@mrrlin-dev/mcp 0.4.5 → 0.4.6

package/dist/bin.cjs

@@ -20645,7 +20645,7 @@ var require_dist = __commonJS({
 
 // src/bin.ts
 var import_node_path25 = __toESM(require("node:path"), 1);
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var import_node_fs17 = require("node:fs");
 var import_node_os15 = require("node:os");
 var import_node_path26 = __toESM(require("node:path"), 1);
@@ -36801,6 +36801,8 @@ var openApiOperationIds = {
   getTaskState: "getTaskState",
   upsertTaskState: "upsertTaskState",
   retireThread: "retireThread",
+  applyIntentVerdict: "applyIntentVerdict",
+  armIntentCheck: "armIntentCheck",
   // Run-scoped, model-facing half of the resume contract (D8). Distinct from upsertTaskState:
   // that one is the server's own write (whole record, explicit lastRunSeq), this one is the
   // executor reporting narrative only, with the ordering value derived server-side from the run.
@@ -37035,7 +37037,10 @@ var mrrlinAsyncJobSchema = external_exports.object({
   directorSessionId: external_exports.string().nullable().default(null),
   createdAt: external_exports.string(),
   finishedAt: external_exports.string().nullable().default(null),
-  updatedAt: external_exports.string()
+  updatedAt: external_exports.string(),
+  // model-tier-planning-and-arbiter task 1.8: the seat minted at claim (or inherited from a
+  // prior attempt on this same lease); NULL only before the first beginAttempt call pins it.
+  agentSeat: external_exports.enum(["codex", "claude"]).nullable().default(null)
 }).strict();
 var asyncJobResponseSchema = external_exports.object({ data: mrrlinAsyncJobSchema });
 var asyncJobMaybeResponseSchema = external_exports.object({ data: mrrlinAsyncJobSchema.nullable() });
@@ -37052,7 +37057,10 @@ var mrrlinAsyncJobTouchSchema = external_exports.object({
 });
 var mrrlinAsyncJobBeginAttemptSchema = external_exports.object({
   leaseId: external_exports.string().min(1),
-  requestedHash: external_exports.string().min(1)
+  requestedHash: external_exports.string().min(1),
+  // task 1.8: the caller has already resolved (inherited or minted) a seat for this job by the
+  // time it begins an attempt — required, not optional, so persistence can never be skipped.
+  agentSeat: external_exports.enum(["codex", "claude"])
 });
 var mrrlinAsyncJobTerminalizeSchema = external_exports.object({
   leaseId: external_exports.string().min(1),
@@ -37338,6 +37346,7 @@ var mrrlinStopReasonSchema = external_exports.enum([
   "spec_draft_failed",
   "spec_not_specs_folder",
   "awaiting_clarification",
+  "intent_unconfirmed",
   "consensus_blocked",
   "consensus_run_failed",
   "consensus_disabled_spec_not_ready",
@@ -37379,6 +37388,11 @@ var mrrlinTaskSchema = external_exports.object({
   followUpAt: external_exports.string().datetime().nullable(),
   id: mrrlinTaskIdSchema,
   impact: mrrlinTaskImpactSchema,
+  // early-intent-confirmation: written by the intent-verdict route on either verdict; the
+  // restatement the judge showed the operator, and when the task was last checked. Output-optional
+  // so existing task fixtures need no churn; DB rows always resolve both to `string | null`.
+  intentCheckedAt: external_exports.string().datetime().nullable().optional(),
+  intentRestatement: external_exports.string().nullable().optional(),
   latestJudgement: external_exports.string().nullable().default(null),
   latestJudgementAt: external_exports.string().datetime().nullable().default(null),
   latestJudgementKind: external_exports.enum(["autonomy", "handoff"]).nullable().default(null),
@@ -37413,6 +37427,12 @@ var mrrlinTaskSchema = external_exports.object({
   updatedAt: external_exports.string().datetime().optional(),
   verificationDueAt: external_exports.string().datetime().nullable()
 });
+var mrrlinTaskSummarySchema = mrrlinTaskSchema.omit({
+  notes: true,
+  operatorSeedRequest: true,
+  intentRestatement: true,
+  latestJudgement: true
+});
 var mrrlinPlanSchema = external_exports.object({
   closedTaskCount: external_exports.number().int().nonnegative(),
   // ADR 0020 Phase 2 (decision 7): plan-scoped specs resolve their consensus domain through
@@ -37539,14 +37559,19 @@ var mrrlinProjectSummarySchema = external_exports.object({
   slug: mrrlinProjectSlugSchema,
   // ADR 0020: default consensus domain for this project's plan/project-scoped specs. Output-optional
   // (DB column is NOT NULL default 'code') so existing project fixtures/upsert callers need no churn.
-  defaultDomain: mrrlinTaskDomainSchema.optional()
+  defaultDomain: mrrlinTaskDomainSchema.optional(),
+  // model-tier-planning-and-arbiter D9: per-project judge switch. NULL/true means the judge runs
+  // as today; false means intent-check.ts skips it entirely. Output-optional for the same reason
+  // defaultDomain is: existing project fixtures/upsert callers need no churn.
+  intentJudgeEnabled: external_exports.boolean().optional()
 });
 var mrrlinProjectUpsertSchema = mrrlinProjectSummarySchema.omit({
   onboardingKickoffState: true,
   slug: true
 });
 var mrrlinProjectRenameSchema = external_exports.object({
-  displayName: external_exports.string().trim().min(1).max(120)
+  displayName: external_exports.string().trim().min(1).max(120).optional(),
+  intentJudgeEnabled: external_exports.boolean().optional()
 });
 var ONBOARDING_KICKOFF_TRANSITIONS = [
   { from: null, to: "pending" },
@@ -37601,7 +37626,7 @@ var mrrlinTaskCreateShapeSchema = external_exports.object({
   category: taxonomyCategorySchema,
   dueDate: external_exports.string().date().nullable().optional(),
   followUpAt: external_exports.string().datetime().nullable().optional(),
-  id: mrrlinTaskIdSchema,
+  id: mrrlinTaskIdSchema.optional(),
   impact: mrrlinTaskImpactSchema.default("medium"),
   notes: external_exports.string().nullable().optional(),
   parentTaskId: mrrlinTaskIdSchema.nullable().optional(),
@@ -37721,6 +37746,7 @@ var mrrlinTaskListFiltersSchema = external_exports.object({
   subcategory: taxonomySubcategorySchema.optional(),
   type: mrrlinTaskTypeSchema.optional()
 });
+var mrrlinTaskListViewSchema = external_exports.enum(["summary"]);
 var apiErrorSchema = external_exports.object({
   code: external_exports.string().min(1),
   message: external_exports.string().min(1)
@@ -37950,6 +37976,9 @@ var taskResponseSchema = external_exports.object({
 var taskListResponseSchema = external_exports.object({
   data: external_exports.array(mrrlinTaskSchema)
 });
+var taskSummaryListResponseSchema = external_exports.object({
+  data: external_exports.array(mrrlinTaskSummarySchema)
+});
 var planResponseSchema = external_exports.object({
   data: mrrlinPlanSchema
 });
@@ -37995,6 +38024,7 @@ var mrrlinRunPrerequisiteSchema = external_exports.object({
 });
 var mrrlinExecutionRunSchema = external_exports.object({
   actor: external_exports.string().min(1),
+  agentSeat: external_exports.enum(["codex", "claude"]).nullable(),
   baseSha: external_exports.string().min(1).nullable(),
   branch: external_exports.string().min(1).nullable(),
   blockingReason: mrrlinRunBlockingReasonCodeSchema.nullable(),
@@ -38092,6 +38122,7 @@ var mrrlinExecutionRunCreateSchema = external_exports.object({
   worktreeId: external_exports.string().min(1).optional()
 });
 var mrrlinExecutionRunUpdateSchema = external_exports.object({
+  agentSeat: external_exports.enum(["codex", "claude"]).nullable().optional(),
   baseSha: external_exports.string().min(1).nullable().optional(),
   branch: external_exports.string().min(1).nullable().optional(),
   blockingReason: mrrlinRunBlockingReasonCodeSchema.nullable().optional(),
@@ -38635,7 +38666,8 @@ var mrrlinInboxItemSchema = external_exports.object({
   readAt: external_exports.string().datetime().nullable(),
   reason: external_exports.string().nullable().optional(),
   status: mrrlinInboxItemStatusSchema,
-  taskId: mrrlinTaskIdSchema.nullable()
+  taskId: mrrlinTaskIdSchema.nullable(),
+  taskTitle: external_exports.string().nullable()
 }).superRefine((value, context) => {
   if (value.kind !== "question" && value.questionOptions !== null) {
     context.addIssue({
@@ -38686,6 +38718,26 @@ var mrrlinInboxItemListFiltersSchema = external_exports.object({
   status: mrrlinInboxItemStatusSchema.optional(),
   taskId: mrrlinTaskIdSchema.optional()
 });
+var mrrlinIntentVerdictSchema = external_exports.object({
+  verdict: external_exports.enum(["CLEAR", "UNCLEAR"]),
+  restatement: external_exports.string(),
+  questions: external_exports.array(external_exports.string()).max(3)
+}).superRefine((value, context) => {
+  if (value.verdict === "CLEAR" && value.questions.length !== 0) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "a CLEAR verdict must carry zero questions",
+      path: ["questions"]
+    });
+  }
+  if (value.verdict === "UNCLEAR" && value.questions.length === 0) {
+    context.addIssue({
+      code: external_exports.ZodIssueCode.custom,
+      message: "an UNCLEAR verdict must carry at least one question",
+      path: ["questions"]
+    });
+  }
+});
 var inboxItemReadResponseSchema = external_exports.object({
   data: external_exports.object({
     readAt: external_exports.string().datetime()
@@ -39559,9 +39611,12 @@ ${input.prompt}` : input.prompt;
     "--sandbox",
     sandbox,
     "--skip-git-repo-check",
-    "--ignore-user-config",
-    fullPrompt
+    "--ignore-user-config"
   ];
+  if (input.model) {
+    args.push("-m", input.model);
+  }
+  args.push(fullPrompt);
   return new Promise((resolve) => {
     let settled = false;
     const timerRef = { id: void 0 };
@@ -39636,6 +39691,9 @@ function runClaudeExec(input, deps) {
   if (trimmedInstructions) {
     args.push("--append-system-prompt", trimmedInstructions);
   }
+  if (input.model) {
+    args.push("--model", input.model);
+  }
   args.push(input.prompt);
   return new Promise((resolve) => {
     let settled = false;
@@ -39733,6 +39791,98 @@ function runAgentExec(input, deps, persistedProvider) {
   throw new Error(`not-yet-wired: ${provider.id}`);
 }
 
+// ../../packages/agent-client/dist/resolved-seat.js
+var CODEX_STRONG_MODEL_CONSTANT = "gpt-5.5";
+var CLAUDE_STRONG_MODEL_CONSTANT = "opus";
+var CODEX_WEAK_MODEL_CONSTANT = "codex-gpt-5.4-mini";
+var CLAUDE_WEAK_MODEL_CONSTANT = "haiku";
+var CODEX_STRONG_MODEL_ENV = "MRRLIN_CODEX_STRONG_MODEL";
+var CLAUDE_STRONG_MODEL_ENV = "MRRLIN_CLAUDE_STRONG_MODEL";
+function logFallback(providerId, tier, source, value) {
+  console.error(`[resolved-seat] provider=${providerId} ${tier}=${value} (source: ${source})`);
+}
+function pickStrongModelFromList(models) {
+  const defaultModel = models.find((m) => m.isDefault === true);
+  if (defaultModel)
+    return defaultModel.id;
+  const nonHidden = models.find((m) => m.hidden !== true);
+  if (nonHidden)
+    return nonHidden.id;
+  return models[0]?.id ?? null;
+}
+function pickWeakModelFromList(models, strongModel) {
+  const miniModel = models.find((m) => {
+    const id = m.id.toLowerCase();
+    return id.includes("mini") || id.includes("weak") || id.includes("small");
+  });
+  if (miniModel && miniModel.id !== strongModel)
+    return miniModel.id;
+  return null;
+}
+async function mintResolvedSeat(provider, opts) {
+  const capabilities = provider.capabilities();
+  const providerId = provider.id;
+  let strongModel;
+  let weakModel;
+  if (opts?.handle && capabilities.listsModels) {
+    try {
+      const models = await opts.handle.listModels();
+      const picked = pickStrongModelFromList(models);
+      if (picked) {
+        strongModel = picked;
+      } else {
+        throw new Error("empty model list");
+      }
+    } catch {
+      const envValue = process.env[providerId === "codex" ? CODEX_STRONG_MODEL_ENV : CLAUDE_STRONG_MODEL_ENV]?.trim();
+      if (envValue) {
+        strongModel = envValue;
+        logFallback(providerId, "strong", "env", strongModel);
+      } else {
+        strongModel = providerId === "codex" ? CODEX_STRONG_MODEL_CONSTANT : CLAUDE_STRONG_MODEL_CONSTANT;
+        logFallback(providerId, "strong", "constant", strongModel);
+      }
+    }
+  } else {
+    const envValue = process.env[providerId === "codex" ? CODEX_STRONG_MODEL_ENV : CLAUDE_STRONG_MODEL_ENV]?.trim();
+    if (envValue) {
+      strongModel = envValue;
+      logFallback(providerId, "strong", "env", strongModel);
+    } else {
+      strongModel = providerId === "codex" ? CODEX_STRONG_MODEL_CONSTANT : CLAUDE_STRONG_MODEL_CONSTANT;
+      logFallback(providerId, "strong", "constant", strongModel);
+    }
+  }
+  if (providerId === "claude") {
+    weakModel = CLAUDE_WEAK_MODEL_CONSTANT;
+    logFallback(providerId, "weak", "constant", weakModel);
+  } else {
+    if (opts?.handle && capabilities.listsModels) {
+      try {
+        const models = await opts.handle.listModels();
+        const picked = pickWeakModelFromList(models, strongModel);
+        if (picked) {
+          weakModel = picked;
+        } else {
+          weakModel = strongModel;
+          logFallback(providerId, "weak", "degenerate (weak=strong)", weakModel);
+        }
+      } catch {
+        weakModel = CODEX_WEAK_MODEL_CONSTANT;
+        logFallback(providerId, "weak", "constant", weakModel);
+      }
+    } else {
+      weakModel = CODEX_WEAK_MODEL_CONSTANT;
+      logFallback(providerId, "weak", "constant", weakModel);
+    }
+  }
+  return {
+    id: providerId,
+    capabilities,
+    models: { strong: strongModel, weak: weakModel }
+  };
+}
+
 // ../../packages/client/dist/agent-token-provider.js
 var AgentTokenProviderError = class extends Error {
   code;
@@ -39806,6 +39956,25 @@ function appendQuery(url2, params) {
   const qs = search.toString();
   return qs.length > 0 ? `${url2}?${qs}` : url2;
 }
+function projectPath(slug) {
+  return `/projects/${encodeURIComponent(slug)}`;
+}
+function buildTaskListPath(projectSlug, filters, view) {
+  return appendQuery(`${projectPath(projectSlug)}/tasks`, {
+    archived: filters.archived,
+    assignee: filters.assignee,
+    autonomyLevel: filters.autonomyLevel,
+    blockedBy: filters.blockedBy,
+    category: filters.category,
+    dueDate: filters.dueDate,
+    impact: filters.impact,
+    q: filters.q,
+    status: filters.status,
+    subcategory: filters.subcategory,
+    type: filters.type,
+    view
+  });
+}
 var MrrlinApiError = class extends Error {
   code;
   method;
@@ -39868,9 +40037,6 @@ function createMrrlinClient(config2) {
     }
     return response.json();
   }
-  function projectPath(slug) {
-    return `/projects/${encodeURIComponent(slug)}`;
-  }
   return {
     async listGithubInstallations() {
       const body = await request(`/github/installations`);
@@ -40117,23 +40283,23 @@ function createMrrlinClient(config2) {
       const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/events`);
       return taskEventListResponseSchema.parse(body).data;
     },
-    async listTasks(projectSlug, filters = {}) {
-      const path21 = appendQuery(`${projectPath(projectSlug)}/tasks`, {
-        archived: filters.archived,
-        assignee: filters.assignee,
-        autonomyLevel: filters.autonomyLevel,
-        blockedBy: filters.blockedBy,
-        category: filters.category,
-        dueDate: filters.dueDate,
-        impact: filters.impact,
-        q: filters.q,
-        status: filters.status,
-        subcategory: filters.subcategory,
-        type: filters.type
-      });
+    // An object-literal method can't satisfy two overloads with distinct return types the way a
+    // real function overload's implementation signature can (verified: a union return type is
+    // rejected against the first, MrrlinTask[]-only overload) -- the `any` here is contained to
+    // this one implementation signature; MrrlinClient's declared overloads keep callers precise.
+    async listTasks(projectSlug, filters = {}, options) {
+      const path21 = buildTaskListPath(projectSlug, filters, options?.view);
       const body = await request(path21);
+      if (options?.view === "summary") {
+        return taskSummaryListResponseSchema.parse(body).data;
+      }
       return taskListResponseSchema.parse(body).data;
     },
+    async listTaskSummaries(projectSlug, filters = {}) {
+      const path21 = buildTaskListPath(projectSlug, filters, "summary");
+      const body = await request(path21);
+      return taskSummaryListResponseSchema.parse(body).data;
+    },
     async listTaxonomy(projectSlug) {
       const body = await request(`${projectPath(projectSlug)}/taxonomy`);
       return taxonomyListResponseSchema.parse(body).data;
@@ -40311,10 +40477,10 @@ function createMrrlinClient(config2) {
         throw error51;
       }
     },
-    async beginAsyncJobAttempt(projectSlug, jobId, leaseId, requestedHash) {
+    async beginAsyncJobAttempt(projectSlug, jobId, leaseId, requestedHash, agentSeat) {
       try {
         const body = await request(`${projectPath(projectSlug)}/async-jobs/${encodeURIComponent(jobId)}/begin-attempt`, {
-          body: JSON.stringify({ leaseId, requestedHash }),
+          body: JSON.stringify({ leaseId, requestedHash, agentSeat }),
           headers: { "content-type": "application/json" },
           method: "POST"
         });
@@ -40492,6 +40658,18 @@ function createMrrlinClient(config2) {
       });
       return retireThreadResponseSchema.parse(body).data.retiredThreadId;
     },
+    async armIntentCheck(projectSlug, taskId) {
+      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/intent-check-arm`, { method: "POST" });
+      return taskResponseSchema.parse(body).data;
+    },
+    async applyIntentVerdict(projectSlug, taskId, verdict) {
+      const body = await request(`${projectPath(projectSlug)}/tasks/${encodeURIComponent(taskId)}/intent-verdict`, {
+        body: JSON.stringify(mrrlinIntentVerdictSchema.parse(verdict)),
+        headers: { "content-type": "application/json" },
+        method: "POST"
+      });
+      return taskResponseSchema.parse(body).data;
+    },
     async reportTaskState(projectSlug, runId, report) {
       const body = await request(`${projectPath(projectSlug)}/execution-runs/${encodeURIComponent(runId)}/task-state`, {
         body: JSON.stringify(mrrlinTaskStateReportSchema.parse(report)),
@@ -41222,7 +41400,7 @@ Do NOT derail the current task - if the operator has an in-flight question, answ
 }
 
 // src/_generated/version.ts
-var PKG_VERSION = "0.4.5";
+var PKG_VERSION = "0.4.6";
 
 // src/api-base-url-migrate.ts
 var import_node_fs3 = __toESM(require("node:fs"), 1);
@@ -42188,18 +42366,40 @@ function parseArbiterDecisions(raw) {
 }
 
 // src/consensus/arbiter.ts
-function buildArbiterPrompt(issues) {
-  const list = issues.map((i) => `- [${i.id}] (${i.category}) ${i.text}`).join("\n");
-  return `Adjudicate each issue below.
-
-ISSUES:
-${list}`;
+function buildArbiterPrompt(issues, artifact, panelComposition) {
+  const compositionLine = `Panel composition \u2013 requested: ${panelComposition.requested}, filled: ${panelComposition.filled}, underpowered: ${panelComposition.underpowered}`;
+  const issueList = issues.map((i) => `- [${i.id}] (${i.category}) ${i.text}`).join("\n");
+  const instruction = `You may add a line starting with "PANEL_UNDERPOWERED:" followed by a one\u2011sentence citation of what the panel likely missed given its size. If you add the line, provide a non\u2011empty citation; otherwise omit the line entirely.`;
+  return [
+    instruction,
+    "",
+    "Artifact:",
+    artifact,
+    "",
+    compositionLine,
+    "",
+    "ISSUES:",
+    issueList
+  ].join("\n");
+}
+function parsePanelDeclaration(raw) {
+  const lines2 = raw.split(/\r?\n/);
+  for (const line of lines2) {
+    const m = line.match(/^\s*[-*]?\s*PANEL_UNDERPOWERED:\s*(.*)$/i);
+    if (m) {
+      const citation = (m[1] ?? "").trim();
+      if (citation.length === 0) {
+        return { kind: "underpowered_rejected_uncited" };
+      }
+      return { kind: "underpowered", citation };
+    }
+  }
+  return { kind: "not_declared" };
 }
-async function adjudicate(issues, deps) {
-  if (issues.length === 0) return { adjudicatedVerdict: "APPROVE", accepted: [], dismissed: [] };
+async function adjudicate(issues, artifact, panelComposition, deps) {
   const byId = new Map(issues.map((i) => [i.id, i]));
   for (let attempt = 0; attempt < 2; attempt++) {
-    const res = await deps.runArbiter(buildArbiterPrompt(issues));
+    const res = await deps.runArbiter(buildArbiterPrompt(issues, artifact, panelComposition));
     if (!res.ok) continue;
     const { decisions } = parseArbiterDecisions(res.text);
     const seen = new Set(decisions.map((d) => d.id));
@@ -42214,12 +42414,28 @@ async function adjudicate(issues, deps) {
         accepted.push(i);
         continue;
       }
-      if (d.decision === "accept") accepted.push(i);
-      else dismissed.push({ id: i.id, decision: d.decision, reason: d.reason });
+      if (d.decision === "accept") {
+        accepted.push(i);
+      } else {
+        dismissed.push({ id: i.id, decision: d.decision, reason: d.reason });
+      }
     }
-    return { adjudicatedVerdict: accepted.length === 0 ? "APPROVE" : "REQUEST_CHANGES", accepted, dismissed };
+    const panelDeclaration = parsePanelDeclaration(res.text);
+    return {
+      adjudicatedVerdict: accepted.length === 0 ? "APPROVE" : "REQUEST_CHANGES",
+      accepted,
+      dismissed,
+      arbiterInfo: { unavailable: null },
+      panelDeclaration
+    };
   }
-  return { adjudicatedVerdict: "REQUEST_CHANGES", accepted: [...byId.values()], dismissed: [] };
+  return {
+    adjudicatedVerdict: "REQUEST_CHANGES",
+    accepted: [...byId.values()],
+    dismissed: [],
+    arbiterInfo: { unavailable: { reason: "retry-exhausted" } },
+    panelDeclaration: { kind: "not_declared" }
+  };
 }
 
 // src/consensus/semaphore.ts
@@ -42277,6 +42493,11 @@ function diagnoseStall(history, configuredRounds) {
 }
 
 // src/consensus/loop.ts
+function sufficiencyRank(v) {
+  if (v.verdict === "proceeded_underpowered") return 2;
+  if (v.verdict === "retried") return 1;
+  return 0;
+}
 async function runConsensus(input) {
   const sem = createBoundedSemaphore(input.concurrency ?? input.heads.length);
   const history = [];
@@ -42286,9 +42507,24 @@ async function runConsensus(input) {
   let effectiveRounds = input.rounds;
   let escalated = false;
   let decision;
+  let composition = input.panelComposition;
+  let currentRunHead = input.runHead;
+  let repickAttempted = false;
+  let latestArbiterInfo = null;
+  let worstSufficiency = { verdict: "sufficient" };
   for (let round = 1; round <= effectiveRounds; round++) {
     if (calls + input.heads.length > input.maxHeadCalls) {
-      return { outcome: "CONSENSUS_BLOCKED", rounds: round - 1, finalArtifact: artifact, history, unresolved: history[history.length - 1]?.accepted ?? [], ...decision ? { escalation: decision } : {} };
+      return {
+        outcome: "CONSENSUS_BLOCKED",
+        rounds: round - 1,
+        finalArtifact: artifact,
+        history,
+        unresolved: history[history.length - 1]?.accepted ?? [],
+        arbiterInfo: null,
+        panelComposition: composition,
+        sufficiencyVerdict: worstSufficiency,
+        ...decision ? { escalation: decision } : {}
+      };
     }
     const dismissedBlock = dismissedFwd.length ? `PREVIOUSLY DISMISSED (do not re-raise unless new information):
 ${dismissedFwd.slice(-20).join("\n")}` : "";
@@ -42297,7 +42533,7 @@ ${dismissedFwd.slice(-20).join("\n")}` : "";
         await sem.acquire();
         try {
           calls++;
-          const res = await input.runHead(persona, artifact, dismissedBlock);
+          const res = await currentRunHead(persona, artifact, dismissedBlock);
           return { idx, res };
         } catch (e) {
           return { idx, res: { ok: false, error: String(e) } };
@@ -42310,7 +42546,16 @@ ${dismissedFwd.slice(-20).join("\n")}` : "";
       (r) => r.res.ok
     );
     if (responding.length === 0) {
-      return { outcome: "CONSENSUS_UNAVAILABLE", rounds: round, finalArtifact: artifact, history, unresolved: [] };
+      return {
+        outcome: "CONSENSUS_UNAVAILABLE",
+        rounds: round,
+        finalArtifact: artifact,
+        history,
+        unresolved: [],
+        arbiterInfo: null,
+        panelComposition: composition,
+        sufficiencyVerdict: worstSufficiency
+      };
     }
     const headOutcomes = input.heads.map((persona) => ({
       persona,
@@ -42333,24 +42578,68 @@ ${dismissedFwd.slice(-20).join("\n")}` : "";
         });
       }
     }
+    if (calls + 1 > input.maxHeadCalls) {
+      return {
+        outcome: "CONSENSUS_BLOCKED",
+        rounds: round,
+        finalArtifact: artifact,
+        history,
+        unresolved: history[history.length - 1]?.accepted ?? [],
+        arbiterInfo: { unavailable: { reason: "budget-exhausted" } },
+        panelComposition: composition,
+        sufficiencyVerdict: worstSufficiency,
+        ...decision ? { escalation: decision } : {}
+      };
+    }
+    calls++;
     let adj;
-    if (issues.length > 0) {
-      if (calls + 1 > input.maxHeadCalls) {
-        return { outcome: "CONSENSUS_BLOCKED", rounds: round, finalArtifact: artifact, history, unresolved: history[history.length - 1]?.accepted ?? [], ...decision ? { escalation: decision } : {} };
-      }
-      calls++;
-      try {
-        adj = await adjudicate(issues, { runArbiter: input.runArbiter });
-      } catch {
-        adj = { adjudicatedVerdict: "REQUEST_CHANGES", accepted: issues, dismissed: [] };
+    try {
+      adj = await adjudicate(issues, artifact, composition, { runArbiter: input.runArbiter });
+    } catch (e) {
+      adj = {
+        adjudicatedVerdict: "REQUEST_CHANGES",
+        accepted: issues,
+        dismissed: [],
+        arbiterInfo: { unavailable: { reason: "thrown-exception", detail: String(e) } },
+        panelDeclaration: { kind: "not_declared" }
+      };
+    }
+    latestArbiterInfo = adj.arbiterInfo;
+    let thisRoundSufficiency;
+    if (adj.panelDeclaration.kind === "underpowered") {
+      if (!repickAttempted && input.repickPanel) {
+        repickAttempted = true;
+        const rp = await input.repickPanel();
+        if (rp.ok && rp.composition.filled > composition.filled) {
+          composition = rp.composition;
+          currentRunHead = rp.runHead;
+          thisRoundSufficiency = { verdict: "retried", citation: adj.panelDeclaration.citation };
+        } else {
+          thisRoundSufficiency = { verdict: "proceeded_underpowered", citation: adj.panelDeclaration.citation };
+        }
+      } else {
+        thisRoundSufficiency = { verdict: "proceeded_underpowered", citation: adj.panelDeclaration.citation };
       }
     } else {
-      adj = { adjudicatedVerdict: "APPROVE", accepted: [], dismissed: [] };
+      thisRoundSufficiency = { verdict: "sufficient" };
+    }
+    if (sufficiencyRank(thisRoundSufficiency) >= sufficiencyRank(worstSufficiency)) {
+      worstSufficiency = thisRoundSufficiency;
     }
     history.push({ round, accepted: adj.accepted, dismissed: adj.dismissed, headOutcomes });
     adj.dismissed.forEach((d) => dismissedFwd.push(`- ${d.id}: ${d.reason}`));
     if (adj.accepted.length === 0) {
-      return { outcome: "CONVERGED", rounds: round, finalArtifact: artifact, history, unresolved: [], ...decision ? { escalation: decision } : {} };
+      return {
+        outcome: "CONVERGED",
+        rounds: round,
+        finalArtifact: artifact,
+        history,
+        unresolved: [],
+        arbiterInfo: latestArbiterInfo,
+        panelComposition: composition,
+        sufficiencyVerdict: worstSufficiency,
+        ...decision ? { escalation: decision } : {}
+      };
     }
     if (round === effectiveRounds) {
       if (!decision) {
@@ -42360,12 +42649,31 @@ ${dismissedFwd.slice(-20).join("\n")}` : "";
         escalated = true;
         effectiveRounds = Math.min(effectiveRounds + decision.grantedRounds, input.rounds * 2);
       } else {
-        return { outcome: "CONSENSUS_BLOCKED", rounds: round, finalArtifact: artifact, history, unresolved: history[history.length - 1]?.accepted ?? [], ...decision ? { escalation: decision } : {} };
+        return {
+          outcome: "CONSENSUS_BLOCKED",
+          rounds: round,
+          finalArtifact: artifact,
+          history,
+          unresolved: history[history.length - 1]?.accepted ?? [],
+          arbiterInfo: latestArbiterInfo,
+          panelComposition: composition,
+          sufficiencyVerdict: worstSufficiency,
+          ...decision ? { escalation: decision } : {}
+        };
       }
     }
     artifact = await input.revise(artifact, adj.accepted);
   }
-  return { outcome: "CONSENSUS_BLOCKED", rounds: effectiveRounds, finalArtifact: artifact, history, unresolved: history[history.length - 1]?.accepted ?? [] };
+  return {
+    outcome: "CONSENSUS_BLOCKED",
+    rounds: effectiveRounds,
+    finalArtifact: artifact,
+    history,
+    unresolved: history[history.length - 1]?.accepted ?? [],
+    arbiterInfo: latestArbiterInfo,
+    panelComposition: composition,
+    sufficiencyVerdict: worstSufficiency
+  };
 }
 
 // src/consensus/spec-identity.ts
@@ -42525,7 +42833,8 @@ function applyClarificationCap(issues, impact) {
 async function runSpecGate(_target, deps, opts) {
   if (!await deps.consensusEnabled()) return { outcome: "SKIPPED" };
   const intent = await deps.readIntent();
-  if (intent.taskId !== null && (intent.seed === null || intent.seed.trim() === "")) {
+  const legacyExempt = intent.specApproved === "skipped_legacy";
+  if (!legacyExempt && intent.taskId !== null && (intent.seed === null || intent.seed.trim() === "")) {
     return {
       outcome: "CONSENSUS_BLOCKED",
       operatorClarifications: [
@@ -42592,6 +42901,7 @@ async function runSpecGate(_target, deps, opts) {
     heads,
     rounds: deps.rounds,
     maxHeadCalls: deps.maxHeadCalls,
+    panelComposition: deps.panelComposition ?? { requested: heads.length, filled: 1, underpowered: heads.length > 1 },
     runHead: deps.runHead,
     runArbiter: deps.runArbiter,
     revise: async (artifact, accepted) => {
@@ -42635,7 +42945,10 @@ async function runSpecGate(_target, deps, opts) {
           whyBlocking: "converged spec content belongs to a different task than the one it gates",
           category: "scope"
         }
-      ]
+      ],
+      arbiterInfo: result.arbiterInfo,
+      panelComposition: result.panelComposition,
+      sufficiencyVerdict: result.sufficiencyVerdict
     };
   }
   let keptClarifications = [];
@@ -42657,7 +42970,13 @@ async function runSpecGate(_target, deps, opts) {
   });
   if (result.outcome === "CONVERGED") {
     await deps.promoteSpecReady(currentHash);
-    return { outcome: "CONVERGED", headOutcomes: result.history.at(-1)?.headOutcomes ?? [] };
+    return {
+      outcome: "CONVERGED",
+      headOutcomes: result.history.at(-1)?.headOutcomes ?? [],
+      arbiterInfo: result.arbiterInfo,
+      panelComposition: result.panelComposition,
+      sufficiencyVerdict: result.sufficiencyVerdict
+    };
   }
   if (result.outcome === "CONSENSUS_BLOCKED") {
     return {
@@ -42665,10 +42984,18 @@ async function runSpecGate(_target, deps, opts) {
       ...keptClarifications.length > 0 ? { operatorClarifications: keptClarifications } : {},
       ...droppedByCap.length > 0 ? { droppedByCap } : {},
       ...result.escalation ? { escalation: result.escalation } : {},
-      unresolved: result.unresolved
+      unresolved: result.unresolved,
+      arbiterInfo: result.arbiterInfo,
+      panelComposition: result.panelComposition,
+      sufficiencyVerdict: result.sufficiencyVerdict
     };
   }
-  return { outcome: result.outcome };
+  return {
+    outcome: result.outcome,
+    arbiterInfo: result.arbiterInfo,
+    panelComposition: result.panelComposition,
+    sufficiencyVerdict: result.sufficiencyVerdict
+  };
 }
 
 // src/consensus/resolve-gated-task.ts
@@ -43027,6 +43354,15 @@ ${adjudicated.map((q) => `- Q: ${q.body}
 ` : "";
   return `${identity}${intent}${impactLine}${adjudicatedBlock}`;
 }
+function selectAdjudicated(items) {
+  return items.filter(
+    (item) => item.origin === "gate" && (item.status === "acknowledged" || item.status === "rejected") && item.decidedBy !== "gate"
+  ).map((item) => ({
+    body: item.body,
+    answer: item.answer,
+    status: item.status
+  }));
+}
 function reviserIdentityInstructions(taskId, title) {
   const lock = taskId ? `This spec gates task ${taskId}${title ? ` ("${title}")` : ""}. You MUST NOT change the spec's task identity or heading, retarget it to a different task id, or invert its direction (e.g. live-submission vs preparation-only). Preserve the leading \`task: ${taskId}\` frontmatter EXACTLY; never change it to another task id. Address ONLY the accepted issues.
 
@@ -43034,7 +43370,7 @@ function reviserIdentityInstructions(taskId, title) {
   return `${lock}You revise a spec to address accepted issues. Return ONLY the full revised markdown, no commentary.`;
 }
 function buildSpecGateDeps(args) {
-  const { client, projectSlug, specPageId, cwd, codexExecutable, extraHeadCount = 0 } = args;
+  const { client, projectSlug, specPageId, cwd, codexExecutable, extraHeadCount = 0, seat } = args;
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 5);
   const maxHeadCalls = 2 * rounds * (4 + extraHeadCount + 1);
   const timeoutMs = Number(process.env["MRRLIN_CONSENSUS_HEAD_TIMEOUT_MS"] ?? 15e4);
@@ -43072,13 +43408,7 @@ function buildSpecGateDeps(args) {
             }
           }
         }
-        const adjudicated = taskInboxItems.filter(
-          (item) => item.origin === "gate" && (item.status === "acknowledged" || item.status === "rejected") && item.decidedBy !== "gate"
-        ).map((item) => ({
-          body: item.body,
-          answer: item.answer,
-          status: item.status
-        }));
+        const adjudicated = selectAdjudicated(taskInboxItems);
         return {
           taskId,
           seed: resolvedSeed,
@@ -43086,7 +43416,8 @@ function buildSpecGateDeps(args) {
           domain: task.domain,
           notes,
           impact: task.impact,
-          adjudicated
+          adjudicated,
+          specApproved: task.specApproved ?? null
         };
       })();
     }
@@ -43138,7 +43469,10 @@ ${artifact}`,
           cwd,
           timeoutMs,
           sandbox: "read-only",
-          codexExecutable
+          codexExecutable,
+          // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
+          // strongest model.
+          model: seat?.models.strong
         }
       );
     },
@@ -43230,7 +43564,7 @@ ${artifact}`,
   };
 }
 function buildCodeGateDeps(args) {
-  const { client, projectSlug, baseRef, cwd, codexExecutable, extraHeads } = args;
+  const { client, projectSlug, baseRef, cwd, codexExecutable, extraHeads, seat } = args;
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 5);
   const heads = ["code-reviewer", ...extraHeads ?? []];
   const maxHeadCalls = 2 * rounds * (heads.length + 1);
@@ -43274,7 +43608,10 @@ ${artifact}`,
         cwd,
         timeoutMs: headTimeoutMs,
         sandbox: "read-only",
-        codexExecutable
+        codexExecutable,
+        // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
+        // strongest model.
+        model: seat?.models.strong
       });
     },
     async runReviser(artifact, accepted) {
@@ -43311,7 +43648,7 @@ function renderCriteriaBlock(criteria) {
   return criteria.map((c, i) => `${i + 1}. [ ] ${c}`).join("\n");
 }
 async function buildDeliverableGateDeps(args) {
-  const { client, projectSlug, deliverablePageId, cwd, codexExecutable, runId } = args;
+  const { client, projectSlug, deliverablePageId, cwd, codexExecutable, runId, seat } = args;
   const rounds = Number(process.env["MRRLIN_CONSENSUS_ROUNDS"] ?? 5);
   const timeoutMs = Number(process.env["MRRLIN_CONSENSUS_HEAD_TIMEOUT_MS"] ?? 15e4);
   const page = await client.getWikiPage(projectSlug, deliverablePageId);
@@ -43378,7 +43715,10 @@ ${persona}`,
         cwd,
         timeoutMs,
         sandbox: "read-only",
-        codexExecutable
+        codexExecutable,
+        // model-tier-planning-and-arbiter task 2.5 (D1): the arbiter is pinned to the seat's
+        // strongest model.
+        model: seat?.models.strong
       });
     },
     async runReviser(artifact, accepted) {
@@ -43831,7 +44171,11 @@ async function runDraftSpec(ctx, input, deps) {
     cwd: ctx.cwd,
     timeoutMs: draftSpecTimeoutMs(),
     sandbox: "read-only",
-    codexExecutable: ctx.codexExecutable
+    codexExecutable: ctx.codexExecutable,
+    // model-tier-planning-and-arbiter task 2.4 (D1): planning is pinned to the seat's strongest
+    // model. Absent when ctx carries no seat (e.g. a hand-built test ctx) — runExec reproduces
+    // today's argv byte-for-byte in that case (task 2.3).
+    model: ctx.seat?.models.strong
   });
   if (!exec.ok) {
     return { kind: "retry", failureReason: "provider_unavailable", error: `spec authoring failed: ${exec.error}` };
@@ -44544,12 +44888,22 @@ async function runDeployGateTick(deps, projectSlug, run3, task) {
     await deps.handoff(projectSlug, task, run3, "verification_steps_missing_at_verify");
     return { kind: "handoff", reason: "verification_steps_missing_at_verify" };
   }
+  let verificationSeat = run3.agentSeat;
+  if (verificationSeat == null) {
+    const seat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+    verificationSeat = seat.id;
+    await deps.client.updateExecutionRun(projectSlug, run3.id, { agentSeat: seat.id }).catch((err) => {
+      console.warn(
+        JSON.stringify({ event: "agent_seat_persist_failed", projectSlug, runId: run3.id, error: String(err) })
+      );
+    });
+  }
   const verdict = await deps.runVerificationTurn({
     env,
     environmentUrl: deployment.environmentUrl,
     verificationSection: section,
     task,
-    run: run3
+    run: { ...run3, agentSeat: verificationSeat }
   });
   const verificationAttempt = attemptIndex(artifacts, env, "verification") + 1;
   let outputRef = null;
@@ -45648,7 +46002,18 @@ async function driveRun(deps, projectSlug, runId) {
     maxRuns: threadMaxRuns(),
     graceRuns: threadRetireGraceRuns()
   });
-  const resolvedProviderId = resolveProvider(process.env, getSelectedProvider()).id;
+  let resolvedProviderId;
+  if (claimed.agentSeat != null) {
+    resolvedProviderId = claimed.agentSeat;
+  } else {
+    const seat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+    resolvedProviderId = seat.id;
+    await deps.client.updateExecutionRun(projectSlug, runId, { agentSeat: seat.id }).catch((err) => {
+      console.warn(
+        JSON.stringify({ event: "agent_seat_persist_failed", projectSlug, runId, error: String(err) })
+      );
+    });
+  }
   const providerMismatch = task.directorThreadProvider != null && task.directorThreadProvider !== resolvedProviderId;
   const threadIdForAcquire = retirement.retire || providerMismatch ? null : task.directorThreadId;
   if (retirement.retire) {
@@ -45707,12 +46072,12 @@ ${renderTaskStateSection(taskState)}`;
       turnCwd = worktreePath;
       useExecutor = true;
       if (deps.acquireExecutorAgent) {
-        const executorAgent = await deps.acquireExecutorAgent(worktreePath);
+        const executorAgent = await deps.acquireExecutorAgent(worktreePath, resolvedProviderId);
         codex = executorAgent.handle;
         disposeCodex = executorAgent.dispose;
       } else {
-        codex = await deps.acquireCodex();
-        disposeCodex = deps.releaseCodex;
+        codex = await deps.acquireCodex(resolvedProviderId);
+        disposeCodex = () => deps.releaseCodex(resolvedProviderId);
       }
     } catch (error51) {
       const isProviderNotReady = error51 instanceof Error && error51.code === "PROVIDER_NOT_READY";
@@ -45750,8 +46115,8 @@ ${renderTaskStateSection(taskState)}`;
     }
   } else {
     try {
-      codex = await deps.acquireCodex();
-      disposeCodex = deps.releaseCodex;
+      codex = await deps.acquireCodex(resolvedProviderId);
+      disposeCodex = () => deps.releaseCodex(resolvedProviderId);
     } catch (error51) {
       const detail = error51 instanceof Error ? error51.message : String(error51);
       await failRun(deps, projectSlug, task, runId, leaseId, `codex_acquire_failed: ${detail}`);
@@ -46731,6 +47096,8 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
   const claimed = await deps.client.claimAsyncJob(projectSlug, jobId);
   if (!claimed || !claimed.leaseId) return;
   const leaseId = claimed.leaseId;
+  const seat = claimed.agentSeat != null ? await mintResolvedSeat(resolveProvider(process.env, claimed.agentSeat)) : await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+  const resolvedProviderId = seat.id;
   const descriptor2 = getAsyncToolDescriptor(claimed.toolName);
   if (!descriptor2) {
     await deps.client.terminalizeAsyncJob(projectSlug, jobId, {
@@ -46755,7 +47122,8 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
         projectSlug,
         jobId,
         leaseId,
-        await deriveRequestedHash(deps.client, claimed.toolName, input)
+        await deriveRequestedHash(deps.client, claimed.toolName, input),
+        resolvedProviderId
       );
       if (!begun) return;
       if (begun.attemptCount > ASYNC_JOB_MAX_ATTEMPTS) {
@@ -46766,7 +47134,7 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
         outcome = await deps.run(
           "async",
           () => descriptor2.run(
-            { client: deps.client, cwd: deps.cwd, codexExecutable: deps.codexExecutable },
+            { client: deps.client, cwd: deps.cwd, codexExecutable: deps.codexExecutable, seat, projectSlug },
             input
           )
         );
@@ -46796,13 +47164,31 @@ async function driveAsyncJob(deps, projectSlug, jobId) {
     failureReason: outcome.kind === "done" ? null : outcome.failureReason
   }).catch(() => {
   });
+  if (descriptor2.appliesIntentVerdict && outcome.kind === "done" && outcome.taskId) {
+    let rawResult;
+    try {
+      rawResult = JSON.parse(outcome.resultJson);
+    } catch {
+      rawResult = void 0;
+    }
+    const parsedVerdict = mrrlinIntentVerdictSchema.safeParse(rawResult);
+    if (parsedVerdict.success) {
+      await deps.client.applyIntentVerdict(projectSlug, outcome.taskId, parsedVerdict.data).catch(() => {
+      });
+    }
+  }
   const delivery = descriptor2.onComplete(outcome, input);
   if (!delivery.suppressInbox) {
     await deps.client.createInboxItem(projectSlug, {
       id: delivery.id ?? `II-${import_node_crypto6.default.randomUUID()}`,
       kind: delivery.kind,
       body: delivery.body,
-      ...delivery.taskId ? { taskId: delivery.taskId } : {}
+      ...delivery.taskId ? { taskId: delivery.taskId } : {},
+      // early-intent-confirmation: without forwarding these, an intent-check question lands
+      // with origin unset, and the adjudicated-set filter (consensus/wiring.ts) that excludes
+      // gate-authored auto-closures by origin silently stops suppressing duplicates for it.
+      ...delivery.origin !== void 0 ? { origin: delivery.origin } : {},
+      ...delivery.questionOptions !== void 0 ? { questionOptions: delivery.questionOptions } : {}
     }).catch(() => {
     });
   }
@@ -46858,6 +47244,10 @@ async function runDeliverableGate(_target, deps) {
     maxHeadCalls: deps.maxHeadCalls,
     runHead: deps.runHead,
     runArbiter: deps.runArbiter,
+    // model-tier-planning-and-arbiter task 2.20: no real multi-head panel reaches this gate yet
+    // (that wiring is a documented, separate gap — see spec-gate.ts/code-gate.ts), so this always
+    // reports the honest single-seat composition rather than a fabricated multi-agent one.
+    panelComposition: { requested: deps.heads.length, filled: 1, underpowered: deps.heads.length > 1 },
     revise: async (artifact, accepted) => {
       const revised = await deps.runReviser(artifact, accepted);
       if (!revised.ok) return artifact;
@@ -46936,48 +47326,58 @@ function createSessionSinkRegistry(maxEntries = DEFAULT_MAX_SESSION_SINKS) {
 
 // src/agent-keepalive.ts
 function createAgentKeepalive(opts) {
-  let idleTimer = null;
-  let holdCount = 0;
-  let managerHeld = false;
-  const cancelTimer = () => {
-    if (idleTimer) {
-      clearTimeout(idleTimer);
-      idleTimer = null;
+  const slots = /* @__PURE__ */ new Map();
+  function getSlot(providerId) {
+    let slot = slots.get(providerId);
+    if (!slot) {
+      slot = { idleTimer: null, holdCount: 0, managerHeld: false };
+      slots.set(providerId, slot);
+    }
+    return slot;
+  }
+  const cancelTimer = (slot) => {
+    if (slot.idleTimer) {
+      clearTimeout(slot.idleTimer);
+      slot.idleTimer = null;
     }
   };
   return {
-    acquire: async () => {
-      cancelTimer();
-      const client = await opts.acquire();
-      if (managerHeld) {
-        opts.release();
+    acquire: async (providerId) => {
+      const slot = getSlot(providerId);
+      cancelTimer(slot);
+      const client = await opts.acquire(providerId);
+      if (slot.managerHeld) {
+        opts.release(providerId);
       } else {
-        managerHeld = true;
+        slot.managerHeld = true;
       }
-      holdCount += 1;
+      slot.holdCount += 1;
       return client;
     },
-    release: () => {
-      holdCount = Math.max(0, holdCount - 1);
-      if (holdCount > 0) {
+    release: (providerId) => {
+      const slot = getSlot(providerId);
+      slot.holdCount = Math.max(0, slot.holdCount - 1);
+      if (slot.holdCount > 0) {
         return;
       }
-      cancelTimer();
-      idleTimer = setTimeout(() => {
-        idleTimer = null;
-        if (managerHeld) {
-          managerHeld = false;
-          opts.release();
+      cancelTimer(slot);
+      slot.idleTimer = setTimeout(() => {
+        slot.idleTimer = null;
+        if (slot.managerHeld) {
+          slot.managerHeld = false;
+          opts.release(providerId);
         }
-      }, opts.idleMs);
-      idleTimer.unref?.();
+      }, opts.idleMs(providerId));
+      slot.idleTimer.unref?.();
     },
     dropNow: () => {
-      cancelTimer();
-      holdCount = 0;
-      if (managerHeld) {
-        managerHeld = false;
-        opts.release();
+      for (const [providerId, slot] of slots) {
+        cancelTimer(slot);
+        slot.holdCount = 0;
+        if (slot.managerHeld) {
+          slot.managerHeld = false;
+          opts.release(providerId);
+        }
       }
     }
   };
@@ -51286,7 +51686,11 @@ function createRunVerificationTurn(deps) {
     if (isBlockedVerificationHost(hostname3)) {
       return { verdict: "fail", summary: `refusing to verify against non-public host: ${hostname3}`, turnRef: null };
     }
-    const { handle, dispose, cwd } = await deps.startSandbox([hostname3]);
+    const providerId = input.run.agentSeat;
+    if (providerId == null) {
+      return { verdict: "fail", summary: "run has no resolved agent_seat", turnRef: null };
+    }
+    const { handle, dispose, cwd } = await deps.startSandbox([hostname3], providerId);
     try {
       let text;
       try {
@@ -52105,10 +52509,48 @@ function buildThreadStartParams(msg, config2, desiredModel) {
     "    ## Result \u2014 what was accomplished, key findings or metrics, follow-up tasks created.",
     "    Do NOT remove earlier sections \u2014 they remain useful for context.",
     "  Adapt depth to the task: a one-line fix needs one sentence, not four headings.",
-    "When you create a task out of an operator request, set `operatorSeedRequest` to the operator's",
-    "VERBATIM words (their request as they wrote it \u2014 NOT your paraphrase or synthesized notes). It is",
-    "the spec gate's independent record of intent; omit it only when there is genuinely no operator",
-    "request behind the task (pure system bookkeeping) \u2014 note that omitting it makes the gate fail-closed.",
+    // early-intent-confirmation (design.md, "The chat contract"): the core block below is copied
+    // VERBATIM from design.md, per tasks.md 10.1. It replaces an older sentence that also carried
+    // "omit operatorSeedRequest only when there is genuinely no operator request behind the task
+    // (pure system bookkeeping) — omitting it makes the gate fail-closed". design.md's own
+    // replacement text does not restate that exception, so it was initially left out per the
+    // "verbatim" instruction and flagged for the consensus round instead of silently deciding
+    // either way. Round 1 (two of three reviewers, independently) confirmed a real gap: without an
+    // explicit "do not invent one" instruction, the Director could fabricate operator wording for
+    // a task with no real request behind it. The paragraph a few lines below ("If a task has no
+    // real operator request...") closes that gap — it is a NEW clarifying addition, not a
+    // verbatim restoration of the old sentence, so it is deliberately kept separate from the
+    // pinned verbatim block in director-bridge.test.ts.
+    "Before you call create_task out of an operator request, enumerate the aspects needed to state",
+    "the task's outcome. For each aspect that is not yet resolved, resolve it in THIS order:",
+    "  1. the conversation you are already in \u2014 this resolves most of them, and costs nothing;",
+    "  2. search_wiki_pages / retrieve_context.",
+    "Ask the operator ONLY about aspects that neither resolved. When you must ask, reply in the SAME",
+    "turn with one sentence restating your understanding, then at most 3 scope-level questions, and",
+    "do NOT create the task yet. Create it after the operator replies.",
+    "",
+    "Set operatorSeedRequest to the operator's OWN WORDS, verbatim. Select every message in this",
+    "conversation that forms part of the request \u2014 not only the last one \u2014 and concatenate them in",
+    "order, separated by a blank line. Do NOT paraphrase, summarise, or rewrite any of it, and do",
+    "NOT add words of your own.",
+    "",
+    "If a task has no real operator request behind it at all (pure system bookkeeping nobody asked",
+    "for), do NOT invent one to fill this field \u2014 leave operatorSeedRequest unset. Never fabricate",
+    "operator wording; an unset seed is handled downstream, a fabricated one is not.",
+    "",
+    'A bare last message ("ok, do it", "\u0442\u0430\u043A \u0433\u0443\u0434", "finish it") is useless on its own, so carry the',
+    "earlier messages that give it meaning. If the operator's request spans three turns, the seed",
+    "holds all three. If they truly said only one substantive thing, the seed holds only that.",
+    "",
+    "Three worked examples for the resolution order above:",
+    '- "\u0434\u043E\u0440\u043E\u0431\u0438\u0448" right after discussing a specific task \u2014 resolved from THE CONVERSATION, so do not',
+    "  ask. This is the common case: 15 of every 19 apparent gaps close here, for free.",
+    '- "\u0434\u043E\u0434\u0430\u0439 \u043D\u0430 \u043B\u0435\u043D\u0434\u0456\u043D\u0433 \u0431\u043B\u043E\u043A \u044F\u043A \u0443 Native Vibe" when that campaign is documented on the wiki and the',
+    "  conversation itself never named it \u2014 resolved from THE WIKI, after the conversation fails to",
+    "  name it. Do not ask.",
+    '- "\u0437\u0440\u043E\u0431\u0438 \u044F\u043A \u043C\u0438 \u0434\u043E\u043C\u043E\u0432\u043B\u044F\u043B\u0438\u0441\u044C \u043F\u043E \u0446\u0456\u043D\u0430\u0445" with no pricing decision anywhere in this conversation and',
+    "  nothing on the wiki either \u2014 resolved by NEITHER. Ask; this is a decision only the operator",
+    "  holds.",
     "",
     "Spec authoring contract \u2014 when creating or updating a `Specs/{id}` wiki page:",
     "- BEGIN the page with YAML frontmatter naming the gated task: a first line `---`, then",
@@ -53066,7 +53508,8 @@ function createBridgeMessageHandler(deps) {
         let bootstrapError;
         const fallbackModels = readCodexFallbackModels();
         try {
-          const codexClient2 = await deps.acquireCodex();
+          const bootstrapProviderId = resolveProvider(process.env, getSelectedProvider()).id;
+          const codexClient2 = await deps.acquireCodex(bootstrapProviderId);
           try {
             try {
               const raw = await codexClient2.listModels();
@@ -53100,7 +53543,7 @@ function createBridgeMessageHandler(deps) {
               bootstrapError ??= error51 instanceof Error ? error51.message : String(error51);
             }
           } finally {
-            deps.releaseCodex();
+            deps.releaseCodex(bootstrapProviderId);
           }
         } catch (error51) {
           bootstrapError = error51 instanceof Error ? error51.message : String(error51);
@@ -53150,7 +53593,8 @@ function createBridgeMessageHandler(deps) {
             pendingTurnSessions.delete(directorSessionId2);
           }
         }
-        const codexClient2 = await deps.acquireCodex();
+        const interruptProviderId = existing.provider ?? resolveProvider(process.env, getSelectedProvider()).id;
+        const codexClient2 = await deps.acquireCodex(interruptProviderId);
         try {
           await codexClient2.interruptTurn(existing.threadId);
           existing.cancel?.();
@@ -53158,7 +53602,7 @@ function createBridgeMessageHandler(deps) {
         } catch (error51) {
           sendForSpan({ type: "error", directorSessionId: directorSessionId2, error: error51 instanceof Error ? error51.message : String(error51) });
         } finally {
-          deps.releaseCodex();
+          deps.releaseCodex(interruptProviderId);
         }
         return;
       }
@@ -53219,8 +53663,9 @@ function createBridgeMessageHandler(deps) {
         return;
       }
       pendingTurnSessions.add(directorSessionId);
-      const turnProviderCapabilities = resolveProvider(process.env, getSelectedProvider()).capabilities();
-      const codexClient = await deps.acquireCodex();
+      const turnSeat = await mintResolvedSeat(resolveProvider(process.env, getSelectedProvider()));
+      const turnProviderCapabilities = turnSeat.capabilities;
+      const codexClient = await deps.acquireCodex(turnSeat.id);
       let thread = deps.threads.get(directorSessionId);
       if (thread?.inFlight && msg.takeover === true) {
         const takenOver = thread;
@@ -53264,7 +53709,7 @@ function createBridgeMessageHandler(deps) {
       }
       const desiredModel = normalizeModel(msg.model);
       const desiredEffort = normalizeReasoningEffort(msg.reasoningEffort);
-      const resolvedProviderId = resolveProvider(process.env, getSelectedProvider()).id;
+      const resolvedProviderId = turnSeat.id;
       try {
         const startParams = deps.buildStartParams(msg, desiredModel);
         if (!thread) {
@@ -53322,7 +53767,7 @@ function createBridgeMessageHandler(deps) {
           deps.setCodexAuth?.("expired");
         }
         pendingTurnSessions.delete(directorSessionId);
-        deps.releaseCodex();
+        deps.releaseCodex(turnSeat.id);
         return;
       }
       if (thread.inFlight) {
@@ -53334,7 +53779,7 @@ function createBridgeMessageHandler(deps) {
           error: "Director session is busy."
         });
         pendingTurnSessions.delete(directorSessionId);
-        deps.releaseCodex();
+        deps.releaseCodex(turnSeat.id);
         return;
       }
       thread.inFlight = true;
@@ -53587,7 +54032,7 @@ ${effectiveText}` : effectiveText;
         thread.lastUsedAt = Date.now();
         thread.lastUsedAtSuspendedMs = deps.suspendedMs?.() ?? 0;
         deps.persistThreads();
-        deps.releaseCodex();
+        deps.releaseCodex(turnSeat.id);
       }
     });
   };
@@ -53801,20 +54246,20 @@ async function startDirectorBridge() {
   const hasStaticToken = !agentSecret && Boolean(envToken ?? readOperatorToken());
   const client = createMrrlinClient({ baseUrl: apiBaseUrl, fetch: authedFetch });
   const agentKeepalive = createAgentKeepalive({
-    acquire: () => resolveProvider(process.env, getSelectedProvider()).acquireWarm(),
-    release: () => resolveProvider(process.env, getSelectedProvider()).releaseWarm(),
-    idleMs: agentIdleMs(resolveProvider(process.env, getSelectedProvider()).id)
+    acquire: (providerId) => resolveProvider(process.env, providerId).acquireWarm(),
+    release: (providerId) => resolveProvider(process.env, providerId).releaseWarm(),
+    idleMs: (providerId) => agentIdleMs(providerId)
   });
   const checkoutRegistry = new CheckoutRegistry(config2.stateDir);
   const staleSeconds = readEnvInt("MRRLIN_DIRECTOR_BRIDGE_STALE_SECONDS", DEFAULT_STALE_SECONDS);
   const consumerDeps = {
     client,
-    acquireCodex: () => agentKeepalive.acquire(),
+    acquireCodex: (providerId) => agentKeepalive.acquire(providerId),
     // Read-only / chat path release: the shared keepalive. The executor path no
     // longer routes through here — it disposes its OWN per-run server via the
     // handle returned by acquireExecutorCodex (Fix A + G), so there is no shared
     // mutable `activeExecutorClient` slot to race a concurrent chat/bootstrap turn.
-    releaseCodex: () => agentKeepalive.release(),
+    releaseCodex: (providerId) => agentKeepalive.release(providerId),
     run: wrappedTurnLock.run,
     staleSeconds,
     touchIntervalMs: Math.min(DEFAULT_TOUCH_INTERVAL_MS, Math.floor(staleSeconds * 1e3 / 2)),
@@ -53830,10 +54275,13 @@ async function startDirectorBridge() {
     // The returned handle's dispose() shuts down the spawned process (task 4.1: startExecutorServer
     // itself owns which provider-specific shutdown that is) — releasing the executor therefore
     // kills the process. driveRun owns this dispose per-run (Fix A + G).
-    acquireExecutorAgent: async (worktreePath) => {
+    // Task 1.11: providerId is the caller's own pinned/minted seat (execution-consumer.ts's
+    // resolvedProviderId), not resolved ambiently here — this run-scoped spawn has no business
+    // re-reading a setting that could have moved since the run's own seat was decided.
+    acquireExecutorAgent: async (worktreePath, providerId) => {
       const executor = await startExecutorServer({
         worktree: worktreePath,
-        provider: resolveProvider(process.env, getSelectedProvider()).id
+        provider: providerId
       });
       return { handle: executor.handle, dispose: executor.dispose };
     },
@@ -53862,11 +54310,11 @@ async function startDirectorBridge() {
       runVerificationTurn: createRunVerificationTurn({
         // egressDomains is retained in the seam signature (verification-turn.ts still computes the
         // env host) but no longer constrains anything — the executor is unrestricted.
-        startSandbox: async (_egressDomains) => {
+        startSandbox: async (_egressDomains, providerId) => {
           const cwd = import_node_fs16.default.mkdtempSync(import_node_path20.default.join(import_node_os11.default.tmpdir(), "mrrlin-verify-"));
           let executor;
           try {
-            executor = await startExecutorServer({ worktree: cwd, provider: resolveProvider(process.env, getSelectedProvider()).id });
+            executor = await startExecutorServer({ worktree: cwd, provider: providerId });
           } catch (error51) {
             try {
               import_node_fs16.default.rmSync(cwd, { recursive: true, force: true });
@@ -54037,8 +54485,8 @@ async function startDirectorBridge() {
   const relayUrl = process.env.MRRLIN_RELAY_URL?.trim();
   const relayConfigured = Boolean(agentSecret && relayUrl);
   const sharedHandlerDeps = {
-    acquireCodex: () => agentKeepalive.acquire(),
-    releaseCodex: () => agentKeepalive.release(),
+    acquireCodex: (providerId) => agentKeepalive.acquire(providerId),
+    releaseCodex: (providerId) => agentKeepalive.release(providerId),
     run: wrappedTurnLock.run,
     suspendedMs: () => suspensionDetector.suspendedMs(),
     buildStartParams: (msg, desiredModel) => buildThreadStartParams(msg, config2, desiredModel),
@@ -58117,6 +58565,7 @@ async function runCodeGate(_target, deps) {
       heads,
       rounds: deps.rounds,
       maxHeadCalls: deps.maxHeadCalls,
+      panelComposition: deps.panelComposition ?? { requested: heads.length, filled: 1, underpowered: heads.length > 1 },
       runHead: deps.runHead,
       runArbiter: deps.runArbiter,
       revise: async (prev, accepted) => {
@@ -58152,7 +58601,13 @@ async function runCodeGate(_target, deps) {
         return await deps.readReviewArtifact();
       }
     });
-    return { outcome: result.outcome, rounds: result.rounds };
+    return {
+      outcome: result.outcome,
+      rounds: result.rounds,
+      arbiterInfo: result.arbiterInfo,
+      panelComposition: result.panelComposition,
+      sufficiencyVerdict: result.sufficiencyVerdict
+    };
   } catch (err) {
     if (err instanceof CodeGateUnfixableError) {
       return { outcome: "CONSENSUS_BLOCKED" };
@@ -58162,10 +58617,101 @@ async function runCodeGate(_target, deps) {
 }
 
 // src/consensus/multi-llm-head.ts
+var import_node_child_process17 = require("node:child_process");
+
+// src/consensus/provider-limits.ts
 var import_node_child_process16 = require("node:child_process");
+var DEFAULT_STATUS_TIMEOUT_MS = 1e4;
 function errMessage4(err) {
   return err instanceof Error ? err.message : String(err);
 }
+function runExternalAgentsStatus(bin, args, timeoutMs, spawn4) {
+  return new Promise((resolve) => {
+    let settled = false;
+    const timerRef = { id: void 0 };
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      if (timerRef.id) clearTimeout(timerRef.id);
+      resolve(r);
+    };
+    const options = { stdio: ["ignore", "pipe", "pipe"], env: process.env, shell: false };
+    let child;
+    try {
+      child = spawn4(bin, args, options);
+    } catch (err) {
+      finish({ stdout: "", error: `spawn ${bin} failed: ${errMessage4(err)}` });
+      return;
+    }
+    let stdout = "";
+    timerRef.id = setTimeout(() => {
+      child.kill("SIGKILL");
+      finish({ stdout, error: `external-agents status timed out after ${timeoutMs}ms` });
+    }, timeoutMs);
+    timerRef.id.unref?.();
+    child.stdout?.on("data", (chunk) => {
+      stdout += chunk.toString();
+    });
+    child.stderr?.on("data", () => {
+    });
+    child.on("error", (err) => finish({ stdout, error: `external-agents status error: ${errMessage4(err)}` }));
+    child.on("close", (code) => {
+      if (code !== 0 && !stdout.trim()) finish({ stdout, error: `external-agents status exited ${code}` });
+      else finish({ stdout });
+    });
+  });
+}
+async function fetchRegistrySnapshot(deps) {
+  const spawn4 = deps?.spawn ?? import_node_child_process16.spawn;
+  const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
+  const { stdout, error: error51 } = await runExternalAgentsStatus(
+    command,
+    [...prefixArgs, "status", "--json"],
+    deps?.statusTimeoutMs ?? DEFAULT_STATUS_TIMEOUT_MS,
+    spawn4
+  );
+  if (error51) return { ok: false, error: error51 };
+  try {
+    const parsed = JSON.parse(stdout);
+    return { ok: true, entries: Array.isArray(parsed) ? parsed : [] };
+  } catch (err) {
+    return { ok: false, error: `unparseable status --json output: ${errMessage4(err)}` };
+  }
+}
+function tightestPublishedContextWindow(entries) {
+  const values = entries.map((e) => e.token_limits?.context_window).filter((v) => typeof v === "number" && v > 0);
+  return values.length > 0 ? Math.min(...values) : null;
+}
+async function enforceProviderLimits(seat, agentId, tokenCount, deps) {
+  const snapshot = await fetchRegistrySnapshot(deps);
+  if (!snapshot.ok) {
+    console.warn(
+      JSON.stringify({ event: "provider_limits_check_skipped_fetch_failed", agentId, error: snapshot.error })
+    );
+    return { ok: true };
+  }
+  const entries = snapshot.entries;
+  const entry = entries.find((e) => e.id === agentId);
+  const ownContextWindow = entry?.token_limits?.context_window;
+  const borrowedContextWindow = ownContextWindow == null ? tightestPublishedContextWindow(entries) : null;
+  const effectiveContextWindow = ownContextWindow ?? borrowedContextWindow;
+  if (effectiveContextWindow != null && tokenCount > effectiveContextWindow) {
+    return { ok: false, reason: "over_context", borrowed: ownContextWindow == null };
+  }
+  const tpm = entry?.token_limits?.tpm;
+  if (tpm != null && tokenCount > tpm) {
+    return { ok: false, reason: "over_rate" };
+  }
+  return { ok: true };
+}
+
+// src/consensus/multi-llm-head.ts
+function estimateTokenCount(text) {
+  return Math.ceil(text.length / 4);
+}
+function errMessage5(err) {
+  return err instanceof Error ? err.message : String(err);
+}
 function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
   return new Promise((resolve) => {
     let settled = false;
@@ -58186,7 +58732,7 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
     try {
       child = spawn4(bin, args, options);
     } catch (err) {
-      finish({ code: null, stdout: "", error: `spawn ${bin} failed: ${errMessage4(err)}` });
+      finish({ code: null, stdout: "", error: `spawn ${bin} failed: ${errMessage5(err)}` });
       return;
     }
     let stdout = "";
@@ -58199,12 +58745,12 @@ function runExternalAgents(bin, args, label, timeoutMs, spawn4) {
     });
     child.stderr?.on("data", () => {
     });
-    child.on("error", (err) => finish({ code: null, stdout, error: `external-agents ${label} error: ${errMessage4(err)}` }));
+    child.on("error", (err) => finish({ code: null, stdout, error: `external-agents ${label} error: ${errMessage5(err)}` }));
     child.on("close", (code) => finish({ code, stdout }));
   });
 }
 async function pickPanel(input, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process16.spawn;
+  const spawn4 = deps?.spawn ?? import_node_child_process17.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = [
     "pick",
@@ -58225,7 +58771,7 @@ async function pickPanel(input, deps) {
   return { ok: true, agents };
 }
 async function dispatchHead(agentId, prompt, timeoutMs, deps) {
-  const spawn4 = deps?.spawn ?? import_node_child_process16.spawn;
+  const spawn4 = deps?.spawn ?? import_node_child_process17.spawn;
   const { command, prefixArgs } = resolveExternalAgentsCliInvocation(deps?.externalAgentsBin);
   const args = ["dispatch", agentId, "--json", prompt];
   const r = await runExternalAgents(command, [...prefixArgs, ...args], "dispatch", timeoutMs, spawn4);
@@ -58237,7 +58783,7 @@ async function dispatchHead(agentId, prompt, timeoutMs, deps) {
   try {
     parsed = JSON.parse(jsonLine);
   } catch (err) {
-    return { ok: false, error: `dispatch ${agentId}: unparseable JSON (${errMessage4(err)})` };
+    return { ok: false, error: `dispatch ${agentId}: unparseable JSON (${errMessage5(err)})` };
   }
   if (parsed.outcome !== "success") {
     return { ok: false, error: `dispatch ${agentId}: outcome=${parsed.outcome} (exit ${parsed.exit_code})` };
@@ -58248,31 +58794,66 @@ async function dispatchHead(agentId, prompt, timeoutMs, deps) {
   return { ok: true, text: parsed.text };
 }
 async function buildMultiHeadRunner(input, deps) {
-  const picked = await pickPanel(
+  const pickOnce = () => pickPanel(
     { n: input.personas.length, excludeProvider: input.excludeProvider, tierPrefer: input.tierPrefer, timeoutMs: input.pickTimeoutMs },
     deps
   );
+  const picked = await pickOnce();
   if (!picked.ok) return { ok: false, error: picked.error };
   if (picked.agents.length === 0) return { ok: false, error: "pick returned no agents" };
-  const agents = picked.agents;
-  const assignment = {};
-  input.personas.forEach((persona, i) => {
-    const agent = agents[i % agents.length];
-    if (agent) assignment[persona] = agent;
-  });
-  const runHead = async (persona, artifact, dismissed) => {
-    const agentId = assignment[persona];
-    if (!agentId) return { ok: false, error: `no agent assigned for persona ${persona}` };
-    const instructions = input.personaInstructions[persona] ?? "";
-    const dismissedBlock = dismissed.trim() ? `
+  function buildFromAgents(agents) {
+    const assignment = {};
+    input.personas.forEach((persona, i) => {
+      const agent = agents[i % agents.length];
+      if (agent) assignment[persona] = agent;
+    });
+    const composition = {
+      requested: input.personas.length,
+      filled: agents.length,
+      agentIds: agents,
+      underpowered: agents.length < input.personas.length
+    };
+    const runHead = async (persona, artifact, dismissed) => {
+      const agentId = assignment[persona];
+      if (!agentId) return { ok: false, error: `no agent assigned for persona ${persona}` };
+      const instructions = input.personaInstructions[persona] ?? "";
+      const dismissedBlock = dismissed.trim() ? `
 
 ${dismissed.trim()}` : "";
-    const prompt = instructions.trim() ? `${instructions.trim()}
+      const prompt = instructions.trim() ? `${instructions.trim()}
 
 ${artifact}${dismissedBlock}` : `${artifact}${dismissedBlock}`;
-    return dispatchHead(agentId, prompt, input.dispatchTimeoutMs, deps);
+      if (input.seat) {
+        const limits = await enforceProviderLimits(input.seat, agentId, estimateTokenCount(prompt), deps);
+        if (!limits.ok) {
+          const borrowed = limits.reason === "over_context" && limits.borrowed === true;
+          console.warn(
+            JSON.stringify({
+              event: borrowed ? "head_skipped_borrowed_ceiling" : "head_skipped_over_budget",
+              persona,
+              agentId,
+              reason: limits.reason
+            })
+          );
+          return {
+            ok: false,
+            error: `${agentId} skipped (${limits.reason}${borrowed ? ", borrowed ceiling" : ""})`
+          };
+        }
+      }
+      console.log(JSON.stringify({ event: "pool_egress", persona, agentId, promptBytes: prompt.length }));
+      return dispatchHead(agentId, prompt, input.dispatchTimeoutMs, deps);
+    };
+    return { agents, assignment, composition, runHead };
+  }
+  const built = buildFromAgents(picked.agents);
+  const repick = async () => {
+    const rePicked = await pickOnce();
+    if (!rePicked.ok || rePicked.agents.length <= built.agents.length) return { ok: false };
+    const rebuilt = buildFromAgents(rePicked.agents);
+    return { ok: true, composition: rebuilt.composition, runHead: rebuilt.runHead };
   };
-  return { ok: true, runner: { agents, assignment, runHead } };
+  return { ok: true, runner: { ...built, repick } };
 }
 
 // src/consensus/multi-llm-shadow.ts
@@ -58283,7 +58864,7 @@ function rollUpVerdict(verdicts) {
   return "APPROVE";
 }
 async function runShadowPanel(input, deps) {
-  const orchestratorSeat = resolveProvider(process.env, getSelectedProvider()).id;
+  const orchestratorSeat = input.orchestratorSeat;
   const base = {
     ran: false,
     correlationId: input.correlationId,
@@ -58297,7 +58878,8 @@ async function runShadowPanel(input, deps) {
       excludeProvider: input.excludeProvider,
       tierPrefer: "strong",
       pickTimeoutMs: input.pickTimeoutMs,
-      dispatchTimeoutMs: input.dispatchTimeoutMs
+      dispatchTimeoutMs: input.dispatchTimeoutMs,
+      seat: input.seat
     },
     deps
   );
@@ -58345,7 +58927,7 @@ async function runShadowPanelSafe(input, deps, logger = (line) => console.error(
       correlationId: input.correlationId,
       productionVerdict: input.productionVerdict,
       reason: `shadow panel threw: ${err instanceof Error ? err.message : String(err)}`,
-      orchestratorSeat: resolveProvider(process.env, getSelectedProvider()).id
+      orchestratorSeat: input.orchestratorSeat
     };
   }
   try {
@@ -58379,13 +58961,19 @@ async function maybeRunShadow(input, deps, logger) {
         personaInstructions[name] = "";
       }
     }
+    const seat = await mintResolvedSeat(resolveProvider(process.env, input.persistedProvider));
     await runShadowPanelSafe(
       {
         heads,
         personaInstructions,
         artifact: input.artifact,
         productionVerdict,
-        excludeProvider: resolveProvider(process.env, input.persistedProvider).capabilities().poolProviderLabels.join(","),
+        excludeProvider: seat.capabilities.poolProviderLabels.join(","),
+        orchestratorSeat: seat.id,
+        // task 1.21: the same seat, forwarded so buildMultiHeadRunner's per-head dispatch path
+        // has one in scope too (see ShadowInput.seat's own comment for why this is separate
+        // from orchestratorSeat above).
+        seat,
         pickTimeoutMs: PICK_TIMEOUT_MS,
         dispatchTimeoutMs: DISPATCH_TIMEOUT_MS,
         correlationId: input.correlationId
@@ -58399,14 +58987,10 @@ async function maybeRunShadow(input, deps, logger) {
 }
 
 // src/consensus/multi-llm-activate.ts
-var MULTI_LLM_ENV_FLAG = "MRRLIN_CONSENSUS_MULTI_LLM";
 var PICK_TIMEOUT_MS2 = 15e3;
 var DISPATCH_TIMEOUT_MS2 = 6e4;
-function multiLlmActive(env = process.env) {
-  if (env["NODE_ENV"] === "production") return false;
-  const flag = env[MULTI_LLM_ENV_FLAG];
-  if (flag === "0" || flag === "false" || flag === "off") return false;
-  return Boolean(flag) || env["MRRLIN_STAGING"] === "1";
+function multiLlmActive(_env = process.env) {
+  return true;
 }
 async function resolveActiveRunHead(input, deps) {
   if (!multiLlmActive(input.env ?? process.env)) return null;
@@ -58421,6 +59005,7 @@ async function resolveActiveRunHead(input, deps) {
         personaInstructions[name] = "";
       }
     }
+    const seat = await mintResolvedSeat(resolveProvider(process.env, input.persistedProvider));
     const built = await buildMultiHeadRunner(
       {
         personas: heads,
@@ -58429,10 +59014,12 @@ async function resolveActiveRunHead(input, deps) {
         // Codex (["openai"]) and Claude (["anthropic"]) are single-element, so this is a
         // behavior-neutral join; excludeProvider itself is a single (possibly comma-joined,
         // per --exclude-providers) string, not an array.
-        excludeProvider: resolveProvider(process.env, input.persistedProvider).capabilities().poolProviderLabels.join(","),
+        excludeProvider: seat.capabilities.poolProviderLabels.join(","),
         tierPrefer: "strong",
         pickTimeoutMs: PICK_TIMEOUT_MS2,
-        dispatchTimeoutMs: DISPATCH_TIMEOUT_MS2
+        dispatchTimeoutMs: DISPATCH_TIMEOUT_MS2,
+        // task 1.21: same seat that produced excludeProvider above, not a second mint.
+        seat
       },
       deps
     );
@@ -58640,7 +59227,9 @@ async function runNativeSpecGate(ctx, input, builders = defaultNativeSpecGateBui
     specPageId: input.pageId,
     cwd: ctx.cwd,
     codexExecutable: ctx.codexExecutable,
-    extraHeadCount: input.extraHeads?.length ?? 0
+    extraHeadCount: input.extraHeads?.length ?? 0,
+    // model-tier-planning-and-arbiter task 1.21: the seat minted at the async-job claim.
+    seat: ctx.seat
   });
   return builders.runSpecGate(
     { projectSlug: input.projectSlug, specPageId: input.pageId },
@@ -58883,7 +59472,9 @@ async function run(ctx, input, builders = defaultNativeSpecGateBuilders) {
           domain: shadowDomain,
           extraHeads: input.extraHeads,
           correlationId: `Specs/${input.pageId}`,
-          persistedProvider: getSelectedProvider()
+          // task 1.21: ctx's own minted seat, not an ambient read — ctx already carries it by
+          // the time `run` executes (async-job-consumer.ts mints before calling descriptor.run).
+          persistedProvider: ctx.seat?.id ?? null
         });
       }
     } catch {
@@ -59079,7 +59670,9 @@ async function run2(ctx, input) {
     projectSlug: input.projectSlug,
     deliverablePageId: input.pageId,
     cwd: ctx.cwd,
-    codexExecutable: ctx.codexExecutable
+    codexExecutable: ctx.codexExecutable,
+    // model-tier-planning-and-arbiter task 1.21: the seat minted at the async-job claim.
+    seat: ctx.seat
   });
   const result = await runDeliverableGate(
     { projectSlug: input.projectSlug, deliverablePageId: input.pageId },
@@ -59159,6 +59752,177 @@ var deliverableConsensusDescriptor = {
   wakeDirector: true
 };
 
+// src/intent-rubric.ts
+var INTENT_CRITERIA = `Fire only if at least one applies. There is deliberately NO criterion for "I would like more detail" \u2014 that is what produces the flood.
+
+1. Unresolved referent \u2014 names an object (site, page, product, metric, element) that does not resolve to exactly one thing.
+2. No observable outcome \u2014 no acceptance criterion is derivable; it is not stated what will change in the world.
+3. Two incompatible readings \u2014 two materially different end states both fit the text.
+4. Missing decisive input \u2014 a value only the operator holds (a URL, access, a choice between vendors, a target number).`;
+var INTENT_MANUAL_PATH_SCOPE_NOTE = `Scope of criterion 1 on the manual path: the judge receives only the title and notes \u2014 no taxonomy, no existing task titles, no wiki. Criterion 1 is therefore evaluated at face value only: it fires when a referent is unresolvable on its own terms \u2014 a demonstrative with no antecedent ("here", "this page", "\u0442\u0443\u0442"), or an explicitly deferred one ("add foobar (ask Vlad)"). It does NOT fire merely because the judge cannot personally confirm that a named thing exists.`;
+var INTENT_DECISION_RULES_INTRO = `Each decision rule came from an observed misfire. Each is a required non-firing test case, named rule-1 through rule-5.`;
+var INTENT_DECISION_RULES = {
+  "rule-1": `A delegated pick is not an unresolved referent. "Zapier" or equivalent, "another low-friction directory" hand the choice to the doer. Criterion 1 does not fire.`,
+  "rule-2": `A decision is a valid outcome. "Define pause-or-monitor-only policy", "decide whether to ship one public repo" \u2014 the binary is the task's output, not a missing precondition. Criterion 2 does not fire.`,
+  "rule-3": `Interchangeable implementation methods are not two readings. Three routes to one stated goal (CloudFront Function / S3 rule / Hugo frontmatter for one 301) do not fire criterion 3. Criterion 3 needs two different end states.`,
+  "rule-4": `A shared execution resource is not a missing decisive input. Needing an account or credentials is common to every task of its kind; firing criterion 4 there fires on all of them.`,
+  "rule-5": `A diagnosable symptom is not an unresolved referent. For a defect report, an unnamed element on a named route is a diagnostic step, not a blocking ambiguity. Criterion 1 does not fire.`
+};
+function capQuestions(questions) {
+  return questions.slice(0, 3);
+}
+
+// src/async-tools/intent-check.ts
+var INTENT_CHECK_TOOL_NAME = "intent_check";
+function intentCheckTimeoutMs() {
+  const parsed = Number(process.env["MRRLIN_INTENT_CHECK_TIMEOUT_MS"] ?? 6e4);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : 6e4;
+}
+function assembleJudgeInstruction() {
+  const rulesBlock = [
+    INTENT_DECISION_RULES_INTRO,
+    INTENT_DECISION_RULES["rule-1"],
+    INTENT_DECISION_RULES["rule-2"],
+    INTENT_DECISION_RULES["rule-3"],
+    INTENT_DECISION_RULES["rule-4"],
+    INTENT_DECISION_RULES["rule-5"]
+  ].join("\n");
+  return [
+    `Judge whether this task's intent is understood, using ONLY the four criteria and the five`,
+    `decision rules below. Apply them at face value. Do not add tolerance rules of your own and do`,
+    `not bias toward either verdict.`,
+    ``,
+    INTENT_CRITERIA,
+    ``,
+    INTENT_MANUAL_PATH_SCOPE_NOTE,
+    ``,
+    rulesBlock,
+    ``,
+    `Output exactly:`,
+    `VERDICT: CLEAR | UNCLEAR`,
+    `RESTATEMENT: <one sentence, English. Preserve every specific whose error would change execution`,
+    `  (names, URLs, numbers, scope boundaries); drop everything that would not.>`,
+    `QUESTIONS: <empty if CLEAR. Otherwise 1-3 lines, each prefixed "- ", scope-level only: what the`,
+    `  work is, where it applies, or what counts as done. Never spec-level detail.>`
+  ].join("\n");
+}
+function buildJudgePrompt(title, notes) {
+  return `TITLE: ${title}
+NOTES: ${notes ?? "(none)"}`;
+}
+function parseJudgeOutput(text) {
+  const verdictMatch = /VERDICT:\s*\b(CLEAR|UNCLEAR)\b/i.exec(text);
+  if (!verdictMatch) return null;
+  const verdict = (verdictMatch[1] ?? "").toUpperCase();
+  const restatementMatch = /RESTATEMENT:\s*([\s\S]*?)(?=\n\s*(?:VERDICT|QUESTIONS):|$)/i.exec(text);
+  const restatement = restatementMatch?.[1]?.trim();
+  if (!restatement) return null;
+  const questionsMatch = /QUESTIONS:\s*([\s\S]*)/i.exec(text);
+  const questionsBlock = questionsMatch?.[1] ?? "";
+  const questions = capQuestions(
+    questionsBlock.split("\n").map((line) => line.trim()).filter((line) => line.startsWith("-")).map((line) => line.replace(/^-\s*/, "").trim()).filter((line) => line.length > 0)
+  );
+  const result = mrrlinIntentVerdictSchema.safeParse({ verdict, restatement, questions });
+  return result.success ? result.data : null;
+}
+async function runIntentCheck(ctx, input) {
+  if (ctx.projectSlug) {
+    let project;
+    try {
+      project = await ctx.client.getProject(ctx.projectSlug);
+    } catch (err) {
+      return {
+        kind: "retry",
+        failureReason: "provider_unavailable",
+        error: `intent check: failed to read project settings: ${err instanceof Error ? err.message : String(err)}`,
+        taskId: input.taskId
+      };
+    }
+    if (project.intentJudgeEnabled === false) {
+      const verdict2 = {
+        verdict: "CLEAR",
+        restatement: "(intent judge disabled for this project)",
+        questions: []
+      };
+      return {
+        kind: "done",
+        resultJson: JSON.stringify(verdict2),
+        finalReviewedHash: null,
+        taskId: input.taskId,
+        taskTitle: input.title
+      };
+    }
+  }
+  const exec = await runAgentExec({
+    prompt: buildJudgePrompt(input.title, input.notes),
+    developerInstructions: assembleJudgeInstruction(),
+    cwd: ctx.cwd,
+    timeoutMs: intentCheckTimeoutMs(),
+    sandbox: "read-only",
+    codexExecutable: ctx.codexExecutable,
+    // model-tier-planning-and-arbiter task 2.6 (D1): the judge is pinned to the seat's strongest
+    // model.
+    model: ctx.seat?.models.strong
+  });
+  if (!exec.ok) {
+    return {
+      kind: "retry",
+      failureReason: "provider_unavailable",
+      error: `intent check failed: ${exec.error}`,
+      taskId: input.taskId
+    };
+  }
+  const verdict = parseJudgeOutput(exec.text);
+  if (!verdict) {
+    return {
+      kind: "failed",
+      failureReason: "zero_output",
+      error: "intent judge produced unparseable output",
+      taskId: input.taskId
+    };
+  }
+  return {
+    kind: "done",
+    resultJson: JSON.stringify(verdict),
+    finalReviewedHash: null,
+    taskId: input.taskId,
+    taskTitle: input.title
+  };
+}
+function onComplete4(outcome, input) {
+  if (outcome.kind !== "done") {
+    return { kind: "info", taskId: input.taskId, suppressInbox: true, body: "" };
+  }
+  let verdict = null;
+  try {
+    verdict = mrrlinIntentVerdictSchema.parse(JSON.parse(outcome.resultJson));
+  } catch {
+    return { kind: "info", taskId: input.taskId, suppressInbox: true, body: "" };
+  }
+  if (verdict.verdict === "CLEAR") {
+    return { kind: "info", taskId: input.taskId, suppressInbox: true, body: "" };
+  }
+  const body = [verdict.restatement, "", ...verdict.questions.map((q, i) => `${i + 1}. ${q}`)].join("\n");
+  return {
+    kind: "question",
+    taskId: input.taskId,
+    origin: "gate",
+    questionOptions: null,
+    body
+  };
+}
+function createIntentCheckDescriptor() {
+  return {
+    toolName: INTENT_CHECK_TOOL_NAME,
+    dedupKey: (input) => `intent-check:${input.taskId}`,
+    run: runIntentCheck,
+    onComplete: onComplete4,
+    wakeDirector: true,
+    appliesIntentVerdict: true
+  };
+}
+var intentCheckDescriptor = createIntentCheckDescriptor();
+
 // src/async-tools/enqueue.ts
 var import_node_crypto10 = __toESM(require("node:crypto"), 1);
 async function enqueueAsyncTool(client, descriptor2, input) {
@@ -59741,6 +60505,7 @@ var COMPACT_OPT_IN = {
 registerAsyncTool(consensusDescriptor);
 registerAsyncTool(deliverableConsensusDescriptor);
 registerAsyncTool(draftSpecDescriptor);
+registerAsyncTool(intentCheckDescriptor);
 var projectScopedSchema = external_exports.object({ projectSlug: mrrlinProjectSlugSchema });
 var taskScopedSchema = projectScopedSchema.extend({ taskId: mrrlinTaskIdSchema });
 var planScopedSchema = projectScopedSchema.extend({ planId: mrrlinPlanIdSchema });
@@ -61037,7 +61802,7 @@ function readZodObjectShape(schema) {
   if (candidate && typeof candidate === "object") return candidate;
   return null;
 }
-function jsonSchemaPrimitiveType(schema) {
+function unwrapZodSchema(schema) {
   let current2 = schema;
   for (; ; ) {
     const def = current2._def;
@@ -61045,18 +61810,27 @@ function jsonSchemaPrimitiveType(schema) {
       current2 = def.innerType;
       continue;
     }
+    if (def?.in) {
+      current2 = def.in;
+      continue;
+    }
     if (def?.schema) {
       current2 = def.schema;
       continue;
     }
     break;
   }
+  return current2;
+}
+function jsonSchemaPrimitiveType(schema) {
+  const current2 = unwrapZodSchema(schema);
   if (current2 instanceof external_exports.ZodNumber) return "number";
   if (current2 instanceof external_exports.ZodBoolean) return "boolean";
   return "string";
 }
 function jsonSchemaProperty(schema) {
-  const property = { type: jsonSchemaPrimitiveType(schema) };
+  const unwrapped = unwrapZodSchema(schema);
+  const property = unwrapped instanceof external_exports.ZodArray ? { items: { type: jsonSchemaPrimitiveType(unwrapped.element) }, type: "array" } : { type: jsonSchemaPrimitiveType(schema) };
   let jsonSchema = {};
   try {
     jsonSchema = external_exports.toJSONSchema(schema);
@@ -61308,13 +62082,13 @@ async function uninstallPrompts(codexHome, names) {
 
 // src/bin.ts
 function pm2Runner(args) {
-  const r = (0, import_node_child_process17.spawnSync)("pm2", args, { encoding: "utf8" });
+  const r = (0, import_node_child_process18.spawnSync)("pm2", args, { encoding: "utf8" });
   process.stderr.write(r.stdout ?? "");
   process.stderr.write(r.stderr ?? "");
   return { code: r.status ?? 1, stdout: r.stdout ?? "" };
 }
 function whichBin(bin) {
-  const r = (0, import_node_child_process17.spawnSync)("which", [bin], { encoding: "utf8" });
+  const r = (0, import_node_child_process18.spawnSync)("which", [bin], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   return r.status === 0 && out ? out.split("\n")[0] ?? null : null;
 }
@@ -61499,13 +62273,13 @@ async function main() {
     }
     case "browser-serve": {
       const { command: command2, args, env } = browserServeArgs();
-      const r = (0, import_node_child_process17.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
+      const r = (0, import_node_child_process18.spawnSync)(command2, args, { stdio: "inherit", env: { ...process.env, ...env } });
       process.exitCode = r.status ?? 1;
       return;
     }
     case "external-agents-serve": {
       const { command: command2, args } = externalAgentsServeArgs();
-      const r = (0, import_node_child_process17.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
+      const r = (0, import_node_child_process18.spawnSync)(command2, args, { stdio: "inherit", env: process.env });
       process.exitCode = r.status ?? 1;
       return;
     }
@@ -61573,7 +62347,7 @@ async function main() {
         );
       }
       const realProviderRunner = (command2) => (args) => {
-        const r = (0, import_node_child_process17.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
+        const r = (0, import_node_child_process18.spawnSync)(command2, args, { encoding: "utf8", timeout: 8e3 });
         return { status: r.status, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
       };
       for (const provider of ["codex", "claude"]) {