@octocodeai/freellama-mcp-server 0.6.2 → 0.9.0

package/dist/research/bash-agent.js

@@ -1,13 +1,10 @@
-// src/research/bash-agent.ts
-import { pathToFileURL } from "node:url";
-
 // src/research/adapter.ts
 function isPositiveInt(value) {
   return (typeof value === "boolean" || typeof value === "number" && Number.isInteger(value)) && Number(value) >= 1;
 }
 
 // src/research/agent-loop.ts
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { performance } from "node:perf_hooks";
 import { setTimeout as sleep } from "node:timers/promises";
 
@@ -57,8 +54,21 @@ function isSystemError(error) {
 var ToolTimeoutError = class extends Error {
   name = "ToolTimeoutError";
 };
+var ToolExitError = class extends Error {
+  constructor(exitCode, output, status = "error") {
+    super(`${status === "empty" ? "nothing found" : "command failed"} (exit code ${exitCode})` + (output ? `
+${output}` : ""));
+    this.exitCode = exitCode;
+    this.output = output;
+    this.status = status;
+  }
+  exitCode;
+  output;
+  status;
+  name = "ToolExitError";
+};
 function isToolError(error) {
-  return error instanceof ValidationError || error instanceof ToolTimeoutError || error instanceof SyntaxError || isSystemError(error);
+  return error instanceof ValidationError || error instanceof ToolTimeoutError || error instanceof ToolExitError || error instanceof SyntaxError || isSystemError(error);
 }
 
 // src/research/actions.ts
@@ -362,27 +372,44 @@ var estimateText = (value) => canonicalJson(value, { sortKeys: false, ensureAsci
 function estimateTokens(text, charsPerToken = CHARS_PER_TOKEN) {
   return Math.floor(cpLength(text) / charsPerToken) + 1;
 }
-function messagesTokens(messages, policy = new ContextPolicy()) {
+var UNMEASURED_BYTES_PER_TOKEN_MILLI = 3e3;
+function platformBytesPerTokenMilli(learnedMilli) {
+  if (learnedMilli === null || learnedMilli === void 0) return UNMEASURED_BYTES_PER_TOKEN_MILLI;
+  return Math.min(Math.max(Math.floor(learnedMilli / 10) * 9, 1e3), 8e3);
+}
+function platformTextTokens(text, learnedMilli) {
+  return Math.ceil(Buffer.byteLength(text, "utf8") * 1e3 / platformBytesPerTokenMilli(learnedMilli));
+}
+function messagesTokens(messages, policy = new ContextPolicy(), learnedMilli = null) {
   let total = 0;
   for (const message of messages) {
-    const { content = "", images = [], ...metadata } = message;
-    total += estimateTokens(typeof content === "string" ? content : estimateText(content), policy.chars_per_token);
+    const { images = [], ...text } = message;
     if (Array.isArray(images)) total += images.length * policy.image_token_estimate;
+    if (learnedMilli !== null) {
+      total += platformTextTokens(JSON.stringify(text), learnedMilli) + 1;
+      continue;
+    }
+    const { content = "", ...metadata } = text;
+    total += estimateTokens(typeof content === "string" ? content : estimateText(content), policy.chars_per_token);
     total += estimateTokens(estimateText(metadata), policy.chars_per_token);
   }
   return total;
 }
 var ContextBudgeter = class {
   policy;
+  platformRatio;
   scale;
   calibration_samples;
   constructor(policy = new ContextPolicy(), options = {}) {
     this.policy = policy;
-    this.scale = Math.max(options.initialScale ?? 1, 1);
-    this.calibration_samples = Math.max(Math.trunc(options.calibrationSamples ?? 0), 0);
+    this.platformRatio = options.platformRatio ?? null;
+    this.scale = this.platformRatio ? 1 : Math.max(options.initialScale ?? 1, 1);
+    this.calibration_samples = this.platformRatio ? 0 : Math.max(Math.trunc(options.calibrationSamples ?? 0), 0);
   }
-  estimate = (messages) => Math.ceil(messagesTokens(messages, this.policy) * this.scale);
+  estimate = (messages) => this.platformRatio ? messagesTokens(messages, this.policy, this.platformRatio.bytes_per_token_milli) : Math.ceil(messagesTokens(messages, this.policy) * this.scale);
+  /** Calibrate the fallback estimate; returns whether the multiplier rose (and should persist). */
   observe(messages, promptEvalCount) {
+    if (this.platformRatio) return false;
     if (typeof promptEvalCount !== "number" || !Number.isFinite(promptEvalCount)) return false;
     const actual = Math.trunc(promptEvalCount);
     if (actual <= 0) return false;
@@ -393,10 +420,14 @@ var ContextBudgeter = class {
     return this.scale > previous;
   }
   metadata() {
+    const ratio = this.platformRatio;
     return {
-      token_counting: this.calibration_samples ? "model_calibrated_estimate" : "configured_estimate",
+      token_counting: ratio ? "platform_learned_ratio" : "local_chars_per_token",
       estimate_scale: Math.round(this.scale * 1e6) / 1e6,
-      calibration_samples: this.calibration_samples
+      calibration_samples: this.calibration_samples,
+      bytes_per_token_milli: ratio?.bytes_per_token_milli ?? null,
+      bytes_per_token_milli_with_margin: ratio ? platformBytesPerTokenMilli(ratio.bytes_per_token_milli) : null,
+      bytes_per_token_samples: ratio?.bytes_per_token_samples ?? null
     };
   }
 };
@@ -444,10 +475,10 @@ function compact(content, policy) {
 }
 var textContent = (message) => typeof message?.content === "string" ? message.content : null;
 var contentLength = (message) => cpLength(textContent(message) ?? "");
-function widestIndex(indexes, messages) {
+function widestIndex(indexes2, messages) {
   let best;
   let bestLength = -1;
-  for (const index of indexes) {
+  for (const index of indexes2) {
     const length = contentLength(messages[index]);
     if (length > bestLength) {
       best = index;
@@ -542,11 +573,16 @@ var AgentContextManager = class {
   constructor(runtime, options = {}) {
     this.runtime = runtime;
     this.model = options.model ?? "";
-    this.calibrationDir = options.calibrationDir ?? null;
+    const platformRatio = options.platformRatio ?? null;
+    this.calibrationDir = platformRatio ? null : options.calibrationDir ?? null;
     this.calibrationIdentity = options.calibrationIdentity ?? "";
     const loaded = this.loadCalibration();
-    this.budgeter = new ContextBudgeter(runtime.context, { initialScale: loaded?.scale ?? 1, calibrationSamples: loaded?.samples ?? 0 });
-    this.calibrationSource = loaded ? "persistent_model_cache" : "current_process";
+    this.budgeter = new ContextBudgeter(runtime.context, {
+      initialScale: loaded?.scale ?? 1,
+      calibrationSamples: loaded?.samples ?? 0,
+      platformRatio
+    });
+    this.calibrationSource = platformRatio ? "not_applied" : loaded ? "persistent_model_cache" : "current_process";
   }
   modelKey() {
     return createHash("sha256").update(this.calibrationContractJson(), "utf8").digest("hex").slice(0, 24);
@@ -840,8 +876,27 @@ ${body}${footer}`;
   }
 };
 
+// src/research/progress-events.ts
+var PROGRESS_ENV = "FREELLAMA_AGENT_PROGRESS";
+var PROGRESS_PREFIX = "@freellama-progress ";
+function progressEmitter(env, write = (line) => {
+  process.stderr.write(line);
+}) {
+  if (env[PROGRESS_ENV] !== "stderr") return void 0;
+  return (event) => {
+    try {
+      write(`${PROGRESS_PREFIX}${JSON.stringify(event)}
+`);
+    } catch {
+    }
+  };
+}
+
 // src/research/transport.ts
 import { createHash as createHash2 } from "node:crypto";
+import { readFileSync as readFileSync4 } from "node:fs";
+import { homedir } from "node:os";
+import path3 from "node:path";
 
 // src/research/transport-http.ts
 import { readFileSync as readFileSync3 } from "node:fs";
@@ -903,13 +958,21 @@ function httpRequest(url, options) {
     if (options.body) headers["content-length"] = String(options.body.length);
     let sent = false;
     let settled = false;
+    const { signal } = options;
+    const onAbort = () => fail(signal?.reason instanceof Error ? signal.reason : new Error("request aborted"));
     const fail = (error) => {
       if (settled) return;
       settled = true;
+      signal?.removeEventListener("abort", onAbort);
       request.destroy();
       reject(error);
     };
+    if (signal?.aborted) {
+      reject(signal.reason instanceof Error ? signal.reason : new Error("request aborted"));
+      return;
+    }
     const request = client.request(parsed, { method: options.method, headers });
+    signal?.addEventListener("abort", onAbort, { once: true });
     request.setTimeout(Math.max(options.timeoutSeconds * 1e3, 1), () => {
       fail(sent ? new RequestTimeoutError() : new URLError(new RequestTimeoutError()));
     });
@@ -926,6 +989,7 @@ function httpRequest(url, options) {
       const finish = () => {
         if (settled) return;
         settled = true;
+        signal?.removeEventListener("abort", onAbort);
         const body = Buffer.concat(chunks);
         request.destroy();
         if (ok) resolve(body);
@@ -957,11 +1021,25 @@ async function requestJson(url, payload, timeoutSeconds) {
 var MANAGED_SUFFIX = "/_freellama/v1/tasks";
 var IDENTITY_LIMIT = 1024 * 1024;
 var trimSlashes = (text) => text.replace(/\/+$/, "");
-async function readIdentityJson(url) {
-  const payload = await httpRequest(url, { method: "GET", headers: requestHeaders(), timeoutSeconds: 5, limit: IDENTITY_LIMIT + 1 });
+async function readCatalogJson(url, request = httpRequest) {
+  const payload = await request(url, { method: "GET", headers: requestHeaders(), timeoutSeconds: 5, limit: IDENTITY_LIMIT + 1 });
   if (payload.length > IDENTITY_LIMIT) throw new ValidationError("model identity catalog exceeds size limit");
   return parseJsonBody(payload, "model identity catalog");
 }
+function catalogEntry(payload, model) {
+  const entries = isRecord(payload) ? payload.models ?? [] : [];
+  if (!Array.isArray(entries)) return null;
+  const names = /* @__PURE__ */ new Set([model]);
+  const lastSegment = model.slice(model.lastIndexOf("/") + 1);
+  if (!lastSegment.includes(":")) names.add(model + ":latest");
+  for (const item of entries) {
+    if (!isRecord(item)) continue;
+    const name = Object.hasOwn(item, "name") ? item.name : item.model;
+    if (typeof name === "object" && name !== null) return "ambiguous";
+    if (typeof name === "string" && names.has(name)) return item;
+  }
+  return null;
+}
 var DIGEST = /^(?:sha256:)?[0-9a-fA-F]{64}$/;
 var sha256 = (data) => createHash2("sha256").update(data, "utf8").digest("hex");
 async function resolveModelIdentity(endpointInput, model, systemPrompt, options = {}) {
@@ -969,22 +1047,8 @@ async function resolveModelIdentity(endpointInput, model, systemPrompt, options
   const url = endpoint.endsWith(MANAGED_SUFFIX) ? endpoint.slice(0, -MANAGED_SUFFIX.length) + "/_freellama/v1/models" : endpoint + "/api/tags";
   const unknown = { identity: "", verified: false, scope: "current_process_only" };
   try {
-    const payload = await (options.readJson ?? readIdentityJson)(url);
-    const entries = isRecord(payload) ? payload.models ?? [] : [];
-    if (!Array.isArray(entries)) return unknown;
-    const names = /* @__PURE__ */ new Set([model]);
-    const lastSegment = model.slice(model.lastIndexOf("/") + 1);
-    if (!lastSegment.includes(":")) names.add(model + ":latest");
-    let entry = null;
-    for (const item of entries) {
-      if (!isRecord(item)) continue;
-      const name = Object.hasOwn(item, "name") ? item.name : item.model;
-      if (typeof name === "object" && name !== null) return unknown;
-      if (typeof name === "string" && names.has(name)) {
-        entry = item;
-        break;
-      }
-    }
+    const entry = catalogEntry(await (options.readJson ?? readCatalogJson)(url), model);
+    if (entry === "ambiguous") return unknown;
     const digestValue = entry?.digest;
     if (typeof digestValue !== "string" || !DIGEST.test(digestValue)) return unknown;
     const digest = (digestValue.startsWith("sha256:") ? digestValue.slice("sha256:".length) : digestValue).toLowerCase();
@@ -1002,11 +1066,36 @@ async function resolveModelIdentity(endpointInput, model, systemPrompt, options
     throw error;
   }
 }
+async function resolvePlatformTokenRatio(serveEndpoint, model, options = {}) {
+  try {
+    const url = `${trimSlashes(serveEndpoint)}/_freellama/v1/models`;
+    const entry = catalogEntry(await (options.readJson ?? readCatalogJson)(url), model);
+    if (entry === null || entry === "ambiguous") return null;
+    const milli = entry.bytes_per_token_milli;
+    if (typeof milli !== "number" || !Number.isSafeInteger(milli) || milli <= 0) return null;
+    const samples = entry.bytes_per_token_samples;
+    return {
+      bytes_per_token_milli: milli,
+      bytes_per_token_samples: typeof samples === "number" && Number.isSafeInteger(samples) && samples > 0 ? samples : 1
+    };
+  } catch {
+    return null;
+  }
+}
 function isTransportError(error) {
   return error instanceof HTTPError || error instanceof URLError || error instanceof RequestTimeoutError;
 }
 function retryableChatError(error) {
-  if (error instanceof HTTPError) return error.code === 503;
+  if (error instanceof HTTPError) {
+    if (error.code !== 503 || error.body.length > RECEIPT_BODY_LIMIT) return false;
+    try {
+      const body = parseJsonBody(error.body, "retry receipt");
+      if (!isRecord(body) || body.retry_safe === false || body.execution_outcome !== void 0 && body.execution_outcome !== "not_started") return false;
+      return body.retry_safe === true && body.execution_outcome === "not_started" || ["admission_timeout", "resource_admission_unavailable", "upstream_circuit_open", "model_lifecycle_busy"].includes(String(body.code));
+    } catch {
+      return false;
+    }
+  }
   return error instanceof URLError && error.reason.code === "ECONNREFUSED";
 }
 var RECEIPT_FIELDS = /* @__PURE__ */ new Set([
@@ -1022,7 +1111,12 @@ var RECEIPT_FIELDS = /* @__PURE__ */ new Set([
   "route",
   "decision",
   "quality",
-  "feedback"
+  "feedback",
+  "execution_outcome",
+  "retry_safe",
+  "result_recoverable",
+  "job_id",
+  "last_observed_status"
 ]);
 var PAYLOAD_FIELDS = /* @__PURE__ */ new Set([
   "prompt",
@@ -1105,6 +1199,22 @@ var PromptCacheUsage = class {
     };
   }
 };
+var resolvedShift;
+function contextShift(env = process.env, reset = false) {
+  if (resolvedShift !== void 0 && !reset) return resolvedShift;
+  const read = (value2) => value2 === "ollama_default" || value2 === "off" ? value2 : void 0;
+  let value = read(env.FREELLAMA_CONTEXT_SHIFT?.trim());
+  if (!value) {
+    const file = env.FREELLAMA_RUNTIME_CONFIG || path3.join(env.FREELLAMA_HOME || path3.join(homedir(), ".octocode", "freellama"), "runtime.toml");
+    try {
+      const topLevel = readFileSync4(file, "utf8").split(/^\s*\[/m)[0] ?? "";
+      value = read(/^\s*context_shift\s*=\s*"([^"]*)"/m.exec(topLevel)?.[1]);
+    } catch {
+    }
+  }
+  resolvedShift = value ?? "off";
+  return resolvedShift;
+}
 function chatRequest(endpointInput, model, messages, options, think, keepAlive, executionPreference = "auto", minPlacementEvidence = "configured") {
   const endpoint = trimSlashes(endpointInput);
   if (endpoint.endsWith(MANAGED_SUFFIX)) {
@@ -1130,7 +1240,7 @@ function chatRequest(endpointInput, model, messages, options, think, keepAlive,
     messages,
     stream: false,
     truncate: false,
-    shift: false,
+    ...contextShift() === "ollama_default" ? {} : { shift: false },
     format: "json",
     think,
     keep_alive: keepAlive,
@@ -1152,9 +1262,322 @@ function unwrapChatResponse(payload, executionReceipts) {
   return response;
 }
 
+// src/research/transport-jobs.ts
+import { STATUS_CODES } from "node:http";
+
+// src/job-progress.ts
+var TERMINAL = /* @__PURE__ */ new Set(["completed", "failed", "cancelled", "expired"]);
+var SUBMIT_FALLBACK_CODES = /* @__PURE__ */ new Set(["task_job_input_too_large", "task_jobs_full", "task_jobs_input_budget"]);
+var RETENTION_FAILURE_CODES = /* @__PURE__ */ new Set(["task_job_result_too_large", "task_job_error_too_large"]);
+var FIRST_POLL_MS = 250;
+var HEARTBEAT_MS = 1e4;
+var MAX_POLL_MS = 2e3;
+var MAX_POLL_FAILURES = 5;
+var CANCEL_ATTEMPTS = 3;
+var CANCEL_BACKOFF_MS = 250;
+var CANCEL_REPORT_MS = 5e3;
+var object = (value) => value !== null && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+var number = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
+var gigabytes = (bytes) => `${(bytes / 1e9).toFixed(1)} GB`;
+var seconds = (ms) => ms < 1e4 ? `${(ms / 1e3).toFixed(1)} s` : `${Math.round(ms / 1e3)} s`;
+function modelNames(value) {
+  if (!Array.isArray(value)) return [];
+  return value.flatMap((item) => {
+    if (typeof item === "string") return [item];
+    const named = object(item)?.model ?? object(item)?.name;
+    return typeof named === "string" ? [named] : [];
+  });
+}
+function evictedSuffix(detail) {
+  const evicted = modelNames(detail?.evicted ?? detail?.evicted_idle_models);
+  return evicted.length > 0 ? `, evicted ${evicted.join(", ")}` : "";
+}
+function holdersSuffix(detail) {
+  const holders = Array.isArray(detail?.memory_holders) ? detail.memory_holders : [];
+  const named = holders.map((holder) => holder).filter((holder) => typeof holder.name === "string" && typeof holder.resident_bytes === "number").slice(0, 3).map((holder) => {
+    const count = typeof holder.processes === "number" && holder.processes > 1 ? ` \xD7${holder.processes}` : "";
+    return `${holder.name}${count} ${gigabytes(holder.resident_bytes)}`;
+  });
+  return named.length > 0 ? `; largest memory users: ${named.join(", ")}` : "";
+}
+function jobProgressMessage(job) {
+  const status = typeof job.status === "string" ? job.status : "queued";
+  const reason = typeof job.reason === "string" ? job.reason : "";
+  const detail = object(job.detail);
+  const model = typeof job.selected_model === "string" && job.selected_model ? job.selected_model : void 0;
+  switch (status) {
+    case "queued":
+      return "queued";
+    case "waiting_for_admission":
+      return reason === "resources_reserved_waiting_for_backend_capacity" ? "memory reserved; waiting for backend capacity" : "waiting for backend capacity";
+    case "waiting_for_resources": {
+      const need = number(detail?.required_available_bytes);
+      const available = number(detail?.effective_available_bytes);
+      if (need === void 0 && available === void 0) {
+        return (reason === "checking_host_resources" ? "checking host memory" : "waiting for memory") + evictedSuffix(detail);
+      }
+      const sizes = [need !== void 0 ? `need ${gigabytes(need)}` : void 0, available !== void 0 ? `${gigabytes(available)} available` : void 0].filter(Boolean).join(", ");
+      const pressure = Array.isArray(detail?.pressure_reasons) ? detail.pressure_reasons.map((item) => typeof item === "string" ? item : JSON.stringify(item)) : [];
+      return `waiting for memory: ${sizes}${pressure.length > 0 ? ` (host: ${pressure.join(", ")})` : ""}${holdersSuffix(detail)}${evictedSuffix(detail)}`;
+    }
+    case "waiting_for_runner":
+      return "waiting for runner";
+    case "loading": {
+      const expected = number(detail?.expected_load_ms);
+      return `loading ${model ?? "model"}${expected !== void 0 ? ` (~${seconds(expected)})` : ""}${evictedSuffix(detail)}`;
+    }
+    case "running":
+      return model ? `running ${model}` : "running";
+    default:
+      return status.replace(/_/g, " ");
+  }
+}
+function errorBody(error) {
+  try {
+    return object(JSON.parse(error instanceof Error ? error.message : String(error)));
+  } catch {
+    return void 0;
+  }
+}
+function describeNapiError(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  const missing = /does not exist or has expired|\bHTTP 404\b|^\s*(?:404\b|Not Found\s*$)/i.test(message);
+  return { body: errorBody(error), ...missing ? { status: 404 } : {} };
+}
+function unconfirmedSubmission(error, body) {
+  const message = error instanceof Error ? error.message : String(error);
+  if (body && (typeof body.code === "string" || "execution_outcome" in body || "retry_safe" in body)) {
+    return error instanceof Error ? error : new Error(message);
+  }
+  return new Error(JSON.stringify({
+    ...body,
+    error: typeof body?.error === "string" ? body.error : message,
+    execution_outcome: "unknown",
+    retry_safe: false
+  }));
+}
+function submissionRefused({ body }) {
+  const code = body?.code;
+  return typeof code === "string" && SUBMIT_FALLBACK_CODES.has(code);
+}
+var defaultWait = (ms, signal) => new Promise((resolve) => {
+  if (signal?.aborted) return resolve();
+  const done = () => {
+    clearTimeout(timer);
+    signal?.removeEventListener("abort", done);
+    resolve();
+  };
+  const timer = setTimeout(done, ms);
+  signal?.addEventListener("abort", done, { once: true });
+});
+async function runWithJobProgress(calls, report, options = {}) {
+  const { signal, wait = defaultWait, describe = describeNapiError, onJob } = options;
+  const aborted = (id2, cancellation2) => options.aborted?.(id2, cancellation2) ?? new Error(id2 ? cancellation2 === "unknown" ? `run_task was cancelled by the client; cancellation acknowledgement is unknown for deferred job ${id2}, which may still be running. Upstream stop is not confirmed.` : `run_task was cancelled by the client; cancellation was requested for deferred job ${id2}${cancellation2 === "acknowledged" ? " and acknowledged by serve" : ""}. Upstream stop is not confirmed.` : "run_task was cancelled by the client before a job handle was received; execution outcome is unknown. The task was not replayed.");
+  if (signal?.aborted) throw options.aborted?.() ?? new Error("run_task was cancelled by the client before submission; no task was submitted.");
+  let raw;
+  try {
+    raw = await calls.submit();
+  } catch (error) {
+    if (signal?.aborted) throw aborted();
+    const described = describe(error);
+    if (submissionRefused(described)) return calls.sync(described.body);
+    throw options.unconfirmed?.(error, described.body) ?? unconfirmedSubmission(error, described.body);
+  }
+  let submitted;
+  try {
+    submitted = object(JSON.parse(raw));
+  } catch {
+    return raw;
+  }
+  let job = object(submitted?.job);
+  const id = typeof job?.id === "string" ? job.id : void 0;
+  if (submitted?.deferred !== true || !job || !id) return raw;
+  onJob?.(id, true);
+  let open = true;
+  const settled = () => {
+    if (open) onJob?.(id, false);
+    open = false;
+  };
+  let cancellation;
+  const requestCancellation = async () => {
+    for (let attempt = 1; ; attempt++) {
+      try {
+        const reply = object(JSON.parse(await calls.cancel(id)));
+        const status = object(reply?.job)?.status ?? reply?.status;
+        if (!TERMINAL.has(String(status))) return "requested";
+        settled();
+        return "acknowledged";
+      } catch (error) {
+        if (describe(error).status === 404) {
+          settled();
+          return "unknown";
+        }
+        if (attempt >= CANCEL_ATTEMPTS) return "unknown";
+        await wait(CANCEL_BACKOFF_MS * 2 ** (attempt - 1));
+      }
+    }
+  };
+  const cancel = () => {
+    cancellation ??= requestCancellation();
+  };
+  const cancellationState = async () => {
+    if (!cancellation) return void 0;
+    let timer;
+    const capped = new Promise((resolve) => {
+      timer = setTimeout(() => resolve("unknown"), CANCEL_REPORT_MS);
+    });
+    try {
+      return await Promise.race([cancellation, capped]);
+    } finally {
+      clearTimeout(timer);
+    }
+  };
+  signal?.addEventListener("abort", cancel, { once: true });
+  try {
+    let lastMessage = "";
+    let lastPhase = "";
+    let lastReportAt = Date.now();
+    let phaseStartedAt = lastReportAt;
+    let delay = FIRST_POLL_MS;
+    let failures = 0;
+    for (; ; ) {
+      if (signal?.aborted) {
+        cancel();
+        throw aborted(id, await cancellationState());
+      }
+      const now = Date.now();
+      const phase = `${String(job.status)}|${String(job.reason)}`;
+      if (phase !== lastPhase) {
+        lastPhase = phase;
+        phaseStartedAt = now;
+        delay = FIRST_POLL_MS;
+      }
+      const message = jobProgressMessage(job);
+      if (message !== lastMessage) {
+        report(message);
+        lastMessage = message;
+        lastReportAt = now;
+      } else if (now - lastReportAt >= HEARTBEAT_MS && !TERMINAL.has(String(job.status))) {
+        report(`${message} (${seconds(now - phaseStartedAt)})`);
+        lastReportAt = now;
+      }
+      if (TERMINAL.has(String(job.status))) break;
+      await wait(delay, signal);
+      if (signal?.aborted) {
+        cancel();
+        throw aborted(id, await cancellationState());
+      }
+      delay = Math.min(MAX_POLL_MS, Math.round(delay * 1.5));
+      try {
+        const polled = object(object(JSON.parse(await calls.get(id)))?.job);
+        if (polled) job = polled;
+        failures = 0;
+      } catch (error) {
+        if (describe(error).status === 404) {
+          settled();
+          const failure2 = {
+            code: "task_job_unavailable",
+            error: `Deferred job ${id} is no longer available; its execution outcome is unknown. The task was not run again. Its result cannot be recovered from the missing job record; verify the original execution before submitting new work.`,
+            job_id: id,
+            last_observed_status: job.status,
+            execution_outcome: "unknown",
+            result_recoverable: false,
+            retry_safe: false
+          };
+          throw options.failure?.(failure2, 404) ?? new Error(JSON.stringify(failure2));
+        }
+        failures += 1;
+        if (failures >= MAX_POLL_FAILURES) {
+          cancel();
+          throw error;
+        }
+      }
+    }
+    settled();
+    if (job.status === "completed") return JSON.stringify(job.result ?? {});
+    const failure = { ...object(job.error) ?? { error: `deferred job ${id} ended ${String(job.status)}` } };
+    if (typeof failure.code === "string" && RETENTION_FAILURE_CODES.has(failure.code)) {
+      const lost = failure.code === "task_job_result_too_large" ? "result" : "error";
+      failure.error = `${String(failure.error)} Deferred job ${id} was not run again. Its original ${lost} was not retained and cannot be recovered from this job; resubmission would execute new work.`;
+      failure.job_id = id;
+      failure.result_recoverable = false;
+      failure.retry_safe = false;
+    }
+    const status = typeof failure.status === "number" ? failure.status : void 0;
+    delete failure.id;
+    delete failure.ok;
+    if (status !== void 0) delete failure.status;
+    throw options.failure?.(failure, status) ?? new Error(JSON.stringify(failure));
+  } finally {
+    signal?.removeEventListener("abort", cancel);
+  }
+}
+
+// src/research/transport-jobs.ts
+var TASKS_SUFFIX = "/_freellama/v1/tasks";
+function describeHttpError(error) {
+  if (!(error instanceof HTTPError)) return {};
+  try {
+    const body = parseJsonBody(error.body.subarray(0, RECEIPT_BODY_LIMIT), "error body");
+    return { status: error.code, ...isRecord(body) ? { body } : {} };
+  } catch {
+    return { status: error.code };
+  }
+}
+function syncError(body, status) {
+  const code = status ?? 500;
+  return new HTTPError(code, STATUS_CODES[code] ?? "", Buffer.from(JSON.stringify(body), "utf8"));
+}
+async function requestJsonAsJob(url, payload, timeoutSeconds, options) {
+  const request = options.request ?? httpRequest;
+  const headers = requestHeaders();
+  const call = async (method, target, body, signal) => {
+    const sent = body === void 0 ? void 0 : Buffer.from(JSON.stringify(body), "utf8");
+    const response = await request(target, { method, headers, body: sent, timeoutSeconds, signal });
+    return decodeUtf8(response, "managed task response");
+  };
+  const sync = () => call("POST", url, payload);
+  if (!url.endsWith(TASKS_SUFFIX)) return parseJsonBody(Buffer.from(await sync(), "utf8"), "chat response");
+  const jobs = `${url.slice(0, -TASKS_SUFFIX.length)}/_freellama/v1/jobs`;
+  const deadline = new AbortController();
+  const timer = setTimeout(() => deadline.abort(), Math.max(timeoutSeconds * 1e3, 1));
+  try {
+    const raw = await runWithJobProgress({
+      submit: () => call("POST", url, { ...payload, defer: true }),
+      get: (id) => call("GET", `${jobs}/${encodeURIComponent(id)}`, void 0, deadline.signal),
+      cancel: (id) => call("POST", `${jobs}/${encodeURIComponent(id)}/cancel`, null),
+      sync: async () => {
+        throw syncError({
+          code: "cancellable_task_unavailable",
+          error: "Serve refused job submission before execution; cancellable research requires available job capacity and a supported request size.",
+          execution_outcome: "not_started",
+          retry_safe: true
+        }, 409);
+      }
+    }, options.report, {
+      signal: deadline.signal,
+      wait: options.wait,
+      describe: describeHttpError,
+      failure: syncError,
+      aborted: () => new RequestTimeoutError(),
+      // Keep transport types, but do not let an arbitrary 503 erase an uncertain submission.
+      unconfirmed: (error, body) => error instanceof HTTPError && !retryableChatError(error) ? syncError({
+        ...body,
+        error: typeof body?.error === "string" ? body.error : error.message,
+        execution_outcome: body?.execution_outcome ?? "unknown",
+        retry_safe: false
+      }, error.code) : error,
+      onJob: options.onJob
+    });
+    return parseJsonBody(Buffer.from(raw, "utf8"), "chat response");
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 // src/research/workspace-path.ts
 import { lstatSync, readlinkSync, statSync } from "node:fs";
-import path3 from "node:path";
+import path4 from "node:path";
 var SymlinkLoopError = class extends ValidationError {
   name = "SymlinkLoopError";
 };
@@ -1241,7 +1664,47 @@ function resolvePath(target, cwd = process.cwd()) {
     return current;
   };
   const text = cleanPath(target);
-  return path3.posix.normalize(walk(text.startsWith("/") ? "" : cwd, text) || "/");
+  return path4.posix.normalize(walk(text.startsWith("/") ? "" : cwd, text) || "/");
+}
+
+// src/research/grounding.ts
+import { existsSync as existsSync3 } from "node:fs";
+import path5 from "node:path";
+var PATH_TOKEN = /(?<![\w@/.-])(?:\.\/)?[\w@-][\w@.-]*(?:\/[\w@.-]+)+\.[A-Za-z][A-Za-z0-9]{0,5}(?=$|[\s:`'"),.;\]])/g;
+function clean(token) {
+  return token.replace(/^\.\//, "").replace(/[.,;]+$/, "");
+}
+function pathsIn(text) {
+  return [...new Set([...text.matchAll(PATH_TOKEN)].map((match) => clean(match[0])))];
+}
+function missingPaths(answer, workspace) {
+  return pathsIn(answer).filter((candidate) => !existsSync3(path5.join(workspace, candidate)));
+}
+function evidencePaths(observations, workspace, limit = 10) {
+  const found = [];
+  for (const text of observations) {
+    for (const candidate of pathsIn(text)) {
+      if (!found.includes(candidate) && existsSync3(path5.join(workspace, candidate))) found.push(candidate);
+      if (found.length >= limit) return found;
+    }
+  }
+  return found;
+}
+function groundingRepairNotice(missing, evidence) {
+  return `These paths in your answer do not exist in the workspace: ${missing.join(", ")}. ` + (evidence.length > 0 ? `Paths your own commands returned: ${evidence.join(", ")}. ` : "") + "Return a finish action again that cites only paths that exist; if the evidence does not establish the answer, say so.";
+}
+function groundingNote(missing) {
+  return `
+[freellama: cited path(s) not found in the workspace: ${missing.join(", ")}; treat this answer as unverified]`;
+}
+function toolErrorHint(message) {
+  if (/rg: unrecognized flag --(?:exclude-dir|include)/.test(message)) {
+    return "\nHint: rg excludes directories with --glob '!node_modules' and filters types with -t ts; or use grep -rn PATTERN . --exclude-dir=node_modules.";
+  }
+  return "";
+}
+function sourceRepairNotice(evidence) {
+  return `Your answer names no source file. Keep the answer and end it with "Source: path:line" copied from your results, for example one of: ${evidence.slice(0, 6).join(", ")}.`;
 }
 
 // src/research/agent-loop.ts
@@ -1251,7 +1714,7 @@ function requireEnv(env, name) {
   if (value === void 0) throw new Error(`${name} is not set`);
   return value;
 }
-var readText = (file) => normalizeNewlines(decodeUtf8(readFileSync4(file), file));
+var readText = (file) => normalizeNewlines(decodeUtf8(readFileSync5(file), file));
 var pathOf = (value) => value === "" ? "." : value;
 var numberOr = (value, fallback) => typeof value === "number" && Number.isFinite(value) ? value : typeof value === "boolean" ? Number(value) : fallback;
 var echo = (action) => canonicalJson(action, { sortKeys: false, ensureAscii: false });
@@ -1281,9 +1744,15 @@ async function runLoop(spec, hooks, env, inputs) {
   const { model, workspace, prompt, resultPath } = inputs;
   const print = hooks.print ?? ((line) => process.stdout.write(`${line}
 `));
-  const sendJson = hooks.requestJson ?? requestJson;
+  const progress = hooks.progress ?? progressEmitter(env);
   const endpoint = (env.FREELLAMA_OLLAMA_ENDPOINT ?? "http://127.0.0.1:11434").replace(/\/+$/, "");
   const managedEndpoint = (env.FREELLAMA_AGENT_MANAGED_ENDPOINT ?? "").replace(/\/+$/, "");
+  let phaseAt = { maxTurns: 0 };
+  const sendJson = hooks.requestJson ?? (managedEndpoint ? (url, payload, timeoutSeconds) => requestJsonAsJob(url, payload, timeoutSeconds, {
+    report: (message) => progress?.({ event: "job_phase", ...phaseAt, message }),
+    onJob: (id, open) => progress?.({ event: open ? "job_open" : "job_closed", id }),
+    request: hooks.httpRequest
+  }) : requestJson);
   const executionPreference = env.FREELLAMA_AGENT_EXECUTION_PREFERENCE ?? "auto";
   const minPlacementEvidence = env.FREELLAMA_AGENT_MIN_PLACEMENT_EVIDENCE ?? "configured";
   let runtime;
@@ -1298,7 +1767,7 @@ async function runLoop(spec, hooks, env, inputs) {
   }
   let messages = [
     { role: "system", content: spec.systemPrompt(workspace) },
-    { role: "user", content: prompt }
+    { role: "user", content: withBriefing(prompt, spec, workspace) }
   ];
   const calls = [];
   const usage = { input_tokens: 0, output_tokens: 0, cache_read_tokens: null, cache_write_tokens: null };
@@ -1308,12 +1777,20 @@ async function runLoop(spec, hooks, env, inputs) {
   let answer = "";
   let failure = null;
   let transportError = null;
+  const readCatalog = (url) => readCatalogJson(url, hooks.httpRequest);
+  const platformRatio = managedEndpoint ? await (hooks.resolvePlatformTokenRatio ?? resolvePlatformTokenRatio)(managedEndpoint, model, { readJson: readCatalog }) : null;
   const calibrationDir = trimSpace(env.FREELLAMA_AGENT_TOKEN_CALIBRATION_DIR ?? "");
-  const calibrationModelIdentity = calibrationDir ? await (hooks.resolveModelIdentity ?? resolveModelIdentity)(managedEndpoint || endpoint, model, messages[0].content) : { verified: false, scope: "persistence_disabled", identity: "" };
+  const calibrationModelIdentity = calibrationDir ? await (hooks.resolveModelIdentity ?? resolveModelIdentity)(
+    managedEndpoint || endpoint,
+    model,
+    messages[0].content,
+    { readJson: readCatalog }
+  ) : { verified: false, scope: "persistence_disabled", identity: "" };
   const contextManager = new AgentContextManager(runtime, {
     model,
     calibrationIdentity: calibrationModelIdentity.identity,
-    calibrationDir: calibrationDir && calibrationModelIdentity.verified ? calibrationDir : null
+    calibrationDir: calibrationDir && calibrationModelIdentity.verified ? calibrationDir : null,
+    platformRatio
   });
   try {
     messages = contextManager.fit(messages);
@@ -1346,12 +1823,19 @@ async function runLoop(spec, hooks, env, inputs) {
           executionPreference,
           minPlacementEvidence
         );
+        const recorded = executionReceipts.length;
         response = unwrapChatResponse(await sendJson(url, payload, runtime.request_timeout_seconds), executionReceipts);
+        if (managedEndpoint && executionReceipts.length === recorded) {
+          executionReceipts.push({ model: null, execution: null, reason: "managed_execution_receipt_missing" });
+        }
         break;
       } catch (error) {
         if (!isTransportError(error) || !retryableChatError(error)) throw error;
         lastError = error;
-        if (attempt + 1 < runtime.retry_attempts) await sleep(runtime.retry_backoff_seconds * 1e3);
+        if (attempt + 1 < runtime.retry_attempts) {
+          progress?.({ event: "retry", attempt: attempt + 2, attempts: runtime.retry_attempts });
+          await sleep(runtime.retry_backoff_seconds * 1e3);
+        }
       }
     }
     if (response === null) throw lastError;
@@ -1386,10 +1870,26 @@ async function runLoop(spec, hooks, env, inputs) {
   const observations = hooks.observationStore ? hooks.observationStore(pageSize) : new ObservationStore(pageSize);
   let session;
   try {
-    session = spec.open ? await spec.open(workspace) : void 0;
+    try {
+      session = spec.open ? await spec.open(workspace) : void 0;
+    } catch (error) {
+      if (!isValidationError(error)) throw error;
+      answer = `research adapter could not start: ${error.message}`;
+      writeFailureResult(resultPath, answer);
+      print(answer);
+      return 1;
+    }
+    const root = session?.workspace ?? workspace;
     let parseFailures = 0;
     let exhausted = true;
+    let repeats = 0;
+    let groundingRepaired = false;
+    let sourceRepaired = false;
+    const seenOutputs = [];
     for (let turn = 0; turn < runtime.max_turns; turn += 1) {
+      const at = { turn: turn + 1, maxTurns: runtime.max_turns };
+      phaseAt = at;
+      progress?.({ event: "model", ...at });
       let response;
       try {
         response = await callModel();
@@ -1413,6 +1913,7 @@ async function runLoop(spec, hooks, env, inputs) {
           exhausted = false;
           break;
         }
+        progress?.({ event: "repair", ...at });
         messages.push({ role: "assistant", content: cpSlice(raw, 0, runtime.parse_repair_echo_chars) });
         messages.push({ role: "user", content: PARSE_REPAIR_NOTICE });
         if (!refit()) {
@@ -1425,6 +1926,7 @@ async function runLoop(spec, hooks, env, inputs) {
       if (action.action === "page") {
         const wantStep = Math.trunc(numberOr(action.step, 0));
         const wantPage = Math.trunc(numberOr(action.page, 1));
+        progress?.({ event: "action", ...at, action });
         messages.push({ role: "assistant", content: echo(action) });
         messages.push({ role: "user", content: observations.message(wantStep, wantPage) });
         if (!refit()) {
@@ -1434,45 +1936,83 @@ async function runLoop(spec, hooks, env, inputs) {
         continue;
       }
       if (action.action === "finish") {
-        answer = trimSpace(String(action.answer ?? ""));
+        const proposed = trimSpace(String(action.answer ?? ""));
+        const missing = missingPaths(proposed, root);
+        if (missing.length > 0 && !groundingRepaired) {
+          groundingRepaired = true;
+          progress?.({ event: "repair", ...at });
+          messages.push({ role: "assistant", content: echo(action) });
+          messages.push({ role: "user", content: groundingRepairNotice(missing, evidencePaths(seenOutputs, root)) });
+          if (!refit()) {
+            answer = proposed + groundingNote(missing);
+            exhausted = false;
+            break;
+          }
+          continue;
+        }
+        const evidence = spec.requireSource !== false && missing.length === 0 && !sourceRepaired && pathsIn(proposed).length === 0 ? evidencePaths(seenOutputs, root) : [];
+        if (evidence.length > 0) {
+          sourceRepaired = true;
+          progress?.({ event: "repair", ...at });
+          messages.push({ role: "assistant", content: echo(action) });
+          messages.push({ role: "user", content: sourceRepairNotice(evidence) });
+          if (!refit()) {
+            answer = proposed;
+            exhausted = false;
+            break;
+          }
+          continue;
+        }
+        progress?.({ event: "finish", ...at });
+        answer = missing.length > 0 ? proposed + groundingNote(missing) : proposed;
         exhausted = false;
         break;
       }
       const started = performance.now();
-      const call = session.toolCall(action, workspace, runtime);
+      const call = session.toolCall(action, root, runtime);
       const signature = callSignature(call.signature);
       let observation;
       let status;
+      let exitCode;
       if (seenCalls.has(signature)) {
+        progress?.({ event: "action", ...at, action, repeat: true });
         observation = REPEAT_NOTICE;
         status = "repeat";
+        repeats += 1;
       } else {
+        progress?.({ event: "action", ...at, action });
         try {
           observation = hooks.runTool ? await hooks.runTool(call.record.arguments) : await call.run();
           status = "ok";
         } catch (error) {
           if (!isToolError(error)) throw error;
-          observation = `tool error: ${error.message}`;
-          status = "error";
+          status = error instanceof ToolExitError ? error.status : "error";
+          exitCode = error instanceof ToolExitError ? error.exitCode : void 0;
+          observation = `${status === "empty" ? "tool search" : "tool error"}: ${error.message}${toolErrorHint(error.message)}`;
         }
         seenCalls.set(signature, calls.length + 1);
       }
       calls.push({
         ...call.record,
         status,
+        ...exitCode === void 0 ? {} : { exit_code: exitCode },
         duration_ms: Math.round((performance.now() - started) * 1e3) / 1e3
       });
       messages.push({ role: "assistant", content: echo(action) });
       const remaining = runtime.max_turns - calls.length;
       const step = calls.length;
       observations.put(step, observation, call.ledger(status));
+      seenOutputs.push(observation);
       messages.push({ role: "user", content: observations.message(step) + spec.remaining(remaining) });
       if (!refit()) {
         exhausted = false;
         break;
       }
+      if (repeats >= 2) break;
     }
     if (exhausted) {
+      progress?.({ event: "finalize", maxTurns: runtime.max_turns });
+      phaseAt = { maxTurns: runtime.max_turns };
       messages.push({ role: "user", content: spec.exhausted });
       if (refit()) {
         try {
@@ -1480,6 +2020,8 @@ async function runLoop(spec, hooks, env, inputs) {
           const finalAction = spec.parseAction(content(response));
           if (finalAction.action !== "finish") throw new ValidationError("forced final response was not finish");
           answer = trimSpace(String(finalAction.answer ?? ""));
+          const missing = missingPaths(answer, root);
+          if (missing.length > 0) answer += groundingNote(missing);
         } catch (error) {
           if (!isTransportError(error) && !isValidationError(error)) throw error;
           let diagnostic;
@@ -1489,7 +2031,9 @@ async function runLoop(spec, hooks, env, inputs) {
       }
     }
     if (!answer) answer = failure ?? "agent stopped without a final answer";
+    const report = spec.report ? await spec.report(session) : {};
     const result = {
+      ...report,
       final_answer: answer,
       tool_calls: calls,
       usage,
@@ -1525,14 +2069,540 @@ async function runLoop(spec, hooks, env, inputs) {
     observations.close();
   }
 }
+function withBriefing(prompt, spec, workspace) {
+  try {
+    const briefing = spec.briefing?.(workspace);
+    return briefing ? `${prompt}
 
-// src/research/prompts.ts
-var BASH_SYSTEM_PROMPT = 'You are a local code-research agent in a read-only workspace rooted at the current directory. Use raw POSIX shell commands without editors, special tools, or network access. Return exactly one JSON object per turn:\n\n{"action":"shell","command":"one shell command, e.g. grep -n \\"class Group\\" click/src/click/core.py"}\n{"action":"page","step":2,"page":2}\n{"action":"finish","answer":"concise final answer with repository-relative evidence"}\n\nThese are the complete action schemas. Use only `shell`, `page`, or `finish`; every shown field is\nrequired with the shown type. An invalid shape is rejected and costs one bounded repair turn.\n\nFull command output is stored in pages; you see page 1 and the total. Context fitting can shorten\nan observation in the conversation. Request its stored page to recover the evidence without\nre-running the command. Claim "not found" only after checking the relevant search scope and pages.\n\nThe shell is READ-ONLY and restricted. Available tools: ls, find, grep, rg, cat, head, tail, wc,\nsort, uniq, cut, tr, nl, sed (bounded read-only inline programs), jq, diff, xargs\n(only echo, printf, true, or false targets), tree, file, stat, and read-only git\n(log, show, grep, ls-files, diff, blame, status). There is no awk, python, network, output\nredirection, script-file loading, recursive symlink following, paths outside the workspace,\n$(...) substitution, $VARIABLES, or loops: write paths and patterns literally and\nchain tools with pipes, one pipeline per turn. A refused command costs a turn, so follow these\nrules. Be decisive: most tasks need 2-6 commands. Call finish as soon as the requested facts are\nestablished.\n\nSCOPE YOUR SEARCHES. A real workspace holds far more than its source, and an unscoped grep drowns\nthe answer in vendored and generated files. Always exclude them:\n  grep -rn "PATTERN" . --exclude-dir={node_modules,target,.venv,venv,dist,build,.git,vendor,__pycache__,.octocode,site-packages}\nFor implementation questions, prefer src/, packages/*/src/, lib/ and the repo root before fixtures,\nmocks, or examples. If the question targets tests or examples, inspect those files. Name the file\nthat supplies the answer.\nIf a search returns nothing, widen the pattern before concluding the thing does not exist: absence\nof a grep hit is weak evidence, and "not found" is only a real answer once you have looked in the\nsource directories.\nFor a production default, find its declaration before relying on test occurrences. Declarations look like\n`default=`, `unwrap_or(`, `const `, `static `, or a settings schema initializer.\nFor a test-specific default or fixture, inspect its test declaration.';
+${briefing}` : prompt;
+  } catch {
+    return prompt;
+  }
+}
+
+// ../rust-core/src/model_catalog.json
+var model_catalog_default = {
+  snapshot: "2026-11-01",
+  measured_on: "Apple M2 Pro, 32 GB, Ollama 0.40.13, with other work running",
+  how_to_read: "quality is measured (run here with known answers), published (the publisher's figure), or untested. memory_gb is what FreeLlama asks to have available, including its reserve; null means not previewed. Discovery never authorizes a pull: ask for one exact tag and its size first.",
+  jobs: [
+    { job: "classify", title: "Classify, triage, yes/no", call: 'run_task {task:"decision"}', cookbook: "cookbooks/classify", picks: [
+      { tag: "strands-decider:2b-nvfp4", role: "default", file_gb: 1.3, memory_gb: 3.8, quality: "measured", evidence: "53/56 in all 3 rounds, 7 ms median; published 182/231 JevBench" },
+      { tag: "nimble-v3:9b-q4_K_M", role: "alternative", file_gb: 5.6, memory_gb: 11.5, quality: "measured", evidence: "51/56 in all 3 rounds, 1.5 s median: no better here despite published 198/231 JevBench" }
+    ] },
+    { job: "find-code", title: "Find the code for an issue", call: 'run_task {task:"embedding", nearest:{query}}', cookbook: "cookbooks/find-code", picks: [
+      { tag: "embeddinggemma-2:740m-q8_0", role: "default", file_gb: 1.3, memory_gb: 1.4, quality: "measured", evidence: "right file first 9/10, top 3 9/10; 899 chunks indexed in 67 s" },
+      { tag: "nomic-embed-text:v1.5", role: "alternative", file_gb: 0.3, memory_gb: 1.4, quality: "measured", evidence: "right file first 6/10, top 3 8/10; faster, 881 chunks in 42 s" }
+    ] },
+    { job: "duplicates", title: "Find duplicates", call: 'run_task {task:"embedding", nearest:{}}', cookbook: "cookbooks/duplicates", picks: [
+      { tag: "nomic-embed-text:v1.5", role: "default", file_gb: 0.3, memory_gb: 1.4, quality: "measured", evidence: "8/12 real issue pairs" }
+    ] },
+    { job: "ocr", title: "Read text from an image", call: 'run_task {task:"vision", files:[path]}', cookbook: "cookbooks/ocr", picks: [
+      { tag: "hf.co/openbmb/MiniCPM-OCR-1.0-gguf:Q4_K_M", role: "default", file_gb: 1.4, memory_gb: 3.8, quality: "measured", evidence: "30/30 in all 3 rounds, 257 ms median, clean rendered text" },
+      { tag: "glm-ocr:latest", role: "alternative", file_gb: 2.2, memory_gb: 5.8, quality: "measured", evidence: "30/30 in all 3 rounds, 1,885 ms median" }
+    ] },
+    { job: "image-recognition", title: "Understand what an image shows", call: 'run_task {task:"vision", files:[path], prompt}', cookbook: "cookbooks/image-recognition", picks: [
+      { tag: "lfm3-vl:2b-q4_K_M", role: "default", file_gb: 1.5, memory_gb: 4.1, quality: "measured", evidence: "20/20 drawn images in all 3 rounds, 299 ms median" },
+      { tag: "lfm3-omni:2b-q4_K_M", role: "alternative", file_gb: 2, memory_gb: 5.5, quality: "measured", evidence: "18/20 in all 3 rounds, 269 ms median; also does audio" },
+      { tag: "bonsai-2:9b", role: "alternative", file_gb: 3.2, memory_gb: 10.3, quality: "measured", evidence: "17/20 in all 3 rounds, 1.4 s median" }
+    ] },
+    { job: "image-search", title: "Find an image by describing it", call: 'run_task {task:"embedding", files:[images], nearest:{query}}', cookbook: "cookbooks/image-search", picks: [
+      { tag: "embeddinggemma-2:740m-q8_0", role: "default", file_gb: 1.3, memory_gb: 1.4, quality: "measured", evidence: "5/5 on five drawn screens" }
+    ] },
+    { job: "speech-to-text", title: "Recording to text", call: 'audio {action:"transcribe", file}', cookbook: "cookbooks/speech-to-text", picks: [
+      { tag: "lfm3-audio:2b-q4_K_M", role: "default", file_gb: 1.7, memory_gb: 5.5, quality: "measured", evidence: "1.7% word error on generated speech, 276 ms median, translation worked" },
+      { tag: "lfm3-omni:2b-q4_K_M", role: "alternative", file_gb: 2, memory_gb: 5.5, quality: "measured", evidence: "1.7% word error, 280 ms median, translation worked, also does images" }
+    ] },
+    { job: "text-to-speech", title: "Text to speech", call: 'audio {action:"speak", text}', cookbook: "cookbooks/text-to-speech", picks: [
+      { tag: "phonon:en", role: "default", file_gb: 0.1, memory_gb: null, quality: "measured", evidence: "0.8-1.7% word error when transcribed back, 102 ms median: about 9x faster" },
+      { tag: "lfm3-audio:2b-q4_K_M", role: "alternative", file_gb: 1.7, memory_gb: 5.5, quality: "measured", evidence: "0% word error, 950 ms median; the judge is an LFM3 model and may favour it" },
+      { tag: "lfm3-omni:2b-q4_K_M", role: "alternative", file_gb: 2, memory_gb: 5.5, quality: "measured", evidence: "0% word error, 950 ms median; same judge caveat" }
+    ] },
+    { job: "coding", title: "Small coding tasks", call: 'run_task {task:"coding", files:[path]}', cookbook: "cookbooks/coding", picks: [
+      { tag: "lfm3:1.7b-q4_K_M", role: "default", file_gb: 1.1, memory_gb: 3.3, quality: "measured", evidence: "21, 20, 20 of 25 small questions, 579 ms median" },
+      { tag: "hf.co/nvidia/NVIDIA-Nemotron-3.5-Bolt-E4B-4GB:Q4_K_M", role: "stronger", file_gb: 6.2, memory_gb: 13.5, quality: "measured", evidence: "23, 22, 23 of 25, 267 ms median" },
+      { tag: "bonsai-2:9b", role: "alternative", file_gb: 3.2, memory_gb: 10.3, quality: "measured", evidence: "19, 19, 17 of 25, 475 ms median" },
+      { tag: "bonsai-2:27b", role: "stronger", file_gb: 8.3, memory_gb: 16.3, quality: "published", evidence: "publisher: SWE-bench Verified 60.8%, LiveCodeBench 90.1%; not measured here, never had 16.3 GB available" }
+    ] },
+    { job: "research-agent", title: "Research a repository", call: 'delegate_research {adapter:"octocode" or "github"}', cookbook: "cookbooks/research-agent", picks: [
+      { tag: "bonsai-2:9b", role: "default", file_gb: 3.2, memory_gb: 10.3, quality: "measured", evidence: "4, 5, 5 of 8 local and 3, 5, 5 of 6 GitHub over 3 rounds, 82 s median per question" },
+      { tag: "hf.co/nvidia/NVIDIA-Nemotron-3.5-Bolt-E4B-4GB:Q4_K_M", role: "stronger", file_gb: 6.2, memory_gb: 13.5, quality: "measured", evidence: "6/8 local and 5/6 GitHub in all 3 rounds, 96 s median per question" },
+      { tag: "lfm3:1.7b-q4_K_M", role: "small", file_gb: 1.1, memory_gb: 3.3, quality: "measured", evidence: "6, 5, 5 of 8 local but 1/6 GitHub, 20 s median per question" }
+    ] }
+  ]
+};
+
+// src/local-prompts.ts
+var catalog = model_catalog_default;
+function picksOf(job) {
+  return catalog.jobs.find((entry) => entry.job === job)?.picks.map((pick) => pick.tag) ?? [];
+}
+var cookbook = (name) => `docs/cookbooks/${name}.md`;
+var SOURCES = {
+  miniCpmOcr: ["https://huggingface.co/openbmb/MiniCPM-OCR-1.0", "https://huggingface.co/openbmb/MiniCPM-OCR-1.0-gguf"],
+  glmOcr: ["https://ollama.com/library/glm-ocr", "https://huggingface.co/zai-org/GLM-OCR"],
+  lfm3Vl: ["https://huggingface.co/LiquidAI/LFM3-VL-2B", "https://huggingface.co/LiquidAI/LFM3-VL-2B-GGUF", "https://ollama.com/library/lfm3-vl"],
+  lfm3Omni: ["https://huggingface.co/LiquidAI/LFM3-Omni-2B", "https://ollama.com/library/lfm3-omni"],
+  embeddingGemma: ["https://huggingface.co/google/embeddinggemma-2", "https://ai.google.dev/gemma/docs/embeddinggemma/inference-embeddinggemma-with-sentence-transformers"],
+  nomic: ["https://huggingface.co/nomic-ai/nomic-embed-text-v1.5"],
+  strandsDecider: ["https://ollama.com/library/strands-decider", "https://raw.githubusercontent.com/strands-labs/strands-decider/main/README.md"],
+  nimble: ["https://ollama.com/library/nimble-v3:latest"],
+  bonsai9b: ["https://huggingface.co/prism-ml/Ternary-Bonsai-2-9B-gguf", "https://ollama.com/library/bonsai-2:9b"],
+  bonsai27b: ["https://huggingface.co/prism-ml/Ternary-Bonsai-2-27B-gguf", "https://ollama.com/library/bonsai-2"],
+  lfm3: ["https://huggingface.co/LiquidAI/LFM3-1.7B", "https://ollama.com/library/lfm3"],
+  nemotronBolt: ["https://huggingface.co/nvidia/NVIDIA-Nemotron-3.5-Bolt-E4B-4GB"],
+  lfm3Audio: ["https://huggingface.co/LiquidAI/LFM3-Audio-2B", "https://ollama.com/library/lfm3-audio"],
+  qwen38: ["https://huggingface.co/Qwen/Qwen3.8-27B", "https://ollama.com/library/qwen3.8"],
+  qwen35: ["https://huggingface.co/Qwen/Qwen3.5-4B", "https://ollama.com/library/qwen3.5"],
+  phonon: ["https://ollama.com/library/phonon:en"]
+};
+var EMBEDDING_PREFIXES = {
+  embeddinggemma: {
+    query: "task: search result | query: ",
+    document: "title: none | text: ",
+    codeQuery: "task: code retrieval | query: ",
+    similarity: "task: sentence similarity | query: ",
+    clustering: "task: clustering | query: ",
+    classification: "task: classification | query: "
+  },
+  // A prefix is required; the card names clustering: for removing semantic duplicates.
+  "nomic-embed-text": { query: "search_query: ", document: "search_document: ", clustering: "clustering: ", classification: "classification: " }
+};
+var GEMMA = EMBEDDING_PREFIXES.embeddinggemma;
+var NOMIC = EMBEDDING_PREFIXES["nomic-embed-text"];
+var OCR_PROMPTS = { text: "Text Recognition:", table: "Table Recognition:", formula: "Formula Recognition:" };
+var OCR_TRAINED = ["minicpm-ocr", "glm-ocr"];
+var OCR_PLAIN = {
+  text: "Transcribe all text in the image exactly, line by line. Output only the text.",
+  table: "Transcribe the table in the image as a Markdown table. Output only the table."
+};
+var ocrPrompt = (kind, model) => {
+  const name = (model ?? "").toLowerCase().replace(/^(?:hf\.co|huggingface\.co)\/[^/]+\//, "");
+  return model === void 0 || OCR_TRAINED.some((family) => name.startsWith(family)) ? OCR_PROMPTS[kind] : OCR_PLAIN[kind];
+};
+var EDIT_FORMAT = `Return each change to an existing file as the file's path (copied from its "--- file:" line), then:
+<<<<<<< SEARCH
+exact current lines (5 to 30, unique in the file, indentation exact)
+=======
+replacement lines
+>>>>>>> REPLACE
+Copy SEARCH lines character for character; prefer several small blocks to one large one. For a new file, or one under 30 lines, give its path on one line and the whole file in one fenced block. If the file was not shown, give the code in one fenced block and say which file and function it belongs in.`;
+var NO_TOOLS = "You have no tools and cannot open files: everything you need is in this message. Answer in plain text.";
+var WORKFLOWS = {
+  "read-text": {
+    job: "ocr",
+    title: "Read all text in an image, exactly",
+    input: "files: the images",
+    prompt: (_request, model) => ocrPrompt("text", model)
+  },
+  "read-table": {
+    job: "ocr",
+    title: "Read a table in an image as Markdown",
+    input: "files: the images",
+    prompt: (_request, model) => ocrPrompt("table", model)
+  },
+  "read-fields": {
+    job: "ocr",
+    title: "Pull named fields from a receipt, invoice or form image as JSON",
+    input: "files: the images; prompt: the field names",
+    prompt: (request) => `Extract these fields from the image: ${request ?? "all labelled fields"}. Format the output as a JSON object with these keys, values exactly as printed; use "###" for a field the image does not show.`
+  },
+  "answer-image": {
+    job: "image-recognition",
+    title: "Answer a question about an image",
+    input: "files: the images; prompt: the question",
+    system: `Answer the question about the image.
+1. Find the part of the image the question is about.
+2. Read any text there exactly as printed.
+3. Answer with just the value or label, or one or two sentences.
+If the image does not show it, answer "not visible". Never guess at what is cut off.`
+  },
+  "describe-screen": {
+    job: "image-recognition",
+    title: "Describe a screenshot for a developer: text, errors, state",
+    input: "files: the screenshot; prompt: what to look for (optional)",
+    system: `You describe a software screenshot for a developer, in short bullets, in this order:
+- the app or page shown;
+- headings and main text, quoted exactly;
+- any error, warning or empty state, quoted exactly;
+- the state of the controls that matter (selected, disabled, filled in);
+- anything that looks broken or misaligned.
+Describe only what is visible.`
+  },
+  "change-code": {
+    job: "coding",
+    title: "Make one small code change",
+    input: "files: the file to change; prompt: the change",
+    system: `${NO_TOOLS}
+You make one small code change.
+1. Find where the change belongs in the code shown.
+2. Follow the file's existing names, style and error handling.
+3. Change as few lines as the task needs; touch nothing else.
+${EDIT_FORMAT}
+Explain nothing unless asked. If the task is a question, answer it in a few lines.`
+  },
+  "fix-bug": {
+    prefer: "capable",
+    job: "coding",
+    title: "Fix a bug with the smallest change",
+    input: "files: the suspect code; prompt: the error message or symptom",
+    system: `${NO_TOOLS}
+You fix one bug with the smallest change.
+1. Read the error or symptom, then the code shown.
+2. Name the cause in one sentence, quoting the line that causes it.
+3. Change only what the fix needs.
+Answer with the cause line, then the edits.
+${EDIT_FORMAT}
+If the code shown cannot cause the symptom, say so and name the file or function to look at instead.`
+  },
+  implement: {
+    prefer: "capable",
+    job: "coding",
+    title: "Add a small feature to existing code",
+    input: "files: the code; prompt: the feature",
+    system: `${NO_TOOLS}
+You add one small feature to the code shown.
+1. Find the function or place it belongs; reuse helpers the file already has.
+2. Follow the file's names, style and error handling.
+3. Handle the empty and error cases the feature can meet.
+${EDIT_FORMAT}
+End with one line: what to test.`
+  },
+  "write-tests": {
+    prefer: "capable",
+    job: "coding",
+    title: "Write unit tests for the code shown",
+    input: "files: the code (and an existing test, for style); prompt: what to cover (optional)",
+    system: `${NO_TOOLS}
+You write unit tests for the code shown; you never change that code.
+1. List the behaviours: the normal case, edge cases (empty, zero, missing, boundary) and one failure case.
+2. Use the test framework and import style the project already uses; copy them from the files shown.
+3. Write one small test per behaviour, named after it, with literal expected values.
+Answer with the test file's path on one line, then the whole file in one fenced block.`
+  },
+  "review-code": {
+    prefer: "capable",
+    job: "coding",
+    title: "Find real defects in code (not style)",
+    input: "files: the code; prompt: what to focus on (optional)",
+    system: `${NO_TOOLS}
+You review the code shown for real defects only: wrong logic, unhandled errors, off-by-one, null or undefined access, leaks, injection, races. Ignore style and naming.
+For each defect write one line: path:line - the problem - the fix.
+Report at most 5, the surest first. If you find none, answer "no defects found". Never invent a line you did not see.`
+  },
+  "explain-code": {
+    job: "coding",
+    title: "Explain code to someone about to change it",
+    input: "files: the code; prompt: what to explain (optional)",
+    system: `${NO_TOOLS}
+Explain the code shown to a developer who is about to change it, in at most 6 bullets:
+what it does (one sentence); its inputs and outputs; side effects (files, network, shared state); what calls it, if visible; the one thing most likely to break when it changes.
+Name functions and variables exactly.`
+  },
+  "summarize-log": {
+    think: false,
+    prefer: "capable",
+    job: "summarize",
+    title: "Summarize a log: errors grouped, counted, first failure",
+    input: "files: the log; prompt: what you are investigating (optional)",
+    system: `${NO_TOOLS}
+You read a log for a developer. Report:
+1. Errors and warnings, grouped by message, each with its count and first and last timestamp.
+2. The first error in time order, quoted exactly.
+3. The likely cause, only if the log shows it.
+Quote messages exactly, skip routine lines, at most 10 bullets.`
+  },
+  "summarize-text": {
+    think: false,
+    job: "summarize",
+    title: "Summarize text for someone who will act on it",
+    input: "files: the text; prompt: what you need from it (optional)",
+    system: `${NO_TOOLS}
+Summarize the text for someone who will act on it, in short bullets: the decisions, the numbers, the deadlines and the open questions, plus whatever the request asks for.
+Quote numbers, names, versions and paths exactly. Write "not stated" when the text does not say; never guess. No introduction or closing.`
+  },
+  "summarize-diff": {
+    think: false,
+    prefer: "capable",
+    job: "summarize",
+    title: "Summarize a diff for a reviewer: changes and risks",
+    input: "files: the diff or patch",
+    system: `${NO_TOOLS}
+You summarize a code diff for a reviewer, in at most 8 bullets:
+one line per file on what changed; any change in behaviour; risks such as a removed check, a changed default, a new dependency or a missing test.
+Name files, functions and settings exactly.`
+  },
+  "extract-json": {
+    think: false,
+    job: "summarize",
+    title: "Extract named fields from text into JSON",
+    input: "files: the text; prompt: the field names (or a JSON schema)",
+    system: `${NO_TOOLS}
+Extract the fields the request names from the text into one JSON object.
+Use the values exactly as written in the text; use null for a field the text does not give; never invent a value.
+Output only the JSON object.`,
+    format: "json"
+  }
+};
+var WORKFLOW_NAMES = Object.keys(WORKFLOWS);
+var BONSAI_9B = {
+  think: false,
+  options: { temperature: 0.7, top_p: 0.8, top_k: 20, min_p: 0, presence_penalty: 1.5, repeat_penalty: 1 },
+  notes: "With think:true use the card's thinking preset (temperature 1.0, top_p 0.95, presence_penalty 1.0) and allow at least 8,192 output tokens; never greedy decoding with thinking on.",
+  sources: SOURCES.bonsai9b
+};
+var qwenNonThinking = (sources) => ({
+  think: false,
+  options: { temperature: 0.7, top_p: 0.8, top_k: 20, min_p: 0, presence_penalty: 1.5, repeat_penalty: 1 },
+  notes: "Thinks by default; with think:true use the card's thinking preset (temperature 1.0, top_p 0.95, top_k 20; Qwen3.8 presence_penalty 0, Qwen3.5 1.5, or 0 with temperature 0.6 for precise coding) and a large output budget (Qwen3.5 32,768 tokens). Raise presence_penalty (up to 2) if it repeats.",
+  sources
+});
+var CHAT_MODELS = {
+  lfm3: {
+    options: { temperature: 0.1, top_k: 50, repeat_penalty: 1.1 },
+    notes: "Thinks by default; its card calls thinking off inconsistent, so it stays on. Not for agentic coding or multi-step reasoning.",
+    sources: SOURCES.lfm3
+  },
+  "nvidia-nemotron-3.5-bolt": {
+    options: { temperature: 1, top_p: 0.95 },
+    // `ollama show` of the hf.co Q4_K_M tag, 2026-11-08: no thinking capability, and the template
+    // defaults enable_thinking to false.
+    notes: "The card says it reasons by default, but its GGUF template turns thinking off and Ollama reports no thinking capability, so it answers directly; think:true is refused.",
+    sources: SOURCES.nemotronBolt
+  },
+  "bonsai-2": BONSAI_9B,
+  // The card documents the same instruct (non-thinking) preset as the 9B; Ollama lists think
+  // values false, low, medium and xhigh for this tag.
+  "bonsai-2:27b": {
+    ...BONSAI_9B,
+    notes: "With think:true (or low, medium, xhigh) use the card's thinking preset (temperature 1.0, top_p 0.95, top_k 20, min_p 0.05, presence_penalty 0) and allow about 16,384 output tokens.",
+    sources: SOURCES.bonsai27b
+  },
+  "qwen3.8": qwenNonThinking(SOURCES.qwen38),
+  "qwen3.5": qwenNonThinking(SOURCES.qwen35)
+};
+var CHAT_SOURCES = [...SOURCES.lfm3, ...SOURCES.nemotronBolt, ...SOURCES.bonsai9b, ...SOURCES.bonsai27b, ...SOURCES.qwen38, ...SOURCES.qwen35];
+var LOCAL_JOBS = {
+  classify: {
+    job: "classify",
+    task: "decision",
+    catalogJob: "classify",
+    defaultPicks: picksOf("classify"),
+    models: {
+      "strands-decider": { notes: "State and questions together must fit 4,096 tokens; weak on long, multi-step documents. Its README: answers at confidence 0.9 or more are right about 95% of the time; confirm the rest.", sources: SOURCES.strandsDecider },
+      "nimble-v3": { notes: "Documents num_ctx 32768 (routing sizes it here); CC BY-NC 4.0, noncommercial.", sources: SOURCES.nimble }
+    },
+    notes: "A decision model reads state and questions, no prompt. Ask short questions about the state, one concern each, and give a choice question an explicit fallback option such as other.",
+    sources: [...SOURCES.strandsDecider, ...SOURCES.nimble, cookbook("classify")]
+  },
+  "find-code": {
+    job: "find-code",
+    task: "embedding",
+    catalogJob: "find-code",
+    defaultPicks: picksOf("find-code"),
+    needs: "nearest.query: the issue, or what the code does",
+    prefixes: { embeddinggemma: { query: GEMMA.codeQuery, document: GEMMA.document }, "nomic-embed-text": { query: NOMIC.query, document: NOMIC.document } },
+    // Measured 2026-11-08 on the find-code set (10 questions, 1,039 chunks): code retrieval with
+    // title: none 8 first / 9 in top 3; search result 8/8; code retrieval with the file as title 7/9.
+    notes: "task: code retrieval (EmbeddingGemma's code-search prefix) measured best here: right file first 8/10, in the top 3 9/10. Read the top ranges before relying on them.",
+    sources: [...SOURCES.embeddingGemma, ...SOURCES.nomic, cookbook("find-code")]
+  },
+  duplicates: {
+    job: "duplicates",
+    task: "embedding",
+    catalogJob: "duplicates",
+    defaultPicks: picksOf("duplicates"),
+    // Symmetric: every item, the query included, takes the same prefix.
+    prefixes: {
+      // The measured 8/12 used search_document:; the card's clustering: is documented but unmeasured here.
+      "nomic-embed-text": { query: NOMIC.document, document: NOMIC.document },
+      embeddinggemma: { query: GEMMA.similarity, document: GEMMA.similarity }
+    },
+    notes: "Uses the measured search_document: (8/12 real issue pairs); nomic's card also documents clustering: for deduplication, unmeasured here. A high score is a candidate, never a verdict.",
+    sources: [...SOURCES.nomic, ...SOURCES.embeddingGemma, cookbook("duplicates")]
+  },
+  ocr: {
+    job: "ocr",
+    task: "vision",
+    catalogJob: "ocr",
+    defaultPicks: picksOf("ocr"),
+    prompt: ({ model }) => ocrPrompt("text", model),
+    // Both publishers' Ollama Modelfiles set temperature 0; the hf.co MiniCPM tag ships no parameters.
+    models: {
+      "minicpm-ocr": {
+        options: { temperature: 0 },
+        notes: "Chinese and English; tables come back as HTML. Its Modelfile sets num_ctx 8192.",
+        sources: [...SOURCES.miniCpmOcr, "https://raw.githubusercontent.com/OpenBMB/MiniCPM-OCR/main/docs/ollama_deploy.md"]
+      },
+      "glm-ocr": {
+        options: { temperature: 0 },
+        notes: "Also documents Figure Recognition:.",
+        sources: [...SOURCES.glmOcr, "https://github.com/zai-org/GLM-OCR/blob/main/examples/ollama-deploy/README.md"]
+      }
+    },
+    notes: "The OCR picks were trained on Text Recognition:, Table Recognition: and Formula Recognition:; a general vision model gets the same request in plain words. Crop to the text first.",
+    sources: [...SOURCES.miniCpmOcr, ...SOURCES.glmOcr, cookbook("ocr")]
+  },
+  "image-recognition": {
+    job: "image-recognition",
+    task: "vision",
+    catalogJob: "image-recognition",
+    defaultPicks: picksOf("image-recognition"),
+    needs: "prompt: your question about the image",
+    systemPrompt: WORKFLOWS["answer-image"].system,
+    models: {
+      "lfm3-vl": {
+        options: { temperature: 0.1, top_p: 1, top_k: 50, min_p: 0, repeat_penalty: 1.1 },
+        notes: "Thinks before it answers by default (Ollama lists think values true and false; off is unmeasured here); images go in at native resolution, so a large one costs many tokens.",
+        sources: SOURCES.lfm3Vl
+      },
+      "lfm3-omni": {
+        systemPrompt: "Answer questions about the provided image. Base every answer only on what can be seen.",
+        options: { temperature: 0 },
+        notes: "Non-reasoning: never send think:true. Up to 2,048 tokens per image. The card gives 32K context; the Ollama tag advertises 128K.",
+        sources: SOURCES.lfm3Omni
+      },
+      "bonsai-2": BONSAI_9B,
+      "qwen3.8": qwenNonThinking(SOURCES.qwen38),
+      "qwen3.5": qwenNonThinking(SOURCES.qwen35)
+    },
+    notes: 'Ask a specific question, not "describe this". Tested on drawn images only.',
+    sources: [...SOURCES.lfm3Vl, ...SOURCES.lfm3Omni, ...SOURCES.bonsai9b, cookbook("image-recognition")]
+  },
+  "image-search": {
+    job: "image-search",
+    task: "embedding",
+    catalogJob: "image-search",
+    defaultPicks: picksOf("image-search"),
+    needs: "nearest.query: a description of the image",
+    prefixes: { embeddinggemma: { query: GEMMA.query, document: GEMMA.document } },
+    notes: "Images are embedded bare: the prefixes apply to text only. Open the top match.",
+    sources: [...SOURCES.embeddingGemma, cookbook("image-search")]
+  },
+  coding: {
+    job: "coding",
+    task: "coding",
+    catalogJob: "coding",
+    defaultPicks: picksOf("coding"),
+    needs: "prompt: the change to make",
+    systemPrompt: WORKFLOWS["change-code"].system,
+    models: CHAT_MODELS,
+    notes: "The answer is SEARCH/REPLACE blocks: apply one only where its SEARCH text matches exactly once, then run the tests.",
+    sources: [...CHAT_SOURCES, cookbook("coding")]
+  },
+  summarize: {
+    job: "summarize",
+    task: "completion",
+    catalogJob: "coding",
+    defaultPicks: picksOf("coding"),
+    prompt: () => "Summarize the text below.",
+    systemPrompt: WORKFLOWS["summarize-text"].system,
+    models: CHAT_MODELS,
+    notes: "The coding picks: the same chat models apply (docs/cookbooks/batch-text.md). Check every number and name you reuse.",
+    sources: [...CHAT_SOURCES, cookbook("batch-text")]
+  }
+};
+var TOOL_JOBS = {
+  "speech-to-text": {
+    tool: "audio",
+    defaultPicks: picksOf("speech-to-text"),
+    // The audio tool calls Ollama's transcription endpoint, which builds the model's prompt; these
+    // are lfm3-audio's documented prompts for a direct chat call.
+    systemPrompts: {
+      transcribe: (language) => language ? `Perform ASR in ${language}.` : "Perform ASR.",
+      translate: (source, target) => `Translate the following speech from ${source} to ${target} in text form.`
+    },
+    notes: "WAV input only. Numbers and names are the usual misses; translation works best to or from English.",
+    sources: [...SOURCES.lfm3Audio, cookbook("speech-to-text")]
+  },
+  "text-to-speech": {
+    tool: "audio",
+    defaultPicks: picksOf("text-to-speech"),
+    notes: "Send plain text: Markdown marks may be read aloud. One voice (default); 24 kHz mono WAV.",
+    sources: [...SOURCES.phonon, cookbook("text-to-speech")]
+  },
+  "research-agent": {
+    tool: "delegate_research",
+    defaultPicks: picksOf("research-agent"),
+    notes: "The adapters' system prompts are below. Discard an escalate verdict and verify the citations.",
+    sources: [cookbook("research-agent")]
+  },
+  sweep: {
+    tool: "sweep",
+    defaultPicks: picksOf("classify"),
+    /** The decision state of one chunk, and the explain step's user message for a confirmed flag. */
+    state: (label, text) => `Source: ${label}
+
+${text}`,
+    explain: (prompt, label, text) => `${prompt}
+
+Source: ${label}
+
+${text}`,
+    // FreeLlama's own setting for the short explain note, not a model's documented value.
+    explainControls: { think: false, temperature: 0 },
+    notes: 'One yes/no question per concern, phrased about one chunk ("Does this code ..."); a noul answer flags at p >= 0.5.',
+    sources: [cookbook("sweep")]
+  }
+};
+var BASH_SYSTEM_PROMPT = `You answer questions about the code in this read-only workspace (the current directory) by looking, not guessing. Reply with exactly one JSON object per turn and nothing else.
+
+Actions, in order of preference:
+{"action":"search","pattern":"EMBEDDINGS_PER_JOB"} finds text in files and prints path:line:text. Literal and case-sensitive; add "regex":true for a|b or \\s, "ignoreCase":true, "glob":"*.rs", or "path":"packages/mcp" to narrow it.
+{"action":"read","path":"packages/mcp/src/tools/run-task.ts","start":310,"end":340} shows numbered lines of one file.
+{"action":"list","path":"packages"} shows files and folders two levels deep.
+{"action":"shell","command":"rg -n -w build_decision_request -g '*.rs'"} runs one read-only pipeline when the actions above cannot. Use rg (rg -n PATTERN PATH; -w whole word, -l file names only, -t rust or -t ts, -g '!tests/') or grep -rn PATTERN PATH --exclude-dir=node_modules, plus find, head, sed -n '10,40p' FILE, wc and git log/show/grep/blame. No network, redirection, $(...), variables or loops.
+{"action":"page","step":2,"page":2} shows the next page of a long earlier result.
+{"action":"finish","answer":"32. Source: packages/mcp/src/tools/run-task.ts:322"} ends the task.
+
+How to research:
+1. Search for the exact name in the question (a function, constant, type, flag or error text). A path in the question may be partial; search finds the real one.
+2. Read the lines around the best hit to confirm it.
+3. Finish once the answer is confirmed, usually after 2 to 4 actions. Never repeat an action: its result is already above.
+Keep every result small: search before reading, read 30 to 80 lines around a hit rather than a whole file, use rg -l or rg -c to see where matches are before printing them, and end long shell output with | head -n 40 or | tail -n 40.
+For "which files call X", search "X(" and list every file except the one that defines X. For "is there an X", a search with no matches over the whole workspace means no.
+
+Answer format: the direct answer first (the value, name, list or yes/no the question asks for), then "Source: path:line" for each file it comes from, copied from the tool output. Answer "not found" only after a search of the whole workspace returned no matches.`;
+var CODER_SYSTEM_PROMPT = [
+  "You change code in an isolated copy of the user's project (the current directory) and test the change. The user's own files are never touched: they review your diff afterwards. Reply with exactly one JSON object per turn and nothing else.",
+  "",
+  "Actions, in order of preference:",
+  '{"action":"search","pattern":"parsePort"} finds text in files and prints path:line:text. Literal and case-sensitive; add "regex":true, "ignoreCase":true, "glob":"*.ts" or "path":"src" to narrow it.',
+  '{"action":"read","path":"src/config.ts","start":40,"end":70} shows numbered lines of one file.',
+  '{"action":"edit","path":"src/config.ts","search":"  const port = 8080;\\n  return port;","replace":"  const port = Number(env.PORT ?? 8080);\\n  return port;"} replaces text that occurs exactly once in the file. Copy "search" from the read output without the line numbers and with its exact indentation: 5 to 30 lines, enough to be unique.',
+  '{"action":"write","path":"src/limits.ts","content":"export const MAX = 10;\\n"} creates a file, or replaces a whole small file.',
+  '{"action":"run","command":"yarn test"} runs one of the allowed commands listed with the task, exactly as written there, and shows its exit code and output.',
+  '{"action":"list","path":"src"} shows files and folders two levels deep.',
+  '{"action":"shell","command":"git diff --stat"} runs one read-only pipeline (rg, grep, find, head, sed -n, wc, git log/diff/show). It cannot change files; edit and write do.',
+  '{"action":"page","step":2,"page":2} shows the next page of a long earlier result.',
+  '{"action":"finish","answer":"Changed src/config.ts to read PORT from the environment, because the port was fixed. Test: yarn test passed."} ends the task.',
+  "",
+  "How to work:",
+  "1. Search for the names in the task, then read the lines you will change.",
+  "2. Edit with a search block copied exactly from the read output. If an edit fails, read those lines again and copy them; never guess.",
+  "3. Run an allowed command to test the change. If it fails, read the error, fix the code and run it again.",
+  "4. Finish with what changed, why, and the last test result. With no allowed command, say the change is untested.",
+  "Keep results small: read line ranges, not whole files, and end long shell output with | head -n 40."
+].join("\n");
+var APPLY_EDITS = "Apply the edits yourself: for each block, check that its SEARCH text occurs exactly once in the named file, indentation included; replace it with the REPLACE text; skip a block that matches zero or several times. A path followed by one fenced block is a whole new file. Then run the tests: the edits are a small model's candidates.";
+var AGENT_GUIDE = `Use FreeLlama to run bounded work on local models and keep it out of your context.
+
+Offload when the answer is cheap to check and the work is 10 or more similar items, or an input over about 2,000 tokens you would otherwise read whole. Do it yourself: judgment you must stand behind, edits across files, one short item.
+
+Name a workflow and run_task does the rest: it picks the first catalog model for the job that is installed and fits now and gives it step-by-step instructions for the task. Workflows: read-text, read-table, read-fields (images); answer-image, describe-screen; change-code, fix-bug, implement, write-tests, review-code, explain-code; summarize-log, summarize-text, summarize-diff, extract-json. For labels, code search and duplicates use job classify, find-code or duplicates. Any field you pass wins; job_profile says what was filled in. Name inputs with files; for one answer per file send tasks:[{id, independent:true, task:{files:[path]}}] with job at the top level. For a whole code tree, log or site use sweep; for a question about a repository, delegate_research.
+
+Verify: local answers are candidates. Each run_task result ends with check: lines worked out from it (uncertain answers, close matches, facts not in the source, edits that do not match the file); act on those first, and discard a research result whose verification.recommendation is "escalate".
+
+Coding: the answer is SEARCH/REPLACE blocks. ${APPLY_EDITS}
+
+Hand a result on: saveAs:"<name>" writes the answer to handoffs/<name>.md and returns handoff_file; a later run_task reads it with files:[handoff_file].
+
+Approval: pull a model only after the user approves one exact tag and its size (ollama_pull approvedSizeBytes). Unload only a model you warmed or the user named; delete only a tag the user names. A memory refusal names what holds memory: tell the user and never stop their processes.`;
 
 // src/research/sandbox.ts
-import { accessSync, constants as fsConstants, mkdirSync as mkdirSync3, mkdtempSync as mkdtempSync2, realpathSync, rmSync as rmSync2, symlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { accessSync, constants as fsConstants, existsSync as existsSync4, mkdirSync as mkdirSync3, mkdtempSync as mkdtempSync2, realpathSync, rmSync as rmSync2, symlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import path4 from "node:path";
+import path6 from "node:path";
 
 // src/research/proc.ts
 import { spawn, spawnSync } from "node:child_process";
@@ -1830,6 +2900,9 @@ var POSIX_WORDCHARS = "\xDF\xE0\xE1\xE2\xE3\xE4\xE5\xE6\xE7\xE8\xE9\xEA\xEB\xEC\
 function within2(char, set) {
   return set.includes(char);
 }
+function shlexTokens(text, options) {
+  return [...shlexIter(text, options)];
+}
 function* shlexIter(text, options) {
   const posix = options.posix;
   const punctuation = options.punctuationChars ?? "";
@@ -2116,10 +3189,43 @@ function assertCommandConfined(root, commandText) {
 }
 var OPERATOR_CHARS = new Set(";&|()<>");
 var SEPARATORS = /* @__PURE__ */ new Set(["|", "||", "&&", ";"]);
+var LITERAL_OPEN = "\uE000";
+var LITERAL_CLOSE = "\uE001";
+function protectLiteralParens(commandText) {
+  let out = "";
+  let quote;
+  for (let index = 0; index < commandText.length; index++) {
+    const char = commandText[index];
+    if (quote === void 0 && char === "\\" && (commandText[index + 1] === "(" || commandText[index + 1] === ")")) {
+      out += commandText[index + 1] === "(" ? LITERAL_OPEN : LITERAL_CLOSE;
+      index += 1;
+      continue;
+    }
+    if (quote === void 0 && char === "\\") {
+      out += char + (commandText[index + 1] ?? "");
+      index += 1;
+      continue;
+    }
+    if (quote === void 0 && (char === "'" || char === '"')) quote = char;
+    else if (quote === char) quote = void 0;
+    else if (quote !== void 0 && (char === "(" || char === ")")) {
+      out += char === "(" ? LITERAL_OPEN : LITERAL_CLOSE;
+      continue;
+    }
+    out += char;
+  }
+  return out;
+}
+var restoreParens = (token) => token.replaceAll(LITERAL_OPEN, "(").replaceAll(LITERAL_CLOSE, ")");
 function segments(commandText) {
-  const tokens = shlexIter(commandText, { posix: true, punctuationChars: ";&|()<>", whitespaceSplit: true, commenters: "" });
+  const tokens = [...shlexIter(protectLiteralParens(commandText), { posix: true, punctuationChars: ";&|()<>", whitespaceSplit: true, commenters: "" })];
   const result = [[]];
-  for (const token of tokens) {
+  for (const raw of tokens) {
+    if (raw.includes(LITERAL_OPEN) || raw.includes(LITERAL_CLOSE)) {
+      result[result.length - 1].push(restoreParens(raw));
+      continue;
+    }
+    const token = raw;
     if (SEPARATORS.has(token)) {
       result.push([]);
     } else if (token && [...token].every((char) => OPERATOR_CHARS.has(char))) {
@@ -2175,7 +3281,7 @@ function checkTool(words) {
     }
     const target = xargsCommand(args);
     if (!["echo", "printf", "true", "false"].includes(target[0])) {
-      throw new ValidationError("command blocked: xargs filesystem arguments cannot be confined");
+      throw new ValidationError(`command blocked: xargs can only feed echo/printf here (its file arguments cannot be confined). Search file contents directly instead: grep -rln --include='*.ts' "PATTERN" .  or  rg -l "PATTERN"`);
     }
     checkTool(target);
   }
@@ -2239,15 +3345,16 @@ function validateCommand(root, commandTextInput) {
 }
 
 // src/research/sandbox.ts
-function macosProfile(workspace, scratch) {
+function macosProfile(workspace, scratch, readPaths = []) {
   const quote = (value) => `"${value.replaceAll("\\", "\\\\").replaceAll('"', '\\"')}"`;
+  const extra = readPaths.map((dir) => ` (subpath ${quote(dir)})`).join("");
   return `(version 1)
 (allow default)
 (deny network*)
 (deny file-write*)
 (allow file-write* (literal "/dev/null") (literal "/dev/tty") (literal "/dev/dtracehelper") (subpath ${quote(scratch)}))
 (deny file-read-data (subpath "/Users") (subpath "/Volumes") (subpath "/private/var/root"))
-(allow file-read-data (subpath ${quote(workspace)}) (subpath ${quote(scratch)}))
+(allow file-read-data (subpath ${quote(workspace)}) (subpath ${quote(scratch)})${extra})
 `;
 }
 function which(name, envPath = process.env.PATH) {
@@ -2275,18 +3382,21 @@ var ReadOnlyShell = class {
   env = {};
   bash = "/bin/bash";
   scratch = null;
-  constructor(workspace) {
+  /** Directories outside the workspace the shell may also read, such as a worktree's git directory. */
+  readPaths;
+  constructor(workspace, options = {}) {
     this.workspace = workspace;
+    this.readPaths = options.readPaths ?? [];
   }
   enter() {
     this.workspace = resolvePath(this.workspace);
-    const scratch = mkdtempSync2(path4.join(path4.resolve(tmpdir2()), "freellama-shell-"));
+    const scratch = mkdtempSync2(path6.join(path6.resolve(tmpdir2()), "freellama-shell-"));
     this.scratch = scratch;
-    const binDir = path4.join(scratch, "bin");
+    const binDir = path6.join(scratch, "bin");
     mkdirSync3(binDir);
     for (const tool of READ_ONLY_TOOLS) {
       const located = which(tool);
-      if (located) symlinkSync(realpathSync(located), path4.join(binDir, tool));
+      if (located) symlinkSync(realpathSync(located), path6.join(binDir, tool));
     }
     this.bash = which("bash") ?? "/bin/bash";
     const env = {};
@@ -2320,8 +3430,8 @@ var ReadOnlyShell = class {
     if ((process.env.FREELLAMA_AGENT_OS_SANDBOX ?? "auto") === "off") return [];
     const sandboxExec = which("sandbox-exec");
     if (sandboxExec) {
-      const profile = path4.join(scratch, "profile.sb");
-      writeFileSync2(profile, macosProfile(this.workspace, scratch), "utf8");
+      const profile = path6.join(scratch, "profile.sb");
+      writeFileSync2(profile, macosProfile(this.workspace, scratch, this.readPaths), "utf8");
       const prefix = [sandboxExec, "-f", profile];
       if (probe2([...prefix, this.bash, "-c", "true"], this.env)) {
         this.kind = "sandbox-exec+restricted-bash";
@@ -2338,6 +3448,7 @@ var ReadOnlyShell = class {
         "--ro-bind",
         this.workspace,
         this.workspace,
+        ...this.readPaths.flatMap((dir) => ["--ro-bind", dir, dir]),
         "--ro-bind",
         binDir,
         binDir,
@@ -2355,18 +3466,324 @@ var ReadOnlyShell = class {
     }
     return [];
   }
+  /**
+   * Run one read-only tool with an argument vector, no shell: the structured `search` action uses
+   * it so a pattern such as `${x}` or `(` is data, never shell syntax. Same OS sandbox, PATH and
+   * scrubbed environment as `run`; exit 1 of a search means no matches.
+   */
+  /** Whether `tool` was found on the caller's PATH when the shell was entered. */
+  hasTool(tool) {
+    return this.scratch !== null && existsSync4(path6.join(this.scratch, "bin", tool));
+  }
+  async runTool(argv, timeoutSeconds) {
+    const [tool, ...args] = argv;
+    if (!tool || !READ_ONLY_TOOLS.includes(tool) || this.scratch === null) {
+      throw new ValidationError(`tool ${tool ?? "(none)"} is not available to structured actions`);
+    }
+    const result = await runProcess(
+      [...this.prefix, path6.join(this.scratch, "bin", tool), ...args],
+      { cwd: this.workspace, env: this.env, timeoutSeconds }
+    );
+    if (result.returncode === 1 && !trimSpace(result.stderr)) return "(no matches)";
+    if (result.returncode !== 0) throw new ToolExitError(result.returncode, result.stdout + result.stderr);
+    return trimSpace(result.stdout) ? result.stdout : "(no matches)";
+  }
   async run(commandText, timeoutSeconds) {
     const command = validateCommand(this.workspace, commandText);
+    const tokens = shlexTokens(command, { posix: true, punctuationChars: ";&|()<>", whitespaceSplit: true, commenters: "" });
+    if (tokens.some((token) => token === ";" || token === "&&" || token === "||")) {
+      throw new ValidationError("command blocked: send one pipeline per turn so each execution outcome can be recorded");
+    }
     const result = await runProcess(
-      [...this.prefix, this.bash, "--restricted", "--noprofile", "--norc", "-c", command],
+      [...this.prefix, this.bash, "--restricted", "--noprofile", "--norc", "-o", "pipefail", "-c", command],
       { cwd: this.workspace, env: this.env, timeoutSeconds }
     );
     let output = result.stdout + result.stderr;
+    if (result.returncode !== 0) {
+      const parts = segments(command);
+      const words = parts.length === 1 ? parts[0] : [];
+      const isSearch = ["rg", "grep", "egrep", "fgrep"].includes(words[0] ?? "") || words[0] === "git" && words[1] === "grep";
+      const isDiff = words[0] === "diff" || words[0] === "git" && words[1] === "diff";
+      if (result.returncode === 1 && isSearch && !trimSpace(result.stderr)) {
+        throw new ToolExitError(result.returncode, output, "empty");
+      }
+      if (!(result.returncode === 1 && isDiff && !trimSpace(result.stderr))) {
+        throw new ToolExitError(result.returncode, output);
+      }
+    }
     if (!trimSpace(output)) output = `(no output, exit code ${result.returncode})`;
     return output;
   }
 };
 
+// src/research/workspace-overview.ts
+import { readdirSync as readdirSync3 } from "node:fs";
+import path7 from "node:path";
+var SKIP = /* @__PURE__ */ new Set(["node_modules", "target", ".git", "dist", "build", ".venv", "venv", "vendor", "__pycache__", ".octocode", "site-packages", "coverage"]);
+var MAX_ENTRIES = 2e4;
+var MAX_DEPTH = 8;
+var SOURCE_DIRS = /* @__PURE__ */ new Set(["src", "lib", "app", "source", "pkg", "cmd", "internal", "crates"]);
+function workspaceOverview(root) {
+  let top;
+  try {
+    top = readdirSync3(root, { withFileTypes: true });
+  } catch {
+    return "";
+  }
+  const extensions = /* @__PURE__ */ new Map();
+  const sourceRoots = /* @__PURE__ */ new Map();
+  let files = 0;
+  let seen = 0;
+  const walk = (dir, depth, sourceRoot) => {
+    if (depth > MAX_DEPTH || seen > MAX_ENTRIES) return;
+    let entries;
+    try {
+      entries = readdirSync3(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (++seen > MAX_ENTRIES) return;
+      if (entry.isDirectory()) {
+        if (SKIP.has(entry.name) || entry.name.startsWith(".")) continue;
+        const child = path7.join(dir, entry.name);
+        walk(child, depth + 1, sourceRoot ?? (SOURCE_DIRS.has(entry.name) ? path7.relative(root, child) : void 0));
+      } else if (entry.isFile()) {
+        files += 1;
+        const extension = path7.extname(entry.name).toLowerCase() || "(none)";
+        extensions.set(extension, (extensions.get(extension) ?? 0) + 1);
+        if (sourceRoot) sourceRoots.set(sourceRoot, (sourceRoots.get(sourceRoot) ?? 0) + 1);
+      }
+    }
+  };
+  walk(root, 0);
+  const listing = top.filter((entry) => !SKIP.has(entry.name) && !entry.name.startsWith(".")).sort((left, right) => Number(right.isDirectory()) - Number(left.isDirectory()) || left.name.localeCompare(right.name)).slice(0, 25).map((entry) => entry.isDirectory() ? `${entry.name}/` : entry.name);
+  const types = [...extensions.entries()].sort((left, right) => right[1] - left[1]).slice(0, 8).map(([extension, count]) => `${extension} ${count}`);
+  const sources = [...sourceRoots.entries()].sort((left, right) => right[1] - left[1]).slice(0, 8).map(([dir, count]) => `${dir}/ (${count})`);
+  return `Workspace overview (generated, not a search result): top level: ${listing.join(", ") || "(empty)"}${top.length > 25 ? ", \u2026" : ""}. ${files}${seen > MAX_ENTRIES ? "+" : ""} files; most common types: ${types.join(", ") || "none"}. ` + (sources.length > 0 ? `Source folders: ${sources.join(", ")}. Paths are relative to the workspace root. ` : "") + "Search the file types that exist here, and search contents before concluding something is absent.";
+}
+
+// src/research/structured-actions.ts
+import { existsSync as existsSync5, readdirSync as readdirSync4, readFileSync as readFileSync6, realpathSync as realpathSync2, statSync as statSync2 } from "node:fs";
+import path8 from "node:path";
+var SKIPPED_DIRS = ["node_modules", "target", "dist", "build", ".git", ".venv", "venv", "vendor", "__pycache__", ".octocode", "site-packages", "coverage"];
+var READ_DEFAULT_LINES = 120;
+var READ_MAX_LINES = 400;
+var LIST_MAX_ENTRIES = 300;
+var SEARCH_MAX_PER_FILE = 20;
+function confined(workspace, rel) {
+  const raw = (rel ?? ".").trim() || ".";
+  if (path8.isAbsolute(raw) && !raw.startsWith(workspace)) throw new ValidationError(`path is outside the workspace: ${raw}`);
+  const absolute = path8.resolve(workspace, raw);
+  const real = existsSync5(absolute) ? realpathSync2(absolute) : absolute;
+  if (escapesRoot(real, workspace)) throw new ValidationError(`path is outside the workspace: ${raw}`);
+  return path8.relative(workspace, real) || ".";
+}
+function validateSearch(value) {
+  if (typeof value.pattern !== "string" || !value.pattern.trim()) throw new ValidationError("search action requires a non-empty string pattern");
+  if (value.pattern.length > 300) throw new ValidationError("search pattern is longer than 300 characters");
+  for (const key of ["path", "glob"]) {
+    if (value[key] !== void 0 && typeof value[key] !== "string") throw new ValidationError(`search ${key} must be a string`);
+  }
+  for (const key of ["regex", "ignoreCase"]) {
+    if (value[key] !== void 0 && typeof value[key] !== "boolean") throw new ValidationError(`search ${key} must be true or false`);
+  }
+}
+function validateRead(value) {
+  if (typeof value.path !== "string" || !value.path.trim()) throw new ValidationError("read action requires a file path");
+  for (const key of ["start", "end"]) {
+    const n = value[key];
+    if (n !== void 0 && (typeof n !== "number" || !Number.isInteger(n) || n < 1)) throw new ValidationError(`read ${key} must be a positive integer line number`);
+  }
+}
+function searchArgv(workspace, action, ripgrep) {
+  const target = confined(workspace, action.path);
+  if (ripgrep) {
+    return [
+      "rg",
+      "-n",
+      "--no-heading",
+      "--color",
+      "never",
+      "--max-columns",
+      "300",
+      "--max-count",
+      String(SEARCH_MAX_PER_FILE),
+      ...action.regex ? [] : ["-F"],
+      ...action.ignoreCase ? ["-i"] : [],
+      ...action.glob ? ["-g", action.glob] : [],
+      ...SKIPPED_DIRS.flatMap((dir) => ["-g", `!${dir}/`]),
+      "-e",
+      action.pattern,
+      "--",
+      target
+    ];
+  }
+  return [
+    "grep",
+    "-rnI",
+    ...action.regex ? ["-E"] : ["-F"],
+    ...action.ignoreCase ? ["-i"] : [],
+    ...action.glob ? [`--include=${action.glob}`] : [],
+    ...SKIPPED_DIRS.map((dir) => `--exclude-dir=${dir}`),
+    "-e",
+    action.pattern,
+    "--",
+    target
+  ];
+}
+function readLines(workspace, action) {
+  const resolved = resolveNamedPath(workspace, action.path, "file");
+  if (resolved.path === void 0) throw new ValidationError(`no such file: ${resolved.note}; search or list to find the right path`);
+  const rel = resolved.path;
+  const absolute = path8.join(workspace, rel);
+  if (!statSync2(absolute).isFile()) throw new ValidationError(`${rel} is a directory; use list`);
+  const bytes = readFileSync6(absolute);
+  if (bytes.includes(0)) throw new ValidationError(`${rel} is binary`);
+  const text = bytes.toString("utf8");
+  const lines = (text.endsWith("\n") ? text.slice(0, -1) : text).split("\n");
+  const start = Math.min(action.start ?? 1, Math.max(lines.length, 1));
+  const end = Math.min(action.end ?? start + READ_DEFAULT_LINES - 1, start + READ_MAX_LINES - 1, lines.length);
+  const width = String(end).length;
+  const body = lines.slice(start - 1, end).map((line, index) => `${String(start + index).padStart(width)}  ${line}`).join("\n");
+  const more = end < lines.length ? `
+(${rel} has ${lines.length} lines; read start=${end + 1} for more)` : "";
+  return `${resolved.note ? `${resolved.note}
+` : ""}${rel}:${start}-${end}
+${body}${more}`;
+}
+function listEntries(workspace, rel) {
+  const resolved = resolveNamedPath(workspace, rel, "dir");
+  if (resolved.path === void 0) throw new ValidationError(`not a directory: ${resolved.note}`);
+  const base = resolved.path;
+  const root = path8.join(workspace, base);
+  if (!statSync2(root).isDirectory()) throw new ValidationError(`not a directory: ${base}; read it instead`);
+  const out = [];
+  const walk = (dir, depth) => {
+    let entries;
+    try {
+      entries = readdirSync4(dir, { withFileTypes: true }).sort((left, right) => left.name.localeCompare(right.name));
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (out.length >= LIST_MAX_ENTRIES) return;
+      if (entry.name.startsWith(".") || SKIPPED_DIRS.includes(entry.name)) continue;
+      const shown = path8.relative(workspace, path8.join(dir, entry.name));
+      out.push(entry.isDirectory() ? `${shown}/` : shown);
+      if (entry.isDirectory() && depth < 1) walk(path8.join(dir, entry.name), depth + 1);
+    }
+  };
+  walk(root, 0);
+  const listing = out.length === 0 ? `(${base} is empty)` : out.join("\n") + (out.length >= LIST_MAX_ENTRIES ? "\n(listing truncated; list a subdirectory)" : "");
+  return resolved.note ? `${resolved.note}
+${listing}` : listing;
+}
+var INDEX_MAX_ENTRIES = 5e4;
+var indexes = /* @__PURE__ */ new Map();
+function workspaceIndex(workspace) {
+  const cached = indexes.get(workspace);
+  if (cached) return cached;
+  const files = [];
+  const dirs = [];
+  const walk = (dir) => {
+    let entries;
+    try {
+      entries = readdirSync4(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (files.length + dirs.length >= INDEX_MAX_ENTRIES) return;
+      if (entry.name.startsWith(".") || SKIPPED_DIRS.includes(entry.name)) continue;
+      const absolute = path8.join(dir, entry.name);
+      const rel = path8.relative(workspace, absolute);
+      if (entry.isDirectory()) {
+        dirs.push(rel);
+        walk(absolute);
+      } else if (entry.isFile()) {
+        files.push(rel);
+      }
+    }
+  };
+  walk(workspace);
+  const index = { files, dirs };
+  indexes.set(workspace, index);
+  return index;
+}
+function pathCandidates(workspace, rel, kind = "any") {
+  const wanted = rel.replace(/^\.\//, "").replace(/\/+$/, "");
+  if (!wanted || wanted === ".") return [];
+  const { files, dirs } = workspaceIndex(workspace);
+  const pool = kind === "file" ? files : kind === "dir" ? dirs : [...files, ...dirs];
+  const suffix = `/${wanted}`;
+  return pool.filter((candidate) => candidate === wanted || candidate.endsWith(suffix)).sort((a, b) => a.length - b.length);
+}
+function resolveNamedPath(workspace, rel, kind) {
+  const named = confined(workspace, rel);
+  if (named === "." || existsSync5(path8.join(workspace, named))) return { path: named };
+  const candidates = pathCandidates(workspace, named, kind);
+  if (candidates.length === 1) return { path: candidates[0], note: `(${named} does not exist; using ${candidates[0]})` };
+  if (candidates.length > 1) {
+    return { path: void 0, note: `${named} does not exist; matching paths: ${candidates.slice(0, 8).join(", ")}${candidates.length > 8 ? ", \u2026" : ""}` };
+  }
+  return { path: void 0, note: `${named} does not exist and no path ends with it` };
+}
+function looksLikeRegex(pattern) {
+  return /\||\.\*|\\[bswdBSWD]|\[[^\]]+\]|^\^|\$$|\(\?|\.\+/.test(pattern);
+}
+
+// src/research/structured-call.ts
+async function structuredSearch(shell, action, timeoutSeconds) {
+  const notes = [];
+  const resolved = resolveNamedPath(shell.workspace, action.path, "any");
+  let target = resolved.path;
+  if (target === void 0) {
+    notes.push(`(${resolved.note}; searched the whole workspace)`);
+    target = ".";
+  } else if (resolved.note) {
+    notes.push(resolved.note);
+  }
+  const ripgrep = shell.hasTool("rg");
+  const run = (regex) => shell.runTool(searchArgv(shell.workspace, { ...action, path: target, regex }, ripgrep), timeoutSeconds);
+  let output = await run(action.regex);
+  if (output === "(no matches)" && action.regex === void 0 && looksLikeRegex(action.pattern)) {
+    try {
+      const asRegex = await run(true);
+      if (asRegex !== "(no matches)") {
+        notes.push("(no literal match; searched as a regular expression)");
+        output = asRegex;
+      }
+    } catch {
+    }
+  }
+  return notes.length > 0 ? `${notes.join("\n")}
+${output}` : output;
+}
+function structuredCall(shell, action, timeoutSeconds) {
+  const name = String(action.action);
+  const args = Object.fromEntries(Object.entries(action).filter(([key]) => key !== "action"));
+  const run = async () => {
+    if (name === "read") return readLines(shell.workspace, args);
+    if (name === "list") return listEntries(shell.workspace, args.path);
+    return structuredSearch(shell, args, timeoutSeconds);
+  };
+  return {
+    signature: { [name]: args },
+    run,
+    record: { name, raw_name: name, arguments: args },
+    ledger: (status) => ({ action: name, status, source: JSON.stringify(args) })
+  };
+}
+
+// src/research/entry.ts
+import path9 from "node:path";
+import { pathToFileURL } from "node:url";
+function isEntry(moduleUrl, name, script = process.argv[1]) {
+  if (!script || moduleUrl !== pathToFileURL(script).href) return false;
+  return path9.basename(script).replace(/\.[cm]?[jt]s$/, "") === name;
+}
+
 // src/research/bash-agent.ts
 function parseAction(content) {
   const value = parseJsonAction(content);
@@ -2381,8 +3798,11 @@ function parseAction(content) {
   if (action === "finish" && typeof value.answer !== "string") {
     throw new ValidationError("finish action requires a string answer");
   }
-  if (action !== "shell" && action !== "page" && action !== "finish") {
-    throw new ValidationError(`unsupported action for bash adapter: ${String(action)}`);
+  if (action === "search") validateSearch(value);
+  if (action === "read") validateRead(value);
+  if (action === "list" && value.path !== void 0 && typeof value.path !== "string") throw new ValidationError("list path must be a string");
+  if (!["shell", "search", "read", "list", "page", "finish"].includes(String(action))) {
+    throw new ValidationError(`unsupported action for bash adapter: ${String(action)} (use search, read, list, shell, page or finish)`);
   }
   return value;
 }
@@ -2398,12 +3818,16 @@ async function runShell(root, commandText, timeoutSeconds, shell) {
 var BASH_ADAPTER = {
   defaultToolTimeoutSeconds: 30,
   systemPrompt: () => BASH_SYSTEM_PROMPT,
+  briefing: workspaceOverview,
   parseAction,
   open: (workspace) => {
     const shell = new ReadOnlyShell(workspace).enter();
     return {
       shell,
       toolCall: (action, _workspace, runtime) => {
+        if (action.action === "search" || action.action === "read" || action.action === "list") {
+          return structuredCall(shell, action, runtime.tool_timeout_seconds);
+        }
         const commandText = String(action.command ?? "");
         return {
           signature: { command: commandText },
@@ -2424,7 +3848,7 @@ Commands remaining: ${count}. Finish now if the task is answerable; do not repea
     sandbox: session?.shell?.kind ?? "restricted-bash"
   })
 };
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+if (isEntry(import.meta.url, "bash-agent")) {
   process.exitCode = await runAdapter(BASH_ADAPTER);
 }
 export {