plan stops here.");
   }
   const scopeFiles = Array.isArray(scopeRecord?.files) ? scopeRecord.files.filter((file) => typeof file === "string") : [];
-  if (!existsSync62(path295.join(packageDir, "scope-files.json"))) {
+  if (!existsSync62(path296.join(packageDir, "scope-files.json"))) {
     const lines = scopeRecord?.counts?.changedLinesRetained;
-    await writeFileAtomic(path295.join(packageDir, "scope-files.json"), `${JSON.stringify({ version: 1, files: scopeFiles, ...typeof lines === "number" ? { changedLines: lines } : {} }, null, 2)}
+    await writeFileAtomic(path296.join(packageDir, "scope-files.json"), `${JSON.stringify({ version: 1, files: scopeFiles, ...typeof lines === "number" ? { changedLines: lines } : {} }, null, 2)}
 `);
   }
-  const radius = await deps.run(["blast-radius", "--package", packageDir, "--json", "--out", path295.join(packageDir, "blast-radius.json"), ...baseRef === undefined ? [] : ["--ref", baseRef]]);
+  const radius = await deps.run(["blast-radius", "--package", packageDir, "--json", "--out", path296.join(packageDir, "blast-radius.json"), ...baseRef === undefined ? [] : ["--ref", baseRef]]);
   if (radius.exitCode !== 0)
     warnings.push(`blast radius not computed (${(radius.stderr.trim() || radius.stdout.trim()).split(`
 `).pop() ?? `exit ${radius.exitCode}`})`);
   const sliced = await deps.run(["slice", "--package", packageDir, ...baseRef === undefined || delta !== undefined ? [] : ["--ref", baseRef], ...head === undefined ? [] : ["--head", head], ...host === undefined ? [] : ["--host", host], "--json"]);
   if (sliced.exitCode !== 0)
     fail2("slice", sliced);
-  const manifestPath = path295.join(packageDir, "slices", "manifest.json");
+  const manifestPath = path296.join(packageDir, "slices", "manifest.json");
   const manifest = JSON.parse(await readFile138(manifestPath, "utf8"));
   const required = await deps.run(["required", "--depth", "auto", "--scope", scopeFile, "--package", packageDir, "--json"]);
   if (required.exitCode !== 0)
@@ -126568,7 +126716,7 @@ async function runPlan2(args, deps) {
     throw new Error("review plan: `review required --json` printed no JSON; the plan stops here.");
   }
   const estimate = await estimatePackage(packageDir);
-  const drivers = await writeWaveDrivers({ packageDir, manifest, sliceDir: path295.dirname(manifestPath), reviewers: await packageReviewers(packageDir, manifest) });
+  const drivers = await writeWaveDrivers({ packageDir, manifest, sliceDir: path296.dirname(manifestPath), reviewers: await packageReviewers(packageDir, manifest) });
   if (drivers.length !== estimate.dispatches)
     warnings.push(`${drivers.length} driver(s) written for ${estimate.dispatches} planned dispatch(es); re-run \`keryx review slice --package ${packageDir}\``);
   const confirmed = planConfirmed(packageDir, estimate);
@@ -126600,7 +126748,7 @@ async function runPlan2(args, deps) {
     warnings,
     next: nextStepOf(estimate, confirmed)
   };
-  await writeFileAtomic(path295.join(packageDir, PLAN_FILE), `${JSON.stringify(plan, null, 2)}
+  await writeFileAtomic(path296.join(packageDir, PLAN_FILE), `${JSON.stringify(plan, null, 2)}
 `);
   console.log(args.includes("--json") ? JSON.stringify(plan, null, 2) : renderPlanSummary(plan));
 }
@@ -126750,7 +126898,7 @@ var init_plan_eval = __esm(() => {
 // src/commands/review-plan-eval.ts
 import { existsSync as existsSync63 } from "fs";
 import { readFile as readFile139 } from "fs/promises";
-import path296 from "path";
+import path297 from "path";
 function printPlanEvalHelp() {
   console.log(`keryx review plan-eval \u2014 usage:
 
@@ -126810,7 +126958,7 @@ async function runPlanEval(args, deps) {
     throw new Error("plan-eval needs --diff <file|base..head>. See `keryx review plan-eval --help`.");
   const diff = await readDiff(source);
   const findingsFile = optionValue(args, "--findings");
-  const findings = findingsFile === undefined ? undefined : parseGroundTruth(await readFile139(path296.resolve(findingsFile), "utf8"));
+  const findings = findingsFile === undefined ? undefined : parseGroundTruth(await readFile139(path297.resolve(findingsFile), "utf8"));
   const rolesFlag = optionValue(args, "--roles");
   let roles = rolesFlag?.split(",").map((role) => role.trim()).filter(Boolean);
   if (roles === undefined) {
@@ -126868,7 +127016,7 @@ var init_retired_rules = __esm(() => {
 import { cp as cp2, lstat as lstat19, readFile as readFile140, readdir as readdir52, realpath as realpath26, unlink as unlink2 } from "fs/promises";
 import { existsSync as existsSync64 } from "fs";
 import { createHash as createHash83 } from "crypto";
-import path297 from "path";
+import path298 from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function isErrnoException(error) {
   return error instanceof Error && "code" in error;
@@ -126884,7 +127032,7 @@ function bundledSkillSourcePath(category, skillName) {
   if (existsSync64(directPath)) {
     return directPath;
   }
-  const packagedSourcePath = path297.join(path297.dirname(fileURLToPath5(import.meta.url)), "..", "src", "gdskills", "bundled", "skills", category, skillName);
+  const packagedSourcePath = path298.join(path298.dirname(fileURLToPath5(import.meta.url)), "..", "src", "gdskills", "bundled", "skills", category, skillName);
   if (existsSync64(packagedSourcePath)) {
     return packagedSourcePath;
   }
@@ -126905,7 +127053,7 @@ async function removeStaleRuntimeBuilds(skillsRoot, fsOps = { unlink: unlink2 })
   }
   const categories = new Map;
   for (const skillEntry of BUNDLED_GDSKILLS) {
-    const categoryDir = path297.join(skillsRoot, skillEntry.category);
+    const categoryDir = path298.join(skillsRoot, skillEntry.category);
     let category = categories.get(categoryDir);
     if (!category) {
       category = await resolveSweepableDir(categoryDir);
@@ -126916,7 +127064,7 @@ async function removeStaleRuntimeBuilds(skillsRoot, fsOps = { unlink: unlink2 })
     }
     if (category.kind !== "usable")
       continue;
-    const installedDir = path297.join(categoryDir, skillEntry.name);
+    const installedDir = path298.join(categoryDir, skillEntry.name);
     const skillDir = await resolveSweepableDir(installedDir);
     if (skillDir.kind === "missing") {
       continue;
@@ -126925,7 +127073,7 @@ async function removeStaleRuntimeBuilds(skillsRoot, fsOps = { unlink: unlink2 })
       outcomes.push(skillDir.outcome);
       continue;
     }
-    if (skillDir.realPath !== path297.join(root.realPath, skillEntry.category, skillEntry.name)) {
+    if (skillDir.realPath !== path298.join(root.realPath, skillEntry.category, skillEntry.name)) {
       outcomes.push({
         path: installedDir,
         blockedAt: installedDir,
@@ -126952,9 +127100,9 @@ async function removeStaleRuntimeBuilds(skillsRoot, fsOps = { unlink: unlink2 })
     for (const entryName of entries) {
       if (!RUNTIME_BUILD_FILE_NAMES.includes(entryName))
         continue;
-      if (existsSync64(path297.join(bundledDir, entryName)))
+      if (existsSync64(path298.join(bundledDir, entryName)))
         continue;
-      const installedPath = path297.join(installedDir, entryName);
+      const installedPath = path298.join(installedDir, entryName);
       try {
         const stats = await lstat19(installedPath);
         if (!stats.isFile()) {
@@ -127042,12 +127190,12 @@ function unsweepableDirCause(outcome, projectRoot) {
   }
 }
 function displayPath2(target, projectRoot) {
-  return path297.relative(projectRoot, target).split(path297.sep).join("/");
+  return path298.relative(projectRoot, target).split(path298.sep).join("/");
 }
 async function removeUnmodifiedRetiredRules(rulesTarget, fsOps = { unlink: unlink2 }) {
   const outcomes = [];
   for (const retired of RETIRED_RULES) {
-    const installedPath = path297.join(rulesTarget, retired.fileName);
+    const installedPath = path298.join(rulesTarget, retired.fileName);
     let stage = "lstat";
     try {
       const stats = await lstat19(installedPath);
@@ -127123,10 +127271,10 @@ var init_guarded_fs_ops = __esm(() => {
 // src/gdskills/install.ts
 import { lstat as lstat20, readFile as readFile141, readlink as readlink2 } from "fs/promises";
 import { existsSync as existsSync65 } from "fs";
-import path298 from "path";
+import path299 from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 async function mkdirContainedOrWarn(metaprojectRoot, target) {
-  const rel = path298.relative(metaprojectRoot, target);
+  const rel = path299.relative(metaprojectRoot, target);
   try {
     await mkdirContained(metaprojectRoot, rel);
     return null;
@@ -127139,20 +127287,20 @@ async function mkdirContainedOrWarn(metaprojectRoot, target) {
 }
 async function installGdskills(metaprojectRoot, profile, options = {}) {
   const skills = getBundledSkillsForProfile(profile);
-  const skillsRoot = path298.join(metaprojectRoot, "skills", "gdskills");
-  const dataRoot = path298.join(metaprojectRoot, "data", "gdskills");
-  const coreRoot = path298.join(metaprojectRoot, "core", "gdskills");
-  const contractsRoot = path298.join(coreRoot, "contracts");
-  const projectSkillsRoot = path298.join(metaprojectRoot, metaprojectRelative(PROJECT_SKILLS_DIR));
+  const skillsRoot = path299.join(metaprojectRoot, "skills", "gdskills");
+  const dataRoot = path299.join(metaprojectRoot, "data", "gdskills");
+  const coreRoot = path299.join(metaprojectRoot, "core", "gdskills");
+  const contractsRoot = path299.join(coreRoot, "contracts");
+  const projectSkillsRoot = path299.join(metaprojectRoot, metaprojectRelative(PROJECT_SKILLS_DIR));
   const skippedDestinationWarnings = [];
   for (const dir of [
-    path298.join(metaprojectRoot, "jobs"),
-    path298.join(metaprojectRoot, "modules"),
+    path299.join(metaprojectRoot, "jobs"),
+    path299.join(metaprojectRoot, "modules"),
     projectSkillsRoot,
     ...options.createDataDirs === false ? [] : [
-      path298.join(dataRoot, "artifacts"),
-      path298.join(metaprojectRoot, metaprojectRelative(PROJECT_SKILL_REPORTS_DIR)),
-      path298.join(dataRoot, "proposals")
+      path299.join(dataRoot, "artifacts"),
+      path299.join(metaprojectRoot, metaprojectRelative(PROJECT_SKILL_REPORTS_DIR)),
+      path299.join(dataRoot, "proposals")
     ]
   ]) {
     const warning = await mkdirContainedOrWarn(metaprojectRoot, dir);
@@ -127161,8 +127309,8 @@ async function installGdskills(metaprojectRoot, profile, options = {}) {
   }
   let installedSkills = 0;
   for (const skillEntry of skills) {
-    const skillDir = path298.join(skillsRoot, skillEntry.category, skillEntry.name);
-    const relSkillDir = path298.relative(metaprojectRoot, skillDir);
+    const skillDir = path299.join(skillsRoot, skillEntry.category, skillEntry.name);
+    const relSkillDir = path299.relative(metaprojectRoot, skillDir);
     const destination = await checkInstallDestination(skillDir, relSkillDir);
     if (!destination.usable) {
       skippedDestinationWarnings.push(destination.warning);
@@ -127177,7 +127325,7 @@ async function installGdskills(metaprojectRoot, profile, options = {}) {
     if (existsSync65(bundledSkillPath)) {
       await copyDirectoryContained(bundledSkillPath, skillDir);
     } else {
-      await writeContained(metaprojectRoot, path298.join(relSkillDir, "SKILL.md"), renderBundledSkill(skillEntry));
+      await writeContained(metaprojectRoot, path299.join(relSkillDir, "SKILL.md"), renderBundledSkill(skillEntry));
     }
     installedSkills += 1;
   }
@@ -127191,12 +127339,12 @@ async function installGdskills(metaprojectRoot, profile, options = {}) {
     skippedDestinationWarnings.push(rulesInstall.warning);
   }
   const retiredRuleOutcomes = rulesInstall.outcomes;
-  const catalogPath = path298.join(metaprojectRoot, metaprojectRelative(PROJECT_SKILLS_CATALOG_PATH));
-  await writeContained(metaprojectRoot, path298.relative(metaprojectRoot, catalogPath), await preserveProjectSkillsSection(catalogPath, renderGdskillsCatalog(profile)));
-  const manifestPath = path298.join(metaprojectRoot, "modules", "gdskills.md");
-  await writeContained(metaprojectRoot, path298.relative(metaprojectRoot, manifestPath), renderGdskillsManifest(profile));
+  const catalogPath = path299.join(metaprojectRoot, metaprojectRelative(PROJECT_SKILLS_CATALOG_PATH));
+  await writeContained(metaprojectRoot, path299.relative(metaprojectRoot, catalogPath), await preserveProjectSkillsSection(catalogPath, renderGdskillsCatalog(profile)));
+  const manifestPath = path299.join(metaprojectRoot, "modules", "gdskills.md");
+  await writeContained(metaprojectRoot, path299.relative(metaprojectRoot, manifestPath), renderGdskillsManifest(profile));
   skippedDestinationWarnings.push(...await installContracts(contractsRoot, metaprojectRoot));
-  const projectRoot = path298.dirname(metaprojectRoot);
+  const projectRoot = path299.dirname(metaprojectRoot);
   const warnings = [
     ...skippedDestinationWarnings,
     ...retiredRuleOutcomes.map(retiredRuleWarning).filter((warning) => warning !== null),
@@ -127218,8 +127366,8 @@ async function installBundledSharedSkills(skillsRoot, metaprojectRoot) {
   if (!existsSync65(sharedSource)) {
     return null;
   }
-  const sharedTarget = path298.join(skillsRoot, "shared");
-  const relSharedTarget = path298.relative(metaprojectRoot, sharedTarget);
+  const sharedTarget = path299.join(skillsRoot, "shared");
+  const relSharedTarget = path299.relative(metaprojectRoot, sharedTarget);
   const destination = await checkInstallDestination(sharedTarget, relSharedTarget);
   if (!destination.usable) {
     return destination.warning;
@@ -127262,11 +127410,11 @@ async function checkInstallDestination(destination, displayPath) {
 }
 async function installBundledRules(metaprojectRoot) {
   const rulesSource = bundledRulesSourcePath();
-  const rulesTarget = path298.join(metaprojectRoot, "rules", "core");
+  const rulesTarget = path299.join(metaprojectRoot, "rules", "core");
   if (!existsSync65(rulesSource)) {
     return { outcomes: [], warning: null };
   }
-  const relRulesTarget = path298.relative(metaprojectRoot, rulesTarget);
+  const relRulesTarget = path299.relative(metaprojectRoot, rulesTarget);
   const destination = await checkInstallDestination(rulesTarget, relRulesTarget);
   if (!destination.usable) {
     return { outcomes: [], warning: destination.warning };
@@ -127297,13 +127445,13 @@ ${section}
 `;
 }
 async function installContracts(contractsRoot, metaprojectRoot) {
-  const rootCheck = await checkInstallDestination(contractsRoot, path298.relative(metaprojectRoot, contractsRoot));
+  const rootCheck = await checkInstallDestination(contractsRoot, path299.relative(metaprojectRoot, contractsRoot));
   if (!rootCheck.usable) {
     return [rootCheck.warning];
   }
   const results = await Promise.all(CONTRACTS.map(async (contract) => {
-    const destination = path298.join(contractsRoot, contract.fileName);
-    const relDestination = path298.relative(metaprojectRoot, destination);
+    const destination = path299.join(contractsRoot, contract.fileName);
+    const relDestination = path299.relative(metaprojectRoot, destination);
     const check = await checkInstallFile(destination, relDestination);
     if (!check.usable) {
       return check.warning;
@@ -127348,7 +127496,7 @@ function contractSourcePath(fileName) {
   if (existsSync65(directPath)) {
     return directPath;
   }
-  const packagedSourcePath = path298.join(path298.dirname(fileURLToPath6(import.meta.url)), "..", "src", "gdskills", "contracts", fileName);
+  const packagedSourcePath = path299.join(path299.dirname(fileURLToPath6(import.meta.url)), "..", "src", "gdskills", "contracts", fileName);
   if (existsSync65(packagedSourcePath)) {
     return packagedSourcePath;
   }
@@ -127359,7 +127507,7 @@ function bundledSharedSourcePath() {
   if (existsSync65(directPath)) {
     return directPath;
   }
-  const packagedSourcePath = path298.join(path298.dirname(fileURLToPath6(import.meta.url)), "..", "src", "gdskills", "bundled", "skills", "shared");
+  const packagedSourcePath = path299.join(path299.dirname(fileURLToPath6(import.meta.url)), "..", "src", "gdskills", "bundled", "skills", "shared");
   if (existsSync65(packagedSourcePath)) {
     return packagedSourcePath;
   }
@@ -127370,7 +127518,7 @@ function bundledRulesSourcePath() {
   if (existsSync65(directPath)) {
     return directPath;
   }
-  const packagedSourcePath = path298.join(path298.dirname(fileURLToPath6(import.meta.url)), "..", "src", "gdskills", "bundled", "rules", "core");
+  const packagedSourcePath = path299.join(path299.dirname(fileURLToPath6(import.meta.url)), "..", "src", "gdskills", "bundled", "rules", "core");
   if (existsSync65(packagedSourcePath)) {
     return packagedSourcePath;
   }
@@ -127388,7 +127536,7 @@ var init_install2 = __esm(() => {
 // src/gdskills/import-skills.ts
 import { lstat as lstat21, readdir as readdir53, readFile as readFile142, stat as stat33 } from "fs/promises";
 import { homedir as homedir11 } from "os";
-import path299 from "path";
+import path300 from "path";
 function emptyOnlyError(label) {
   return new Error(`${label}: --only needs a glob; an empty value selects nothing. Pass a package directory name or a glob over them (\`*\`, \`?\`), or drop --only.`);
 }
@@ -127777,17 +127925,17 @@ function refuseSharedDestinations(label, picked) {
   }
 }
 function isInside6(parent, child) {
-  const relative = path299.relative(parent, child);
-  return relative !== "" && relative !== ".." && !relative.startsWith(`..${path299.sep}`) && !path299.isAbsolute(relative);
+  const relative = path300.relative(parent, child);
+  return relative !== "" && relative !== ".." && !relative.startsWith(`..${path300.sep}`) && !path300.isAbsolute(relative);
 }
 function portableOriginRef(absolute, projectRoot, home = homedir11()) {
-  const resolved = path299.resolve(absolute);
-  const root = path299.resolve(projectRoot);
+  const resolved = path300.resolve(absolute);
+  const root = path300.resolve(projectRoot);
   if (isInside6(root, resolved)) {
-    return toPosix(path299.relative(root, resolved));
+    return toPosix(path300.relative(root, resolved));
   }
   if (isInside6(home, resolved)) {
-    return `~/${toPosix(path299.relative(home, resolved))}`;
+    return `~/${toPosix(path300.relative(home, resolved))}`;
   }
   return resolved;
 }
@@ -127850,8 +127998,8 @@ async function sourceFromDirectory(options, absolute) {
   const { dirs, tree } = await skillPackageDirs(absolute);
   const candidates = [];
   for (const dir of dirs) {
-    const skillMd = path299.join(dir, "SKILL.md");
-    const name = path299.basename(dir);
+    const skillMd = path300.join(dir, "SKILL.md");
+    const name = path300.basename(dir);
     candidates.push({ name, slug: projectSkillSlug(name), skillMd, content: await readFile142(skillMd, "utf8") });
   }
   candidates.sort((a, b) => a.name.localeCompare(b.name));
@@ -127904,18 +128052,18 @@ ${candidateList(selected)}`);
   return picked.map(({ source }) => source).sort((a, b) => projectSkillKey(a).localeCompare(projectSkillKey(b)));
 }
 async function skillPackageDirs(root) {
-  if (await pathExists(path299.join(root, "SKILL.md"))) {
+  if (await pathExists(path300.join(root, "SKILL.md"))) {
     return { dirs: [root], tree: false };
   }
-  const nestedSkills = path299.join(root, "skills");
+  const nestedSkills = path300.join(root, "skills");
   const scan = await pathExists(nestedSkills) ? nestedSkills : root;
   const entries = await readdir53(scan, { withFileTypes: true });
   const dirs = [];
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const dir = path299.join(scan, entry.name);
-    if (await pathExists(path299.join(dir, "SKILL.md"))) {
+    const dir = path300.join(scan, entry.name);
+    if (await pathExists(path300.join(dir, "SKILL.md"))) {
       dirs.push(dir);
     }
   }
@@ -128027,7 +128175,7 @@ function refusedSkillRow(base, verdict, dryRun) {
 }
 async function planOne(options, source) {
   const dest = projectSkillPackagePath(source.module, source.name);
-  const destAbs = path299.join(options.projectRoot, dest, "SKILL.md");
+  const destAbs = path300.join(options.projectRoot, dest, "SKILL.md");
   const exists = await pathExists(destAbs);
   const bundled = BUNDLED_NAMES.has(source.name);
   if (skippedAsDeprecated(source)) {
@@ -128067,7 +128215,7 @@ async function planOne(options, source) {
       }
     };
   }
-  const verdict = await gateText(options.projectRoot, plannedSkillText(source.content, { name: source.name, module: source.module, origin: source.origin }), toPosix(path299.join(dest, "SKILL.md")), options.allowFlagged === true);
+  const verdict = await gateText(options.projectRoot, plannedSkillText(source.content, { name: source.name, module: source.module, origin: source.origin }), toPosix(path300.join(dest, "SKILL.md")), options.allowFlagged === true);
   if (verdict.kind !== "write") {
     return {
       row: refusedSkillRow({ name: source.name, module: source.module, path: dest, origin: source.origin }, verdict, options.dryRun === true)
@@ -128120,7 +128268,7 @@ function mergeNotes(notes, parts) {
   };
 }
 async function planUpdate(options, entry) {
-  const skillMd = path299.join(options.projectRoot, entry.path, "SKILL.md");
+  const skillMd = path300.join(options.projectRoot, entry.path, "SKILL.md");
   const current = await readFile142(skillMd, "utf8");
   let origin = options.from ?? metadataLine2(current, "Origin");
   const skippedRow = (reason, recorded) => ({
@@ -128147,7 +128295,7 @@ async function planUpdate(options, entry) {
     sourcePath = resolved;
     origin = portableOriginRef(resolved, options.projectRoot);
   }
-  const verdict = await gateText(options.projectRoot, plannedSkillText(content, { name: entry.name, module: entry.module, origin }), toPosix(path299.join(entry.path, "SKILL.md")), options.allowFlagged === true);
+  const verdict = await gateText(options.projectRoot, plannedSkillText(content, { name: entry.name, module: entry.module, origin }), toPosix(path300.join(entry.path, "SKILL.md")), options.allowFlagged === true);
   if (verdict.kind !== "write") {
     return {
       row: refusedSkillRow({ name: entry.name, module: entry.module, path: entry.path, origin }, verdict, options.dryRun === true)
@@ -128191,7 +128339,7 @@ async function writeUpdate(options, { entry, origin, content, gate }) {
   };
 }
 async function writeGatedSkill(projectRoot, created, gate) {
-  await writeContained(projectRoot, toPosix(path299.join(created.skillPath, "SKILL.md")), gate.content);
+  await writeContained(projectRoot, toPosix(path300.join(created.skillPath, "SKILL.md")), gate.content);
 }
 function stampImportHeader(source, header) {
   if (!header)
@@ -128251,15 +128399,15 @@ function versionOption(content) {
   return version ? { version } : {};
 }
 async function findOverlayRule(sourcePath, ref) {
-  let dir = path299.dirname(sourcePath);
+  let dir = path300.dirname(sourcePath);
   let notRegular;
   for (let depth = 0;depth <= 3; depth += 1) {
-    const candidate = path299.join(dir, "rules", ref);
+    const candidate = path300.join(dir, "rules", ref);
     if (await isRegularFile(candidate))
       return { found: candidate };
     if (notRegular === undefined && await pathExists(candidate))
       notRegular = candidate;
-    const parent = path299.dirname(dir);
+    const parent = path300.dirname(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -128333,7 +128481,7 @@ async function decideRule(options, citation, bundledRules) {
   const base = { ref: citation.ref, citedBy: citation.citedBy };
   const resolution = await resolveRuleReference(options.projectRoot, citation.ref);
   const existing = resolution.resolved;
-  const shipsWithKeryx = citation.ref.startsWith(`${KERYX_RULES_DIR}/`) && await pathExists(path299.join(bundledRules, path299.basename(citation.ref)));
+  const shipsWithKeryx = citation.ref.startsWith(`${KERYX_RULES_DIR}/`) && await pathExists(path300.join(bundledRules, path300.basename(citation.ref)));
   const notRegularFiles = resolution.notRegularFiles ?? [];
   const notRegularReason = (candidate) => `${candidate} is not a regular file; nothing was written there`;
   let found;
@@ -128354,7 +128502,7 @@ async function decideRule(options, citation, bundledRules) {
   }
   const origin = portableOriginRef(found, options.projectRoot);
   const content = await readFile142(found, "utf8");
-  const existingContent = existing !== undefined ? await readFile142(path299.join(options.projectRoot, existing), "utf8") : undefined;
+  const existingContent = existing !== undefined ? await readFile142(path300.join(options.projectRoot, existing), "utf8") : undefined;
   if (existing !== undefined && existingContent === content) {
     return { row: { ...base, status: "present", origin, existing } };
   }
@@ -128410,7 +128558,7 @@ async function decideReferencedRules(options, sources, refusedPackages) {
   return decisions;
 }
 async function listTemplateFiles(sourcePath) {
-  const root = path299.join(path299.dirname(sourcePath), TEMPLATES_DIR);
+  const root = path300.join(path300.dirname(sourcePath), TEMPLATES_DIR);
   try {
     if (!(await lstat21(root)).isDirectory())
       return [];
@@ -128423,7 +128571,7 @@ async function listTemplateFiles(sourcePath) {
     for (const entry of entries) {
       const rel = prefix === "" ? entry.name : `${prefix}/${entry.name}`;
       if (entry.isDirectory())
-        await walk(path299.join(dir, entry.name), rel);
+        await walk(path300.join(dir, entry.name), rel);
       else if (entry.isFile())
         files.push(rel);
     }
@@ -128435,7 +128583,7 @@ async function fileInTheWay(projectRoot, target) {
   let current = projectRoot;
   let relative = "";
   for (const part of target.split("/").slice(0, -1)) {
-    current = path299.join(current, part);
+    current = path300.join(current, part);
     relative = relative === "" ? part : `${relative}/${part}`;
     try {
       if (!(await stat33(current)).isDirectory())
@@ -128472,13 +128620,13 @@ async function planTemplates(options, pkg, replace) {
   for (const file of await listTemplateFiles(pkg.sourcePath)) {
     const target = `${packagePath}/${TEMPLATES_DIR}/${file}`;
     const base = { package: packageKey, file, path: target };
-    const bytes = await readFile142(path299.join(path299.dirname(pkg.sourcePath), TEMPLATES_DIR, file));
+    const bytes = await readFile142(path300.join(path300.dirname(pkg.sourcePath), TEMPLATES_DIR, file));
     const text = bytes.toString("utf8");
     if (!Buffer.from(text, "utf8").equals(bytes)) {
       plans.push({ row: { ...base, status: "skipped", reason: "not UTF-8 text; the importer copies text templates only" } });
       continue;
     }
-    const targetAbs = path299.join(options.projectRoot, target);
+    const targetAbs = path300.join(options.projectRoot, target);
     const blocker = await fileInTheWay(options.projectRoot, target);
     if (blocker !== undefined) {
       plans.push({ row: { ...base, status: "skipped", reason: `${blocker} is a file, not a directory; nothing was written there` } });
@@ -128558,10 +128706,10 @@ function inferNameFromPath(filePath, content) {
   const fromFrontmatter = frontmatterName(content);
   if (fromFrontmatter)
     return fromFrontmatter;
-  const parent = path299.basename(path299.dirname(filePath));
+  const parent = path300.basename(path300.dirname(filePath));
   if (parent && parent !== "skills" && parent !== ".")
     return parent;
-  return path299.basename(filePath, path299.extname(filePath));
+  return path300.basename(filePath, path300.extname(filePath));
 }
 function inferNameFromUrl(url) {
   const cleaned = url.replace(/\/SKILL\.md$/i, "");
@@ -128588,7 +128736,7 @@ function metadataLine2(content, label) {
 }
 async function readRegistry(projectRoot) {
   await Promise.resolve().then(() => init_json());
-  const manifestPath = path299.join(projectRoot, PROJECT_SKILLS_MANIFEST_PATH);
+  const manifestPath = path300.join(projectRoot, PROJECT_SKILLS_MANIFEST_PATH);
   const manifest = await readJsonFileOr(manifestPath, {});
   return manifest.modules?.gdskills?.projectSkillRegistry ?? [];
 }
@@ -128988,10 +129136,10 @@ var init_import_reviewers = __esm(() => {
 
 // src/review/jev-rules-config.ts
 import { readFile as readFile143 } from "fs/promises";
-import path300 from "path";
+import path301 from "path";
 async function readJevRulesEnabled(cwd) {
   try {
-    const parsed = JSON.parse(await readFile143(path300.join(cwd, REVIEW_GATE_CONFIG_PATH), "utf8"));
+    const parsed = JSON.parse(await readFile143(path301.join(cwd, REVIEW_GATE_CONFIG_PATH), "utf8"));
     if (typeof parsed !== "object" || parsed === null)
       return false;
     const review = parsed["review"];
@@ -129011,7 +129159,7 @@ var init_jev_rules_config = __esm(() => {
 
 // src/review/jev-rules-cache.ts
 import { readFile as readFile144 } from "fs/promises";
-import path301 from "path";
+import path302 from "path";
 function hashCacheKey(input) {
   let hash = 2166136261;
   for (let i = 0;i < input.length; i += 1) {
@@ -129024,7 +129172,7 @@ function cacheKeyFor(ruleId, clauseId, regionPath, regionStartLine, regionEndLin
   return hashCacheKey(`${ruleId}::${clauseId}::${regionPath}:${regionStartLine}-${regionEndLine}::${clauseText}`);
 }
 function cacheFilePath(cwd) {
-  return path301.join(cwd, JEV_RULES_CACHE_PATH);
+  return path302.join(cwd, JEV_RULES_CACHE_PATH);
 }
 async function readJevRulesCache(cwd) {
   const file = cacheFilePath(cwd);
@@ -129854,14 +130002,14 @@ var init_jev_rules = __esm(() => {
 });
 
 // src/review/conform-tag-cache.ts
-import path302 from "path";
+import path303 from "path";
 import { readFile as readFile145 } from "fs/promises";
 function hashConformDocContent(content) {
   return hashOriginContent(`clause-tag-schema:v${CLAUSE_TAG_SCHEMA_VERSION}
 ${content}`);
 }
 function cacheFilePath2(cwd, cacheRelPath) {
-  return path302.join(cwd, cacheRelPath);
+  return path303.join(cwd, cacheRelPath);
 }
 async function readClauseTagCache(cwd, cacheRelPath = CONFORM_TAG_CACHE_PATH) {
   const file = cacheFilePath2(cwd, cacheRelPath);
@@ -130386,7 +130534,7 @@ function checkPullOpen(facts) {
 
 // src/review/bot/packages.ts
 import { readdir as readdir55, readFile as readFile147 } from "fs/promises";
-import path303 from "path";
+import path304 from "path";
 async function subdirectories(dir) {
   try {
     const entries = await readdir55(dir, { withFileTypes: true });
@@ -130409,12 +130557,12 @@ function pullFromTarget(target) {
 }
 async function readPackage(dir) {
   try {
-    const manifest = JSON.parse(await readFile147(path303.join(dir, "manifest.json"), "utf8"));
+    const manifest = JSON.parse(await readFile147(path304.join(dir, "manifest.json"), "utf8"));
     if (manifest.target?.kind !== "pr")
       return null;
     let findings = [];
     try {
-      const parsed = JSON.parse(await readFile147(path303.join(dir, "findings.json"), "utf8"));
+      const parsed = JSON.parse(await readFile147(path304.join(dir, "findings.json"), "utf8"));
       if (Array.isArray(parsed))
         findings = parsed;
     } catch {
@@ -130429,16 +130577,16 @@ async function readPackage(dir) {
 function candidateDirs2(cwd) {
   return (async () => {
     const dirs = [];
-    const reviews = path303.join(cwd, ".metaproject", "reviews");
+    const reviews = path304.join(cwd, ".metaproject", "reviews");
     for (const name of await subdirectories(reviews)) {
       if (name !== "bot")
-        dirs.push(path303.join(reviews, name));
+        dirs.push(path304.join(reviews, name));
     }
-    const flows = path303.join(cwd, ".metaproject", "flows");
+    const flows = path304.join(cwd, ".metaproject", "flows");
     for (const flow of await subdirectories(flows)) {
-      const nested = path303.join(flows, flow, "reviews");
+      const nested = path304.join(flows, flow, "reviews");
       for (const name of await subdirectories(nested))
-        dirs.push(path303.join(nested, name));
+        dirs.push(path304.join(nested, name));
     }
     return dirs;
   })();
@@ -130455,7 +130603,7 @@ async function listReviewPackages(cwd) {
 }
 async function loadReviewPackage(cwd, reviewId) {
   for (const dir of await candidateDirs2(cwd)) {
-    if (path303.basename(dir) !== reviewId)
+    if (path304.basename(dir) !== reviewId)
       continue;
     const listed = await readPackage(dir);
     if (listed !== null && listed.reviewId === reviewId)
@@ -130466,7 +130614,7 @@ async function loadReviewPackage(cwd, reviewId) {
 var init_packages = () => {};
 
 // src/review/bot/run.ts
-import path304 from "path";
+import path305 from "path";
 function capDiff(diff, maxBytes) {
   const totalBytes = Buffer.byteLength(diff);
   if (totalBytes <= maxBytes)
@@ -130511,7 +130659,7 @@ function parseVerifierVerdict(reply) {
   return unverifiable;
 }
 function botStatePath(cwd, repo, number) {
-  return path304.join(cwd, ".metaproject", "reviews", "bot", `${repo.replace(/\//g, "__")}__${number}.json`);
+  return path305.join(cwd, ".metaproject", "reviews", "bot", `${repo.replace(/\//g, "__")}__${number}.json`);
 }
 function emptyBotState(repo, number) {
   return { schemaVersion: 1, repo, number, reviews: [], pull: null };
@@ -131422,7 +131570,7 @@ var init_review_bot = __esm(() => {
 });
 
 // src/commands/review-run.ts
-import path305 from "path";
+import path306 from "path";
 function positive3(args, name, integer) {
   const raw = optionValue(args, name);
   if (raw === undefined) {
@@ -131527,7 +131675,7 @@ async function runReviewRunCommand(args, deps = {}) {
   }
   const cwd = deps.cwd ?? process.cwd();
   const target = parsed.target;
-  const notifier = deps.notifier ?? (parsed.notify ? createTelegramNotifier({ project: path305.basename(cwd), target }) : NO_NOTIFIER);
+  const notifier = deps.notifier ?? (parsed.notify ? createTelegramNotifier({ project: path306.basename(cwd), target }) : NO_NOTIFIER);
   const run = deps.run ?? runAutonomousReview;
   const heartbeat = createHeartbeat(error, deps.now, undefined, deps.keepAliveMs ?? HEARTBEAT_KEEPALIVE_MS);
   const stop = new AbortController;
@@ -131550,14 +131698,14 @@ async function runReviewRunCommand(args, deps = {}) {
       ...parsed.model === undefined ? {} : { model: parsed.model }
     });
     await notifier.finished(endLine(result.summary));
-    const escalated = arbiterEscalateLine(result.summary, readArbiterLog(path305.join(result.runDir, ARBITER_LOG_NAME)));
+    const escalated = arbiterEscalateLine(result.summary, readArbiterLog(path306.join(result.runDir, ARBITER_LOG_NAME)));
     if (escalated !== undefined)
       await notifier.finished(escalated);
     if (parsed.json)
       log(JSON.stringify(result.summary, null, 2));
     else {
       log(`${result.reused ? "reused" : result.status}: ${result.summary.reason}`);
-      log(`report: ${path305.join(result.runDir, "report.md")}`);
+      log(`report: ${path306.join(result.runDir, "report.md")}`);
     }
     return result.exitCode;
   } catch (problem) {
@@ -131615,10 +131763,10 @@ A run that really stalls is still stopped by --stall-minutes (exit 5), and the l
 
 // src/review/jev-risk-config.ts
 import { readFile as readFile149 } from "fs/promises";
-import path306 from "path";
+import path307 from "path";
 async function readJevRiskEnabled(cwd) {
   try {
-    const parsed = JSON.parse(await readFile149(path306.join(cwd, REVIEW_GATE_CONFIG_PATH), "utf8"));
+    const parsed = JSON.parse(await readFile149(path307.join(cwd, REVIEW_GATE_CONFIG_PATH), "utf8"));
     if (typeof parsed !== "object" || parsed === null)
       return false;
     const review = parsed["review"];
@@ -131846,80 +131994,6 @@ var init_review_jev_risk = __esm(() => {
   JEV_RISK_FLAGS = ["--diff", "--pr", "--scope", "--max-calls", "--threshold", "--model", "--repo", "--fixtures", "--json"];
 });
 
-// src/review/routing-check.ts
-import { readFileSync as readFileSync34 } from "fs";
-import path307 from "path";
-function narrowedSlices(manifest, readText, fix) {
-  const originals = manifest.slices.filter((entry) => entry.retryOf === undefined && Array.isArray(entry.roles));
-  const changedFiles = [...new Set(manifest.slices.filter((entry) => entry.retryOf === undefined).flatMap((entry) => entry.files))];
-  const narrowed = [];
-  const unreadable = [];
-  for (const entry of originals) {
-    const text = readText(entry);
-    if (text === undefined) {
-      unreadable.push(entry.id);
-      continue;
-    }
-    const needed = routeSliceRegions(entry.id, parseScopedDiff(text), { changedFiles });
-    const backedFix = fixClaimBacked(entry, fix, text);
-    const backedSecondLook = secondLookClaimBacked(entry, fix, text);
-    const roles = backedSecondLook ? [...SECOND_LOOK_ROLES] : backedFix ? expectedFixRoles(entry, fix, text) : needed.roles;
-    const recorded = new Set(entry.roles ?? []);
-    const missingRoles = roles.filter((role) => !recorded.has(role)).sort();
-    const shallow = (backedFix || backedSecondLook || needed.depth === "deep") && entry.depth !== "deep";
-    if (missingRoles.length > 0 || shallow) {
-      narrowed.push({ id: entry.id, missingRoles, ...shallow ? { depth: { recorded: entry.depth ?? "unset", needed: "deep" } } : {} });
-    }
-  }
-  return { narrowed, unreadable };
-}
-function sliceTextReader(manifestDir) {
-  return (entry) => {
-    try {
-      return readFileSync34(path307.resolve(manifestDir, entry.path), "utf8");
-    } catch {
-      return;
-    }
-  };
-}
-function packageRoutingRefusal(packageDir, projectRoot, options = {}) {
-  const shared = path307.join(projectRoot, ".metaproject", "data", "review", "slices");
-  const own = path307.join(packageDir, "slices");
-  for (const [file, dirs] of [[path307.join(own, "manifest.json"), [own]], [path307.join(packageDir, "slice-manifest.json"), [own, shared]]]) {
-    let manifest;
-    try {
-      const parsed = JSON.parse(readFileSync34(file, "utf8"));
-      manifest = Array.isArray(parsed.slices) ? { slices: parsed.slices } : undefined;
-    } catch {
-      manifest = undefined;
-    }
-    if (manifest === undefined)
-      continue;
-    const readers = dirs.map((dir) => sliceTextReader(dir));
-    const { narrowed, unreadable } = narrowedSlices(manifest, (entry) => readers.map((read) => read(entry)).find((text) => text !== undefined), fixContextOf(packageDir));
-    const label = path307.relative(projectRoot, file) || file;
-    const refusal = routingRefusal(label, narrowed);
-    if (refusal !== undefined || options.refuseUnreadable !== true || unreadable.length === 0)
-      return refusal;
-    return `${label} lists ${unreadable.length} slice(s) whose text is missing (${unreadable.slice(0, 8).join(", ")}${unreadable.length > 8 ? ", \u2026" : ""}), so their routing cannot be checked against their content. ` + "Restore the slice files next to the manifest, or re-run `keryx review slice` and the round";
-  }
-  return;
-}
-function routingRefusal(manifestLabel, narrowed) {
-  if (narrowed.length === 0)
-    return;
-  const lines = narrowed.slice(0, 8).map((entry) => `${entry.id}: ${[
-    entry.missingRoles.length > 0 ? `roles ${entry.missingRoles.join(", ")} are missing` : undefined,
-    entry.depth !== undefined ? `recorded ${entry.depth.recorded}, its content needs deep` : undefined
-  ].filter(Boolean).join("; ")}`);
-  return `${manifestLabel} routes ${narrowed.length} slice(s) narrower than their content needs (${lines.join(" | ")}${narrowed.length > 8 ? ` | \u2026 and ${narrowed.length - 8} more` : ""}). ` + "Routing is recomputed from each slice's text and the manifest may only be wider. Re-run `keryx review slice` to route the slices again, and do not edit roles or depth by hand.";
-}
-var init_routing_check = __esm(() => {
-  init_slice();
-  init_slice_routing();
-  init_round_split();
-});
-
 // src/commands/review-ledger.ts
 import { existsSync as existsSync66 } from "fs";
 import { createHash as createHash84 } from "crypto";
@@ -146555,19 +146629,12 @@ async function runComplete2(args, seams) {
   }
   const isTerminal = seams?.isTerminal ?? (() => process.stdin.isTTY === true && process.stdout.isTTY === true);
   if (waiver !== undefined && !isTerminal()) {
-    throw new Error("--waive-coverage needs a terminal: the waiver is the operator's own statement and is refused when stdin or stdout is not a TTY. Inside keryx shell, call the review_waive_coverage tool: the operator answers it as a card, then run `keryx review complete`. Outside keryx shell, run this command in a terminal.");
+    throw new Error("--waive-coverage needs a terminal: the waiver is the operator's own statement and is refused when stdin or stdout is not a TTY. Inside keryx shell, call the review_waive_coverage tool: the operator answers it as a card, then call the review_complete card. Outside keryx shell, run this command in a terminal.");
   }
   const readinessWaivers = parseReadinessWaivers(args);
   if (readinessWaivers.length > 0 && !isTerminal()) {
-    throw new Error("--waive needs a terminal: the waiver is the operator's own statement and is refused when stdin or stdout is not a TTY. Inside keryx shell, call the review_waive_readiness tool: the operator answers it as a card, then run `keryx review complete`. Outside keryx shell, run this command in a terminal.");
+    throw new Error("--waive needs a terminal: the waiver is the operator's own statement and is refused when stdin or stdout is not a TTY. Inside keryx shell, call the review_waive_readiness tool: the operator answers it as a card, then call the review_complete card. Outside keryx shell, run this command in a terminal.");
   }
-  const completeDir = await resolveReviewPackagePath(process.cwd(), ref);
-  const profileMissing = runProfileRefusal(completeDir);
-  if (profileMissing !== undefined)
-    throw new Error(`review complete refused: ${profileMissing}`);
-  const narrowedRouting = packageRoutingRefusal(completeDir, resolveProjectRoot2(process.cwd()), { refuseUnreadable: true });
-  if (narrowedRouting !== undefined)
-    throw new Error(`review complete refused: ${narrowedRouting}`);
   const {
     manifest,
     reviewNotes,
@@ -146575,7 +146642,7 @@ async function runComplete2(args, seams) {
     coverageWaiver,
     readiness,
     warnings
-  } = await completeManagedReview(process.cwd(), ref, { dispositions, prLookup: seams?.prLookup ?? trackerPrLookup, prFiles: seams?.prFiles ?? githubPrFiles, ...readinessWaivers.length === 0 ? {} : { waiveReadiness: readinessWaivers }, ...waiver?.value === undefined ? {} : { waiveCoverage: waiver.value }, ...headFlag?.value === undefined ? {} : { head: headFlag.value } });
+  } = await completeReviewGated(process.cwd(), ref, { dispositions, prLookup: seams?.prLookup ?? trackerPrLookup, prFiles: seams?.prFiles ?? githubPrFiles, ...readinessWaivers.length === 0 ? {} : { waiveReadiness: readinessWaivers }, ...waiver?.value === undefined ? {} : { waiveCoverage: waiver.value }, ...headFlag?.value === undefined ? {} : { head: headFlag.value } });
   for (const warning of warnings)
     console.error(`warning: ${warning}`);
   if (coverageWaiver !== undefined) {
@@ -147431,7 +147498,7 @@ var init_review = __esm(() => {
   init_host_profile();
   init_skill_drift();
   init_run_profile();
-  init_routing_check();
+  init_complete_gated();
   init_review_operator();
   init_review_chunks();
   init_review_layers();
@@ -147688,8 +147755,22 @@ process; past the bound the package is still created, the command returns, and t
 });
 
 // src/commands/operator-confirm-review.ts
-import { existsSync as existsSync75, statSync as statSync21 } from "fs";
+import { createHash as createHash85 } from "crypto";
+import { existsSync as existsSync75, readFileSync as readFileSync39, statSync as statSync21 } from "fs";
 import path337 from "path";
+async function defaultReplyPass(args, dryRun) {
+  await Promise.resolve().then(() => init_review());
+  return commentsReplyPass(args, dryRun);
+}
+function shownBody(text) {
+  const lines = text.split(/\r?\n/).map((line) => line.replace(/\t/g, " "));
+  while (lines.length > 1 && lines[lines.length - 1] === "")
+    lines.pop();
+  const bad = lines.findIndex((line) => hiddenInCard(line));
+  if (bad !== -1)
+    return { refusal: `holds control, escape, bidi or zero-width characters on line ${bad + 1} that the card would hide or rewrite; it is not shown, so it is not asked` };
+  return { lines: lines.map((line) => `  ${line}`) };
+}
 async function trackerPrLookup2(ref) {
   if (!await githubAdapter.detect())
     return null;
@@ -147708,13 +147789,12 @@ async function resolvePackage(ref, projectRoot) {
   return resolveReviewPackagePath(projectRoot, ref);
 }
 function listFiles3(files) {
-  const shown = files.slice(0, LISTED_FILES).map((file) => `  ${file}`);
-  return files.length > LISTED_FILES ? [...shown, `  \u2026 and ${files.length - LISTED_FILES} more`] : shown;
+  return files.map((file) => `  ${file}`);
 }
 function chunksAnswerSpec() {
   return {
     name: "review_chunks_answer",
-    description: "Record the operator's answer to the chunk-run question: a blast-radius chunk run needs more review passes than the ceiling allows. " + "Pass the review package and the answer you are asking for (yes lifts the ceiling for this plan, no stops the run). Same effect as `keryx review chunks estimate --answer`.",
+    description: "Record the operator's answer to the chunk-run question: a blast-radius chunk run needs more review passes than the ceiling allows. Pass the review package and the answer you are asking for (yes lifts the ceiling for this plan, no stops the run). Same effect as `keryx review chunks estimate --answer`.",
     inputSchema: {
       type: "object",
       properties: { package: packageSchema, answer: { type: "string", enum: ["yes", "no"], description: "The answer to record if the operator confirms." } },
@@ -147764,7 +147844,7 @@ function chunksAnswerSpec() {
         return { output: "The chunk plan changed after the card was shown; nothing was recorded. Ask again.", isError: true };
       }
       await recordChunkEstimate(prepared.dir, estimate, chunkModeOf(prepared.dir));
-      const record = await answerChunkEstimate(prepared.dir, prepared.answer, confirmation.quote, new Date(confirmation.at), confirmation.confirmedVia);
+      const record = await answerChunkEstimate(prepared.dir, prepared.answer, confirmation.quote, new Date(confirmation.at), confirmation.confirmedVia, cardPressFields(confirmation));
       return { output: `chunk run answered ${record.answer?.value ?? prepared.answer} by the operator (${confirmation.confirmedVia}, ${confirmation.at}); ${estimate.chunks} pass(es) against a ceiling of ${estimate.maxPasses}` };
     }
   };
@@ -147774,7 +147854,7 @@ function publishSpec(seams) {
   const post = () => seams.postReview ?? githubPostReview;
   return {
     name: "review_publish",
-    description: "Post a finished review to its pull request on GitHub. Pass the review package, optionally the event (COMMENT, REQUEST_CHANGES, APPROVE; default COMMENT) and partial=true to post a review whose readiness checklist still has failing items (the page then says what is missing). " + "Same effect as `keryx review publish`; the operator sees the target, the verdict and the start of the body first.",
+    description: "Post a finished review to its pull request on GitHub. Pass the review package, optionally the event (COMMENT, REQUEST_CHANGES, APPROVE; default COMMENT) and partial=true to post a review whose readiness checklist still has failing items (the page then says what is missing). Same effect as `keryx review publish`; the operator sees the target, the verdict and the whole body first (a body with hidden or control characters is refused; a card over 3000 characters is answered in the shell, not in the Telegram topic).",
     inputSchema: {
       type: "object",
       properties: {
@@ -147804,8 +147884,10 @@ function publishSpec(seams) {
             return false;
           }
         });
-        const bodyLines = result.body.trimEnd().split(/\r?\n/);
-        const preview = bodyLines.slice(0, BODY_PREVIEW_LINES).map((line) => `  ${cardSafe(line.length > BODY_PREVIEW_CHARS ? `${line.slice(0, BODY_PREVIEW_CHARS)}\u2026` : line)}`);
+        const shownReview = shownBody(result.body);
+        if ("refusal" in shownReview)
+          return { refusal: `The review body ${shownReview.refusal}` };
+        const bodyLines = shownReview.lines;
         const failing = result.readiness.items.filter((item) => item.status === "fail").map((item) => item.id);
         const name = label3(dir, ctx.projectRoot);
         return {
@@ -147814,8 +147896,8 @@ function publishSpec(seams) {
             `target: ${cardSafe(target)}`,
             `verdict: ${result.event}`,
             result.partial ? `partial: yes \u2014 readiness is failing: ${cardSafe(failing.join(", "))}` : "partial: no \u2014 the readiness checklist passes",
-            `body: ${result.body.length} characters, ${bodyLines.length} lines; the first ${Math.min(BODY_PREVIEW_LINES, bodyLines.length)}:`,
-            ...preview,
+            `body: ${result.body.length} characters, ${bodyLines.length} lines, shown whole:`,
+            ...bodyLines,
             "yes: the review is posted to GitHub and cannot be taken back from here"
           ],
           subject: `${cardSafe(target)} (package ${name})`,
@@ -147836,6 +147918,7 @@ function publishSpec(seams) {
         post: post(),
         now: () => new Date(confirmation.at),
         confirmedVia: confirmation.confirmedVia,
+        ...cardPressFields(confirmation),
         confirm: async (body, targetRef) => {
           changed = body !== prepared.body || targetRef !== prepared.ref;
           return !changed;
@@ -147851,7 +147934,7 @@ function publishSpec(seams) {
 function waiveCoverageSpec() {
   return {
     name: "review_waive_coverage",
-    description: "Accept that the in-scope files no review slice or chunk covered stay unreviewed, so `keryx review complete` passes its coverage gate. Pass the review package. " + "Same effect as `keryx review complete --waive-coverage`: records the waiver (the operator's yes, the time, the files); run `keryx review complete` afterwards to close the review.",
+    description: "Accept that the in-scope files no review slice or chunk covered stay unreviewed, so `keryx review complete` passes its coverage gate. Pass the review package. Same effect as `keryx review complete --waive-coverage`: records the waiver (the operator's yes, the time, the files); call review_complete afterwards to close the review.",
     inputSchema: { type: "object", properties: { package: packageSchema }, required: ["package"], additionalProperties: false },
     async buildCard(input, ctx) {
       const ref = packageRef(input);
@@ -147887,10 +147970,10 @@ function waiveCoverageSpec() {
       if (now.length !== prepared.files.length || now.some((file, index) => file !== prepared.files[index])) {
         return { output: "The uncovered files changed after the card was shown; nothing was recorded. Ask again.", isError: true };
       }
-      const waiver = await recordCoverageWaiver(prepared.dir, confirmation.quote, new Date(confirmation.at), confirmation.confirmedVia);
+      const waiver = await recordCoverageWaiver(prepared.dir, confirmation.quote, new Date(confirmation.at), confirmation.confirmedVia, cardPressFields(confirmation));
       if (waiver === undefined)
         return { output: "No coverage waiver was recorded: the package holds no dispatch record or nothing is uncovered.", isError: true };
-      return { output: `coverage waived by the operator (${waiver.confirmedVia ?? "unknown"}, ${waiver.time}): ${waiver.files.length} file(s) not reviewed. Run \`keryx review complete\` to close the review.` };
+      return { output: `coverage waived by the operator (${waiver.confirmedVia ?? "unknown"}, ${waiver.time}): ${waiver.files.length} file(s) not reviewed. Call review_complete to close the review.` };
     }
   };
 }
@@ -147898,7 +147981,7 @@ function waiveReadinessSpec(seams) {
   const readiness = () => ({ prLookup: seams.prLookup ?? trackerPrLookup2, prFiles: seams.prFiles ?? githubPrFiles });
   return {
     name: "review_waive_readiness",
-    description: "Accept one failing item of the review readiness checklist as it is, so the review can complete or be published as a partial review. Pass the review package and the item (its number or id). " + "Same effect as `keryx review complete --waive <item>`: records the waiver (the operator's yes, the time) in the manifest and the report header; run `keryx review complete` afterwards to close the review.",
+    description: "Accept one failing item of the review readiness checklist as it is, so the review can complete or be published as a partial review. Pass the review package and the item (its number or id). Same effect as `keryx review complete --waive <item>`: records the waiver (the operator's yes, the time) in the manifest and the report header; call review_complete afterwards to close the review.",
     inputSchema: {
       type: "object",
       properties: { package: packageSchema, item: { type: "string", description: `The readiness item: its number (1-${READINESS_ITEMS.length}) or id, e.g. head, pr-files or quotes-located. Item ${READINESS_ITEMS.find((entry) => entry.id === "premise-decisions")?.number ?? "premise-decisions"} (premise-decisions) is never waived: each held finding is answered with review_decide_premise.` } },
@@ -147950,8 +148033,8 @@ function waiveReadinessSpec(seams) {
       if (current === undefined || current.status !== "fail" || current.evidence !== prepared.evidence) {
         return { output: "The readiness item changed after the card was shown; nothing was recorded. Ask again.", isError: true };
       }
-      const added = await waiveReadiness(prepared.dir, [prepared.item], confirmation.quote, { ...readiness(), now: new Date(confirmation.at), confirmedVia: confirmation.confirmedVia });
-      return { output: `readiness item waived by the operator (${confirmation.confirmedVia}, ${confirmation.at}): ${added.map((waiver) => waiver.item).join(", ")}. Run \`keryx review complete\` to close the review.` };
+      const added = await waiveReadiness(prepared.dir, [prepared.item], confirmation.quote, { ...readiness(), now: new Date(confirmation.at), confirmedVia: confirmation.confirmedVia, ...cardPressFields(confirmation) });
+      return { output: `readiness item waived by the operator (${confirmation.confirmedVia}, ${confirmation.at}): ${added.map((waiver) => waiver.item).join(", ")}. Call review_complete to close the review.` };
     }
   };
 }
@@ -147959,7 +148042,7 @@ function decisionSpec(kind) {
   const mutation = kind === "mutation-waiver";
   return {
     name: mutation ? "review_waive_mutation" : "review_override_reviewers",
-    description: mutation ? "Record the operator's waiver of the mutation pass: the proposed mutants stay unrun and the review records `Not run: mutation pass`. Pass the review package and the reason. " + "Same effect as `keryx review waive-mutation` at a terminal. A mutationWaiver quote you write into the dispatch is not accepted on its own." : "Record the operator's decision to run a smaller reviewer set than `keryx review required` names (an override, or mode diff). Pass the review package, the reason and, optionally, the reviewers that will run. " + "Same effect as `keryx review override-reviewers` at a terminal. An override quote you write into the dispatch is not accepted on its own.",
+    description: mutation ? "Record the operator's waiver of the mutation pass: the proposed mutants stay unrun and the review records `Not run: mutation pass`. Pass the review package and the reason. Same effect as `keryx review waive-mutation` at a terminal. A mutationWaiver quote you write into the dispatch is not accepted on its own." : "Record the operator's decision to run a smaller reviewer set than `keryx review required` names (an override, or mode diff). Pass the review package, the reason and, optionally, the reviewers that will run. Same effect as `keryx review override-reviewers` at a terminal. An override quote you write into the dispatch is not accepted on its own.",
     inputSchema: {
       type: "object",
       properties: {
@@ -147972,11 +148055,12 @@ function decisionSpec(kind) {
     },
     async buildCard(input, ctx) {
       const ref = packageRef(input);
-      const reason = reasonOf2(input);
+      const given = reasonOf2(input);
       if (ref === undefined)
         return { refusal: "package is required" };
-      if (reason === undefined)
-        return { refusal: "reason is required" };
+      if ("refusal" in given)
+        return given;
+      const { reason } = given;
       try {
         const dir = await resolvePackage(ref, ctx.projectRoot);
         const name = label3(dir, ctx.projectRoot);
@@ -147988,7 +148072,7 @@ function decisionSpec(kind) {
           return {
             title: `Waive the mutation pass for ${name}: ${pending} proposed mutant(s) stay unrun?`,
             lines: [
-              `unrun mutants: ${pending} (research-evidence/mutants.json): ${cardSafe(subject.items.slice(0, LISTED_FILES).join(", "))}${pending > LISTED_FILES ? ` \u2026 and ${pending - LISTED_FILES} more` : ""}`,
+              `unrun mutants: ${pending} (research-evidence/mutants.json): ${cardSafe(subject.items.join(", "))}`,
               `head: ${cardSafe(subject.head ?? "not recorded")}`,
               `reason: ${cardSafe(reason)}`,
               "yes: the review records `Not run: mutation pass` with your words for these mutants at this head; a new head or a new mutant asks again"
@@ -148007,7 +148091,7 @@ function decisionSpec(kind) {
             `required (mode all): ${required.length} reviewer(s)`,
             `head: ${cardSafe(subject.head ?? "not recorded")}`,
             selected === undefined ? "selected: not named" : `selected: ${cardSafe(selected.join(", "))}`,
-            `not run: ${cardSafe(missing.slice(0, LISTED_FILES).join(", ") || "none")}${missing.length > LISTED_FILES ? ` \u2026 and ${missing.length - LISTED_FILES} more` : ""}`,
+            `not run: ${cardSafe(missing.join(", ") || "none")}`,
             `reason: ${cardSafe(reason)}`,
             "yes: the gate accepts leaving out exactly these reviewers at this head; dropping another one or a new head asks again"
           ],
@@ -148026,7 +148110,7 @@ function decisionSpec(kind) {
       if (JSON.stringify(again) !== JSON.stringify(prepared.subject)) {
         return { output: "The head, the unrun mutants or the reviewer set changed after the card was shown; nothing was recorded. Ask again.", isError: true };
       }
-      await recordOperatorDecision(prepared.dir, { kind, quote: confirmation.quote, reason: prepared.reason, confirmedVia: confirmation.confirmedVia, at: confirmation.at, subject: prepared.subject });
+      await recordOperatorDecision(prepared.dir, { kind, quote: confirmation.quote, reason: prepared.reason, confirmedVia: confirmation.confirmedVia, ...cardPressFields(confirmation), at: confirmation.at, subject: prepared.subject });
       return { output: `${mutation ? "mutation pass waived" : "reviewer-set override recorded"} by the operator (${confirmation.confirmedVia}, ${confirmation.at}) in operator-decisions.json` };
     }
   };
@@ -148051,10 +148135,11 @@ function replyArgv(input) {
     argv.push("--round", String(input["round"]));
   return argv;
 }
-function replySpec() {
+function replySpec(seams) {
+  const pass = seams.replyPass ?? defaultReplyPass;
   return {
     name: "review_comments_reply",
-    description: "Post the final review-comment replies on a pull request (`keryx review comments reply --final`). Pass the repo, the PR number, its head sha, the outcomes file and the review package or result. " + "The operator sees every reply before anything is posted.",
+    description: "Post the final review-comment replies on a pull request (`keryx review comments reply --final`). Pass the repo, the PR number, its head sha, the outcomes file and the review package or result. The operator sees every reply whole before anything is posted (a reply with hidden or control characters is refused; a card over 3000 characters is answered in the shell, not in the Telegram topic).",
     inputSchema: {
       type: "object",
       properties: {
@@ -148075,15 +148160,20 @@ function replySpec() {
       if (!Array.isArray(argv))
         return argv;
       try {
-        await Promise.resolve().then(() => init_review());
-        const dry = await commentsReplyPass([...argv], true);
+        const dry = await pass([...argv], true);
         const requests = dry.result.requests;
         if (requests.length === 0)
           return { refusal: "The reply pass has nothing to post." };
-        const bodies = requests.slice(0, REPLY_PREVIEW).map((request) => `  ${cardSafe((request.body.body ?? "").slice(0, BODY_PREVIEW_CHARS))}`);
+        const bodies = [];
+        for (const [index, request] of requests.entries()) {
+          const shown = shownBody(request.body.body ?? "");
+          if ("refusal" in shown)
+            return { refusal: `Reply ${index + 1} ${shown.refusal}` };
+          bodies.push(`reply ${index + 1}:`, ...shown.lines);
+        }
         return {
           title: `Post ${requests.length} reply(ies) on ${cardSafe(dry.repo)}#${dry.number}?`,
-          lines: [`replies: ${requests.length}; the first ${Math.min(REPLY_PREVIEW, requests.length)}:`, ...bodies, "yes: the replies are posted on the pull request and cannot be taken back from here"],
+          lines: [`replies: ${requests.length}, each shown whole:`, ...bodies, "yes: the replies are posted on the pull request and cannot be taken back from here"],
           subject: `${cardSafe(dry.repo)}#${dry.number}`,
           prepared: { argv, requests: JSON.stringify(requests) }
         };
@@ -148094,11 +148184,10 @@ function replySpec() {
     async apply(_input, _ctx, confirmation, prepared) {
       if (prepared === undefined)
         return { output: "review_comments_reply: nothing prepared for this card", isError: true };
-      await Promise.resolve().then(() => init_review());
-      const again = await commentsReplyPass([...prepared.argv], true);
+      const again = await pass([...prepared.argv], true);
       if (JSON.stringify(again.result.requests) !== prepared.requests)
         return { output: "The replies changed after the card was shown; nothing was posted. Ask again.", isError: true };
-      const posted = await commentsReplyPass([...prepared.argv], false);
+      const posted = await pass([...prepared.argv], false);
       return { output: `posted ${posted.result.posted.length} reply(ies) (${confirmation.confirmedVia}, ${confirmation.at}); skipped ${posted.result.skipped.length}` };
     }
   };
@@ -148125,7 +148214,7 @@ function confirmPlanSpec() {
             `dispatches: ${estimate.dispatches} (${estimate.roles} roles, ${estimate.slices} slices, ${estimate.sequentialBatches} batch(es) one after another)`,
             `expected duration: ${estimate.minutes.min}-${estimate.minutes.max} min`,
             `threshold: ${estimate.thresholds.maxDispatches} dispatches or ${estimate.thresholds.maxMinutes} min (${estimate.overReasons.join("; ")})`,
-            ...estimate.perRole.slice(0, LISTED_FILES).map((role) => `  ${cardSafe(role.role)}: ${role.slices} slice(s), ${role.waves} wave(s)`),
+            ...estimate.perRole.map((role) => `  ${cardSafe(role.role)}: ${role.slices} slice(s), ${role.waves} wave(s)`),
             "yes: this plan may run; a re-cut plan asks again"
           ],
           subject: `package ${name}`,
@@ -148141,7 +148230,7 @@ function confirmPlanSpec() {
       const estimate = await estimatePlan(prepared.dir);
       if (planKeyOf2(estimate) !== prepared.planKey)
         return { output: "The plan changed after the card was shown; nothing was recorded. Ask again.", isError: true };
-      const record = await recordPlanConfirmation(prepared.dir, estimate, { quote: confirmation.quote, confirmedVia: confirmation.confirmedVia, at: confirmation.at });
+      const record = await recordPlanConfirmation(prepared.dir, estimate, { quote: confirmation.quote, confirmedVia: confirmation.confirmedVia, ...cardPressFields(confirmation), at: confirmation.at });
       return { output: `plan confirmed by the operator (${record.confirmedVia}, ${record.at}): ${record.dispatches} dispatch(es), ${record.minutes[0]}-${record.minutes[1]} min` };
     }
   };
@@ -148163,7 +148252,7 @@ function decidePremiseSpec() {
     },
     async buildCard(input, ctx) {
       const ref = packageRef(input);
-      const reason = reasonOf2(input);
+      const given = reasonOf2(input);
       const finding = typeof input["finding"] === "string" ? input["finding"].trim() : "";
       const answer = input["answer"];
       if (ref === undefined)
@@ -148172,8 +148261,9 @@ function decidePremiseSpec() {
         return { refusal: "finding is required" };
       if (answer !== "uphold" && answer !== "dismiss")
         return { refusal: 'answer must be "uphold" or "dismiss"' };
-      if (reason === undefined)
-        return { refusal: "reason is required" };
+      if ("refusal" in given)
+        return given;
+      const { reason } = given;
       try {
         const dir = await resolvePackage(ref, ctx.projectRoot);
         const held = await findHeldFinding(dir, finding);
@@ -148205,12 +148295,196 @@ function decidePremiseSpec() {
         return { output: "The finding changed after the card was shown; nothing was recorded. Ask again.", isError: true };
       }
       const warnings = [];
-      await answerPremiseQuestion(prepared.dir, { finding: again.finding, answer: prepared.answer, reason: prepared.reason, quote: confirmation.quote, at: confirmation.at, confirmedVia: confirmation.confirmedVia }, { cwd: ctx.projectRoot, warn: (line) => warnings.push(`warning: ${line}`) });
+      await answerPremiseQuestion(prepared.dir, { finding: again.finding, answer: prepared.answer, reason: prepared.reason, quote: confirmation.quote, at: confirmation.at, confirmedVia: confirmation.confirmedVia, ...cardPressFields(confirmation) }, { cwd: ctx.projectRoot, warn: (line) => warnings.push(`warning: ${line}`) });
       return { output: [`premise question on ${prepared.finding} answered ${prepared.answer} by the operator (${confirmation.confirmedVia}, ${confirmation.at}) in operator-decisions.json and findings.json`, ...warnings].join(`
 `) };
     }
   };
 }
+function completionDispositions(input) {
+  const raw = input["dispositions"];
+  if (raw === undefined)
+    return [];
+  if (!Array.isArray(raw))
+    return { refusal: "dispositions must be an array of { finding, disposition, evidence? }" };
+  const records = [];
+  for (const [index, entry] of raw.entries()) {
+    const item = typeof entry === "object" && entry !== null ? entry : {};
+    const finding = typeof item["finding"] === "string" ? item["finding"].trim() : "";
+    const state = item["disposition"];
+    const evidence = item["evidence"];
+    if (finding === "")
+      return { refusal: `dispositions[${index}]: finding is required` };
+    if (typeof state !== "string" || !FINDING_DISPOSITION_STATES.includes(state)) {
+      return { refusal: `dispositions[${index}]: disposition must be one of ${FINDING_DISPOSITION_STATES.join(", ")}` };
+    }
+    if (evidence !== undefined && typeof evidence !== "string")
+      return { refusal: `dispositions[${index}]: evidence must be text` };
+    const text = evidence?.trim();
+    if (finding.length > MAX_DISPOSITION_FINDING_CHARS)
+      return { refusal: `dispositions[${index}]: finding is longer than ${MAX_DISPOSITION_FINDING_CHARS} characters` };
+    if (text !== undefined && text.length > MAX_DISPOSITION_EVIDENCE_CHARS) {
+      return { refusal: `dispositions[${index}]: evidence is ${text.length} characters; the card shows it whole, so the limit is ${MAX_DISPOSITION_EVIDENCE_CHARS}` };
+    }
+    for (const [field, value] of [["finding", finding], ["evidence", text ?? ""]]) {
+      if (hiddenInCard(value))
+        return { refusal: `dispositions[${index}]: ${field} ${HIDDEN_IN_CARD}` };
+    }
+    records.push({ finding, state, ...text === undefined || text === "" ? {} : { evidence: text } });
+  }
+  return records;
+}
+async function completionFacts(dir) {
+  const manifest = JSON.parse(readFileSync39(path337.join(dir, "manifest.json"), "utf8"));
+  const recorded = typeof manifest.target?.head === "string" && manifest.target.head !== "" ? manifest.target.head : undefined;
+  const report = readFileSync39(path337.join(dir, "report.md"), "utf8");
+  const evidenceLine = evidenceLevelLine(report);
+  const waivers = (manifest.readiness_waivers ?? []).map((waiver) => `waiver: readiness item ${cardSafe(waiver.item)}: "${quoteWhole(waiver.operator_quote)}"`);
+  let coverage;
+  try {
+    coverage = readCoverageWaiver(JSON.parse(readFileSync39(path337.join(dir, "research.json"), "utf8")).dispatch);
+  } catch (error) {
+    if (error.code !== "ENOENT") {
+      waivers.push(`waiver: coverage, could not read research.json (${cardSafe(error instanceof Error ? error.message : String(error))}); the research gate will refuse`);
+    }
+    coverage = undefined;
+  }
+  if (coverage !== undefined)
+    waivers.push(`waiver: coverage, ${coverage.files.length} file(s) not reviewed: "${quoteWhole(coverage.operatorQuote)}"`);
+  for (const decision of await readOperatorDecisions(dir)) {
+    const items = decision.subject?.items ?? [];
+    const what = decision.kind === "mutation-waiver" ? "mutation pass not run" : "reviewer override, left out";
+    waivers.push(`waiver: ${what}${items.length === 0 ? "" : ` ${cardSafe(items.join(", "))}`}: "${quoteWhole(decision.quote)}" (${decision.confirmedVia})`);
+  }
+  return {
+    reviewId: manifest.reviewId ?? path337.basename(dir),
+    head: recorded === undefined ? undefined : cardSafe(recorded),
+    evidence: evidenceLine === undefined ? "evidence level: the report has no `Evidence level:` line; the gate will refuse" : cardSafe(evidenceLine),
+    waivers,
+    status: manifest.status ?? ""
+  };
+}
+function quoteWhole(text) {
+  return hiddenInCard(text) ? `${cardSafe(text)} [the stored quote holds characters this card hides or rewrites]` : text;
+}
+function completeSpec(seams) {
+  return {
+    name: "review_complete",
+    description: "Close a review round: the operator sees the reviewed head SHA, the report's evidence level and every waiver the package carries (readiness, coverage, mutation, reviewer override), and says yes before the round is closed. Pass the review package; the round closes against the head the package recorded. Same gates and same effect as `keryx review complete` at a terminal; record the waivers first with review_waive_readiness or review_waive_coverage. A fix round passes `dispositions` (finding, disposition, evidence) for the earlier findings; the card lists each one. A refused gate closes nothing.",
+    inputSchema: {
+      type: "object",
+      properties: {
+        package: packageSchema,
+        dispositions: dispositionsSchema
+      },
+      required: ["package"],
+      additionalProperties: false
+    },
+    async buildCard(input, ctx) {
+      const ref = packageRef(input);
+      if (ref === undefined)
+        return { refusal: "package is required" };
+      const dispositions = completionDispositions(input);
+      if ("refusal" in dispositions)
+        return dispositions;
+      try {
+        const dir = await resolvePackage(ref, ctx.projectRoot);
+        const facts = await completionFacts(dir);
+        if (facts.status === "closed")
+          return { refusal: `${facts.reviewId} is already complete` };
+        if (dispositions.length > 0)
+          await checkDispositions(dir, dispositions);
+        const name = label3(dir, ctx.projectRoot);
+        const at = facts.head === undefined ? "" : ` at ${facts.head.slice(0, 12)}`;
+        return {
+          title: `Complete review ${cardSafe(facts.reviewId)}${at}?`,
+          lines: [
+            facts.head === undefined ? "reviewed head: not recorded (the package does not carry a commit)" : `reviewed head: ${facts.head}`,
+            facts.evidence,
+            ...facts.waivers.length === 0 ? ["waivers: none"] : facts.waivers,
+            ...dispositions.map(dispositionLine),
+            "yes: the head, evidence-level, research and readiness gates run now; a refusal closes nothing"
+          ],
+          subject: `package ${name}${facts.head === undefined ? "" : `, head ${facts.head.slice(0, 12)}`}`,
+          prepared: { dir, head: facts.head, digest: factsDigest(facts), dispositions }
+        };
+      } catch (error) {
+        return failed(error);
+      }
+    },
+    async apply(_input, ctx, confirmation, prepared) {
+      if (prepared === undefined)
+        return { output: "review_complete: nothing prepared for this card", isError: true };
+      let facts;
+      try {
+        facts = await completionFacts(prepared.dir);
+      } catch (error) {
+        return { output: `review_complete refused: ${errorText4(error)} \u2014 nothing was recorded`, isError: true };
+      }
+      if (factsDigest(facts) !== prepared.digest) {
+        return { output: "The head, the evidence level or the waivers changed after the card was shown; nothing was recorded. Ask again.", isError: true };
+      }
+      const run = await runCompletionGates(ctx.projectRoot, prepared, confirmation.at, seams);
+      if (!run.closed)
+        return { output: `review_complete refused: ${errorText4(run.gateError)} \u2014 nothing was recorded`, isError: true };
+      const recordError = await writeCompletionRecord(prepared.dir, {
+        quote: confirmation.quote,
+        confirmedVia: confirmation.confirmedVia,
+        ...cardPressFields(confirmation),
+        at: confirmation.at,
+        head: prepared.head,
+        evidence: facts.evidence,
+        waivers: facts.waivers,
+        dispositions: prepared.dispositions
+      });
+      return completionOutput(`review ${facts.reviewId} complete${prepared.head === undefined ? "" : ` at ${prepared.head.slice(0, 12)}`} (${confirmation.confirmedVia}, ${confirmation.at})`, run, recordError);
+    }
+  };
+}
+async function runCompletionGates(projectRoot, prepared, at, seams) {
+  let done;
+  let gateError;
+  try {
+    done = await completeReviewGated(projectRoot, prepared.dir, {
+      dispositions: prepared.dispositions,
+      prLookup: seams.prLookup ?? trackerPrLookup2,
+      prFiles: seams.prFiles ?? githubPrFiles,
+      now: new Date(at)
+    });
+  } catch (error) {
+    gateError = error;
+  }
+  const closed = done !== undefined || (await completionFacts(prepared.dir).catch(() => {
+    return;
+  }))?.status === "closed";
+  return { done, gateError, closed };
+}
+async function writeCompletionRecord(dir, record) {
+  try {
+    await writeFileAtomic(path337.join(dir, COMPLETION_FILE), `${JSON.stringify(record, null, 2)}
+`);
+    return;
+  } catch (error) {
+    return error;
+  }
+}
+function completionOutput(closedLine, run, recordError) {
+  const problems = [];
+  if (recordError !== undefined)
+    problems.push(`the round is closed but the confirmation record could not be written: ${errorText4(recordError)}`);
+  if (run.gateError !== undefined)
+    problems.push(`the round is closed but its bookkeeping stopped: ${errorText4(run.gateError)}`);
+  return {
+    output: [
+      closedLine,
+      ...problems,
+      ...run.done?.readiness === undefined ? [] : [readinessLine(run.done.readiness)],
+      ...(run.done?.warnings ?? []).map((warning) => `warning: ${warning}`)
+    ].join(`
+`),
+    ...problems.length === 0 ? {} : { isError: true }
+  };
+}
 function buildReviewConfirmSpecs(seams = {}) {
   return [
     chunksAnswerSpec(),
@@ -148219,25 +148493,33 @@ function buildReviewConfirmSpecs(seams = {}) {
     waiveReadinessSpec(seams),
     decisionSpec("mutation-waiver"),
     decisionSpec("reviewer-override"),
-    replySpec(),
+    replySpec(seams),
     confirmPlanSpec(),
-    decidePremiseSpec()
+    decidePremiseSpec(),
+    completeSpec(seams)
   ];
 }
 function reviewConfirmSpecs() {
   return buildReviewConfirmSpecs();
 }
-var LISTED_FILES = 15, BODY_PREVIEW_LINES = 8, BODY_PREVIEW_CHARS = 140, packageSchema, label3 = (dir, projectRoot) => path337.relative(projectRoot, dir) || ".", failed = (error) => ({ refusal: error instanceof Error ? error.message : String(error) }), reasonOf2 = (input) => {
+var packageSchema, label3 = (dir, projectRoot) => path337.relative(projectRoot, dir) || ".", failed = (error) => ({ refusal: error instanceof Error ? error.message : String(error) }), reasonOf2 = (input) => {
   const value = input["reason"];
-  return typeof value === "string" && value.trim() !== "" ? value.trim() : undefined;
-}, REPLY_PREVIEW = 6;
+  const text = typeof value === "string" ? value.trim() : "";
+  if (text === "")
+    return { refusal: "reason is required" };
+  return hiddenInCard(text) ? { refusal: `reason ${HIDDEN_IN_CARD}` } : { reason: text };
+}, COMPLETION_FILE = "completion-confirmation.json", MAX_DISPOSITION_FINDING_CHARS = 200, MAX_DISPOSITION_EVIDENCE_CHARS = 300, dispositionsSchema, dispositionLine = (record) => `disposition: ${cardSafe(record.finding)} \u2192 ${record.state}${record.evidence === undefined ? "" : `: "${cardSafe(record.evidence)}"`}`, factsDigest = (facts) => createHash85("sha256").update(JSON.stringify(facts)).digest("hex"), errorText4 = (error) => error instanceof Error ? error.message : String(error);
 var init_operator_confirm_review = __esm(() => {
+  init_types4();
   init_service11();
   init_review_path_flags();
   init_blast_radius();
   init_chunks();
   init_chunks_estimate();
+  init_complete_gated();
   init_coverage_complete();
+  init_evidence_level();
+  init_fs();
   init_managed();
   init_publish();
   init_readiness();
@@ -148246,6 +148528,24 @@ var init_operator_confirm_review = __esm(() => {
   init_premise_question();
   init_plan_confirmation();
   packageSchema = { type: "string", description: "The review package: its directory or its review id." };
+  dispositionsSchema = {
+    type: "array",
+    description: "Optional. How each earlier finding was handled in this fix round, recorded when the round closes (the same as `review complete --finding \u2026 --disposition \u2026 --evidence \u2026`). The operator sees every entry on the card, whole, so a long list makes a long card (a card over the Telegram limit is answered in the shell). A finding the package does not hold, and any state but `unknown` without evidence, refuse the card.",
+    items: {
+      type: "object",
+      properties: {
+        finding: { type: "string", maxLength: MAX_DISPOSITION_FINDING_CHARS, description: "The finding's global id or display id; it must be a finding this package holds." },
+        disposition: { type: "string", enum: [...FINDING_DISPOSITION_STATES] },
+        evidence: {
+          type: "string",
+          maxLength: MAX_DISPOSITION_EVIDENCE_CHARS,
+          description: `The commit or reasoning behind the disposition; required for every state except \`unknown\`. At most ${MAX_DISPOSITION_EVIDENCE_CHARS} characters of plain single-line text; the card shows it whole.`
+        }
+      },
+      required: ["finding", "disposition"],
+      additionalProperties: false
+    }
+  };
 });
 
 // src/commands/operator-confirm-tools.ts
@@ -148297,7 +148597,7 @@ function operatorConfirmTool(spec, binding) {
       const card = { title: built.title, lines: [...built.lines], subject: built.subject };
       const shown = renderOperatorCard(card);
       const token = randomUUID32();
-      pending.set(token, { input: key(input), card, shown, prepared: built.prepared });
+      pending.set(token, { input: key(input), card, shown, prepared: built.prepared, issuedAt: now().getTime() });
       return { card: shown, title: card.title, token };
     },
     confirmationDeclined: (token) => {
@@ -148306,16 +148606,35 @@ function operatorConfirmTool(spec, binding) {
     invoke: async (input, ctx) => {
       const token = ctx?.confirmationToken;
       const entry = token === undefined ? undefined : pending.get(token);
-      if (token !== undefined)
-        pending.delete(token);
+      const refuse = (why) => ({ output: `${spec.name}: ${why} \u2014 nothing was changed`, isError: true });
       if (entry === undefined || entry.input !== key(input)) {
-        return { output: `${spec.name}: no operator-confirmed card for this request \u2014 nothing was changed`, isError: true };
+        if (token !== undefined)
+          pending.delete(token);
+        return refuse("no operator-confirmed card for this request");
+      }
+      pending.delete(token);
+      const remote = ctx?.confirmationVia === "remote";
+      let pressedBy;
+      let pressedAt;
+      if (remote) {
+        pressedBy = ctx?.confirmationPressedBy;
+        pressedAt = ctx?.confirmationPressedAt;
+        const allowed = binding.allowedUserIds?.();
+        if (pressedBy === undefined || pressedAt === undefined)
+          return refuse("the remote answer did not say who pressed it");
+        if (allowed === undefined || !allowed.includes(pressedBy)) {
+          return refuse(`Telegram user ${pressedBy} is not on the allowed list`);
+        }
+        if (now().getTime() - entry.issuedAt > REMOTE_CARD_TTL_MS) {
+          return refuse("the card is older than 1 hour; ask again");
+        }
       }
       const confirmation = {
         quote: `${entry.card.title}: yes`,
         answer: "yes",
         at: now().toISOString(),
-        confirmedVia: ctx?.confirmationVia === "remote" ? "remote-card" : "tui-card",
+        confirmedVia: remote ? "remote-card" : "tui-card",
+        ...remote ? { pressedBy, pressedAt } : {},
         subject: entry.card.subject,
         card: entry.shown
       };
@@ -148334,10 +148653,11 @@ function operatorConfirmSpecs() {
 function operatorConfirmTools(binding, specs = operatorConfirmSpecs()) {
   return specs.map((spec) => operatorConfirmTool(spec, binding));
 }
-var OPERATOR_CONFIRM_NOTE;
+var REMOTE_CARD_TTL_MS, OPERATOR_CONFIRM_NOTE;
 var init_operator_confirm_tools = __esm(() => {
   init_operator_confirm_other();
   init_operator_confirm_review();
+  REMOTE_CARD_TTL_MS = 60 * 60 * 1000;
   OPERATOR_CONFIRM_NOTE = " The operator ALWAYS sees a yes/no card in the shell and must answer it \u2014 you cannot confirm it, and you " + "must not ask them to run a command in a terminal instead.";
 });
 
@@ -149520,7 +149840,7 @@ var init_workspace_lifecycle_tool = __esm(() => {
 });
 
 // src/mcp-servers/catalog.ts
-import { createHash as createHash85 } from "crypto";
+import { createHash as createHash86 } from "crypto";
 function canonicalJson4(value) {
   if (value === undefined)
     return "null";
@@ -149538,7 +149858,7 @@ function toolDefinitionFingerprint(entry) {
     description: entry.description ?? null,
     inputSchema: entry.inputSchema ?? null
   });
-  return createHash85("sha256").update(canonical).digest("hex");
+  return createHash86("sha256").update(canonical).digest("hex");
 }
 function buildFqn(server, rawName) {
   return `${server}${FQN_DELIMITER}${rawName}`;
@@ -149786,11 +150106,11 @@ var init_tools2 = __esm(() => {
 });
 
 // src/commands/review-arbiter-config.ts
-import { readFileSync as readFileSync39 } from "fs";
+import { readFileSync as readFileSync40 } from "fs";
 import path339 from "path";
 function reviewArbiterBlock(cwd) {
   try {
-    const parsed = JSON.parse(readFileSync39(path339.join(cwd, REVIEW_GATE_CONFIG_PATH), "utf8"));
+    const parsed = JSON.parse(readFileSync40(path339.join(cwd, REVIEW_GATE_CONFIG_PATH), "utf8"));
     if (typeof parsed !== "object" || parsed === null)
       return;
     const review = parsed["review"];
@@ -150275,8 +150595,8 @@ var init_arbiter_rules = __esm(() => {
 });
 
 // src/review/arbiter-rules.ts
-import { createHash as createHash86 } from "crypto";
-import { existsSync as existsSync77, readFileSync as readFileSync40 } from "fs";
+import { createHash as createHash87 } from "crypto";
+import { existsSync as existsSync77, readFileSync as readFileSync41 } from "fs";
 import path340 from "path";
 function isArbiterKind(value) {
   return typeof value === "string" && ARBITER_KINDS.includes(value);
@@ -150347,7 +150667,7 @@ function parseArbiterRules(raw, source) {
   });
   if (errors.length > 0)
     return { ok: false, errors };
-  const hash = createHash86("sha256").update(JSON.stringify({ version, rules })).digest("hex").slice(0, 12);
+  const hash = createHash87("sha256").update(JSON.stringify({ version, rules })).digest("hex").slice(0, 12);
   return { ok: true, rules: { version, rules, source, hash } };
 }
 function parseWhen2(raw, where, errors) {
@@ -150426,7 +150746,7 @@ function loadArbiterRules(cwd) {
     return { rules: bundledArbiterRules() };
   let raw;
   try {
-    raw = JSON.parse(readFileSync40(file, "utf8"));
+    raw = JSON.parse(readFileSync41(file, "utf8"));
   } catch (error) {
     return { error: `${PROJECT_RULES_PATH} cannot be read as JSON: ${error instanceof Error ? error.message : String(error)}` };
   }
@@ -150471,7 +150791,7 @@ var init_arbiter_rules2 = __esm(() => {
 });
 
 // src/commands/review-arbiter.ts
-import { createHash as createHash87 } from "crypto";
+import { createHash as createHash88 } from "crypto";
 function parseQuestion(request) {
   const policy = request.policy;
   if (policy === undefined)
@@ -150592,7 +150912,7 @@ function checkModelAnswer(answer, question, rules) {
 }
 function cacheKey(question) {
   const facts = Object.keys(question.facts).sort().map((name) => [name, question.facts[name]]);
-  return createHash87("sha256").update(JSON.stringify([question.kind, facts, question.optionCount, question.recommended])).digest("hex");
+  return createHash88("sha256").update(JSON.stringify([question.kind, facts, question.optionCount, question.recommended])).digest("hex");
 }
 function costOf2(prices, modelId, inputTokens, outputTokens) {
   const price = prices[modelId];
@@ -151068,7 +151388,7 @@ var init_shell_events = __esm(() => {
 // src/lib/shell-permissions.ts
 import { existsSync as existsSync78 } from "fs";
 import path341 from "path";
-import { createHash as createHash88 } from "crypto";
+import { createHash as createHash89 } from "crypto";
 function validateShellPattern(pattern) {
   const trimmed = pattern.trim();
   if (trimmed.length === 0) {
@@ -151303,7 +151623,7 @@ function shellPermissionsFingerprint(dir) {
     if (!read.ok) {
       return "";
     }
-    return createHash88("sha256").update(read.text, "utf8").digest("hex");
+    return createHash89("sha256").update(read.text, "utf8").digest("hex");
   } catch {
     return "";
   }
@@ -153394,7 +153714,7 @@ var init_child_model_request = __esm(() => {
 });
 
 // src/harness/tool/builtin/spawn-subagent-tool.ts
-import { createHash as createHash89, randomUUID as randomUUID37 } from "crypto";
+import { createHash as createHash90, randomUUID as randomUUID37 } from "crypto";
 import { execFile as execFile14 } from "child_process";
 import { lstat as lstat22, mkdir as mkdir78, mkdtemp as mkdtemp10, readFile as readFile182, realpath as realpath29, rm as rm26, stat as stat42, utimes as utimes2, writeFile as writeFile49 } from "fs/promises";
 import { tmpdir as tmpdir13 } from "os";
@@ -153700,7 +154020,7 @@ function readExternalRuntimeRequest(input) {
   return agent === block.agent ? block : { ...block, agent };
 }
 function sha25611(text) {
-  return createHash89("sha256").update(text).digest("hex");
+  return createHash90("sha256").update(text).digest("hex");
 }
 async function resolveSubagentCwd(rawCwd, parentCwd) {
   if (rawCwd === undefined) {
@@ -155121,7 +155441,7 @@ var init_http_headers = __esm(() => {
 });
 
 // src/mcp-servers/trust.ts
-import { createHash as createHash90 } from "crypto";
+import { createHash as createHash91 } from "crypto";
 import path348 from "path";
 function trustFile(configDir) {
   return path348.join(configDir ?? ensureKeryxConfigDir(), "mcp-servers-trust.json");
@@ -155144,7 +155464,7 @@ function serverFingerprint(server) {
       }
     }
   });
-  return createHash90("sha256").update(material).digest("hex").slice(0, 32);
+  return createHash91("sha256").update(material).digest("hex").slice(0, 32);
 }
 function sortedKeys(values) {
   return Object.entries(values ?? {}).sort(([a], [b]) => a.localeCompare(b));
@@ -158382,7 +158702,7 @@ var init_references_check = __esm(() => {
   init_project_skills();
   init_references_config();
   init_references_section();
-  DOCUMENT_CITATION = /`([^`\s]+\.md)`/g;
+  DOCUMENT_CITATION = /`([^`\s#]+\.md)(?:#[^`\s]*)?`/g;
 });
 
 // src/gdskills/project-context-status.ts
@@ -160475,7 +160795,7 @@ var init_help_groups = __esm(() => {
       kind: "slash",
       name: "/decisions",
       group: "Automation",
-      summary: "Recommendation journal report: match share by mode and stage, the deviations with their reasons, and your own answers and typed reasons in full (marked \u270D in the sidebar row)."
+      summary: "Recommendation journal report: match share by mode and stage, the deviations with their reasons, and your own answers and typed reasons in full (marked \u270D in the sidebar row), and the Telegram review cards waiting or answered (review_confirm_plan, review_decide_premise, review_waive_readiness, review_waive_coverage, review_complete)."
     },
     {
       kind: "slash",
@@ -160493,7 +160813,7 @@ var init_help_groups = __esm(() => {
       kind: "slash",
       name: "/remote-control",
       group: "Automation",
-      summary: 'Drive this session from a Telegram topic: send lines, get replies, answer approvals and questions (an option button, or "\u270D \u0421\u0432\u043E\u0439 \u043E\u0442\u0432\u0435\u0442" and a reply with your own text). Off by default; [name|off|status].'
+      summary: 'Drive this session from a Telegram topic: send lines, get replies, answer approvals and questions (an option button, or "\u270D \u0421\u0432\u043E\u0439 \u043E\u0442\u0432\u0435\u0442" and a reply with your own text). Off by default; [name|off|status]. Also takes the review cards (review_confirm_plan, review_decide_premise, review_waive_readiness, review_waive_coverage, review_complete): each pending one shows with its age and the time left of its 1-hour token, and who pressed.'
     },
     {
       kind: "slash",
@@ -164653,7 +164973,7 @@ var init_extract3 = __esm(() => {
 });
 
 // src/product/corpus.ts
-import { createHash as createHash91 } from "crypto";
+import { createHash as createHash92 } from "crypto";
 import { readdir as readdir67, readFile as readFile191 } from "fs/promises";
 import path366 from "path";
 function flowsDir(cwd) {
@@ -164698,7 +165018,7 @@ function digestOf4(content) {
     return "absent";
   if (content === "unreadable")
     return "unreadable";
-  return createHash91("sha256").update(content).digest("hex");
+  return createHash92("sha256").update(content).digest("hex");
 }
 async function readBytes(file) {
   try {
@@ -164732,7 +165052,7 @@ async function corpusFingerprint(cwd) {
     const specification = await readBytes(path366.join(dir, "specification.md"));
     lines.push(`file\x00docs/requirements/${name}/specification.md\x00${digestOf4(specification)}`);
   }
-  return createHash91("sha256").update([...lines].sort().join(`
+  return createHash92("sha256").update([...lines].sort().join(`
 `)).digest("hex");
 }
 function idOrder(intent) {
@@ -166909,7 +167229,8 @@ function mapApprovalAnswer(got, offered) {
     decision: yes ? "allow" : "deny",
     always: o.decision === "always" && offered,
     ...approvalId === undefined ? {} : { approvalId },
-    ...fromId === undefined ? {} : { fromId }
+    ...fromId === undefined ? {} : { fromId },
+    ...!yes && o.undelivered === true ? { undelivered: true } : {}
   };
 }
 function composeApprovalPrompt(prompt) {
@@ -166966,6 +167287,13 @@ function operatorCardTooLongForTopic(tool, inputJson, meta) {
     return false;
   return redactSensitiveText(describeApprovalForTopic(tool, inputJson, meta)).trim().length > MAX_APPROVAL_PROMPT_CHARS;
 }
+function mirrorUndeliveredNote(bridge) {
+  if (bridge === undefined || !bridge.active)
+    return `${MIRROR_NOT_DELIVERED}: remote control is not on in this shell. Answer it here.`;
+  if (!bridge.connected)
+    return `${MIRROR_NOT_DELIVERED}: the remote channel is not connected. Answer it here.`;
+  return;
+}
 
 class RemoteBridge {
   options;
@@ -167070,6 +167398,9 @@ class RemoteBridge {
   get active() {
     return this.client !== undefined;
   }
+  get connected() {
+    return this.client?.connected === true;
+  }
   get telegramTurnActive() {
     return this.tgTurn;
   }
@@ -167484,7 +167815,7 @@ class RemoteBridge {
     const client = this.client;
     if (client === undefined || !client.connected) {
       this.push("approval", "denied: not connected");
-      return { decision: "deny", always: false };
+      return { decision: "deny", always: false, undelivered: true };
     }
     this.push("approval", "asked in the topic");
     let answer;
@@ -167563,7 +167894,7 @@ class RemoteBridge {
     await this.client?.reportApprovalResult?.(approvalId, remembered);
   }
 }
-var TG_SOURCE = "tg", REMOTE_EVENT_LIMIT = 20, REMOTE_REPLY_MAX_CHARS = 16000, EVENT_PREVIEW_CHARS = 80, HISTORY_PACE_MS = 2000;
+var TG_SOURCE = "tg", REMOTE_EVENT_LIMIT = 20, REMOTE_REPLY_MAX_CHARS = 16000, EVENT_PREVIEW_CHARS = 80, HISTORY_PACE_MS = 2000, MIRROR_NOT_DELIVERED = "Telegram mirror not delivered";
 var init_shell_bridge = __esm(() => {
   init_approval_cause();
   init_service2();
@@ -167574,45 +167905,6 @@ var init_shell_bridge = __esm(() => {
   init_history2();
 });
 
-// src/tui/approval-mirror.ts
-function isTopicPress(answer) {
-  return answer.decision === "allow" || answer.fromId !== undefined;
-}
-async function raceApproval(options) {
-  const dockAbort = new AbortController;
-  const topicAbort = new AbortController;
-  let topicAnswer;
-  let settled = false;
-  let started = false;
-  const race = {
-    signal: AbortSignal.any([options.turnSignal, dockAbort.signal]),
-    opened: () => {
-      if (started || settled)
-        return;
-      started = true;
-      options.topic(topicAbort.signal).then((answer) => {
-        if (settled || !isTopicPress(answer))
-          return;
-        topicAnswer = answer;
-        dockAbort.abort("topic");
-      }).catch(() => {
-        return;
-      });
-    },
-    topicWon: () => topicAnswer !== undefined
-  };
-  try {
-    const result = await options.dock(race);
-    if (topicAnswer !== undefined)
-      return { from: "topic", answer: topicAnswer };
-    return { from: "dock", result };
-  } finally {
-    settled = true;
-    if (topicAnswer === undefined)
-      topicAbort.abort(options.turnSignal.aborted ? "cancelled" : "shell");
-  }
-}
-
 // src/remote/history-host.ts
 function sessionEntryOf(resumed) {
   return { resumed, kind: resumed ? "resumed" : "new" };
@@ -168974,6 +169266,212 @@ var init_channels_surface = __esm(() => {
   TOKEN_CHAR = /^[A-Za-z0-9_:-]$/;
 });
 
+// src/tui/approval-mirror.ts
+function isTopicPress(answer) {
+  return answer.decision === "allow" || answer.fromId !== undefined;
+}
+async function raceApproval(options) {
+  const dockAbort = new AbortController;
+  const topicAbort = new AbortController;
+  let topicAnswer;
+  let settled = false;
+  let started = false;
+  const race = {
+    signal: AbortSignal.any([options.turnSignal, dockAbort.signal]),
+    opened: () => {
+      if (started || settled)
+        return;
+      started = true;
+      options.topic(topicAbort.signal).then((answer) => {
+        if (settled)
+          return;
+        if (answer.undelivered === true)
+          options.onUndelivered?.();
+        else if (!isTopicPress(answer) && !topicAbort.signal.aborted)
+          options.onTopicEnded?.();
+        if (!isTopicPress(answer))
+          return;
+        topicAnswer = answer;
+        dockAbort.abort("topic");
+      }).catch(() => {
+        return;
+      });
+    },
+    topicWon: () => topicAnswer !== undefined
+  };
+  try {
+    const result = await options.dock(race);
+    if (topicAnswer !== undefined)
+      return { from: "topic", answer: topicAnswer };
+    return { from: "dock", result };
+  } finally {
+    settled = true;
+    if (topicAnswer === undefined)
+      topicAbort.abort(options.turnSignal.aborted ? "cancelled" : "shell");
+  }
+}
+
+// src/tui/operator-confirmations.ts
+class OperatorConfirmationLog {
+  now;
+  items = [];
+  nextId = 1;
+  listeners = new Set;
+  constructor(now = () => Date.now()) {
+    this.now = now;
+  }
+  ask(question, mirrored) {
+    const id = this.nextId++;
+    this.items.push({ id, question, askedAt: this.now(), mirrored });
+    this.changed();
+    return id;
+  }
+  answer(id, result) {
+    const at = this.items.findIndex((item) => item.id === id);
+    const entry = this.items[at];
+    if (entry === undefined || entry.answered !== undefined)
+      return;
+    this.items[at] = {
+      ...entry,
+      answered: { place: result.place, yes: result.yes, at: this.now(), ...result.pressedBy === undefined ? {} : { pressedBy: result.pressedBy } }
+    };
+    const answered = this.items.filter((item) => item.answered !== undefined);
+    for (const old of answered.slice(0, Math.max(0, answered.length - ANSWERED_CARDS_KEPT))) {
+      this.items.splice(this.items.indexOf(old), 1);
+    }
+    this.changed();
+  }
+  settle(id, outcome, turnAborted) {
+    if (outcome === undefined)
+      this.answer(id, { place: "withdrawn", yes: false });
+    else if (outcome.from === "dock")
+      this.answer(id, { place: turnAborted ? "withdrawn" : "shell", yes: outcome.result !== false });
+    else
+      this.answer(id, { place: "telegram", yes: outcome.answer.decision === "allow", ...outcome.answer.fromId === undefined ? {} : { pressedBy: outcome.answer.fromId } });
+  }
+  markUndelivered(id, reason = "undelivered") {
+    const at = this.items.findIndex((item) => item.id === id);
+    const entry = this.items[at];
+    if (entry === undefined || entry.answered !== undefined || !entry.mirrored)
+      return;
+    this.items[at] = { ...entry, mirrored: false, ...reason === "ended" ? { topicEnded: true } : {} };
+    this.changed();
+  }
+  waiting() {
+    const now = this.now();
+    return this.items.filter((item) => item.answered === undefined && item.mirrored && now - item.askedAt <= REMOTE_CARD_TTL_MS);
+  }
+  entries() {
+    const open = this.items.filter((item) => item.answered === undefined);
+    const done = this.items.filter((item) => item.answered !== undefined).reverse();
+    return [...open, ...done];
+  }
+  subscribe(listener) {
+    this.listeners.add(listener);
+    return () => {
+      this.listeners.delete(listener);
+    };
+  }
+  changed() {
+    for (const listener of [...this.listeners])
+      listener();
+  }
+}
+function age(ms) {
+  const seconds = Math.max(0, Math.round(ms / 1000));
+  if (seconds < 60)
+    return `${seconds}s`;
+  const minutes = Math.floor(seconds / 60);
+  if (minutes < 60)
+    return `${minutes}m`;
+  return `${Math.floor(minutes / 60)}h${String(minutes % 60).padStart(2, "0")}m`;
+}
+function clock2(at) {
+  return new Date(at).toISOString().slice(11, 19);
+}
+function clip7(text, max) {
+  const flat = text.replace(/\s+/g, " ").trim();
+  return flat.length <= max ? flat : `${flat.slice(0, Math.max(0, max - 1))}\u2026`;
+}
+function pendingConfirmationLine(entry, now) {
+  const elapsed = now - entry.askedAt;
+  const left = REMOTE_CARD_TTL_MS - elapsed;
+  const token = left > 0 ? `${age(left)} left of the 1-hour token` : "Telegram token expired, answer in the shell";
+  const where = entry.mirrored ? "" : entry.topicEnded === true ? " \xB7 Telegram is no longer waiting for this card, answer in the shell" : " \xB7 Telegram mirror not delivered, answer in the shell";
+  return `${clip7(entry.question, 80)} \xB7 asked ${age(elapsed)} ago \xB7 ${token}${where}`;
+}
+function answeredConfirmationLine(entry) {
+  const done = entry.answered;
+  if (done === undefined)
+    return clip7(entry.question, 80);
+  const verdict = done.yes ? "yes" : "no";
+  if (done.place === "telegram") {
+    const who = done.pressedBy === undefined ? "a Telegram user" : `Telegram user ${done.pressedBy}`;
+    return `${clip7(entry.question, 80)} \xB7 ${verdict} \xB7 pressed by ${who} at ${clock2(done.at)}`;
+  }
+  if (done.place === "withdrawn")
+    return `${clip7(entry.question, 80)} \xB7 withdrawn (the turn stopped) at ${clock2(done.at)}`;
+  return `${clip7(entry.question, 80)} \xB7 ${verdict} \xB7 answered in the shell at ${clock2(done.at)}`;
+}
+function confirmationLines(entries, now, heading = "Operator confirmations (Telegram cards)") {
+  if (entries.length === 0)
+    return [];
+  const waiting = entries.filter((entry) => entry.answered === undefined);
+  const answered = entries.filter((entry) => entry.answered !== undefined);
+  const lines = [heading];
+  for (const entry of waiting)
+    lines.push(`  waiting  ${pendingConfirmationLine(entry, now)}`);
+  for (const entry of answered)
+    lines.push(`  answered ${answeredConfirmationLine(entry)}`);
+  return lines;
+}
+function waitingCardsText(waiting) {
+  if (waiting <= 0)
+    return;
+  return `${waiting} card${waiting === 1 ? "" : "s"} waiting`;
+}
+function remoteApproval(fingerprint, fromId, now = () => new Date) {
+  return { approved: true, fingerprint, via: "remote", ...fromId !== undefined ? { pressedBy: fromId } : {}, pressedAt: now().toISOString() };
+}
+async function askUnmirroredCard(log, question, turnSignal, ask) {
+  const id = log.ask(question, false);
+  let verdict;
+  let answered = false;
+  try {
+    verdict = await ask();
+    answered = true;
+    return verdict;
+  } finally {
+    log.answer(id, { place: turnSignal.aborted || !answered ? "withdrawn" : "shell", yes: answered && verdict !== false });
+  }
+}
+async function raceMirroredCard(options) {
+  const id = options.question === undefined ? undefined : options.log.ask(options.question, true);
+  let outcome;
+  try {
+    outcome = await raceApproval({
+      turnSignal: options.turnSignal,
+      ...id === undefined ? {} : {
+        onUndelivered: () => {
+          options.log.markUndelivered(id);
+          options.onUndelivered?.();
+        },
+        onTopicEnded: () => options.log.markUndelivered(id, "ended")
+      },
+      dock: options.dock,
+      topic: options.topic
+    });
+    return outcome;
+  } finally {
+    if (id !== undefined)
+      options.log.settle(id, outcome, options.turnSignal.aborted);
+  }
+}
+var ANSWERED_CARDS_KEPT = 5;
+var init_operator_confirmations = __esm(() => {
+  init_operator_confirm_tools();
+});
+
 // src/tui/remote-control-surface.ts
 function commandEchoText(line, source) {
   return source === TG_SOURCE ? `${TG_ECHO_MARKER} ${line}` : `\u276F ${line}`;
@@ -169023,9 +169521,9 @@ function formatHistoryStatus(status) {
   const history = status.history;
   if (history === undefined)
     return `History: not posted yet. Use ${HISTORY_COMMAND} [N], or press h here.`;
-  return `History: ${history.count} message${history.count === 1 ? "" : "s"} posted at ${clock2(history.at)} (${history.auto ? "restored automatically" : HISTORY_COMMAND}). Again: ${HISTORY_COMMAND} [N], or press h here.`;
+  return `History: ${history.count} message${history.count === 1 ? "" : "s"} posted at ${clock3(history.at)} (${history.auto ? "restored automatically" : HISTORY_COMMAND}). Again: ${HISTORY_COMMAND} [N], or press h here.`;
 }
-function formatRemoteStatusLines(status, posture) {
+function formatRemoteStatusLines(status, posture, confirmations) {
   const lines = [`Remote control: ${STATE_WORDS[status.state]}`];
   if (status.state === "off") {
     lines.push("Topic: none");
@@ -169041,25 +169539,27 @@ function formatRemoteStatusLines(status, posture) {
     const n = status.unconfirmedApprovals;
     lines.push(`Approvals not confirmed: ${n}. The topic shows ${n === 1 ? "it" : "them"} as "not confirmed" until serve takes the shell's ack.`);
   }
+  if (confirmations !== undefined && confirmations.length > 0)
+    lines.push("", ...confirmations);
   lines.push(`Turn it off with ${REMOTE_CONTROL_COMMAND} off, or press o here. Rename: ${REMOTE_CONTROL_COMMAND} off, then ${REMOTE_CONTROL_COMMAND} <name>.`);
   if (posture !== undefined && posture.length > 0) {
     lines.push("", "Telegram permissions (change with /remote-policy):", ...posture.map((line) => `  ${line}`));
   }
   return lines;
 }
-function clock2(at) {
+function clock3(at) {
   return new Date(at).toISOString().slice(11, 19);
 }
 function formatRemoteEventLines(status) {
   if (status.events.length === 0)
     return ["No remote events yet."];
-  return [...status.events].reverse().slice(0, REMOTE_EVENT_LIMIT).map((event) => `${clock2(event.at)}  ${event.kind.padEnd(8)} ${event.text}`);
+  return [...status.events].reverse().slice(0, REMOTE_EVENT_LIMIT).map((event) => `${clock3(event.at)}  ${event.kind.padEnd(8)} ${event.text}`);
 }
 function formatRemoteCommandLines(status) {
   const commands = status.events.filter((event) => event.kind === "command");
   if (commands.length === 0)
     return ["No remote commands yet."];
-  return [...commands].reverse().slice(0, REMOTE_EVENT_LIMIT).map((event) => `${clock2(event.at)}  ${event.text}`);
+  return [...commands].reverse().slice(0, REMOTE_EVENT_LIMIT).map((event) => `${clock3(event.at)}  ${event.text}`);
 }
 function renderRemoteControlText(status) {
   return `${[...formatRemoteStatusLines(status), "", "Recent events:", ...formatRemoteEventLines(status)].join(`
@@ -169105,7 +169605,7 @@ function presentRemoteControl(open, otui, chrome, options) {
       return formatRemoteEventLines(status);
     if (tab === "commands")
       return formatRemoteCommandLines(status);
-    const lines = formatRemoteStatusLines(status, options.getPostureLines?.());
+    const lines = formatRemoteStatusLines(status, options.getPostureLines?.(), options.getConfirmationLines?.());
     if (historyNote !== undefined) {
       const at = lines.findIndex((line) => line.startsWith("History:"));
       lines.splice(at < 0 ? lines.length : at + 1, 0, historyNote);
@@ -169196,14 +169696,17 @@ function fit3(text, width) {
     return "";
   return text.length <= width ? text : `${text.slice(0, Math.max(0, width - 1))}\u2026`;
 }
-function projectRemoteRow(status, width) {
+function projectRemoteRow(status, width, waitingCards = 0) {
   if (status === undefined || status.state === "off")
     return { text: fit3("off", width), role: "muted", action: "open" };
-  const detail = status.history === undefined ? {} : { detail: fit3(`history ${status.history.count} \xB7 ${clock2(status.history.at).slice(0, 5)}`, width) };
+  const detail = status.history === undefined ? {} : { detail: fit3(`history ${status.history.count} \xB7 ${clock3(status.history.at).slice(0, 5)}`, width) };
   if (status.state === "offline")
     return { text: fit3("offline", width), role: "attention", action: "open", ...detail };
   const topic = status.name ?? "connecting";
   const unconfirmed = status.unconfirmedApprovals ?? 0;
+  const cards = waitingCardsText(waitingCards);
+  if (cards !== undefined)
+    return { text: fit3(`${topic} \xB7 ${cards}`, width), role: "attention", action: "open", ...detail };
   if (unconfirmed > 0)
     return { text: fit3(`${topic} \xB7 ${unconfirmed} unconfirmed`, width), role: "attention", action: "open", ...detail };
   return { text: fit3(topic, width), role: "ok", action: "open", ...detail };
@@ -169232,7 +169735,7 @@ function mountRemotePanel(otui, renderer, parent, options) {
   box.add(detail);
   const posture = new core.TextRenderable(renderer, { id: "sb-remote-p", content: "" });
   box.add(posture);
-  const currentRow = () => projectRemoteRow(options.getStatus(), options.width);
+  const currentRow = () => projectRemoteRow(options.getStatus(), options.width, options.getWaitingCards?.() ?? 0);
   const draw = () => {
     if (disposed)
       return;
@@ -169277,6 +169780,7 @@ var init_remote_control_surface = __esm(() => {
   init_history2();
   init_history_host();
   init_shell_bridge();
+  init_operator_confirmations();
   init_flow_inspector();
   init_modal_host();
   init_theme_repaint();
@@ -169513,7 +170017,7 @@ var init_agent_commands = __esm(() => {
     },
     {
       name: "/remote-control",
-      description: "Drive this session from a Telegram topic: /remote-control [name|off|status]. Off by default",
+      description: "Drive this session from a Telegram topic: /remote-control [name|off|status]. Off by default. Shows the review cards (review_confirm_plan, review_decide_premise, review_waive_readiness, review_waive_coverage, review_complete) waiting for a press",
       modes: AGENT_ONLY
     },
     {
@@ -169598,7 +170102,7 @@ var init_agent_commands = __esm(() => {
     },
     {
       name: "/decisions",
-      description: "Recommendation journal: how often you follow the agent's recommendation, by mode and stage, and the deviations; /decisions arms: how often it was followed in each arm; /decisions reason <why> and /decisions change <option> follow up on the last answer",
+      description: "Recommendation journal: how often you follow the agent's recommendation, by mode and stage, and the deviations; /decisions arms: how often it was followed in each arm; /decisions reason <why> and /decisions change <option> follow up on the last answer; also lists the Telegram review cards waiting or answered (review_confirm_plan, review_decide_premise, review_waive_readiness, review_waive_coverage, review_complete)",
       modes: AGENT_ONLY
     },
     {
@@ -172314,7 +172818,7 @@ function approvalsText(views, now, options) {
 var RECENT_RESOLVED_LIMIT = 10;
 
 // src/lib/serve-turn-store.ts
-import { createHash as createHash92 } from "crypto";
+import { createHash as createHash93 } from "crypto";
 import { existsSync as existsSync84, readdirSync as readdirSync16, rmSync as rmSync6 } from "fs";
 import path376 from "path";
 function turnsRoot(dir) {
@@ -172325,11 +172829,11 @@ function turnDir(turnId, dir) {
 }
 function keyPath(project, idempotencyKey, dir) {
   const projectBytes = Buffer.byteLength(project, "utf8");
-  const digest = createHash92("sha256").update(`${projectBytes}:${project}\x00${idempotencyKey}`, "utf8").digest("hex");
+  const digest = createHash93("sha256").update(`${projectBytes}:${project}\x00${idempotencyKey}`, "utf8").digest("hex");
   return path376.join(turnsRoot(dir), "keys", `${digest}.json`);
 }
 function legacyKeyPath(idempotencyKey, dir) {
-  const digest = createHash92("sha256").update(idempotencyKey, "utf8").digest("hex");
+  const digest = createHash93("sha256").update(idempotencyKey, "utf8").digest("hex");
   return path376.join(turnsRoot(dir), "keys", `${digest}.json`);
 }
 function adoptLegacyClaim(project, idempotencyKey, dir) {
@@ -173583,7 +174087,7 @@ var init_types10 = __esm(() => {
 });
 
 // src/intake/store.ts
-import { createHash as createHash93 } from "crypto";
+import { createHash as createHash94 } from "crypto";
 import { appendFile as appendFile17, mkdir as mkdir81, readFile as readFile199, writeFile as writeFile50 } from "fs/promises";
 import path380 from "path";
 async function ensureIntakeDataIgnored(root) {
@@ -173606,11 +174110,11 @@ async function locked2(root, lock, fn) {
   return withFileLock(lock, fn, { timeoutMs: 5000 });
 }
 function cardIdFor(eventKey, stamp) {
-  return `c${createHash93("sha256").update(`${eventKey}
+  return `c${createHash94("sha256").update(`${eventKey}
 ${stamp}`).digest("hex").slice(0, 11)}`;
 }
 function overflowCardId(seed) {
-  return `o${createHash93("sha256").update(seed).digest("hex").slice(0, 11)}`;
+  return `o${createHash94("sha256").update(seed).digest("hex").slice(0, 11)}`;
 }
 function emptyIntakeState() {
   return { version: 1, paused: false, seen: {}, baselined: [], delivery: {}, recent: [], pendingEdits: {}, pendingEditTries: {} };
@@ -174993,7 +175497,7 @@ function summary(c) {
     ...c.remindAt !== undefined ? { remindAt: c.remindAt } : {}
   };
 }
-function clock3(iso) {
+function clock4(iso) {
   if (iso === null)
     return "\u0435\u0449\u0451 \u043D\u0435 \u043E\u043F\u0440\u0430\u0448\u0438\u0432\u0430\u043B\u0441\u044F";
   const d = new Date(iso);
@@ -175013,7 +175517,7 @@ async function buildIntakeStatus(root, deps = {}) {
   const nextPollAt = nextIntakePollAt(config, state);
   const ghAccount = ghEnvForProject(root, env)["GH_ACCOUNT"] === "work" ? "work" : "personal";
   const disabledReason = intakeDisabledReason(file);
-  const line = !file.present ? "Intake: \u043D\u0435 \u043D\u0430\u0441\u0442\u0440\u043E\u0435\u043D" : !config.enabled ? "Intake: \u0432\u044B\u043A\u043B" : state.paused ? `Intake: ${waiting.length} \u0436\u0434\u0443\u0442 | \u043F\u0430\u0443\u0437\u0430` : `Intake: ${waiting.length} \u0436\u0434\u0443\u0442 | \u0441\u043B\u0435\u0434\u0443\u044E\u0449\u0438\u0439 \u043E\u043F\u0440\u043E\u0441 ${clock3(nextPollAt)}`;
+  const line = !file.present ? "Intake: \u043D\u0435 \u043D\u0430\u0441\u0442\u0440\u043E\u0435\u043D" : !config.enabled ? "Intake: \u0432\u044B\u043A\u043B" : state.paused ? `Intake: ${waiting.length} \u0436\u0434\u0443\u0442 | \u043F\u0430\u0443\u0437\u0430` : `Intake: ${waiting.length} \u0436\u0434\u0443\u0442 | \u0441\u043B\u0435\u0434\u0443\u044E\u0449\u0438\u0439 \u043E\u043F\u0440\u043E\u0441 ${clock4(nextPollAt)}`;
   return {
     configured: file.present,
     enabled: config.enabled,
@@ -175811,12 +176315,19 @@ function presentDecisions(open, otui, chrome, options) {
   return handle;
 }
 async function openDecisions(otui, chrome, options) {
-  const { cwd, ...rest } = options;
-  const text = await reportText(cwd).catch(() => UNREADABLE);
+  const { cwd, confirmationLines, ...rest } = options;
+  const report = await reportText(cwd).catch(() => UNREADABLE);
+  const text = withConfirmationLines(report, confirmationLines?.() ?? []);
   return presentDecisions((hostOtui, hostChrome, input) => openModal(hostOtui, hostChrome, input), otui, chrome, { ...rest, text });
 }
+function withConfirmationLines(report, cards) {
+  return cards.length === 0 ? report : `${report}
+
+${cards.join(`
+`)}`;
+}
 async function openDecisionsArms(otui, chrome, options) {
-  const { cwd, ...rest } = options;
+  const { cwd, confirmationLines: _cards, ...rest } = options;
   const text = await armsText(cwd);
   return presentDecisions((hostOtui, hostChrome, input) => openModal(hostOtui, hostChrome, input), otui, chrome, { ...rest, text, tabLabel: "Arms" });
 }
@@ -175909,6 +176420,7 @@ function mountDecisionsSidebar(options) {
     modal?.close({ restoreFocus: false });
     modal = await open(core, chrome, {
       cwd: options.cwd,
+      ...options.confirmationLines !== undefined ? { confirmationLines: options.confirmationLines } : {},
       ...options.onKeypress !== undefined ? { onKeypress: options.onKeypress } : {}
     });
     return modal;
@@ -176766,7 +177278,7 @@ function discardResultText(result, runId) {
     return `Discarded run ${shortId(runId)}. Its stored patch was deleted.`;
   return `Not discarded (${result.reason}): ${clean3(result.detail)}`;
 }
-function errorText4(error) {
+function errorText5(error) {
   return clean3(error instanceof Error ? error.message : String(error));
 }
 function orderedFiles(record) {
@@ -176798,7 +177310,7 @@ function externalDiffSlashText(deps) {
       }
     }
   } catch (error) {
-    lines.push(`Could not read the write runs: ${errorText4(error)}`);
+    lines.push(`Could not read the write runs: ${errorText5(error)}`);
   }
   lines.push("Use keryx agents external review <run-id> and keryx agents external apply <run-id> in a terminal.");
   return `${lines.join(`
@@ -176823,7 +177335,7 @@ function createExternalDiffController(options) {
       runs = deps.list();
     } catch (error) {
       runs = [];
-      notice = `Could not read the write runs: ${errorText4(error)}`;
+      notice = `Could not read the write runs: ${errorText5(error)}`;
     }
     const ids = new Set(runs.map((run) => run.runId));
     for (const id of [...views.keys()]) {
@@ -176853,7 +177365,7 @@ function createExternalDiffController(options) {
       const view = deps.view(run.runId);
       entry = view === undefined ? {} : { view };
     } catch (error) {
-      entry = { error: errorText4(error) };
+      entry = { error: errorText5(error) };
     }
     views.set(run.runId, entry);
     return entry;
@@ -176951,7 +177463,7 @@ function createExternalDiffController(options) {
       try {
         text = landResultText(await deps.land({ runId, confirmedPatchHash: hash, allowFlagged }));
       } catch (error) {
-        text = `Apply failed: ${errorText4(error)}. ${NOTHING_APPLIED}`;
+        text = `Apply failed: ${errorText5(error)}. ${NOTHING_APPLIED}`;
       }
       allowFlaggedRun = undefined;
       views.clear();
@@ -176972,7 +177484,7 @@ function createExternalDiffController(options) {
     try {
       notice = discardResultText(deps.discard(run.runId), run.runId);
     } catch (error) {
-      notice = `Discard failed: ${errorText4(error)}`;
+      notice = `Discard failed: ${errorText5(error)}`;
     }
     allowFlaggedRun = undefined;
     views.clear();
@@ -177257,7 +177769,7 @@ var init_external_diff_sidebar = __esm(() => {
 
 // src/tui/autoreview-surface.ts
 import { spawn as nodeSpawn4 } from "child_process";
-import { existsSync as existsSync87, readdirSync as readdirSync18, readFileSync as readFileSync41 } from "fs";
+import { existsSync as existsSync87, readdirSync as readdirSync18, readFileSync as readFileSync42 } from "fs";
 import path386 from "path";
 function parseAutoReviewArgs(line) {
   const words = line.trim().split(/\s+/).slice(1);
@@ -177306,7 +177818,7 @@ function parseAutoReviewArgs(line) {
 }
 function readJson15(file) {
   try {
-    return JSON.parse(readFileSync41(file, "utf8"));
+    return JSON.parse(readFileSync42(file, "utf8"));
   } catch {
     return;
   }
@@ -178707,7 +179219,7 @@ var init_stdin_guard = __esm(() => {
 
 // src/tui/renderer-debug.ts
 import { spawnSync as spawnSync7 } from "child_process";
-import { readFileSync as readFileSync42, readlinkSync as readlinkSync2 } from "fs";
+import { readFileSync as readFileSync43, readlinkSync as readlinkSync2 } from "fs";
 function routeProcessWarnings(write = (text) => {
   process.stderr.write(text);
 }) {
@@ -178744,7 +179256,7 @@ function eofDiagnostics() {
   }
   let stat;
   try {
-    stat = readFileSync42("/proc/self/stat", "utf8").trim();
+    stat = readFileSync43("/proc/self/stat", "utf8").trim();
   } catch {
     stat = "";
   }
@@ -188619,12 +189131,12 @@ function maxOverFiles(files, values) {
 }
 
 // src/wiki/deep-enrich.ts
-import { randomUUID as randomUUID45, createHash as createHash94 } from "crypto";
+import { randomUUID as randomUUID45, createHash as createHash95 } from "crypto";
 function errorMessage5(cause) {
   return cause instanceof Error ? cause.message : String(cause);
 }
 function sha256Hex10(text) {
-  return createHash94("sha256").update(text).digest("hex");
+  return createHash95("sha256").update(text).digest("hex");
 }
 function buildDeepEnrichTools(port) {
   const deepOps = METAPROJECT_OPERATIONS.filter((op) => DEEP_ENRICH_OPS.includes(op.name));
@@ -188863,7 +189375,7 @@ var init_deep_enrich = __esm(() => {
 });
 
 // src/wiki/enrich.ts
-import { existsSync as existsSync88, mkdirSync as mkdirSync14, readFileSync as readFileSync43, writeFileSync as writeFileSync12 } from "fs";
+import { existsSync as existsSync88, mkdirSync as mkdirSync14, readFileSync as readFileSync44, writeFileSync as writeFileSync12 } from "fs";
 import { readFile as readFile207 } from "fs/promises";
 import path393 from "path";
 function resolveEnrichProviderModel(input) {
@@ -188881,7 +189393,7 @@ function loadResumeState(cwd) {
     if (!existsSync88(file)) {
       return { updatedAt: new Date().toISOString(), completed: [], failed: [] };
     }
-    const raw = JSON.parse(readFileSync43(file, "utf8"));
+    const raw = JSON.parse(readFileSync44(file, "utf8"));
     if (raw === null || typeof raw !== "object") {
       return { updatedAt: new Date().toISOString(), completed: [], failed: [] };
     }
@@ -191485,7 +191997,7 @@ var init_turn_loop = __esm(() => {
 });
 
 // src/tui/worker-fleet.ts
-function clip7(s, max) {
+function clip8(s, max) {
   if (s.length <= max) {
     return s;
   }
@@ -191576,7 +192088,7 @@ function formatFleetSidebar(workers, maxLines = 14) {
   if (main !== undefined) {
     lines.push(mainHeadline(main.status));
     const phase = humanFleetPhase(main.status, main.detail);
-    lines.push(`  ${clip7(phase, 26)}`);
+    lines.push(`  ${clip8(phase, 26)}`);
     if (main.status === "blocked") {
       lines.push("  \u2191 pick menu above input");
     }
@@ -191611,8 +192123,8 @@ function formatFleetSidebar(workers, maxLines = 14) {
     for (const w of shown) {
       const g = STATUS_GLYPH2[w.status];
       const phase = humanFleetPhase(w.status, w.detail);
-      const label = clip7(w.label, 12);
-      const det = phase.length > 0 ? ` ${clip7(phase, 12)}` : "";
+      const label = clip8(w.label, 12);
+      const det = phase.length > 0 ? ` ${clip8(phase, 12)}` : "";
       lines.push(`${g} ${label}${det}`);
     }
     if (sorted.length > shown.length) {
@@ -191642,8 +192154,8 @@ function formatPeerLine(peer) {
   const statusGlyph = PEER_STATUS_GLYPH[peer.status] ?? "?";
   const name = displaySafe(peer.name);
   const activity = displaySafe(peer.activity).trim();
-  const detail = activity.length > 0 ? ` ${clip7(activity, 14)}` : "";
-  return `${marker}${statusGlyph} @${clip7(name, 10)}${detail}`;
+  const detail = activity.length > 0 ? ` ${clip8(activity, 14)}` : "";
+  return `${marker}${statusGlyph} @${clip8(name, 10)}${detail}`;
 }
 function formatFleetSidebarWithPeers(workers, peers = [], maxLines = 14) {
   const base = formatFleetSidebar(workers, maxLines);
@@ -191746,7 +192258,7 @@ var init_worker_fleet = __esm(() => {
 });
 
 // src/tui/subagent-session.ts
-function clip8(s, max) {
+function clip9(s, max) {
   if (s.length <= max) {
     return s;
   }
@@ -191778,11 +192290,11 @@ function formatSubagentRow(session, width = SIDEBAR_TEXT_WIDTH) {
   const mark = session.runtime === "external" ? EXTERNAL_SUBAGENT_MARK : "";
   const budget = Math.max(4, width - glyph.length - 1);
   const labelBudget = Math.max(1, Math.min(12, budget) - mark.length);
-  const label = `${mark}${clip8(session.label, labelBudget)}`;
+  const label = `${mark}${clip9(session.label, labelBudget)}`;
   const used = glyph.length + 1 + label.length;
   const detBudget = width - used - 1;
-  const det = detBudget >= 3 && phase.length > 0 ? ` ${clip8(phase, detBudget)}` : "";
-  return clip8(`${glyph} ${label}${det}`, width);
+  const det = detBudget >= 3 && phase.length > 0 ? ` ${clip9(phase, detBudget)}` : "";
+  return clip9(`${glyph} ${label}${det}`, width);
 }
 function formatSubagentListHeader(count) {
   return `Subagents ${count}`;
@@ -192877,7 +193389,7 @@ function renderExternalTranscript(events, options = {}) {
   if (options.summary !== false && events.length > 0) {
     lines.push("", formatTranscriptFooter(foldExternalTranscript(events)));
   }
-  return options.width === undefined ? lines : lines.map((line) => clip9(line, options.width ?? 0));
+  return options.width === undefined ? lines : lines.map((line) => clip10(line, options.width ?? 0));
 }
 function formatExternalWork(events, options = {}) {
   return renderExternalTranscript(events, options).join(`
@@ -193042,7 +193554,7 @@ function describeSkips(skippedLines) {
 function plural5(count, singular, pluralForm) {
   return `${count} ${count === 1 ? singular : pluralForm ?? `${singular}s`}`;
 }
-function clip9(value, width) {
+function clip10(value, width) {
   if (width <= 0 || value.length <= width)
     return value;
   return `${value.slice(0, Math.max(1, width - 1))}\u2026`;
@@ -193185,7 +193697,7 @@ function appendBounded(output, chunk) {
   const combined = output + chunk;
   return combined.length > MAX_BACKGROUND_JOB_OUTPUT_CHARS ? combined.slice(-MAX_BACKGROUND_JOB_OUTPUT_CHARS) : combined;
 }
-function clip10(s, max) {
+function clip11(s, max) {
   if (max <= 0) {
     return "";
   }
@@ -193200,8 +193712,8 @@ function formatJobListHeader(count) {
 function formatJobRow(entry, width = SIDEBAR_TEXT_WIDTH) {
   const glyph = STATUS_GLYPH4[entry.status];
   const budget = Math.max(1, width - glyph.length - 1);
-  const cmd = clip10(entry.command, budget);
-  return clip10(`${glyph} ${cmd}`, width);
+  const cmd = clip11(entry.command, budget);
+  return clip11(`${glyph} ${cmd}`, width);
 }
 function formatJobMeta(entry, now = Date.now()) {
   const rows = [
@@ -194981,6 +195493,9 @@ function shouldAutoApproveReadOnlySpawn(mode, hookAsk, untrustedOrigin) {
 function isUserPromptApprovalCard(tool) {
   return tool === "user_prompt";
 }
+function withMirrorNote(card, note) {
+  return card.length === 0 ? [note] : [...card.slice(0, -1), note, card[card.length - 1]];
+}
 function operatorCardDialog(cardTitle) {
   if (cardTitle === undefined) {
     return {
@@ -196431,6 +196946,8 @@ async function launchTuiAgentShell(opts) {
   let liveReviewsPanel;
   let remoteBridge;
   let liveRemotePanel;
+  const operatorCards = new OperatorConfirmationLog;
+  const operatorCardLines = () => confirmationLines(operatorCards.entries(), Date.now());
   let liveChannelsPanel;
   const channelsClient = new ChannelsClient;
   let liveApprovals;
@@ -196785,6 +197302,7 @@ async function launchTuiAgentShell(opts) {
     liveRemotePanel = mountRemotePanel(otui, r, sidebar, {
       width: SIDEBAR_TEXT_WIDTH,
       getStatus: remoteStatus,
+      getWaitingCards: () => operatorCards.waiting().length,
       onOpen: () => showRemoteControl(),
       onOpenPermissions: () => showPermissions(),
       getPosture: () => {
@@ -196826,7 +197344,8 @@ async function launchTuiAgentShell(opts) {
       notice: (text) => io.onSystem?.(`\u25C7 ${text}
 `),
       lastDecisionId: lastAskUserDecisionId,
-      session: askUserSessionId()
+      session: askUserSessionId(),
+      confirmationLines: operatorCardLines
     });
     liveDecisions = decisionsPanel;
     liveResearchSync = mountResearchSyncPanel(otui, r, sidebar, {
@@ -197824,10 +198343,16 @@ async function launchTuiAgentShell(opts) {
 `);
       if (decision !== "allow")
         return false;
-      return meta?.fingerprint !== undefined ? { approved: true, fingerprint: meta.fingerprint, via: "remote" } : true;
+      return meta?.fingerprint !== undefined ? remoteApproval(meta.fingerprint, answer.fromId) : true;
     };
     const mirrorApprovalToTopic = (inner) => async (tool, inputJson, meta) => {
       const bridge = remoteBridge;
+      const isCard = meta?.alwaysAsk === true && meta.card !== undefined && meta.card.length > 0 && !isUserPromptApprovalCard(tool);
+      const unmirrored = isCard ? mirrorUndeliveredNote(bridge) : undefined;
+      if (unmirrored !== undefined && meta?.card !== undefined) {
+        const card = withMirrorNote(meta.card, unmirrored);
+        return askUnmirroredCard(operatorCards, meta.card[0] ?? tool, foregroundOperation.signal, () => inner(tool, inputJson, { ...meta, card }));
+      }
       if (bridge === undefined || !bridge.active) {
         return inner(tool, inputJson, meta);
       }
@@ -197836,8 +198361,12 @@ async function launchTuiAgentShell(opts) {
         return inner(tool, inputJson, meta);
       }
       const brief = tool.length > 60 ? `${tool.slice(0, 59)}\u2026` : tool;
-      const outcome = await raceApproval({
+      const outcome = await raceMirroredCard({
+        log: operatorCards,
+        question: isCard && meta?.card !== undefined ? meta.card[0] ?? tool : undefined,
         turnSignal: foregroundOperation.signal,
+        onUndelivered: () => io.onSystem?.(`\u25C7 Telegram mirror not delivered: the topic did not take the card. Answer it here.
+`),
         dock: (race) => inner(tool, inputJson, meta, race),
         topic: (signal) => bridge.askApproval(describeApprovalForTopic(tool, inputJson, meta), { signal, timeoutMs: MAX_APPROVAL_TIMEOUT_MS })
       });
@@ -197851,7 +198380,7 @@ async function launchTuiAgentShell(opts) {
 `);
       if (!allowed)
         return false;
-      return meta?.fingerprint !== undefined ? { approved: true, fingerprint: meta.fingerprint, via: "remote" } : true;
+      return meta?.fingerprint !== undefined ? remoteApproval(meta.fingerprint, outcome.answer.fromId) : true;
     };
     io.requestApproval = trackApproval(mirrorApprovalToTopic(requestApprovalLocally));
     const askUserInteractive = async (req) => {
@@ -198698,9 +199227,14 @@ Staying in the current session.
       });
     };
     const remoteModalListeners = new Set;
+    operatorCards.subscribe(() => {
+      liveRemotePanel?.refresh();
+      remoteModalListeners.forEach((listener) => listener());
+    });
     const showRemoteControl = () => {
       openRemoteControl(otui, chrome, {
         getStatus: remoteStatus,
+        getConfirmationLines: operatorCardLines,
         subscribeChange: (listener) => {
           remoteModalListeners.add(listener);
           return () => {
@@ -201276,6 +201810,7 @@ var init_tui_shell = __esm(() => {
   init_approvals_sidebar();
   init_intake_surface();
   init_decisions_surface();
+  init_operator_confirmations();
   init_research_sync_panel();
   init_external_diff_sidebar();
   init_autoreview_surface();
@@ -201836,7 +202371,7 @@ var init_chat_shell = __esm(() => {
 
 // src/tui/debug-watcher.ts
 import { spawn as spawn12, spawnSync as spawnSync9 } from "child_process";
-import { closeSync as closeSync12, constants as constants7, openSync as openSync13, readdirSync as readdirSync19, readFileSync as readFileSync44, readlinkSync as readlinkSync3, statSync as statSync24 } from "fs";
+import { closeSync as closeSync12, constants as constants7, openSync as openSync13, readdirSync as readdirSync19, readFileSync as readFileSync45, readlinkSync as readlinkSync3, statSync as statSync24 } from "fs";
 import path396 from "path";
 function parseEpollFdinfo(text) {
   const out = [];
@@ -201881,7 +202416,7 @@ function isAlive(pid) {
 }
 function readText7(file) {
   try {
-    return readFileSync44(file, "utf8");
+    return readFileSync45(file, "utf8");
   } catch {
     return;
   }
@@ -204928,7 +205463,13 @@ Example: keryx shell --provider ollama --model llama3.1:latest`);
             ...flags.denyTools !== undefined ? { denyTools: flags.denyTools } : {},
             ...bus !== undefined ? { bus } : {},
             schedules: { projectRoot: cwd, defaults: () => ({ provider: sel.provider, model: sel.model }) },
-            operatorConfirm: { projectRoot: cwd }
+            operatorConfirm: {
+              projectRoot: cwd,
+              allowedUserIds: () => {
+                const loaded = loadRemoteConfig();
+                return loaded.ok ? loaded.value.allowedUserIds : undefined;
+              }
+            }
           }),
           mcpRuntime: () => mcpRuntime,
           maxOutputTokens: resolveAgentMaxOutputTokens({
@@ -205379,6 +205920,7 @@ var init_shell = __esm(() => {
   init_reviews_inspector();
   init_remote_control_surface();
   init_channels_client();
+  init_config11();
   init_channels_surface();
   init_intake_surface();
   init_session_info();
@@ -211940,7 +212482,7 @@ var init_judge_recordings = __esm(() => {
 });
 
 // src/gdskills/governance/authoring-lint.ts
-import { existsSync as existsSync90, readdirSync as readdirSync20, readFileSync as readFileSync45 } from "fs";
+import { existsSync as existsSync90, readdirSync as readdirSync20, readFileSync as readFileSync46 } from "fs";
 import path414 from "path";
 function skillDirectoryName(skillMdPath) {
   return path414.basename(path414.dirname(skillMdPath));
@@ -211965,7 +212507,7 @@ function deepReferenceFindings(skillMdPath) {
     if (!entry.isFile() || !entry.name.endsWith(".md"))
       continue;
     const refPath = path414.join(referencesDir, entry.name);
-    const content = readFileSync45(refPath, "utf8");
+    const content = readFileSync46(refPath, "utf8");
     const linksAnotherReference = /\]\([^)]*\.md\)/.test(content) || /\breferences\/[\w.-]+\.md\b/.test(content);
     if (linksAnotherReference) {
       findings.push({
@@ -212086,15 +212628,15 @@ var init_authoring_lint = __esm(() => {
 });
 
 // src/gdskills/governance/stocktake.ts
-import { createHash as createHash95 } from "crypto";
-import { existsSync as existsSync91, readdirSync as readdirSync21, readFileSync as readFileSync46, statSync as statSync25 } from "fs";
+import { createHash as createHash96 } from "crypto";
+import { existsSync as existsSync91, readdirSync as readdirSync21, readFileSync as readFileSync47, statSync as statSync25 } from "fs";
 import path415 from "path";
 function cacheKeyMatches(cached, inputs, quick) {
   return cached.algorithmVersion === ALGORITHM_VERSION && cached.quick === quick && cached.sha256 === inputs.sha256 && cached.catalogFingerprint === inputs.catalogFingerprint && cached.verificationReportHash === inputs.verificationReportHash && cached.referencesHash === inputs.referencesHash;
 }
 function catalogFingerprint(catalog) {
   const parts = [...catalog].map((entry) => `${entry.id}:${entry.sha256}`).sort();
-  return createHash95("sha256").update(parts.join(`
+  return createHash96("sha256").update(parts.join(`
 `)).digest("hex");
 }
 function verificationReportHash(root, entry) {
@@ -212102,7 +212644,7 @@ function verificationReportHash(root, entry) {
   if (!existsSync91(reportPath))
     return null;
   try {
-    return createHash95("sha256").update(readFileSync46(reportPath, "utf8")).digest("hex");
+    return createHash96("sha256").update(readFileSync47(reportPath, "utf8")).digest("hex");
   } catch {
     return null;
   }
@@ -212124,11 +212666,11 @@ function referencesHash(entry) {
     }
   };
   walk(referencesDir, "");
-  const hash = createHash95("sha256");
+  const hash = createHash96("sha256");
   for (const rel of files) {
     hash.update(rel);
     hash.update("\x00");
-    hash.update(readFileSync46(path415.join(referencesDir, rel)));
+    hash.update(readFileSync47(path415.join(referencesDir, rel)));
     hash.update("\x00");
   }
   return hash.digest("hex");
@@ -212137,7 +212679,7 @@ function loadCache2(cachePath) {
   if (!existsSync91(cachePath))
     return {};
   try {
-    return JSON.parse(readFileSync46(cachePath, "utf8"));
+    return JSON.parse(readFileSync47(cachePath, "utf8"));
   } catch {
     return {};
   }
@@ -212154,7 +212696,7 @@ function checkFreshness(root, entry) {
   if (!existsSync91(reportPath))
     return;
   try {
-    const report = JSON.parse(readFileSync46(reportPath, "utf8"));
+    const report = JSON.parse(readFileSync47(reportPath, "utf8"));
     if (report.status === "stale" || report.status === "needs-review" || report.status === "blocked") {
       return {
         skillId: entry.id,
@@ -213436,7 +213978,7 @@ var init_install_manifest_schema = __esm(() => {
 });
 
 // src/gdskills/manifest/manifest.ts
-import { existsSync as existsSync92, readFileSync as readFileSync47 } from "fs";
+import { existsSync as existsSync92, readFileSync as readFileSync48 } from "fs";
 import path417 from "path";
 import { fileURLToPath as fileURLToPath9 } from "url";
 function thisModuleDir() {
@@ -213468,7 +214010,7 @@ function parseInstallManifest(fileLabel, raw) {
 }
 function loadBundledManifest() {
   const file = bundledManifestPath();
-  const parsed = JSON.parse(readFileSync47(file, "utf8"));
+  const parsed = JSON.parse(readFileSync48(file, "utf8"));
   return parseInstallManifest(file, parsed);
 }
 var HARNESS_IDS, BUNDLED_TREE, InvalidInstallManifestError;
@@ -213572,7 +214114,7 @@ var init_glob = __esm(() => {
 });
 
 // src/gdskills/manifest/plan.ts
-import { createHash as createHash96 } from "crypto";
+import { createHash as createHash97 } from "crypto";
 import path419 from "path";
 function destinationRootsForTarget(target) {
   if (target === "claude")
@@ -213584,7 +214126,7 @@ function destinationRootsForTarget(target) {
 }
 function stackInputsSha256(stack) {
   const { detectedAt: _detectedAt, ...rest } = stack;
-  return createHash96("sha256").update(stableStringify3(rest)).digest("hex");
+  return createHash97("sha256").update(stableStringify3(rest)).digest("hex");
 }
 function stableStringify3(value) {
   if (Array.isArray(value)) {
@@ -226040,7 +226582,7 @@ var init_detect3 = __esm(() => {
 });
 
 // src/stack/service.ts
-import { createHash as createHash97 } from "crypto";
+import { createHash as createHash98 } from "crypto";
 import { readFile as readFile233 } from "fs/promises";
 import path446 from "path";
 function stackJsonPath(root) {
@@ -226066,7 +226608,7 @@ function serializeStackDetection(doc) {
 }
 function fingerprintOf(core) {
   const canonical = JSON.stringify(canonicalize2(core));
-  return createHash97("sha256").update(canonical, "utf8").digest("hex");
+  return createHash98("sha256").update(canonical, "utf8").digest("hex");
 }
 async function readStackDetection(root) {
   try {
@@ -226340,9 +226882,9 @@ function evaluateCompletion(input, deps) {
 var SCHEMA_VERSION3 = 1;
 
 // src/harness/evidence/redaction.ts
-import { createHash as createHash98 } from "crypto";
+import { createHash as createHash99 } from "crypto";
 function hashContent(content) {
-  return createHash98("sha256").update(content, "utf8").digest("hex");
+  return createHash99("sha256").update(content, "utf8").digest("hex");
 }
 function redactForPersistence(content, deps) {
   const scan = deps.scan(content);
@@ -226392,7 +226934,7 @@ async function metaprojectBlastRadius(port, target) {
 }
 
 // src/harness/session/session.ts
-import { createHash as createHash99 } from "crypto";
+import { createHash as createHash100 } from "crypto";
 function canonicalStringify(value) {
   if (Array.isArray(value)) {
     return `[${value.map(canonicalStringify).join(",")}]`;
@@ -226405,7 +226947,7 @@ function canonicalStringify(value) {
   return JSON.stringify(value) ?? "null";
 }
 function sha25612(input) {
-  return createHash99("sha256").update(input, "utf8").digest("hex");
+  return createHash100("sha256").update(input, "utf8").digest("hex");
 }
 function deepFreeze(value) {
   if (value !== null && typeof value === "object") {
@@ -226549,7 +227091,7 @@ var init_startup = __esm(() => {
 });
 
 // src/harness/run/run.ts
-import { createHash as createHash100 } from "crypto";
+import { createHash as createHash101 } from "crypto";
 function aliasRunHookToolName(keryxToolName) {
   return RUN_HOOK_TOOL_NAME_ALIASES[keryxToolName] ?? keryxToolName;
 }
@@ -226565,7 +227107,7 @@ function canonicalize3(value) {
   return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalize3(record[key])}`).join(",")}}`;
 }
 function sha25613(input) {
-  return createHash100("sha256").update(input, "utf8").digest("hex");
+  return createHash101("sha256").update(input, "utf8").digest("hex");
 }
 function uniqueInOrder2(values) {
   const seen = new Set;
@@ -227158,7 +227700,7 @@ var init_replay = __esm(() => {
 });
 
 // src/harness/tool/registry.ts
-import { createHash as createHash101 } from "crypto";
+import { createHash as createHash102 } from "crypto";
 function canonicalize4(value) {
   if (value === null || typeof value !== "object") {
     return JSON.stringify(value) ?? "null";
@@ -227172,7 +227714,7 @@ function canonicalize4(value) {
   return `{${entries.join(",")}}`;
 }
 function sha25614(input) {
-  return createHash101("sha256").update(input, "utf8").digest("hex");
+  return createHash102("sha256").update(input, "utf8").digest("hex");
 }
 function definitionHash(definition) {
   return sha25614(canonicalize4(definition));
@@ -227325,9 +227867,9 @@ var init_executor = __esm(() => {
 
 // src/harness/process/real-process-adapter.ts
 import { spawnSync as spawnSync10 } from "child_process";
-import { createHash as createHash102 } from "crypto";
+import { createHash as createHash103 } from "crypto";
 function sha256Hex11(input) {
-  return createHash102("sha256").update(input, "utf8").digest("hex");
+  return createHash103("sha256").update(input, "utf8").digest("hex");
 }
 function byteLength3(chunk) {
   if (chunk === null || chunk === undefined)
@@ -227641,7 +228183,7 @@ function checkApproval(input) {
 }
 
 // src/commands/harness.ts
-import { readFileSync as readFileSync48, writeFileSync as writeFileSync13 } from "fs";
+import { readFileSync as readFileSync49, writeFileSync as writeFileSync13 } from "fs";
 import path448 from "path";
 import { randomUUID as randomUUID49 } from "crypto";
 import { realpathSync as realpathSync21 } from "fs";
@@ -227884,7 +228426,7 @@ function parseReplayArgs(args) {
 function readJsonFile3(file) {
   let text;
   try {
-    text = readFileSync48(file, "utf8");
+    text = readFileSync49(file, "utf8");
   } catch (error) {
     return { ok: false, reason: error instanceof Error ? error.message : String(error) };
   }
@@ -228248,7 +228790,7 @@ function readSpecArg(args) {
   if (specPath === undefined) {
     throw new Error("keryx harness: a --spec <path> argument is required when no spec is injected.");
   }
-  return JSON.parse(readFileSync48(specPath, "utf8"));
+  return JSON.parse(readFileSync49(specPath, "utf8"));
 }
 function harnessExtension(args, deps) {
   const { clock, idSeq } = resolveRuntime(deps);
@@ -228431,7 +228973,7 @@ async function sessionsCommand(args) {
     console.log(pad2("ID", 10) + pad2("UPDATED", 22) + pad2("MSGS", 6) + pad2("LIVE", 7) + pad2("MODEL", 24) + "TITLE");
     for (const { summary: s, lease } of listed) {
       const model = s.provider !== undefined && s.model !== undefined ? `${s.provider}/${s.model}` : s.model ?? "-";
-      console.log(pad2(shortSessionId(s.id), 10) + pad2(s.updatedAt.slice(0, 19).replace("T", " "), 22) + pad2(String(s.messageCount), 6) + pad2(lease ?? "", 7) + pad2(clip11(model, 22), 24) + (s.parentSessionId !== undefined ? `\u21B3 ${s.title}` : s.title));
+      console.log(pad2(shortSessionId(s.id), 10) + pad2(s.updatedAt.slice(0, 19).replace("T", " "), 22) + pad2(String(s.messageCount), 6) + pad2(lease ?? "", 7) + pad2(clip12(model, 22), 24) + (s.parentSessionId !== undefined ? `\u21B3 ${s.title}` : s.title));
       if (s.remote !== undefined) {
         console.log(`${" ".repeat(10)}\u21C4 ${describeRemote(s.remote)}`);
       }
@@ -228537,7 +229079,7 @@ function leaseColumn(cwd, sessionId) {
 function pad2(s, n) {
   return s.length >= n ? `${s.slice(0, n - 1)} ` : s + " ".repeat(n - s.length);
 }
-function clip11(s, n) {
+function clip12(s, n) {
   return s.length > n ? `${s.slice(0, n - 1)}\u2026` : s;
 }
 function printHelp20() {
@@ -229107,7 +229649,7 @@ var init_session3 = __esm(() => {
 });
 
 // src/acp/session-mcp.ts
-import { createHash as createHash103 } from "crypto";
+import { createHash as createHash104 } from "crypto";
 function isRecord17(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -229234,7 +229776,7 @@ function acpMcpSetKey(parsed) {
     })),
     refused: parsed.refused
   };
-  return createHash103("sha256").update(JSON.stringify(canonical)).digest("hex");
+  return createHash104("sha256").update(JSON.stringify(canonical)).digest("hex");
 }
 function startAcpSessionMcp(parsed, options = {}) {
   const refused = parsed.refused.map((problem) => ({ name: problem.name, reason: scrub(problem.reason, parsed.secrets) }));
@@ -230193,9 +230735,9 @@ var init_server2 = __esm(() => {
 });
 
 // src/acp/fixture-provider.ts
-import { readFileSync as readFileSync49 } from "fs";
+import { readFileSync as readFileSync50 } from "fs";
 function loadAcpFixture(path) {
-  const raw = readFileSync49(path, "utf-8");
+  const raw = readFileSync50(path, "utf-8");
   const parsed = JSON.parse(raw);
   const turns = parsed.turns;
   const models = parsed.models !== undefined && parsed.models.length > 0 ? [...parsed.models] : ["fixture-model"];
@@ -232278,7 +232820,7 @@ var init_serve_runner = __esm(() => {
 });
 
 // src/remote/naming.ts
-import { createHash as createHash104 } from "crypto";
+import { createHash as createHash105 } from "crypto";
 import { hostname as hostname5 } from "os";
 import path451 from "path";
 function nameKey(name) {
@@ -232308,7 +232850,7 @@ function idChars(sessionId) {
 }
 function machineSlug(machine) {
   const slug = machine.normalize("NFKD").replace(/[^A-Za-z0-9._-]+/g, "-").replace(/-+/g, "-").replace(/^[-.]+|[-.]+$/g, "").slice(0, MAX_MACHINE_SLUG);
-  return slug.length > 0 ? slug : `host-${createHash104("sha256").update(machine.normalize("NFC")).digest("hex").slice(0, 6)}`;
+  return slug.length > 0 ? slug : `host-${createHash105("sha256").update(machine.normalize("NFC")).digest("hex").slice(0, 6)}`;
 }
 function localMachineName(read = hostname5) {
   let name = "";
@@ -233710,7 +234252,7 @@ var init_durable_log = __esm(() => {
 });
 
 // src/remote/inbound.ts
-import { createHash as createHash105 } from "crypto";
+import { createHash as createHash106 } from "crypto";
 import { unlinkSync as unlinkSync11 } from "fs";
 import path452 from "path";
 function parseEntry6(value) {
@@ -233743,7 +234285,7 @@ class InboundQueues {
     this.directory = ensureRemoteDir(this.dir, INBOUND_DIRNAME);
   }
   fileFor(bindingKey) {
-    const name = createHash105("sha256").update(bindingKey).digest("hex").slice(0, 32);
+    const name = createHash106("sha256").update(bindingKey).digest("hex").slice(0, 32);
     return path452.join(this.directory, `${name}.jsonl`);
   }
   log(bindingKey) {
@@ -238214,7 +238756,7 @@ var init_serve_research_sync = __esm(() => {
 
 // src/intake/assess.ts
 import { randomUUID as randomUUID58 } from "crypto";
-function clip12(text, max) {
+function clip13(text, max) {
   const flat = redactSensitiveText(text).replace(/[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g, " ").trim();
   return flat.length > max ? `${flat.slice(0, max)}\u2026` : flat;
 }
@@ -238222,10 +238764,10 @@ function promptFor(input) {
   const { event } = input;
   return [
     `Kind: ${event.kind}`,
-    `Title: ${clip12(event.title, TITLE_MAX).replace(/\s+/g, " ")}`,
+    `Title: ${clip13(event.title, TITLE_MAX).replace(/\s+/g, " ")}`,
     `Allowed actions: ${input.allowed.join(", ")}`,
     "Text:",
-    clip12(event.body ?? "", BODY_MAX2)
+    clip13(event.body ?? "", BODY_MAX2)
   ].join(`
 `);
 }
@@ -241288,7 +241830,7 @@ var init_agents_external = __esm(() => {
 });
 
 // src/commands/agents-catalog.ts
-import { existsSync as existsSync94, lstatSync as lstatSync10, readFileSync as readFileSync50, writeFileSync as writeFileSync14 } from "fs";
+import { existsSync as existsSync94, lstatSync as lstatSync10, readFileSync as readFileSync51, writeFileSync as writeFileSync14 } from "fs";
 import path464 from "path";
 function resolveDeps2(deps) {
   return {
@@ -241569,7 +242111,7 @@ function printVerifyHelp2() {
 function readStackPackForGeneration(packJsonPath, stackId) {
   let raw;
   try {
-    raw = JSON.parse(readFileSync50(packJsonPath, "utf8"));
+    raw = JSON.parse(readFileSync51(packJsonPath, "utf8"));
   } catch {
     return;
   }
@@ -241694,7 +242236,7 @@ function generateCommand(args, depsIn) {
   }
   const outcomes = [];
   for (const { file, filePath, existed } of prepared) {
-    const previous = existed ? readFileSync50(filePath, "utf8") : undefined;
+    const previous = existed ? readFileSync51(filePath, "utf8") : undefined;
     const changed = previous !== file.content;
     if (!check && changed) {
       writeFileSync14(filePath, file.content, "utf8");
@@ -241818,7 +242360,7 @@ var init_reduce = __esm(() => {
 });
 
 // src/commands/agents.ts
-import { readFileSync as readFileSync51 } from "fs";
+import { readFileSync as readFileSync52 } from "fs";
 async function agentsCommand(args = []) {
   const subcommand = args[0];
   if (!subcommand || subcommand === "--help" || subcommand === "-h") {
@@ -241870,7 +242412,7 @@ function monitorCommand(args) {
   }
   let events;
   try {
-    events = parseAgentEvents(readFileSync51(source, "utf8"));
+    events = parseAgentEvents(readFileSync52(source, "utf8"));
   } catch (error) {
     console.error(`Failed to read/parse agent-event source "${source}": ${error.message}`);
     process.exitCode = 1;
@@ -246190,7 +246732,7 @@ var init_product = __esm(() => {
 });
 
 // src/commands/hooks.ts
-import { existsSync as existsSync95, readFileSync as readFileSync52 } from "fs";
+import { existsSync as existsSync95, readFileSync as readFileSync53 } from "fs";
 import path469 from "path";
 function resolveHomeDir(deps) {
   return resolveHooksHomeDir(process.env, deps.homeDir);
@@ -246615,7 +247157,7 @@ async function runTest(args, deps) {
   if (payloadFileArg !== undefined) {
     let raw;
     try {
-      raw = readFileSync52(payloadFileArg, "utf8");
+      raw = readFileSync53(payloadFileArg, "utf8");
     } catch (err) {
       fail8(`Could not read --payload-file "${payloadFileArg}": ${err instanceof Error ? err.message : String(err)}`);
     }
@@ -246755,7 +247297,7 @@ function emptyDoc() {
 function readDoc(filePath) {
   let raw;
   try {
-    raw = readFileSync52(filePath, "utf8");
+    raw = readFileSync53(filePath, "utf8");
   } catch (err) {
     if (err instanceof Error && "code" in err && err.code === "ENOENT") {
       return emptyDoc();