@oxagen/cli 2.1.4-679 → 2.1.4-699

package/oxagen.mjs

@@ -5253,6 +5253,78 @@ var init_envelope = __esm({
   }
 });
 
+// ../../packages/tacho/src/harness-limits.ts
+function isLimitedHarness(harness) {
+  return harness !== void 0 && LIMITED_HARNESSES.includes(harness);
+}
+function harnessHookLimitChars(harness) {
+  return HARNESS_HOOK_LIMITS[isLimitedHarness(harness) ? harness : SMALLEST_LIMIT_HARNESS].chars;
+}
+function hookAnswerMaxChars(harness) {
+  return harnessHookLimitChars(harness) - HOOK_ANSWER_RESERVE_CHARS;
+}
+function prefixBudgetTokens(harness) {
+  return Math.floor(
+    (hookAnswerMaxChars(harness) - STEER_ROOM_CHARS) / 4
+  );
+}
+function harnessesAtLargestBudget() {
+  return LIMITED_HARNESSES.filter(
+    (harness) => prefixBudgetTokens(harness) === LARGEST_PREFIX_BUDGET_TOKENS
+  );
+}
+var CONTEXT_SYSTEM_MAX_CHARS, CODEX_ADDITIONAL_CONTEXT_LIMIT, LIMITED_HARNESSES, HARNESS_HOOK_LIMITS, HOOK_ANSWER_RESERVE_CHARS, STEER_ROOM_CHARS, SMALLEST_LIMIT_HARNESS, SMALLEST_PREFIX_BUDGET_TOKENS, LARGEST_PREFIX_BUDGET_TOKENS;
+var init_harness_limits = __esm({
+  "../../packages/tacho/src/harness-limits.ts"() {
+    "use strict";
+    CONTEXT_SYSTEM_MAX_CHARS = 16384;
+    CODEX_ADDITIONAL_CONTEXT_LIMIT = 16384;
+    LIMITED_HARNESSES = [
+      "claude-code",
+      "codex",
+      "cursor",
+      "stella"
+    ];
+    HARNESS_HOOK_LIMITS = {
+      "claude-code": {
+        documented: 1e4,
+        chars: 1e4,
+        source: "https://code.claude.com/docs/en/hooks",
+        note: "A hook's additionalContext is capped at 10,000 characters. Past the cap Claude Code saves the text to a file and passes a path with a 2,000-character preview. No setting raises the cap."
+      },
+      codex: {
+        documented: CODEX_ADDITIONAL_CONTEXT_LIMIT,
+        chars: Math.min(CODEX_ADDITIONAL_CONTEXT_LIMIT, CONTEXT_SYSTEM_MAX_CHARS),
+        source: "https://developers.openai.com/codex/hooks",
+        note: "Codex spills additionalContext past about 2,500 approximate tokens unless the hook sets additionalContextLimit. Oxagen writes that setting on every hook that answers with text, and a string never has fewer characters than tokens."
+      },
+      cursor: {
+        documented: null,
+        chars: CONTEXT_SYSTEM_MAX_CHARS,
+        source: "https://cursor.com/docs/agent/hooks",
+        note: "The sessionStart hook's additional_context has no documented limit, so the host's context.system cap binds."
+      },
+      stella: {
+        documented: null,
+        chars: CONTEXT_SYSTEM_MAX_CHARS,
+        source: "crates/stella-core/src/hooks.rs in macanderson/stella",
+        note: "Stella appends a SessionStart hook's whole stdout to the system prompt and caps nothing, so the host's context.system cap binds."
+      }
+    };
+    HOOK_ANSWER_RESERVE_CHARS = 500;
+    STEER_ROOM_CHARS = 1500;
+    SMALLEST_LIMIT_HARNESS = [...LIMITED_HARNESSES].sort(
+      (a, b5) => HARNESS_HOOK_LIMITS[a].chars - HARNESS_HOOK_LIMITS[b5].chars
+    )[0];
+    SMALLEST_PREFIX_BUDGET_TOKENS = prefixBudgetTokens(
+      SMALLEST_LIMIT_HARNESS
+    );
+    LARGEST_PREFIX_BUDGET_TOKENS = Math.max(
+      ...LIMITED_HARNESSES.map(prefixBudgetTokens)
+    );
+  }
+});
+
 // ../../packages/tacho/src/policy/context.ts
 function clockContext(now) {
   const date = new Date(now);
@@ -5377,6 +5449,7 @@ var init_wire = __esm({
     init_zod();
     init_digest();
     init_envelope();
+    init_harness_limits();
     init_context();
     TACHO_BATCH_SCHEMA = "tacho.batch.v1";
     TACHO_BUNDLE_SCHEMA = "tacho.bundle.v1";
@@ -5763,7 +5836,7 @@ var init_wire = __esm({
         mode: external_exports.enum(["observed", "enforced"])
       }).strict(),
       context: external_exports.object({
-        system: external_exports.string().max(16384).nullable(),
+        system: external_exports.string().max(CONTEXT_SYSTEM_MAX_CHARS).nullable(),
         /**
          * Emitted only to a host that advertised
          * `BUNDLE_FEATURE_STEERING_MANIFEST`; see that constant.
@@ -7343,13 +7416,13 @@ function candidatePaths(path2, context) {
     cwd !== void 0 && lib.isAbsolute(cwd) ? lib.resolve(cwd, expanded) : lib.normalize(expanded)
   );
   const out = [resolved];
-  const under = (root) => {
+  const under2 = (root) => {
     const base2 = fold(lib.normalize(root)).replace(/\/+$/, "");
     return resolved.startsWith(`${base2}/`) ? resolved.slice(base2.length + 1) : void 0;
   };
-  const relative10 = cwd !== void 0 ? under(cwd) : void 0;
-  if (relative10 !== void 0) out.push(relative10);
-  const fromHome = home !== void 0 ? under(home) : void 0;
+  const relative11 = cwd !== void 0 ? under2(cwd) : void 0;
+  if (relative11 !== void 0) out.push(relative11);
+  const fromHome = home !== void 0 ? under2(home) : void 0;
   if (fromHome !== void 0) out.push(`~/${fromHome}`);
   return out;
 }
@@ -9519,11 +9592,12 @@ function stripCodexHooks(existing, enrollmentId) {
 function codexHookPresence(existing, enrollmentId) {
   return hookGroupPresence(existing, CODEX_HOOK_EVENTS, enrollmentId);
 }
-var CODEX_TELEMETRY_EVENTS, CODEX_HOOK_EVENTS, TELEMETRY_TIMEOUT_S2, CODEX_ADDITIONAL_CONTEXT_LIMIT, CONTEXT_EVENTS;
+var CODEX_TELEMETRY_EVENTS, CODEX_HOOK_EVENTS, TELEMETRY_TIMEOUT_S2, CONTEXT_EVENTS;
 var init_codex_writer = __esm({
   "../../packages/tacho/src/host/codex-writer.ts"() {
     "use strict";
     init_settings_writer();
+    init_harness_limits();
     CODEX_TELEMETRY_EVENTS = [
       "PostToolUse",
       "SubagentStart",
@@ -9538,7 +9612,6 @@ var init_codex_writer = __esm({
       ...CODEX_TELEMETRY_EVENTS
     ];
     TELEMETRY_TIMEOUT_S2 = 5;
-    CODEX_ADDITIONAL_CONTEXT_LIMIT = 1e4;
     CONTEXT_EVENTS = /* @__PURE__ */ new Set([
       "SessionStart",
       "UserPromptSubmit",
@@ -24024,7 +24097,7 @@ import { readFileSync as readFileSync11 } from "node:fs";
 import { dirname as dirname9, resolve as resolve3 } from "node:path";
 import { fileURLToPath } from "node:url";
 function readVersion() {
-  if (true) return "2.1.4-679";
+  if (true) return "2.1.4-699";
   try {
     const here = dirname9(fileURLToPath(import.meta.url));
     const pkg = JSON.parse(
@@ -24284,11 +24357,11 @@ function harnessFacts(exec4, name, platform = process.platform, env = process.en
     path2 ??= shellExecutable(exec4("sh", ["-lc", `command -v ${name}`]));
   }
   if (path2 === void 0) {
-    const sep12 = platform === "win32" ? "\\" : "/";
+    const sep13 = platform === "win32" ? "\\" : "/";
     const names2 = platform === "win32" ? [`${name}.exe`, `${name}.cmd`] : [name];
     outer: for (const dir of wellKnownBinDirs(home, platform, env)) {
       for (const file of names2) {
-        const candidate = `${dir}${sep12}${file}`;
+        const candidate = `${dir}${sep13}${file}`;
         if (exists(candidate)) {
           path2 = candidate;
           break outer;
@@ -25029,10 +25102,12 @@ function createControlClient(options) {
         ingestTimeoutMs
       )
     ),
-    bundle: async (etag) => bundleResponseSchema.parse(
+    bundle: async (etag, run3) => bundleResponseSchema.parse(
       await post2(options.endpoints.bundle, {
         host_enrollment_id: options.hostEnrollmentId,
-        ...etag !== void 0 ? { etag } : {}
+        ...etag !== void 0 ? { etag } : {},
+        ...run3?.remote !== void 0 ? { remote: run3.remote } : {},
+        ...run3?.harness !== void 0 ? { harness: run3.harness } : {}
       })
     ),
     commands: async (acknowledgements = [], daemon) => commandsResponseSchema.parse(
@@ -29171,8 +29246,8 @@ function harnessFileProblems(harnesses, deps) {
   if (harnesses.includes("codex"))
     check2(deps.paths.codexHooks, deps.readCodexHooks, hooksShapeProblem);
   if (harnesses.includes("cursor")) {
-    const relative10 = absoluteHookCommandProblem(deps.runtime.hookCommand);
-    if (relative10 !== void 0) problems.push(relative10);
+    const relative11 = absoluteHookCommandProblem(deps.runtime.hookCommand);
+    if (relative11 !== void 0) problems.push(relative11);
     for (const path2 of deps.paths.cursorHooks)
       check2(path2, () => deps.readCursorHooks(path2), cursorHooksShapeProblem);
   }
@@ -38218,6 +38293,7 @@ async function readRepositoryRemote(exec4, cwd) {
   const slash = canonical3.lastIndexOf("/");
   const name = slash === -1 ? "" : canonical3.slice(slash + 1);
   return {
+    canonical: canonical3,
     remote_digest: digestBytes(canonical3),
     remote_digest_folded: digestBytes(foldedRemote(canonical3)),
     ...name.length > 0 ? { name } : {},
@@ -40608,6 +40684,7 @@ function deliversMessages(harness, hookEventName) {
 function drainMessages(record, deps, events, used = 0) {
   const delivered = [];
   const now = deps.now();
+  const max2 = hookAnswerMaxChars(record.harness);
   const queue = record.control.messages.splice(0);
   for (const [index, message] of queue.entries()) {
     if (message.expiresAt !== null && Date.parse(message.expiresAt) < now) {
@@ -40619,17 +40696,17 @@ function drainMessages(record, deps, events, used = 0) {
       });
       continue;
     }
-    if (message.text.length > ADDITIONAL_CONTEXT_MAX_CHARS) {
+    if (message.text.length > max2) {
       deps.acknowledge?.({
         command_id: message.id,
         status: "failed",
         session_uuid: record.recorder.sessionUuid,
-        detail: `longer than the ${ADDITIONAL_CONTEXT_MAX_CHARS} characters a hook delivers`
+        detail: `longer than the ${max2} characters a hook delivers`
       });
       continue;
     }
     const size = (used > 0 ? CONTEXT_JOINER.length : 0) + message.text.length;
-    if (used + size > ADDITIONAL_CONTEXT_MAX_CHARS) {
+    if (used + size > max2) {
       record.control.messages.unshift(...queue.slice(index));
       break;
     }
@@ -40812,8 +40889,8 @@ function promptText(input) {
   const userInput = input["user_input"];
   return typeof userInput === "string" ? userInput : void 0;
 }
-function recallContext(memories, used) {
-  const room = ADDITIONAL_CONTEXT_MAX_CHARS - used - (used > 0 ? CONTEXT_JOINER.length : 0);
+function recallContext(memories, used, max2 = ADDITIONAL_CONTEXT_MAX_CHARS) {
+  const room = max2 - used - (used > 0 ? CONTEXT_JOINER.length : 0);
   let text5 = RECALL_HEADING;
   let count12 = 0;
   for (const memory of memories) {
@@ -40827,6 +40904,19 @@ function recallContext(memories, used) {
   }
   return count12 > 0 ? { text: text5, count: count12 } : void 0;
 }
+async function runSteeringBundle(record, deps) {
+  if (deps.runSteering === void 0) return void 0;
+  const named = record.harness ?? "claude-code";
+  const harness = WRAPPED_HARNESSES.includes(named) ? named : void 0;
+  const remote = Promise.resolve(
+    deps.repositoryRemote === void 0 ? void 0 : readRepository(recallView(record), deps.repositoryRemote)
+  ).then((repository) => repository?.canonical);
+  try {
+    return await deps.runSteering(remote, harness);
+  } catch {
+    return void 0;
+  }
+}
 function skillsHarness(record) {
   if (record.customAgent !== void 0) return void 0;
   return record.harness ?? "claude-code";
@@ -40836,7 +40926,13 @@ async function placeSessionSkills(view, record, deps, env) {
   const harness = skillsHarness(record);
   if (deps.skills === void 0 || harness === void 0 || !view.verified || skills === void 0 || skills.length === 0)
     return;
-  await deps.skills.place(harness, record.harnessSessionId, skills, env);
+  await deps.skills.place(
+    harness,
+    record.harnessSessionId,
+    skills,
+    env,
+    view.bundle.cedar?.policies
+  );
 }
 async function routeHook(raw, env, deps, replay, harness, agent, hookId) {
   const input = hookInputSchema.parse(raw);
@@ -40906,7 +41002,8 @@ async function routeHook(raw, env, deps, replay, harness, agent, hookId) {
   switch (input.hook_event_name) {
     case "SessionStart": {
       const block = operatorBlock(view, record);
-      const context = view.bundle.context.system;
+      const steering = block === void 0 && replay === void 0 ? await runSteeringBundle(record, deps) ?? view.bundle : view.bundle;
+      const context = steering.context.system;
       const messages = block === void 0 && replay === void 0 ? drainMessages(record, deps, events, context?.length ?? 0) : [];
       const additional = block === void 0 ? [context ?? "", ...messages.map((m) => m.text)].filter((s4) => s4.length > 0).join(CONTEXT_JOINER) : "";
       const delivered = replay === void 0 ? void 0 : readDeliveredContext(replay.deliveredContext);
@@ -40958,12 +41055,12 @@ async function routeHook(raw, env, deps, replay, harness, agent, hookId) {
       }
       if (replay === void 0)
         await placeSessionSkills(view, record, deps, env);
-      const manifest = view.bundle.context.manifest;
-      if (manifest !== void 0 && (replay === void 0 || delivered?.bundle_etag === view.bundle.etag && manifest.text_digest === (delivered.digest ?? null))) {
+      const manifest = steering.context.manifest;
+      if (manifest !== void 0 && (replay === void 0 || delivered?.bundle_etag === steering.etag && manifest.text_digest === (delivered.digest ?? null))) {
         events.push(
           record.recorder.sealCollectorEvent(
             "steering.manifest",
-            steeringManifestFrame(manifest, view.bundle, messages),
+            steeringManifestFrame(manifest, steering, messages),
             { hook_event_name: "SessionStart", attrs: replayed }
           )
         );
@@ -41006,7 +41103,8 @@ async function routeHook(raw, env, deps, replay, harness, agent, hookId) {
           ...recallScope(recallView(record)),
           text: promptText(input) ?? ""
         }),
-        delivered.join(CONTEXT_JOINER).length
+        delivered.join(CONTEXT_JOINER).length,
+        hookAnswerMaxChars(record.harness)
       ) : void 0;
       if (block === void 0) record.control.resumeOwed = void 0;
       if (block === void 0) notePrompt(record, promptText(input));
@@ -41452,6 +41550,7 @@ var init_hook_handler = __esm({
     init_context2();
     init_tools();
     init_steering_manifest();
+    init_harness_limits();
     init_timestamp();
     init_wire();
     init_bundle();
@@ -41471,7 +41570,7 @@ var init_hook_handler = __esm({
       "Stop"
     ]);
     RESUMED_TEXT = "Resumed by the operator. Continue the task.";
-    ADDITIONAL_CONTEXT_MAX_CHARS = 9500;
+    ADDITIONAL_CONTEXT_MAX_CHARS = hookAnswerMaxChars(void 0);
     CONTEXT_JOINER = "\n\n";
     TOOL_CALL_HOOK_EVENTS = /* @__PURE__ */ new Set([
       "PreToolUse",
@@ -45570,6 +45669,37 @@ import { createHash as createHash13 } from "node:crypto";
 import { mkdir as mkdir2, readdir as readdir2, readFile as readFile2, rm as rm2, writeFile } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
 import { dirname as dirname20, join as join36 } from "node:path";
+function skillToolLimits(policies) {
+  const limits = /* @__PURE__ */ new Map();
+  for (const text5 of Object.values(policies)) {
+    const lineage = SKILL_POLICY_ANNOTATION.exec(text5)?.[1];
+    if (lineage === void 0) continue;
+    const list = UNLESS_ACTIONS.exec(text5)?.[1] ?? "";
+    const actions = [...list.matchAll(ACTION_ID)].map((m) => m[1]);
+    const held = limits.get(lineage);
+    const permitted = held === void 0 ? actions : held.filter((action) => actions.includes(action));
+    limits.set(lineage, [...new Set(permitted)].sort());
+  }
+  return limits;
+}
+function harnessToolNames(harness, actions) {
+  if (harness !== "claude-code") return null;
+  const names2 = /* @__PURE__ */ new Set();
+  for (const action of actions) {
+    for (const name of CLAUDE_CODE_TOOL_NAMES[action] ?? []) names2.add(name);
+  }
+  return CLAUDE_CODE_TOOL_ORDER.filter((name) => names2.has(name));
+}
+function withToolLimits(skills, limits) {
+  if (limits === void 0) return [...skills];
+  const byLineage = skillToolLimits(limits.policies);
+  return skills.map((skill) => {
+    const actions = byLineage.get(skill.lineage);
+    if (actions === void 0) return skill;
+    const names2 = harnessToolNames(limits.harness, actions);
+    return names2 === null ? skill : { ...skill, allowedTools: names2 };
+  });
+}
 function envDir(env, key) {
   const value = env[key];
   return value === void 0 || value.trim() === "" ? null : value;
@@ -45610,10 +45740,12 @@ function skillFileRefusal(path2) {
   return null;
 }
 function skillMarkdown(skill) {
+  const tools = skill.allowedTools !== void 0 && skill.allowedTools.length > 0 ? `allowed-tools: ${skill.allowedTools.join(", ")}
+` : "";
   return `---
 name: ${skill.name}
 description: ${JSON.stringify(skill.description)}
----
+${tools}---
 
 ${skill.body.replace(/^\n+/, "")}`;
 }
@@ -45691,11 +45823,11 @@ function skillRefusal(skill) {
   }
   return null;
 }
-async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Date()) {
+async function placeSkills(root, sessionId, skills, now = /* @__PURE__ */ new Date(), limits) {
   const result2 = { placed: [], skipped: [], warnings: [] };
   await mkdir2(root, { recursive: true });
   const taken = /* @__PURE__ */ new Set();
-  for (const skill of skills) {
+  for (const skill of withToolLimits(skills, limits)) {
     const refusal = skillRefusal(skill);
     if (refusal !== null) {
       result2.skipped.push(skill.name);
@@ -45785,13 +45917,36 @@ async function removeSkills(root, sessionId, now = /* @__PURE__ */ new Date()) {
   }
   return result2;
 }
-var SESSION_MARKER, SESSION_TTL_MS, SKILL_NAME_PATTERN;
+var SESSION_MARKER, SESSION_TTL_MS, SKILL_NAME_PATTERN, SKILL_POLICY_ANNOTATION, UNLESS_ACTIONS, ACTION_ID, CLAUDE_CODE_TOOL_NAMES, CLAUDE_CODE_TOOL_ORDER;
 var init_place = __esm({
   "../../packages/tacho/src/skills/place.ts"() {
     "use strict";
     SESSION_MARKER = ".oxagen-session";
     SESSION_TTL_MS = 24 * 60 * 60 * 1e3;
     SKILL_NAME_PATTERN = /^[a-z0-9-]{1,64}$/;
+    SKILL_POLICY_ANNOTATION = /@skill\s*\(\s*"((?:[^"\\]|\\.)*)"\s*\)/;
+    UNLESS_ACTIONS = /unless\s*\{\s*action\s+in\s*\[([^\]]*)\]\s*\}/;
+    ACTION_ID = /Action::"((?:[^"\\]|\\.)*)"/g;
+    CLAUDE_CODE_TOOL_NAMES = {
+      builtin__read_file: ["Read"],
+      builtin__search_files: ["Grep", "Glob"],
+      builtin__shell: ["Bash"],
+      builtin__write_file: ["Edit", "Write"],
+      builtin__web_fetch: ["WebFetch"],
+      builtin__web_search: ["WebSearch"],
+      builtin__start_subagent: ["Agent"]
+    };
+    CLAUDE_CODE_TOOL_ORDER = [
+      "Read",
+      "Grep",
+      "Glob",
+      "Bash",
+      "Edit",
+      "Write",
+      "WebFetch",
+      "WebSearch",
+      "Agent"
+    ];
   }
 });
 
@@ -45839,7 +45994,7 @@ function sessionSkills(options) {
     }
   }
   return {
-    async place(harness, sessionId, skills, env) {
+    async place(harness, sessionId, skills, env, policies) {
       const root = skillsRoot(harness, env, home);
       if (root === null || skills.length === 0) return;
       placedRoots.set(sessionId, root);
@@ -45849,7 +46004,8 @@ function sessionSkills(options) {
             root,
             sessionId,
             skills.map(decodeSkill),
-            now()
+            now(),
+            policies === void 0 ? void 0 : { harness, policies }
           );
           for (const warning of result2.warnings) log(`skills: ${warning}`);
         } catch (error) {
@@ -46604,8 +46760,8 @@ function resolveModelRoute(rawUrl, headers) {
   const mark = rawUrl.indexOf("?");
   const pathname = mark === -1 ? rawUrl : rawUrl.slice(0, mark);
   const search = mark === -1 ? "" : rawUrl.slice(mark);
-  const under = (prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`) ? pathname.slice(prefix.length) || "/" : void 0;
-  const stella = under("/stella/anthropic");
+  const under2 = (prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`) ? pathname.slice(prefix.length) || "/" : void 0;
+  const stella = under2("/stella/anthropic");
   if (stella !== void 0) {
     return {
       provider: "anthropic",
@@ -46615,7 +46771,7 @@ function resolveModelRoute(rawUrl, headers) {
       harness: "stella"
     };
   }
-  const anthropic = under("/anthropic");
+  const anthropic = under2("/anthropic");
   if (anthropic !== void 0) {
     return {
       provider: "anthropic",
@@ -46624,11 +46780,11 @@ function resolveModelRoute(rawUrl, headers) {
       path: `${anthropic}${search}`
     };
   }
-  const codex = under("/backend-api/codex");
+  const codex = under2("/backend-api/codex");
   if (codex !== void 0) return openAiRoute(codex, search, headers);
-  const openai = under("/openai/v1");
+  const openai = under2("/openai/v1");
   if (openai !== void 0) return openAiRoute(openai, search, headers);
-  const bare = under("/v1");
+  const bare = under2("/v1");
   if (bare !== void 0) {
     const isAnthropic = bare === "/messages" || bare.startsWith("/messages/") || bare !== "/responses" && bare !== "/chat/completions" && looksAnthropic(headers);
     if (isAnthropic) {
@@ -49925,6 +50081,22 @@ function settleWithin(work, ms) {
     work.then(done, done);
   });
 }
+function valueWithin(work, ms) {
+  return new Promise((resolve23) => {
+    const timer = setTimeout(() => resolve23(void 0), ms);
+    timer.unref();
+    work.then(
+      (value) => {
+        clearTimeout(timer);
+        resolve23(value);
+      },
+      () => {
+        clearTimeout(timer);
+        resolve23(void 0);
+      }
+    );
+  });
+}
 function olderBundle(candidate, held) {
   return candidate.version < held.version && !(Date.parse(candidate.issued_at) > Date.parse(held.issued_at));
 }
@@ -50656,6 +50828,43 @@ async function initializeDaemon(options, server, port, ready) {
     bundleFetch = run3;
     return run3;
   }
+  const RUN_BUNDLES_MAX = 64;
+  const runBundles = /* @__PURE__ */ new Map();
+  async function runBundle(remote, harness) {
+    if (remote === void 0 && harness === void 0) return void 0;
+    const key = `${harness ?? ""}\0${remote ?? ""}`;
+    const held = runBundles.get(key);
+    try {
+      const response = await client.bundle(held?.etag, { remote, harness });
+      lastControlAt = now();
+      if (response.not_modified) return held;
+      if (response.bundle === null) return void 0;
+      const verification = verifyBundle(
+        response.bundle,
+        host.bundle_public_key_pem,
+        host.host_enrollment_id
+      );
+      if (!verification.ok) {
+        log(
+          `refused a run bundle that does not verify: ${verification.reason ?? "unknown"}`
+        );
+        return void 0;
+      }
+      runBundles.delete(key);
+      runBundles.set(key, response.bundle);
+      while (runBundles.size > RUN_BUNDLES_MAX) {
+        const oldest = runBundles.keys().next().value;
+        if (oldest === void 0) break;
+        runBundles.delete(oldest);
+      }
+      return response.bundle;
+    } catch (error) {
+      log(
+        `run bundle fetch failed: ${error instanceof Error ? error.message : String(error)}`
+      );
+      return void 0;
+    }
+  }
   async function onControl(control) {
     lastControlAt = now();
     if (control.agent_day_spend !== void 0)
@@ -51257,6 +51466,12 @@ async function initializeDaemon(options, server, port, ready) {
           refreshBundle: async () => {
             await settleWithin(refreshBundle(), timers.hookBundleWaitMs);
           },
+          // One wait covers the repository read and the run's bundle fetch.
+          // Past it, the start hands the agent the host's bundle (ADR-350).
+          runSteering: (remote, harness) => valueWithin(
+            remote.then((canonical3) => runBundle(canonical3, harness)),
+            timers.hookBundleWaitMs
+          ),
           acknowledge: (ack) => {
             acks.push(ack);
           },
@@ -53116,7 +53331,7 @@ import {
   writeFileSync as writeFileSync5
 } from "node:fs";
 import { dirname as dirname22, join as join39, resolve as resolve15 } from "node:path";
-function bundlePath(root, relative10, create2 = false) {
+function bundlePath(root, relative11, create2 = false) {
   const absolute = resolve15(root);
   if (create2) mkdirSync8(absolute, { recursive: true, mode: 448 });
   if (lstatSync7(absolute).isSymbolicLink() || !lstatSync7(absolute).isDirectory()) {
@@ -53124,7 +53339,7 @@ function bundlePath(root, relative10, create2 = false) {
   }
   const base2 = realpathSync5(absolute);
   let current = base2;
-  const parts = relative10.split("/");
+  const parts = relative11.split("/");
   for (let i2 = 0; i2 < parts.length; i2++) {
     current = join39(current, parts[i2]);
     try {
@@ -53143,8 +53358,8 @@ function bundlePath(root, relative10, create2 = false) {
   }
   return current;
 }
-function readBounded(root, relative10, limit = ARP_MAX_BLOB_BYTES) {
-  const path2 = bundlePath(root, relative10);
+function readBounded(root, relative11, limit = ARP_MAX_BLOB_BYTES) {
+  const path2 = bundlePath(root, relative11);
   const fd2 = openSync7(path2, constants3.O_RDONLY | constants3.O_NOFOLLOW);
   try {
     const stat6 = fstatSync2(fd2);
@@ -53166,8 +53381,8 @@ function readBounded(root, relative10, limit = ARP_MAX_BLOB_BYTES) {
     closeSync7(fd2);
   }
 }
-function writeNew(root, relative10, bytes) {
-  const path2 = bundlePath(root, relative10, true);
+function writeNew(root, relative11, bytes) {
+  const path2 = bundlePath(root, relative11, true);
   const fd2 = openSync7(
     path2,
     constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | constants3.O_NOFOLLOW,
@@ -54937,7 +55152,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "2.1.4-679",
+      version: "2.1.4-699",
       description: "Oxagen governance CLI \u2014 spend, lineage, grounding, credentials, and audit (agentic coding lives in the stella CLI)",
       type: "module",
       main: "./dist/index.js",
@@ -61331,15 +61546,305 @@ var init_record_force = __esm({
   }
 });
 
+// ../../packages/oxagen/src/steering-repo/harness-files.ts
+function nameOf(path2) {
+  const cut2 = path2.lastIndexOf("/");
+  return cut2 < 0 ? path2 : path2.slice(cut2 + 1);
+}
+function isMarkdown(name) {
+  return name.endsWith(".md") || name.endsWith(".mdc");
+}
+function instructionEntryOf(path2) {
+  const name = nameOf(path2);
+  const nested2 = NESTED.get(name) ?? SINGLE.get(name);
+  if (nested2) return nested2;
+  if (path2 === ".github/copilot-instructions.md")
+    return ROOT_FILES.get(path2) ?? null;
+  if (path2.startsWith(".github/instructions/") && name.endsWith(".instructions.md"))
+    return COPILOT_RULES;
+  if (!isMarkdown(name)) return null;
+  const slashed = `/${path2}`;
+  return RULE_FOLDERS.find(({ folder }) => slashed.includes(`/${folder}`))?.entry ?? null;
+}
+function classifyHarnessFile(path2) {
+  for (const { folder, entry: entry2 } of SKILL_FOLDERS) {
+    if (!path2.startsWith(folder)) continue;
+    const rest = path2.slice(folder.length);
+    const cut2 = rest.indexOf("/");
+    if (cut2 <= 0) return null;
+    return { ...entry2, path: path2, skillFolder: folder + rest.slice(0, cut2) };
+  }
+  const instruction = instructionEntryOf(path2);
+  if (instruction) return { ...instruction, path: path2, skillFolder: null };
+  const root = ROOT_FILES.get(path2);
+  if (root) return { ...root, path: path2, skillFolder: null };
+  for (const { folder, entry: entry2 } of MARKDOWN_FOLDERS) {
+    if (path2.startsWith(folder) && nameOf(path2).endsWith(".md"))
+      return { ...entry2, path: path2, skillFolder: null };
+  }
+  return null;
+}
+var HARNESSES2, HARNESS_FILE_KINDS, CLAUDE_MD, NESTED, SINGLE, RULE_FOLDERS, ROOT_FILES, COPILOT_RULES, MARKDOWN_FOLDERS, SKILL_FOLDERS, SKILL_FILE, HARNESS_FILE_CATALOGUE, WELL_KNOWN_FOLDERS;
+var init_harness_files = __esm({
+  "../../packages/oxagen/src/steering-repo/harness-files.ts"() {
+    "use strict";
+    HARNESSES2 = [
+      "claude-code",
+      "codex",
+      "cursor",
+      "copilot",
+      "windsurf",
+      "cline",
+      "gemini",
+      "stella"
+    ];
+    HARNESS_FILE_KINDS = [
+      "instructions",
+      "personal",
+      "rule",
+      "skill",
+      "command",
+      "subagent",
+      "settings",
+      "mcp-config"
+    ];
+    CLAUDE_MD = {
+      pattern: "CLAUDE.md",
+      harnesses: ["claude-code", "stella"],
+      kind: "instructions"
+    };
+    NESTED = /* @__PURE__ */ new Map([
+      ["CLAUDE.md", CLAUDE_MD],
+      [
+        "AGENTS.md",
+        { pattern: "AGENTS.md", harnesses: ["codex", "stella"], kind: "instructions" }
+      ],
+      [
+        "AGENTS.override.md",
+        { pattern: "AGENTS.override.md", harnesses: ["codex"], kind: "instructions" }
+      ],
+      [
+        "GEMINI.md",
+        { pattern: "GEMINI.md", harnesses: ["gemini"], kind: "instructions" }
+      ],
+      [
+        "CLAUDE.local.md",
+        { pattern: "CLAUDE.local.md", harnesses: ["claude-code"], kind: "personal" }
+      ]
+    ]);
+    SINGLE = /* @__PURE__ */ new Map([
+      [
+        ".cursorrules",
+        { pattern: ".cursorrules", harnesses: ["cursor"], kind: "instructions" }
+      ],
+      [
+        ".windsurfrules",
+        { pattern: ".windsurfrules", harnesses: ["windsurf"], kind: "instructions" }
+      ],
+      [
+        ".clinerules",
+        { pattern: ".clinerules", harnesses: ["cline"], kind: "instructions" }
+      ]
+    ]);
+    RULE_FOLDERS = [
+      {
+        folder: ".cursor/rules/",
+        entry: {
+          pattern: ".cursor/rules/*.md, .cursor/rules/*.mdc",
+          harnesses: ["cursor"],
+          kind: "rule"
+        }
+      },
+      {
+        folder: ".windsurf/rules/",
+        entry: {
+          pattern: ".windsurf/rules/*.md",
+          harnesses: ["windsurf"],
+          kind: "rule"
+        }
+      },
+      {
+        folder: ".clinerules/",
+        entry: { pattern: ".clinerules/*.md", harnesses: ["cline"], kind: "rule" }
+      }
+    ];
+    ROOT_FILES = /* @__PURE__ */ new Map([
+      [
+        ".github/copilot-instructions.md",
+        {
+          pattern: ".github/copilot-instructions.md",
+          harnesses: ["copilot"],
+          kind: "instructions"
+        }
+      ],
+      [
+        ".claude/settings.json",
+        {
+          pattern: ".claude/settings.json",
+          harnesses: ["claude-code"],
+          kind: "settings"
+        }
+      ],
+      [
+        ".codex/config.toml",
+        {
+          pattern: ".codex/config.toml",
+          harnesses: ["codex"],
+          kind: "settings"
+        }
+      ],
+      [
+        ".mcp.json",
+        { pattern: ".mcp.json", harnesses: ["claude-code"], kind: "mcp-config" }
+      ],
+      [
+        ".cursor/mcp.json",
+        {
+          pattern: ".cursor/mcp.json",
+          harnesses: ["cursor"],
+          kind: "mcp-config"
+        }
+      ]
+    ]);
+    COPILOT_RULES = {
+      pattern: ".github/instructions/*.instructions.md",
+      harnesses: ["copilot"],
+      kind: "rule"
+    };
+    MARKDOWN_FOLDERS = [
+      {
+        folder: ".claude/commands/",
+        entry: {
+          pattern: ".claude/commands/*.md",
+          harnesses: ["claude-code", "stella"],
+          kind: "command"
+        }
+      },
+      {
+        folder: ".cursor/commands/",
+        entry: {
+          pattern: ".cursor/commands/*.md",
+          harnesses: ["cursor"],
+          kind: "command"
+        }
+      },
+      {
+        folder: ".claude/agents/",
+        entry: {
+          pattern: ".claude/agents/*.md",
+          harnesses: ["claude-code", "cursor", "stella"],
+          kind: "subagent"
+        }
+      }
+    ];
+    SKILL_FOLDERS = [
+      {
+        folder: ".claude/skills/",
+        entry: {
+          pattern: ".claude/skills/<name>/",
+          harnesses: ["claude-code", "cursor", "stella"],
+          kind: "skill"
+        }
+      },
+      {
+        folder: ".agents/skills/",
+        entry: {
+          pattern: ".agents/skills/<name>/",
+          harnesses: ["codex"],
+          kind: "skill"
+        }
+      },
+      {
+        folder: ".cursor/skills/",
+        entry: {
+          pattern: ".cursor/skills/<name>/",
+          harnesses: ["cursor"],
+          kind: "skill"
+        }
+      }
+    ];
+    SKILL_FILE = "SKILL.md";
+    HARNESS_FILE_CATALOGUE = [
+      ...NESTED.values(),
+      ...SINGLE.values(),
+      ...RULE_FOLDERS.map((r) => r.entry),
+      COPILOT_RULES,
+      ...SKILL_FOLDERS.map((s4) => s4.entry),
+      ...MARKDOWN_FOLDERS.map((m) => m.entry),
+      ...ROOT_FILES.values()
+    ];
+    WELL_KNOWN_FOLDERS = [
+      "",
+      ".github",
+      ".github/instructions",
+      ".claude",
+      ".claude/skills",
+      ".claude/commands",
+      ".claude/agents",
+      ".codex",
+      ".agents",
+      ".agents/skills",
+      ".cursor",
+      ".cursor/rules",
+      ".cursor/skills",
+      ".cursor/commands",
+      ".windsurf",
+      ".windsurf/rules",
+      ".clinerules"
+    ];
+  }
+});
+
+// ../../packages/oxagen/src/steering-repo/record-scope.ts
+var recordScopeSchema, recordLoadSchema;
+var init_record_scope = __esm({
+  "../../packages/oxagen/src/steering-repo/record-scope.ts"() {
+    "use strict";
+    init_zod();
+    recordScopeSchema = external_exports.enum([
+      "workspace",
+      "repository",
+      "organization"
+    ]);
+    recordLoadSchema = external_exports.enum([
+      "always",
+      "match",
+      "relevant",
+      "mention"
+    ]);
+  }
+});
+
 // ../../packages/oxagen/src/contracts/steering.markdown_import.shared.ts
 function markdownImportFileCount(rows) {
-  return rows.records.filter((row) => row.action === "add").length + rows.policies.filter((policy) => policy.action === "add").length;
+  let count12 = rows.policies.filter((policy) => policy.action === "add").length;
+  for (const row of rows.records) {
+    if (row.action === "add") count12 += 1 + (row.files?.length ?? 0);
+  }
+  return count12;
 }
 function markdownImportTooManyFiles(count12) {
   if (count12 <= STEERING_PR_MAX_FILES) return null;
   return `The import marks ${count12} records and policy files add, and one steering PR holds at most ${STEERING_PR_MAX_FILES} files. Mark ${count12 - STEERING_PR_MAX_FILES} of them skip, or import the files in smaller sets.`;
 }
-var MARKDOWN_IMPORT_FILES_MAX, MARKDOWN_IMPORT_FILE_CHARS_MAX, MARKDOWN_IMPORT_STATEMENTS_MAX, MARKDOWN_IMPORT_KIND_REASON_MAX, MARKDOWN_IMPORT_FORCE_WORDS_MAX, MARKDOWN_IMPORT_ROWS_MAX, markdownImportPullRequestFilesSchema, markdownImportTargetSchema, markdownImportDocumentSchema, markdownImportMatchSchema, markdownImportOriginSchema, markdownImportRecordSchema, markdownImportMemoryMatchReasonSchema, markdownImportMemoryMatchSchema, markdownImportMemorySchema, markdownImportPolicyStatementSchema, markdownImportPolicyIssueSchema, markdownImportPolicySchema, markdownImportFileSchema;
+function markdownImportSourceOf(path2) {
+  const clean = path2.replace(/\\/g, "/").replace(/^\.?\//, "");
+  const segments = clean.split("/");
+  const starts = segments.map((segment, at) => segment.startsWith(".") ? at : -1).filter((at) => at >= 0);
+  if (!starts.includes(0)) starts.push(0);
+  for (const at of starts) {
+    const rest = segments.slice(at).join("/");
+    const file = classifyHarnessFile(rest);
+    if (file === null) continue;
+    if (file.kind === "skill" && rest !== `${file.skillFolder}/${SKILL_FILE}`)
+      return null;
+    const kind = markdownImportFileKindSchema.safeParse(file.kind);
+    const harness = markdownImportHarnessSchema.safeParse(file.harnesses[0]);
+    return kind.success && harness.success ? { harness: harness.data, kind: kind.data } : null;
+  }
+  return null;
+}
+var MARKDOWN_IMPORT_FILES_MAX, MARKDOWN_IMPORT_FILE_CHARS_MAX, MARKDOWN_IMPORT_STATEMENTS_MAX, MARKDOWN_IMPORT_KIND_REASON_MAX, MARKDOWN_IMPORT_FORCE_WORDS_MAX, MARKDOWN_IMPORT_ROWS_MAX, markdownImportPullRequestFilesSchema, markdownImportTargetSchema, markdownImportHarnessSchema, markdownImportFileKindSchema, markdownImportSourceSchema, MARKDOWN_IMPORT_SKILL_FILES_MAX, markdownImportSkillFileSchema, markdownImportDocumentSchema, markdownImportMatchSchema, markdownImportOriginSchema, markdownImportRecordSchema, markdownImportMemoryMatchReasonSchema, markdownImportMemoryMatchSchema, markdownImportMemorySchema, markdownImportPolicyStatementSchema, markdownImportPolicyIssueSchema, markdownImportPolicySchema, markdownImportFileSchema;
 var init_steering_markdown_import_shared = __esm({
   "../../packages/oxagen/src/contracts/steering.markdown_import.shared.ts"() {
     "use strict";
@@ -61350,7 +61855,9 @@ var init_steering_markdown_import_shared = __esm({
     init_names();
     init_record_effect();
     init_record_force();
+    init_harness_files();
     init_record_kind();
+    init_record_scope();
     MARKDOWN_IMPORT_FILES_MAX = 25;
     MARKDOWN_IMPORT_FILE_CHARS_MAX = 1e5;
     MARKDOWN_IMPORT_STATEMENTS_MAX = 50;
@@ -61370,6 +61877,38 @@ var init_steering_markdown_import_shared = __esm({
       "memories",
       "skip"
     ]);
+    markdownImportHarnessSchema = external_exports.enum(HARNESSES2).exclude([
+      "stella"
+    ]);
+    markdownImportFileKindSchema = external_exports.enum(HARNESS_FILE_KINDS).extract([
+      "instructions",
+      "rule",
+      "skill",
+      "command",
+      "subagent"
+    ]);
+    markdownImportSourceSchema = external_exports.object({
+      harness: markdownImportHarnessSchema.describe(
+        "The harness whose format the file is written in"
+      ),
+      kind: markdownImportFileKindSchema.describe(
+        "The file's kind in the harness file catalogue"
+      ),
+      path: repoPathSchema.max(1024).describe(
+        "The file's path in the repository, such as apps/app/CLAUDE.md. For a skill folder, the path of its SKILL.md."
+      ),
+      repository: repoRefSchema.optional().describe(
+        "The linked repository, as <host>/<owner>/<name>. With it, every record gets scope repository and repos set to it."
+      )
+    }).strict();
+    MARKDOWN_IMPORT_SKILL_FILES_MAX = 64;
+    markdownImportSkillFileSchema = external_exports.object({
+      path: external_exports.string().min(1).max(512).regex(
+        /^(?!\/)(?!.*\/\/)(?!(?:.*\/)?\.\.?(?:\/|$))[^\0\\]+$/,
+        "a skill file path is relative, uses /, and names no . or .. segment"
+      ).describe("The file's path inside the skill folder, such as scripts/run.sh"),
+      content: external_exports.string().max(MARKDOWN_IMPORT_FILE_CHARS_MAX).describe("The file's text")
+    }).strict();
     markdownImportDocumentSchema = external_exports.object({
       filename: external_exports.string().min(1).max(256).describe(
         "The file's name, or its path relative to the folder imported, such as docs/release.md"
@@ -61377,8 +61916,40 @@ var init_steering_markdown_import_shared = __esm({
       content: external_exports.string().min(1).max(MARKDOWN_IMPORT_FILE_CHARS_MAX).describe("The file's Markdown text"),
       target: markdownImportTargetSchema.optional().describe(
         "records, policies, memories, or skip. Omit it to take the target the file's text implies."
+      ),
+      source: markdownImportSourceSchema.optional().describe(
+        "Where the file came from: its harness, its catalogue kind, its path, and the repository. Omit it to read the file as plain Markdown."
+      ),
+      files: external_exports.array(markdownImportSkillFileSchema).max(MARKDOWN_IMPORT_SKILL_FILES_MAX).optional().describe(
+        "A skill folder's other text files, by their path inside the folder. Only a source of kind skill carries them."
       )
-    }).strict();
+    }).strict().superRefine((document, ctx) => {
+      if (document.files !== void 0 && document.files.length > 0 && document.source?.kind !== "skill") {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["files"],
+          message: "only a document whose source is a skill carries files"
+        });
+      }
+      const paths = /* @__PURE__ */ new Set();
+      for (const file of document.files ?? []) {
+        if (paths.has(file.path)) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["files"],
+            message: `the skill names ${file.path} twice`
+          });
+        }
+        paths.add(file.path);
+      }
+      if (paths.has(SKILL_FILE)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["files"],
+          message: `${SKILL_FILE} is the document's content, not one of its files`
+        });
+      }
+    });
     markdownImportMatchSchema = external_exports.object({
       lineage: external_exports.string().min(1),
       /** Where the matched record lives, or null for a published record with no known path. */
@@ -61386,7 +61957,12 @@ var init_steering_markdown_import_shared = __esm({
       /** True for a record already published, false for another row of this import. */
       published: external_exports.boolean()
     }).strict();
-    markdownImportOriginSchema = external_exports.enum(["frontmatter", "split"]);
+    markdownImportOriginSchema = external_exports.enum([
+      "frontmatter",
+      "split",
+      "rule",
+      "skill"
+    ]);
     markdownImportRecordSchema = external_exports.object({
       file: external_exports.string().min(1).max(256).describe("The file the statement came from"),
       line: external_exports.number().int().min(1).describe("The line of the file the statement starts on"),
@@ -61416,7 +61992,29 @@ var init_steering_markdown_import_shared = __esm({
         "add or skip. A duplicate defaults to skip. A conflict is null until a person chooses."
       ),
       frontmatter: external_exports.string().max(MARKDOWN_IMPORT_FILE_CHARS_MAX).nullable().describe(
-        "The file's frontmatter, kept for a frontmatter record so the commit keeps its other fields. Null for a split statement."
+        "The file's frontmatter YAML: kept for a frontmatter record so the commit keeps its other fields, and shown for a rule or a skill so a person sees what the source said. Null for a split statement, and for a rule or a skill whose file had none."
+      ),
+      // The fields below are set only when the document named a source. A row
+      // without them commits as every row did before: workspace scope, no
+      // paths, and the load its force implies.
+      scope: recordScopeSchema.optional().describe(
+        "The record's scope. repository when the source named a repository, else absent, which commits as workspace."
+      ),
+      repos: external_exports.array(repoRefSchema).min(1).max(16).optional().describe("The repositories a repository-scoped record reaches."),
+      applies_to: external_exports.array(external_exports.string().min(1).max(512)).min(1).max(64).optional().describe(
+        "The path globs the record is about: a nested file's folder, a Cursor rule's globs, a Copilot rule's applyTo, or a skill's paths."
+      ),
+      load: recordLoadSchema.optional().describe(
+        "When the record reaches a request: always, match, relevant, or mention. Absent, the record's force decides."
+      ),
+      name: external_exports.string().regex(/^[a-z0-9][a-z0-9-]*$/).max(64).optional().describe(
+        "A skill's folder name, from the source's name field or its file name. Set on a skill row only."
+      ),
+      files: external_exports.array(markdownImportSkillFileSchema).max(MARKDOWN_IMPORT_SKILL_FILES_MAX).optional().describe(
+        "A skill folder's other files, written beside its SKILL.md. Set on a skill row only."
+      ),
+      dropped: external_exports.array(external_exports.string().min(1).max(200)).max(64).optional().describe(
+        "What the source said that the record cannot hold, each as one line: a frontmatter field the record schema has no place for, a tools list moved to a Cedar policy, or a binary file left out."
       )
     }).strict().superRefine((row, ctx) => {
       if (!forceAllowed(row.kind, row.force)) {
@@ -61440,11 +62038,46 @@ var init_steering_markdown_import_shared = __esm({
           message: "only a constraint carries an effect"
         });
       }
-      if (row.origin === "frontmatter" !== (row.frontmatter !== null)) {
+      if (row.origin === "frontmatter" && row.frontmatter === null) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["frontmatter"],
+          message: "a frontmatter record carries its frontmatter"
+        });
+      }
+      if (row.origin === "split" && row.frontmatter !== null) {
         ctx.addIssue({
           code: external_exports.ZodIssueCode.custom,
           path: ["frontmatter"],
-          message: "a frontmatter record carries its frontmatter, and a split statement carries none"
+          message: "a split statement carries no frontmatter"
+        });
+      }
+      if (row.origin === "skill" && row.kind !== "skill") {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["kind"],
+          message: "a whole skill, command, or subagent file is a skill"
+        });
+      }
+      if (row.origin !== "skill" && (row.files !== void 0 || row.name !== void 0)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["files"],
+          message: "only a skill row carries a name and files"
+        });
+      }
+      if (row.scope === "repository" !== (row.repos !== void 0)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["repos"],
+          message: "a repository-scoped row names its repos, and no other row does"
+        });
+      }
+      if (row.load === "match" && row.applies_to === void 0) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: ["applies_to"],
+          message: "a row that loads on match names the paths it matches"
         });
       }
     });
@@ -66184,10 +66817,10 @@ var require_resolve_block_map = __commonJS({
       let offset = bm.offset;
       let commentEnd = null;
       for (const collItem of bm.items) {
-        const { start, key, sep: sep12, value } = collItem;
+        const { start, key, sep: sep13, value } = collItem;
         const keyProps = resolveProps.resolveProps(start, {
           indicator: "explicit-key-ind",
-          next: key ?? sep12?.[0],
+          next: key ?? sep13?.[0],
           offset,
           onError,
           parentIndent: bm.indent,
@@ -66201,7 +66834,7 @@ var require_resolve_block_map = __commonJS({
             else if ("indent" in key && key.indent !== bm.indent)
               onError(offset, "BAD_INDENT", startColMsg);
           }
-          if (!keyProps.anchor && !keyProps.tag && !sep12) {
+          if (!keyProps.anchor && !keyProps.tag && !sep13) {
             commentEnd = keyProps.end;
             if (keyProps.comment) {
               if (map.comment)
@@ -66225,7 +66858,7 @@ var require_resolve_block_map = __commonJS({
         ctx.atKey = false;
         if (utilMapIncludes.mapIncludes(ctx, map.items, keyNode))
           onError(keyStart, "DUPLICATE_KEY", "Map keys must be unique");
-        const valueProps = resolveProps.resolveProps(sep12 ?? [], {
+        const valueProps = resolveProps.resolveProps(sep13 ?? [], {
           indicator: "map-value-ind",
           next: value,
           offset: keyNode.range[2],
@@ -66241,7 +66874,7 @@ var require_resolve_block_map = __commonJS({
             if (ctx.options.strict && keyProps.start < valueProps.found.offset - 1024)
               onError(keyNode.range, "KEY_OVER_1024_CHARS", "The : indicator must be at most 1024 chars after the start of an implicit block mapping key");
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep12, null, valueProps, onError);
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : composeEmptyNode(ctx, offset, sep13, null, valueProps, onError);
           if (ctx.schema.compat)
             utilFlowIndentCheck.flowIndentCheck(bm.indent, value, onError);
           offset = valueNode.range[2];
@@ -66332,7 +66965,7 @@ var require_resolve_end = __commonJS({
       let comment = "";
       if (end) {
         let hasSpace = false;
-        let sep12 = "";
+        let sep13 = "";
         for (const token of end) {
           const { source, type } = token;
           switch (type) {
@@ -66346,13 +66979,13 @@ var require_resolve_end = __commonJS({
               if (!comment)
                 comment = cb;
               else
-                comment += sep12 + cb;
-              sep12 = "";
+                comment += sep13 + cb;
+              sep13 = "";
               break;
             }
             case "newline":
               if (comment)
-                sep12 += source;
+                sep13 += source;
               hasSpace = true;
               break;
             default:
@@ -66395,18 +67028,18 @@ var require_resolve_flow_collection = __commonJS({
       let offset = fc.offset + fc.start.source.length;
       for (let i2 = 0; i2 < fc.items.length; ++i2) {
         const collItem = fc.items[i2];
-        const { start, key, sep: sep12, value } = collItem;
+        const { start, key, sep: sep13, value } = collItem;
         const props = resolveProps.resolveProps(start, {
           flow: fcName,
           indicator: "explicit-key-ind",
-          next: key ?? sep12?.[0],
+          next: key ?? sep13?.[0],
           offset,
           onError,
           parentIndent: fc.indent,
           startOnNewline: false
         });
         if (!props.found) {
-          if (!props.anchor && !props.tag && !sep12 && !value) {
+          if (!props.anchor && !props.tag && !sep13 && !value) {
             if (i2 === 0 && props.comma)
               onError(props.comma, "UNEXPECTED_TOKEN", `Unexpected , in ${fcName}`);
             else if (i2 < fc.items.length - 1)
@@ -66460,8 +67093,8 @@ var require_resolve_flow_collection = __commonJS({
             }
           }
         }
-        if (!isMap3 && !sep12 && !props.found) {
-          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep12, null, props, onError);
+        if (!isMap3 && !sep13 && !props.found) {
+          const valueNode = value ? composeNode(ctx, value, props, onError) : composeEmptyNode(ctx, props.end, sep13, null, props, onError);
           coll.items.push(valueNode);
           offset = valueNode.range[2];
           if (isBlock(value))
@@ -66473,7 +67106,7 @@ var require_resolve_flow_collection = __commonJS({
           if (isBlock(key))
             onError(keyNode.range, "BLOCK_IN_FLOW", blockMsg);
           ctx.atKey = false;
-          const valueProps = resolveProps.resolveProps(sep12 ?? [], {
+          const valueProps = resolveProps.resolveProps(sep13 ?? [], {
             flow: fcName,
             indicator: "map-value-ind",
             next: value,
@@ -66484,8 +67117,8 @@ var require_resolve_flow_collection = __commonJS({
           });
           if (valueProps.found) {
             if (!isMap3 && !props.found && ctx.options.strict) {
-              if (sep12)
-                for (const st of sep12) {
+              if (sep13)
+                for (const st of sep13) {
                   if (st === valueProps.found)
                     break;
                   if (st.type === "newline") {
@@ -66502,7 +67135,7 @@ var require_resolve_flow_collection = __commonJS({
             else
               onError(valueProps.start, "MISSING_CHAR", `Missing , or : between ${fcName} items`);
           }
-          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep12, null, valueProps, onError) : null;
+          const valueNode = value ? composeNode(ctx, value, valueProps, onError) : valueProps.found ? composeEmptyNode(ctx, valueProps.end, sep13, null, valueProps, onError) : null;
           if (valueNode) {
             if (isBlock(value))
               onError(valueNode.range, "BLOCK_IN_FLOW", blockMsg);
@@ -66682,7 +67315,7 @@ var require_resolve_block_scalar = __commonJS({
           chompStart = i2 + 1;
       }
       let value = "";
-      let sep12 = "";
+      let sep13 = "";
       let prevMoreIndented = false;
       for (let i2 = 0; i2 < contentStart; ++i2)
         value += lines[i2][0].slice(trimIndent) + "\n";
@@ -66699,24 +67332,24 @@ var require_resolve_block_scalar = __commonJS({
           indent = "";
         }
         if (type === Scalar.Scalar.BLOCK_LITERAL) {
-          value += sep12 + indent.slice(trimIndent) + content;
-          sep12 = "\n";
+          value += sep13 + indent.slice(trimIndent) + content;
+          sep13 = "\n";
         } else if (indent.length > trimIndent || content[0] === "	") {
-          if (sep12 === " ")
-            sep12 = "\n";
-          else if (!prevMoreIndented && sep12 === "\n")
-            sep12 = "\n\n";
-          value += sep12 + indent.slice(trimIndent) + content;
-          sep12 = "\n";
+          if (sep13 === " ")
+            sep13 = "\n";
+          else if (!prevMoreIndented && sep13 === "\n")
+            sep13 = "\n\n";
+          value += sep13 + indent.slice(trimIndent) + content;
+          sep13 = "\n";
           prevMoreIndented = true;
         } else if (content === "") {
-          if (sep12 === "\n")
+          if (sep13 === "\n")
             value += "\n";
           else
-            sep12 = "\n";
+            sep13 = "\n";
         } else {
-          value += sep12 + content;
-          sep12 = " ";
+          value += sep13 + content;
+          sep13 = " ";
           prevMoreIndented = false;
         }
       }
@@ -66899,25 +67532,25 @@ var require_resolve_flow_scalar = __commonJS({
         trimBoth = /^[ \t]+|[ \t]+$/g;
       }
       let res = match[1].replace(trimEnd, "");
-      let sep12 = " ";
+      let sep13 = " ";
       let pos = line.lastIndex;
       while (match = line.exec(source)) {
         const lm = match[1].replace(trimBoth, "");
         if (lm === "") {
-          if (sep12 === "\n")
-            res += sep12;
+          if (sep13 === "\n")
+            res += sep13;
           else
-            sep12 = "\n";
+            sep13 = "\n";
         } else {
-          res += sep12 + lm;
-          sep12 = " ";
+          res += sep13 + lm;
+          sep13 = " ";
         }
         pos = line.lastIndex;
       }
       const last = /[ \t]*(.*)/sy;
       last.lastIndex = pos;
       match = last.exec(source);
-      return res + sep12 + (match?.[1] ?? "");
+      return res + sep13 + (match?.[1] ?? "");
     }
     function doubleQuotedValue(source, onError) {
       let res = "";
@@ -67727,14 +68360,14 @@ var require_cst_stringify = __commonJS({
         }
       }
     }
-    function stringifyItem({ start, key, sep: sep12, value }) {
+    function stringifyItem({ start, key, sep: sep13, value }) {
       let res = "";
       for (const st of start)
         res += st.source;
       if (key)
         res += stringifyToken(key);
-      if (sep12)
-        for (const st of sep12)
+      if (sep13)
+        for (const st of sep13)
           res += st.source;
       if (value)
         res += stringifyToken(value);
@@ -68901,18 +69534,18 @@ var require_parser = __commonJS({
         if (this.type === "map-value-ind") {
           const prev = getPrevProps(this.peek(2));
           const start = getFirstKeyStartProps(prev);
-          let sep12;
+          let sep13;
           if (scalar2.end) {
-            sep12 = scalar2.end;
-            sep12.push(this.sourceToken);
+            sep13 = scalar2.end;
+            sep13.push(this.sourceToken);
             delete scalar2.end;
           } else
-            sep12 = [this.sourceToken];
+            sep13 = [this.sourceToken];
           const map = {
             type: "block-map",
             offset: scalar2.offset,
             indent: scalar2.indent,
-            items: [{ start, key: scalar2, sep: sep12 }]
+            items: [{ start, key: scalar2, sep: sep13 }]
           };
           this.onKeyLine = true;
           this.stack[this.stack.length - 1] = map;
@@ -69065,15 +69698,15 @@ var require_parser = __commonJS({
                 } else if (isFlowToken(it.key) && !includesToken(it.sep, "newline")) {
                   const start2 = getFirstKeyStartProps(it.start);
                   const key = it.key;
-                  const sep12 = it.sep;
-                  sep12.push(this.sourceToken);
+                  const sep13 = it.sep;
+                  sep13.push(this.sourceToken);
                   delete it.key;
                   delete it.sep;
                   this.stack.push({
                     type: "block-map",
                     offset: this.offset,
                     indent: this.indent,
-                    items: [{ start: start2, key, sep: sep12 }]
+                    items: [{ start: start2, key, sep: sep13 }]
                   });
                 } else if (start.length > 0) {
                   it.sep = it.sep.concat(start, this.sourceToken);
@@ -69267,13 +69900,13 @@ var require_parser = __commonJS({
             const prev = getPrevProps(parent);
             const start = getFirstKeyStartProps(prev);
             fixFlowSeqItems(fc);
-            const sep12 = fc.end.splice(1, fc.end.length);
-            sep12.push(this.sourceToken);
+            const sep13 = fc.end.splice(1, fc.end.length);
+            sep13.push(this.sourceToken);
             const map = {
               type: "block-map",
               offset: fc.offset,
               indent: fc.indent,
-              items: [{ start, key: fc, sep: sep12 }]
+              items: [{ start, key: fc, sep: sep13 }]
             };
             this.onKeyLine = true;
             this.stack[this.stack.length - 1] = map;
@@ -71167,166 +71800,940 @@ var init_files = __esm({
   }
 });
 
-// ../../packages/oxagen/src/steering-repo/tokens.ts
-function utf8Length(text5) {
-  let bytes = 0;
-  for (const char of text5) {
-    const code = char.codePointAt(0);
-    if (code < 128) bytes += 1;
-    else if (code < 2048) bytes += 2;
-    else if (code < 65536) bytes += 3;
-    else bytes += 4;
+// ../../packages/tacho/src/columns.ts
+var ENVELOPE_COLUMNS, TACHO_EVENT_COLUMNS;
+var init_columns = __esm({
+  "../../packages/tacho/src/columns.ts"() {
+    "use strict";
+    init_chain();
+    init_envelope();
+    ENVELOPE_COLUMNS = [
+      // identity (2.1)
+      "host_enrollment_id",
+      "agent_key",
+      "agent_principal_id",
+      "initiating_principal_id",
+      "runtime",
+      "harness",
+      "harness_version",
+      "wrapper_version",
+      "wrapper_attestation",
+      "fidelity",
+      "enforcement_tier",
+      "fleet_id",
+      // anthropic observations (2.2)
+      "anthropic_user_id_hash",
+      "anthropic_account_uuid",
+      "anthropic_account_id",
+      "anthropic_org_uuid",
+      "api_key_source",
+      // session, causality, ordering (2.3)
+      "session_uuid",
+      "harness_session_id",
+      "root_session_uuid",
+      "parent_session_uuid",
+      "subagent_id",
+      "subagent_type",
+      "spawn_depth",
+      "spawn_tool_use_id",
+      "seq",
+      "event_id",
+      "event_id_idem",
+      "ts",
+      "turn_seq",
+      "prompt_id",
+      "turn_id",
+      "trace_id",
+      "span_id",
+      "parent_span_id",
+      "harness_event_sequence",
+      // kind and source (2.4)
+      "kind",
+      "source",
+      "hook_event_name",
+      "hook_source_kind",
+      "otel_event_name",
+      // context (2.5)
+      "cwd",
+      "project_dir",
+      "git_branch",
+      "git_head_sha",
+      "git_remote_digest",
+      "git_dirty",
+      "worktree_path",
+      "worktree_branch",
+      "permission_mode",
+      "effort",
+      "context_model",
+      "entrypoint",
+      "query_source",
+      "session_kind",
+      "terminal_type",
+      "app_version",
+      "output_style",
+      // host (2.14)
+      "hostname_digest",
+      "os_type",
+      "os_version",
+      "host_arch",
+      "os_user_digest",
+      "claude_pid",
+      "claude_ppid",
+      "claude_parent_process",
+      "claude_execpath",
+      "is_child_session",
+      "bridge_session_id",
+      "has_tty",
+      // chain and content (2.13, 2.15)
+      "prev_hash",
+      "hash",
+      "content_digest",
+      "bytes_ref",
+      "redactions",
+      "raw_source_digest",
+      "body",
+      "attrs"
+    ];
+    TACHO_EVENT_COLUMNS = [
+      ...ENVELOPE_COLUMNS,
+      ...BODY_MEMBER_NAMES
+    ];
   }
-  return bytes;
+});
+
+// ../../packages/tacho/src/evidence/merkle.ts
+import { createHash as createHash17 } from "node:crypto";
+function digestToBytes(digest7) {
+  if (!SHA256_DIGEST_PATTERN.test(digest7)) {
+    throw new TypeError(`not a sha256 digest: ${digest7}`);
+  }
+  return Buffer.from(digest7.slice("sha256:".length), "hex");
 }
-function countTokens(text5) {
-  return Math.ceil(utf8Length(text5) / 4);
+function hash2(...parts) {
+  const h = createHash17("sha256");
+  for (const part2 of parts) h.update(part2);
+  return h.digest();
 }
-var DEFAULT_ALWAYS_ON_TOKENS, DEFAULT_WORKSPACE_DEFINITION_BUDGET, DEFAULT_SERVER_DEFINITION_BUDGET, ALWAYS_ON_BODY_WORDS_WARN, SKILL_LINES_WARN, FOLDER_FILES_WARN, RECORD_BYTES_MAX, SKILL_ASSET_BYTES_MAX, OPENAPI_BYTES_MAX, DESCRIPTION_MAX, SKILL_DESCRIPTION_MAX;
-var init_tokens = __esm({
-  "../../packages/oxagen/src/steering-repo/tokens.ts"() {
+function largestPowerOfTwoBelow(n4) {
+  let k = 1;
+  while (k * 2 < n4) k *= 2;
+  return k;
+}
+function treeHash(leaves) {
+  if (leaves.length === 0) return hash2();
+  if (leaves.length === 1) return hash2(LEAF_PREFIX, leaves[0]);
+  const k = largestPowerOfTwoBelow(leaves.length);
+  return hash2(
+    NODE_PREFIX,
+    treeHash(leaves.slice(0, k)),
+    treeHash(leaves.slice(k))
+  );
+}
+function merkleRoot(digests) {
+  const leaves = digests.map(digestToBytes);
+  return `sha256:${treeHash(leaves).toString("hex")}`;
+}
+var LEAF_PREFIX, NODE_PREFIX;
+var init_merkle = __esm({
+  "../../packages/tacho/src/evidence/merkle.ts"() {
     "use strict";
-    DEFAULT_ALWAYS_ON_TOKENS = 4e3;
-    DEFAULT_WORKSPACE_DEFINITION_BUDGET = 2e4;
-    DEFAULT_SERVER_DEFINITION_BUDGET = 8e3;
-    ALWAYS_ON_BODY_WORDS_WARN = 120;
-    SKILL_LINES_WARN = 500;
-    FOLDER_FILES_WARN = 800;
-    RECORD_BYTES_MAX = 256 * 1024;
-    SKILL_ASSET_BYTES_MAX = 1024 * 1024;
-    OPENAPI_BYTES_MAX = 25 * 1024 * 1024;
-    DESCRIPTION_MAX = 200;
-    SKILL_DESCRIPTION_MAX = 1024;
+    init_digest();
+    LEAF_PREFIX = Buffer.from([0]);
+    NODE_PREFIX = Buffer.from([1]);
   }
 });
 
-// ../../packages/oxagen/src/steering-repo/record.ts
-function effectiveLoad(record) {
-  if (record.load) return record.load;
-  return record.force === "must" || record.force === "should" ? "always" : "relevant";
-}
-function isAlwaysOn(record) {
-  return record.status === "active" && (record.force === "must" || record.force === "should") && effectiveLoad(record) === "always";
-}
-function splitRecordFile(text5) {
-  const lines = text5.split("\n");
-  if (lines[0] !== "---") {
-    return {
-      ok: false,
-      issue: {
-        line: 1,
-        field: null,
-        message: "a record starts with --- on its own line"
-      }
-    };
+// ../../packages/tacho/src/evidence/archive-segment.ts
+var encoder3, decoder;
+var init_archive_segment = __esm({
+  "../../packages/tacho/src/evidence/archive-segment.ts"() {
+    "use strict";
+    init_digest();
+    init_merkle();
+    encoder3 = new TextEncoder();
+    decoder = new TextDecoder("utf-8", { fatal: true });
   }
-  const close = lines.indexOf("---", 1);
-  if (close < 0) {
-    return {
-      ok: false,
-      issue: {
-        line: 1,
-        field: null,
-        message: "the frontmatter has no closing --- line"
-      }
-    };
+});
+
+// ../../packages/tacho/src/evidence/transcript-kinds.ts
+function isTranscriptKind(value) {
+  return typeof value === "string" && TRANSCRIPT_KINDS.includes(value);
+}
+var TRANSCRIPT_KINDS;
+var init_transcript_kinds = __esm({
+  "../../packages/tacho/src/evidence/transcript-kinds.ts"() {
+    "use strict";
+    TRANSCRIPT_KINDS = [
+      /**
+       * The prompt an operator typed to open a turn: a `turn_start` on the run's
+       * own chain. The request half of a model call is the context the model was
+       * sent, and answers no chip.
+       */
+      "prompt",
+      /**
+       * What came back: a model call's response half or single receipt whose
+       * body was kept, and a reply the harness reported with its words kept
+       * (`turn_end`, or a message recorded as a response).
+       */
+      "responses",
+      /**
+       * A model call that spent reasoning tokens (`thinking_tokens`). The text of
+       * the reasoning shows where the recorder kept the stream; the count shows
+       * wherever the provider reported it.
+       */
+      "thinking",
+      /** Either half of a tool call. */
+      "tools",
+      /** A decision a rule or a person made about a call: allow, deny, route. */
+      "policy",
+      /**
+       * A frame that carried a cost record or token counts without one, or a
+       * model call that recorded the reasoning effort it ran at.
+       */
+      "usage",
+      /** What was pulled into the model's context. */
+      "recall",
+      /**
+       * The run's own stop: the wrapped agent's `agent_stop` on the run's own
+       * chain, or the ledger event that closes an attempt before its seal. The
+       * chain's checkpoints and gaps are read on the Chain tab, not here.
+       */
+      "seal",
+      /** A call that did not do what it was asked to. */
+      "errors"
+    ];
   }
-  return {
-    ok: true,
-    parts: {
-      frontmatter: lines.slice(1, close).join("\n"),
-      body: lines.slice(close + 1).join("\n"),
-      body_line: close + 2
-    }
-  };
+});
+
+// ../../packages/tacho/src/evidence/attestation.ts
+import {
+  createPrivateKey as createPrivateKey2,
+  createPublicKey as createPublicKey4,
+  sign as sign3,
+  verify as verify5
+} from "node:crypto";
+function attestationBytes(payload) {
+  return Buffer.from(jcs(payload), "utf8");
 }
-function strictSubsetIssues(doc, lineOf) {
-  const issues = [];
-  const at = (range) => range ? lineOf(range[0]) : null;
-  (0, import_yaml.visit)(doc, {
-    Alias(_key, node2) {
-      issues.push({
-        line: at(node2.range),
-        field: null,
-        message: "the frontmatter uses a YAML alias. Write the value out."
-      });
+function verifyAttestation(attestation, publicKeyPem) {
+  if (attestation.alg !== "ed25519") return false;
+  if (attestation.key_id !== keyIdForPublicKey(publicKeyPem)) return false;
+  try {
+    return verify5(
+      null,
+      attestationBytes(attestation.payload),
+      createPublicKey4(publicKeyPem),
+      Buffer.from(attestation.sig, "base64")
+    );
+  } catch {
+    return false;
+  }
+}
+var init_attestation = __esm({
+  "../../packages/tacho/src/evidence/attestation.ts"() {
+    "use strict";
+    init_digest();
+    init_key_id();
+  }
+});
+
+// ../../packages/tacho/src/evidence/run-export.ts
+function normalizeInstant(value) {
+  const m = /^(\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})(?:\.(\d+))?(Z|[+-]\d{2}(?::?\d{2})?)$/.exec(
+    value
+  );
+  if (!m) return value;
+  const [, day, time, frac, zone] = m;
+  const ms = (frac ?? "").slice(0, 3).padEnd(3, "0");
+  let offset = zone;
+  if (zone !== "Z") {
+    const digits = zone.slice(1).replace(":", "");
+    offset = `${zone[0]}${digits.slice(0, 2)}:${(digits.slice(2) || "00").padEnd(2, "0")}`;
+  }
+  const instant3 = /* @__PURE__ */ new Date(`${day}T${time}.${ms}${offset}`);
+  return Number.isNaN(instant3.getTime()) ? value : instant3.toISOString();
+}
+function wrappedFrameOf(event, bytesRef) {
+  const body2 = asRecord2(event["body"]) ?? {};
+  const content = asRecord2(event["content"]);
+  const turn = asRecord2(event["turn"]);
+  const text5 = (value) => typeof value === "string" ? value : "";
+  const count12 = (value) => typeof value === "number" ? value : null;
+  return {
+    event_id: event["event_id"] ?? null,
+    seq: event["seq"] ?? null,
+    ts: event["ts"] ?? null,
+    kind: event["kind"] ?? null,
+    prev_hash: event["prev_hash"] ?? null,
+    hash: event["hash"] ?? null,
+    content: {
+      digest: content?.["digest"] ?? null,
+      bytes_ref: bytesRef,
+      redactions: content?.["redactions"] ?? []
     },
-    Node(_key, node2) {
-      if (node2.anchor) {
-        issues.push({
-          line: at(node2.range),
-          field: null,
-          message: "the frontmatter uses a YAML anchor. Write the value out."
-        });
+    body: event["body"] ?? null,
+    tool_name: text5(body2["tool_name"]),
+    tool_status: text5(body2["tool_status"]),
+    tool_use_id: text5(body2["tool_use_id"]),
+    model: text5(body2["model"]),
+    provider: text5(body2["provider"]),
+    policy_decision: text5(body2["policy_decision"]),
+    cost_usd_micros: count12(body2["cost_usd_micros"]),
+    turn_seq: count12(turn?.["turn_seq"]),
+    event
+  };
+}
+function asRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+}
+function tally(counts) {
+  return [...counts.entries()].map(([kind, { count: count12, frames }]) => ({ kind, count: count12, frames })).sort((a, b5) => a.kind.localeCompare(b5.kind));
+}
+function summarizeRunExportRedactions(envelopes) {
+  const redacted = /* @__PURE__ */ new Map();
+  const withheld = /* @__PURE__ */ new Map();
+  const bump = (map, kind, count12) => {
+    const entry2 = map.get(kind) ?? { count: 0, frames: 0 };
+    entry2.count += count12;
+    entry2.frames += 1;
+    map.set(kind, entry2);
+  };
+  let total2 = 0;
+  for (const envelope2 of envelopes) {
+    const frame = asRecord2(envelope2);
+    if (!frame) continue;
+    const content = asRecord2(frame["content"]);
+    const list = content?.["redactions"];
+    if (Array.isArray(list)) {
+      const perReason = /* @__PURE__ */ new Map();
+      for (const item of list) {
+        const reason3 = asRecord2(item)?.["reason"];
+        const kind = typeof reason3 === "string" ? reason3 : "unknown";
+        perReason.set(kind, (perReason.get(kind) ?? 0) + 1);
       }
-      if (node2.tag) {
-        issues.push({
-          line: at(node2.range),
-          field: null,
-          message: `the frontmatter uses the YAML tag ${node2.tag}. Remove it.`
-        });
+      for (const [kind, count12] of perReason) {
+        bump(redacted, kind, count12);
+        total2 += count12;
       }
     }
+    if (typeof content?.["bytes_ref"] === "string") {
+      bump(withheld, WITHHELD_BODY, 1);
+    }
+    if (typeof frame["encrypted_payload_ref"] === "string") {
+      bump(withheld, WITHHELD_ENCRYPTED_PAYLOAD, 1);
+    }
+  }
+  return {
+    format: RUN_EXPORT_REDACTIONS_FORMAT,
+    redacted: tally(redacted),
+    redacted_total: total2,
+    withheld: tally(withheld)
+  };
+}
+function digestOf2(frame) {
+  const value = frame["event_digest"] ?? frame["hash"];
+  return typeof value === "string" && DIGEST2.test(value) ? value : null;
+}
+function safeDigestJcs(value) {
+  try {
+    return digestJcs(value);
+  } catch {
+    return null;
+  }
+}
+function checkWrappedFrame(frame, attemptId) {
+  if (frame["event"] === void 0 || frame["event"] === null) {
+    return { digest: "not_carried", reasons: [] };
+  }
+  const event = asRecord2(frame["event"]);
+  if (!event) {
+    return { digest: "broken", reasons: ["event is not a JSON object"] };
+  }
+  const reasons = [];
+  if (event["session_uuid"] !== attemptId) {
+    reasons.push(
+      `the event belongs to session ${String(event["session_uuid"])}, not ${attemptId}`
+    );
+  }
+  let holds2;
+  try {
+    holds2 = eventHashHolds(event, frame["hash"]);
+  } catch {
+    holds2 = false;
+  }
+  if (!holds2) {
+    reasons.push("the event does not hash to hash");
+  }
+  const content = asRecord2(frame["content"]);
+  const bytesRef = typeof content?.["bytes_ref"] === "string" ? content["bytes_ref"] : null;
+  const expected = wrappedFrameOf(event, bytesRef);
+  const differs2 = [
+    .../* @__PURE__ */ new Set([...Object.keys(expected), ...Object.keys(frame)])
+  ].filter((name) => name !== "event").filter((name) => {
+    const shown2 = frame[name];
+    const read2 = expected[name];
+    if (shown2 === void 0 || read2 === void 0) return true;
+    return jcs(shown2) !== jcs(read2);
+  }).sort();
+  if (differs2.length > 0) {
+    const verb = differs2.length === 1 ? "differs" : "differ";
+    reasons.push(`${differs2.join(", ")} ${verb} from the hashed event`);
+  }
+  return { digest: reasons.length > 0 ? "broken" : "held", reasons };
+}
+function checkLedgerFrame(frame) {
+  const reasons = [];
+  const payloadDigest = frame["payload_digest"];
+  let digest7 = "held";
+  if (frame["payload_inline"] !== null && frame["payload_inline"] !== void 0) {
+    const recomputed2 = safeDigestJcs(frame["payload_inline"]);
+    if (recomputed2 !== payloadDigest) {
+      digest7 = "broken";
+      reasons.push("payload does not hash to payload_digest");
+    }
+  } else if (typeof frame["encrypted_payload_ref"] !== "string") {
+    digest7 = "broken";
+    reasons.push("frame carries neither a payload nor an encrypted reference");
+  }
+  const recomputed = safeDigestJcs({
+    attempt_seq: frame["attempt_seq"] ?? null,
+    event_schema_version: frame["event_schema_version"] ?? null,
+    event_type: frame["event_type"] ?? null,
+    stage: frame["stage"] ?? null,
+    payload_digest: payloadDigest ?? null,
+    observed_at: typeof frame["observed_at"] === "string" ? normalizeInstant(frame["observed_at"]) : frame["observed_at"] ?? null
   });
-  return issues;
+  if (recomputed !== frame["event_digest"]) {
+    digest7 = "broken";
+    reasons.push("identity fields do not hash to event_digest");
+  }
+  return { digest: digest7, reasons };
 }
-function parseFrontmatter(yamlText, firstLine3 = 2) {
-  const counter = new import_yaml.LineCounter();
-  const lineOf = (offset) => counter.linePos(offset).line + firstLine3 - 1;
-  const docs = (0, import_yaml.parseAllDocuments)(yamlText, {
-    lineCounter: counter,
-    uniqueKeys: true
+function parseJson2(text5, name, checks) {
+  try {
+    return JSON.parse(text5);
+  } catch {
+    checks.push({ name, status: "broken", detail: `${name} is not JSON` });
+    return null;
+  }
+}
+function verifyRunExport(files3) {
+  const checks = [];
+  const hold = (name, ok2, held, broken) => checks.push({
+    name,
+    status: ok2 ? "held" : "broken",
+    detail: ok2 ? held : broken
   });
-  const doc = docs[0];
-  if (docs.length !== 1 || doc === void 0) {
+  const manifest = parseJson2(
+    files3["manifest.json"],
+    "manifest",
+    checks
+  );
+  const attestationFile = parseJson2(
+    files3["attestation.json"],
+    "attestation",
+    checks
+  );
+  const raw = files3["frames.ndjson"];
+  const text5 = raw.endsWith("\n") ? raw.slice(0, -1) : raw;
+  const lines = text5.length === 0 ? [] : text5.split("\n");
+  const frames = [];
+  const verdicts = [];
+  lines.forEach((line, i2) => {
+    let parsed2 = null;
+    try {
+      parsed2 = asRecord2(JSON.parse(line));
+    } catch {
+      parsed2 = null;
+    }
+    frames.push(parsed2 ?? {});
+    if (!parsed2) {
+      verdicts.push({
+        line: i2 + 1,
+        attempt_id: "",
+        seq: null,
+        status: "broken",
+        digest: "broken",
+        link: "broken",
+        reasons: ["line is not a JSON object"]
+      });
+    }
+  });
+  if (!manifest || !attestationFile) {
     return {
       ok: false,
-      issues: [
-        {
-          line: firstLine3,
-          field: null,
-          message: docs.length === 0 ? "the frontmatter is empty" : "the frontmatter holds more than one YAML document"
-        }
-      ]
+      run_id: manifest?.run_id ?? null,
+      format: manifest?.format ?? null,
+      frames: verdicts,
+      checks,
+      redactions: null
     };
   }
-  const issues = doc.errors.map((error) => ({
-    line: error.linePos ? error.linePos[0].line + firstLine3 - 1 : null,
-    field: null,
-    message: error.message.split("\n", 1)[0]
-  }));
-  issues.push(...strictSubsetIssues(doc, lineOf));
-  if (issues.length > 0) return { ok: false, issues };
-  if (!(0, import_yaml.isMap)(doc.contents)) {
-    return {
-      ok: false,
-      issues: [
-        {
-          line: firstLine3,
-          field: null,
-          message: "the frontmatter is not a mapping of fields"
+  hold(
+    "format",
+    ACCEPTED_FORMATS.has(manifest.format),
+    manifest.format,
+    `unknown bundle format ${String(manifest.format)}`
+  );
+  hold(
+    "source",
+    typeof manifest.run_id === "string" && (manifest.source === "ledger" && manifest.run_id.startsWith("arun_") || manifest.source === "tacho" && manifest.run_id.startsWith("tse_")),
+    "the source matches the run identifier",
+    "the source is invalid or does not match the run identifier"
+  );
+  const byLine = new Map(verdicts.map((v) => [v.line, v]));
+  let offset = 0;
+  for (const attempt of manifest.attempts ?? []) {
+    let prevHash = null;
+    let prevSeq = null;
+    let stream = EMPTY_EVENT_STREAM_DIGEST;
+    const end = Math.min(offset + attempt.frame_count, frames.length);
+    for (let i2 = offset; i2 < end; i2 += 1) {
+      const line = i2 + 1;
+      if (byLine.has(line)) continue;
+      const frame = frames[i2];
+      const reasons = [];
+      let digest7;
+      let link = "held";
+      let seq = null;
+      if (manifest.source === "ledger") {
+        const own = checkLedgerFrame(frame);
+        digest7 = own.digest;
+        reasons.push(...own.reasons);
+        const attemptSeq = frame["attempt_seq"];
+        seq = typeof attemptSeq === "number" ? attemptSeq : null;
+        const expected = prevSeq === null ? 1 : prevSeq + 1;
+        if (seq !== expected) {
+          link = "broken";
+          reasons.push(`attempt_seq ${String(seq)} where ${expected} was due`);
         }
-      ]
-    };
+        prevSeq = seq;
+        stream = digestJcs({
+          previous: stream,
+          entry: [
+            frame["attempt_seq"] ?? null,
+            frame["event_schema_version"] ?? null,
+            frame["event_type"] ?? null,
+            frame["payload_digest"] ?? null
+          ]
+        });
+      } else {
+        const own = checkWrappedFrame(frame, attempt.attempt_id);
+        digest7 = own.digest;
+        reasons.push(...own.reasons);
+        const rawSeq = frame["seq"];
+        seq = typeof rawSeq === "number" ? rawSeq : null;
+        const expectedPrev = prevHash ?? (seq === 0 ? GENESIS_PREV_HASH2 : null);
+        if (expectedPrev !== null && frame["prev_hash"] !== expectedPrev) {
+          link = "broken";
+          reasons.push(
+            prevHash === null ? 'genesis prev_hash is not sha256("")' : "prev_hash is not the previous frame's hash"
+          );
+        }
+        if (prevSeq !== null && seq !== prevSeq + 1) {
+          link = "broken";
+          reasons.push(`seq ${String(seq)} where ${prevSeq + 1} was due`);
+        }
+        prevSeq = seq;
+        prevHash = typeof frame["hash"] === "string" ? frame["hash"] : null;
+      }
+      if (digestOf2(frame) === null) {
+        digest7 = "broken";
+        reasons.push("frame carries no sha256 digest");
+      }
+      verdicts.push({
+        line,
+        attempt_id: attempt.attempt_id,
+        seq,
+        status: digest7 === "broken" || link === "broken" ? "broken" : "held",
+        digest: digest7,
+        link,
+        reasons
+      });
+    }
+    if (manifest.source === "ledger" && typeof attempt.event_stream_digest === "string") {
+      hold(
+        `stream ${attempt.attempt_id}`,
+        stream === attempt.event_stream_digest,
+        "the frames fold to the sealed event_stream_digest",
+        `the frames fold to ${stream}, the seal recorded ${attempt.event_stream_digest}`
+      );
+    }
+    offset += attempt.frame_count;
   }
-  const key_lines = /* @__PURE__ */ new Map();
-  for (const pair of doc.contents.items) {
-    if ((0, import_yaml.isScalar)(pair.key) && pair.key.range) {
-      key_lines.set(String(pair.key.value), lineOf(pair.key.range[0]));
+  for (let i2 = offset; i2 < frames.length; i2 += 1) {
+    if (byLine.has(i2 + 1)) continue;
+    verdicts.push({
+      line: i2 + 1,
+      attempt_id: "",
+      seq: null,
+      status: "broken",
+      digest: "broken",
+      link: "broken",
+      reasons: ["frame lies outside every attested attempt"]
+    });
+  }
+  verdicts.sort((a, b5) => a.line - b5.line);
+  hold(
+    "frame count",
+    frames.length === manifest.frame_count,
+    `${frames.length} frames`,
+    `${frames.length} frames where the manifest says ${manifest.frame_count}`
+  );
+  const digests = frames.map(digestOf2);
+  const allDigests = digests.every((d) => d !== null);
+  const root = allDigests ? merkleRoot(digests) : null;
+  hold(
+    "merkle root",
+    root === manifest.merkle_root,
+    `root ${manifest.merkle_root}`,
+    `frames hash to ${root ?? "nothing"}, the manifest says ${manifest.merkle_root}`
+  );
+  const pem = attestationFile.public_key_pem;
+  let keyId = null;
+  try {
+    keyId = keyIdForPublicKey(pem);
+  } catch {
+    keyId = null;
+  }
+  hold(
+    "attester key",
+    keyId !== null && keyId === attestationFile.key_id && keyId === manifest.attester_key_id,
+    `key ${String(keyId)}`,
+    "the bundled public key does not match the recorded key id"
+  );
+  let covered = 0;
+  const attestations = attestationFile.attestations ?? [];
+  attestations.forEach((a, i2) => {
+    const attemptId = a.payload?.attempt_id ?? `#${i2 + 1}`;
+    hold(
+      `signature ${attemptId}`,
+      keyId !== null && verifyAttestation(a, pem),
+      "Ed25519 signature verifies",
+      "the attestation signature does not verify"
+    );
+    const slice = digests.slice(
+      covered,
+      covered + (a.payload?.frame_count ?? 0)
+    );
+    if (manifest.source === "tacho") {
+      const exportedDigest = digestBytes(
+        lines.slice(covered, covered + (a.payload?.frame_count ?? 0)).join("\n")
+      );
+      hold(
+        `exported content ${attemptId}`,
+        exportedDigest === a.payload?.archive_segment_digest,
+        "the exported frame bytes match the signed segment digest",
+        "the exported frame bytes do not match the signed segment digest"
+      );
+    }
+    hold(
+      `run identity ${attemptId}`,
+      a.payload?.run_id === manifest.run_id,
+      "the attestation names this run",
+      "the manifest run differs from the signed run"
+    );
+    covered += a.payload?.frame_count ?? 0;
+    const attemptRoot = slice.every((d) => d !== null) ? merkleRoot(slice) : null;
+    hold(
+      `attested root ${attemptId}`,
+      attemptRoot === a.payload?.merkle_root,
+      "the attempt's frames hash to the signed root",
+      `the attempt's frames hash to ${attemptRoot ?? "nothing"}, the attestation signed ${String(a.payload?.merkle_root)}`
+    );
+  });
+  hold(
+    "coverage",
+    covered === frames.length && attestations.length > 0,
+    "the attestations cover every frame",
+    `the attestations cover ${covered} of ${frames.length} frames`
+  );
+  let redactions = null;
+  const redactionsText = files3["redactions.json"];
+  if (redactionsText !== void 0) {
+    redactions = parseJson2(
+      redactionsText,
+      "redactions",
+      checks
+    );
+    if (redactions) {
+      const recomputed = summarizeRunExportRedactions(frames);
+      hold(
+        "redactions",
+        digestJcs(recomputed) === digestJcs(redactions),
+        `${recomputed.redacted_total} redaction(s) summarised`,
+        "redactions.json does not match what the frames record"
+      );
     }
+  } else if (manifest.format !== FORMAT_1) {
+    hold("redactions", false, "", "redactions.json is missing");
   }
+  const ok = verdicts.length === frames.length && verdicts.every((v) => v.status === "held") && checks.every((c) => c.status === "held");
   return {
-    ok: true,
-    frontmatter: {
-      value: doc.toJS({ maxAliasCount: 0 }),
-      key_lines
-    }
+    ok,
+    run_id: manifest.run_id,
+    format: manifest.format,
+    frames: verdicts,
+    checks,
+    redactions
   };
 }
-function readSteeringRecord(text5) {
-  const encoding = encodingIssues(text5);
-  if (encoding.length > 0) return { ok: false, issues: encoding };
-  const split = splitRecordFile(text5);
+var RUN_EXPORT_FORMAT, FORMAT_1, ACCEPTED_FORMATS, RUN_EXPORT_REDACTIONS_FORMAT, GENESIS_PREV_HASH2, EMPTY_EVENT_STREAM_DIGEST, DIGEST2, WITHHELD_BODY, WITHHELD_ENCRYPTED_PAYLOAD;
+var init_run_export = __esm({
+  "../../packages/tacho/src/evidence/run-export.ts"() {
+    "use strict";
+    init_chain();
+    init_digest();
+    init_key_id();
+    init_attestation();
+    init_merkle();
+    RUN_EXPORT_FORMAT = "oxagen.run-export/3";
+    FORMAT_1 = "oxagen.run-export/1";
+    ACCEPTED_FORMATS = /* @__PURE__ */ new Set([
+      FORMAT_1,
+      "oxagen.run-export/2",
+      RUN_EXPORT_FORMAT
+    ]);
+    RUN_EXPORT_REDACTIONS_FORMAT = "oxagen.run-export.redactions/1";
+    GENESIS_PREV_HASH2 = digestBytes("");
+    EMPTY_EVENT_STREAM_DIGEST = digestJcs([]);
+    DIGEST2 = /^sha256:[0-9a-f]{64}$/;
+    WITHHELD_BODY = "frame_body";
+    WITHHELD_ENCRYPTED_PAYLOAD = "encrypted_payload";
+  }
+});
+
+// ../../packages/tacho/src/evidence/index.ts
+var init_evidence = __esm({
+  "../../packages/tacho/src/evidence/index.ts"() {
+    "use strict";
+    init_archive_segment();
+    init_merkle();
+    init_redaction();
+    init_retention();
+    init_replay_grade();
+    init_transcript_kinds();
+    init_attestation();
+    init_frame_body();
+    init_run_export();
+  }
+});
+
+// ../../packages/tacho/src/session-subject.ts
+var ENRICHMENT_BUDGET_NOTE, ENRICHMENT_LIMIT_NOTE, PARTIAL_NOTE_HEAD, PARTIAL_NOTE_TAIL, escapeRegExp2, NOTE_SOURCE, TRAILING_NOTES, GITHUB_REF_SOURCE;
+var init_session_subject = __esm({
+  "../../packages/tacho/src/session-subject.ts"() {
+    "use strict";
+    ENRICHMENT_BUDGET_NOTE = " The account covers only the start of the run: its enrichment budget ran out before the rest was read.";
+    ENRICHMENT_LIMIT_NOTE = " The account covers only the start of the run because its transcript reached a read limit.";
+    PARTIAL_NOTE_HEAD = "Evidence is partial: ";
+    PARTIAL_NOTE_TAIL = " recorded bodies were unavailable.";
+    escapeRegExp2 = (text5) => text5.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    NOTE_SOURCE = [
+      `${escapeRegExp2(PARTIAL_NOTE_HEAD)}\\d+${escapeRegExp2(PARTIAL_NOTE_TAIL)}`,
+      escapeRegExp2(ENRICHMENT_BUDGET_NOTE.trim()),
+      escapeRegExp2(ENRICHMENT_LIMIT_NOTE.trim())
+    ].join("|");
+    TRAILING_NOTES = new RegExp(
+      `(?:^|\\s)((?:${NOTE_SOURCE})(?:\\s(?:${NOTE_SOURCE}))*)$`,
+      "u"
+    );
+    GITHUB_REF_SOURCE = String.raw`\bhttps?:\/\/(?:www\.)?github\.com\/[\w.-]+\/[\w.-]+\/(pull|issues)\/(\d+)\S*`;
+  }
+});
+
+// ../../packages/tacho/src/session-title.ts
+var init_session_title = __esm({
+  "../../packages/tacho/src/session-title.ts"() {
+    "use strict";
+    init_session_subject();
+  }
+});
+
+// ../../packages/tacho/src/index.ts
+var init_src4 = __esm({
+  "../../packages/tacho/src/index.ts"() {
+    "use strict";
+    init_chain();
+    init_columns();
+    init_digest();
+    init_envelope();
+    init_harness_limits();
+    init_ids();
+    init_interjection();
+    init_record_basis();
+    init_remote();
+    init_timestamp();
+    init_wire();
+    init_evidence();
+    init_llm_call_dedupe();
+    init_session_subject();
+    init_session_title();
+    init_context_window();
+  }
+});
+
+// ../../packages/oxagen/src/steering-repo/tokens.ts
+function utf8Length(text5) {
+  let bytes = 0;
+  for (const char of text5) {
+    const code = char.codePointAt(0);
+    if (code < 128) bytes += 1;
+    else if (code < 2048) bytes += 2;
+    else if (code < 65536) bytes += 3;
+    else bytes += 4;
+  }
+  return bytes;
+}
+function countTokens(text5) {
+  return Math.ceil(utf8Length(text5) / 4);
+}
+var DEFAULT_ALWAYS_ON_TOKENS, DEFAULT_WORKSPACE_DEFINITION_BUDGET, DEFAULT_SERVER_DEFINITION_BUDGET, ALWAYS_ON_BODY_WORDS_WARN, SKILL_LINES_WARN, FOLDER_FILES_WARN, RECORD_BYTES_MAX, SKILL_ASSET_BYTES_MAX, OPENAPI_BYTES_MAX, DESCRIPTION_MAX, SKILL_DESCRIPTION_MAX;
+var init_tokens = __esm({
+  "../../packages/oxagen/src/steering-repo/tokens.ts"() {
+    "use strict";
+    init_src4();
+    DEFAULT_ALWAYS_ON_TOKENS = LARGEST_PREFIX_BUDGET_TOKENS;
+    DEFAULT_WORKSPACE_DEFINITION_BUDGET = 2e4;
+    DEFAULT_SERVER_DEFINITION_BUDGET = 8e3;
+    ALWAYS_ON_BODY_WORDS_WARN = 120;
+    SKILL_LINES_WARN = 500;
+    FOLDER_FILES_WARN = 800;
+    RECORD_BYTES_MAX = 256 * 1024;
+    SKILL_ASSET_BYTES_MAX = 1024 * 1024;
+    OPENAPI_BYTES_MAX = 25 * 1024 * 1024;
+    DESCRIPTION_MAX = 200;
+    SKILL_DESCRIPTION_MAX = 1024;
+  }
+});
+
+// ../../packages/oxagen/src/steering-repo/record.ts
+function effectiveLoad(record) {
+  if (record.load) return record.load;
+  return record.force === "must" || record.force === "should" ? "always" : "relevant";
+}
+function isAlwaysOn(record) {
+  return record.status === "active" && (record.force === "must" || record.force === "should") && effectiveLoad(record) === "always";
+}
+function splitRecordFile(text5) {
+  const lines = text5.split("\n");
+  if (lines[0] !== "---") {
+    return {
+      ok: false,
+      issue: {
+        line: 1,
+        field: null,
+        message: "a record starts with --- on its own line"
+      }
+    };
+  }
+  const close = lines.indexOf("---", 1);
+  if (close < 0) {
+    return {
+      ok: false,
+      issue: {
+        line: 1,
+        field: null,
+        message: "the frontmatter has no closing --- line"
+      }
+    };
+  }
+  return {
+    ok: true,
+    parts: {
+      frontmatter: lines.slice(1, close).join("\n"),
+      body: lines.slice(close + 1).join("\n"),
+      body_line: close + 2
+    }
+  };
+}
+function strictSubsetIssues(doc, lineOf) {
+  const issues = [];
+  const at = (range) => range ? lineOf(range[0]) : null;
+  (0, import_yaml.visit)(doc, {
+    Alias(_key, node2) {
+      issues.push({
+        line: at(node2.range),
+        field: null,
+        message: "the frontmatter uses a YAML alias. Write the value out."
+      });
+    },
+    Node(_key, node2) {
+      if (node2.anchor) {
+        issues.push({
+          line: at(node2.range),
+          field: null,
+          message: "the frontmatter uses a YAML anchor. Write the value out."
+        });
+      }
+      if (node2.tag) {
+        issues.push({
+          line: at(node2.range),
+          field: null,
+          message: `the frontmatter uses the YAML tag ${node2.tag}. Remove it.`
+        });
+      }
+    }
+  });
+  return issues;
+}
+function parseFrontmatter(yamlText, firstLine3 = 2) {
+  const counter = new import_yaml.LineCounter();
+  const lineOf = (offset) => counter.linePos(offset).line + firstLine3 - 1;
+  const docs = (0, import_yaml.parseAllDocuments)(yamlText, {
+    lineCounter: counter,
+    uniqueKeys: true
+  });
+  const doc = docs[0];
+  if (docs.length !== 1 || doc === void 0) {
+    return {
+      ok: false,
+      issues: [
+        {
+          line: firstLine3,
+          field: null,
+          message: docs.length === 0 ? "the frontmatter is empty" : "the frontmatter holds more than one YAML document"
+        }
+      ]
+    };
+  }
+  const issues = doc.errors.map((error) => ({
+    line: error.linePos ? error.linePos[0].line + firstLine3 - 1 : null,
+    field: null,
+    message: error.message.split("\n", 1)[0]
+  }));
+  issues.push(...strictSubsetIssues(doc, lineOf));
+  if (issues.length > 0) return { ok: false, issues };
+  if (!(0, import_yaml.isMap)(doc.contents)) {
+    return {
+      ok: false,
+      issues: [
+        {
+          line: firstLine3,
+          field: null,
+          message: "the frontmatter is not a mapping of fields"
+        }
+      ]
+    };
+  }
+  const key_lines = /* @__PURE__ */ new Map();
+  for (const pair of doc.contents.items) {
+    if ((0, import_yaml.isScalar)(pair.key) && pair.key.range) {
+      key_lines.set(String(pair.key.value), lineOf(pair.key.range[0]));
+    }
+  }
+  return {
+    ok: true,
+    frontmatter: {
+      value: doc.toJS({ maxAliasCount: 0 }),
+      key_lines
+    }
+  };
+}
+function readSteeringRecord(text5) {
+  const encoding = encodingIssues(text5);
+  if (encoding.length > 0) return { ok: false, issues: encoding };
+  const split = splitRecordFile(text5);
   if (!split.ok) return { ok: false, issues: [split.issue] };
   const { frontmatter, body: body2, body_line } = split.parts;
   const parsed2 = parseFrontmatter(frontmatter);
@@ -71365,7 +72772,7 @@ function stampRecord(frontmatter, body2) {
   const id2 = `rec_${recordSlug(String(frontmatter.lineage))}_${seed.slice(7, 19)}`;
   return { id: id2, hash: digest6({ ...preimage, id: id2 }) };
 }
-var import_yaml, recordScopeSchema, recordStatusSchema, recordOriginSchema, recordLoadSchema, provenanceMemorySchema, recordProvenanceSchema, recordDateSchema, decisionStatusSchema, decisionSourceSchema, decisionFieldsSchema, declassificationShared, textDeclassificationSchema, standingDeclassificationSchema, declassificationFieldsSchema, recordShape, STEERING_RECORD_FIELDS, steeringRecordSchema;
+var import_yaml, recordStatusSchema, recordOriginSchema, provenanceMemorySchema, recordProvenanceSchema, recordDateSchema, decisionStatusSchema, decisionSourceSchema, decisionFieldsSchema, declassificationShared, textDeclassificationSchema, standingDeclassificationSchema, declassificationFieldsSchema, recordShape, STEERING_RECORD_FIELDS, steeringRecordSchema;
 var init_record = __esm({
   "../../packages/oxagen/src/steering-repo/record.ts"() {
     "use strict";
@@ -71380,22 +72787,13 @@ var init_record = __esm({
     init_record_effect();
     init_record_force();
     init_record_kind();
+    init_record_scope();
     init_record_effect();
     init_record_force();
     init_record_kind();
-    recordScopeSchema = external_exports.enum([
-      "workspace",
-      "repository",
-      "organization"
-    ]);
+    init_record_scope();
     recordStatusSchema = external_exports.enum(["active", "archived"]);
     recordOriginSchema = external_exports.enum(["user", "inferred"]);
-    recordLoadSchema = external_exports.enum([
-      "always",
-      "match",
-      "relevant",
-      "mention"
-    ]);
     provenanceMemorySchema = external_exports.object({
       agent: external_exports.string().nullable(),
       run: external_exports.string().nullable(),
@@ -71706,7 +73104,7 @@ function classifyServer(parts) {
   return "unknown";
 }
 function classifySteeringRepoPath(path2) {
-  const root = ROOT_FILES[path2];
+  const root = ROOT_FILES2[path2];
   if (root) return root;
   const parts = path2.split("/");
   if (parts.some((part2) => part2 === "" || part2 === "." || part2 === "..")) {
@@ -71739,7 +73137,7 @@ function recordLineageFromPath(path2) {
     return parts[parts.length - 1].slice(0, -3);
   return null;
 }
-var AGENTS_MD_PATH, CLAUDE_MD_PATH, README_PATH, GITATTRIBUTES_PATH, WORKSPACE_TOML_PATH, AGENTS_DIR, STEERING_DIR, GOVERNANCE_TOML_PATH, SKILLS_DIR, TOOLS_DIR, TOOL_SERVERS_DIR, POLICY_DIR, CEDAR_SCHEMA_PATH, CODEGRAPH_SETTINGS_DIR, SKILL_FILE_NAME, SERVER_TOML_NAME, TOOLS_TOML_NAME, TOOLS_LOCK_NAME, LEDGER_FILE, ROOT_FILES, SERVER_FILES, WORKSPACE_LINK_PATH;
+var AGENTS_MD_PATH, CLAUDE_MD_PATH, README_PATH, GITATTRIBUTES_PATH, WORKSPACE_TOML_PATH, AGENTS_DIR, STEERING_DIR, GOVERNANCE_TOML_PATH, SKILLS_DIR, TOOLS_DIR, TOOL_SERVERS_DIR, POLICY_DIR, CEDAR_SCHEMA_PATH, CODEGRAPH_SETTINGS_DIR, SKILL_FILE_NAME, SERVER_TOML_NAME, TOOLS_TOML_NAME, TOOLS_LOCK_NAME, LEDGER_FILE, ROOT_FILES2, SERVER_FILES, WORKSPACE_LINK_PATH;
 var init_paths2 = __esm({
   "../../packages/oxagen/src/steering-repo/paths.ts"() {
     "use strict";
@@ -71762,7 +73160,7 @@ var init_paths2 = __esm({
     TOOLS_TOML_NAME = "tools.toml";
     TOOLS_LOCK_NAME = "tools.lock.json";
     LEDGER_FILE = /^(\d{4}(?:-\d{2}(?:-\d{2})?|-W\d{2})?)(?:\.(\d{3}))?\.jsonl$/;
-    ROOT_FILES = {
+    ROOT_FILES2 = {
       [AGENTS_MD_PATH]: "agents-md",
       [CLAUDE_MD_PATH]: "claude-md",
       [README_PATH]: "readme",
@@ -72108,1173 +73506,401 @@ var init_codegraph_settings = __esm({
         ),
         30
       ),
-      bot_authors: setting(
-        uniqueArray(external_exports.string().min(1).max(200), "bot_authors").describe(
-          "Authors whose commits history ignores."
-        ),
-        CODEGRAPH_BOT_AUTHORS_DEFAULT
-      ),
-      co_change_half_life_days: setting(
-        external_exports.number().int().min(1).describe("A co-change counts half as much after this many days."),
-        365
-      ),
-      cross_repo_window_hours: setting(
-        external_exports.number().int().min(1).describe("Commits in two repositories this close together can pair."),
-        24
-      ),
-      owner_features: setting(
-        external_exports.boolean().describe("Compute owners from history."),
-        true
-      )
-    }).strict();
-    CODEGRAPH_HISTORY_DEFAULTS = {
-      change_size_cutoff_files: 30,
-      bot_authors: CODEGRAPH_BOT_AUTHORS_DEFAULT,
-      co_change_half_life_days: 365,
-      cross_repo_window_hours: 24,
-      owner_features: true
-    };
-    codegraphDecisionsSchema = external_exports.object({
-      importance_threshold: setting(
-        share().describe(
-          "A signal at or above this importance suggests a decision record. The M4 backtest sets it."
-        ),
-        0.7
-      ),
-      grouping_window_days: setting(
-        external_exports.number().int().min(1).describe("Signals on one topic within this many days group into one."),
-        7
-      ),
-      stale_proposal_days: setting(
-        external_exports.number().int().min(1).describe("A proposal untouched this many days is stale."),
-        30
-      ),
-      package_categories: uniqueArray(
-        external_exports.string().min(1).max(100),
-        "package_categories"
-      ).optional().describe(
-        "The package categories signals weigh. Unset: the curated list."
-      )
-    }).strict();
-    CODEGRAPH_DECISIONS_DEFAULTS = {
-      importance_threshold: 0.7,
-      grouping_window_days: 7,
-      stale_proposal_days: 30
-    };
-    codegraphHostDefaultSchema = external_exports.enum([
-      "sandbox",
-      "ask",
-      "approval"
-    ]);
-    CODEGRAPH_HOST_DEFAULTS = {
-      "read-only": "sandbox",
-      test: "sandbox",
-      build: "sandbox",
-      "local-write": "ask",
-      "remote-write": "approval",
-      destructive: "approval",
-      unknown: "approval"
-    };
-    codegraphScriptsSchema = external_exports.object({
-      host_defaults: external_exports.object({
-        "read-only": setting(
-          codegraphHostDefaultSchema,
-          CODEGRAPH_HOST_DEFAULTS["read-only"]
-        ),
-        test: setting(codegraphHostDefaultSchema, CODEGRAPH_HOST_DEFAULTS.test),
-        build: setting(
-          codegraphHostDefaultSchema,
-          CODEGRAPH_HOST_DEFAULTS.build
-        ),
-        "local-write": setting(
-          codegraphHostDefaultSchema,
-          CODEGRAPH_HOST_DEFAULTS["local-write"]
-        ),
-        "remote-write": setting(
-          codegraphHostDefaultSchema,
-          CODEGRAPH_HOST_DEFAULTS["remote-write"]
-        ),
-        destructive: setting(
-          codegraphHostDefaultSchema,
-          CODEGRAPH_HOST_DEFAULTS.destructive
-        ),
-        unknown: setting(
-          codegraphHostDefaultSchema,
-          CODEGRAPH_HOST_DEFAULTS.unknown
-        )
-      }).strict().optional().describe(
-        "What a host does with a script of each effect class: run it in a sandbox, ask first, or wait for approval."
-      ),
-      trusted_policies: uniqueArray(
-        external_exports.string().min(1).max(200),
-        "trusted_policies"
-      ).optional().describe("Script policies the workspace trusts. Unset: none.")
-    }).strict();
-    CODEGRAPH_SCRIPTS_DEFAULTS = {
-      host_defaults: CODEGRAPH_HOST_DEFAULTS,
-      trusted_policies: []
-    };
-    codegraphDomainIdSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9_.-]{0,127}$/, "a domain id is lowercase");
-    codegraphBoundariesSchema = external_exports.object({
-      allowed_crossings: uniqueArray(
-        external_exports.object({
-          from: codegraphDomainIdSchema,
-          to: codegraphDomainIdSchema
-        }).strict(),
-        "allowed_crossings"
-      ).optional().describe(
-        "The domain crossings code may make. Unset: the table the current build found."
-      )
-    }).strict();
-    CODEGRAPH_BOUNDARIES_DEFAULTS = {};
-    codegraphBudgetsSchema = external_exports.object({
-      answer_budget_tokens: setting(
-        external_exports.number().int().min(1).describe(
-          "The default token budget of one answer. The spending cap is on the AI models and keys screen."
-        ),
-        4e3
-      )
-    }).strict();
-    CODEGRAPH_BUDGETS_DEFAULTS = {
-      answer_budget_tokens: 4e3
-    };
-    codegraphFreshnessSchema = external_exports.object({
-      lag_window_minutes: setting(
-        external_exports.number().int().min(1).describe(
-          "The freshness check fails when the graph lags the code this long."
-        ),
-        30
-      ),
-      revision_retention_days: setting(
-        external_exports.number().int().min(1).describe("Days a default-branch revision is kept."),
-        90
-      ),
-      pr_copy_retention_days: setting(
-        external_exports.number().int().min(0).describe("Days a PR copy is kept after the PR closes."),
-        7
-      )
-    }).strict();
-    CODEGRAPH_FRESHNESS_DEFAULTS = {
-      lag_window_minutes: 30,
-      revision_retention_days: 90,
-      pr_copy_retention_days: 7
-    };
-    CODEGRAPH_SETTINGS_GROUPS = [
-      {
-        group: "sources",
-        id: "codegraph-sources/v1",
-        title: "Code graph sources",
-        description: "codegraph/sources.toml: the source tags each linked code repository carries.",
-        schema: codegraphSourcesSchema,
-        defaults: CODEGRAPH_SOURCES_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "indexing",
-        id: "codegraph-indexing/v1",
-        title: "Code graph indexing",
-        description: "codegraph/indexing.toml: the file size limit, skipped paths, live cloud inventory, and per-repository SCIP and version lookup.",
-        schema: codegraphIndexingSchema,
-        defaults: CODEGRAPH_INDEXING_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "models",
-        id: "codegraph-models/v1",
-        title: "Code graph AI models and keys",
-        description: "codegraph/models.toml: the key source, the model for each task, call mode, providers, and escalation limits. The key itself is never stored here.",
-        schema: codegraphModelsSchema,
-        defaults: CODEGRAPH_MODELS_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "embeddings",
-        id: "codegraph-embeddings/v1",
-        title: "Code graph embeddings",
-        description: "codegraph/embeddings.toml: whether builds embed cards, and with the Oxagen provider or the workspace's own endpoint.",
-        schema: codegraphEmbeddingsSchema,
-        defaults: CODEGRAPH_EMBEDDINGS_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "local",
-        id: "codegraph-local/v1",
-        title: "Code graph local graphs",
-        description: "codegraph/local.toml: whether operators may build local graphs, the watch debounce, the memory limit, and local SCIP.",
-        schema: codegraphLocalSchema,
-        defaults: CODEGRAPH_LOCAL_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "confidence",
-        id: "codegraph-confidence/v1",
-        title: "Code graph confidence",
-        description: "codegraph/confidence.toml: the confidence of each provenance, the default minConfidence, and the agent link limits.",
-        schema: codegraphConfidenceSchema,
-        defaults: CODEGRAPH_CONFIDENCE_DEFAULTS,
-        timing: "next_call"
-      },
-      {
-        group: "domains",
-        id: "codegraph-domains/v1",
-        title: "Code graph domains",
-        description: "codegraph/domains.toml: the tag score, the close-call margin and limit, and the regrouping threshold.",
-        schema: codegraphDomainsSchema,
-        defaults: CODEGRAPH_DOMAINS_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "history",
-        id: "codegraph-history/v1",
-        title: "Code graph history",
-        description: "codegraph/history.toml: the change-size cutoff, bot authors, co-change half-life, cross-repository window, and owner features.",
-        schema: codegraphHistorySchema,
-        defaults: CODEGRAPH_HISTORY_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "decisions",
-        id: "codegraph-decisions/v1",
-        title: "Code graph decision records",
-        description: "codegraph/decisions.toml: the importance threshold, grouping window, stale-proposal age, and package categories.",
-        schema: codegraphDecisionsSchema,
-        defaults: CODEGRAPH_DECISIONS_DEFAULTS,
-        timing: "next_build"
-      },
-      {
-        group: "scripts",
-        id: "codegraph-scripts/v1",
-        title: "Code graph scripts",
-        description: "codegraph/scripts.toml: the host default for each effect class and the trusted script policies.",
-        schema: codegraphScriptsSchema,
-        defaults: CODEGRAPH_SCRIPTS_DEFAULTS,
-        timing: "next_call"
-      },
-      {
-        group: "boundaries",
-        id: "codegraph-boundaries/v1",
-        title: "Code graph boundaries",
-        description: "codegraph/boundaries.toml: the crossings allowed between domains.",
-        schema: codegraphBoundariesSchema,
-        defaults: CODEGRAPH_BOUNDARIES_DEFAULTS,
-        timing: "next_call"
-      },
-      {
-        group: "budgets",
-        id: "codegraph-budgets/v1",
-        title: "Code graph budgets",
-        description: "codegraph/budgets.toml: the default answer budget.",
-        schema: codegraphBudgetsSchema,
-        defaults: CODEGRAPH_BUDGETS_DEFAULTS,
-        timing: "next_call"
-      },
-      {
-        group: "freshness",
-        id: "codegraph-freshness/v1",
-        title: "Code graph freshness and retention",
-        description: "codegraph/freshness.toml: the CI check's lag window and how long revisions and PR copies are kept.",
-        schema: codegraphFreshnessSchema,
-        defaults: CODEGRAPH_FRESHNESS_DEFAULTS,
-        timing: "next_build"
-      }
-    ];
-  }
-});
-
-// ../../packages/oxagen/src/steering-repo/governance.ts
-var ledgerRotationSchema, governanceSchema;
-var init_governance = __esm({
-  "../../packages/oxagen/src/steering-repo/governance.ts"() {
-    "use strict";
-    init_zod();
-    init_context_steering_shared();
-    init_common();
-    init_json_schema();
-    init_tokens();
-    ledgerRotationSchema = external_exports.enum(["day", "week", "month", "year"]);
-    governanceSchema = withRules(
-      external_exports.object({
-        schema: external_exports.literal("governance/v1"),
-        mode: governanceModeSchema,
-        steering: external_exports.object({
-          always_on_tokens: external_exports.union([external_exports.number().int().positive(), external_exports.literal("off")]).optional().describe(
-            "The always-on budget per code repository, or off. Unset inherits Oxagen's default, which only warns."
-          )
-        }).strict().optional(),
-        ledger: external_exports.object({
-          rotate: ledgerRotationSchema.optional(),
-          max_lines: external_exports.number().int().positive().optional().describe("A new file starts here even mid-period.")
-        }).strict().optional(),
-        // `recall_unreviewed` left the memory table on 2026-09-30, because
-        // Oxagen no longer recalls a memory that waits for review (ADR-238).
-        memory: external_exports.object({
-          batch_size: external_exports.number().int().positive().optional().describe("Memories per memory PR."),
-          retire_after_days: external_exports.number().int().positive().optional(),
-          auto_merge: external_exports.boolean().optional().describe("Allowed in solo mode only.")
-        }).strict().optional(),
-        reviewers: external_exports.array(
-          external_exports.object({
-            paths: external_exports.array(external_exports.string().min(1)).min(1),
-            group: organizationSlugSchema
-          }).strict()
-        ).optional().describe(
-          "Route the folders a pull request changes to a reviewer group."
-        )
-      }).strict(),
-      [
-        {
-          kind: "equals",
-          when: { field: "mode", isNot: "solo" },
-          path: ["memory", "auto_merge"],
-          value: false
-        }
-      ]
-    );
-  }
-});
-
-// ../../packages/oxagen/src/steering-repo/health.ts
-var REPO_HEALTH_STATES, repoHealthSchema, settingsDifferenceSchema;
-var init_health = __esm({
-  "../../packages/oxagen/src/steering-repo/health.ts"() {
-    "use strict";
-    init_zod();
-    init_common();
-    REPO_HEALTH_STATES = [
-      "healthy",
-      "drifted",
-      "disconnected",
-      "diverged"
-    ];
-    repoHealthSchema = external_exports.enum(REPO_HEALTH_STATES);
-    settingsDifferenceSchema = external_exports.object({
-      setting: external_exports.string().min(1).describe(
-        "The setting's path in the baseline, such as rulesets.oxagen_merges."
-      ),
-      expected: external_exports.unknown(),
-      actual: external_exports.unknown(),
-      changed_by: external_exports.string().nullable(),
-      changed_at: instantSchema2.nullable()
-    }).strict();
-  }
-});
-
-// ../../packages/oxagen/src/steering-repo/promotion.ts
-var promotionChangeSchema, branchSchema, promotionSchema;
-var init_promotion = __esm({
-  "../../packages/oxagen/src/steering-repo/promotion.ts"() {
-    "use strict";
-    init_zod();
-    init_src3();
-    init_context_steering_shared();
-    init_common();
-    init_names();
-    promotionChangeSchema = external_exports.object({
-      path: repoPathSchema,
-      action: external_exports.enum(["added", "modified", "removed"]),
-      lineage: lineageSchema.optional(),
-      id: recordIdSchema.optional(),
-      hash: sha256Schema2.optional(),
-      replaces: recordIdSchema.optional().describe(
-        "The id this record had before a format change, such as the v0.1 conversion."
-      )
-    }).strict();
-    branchSchema = external_exports.string().regex(new RegExp(`^(?:${BRANCH_PREFIXES.join("|")})/.+$`)).describe("Starts with the top-level folder the change touches.");
-    promotionSchema = external_exports.object({
-      schema: external_exports.literal("promotion/v1"),
-      seq: external_exports.number().int().min(1).describe("The line's place in the whole chain, across files."),
-      at: instantSchema2,
-      pull_request: external_exports.object({
-        provider: repositoryProviderSchema,
-        number: external_exports.number().int().positive()
-      }).strict(),
-      branch: branchSchema,
-      mode: governanceModeSchema,
-      approved_by: external_exports.array(actorSchema),
-      merged_by: actorSchema,
-      without_review: external_exports.boolean().describe(
-        "True when the owner, or a role with merge_pr_without_review, merged without an approval."
-      ),
-      changes: external_exports.array(promotionChangeSchema).min(1),
-      prev: sha256Schema2.nullable().describe(
-        "The hash of the line before, or null on the first line of the chain."
-      ),
-      hash: sha256Schema2.describe(
-        "sha256 over the RFC 8785 canonical JSON of this line without hash."
-      )
-    }).strict();
-  }
-});
-
-// ../../packages/tacho/src/columns.ts
-var ENVELOPE_COLUMNS, TACHO_EVENT_COLUMNS;
-var init_columns = __esm({
-  "../../packages/tacho/src/columns.ts"() {
-    "use strict";
-    init_chain();
-    init_envelope();
-    ENVELOPE_COLUMNS = [
-      // identity (2.1)
-      "host_enrollment_id",
-      "agent_key",
-      "agent_principal_id",
-      "initiating_principal_id",
-      "runtime",
-      "harness",
-      "harness_version",
-      "wrapper_version",
-      "wrapper_attestation",
-      "fidelity",
-      "enforcement_tier",
-      "fleet_id",
-      // anthropic observations (2.2)
-      "anthropic_user_id_hash",
-      "anthropic_account_uuid",
-      "anthropic_account_id",
-      "anthropic_org_uuid",
-      "api_key_source",
-      // session, causality, ordering (2.3)
-      "session_uuid",
-      "harness_session_id",
-      "root_session_uuid",
-      "parent_session_uuid",
-      "subagent_id",
-      "subagent_type",
-      "spawn_depth",
-      "spawn_tool_use_id",
-      "seq",
-      "event_id",
-      "event_id_idem",
-      "ts",
-      "turn_seq",
-      "prompt_id",
-      "turn_id",
-      "trace_id",
-      "span_id",
-      "parent_span_id",
-      "harness_event_sequence",
-      // kind and source (2.4)
-      "kind",
-      "source",
-      "hook_event_name",
-      "hook_source_kind",
-      "otel_event_name",
-      // context (2.5)
-      "cwd",
-      "project_dir",
-      "git_branch",
-      "git_head_sha",
-      "git_remote_digest",
-      "git_dirty",
-      "worktree_path",
-      "worktree_branch",
-      "permission_mode",
-      "effort",
-      "context_model",
-      "entrypoint",
-      "query_source",
-      "session_kind",
-      "terminal_type",
-      "app_version",
-      "output_style",
-      // host (2.14)
-      "hostname_digest",
-      "os_type",
-      "os_version",
-      "host_arch",
-      "os_user_digest",
-      "claude_pid",
-      "claude_ppid",
-      "claude_parent_process",
-      "claude_execpath",
-      "is_child_session",
-      "bridge_session_id",
-      "has_tty",
-      // chain and content (2.13, 2.15)
-      "prev_hash",
-      "hash",
-      "content_digest",
-      "bytes_ref",
-      "redactions",
-      "raw_source_digest",
-      "body",
-      "attrs"
-    ];
-    TACHO_EVENT_COLUMNS = [
-      ...ENVELOPE_COLUMNS,
-      ...BODY_MEMBER_NAMES
-    ];
-  }
-});
-
-// ../../packages/tacho/src/evidence/merkle.ts
-import { createHash as createHash17 } from "node:crypto";
-function digestToBytes(digest7) {
-  if (!SHA256_DIGEST_PATTERN.test(digest7)) {
-    throw new TypeError(`not a sha256 digest: ${digest7}`);
-  }
-  return Buffer.from(digest7.slice("sha256:".length), "hex");
-}
-function hash2(...parts) {
-  const h = createHash17("sha256");
-  for (const part2 of parts) h.update(part2);
-  return h.digest();
-}
-function largestPowerOfTwoBelow(n4) {
-  let k = 1;
-  while (k * 2 < n4) k *= 2;
-  return k;
-}
-function treeHash(leaves) {
-  if (leaves.length === 0) return hash2();
-  if (leaves.length === 1) return hash2(LEAF_PREFIX, leaves[0]);
-  const k = largestPowerOfTwoBelow(leaves.length);
-  return hash2(
-    NODE_PREFIX,
-    treeHash(leaves.slice(0, k)),
-    treeHash(leaves.slice(k))
-  );
-}
-function merkleRoot(digests) {
-  const leaves = digests.map(digestToBytes);
-  return `sha256:${treeHash(leaves).toString("hex")}`;
-}
-var LEAF_PREFIX, NODE_PREFIX;
-var init_merkle = __esm({
-  "../../packages/tacho/src/evidence/merkle.ts"() {
-    "use strict";
-    init_digest();
-    LEAF_PREFIX = Buffer.from([0]);
-    NODE_PREFIX = Buffer.from([1]);
-  }
-});
-
-// ../../packages/tacho/src/evidence/archive-segment.ts
-var encoder3, decoder;
-var init_archive_segment = __esm({
-  "../../packages/tacho/src/evidence/archive-segment.ts"() {
-    "use strict";
-    init_digest();
-    init_merkle();
-    encoder3 = new TextEncoder();
-    decoder = new TextDecoder("utf-8", { fatal: true });
-  }
-});
-
-// ../../packages/tacho/src/evidence/transcript-kinds.ts
-function isTranscriptKind(value) {
-  return typeof value === "string" && TRANSCRIPT_KINDS.includes(value);
-}
-var TRANSCRIPT_KINDS;
-var init_transcript_kinds = __esm({
-  "../../packages/tacho/src/evidence/transcript-kinds.ts"() {
-    "use strict";
-    TRANSCRIPT_KINDS = [
-      /**
-       * The prompt an operator typed to open a turn: a `turn_start` on the run's
-       * own chain. The request half of a model call is the context the model was
-       * sent, and answers no chip.
-       */
-      "prompt",
-      /**
-       * What came back: a model call's response half or single receipt whose
-       * body was kept, and a reply the harness reported with its words kept
-       * (`turn_end`, or a message recorded as a response).
-       */
-      "responses",
-      /**
-       * A model call that spent reasoning tokens (`thinking_tokens`). The text of
-       * the reasoning shows where the recorder kept the stream; the count shows
-       * wherever the provider reported it.
-       */
-      "thinking",
-      /** Either half of a tool call. */
-      "tools",
-      /** A decision a rule or a person made about a call: allow, deny, route. */
-      "policy",
-      /**
-       * A frame that carried a cost record or token counts without one, or a
-       * model call that recorded the reasoning effort it ran at.
-       */
-      "usage",
-      /** What was pulled into the model's context. */
-      "recall",
-      /**
-       * The run's own stop: the wrapped agent's `agent_stop` on the run's own
-       * chain, or the ledger event that closes an attempt before its seal. The
-       * chain's checkpoints and gaps are read on the Chain tab, not here.
-       */
-      "seal",
-      /** A call that did not do what it was asked to. */
-      "errors"
-    ];
-  }
-});
-
-// ../../packages/tacho/src/evidence/attestation.ts
-import {
-  createPrivateKey as createPrivateKey2,
-  createPublicKey as createPublicKey4,
-  sign as sign3,
-  verify as verify5
-} from "node:crypto";
-function attestationBytes(payload) {
-  return Buffer.from(jcs(payload), "utf8");
-}
-function verifyAttestation(attestation, publicKeyPem) {
-  if (attestation.alg !== "ed25519") return false;
-  if (attestation.key_id !== keyIdForPublicKey(publicKeyPem)) return false;
-  try {
-    return verify5(
-      null,
-      attestationBytes(attestation.payload),
-      createPublicKey4(publicKeyPem),
-      Buffer.from(attestation.sig, "base64")
-    );
-  } catch {
-    return false;
-  }
-}
-var init_attestation = __esm({
-  "../../packages/tacho/src/evidence/attestation.ts"() {
-    "use strict";
-    init_digest();
-    init_key_id();
-  }
-});
-
-// ../../packages/tacho/src/evidence/run-export.ts
-function normalizeInstant(value) {
-  const m = /^(\d{4}-\d{2}-\d{2})[ T](\d{2}:\d{2}:\d{2})(?:\.(\d+))?(Z|[+-]\d{2}(?::?\d{2})?)$/.exec(
-    value
-  );
-  if (!m) return value;
-  const [, day, time, frac, zone] = m;
-  const ms = (frac ?? "").slice(0, 3).padEnd(3, "0");
-  let offset = zone;
-  if (zone !== "Z") {
-    const digits = zone.slice(1).replace(":", "");
-    offset = `${zone[0]}${digits.slice(0, 2)}:${(digits.slice(2) || "00").padEnd(2, "0")}`;
-  }
-  const instant3 = /* @__PURE__ */ new Date(`${day}T${time}.${ms}${offset}`);
-  return Number.isNaN(instant3.getTime()) ? value : instant3.toISOString();
-}
-function wrappedFrameOf(event, bytesRef) {
-  const body2 = asRecord2(event["body"]) ?? {};
-  const content = asRecord2(event["content"]);
-  const turn = asRecord2(event["turn"]);
-  const text5 = (value) => typeof value === "string" ? value : "";
-  const count12 = (value) => typeof value === "number" ? value : null;
-  return {
-    event_id: event["event_id"] ?? null,
-    seq: event["seq"] ?? null,
-    ts: event["ts"] ?? null,
-    kind: event["kind"] ?? null,
-    prev_hash: event["prev_hash"] ?? null,
-    hash: event["hash"] ?? null,
-    content: {
-      digest: content?.["digest"] ?? null,
-      bytes_ref: bytesRef,
-      redactions: content?.["redactions"] ?? []
-    },
-    body: event["body"] ?? null,
-    tool_name: text5(body2["tool_name"]),
-    tool_status: text5(body2["tool_status"]),
-    tool_use_id: text5(body2["tool_use_id"]),
-    model: text5(body2["model"]),
-    provider: text5(body2["provider"]),
-    policy_decision: text5(body2["policy_decision"]),
-    cost_usd_micros: count12(body2["cost_usd_micros"]),
-    turn_seq: count12(turn?.["turn_seq"]),
-    event
-  };
-}
-function asRecord2(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
-}
-function tally(counts) {
-  return [...counts.entries()].map(([kind, { count: count12, frames }]) => ({ kind, count: count12, frames })).sort((a, b5) => a.kind.localeCompare(b5.kind));
-}
-function summarizeRunExportRedactions(envelopes) {
-  const redacted = /* @__PURE__ */ new Map();
-  const withheld = /* @__PURE__ */ new Map();
-  const bump = (map, kind, count12) => {
-    const entry2 = map.get(kind) ?? { count: 0, frames: 0 };
-    entry2.count += count12;
-    entry2.frames += 1;
-    map.set(kind, entry2);
-  };
-  let total2 = 0;
-  for (const envelope2 of envelopes) {
-    const frame = asRecord2(envelope2);
-    if (!frame) continue;
-    const content = asRecord2(frame["content"]);
-    const list = content?.["redactions"];
-    if (Array.isArray(list)) {
-      const perReason = /* @__PURE__ */ new Map();
-      for (const item of list) {
-        const reason3 = asRecord2(item)?.["reason"];
-        const kind = typeof reason3 === "string" ? reason3 : "unknown";
-        perReason.set(kind, (perReason.get(kind) ?? 0) + 1);
-      }
-      for (const [kind, count12] of perReason) {
-        bump(redacted, kind, count12);
-        total2 += count12;
-      }
-    }
-    if (typeof content?.["bytes_ref"] === "string") {
-      bump(withheld, WITHHELD_BODY, 1);
-    }
-    if (typeof frame["encrypted_payload_ref"] === "string") {
-      bump(withheld, WITHHELD_ENCRYPTED_PAYLOAD, 1);
-    }
-  }
-  return {
-    format: RUN_EXPORT_REDACTIONS_FORMAT,
-    redacted: tally(redacted),
-    redacted_total: total2,
-    withheld: tally(withheld)
-  };
-}
-function digestOf2(frame) {
-  const value = frame["event_digest"] ?? frame["hash"];
-  return typeof value === "string" && DIGEST2.test(value) ? value : null;
-}
-function safeDigestJcs(value) {
-  try {
-    return digestJcs(value);
-  } catch {
-    return null;
-  }
-}
-function checkWrappedFrame(frame, attemptId) {
-  if (frame["event"] === void 0 || frame["event"] === null) {
-    return { digest: "not_carried", reasons: [] };
-  }
-  const event = asRecord2(frame["event"]);
-  if (!event) {
-    return { digest: "broken", reasons: ["event is not a JSON object"] };
-  }
-  const reasons = [];
-  if (event["session_uuid"] !== attemptId) {
-    reasons.push(
-      `the event belongs to session ${String(event["session_uuid"])}, not ${attemptId}`
-    );
-  }
-  let holds2;
-  try {
-    holds2 = eventHashHolds(event, frame["hash"]);
-  } catch {
-    holds2 = false;
-  }
-  if (!holds2) {
-    reasons.push("the event does not hash to hash");
-  }
-  const content = asRecord2(frame["content"]);
-  const bytesRef = typeof content?.["bytes_ref"] === "string" ? content["bytes_ref"] : null;
-  const expected = wrappedFrameOf(event, bytesRef);
-  const differs2 = [
-    .../* @__PURE__ */ new Set([...Object.keys(expected), ...Object.keys(frame)])
-  ].filter((name) => name !== "event").filter((name) => {
-    const shown2 = frame[name];
-    const read2 = expected[name];
-    if (shown2 === void 0 || read2 === void 0) return true;
-    return jcs(shown2) !== jcs(read2);
-  }).sort();
-  if (differs2.length > 0) {
-    const verb = differs2.length === 1 ? "differs" : "differ";
-    reasons.push(`${differs2.join(", ")} ${verb} from the hashed event`);
-  }
-  return { digest: reasons.length > 0 ? "broken" : "held", reasons };
-}
-function checkLedgerFrame(frame) {
-  const reasons = [];
-  const payloadDigest = frame["payload_digest"];
-  let digest7 = "held";
-  if (frame["payload_inline"] !== null && frame["payload_inline"] !== void 0) {
-    const recomputed2 = safeDigestJcs(frame["payload_inline"]);
-    if (recomputed2 !== payloadDigest) {
-      digest7 = "broken";
-      reasons.push("payload does not hash to payload_digest");
-    }
-  } else if (typeof frame["encrypted_payload_ref"] !== "string") {
-    digest7 = "broken";
-    reasons.push("frame carries neither a payload nor an encrypted reference");
-  }
-  const recomputed = safeDigestJcs({
-    attempt_seq: frame["attempt_seq"] ?? null,
-    event_schema_version: frame["event_schema_version"] ?? null,
-    event_type: frame["event_type"] ?? null,
-    stage: frame["stage"] ?? null,
-    payload_digest: payloadDigest ?? null,
-    observed_at: typeof frame["observed_at"] === "string" ? normalizeInstant(frame["observed_at"]) : frame["observed_at"] ?? null
-  });
-  if (recomputed !== frame["event_digest"]) {
-    digest7 = "broken";
-    reasons.push("identity fields do not hash to event_digest");
-  }
-  return { digest: digest7, reasons };
-}
-function parseJson2(text5, name, checks) {
-  try {
-    return JSON.parse(text5);
-  } catch {
-    checks.push({ name, status: "broken", detail: `${name} is not JSON` });
-    return null;
-  }
-}
-function verifyRunExport(files3) {
-  const checks = [];
-  const hold = (name, ok2, held, broken) => checks.push({
-    name,
-    status: ok2 ? "held" : "broken",
-    detail: ok2 ? held : broken
-  });
-  const manifest = parseJson2(
-    files3["manifest.json"],
-    "manifest",
-    checks
-  );
-  const attestationFile = parseJson2(
-    files3["attestation.json"],
-    "attestation",
-    checks
-  );
-  const raw = files3["frames.ndjson"];
-  const text5 = raw.endsWith("\n") ? raw.slice(0, -1) : raw;
-  const lines = text5.length === 0 ? [] : text5.split("\n");
-  const frames = [];
-  const verdicts = [];
-  lines.forEach((line, i2) => {
-    let parsed2 = null;
-    try {
-      parsed2 = asRecord2(JSON.parse(line));
-    } catch {
-      parsed2 = null;
-    }
-    frames.push(parsed2 ?? {});
-    if (!parsed2) {
-      verdicts.push({
-        line: i2 + 1,
-        attempt_id: "",
-        seq: null,
-        status: "broken",
-        digest: "broken",
-        link: "broken",
-        reasons: ["line is not a JSON object"]
-      });
-    }
-  });
-  if (!manifest || !attestationFile) {
-    return {
-      ok: false,
-      run_id: manifest?.run_id ?? null,
-      format: manifest?.format ?? null,
-      frames: verdicts,
-      checks,
-      redactions: null
-    };
-  }
-  hold(
-    "format",
-    ACCEPTED_FORMATS.has(manifest.format),
-    manifest.format,
-    `unknown bundle format ${String(manifest.format)}`
-  );
-  hold(
-    "source",
-    typeof manifest.run_id === "string" && (manifest.source === "ledger" && manifest.run_id.startsWith("arun_") || manifest.source === "tacho" && manifest.run_id.startsWith("tse_")),
-    "the source matches the run identifier",
-    "the source is invalid or does not match the run identifier"
-  );
-  const byLine = new Map(verdicts.map((v) => [v.line, v]));
-  let offset = 0;
-  for (const attempt of manifest.attempts ?? []) {
-    let prevHash = null;
-    let prevSeq = null;
-    let stream = EMPTY_EVENT_STREAM_DIGEST;
-    const end = Math.min(offset + attempt.frame_count, frames.length);
-    for (let i2 = offset; i2 < end; i2 += 1) {
-      const line = i2 + 1;
-      if (byLine.has(line)) continue;
-      const frame = frames[i2];
-      const reasons = [];
-      let digest7;
-      let link = "held";
-      let seq = null;
-      if (manifest.source === "ledger") {
-        const own = checkLedgerFrame(frame);
-        digest7 = own.digest;
-        reasons.push(...own.reasons);
-        const attemptSeq = frame["attempt_seq"];
-        seq = typeof attemptSeq === "number" ? attemptSeq : null;
-        const expected = prevSeq === null ? 1 : prevSeq + 1;
-        if (seq !== expected) {
-          link = "broken";
-          reasons.push(`attempt_seq ${String(seq)} where ${expected} was due`);
-        }
-        prevSeq = seq;
-        stream = digestJcs({
-          previous: stream,
-          entry: [
-            frame["attempt_seq"] ?? null,
-            frame["event_schema_version"] ?? null,
-            frame["event_type"] ?? null,
-            frame["payload_digest"] ?? null
-          ]
-        });
-      } else {
-        const own = checkWrappedFrame(frame, attempt.attempt_id);
-        digest7 = own.digest;
-        reasons.push(...own.reasons);
-        const rawSeq = frame["seq"];
-        seq = typeof rawSeq === "number" ? rawSeq : null;
-        const expectedPrev = prevHash ?? (seq === 0 ? GENESIS_PREV_HASH2 : null);
-        if (expectedPrev !== null && frame["prev_hash"] !== expectedPrev) {
-          link = "broken";
-          reasons.push(
-            prevHash === null ? 'genesis prev_hash is not sha256("")' : "prev_hash is not the previous frame's hash"
-          );
-        }
-        if (prevSeq !== null && seq !== prevSeq + 1) {
-          link = "broken";
-          reasons.push(`seq ${String(seq)} where ${prevSeq + 1} was due`);
-        }
-        prevSeq = seq;
-        prevHash = typeof frame["hash"] === "string" ? frame["hash"] : null;
-      }
-      if (digestOf2(frame) === null) {
-        digest7 = "broken";
-        reasons.push("frame carries no sha256 digest");
-      }
-      verdicts.push({
-        line,
-        attempt_id: attempt.attempt_id,
-        seq,
-        status: digest7 === "broken" || link === "broken" ? "broken" : "held",
-        digest: digest7,
-        link,
-        reasons
-      });
-    }
-    if (manifest.source === "ledger" && typeof attempt.event_stream_digest === "string") {
-      hold(
-        `stream ${attempt.attempt_id}`,
-        stream === attempt.event_stream_digest,
-        "the frames fold to the sealed event_stream_digest",
-        `the frames fold to ${stream}, the seal recorded ${attempt.event_stream_digest}`
-      );
-    }
-    offset += attempt.frame_count;
-  }
-  for (let i2 = offset; i2 < frames.length; i2 += 1) {
-    if (byLine.has(i2 + 1)) continue;
-    verdicts.push({
-      line: i2 + 1,
-      attempt_id: "",
-      seq: null,
-      status: "broken",
-      digest: "broken",
-      link: "broken",
-      reasons: ["frame lies outside every attested attempt"]
-    });
-  }
-  verdicts.sort((a, b5) => a.line - b5.line);
-  hold(
-    "frame count",
-    frames.length === manifest.frame_count,
-    `${frames.length} frames`,
-    `${frames.length} frames where the manifest says ${manifest.frame_count}`
-  );
-  const digests = frames.map(digestOf2);
-  const allDigests = digests.every((d) => d !== null);
-  const root = allDigests ? merkleRoot(digests) : null;
-  hold(
-    "merkle root",
-    root === manifest.merkle_root,
-    `root ${manifest.merkle_root}`,
-    `frames hash to ${root ?? "nothing"}, the manifest says ${manifest.merkle_root}`
-  );
-  const pem = attestationFile.public_key_pem;
-  let keyId = null;
-  try {
-    keyId = keyIdForPublicKey(pem);
-  } catch {
-    keyId = null;
-  }
-  hold(
-    "attester key",
-    keyId !== null && keyId === attestationFile.key_id && keyId === manifest.attester_key_id,
-    `key ${String(keyId)}`,
-    "the bundled public key does not match the recorded key id"
-  );
-  let covered = 0;
-  const attestations = attestationFile.attestations ?? [];
-  attestations.forEach((a, i2) => {
-    const attemptId = a.payload?.attempt_id ?? `#${i2 + 1}`;
-    hold(
-      `signature ${attemptId}`,
-      keyId !== null && verifyAttestation(a, pem),
-      "Ed25519 signature verifies",
-      "the attestation signature does not verify"
-    );
-    const slice = digests.slice(
-      covered,
-      covered + (a.payload?.frame_count ?? 0)
-    );
-    if (manifest.source === "tacho") {
-      const exportedDigest = digestBytes(
-        lines.slice(covered, covered + (a.payload?.frame_count ?? 0)).join("\n")
-      );
-      hold(
-        `exported content ${attemptId}`,
-        exportedDigest === a.payload?.archive_segment_digest,
-        "the exported frame bytes match the signed segment digest",
-        "the exported frame bytes do not match the signed segment digest"
-      );
-    }
-    hold(
-      `run identity ${attemptId}`,
-      a.payload?.run_id === manifest.run_id,
-      "the attestation names this run",
-      "the manifest run differs from the signed run"
-    );
-    covered += a.payload?.frame_count ?? 0;
-    const attemptRoot = slice.every((d) => d !== null) ? merkleRoot(slice) : null;
-    hold(
-      `attested root ${attemptId}`,
-      attemptRoot === a.payload?.merkle_root,
-      "the attempt's frames hash to the signed root",
-      `the attempt's frames hash to ${attemptRoot ?? "nothing"}, the attestation signed ${String(a.payload?.merkle_root)}`
-    );
-  });
-  hold(
-    "coverage",
-    covered === frames.length && attestations.length > 0,
-    "the attestations cover every frame",
-    `the attestations cover ${covered} of ${frames.length} frames`
-  );
-  let redactions = null;
-  const redactionsText = files3["redactions.json"];
-  if (redactionsText !== void 0) {
-    redactions = parseJson2(
-      redactionsText,
-      "redactions",
-      checks
-    );
-    if (redactions) {
-      const recomputed = summarizeRunExportRedactions(frames);
-      hold(
-        "redactions",
-        digestJcs(recomputed) === digestJcs(redactions),
-        `${recomputed.redacted_total} redaction(s) summarised`,
-        "redactions.json does not match what the frames record"
-      );
-    }
-  } else if (manifest.format !== FORMAT_1) {
-    hold("redactions", false, "", "redactions.json is missing");
-  }
-  const ok = verdicts.length === frames.length && verdicts.every((v) => v.status === "held") && checks.every((c) => c.status === "held");
-  return {
-    ok,
-    run_id: manifest.run_id,
-    format: manifest.format,
-    frames: verdicts,
-    checks,
-    redactions
-  };
-}
-var RUN_EXPORT_FORMAT, FORMAT_1, ACCEPTED_FORMATS, RUN_EXPORT_REDACTIONS_FORMAT, GENESIS_PREV_HASH2, EMPTY_EVENT_STREAM_DIGEST, DIGEST2, WITHHELD_BODY, WITHHELD_ENCRYPTED_PAYLOAD;
-var init_run_export = __esm({
-  "../../packages/tacho/src/evidence/run-export.ts"() {
-    "use strict";
-    init_chain();
-    init_digest();
-    init_key_id();
-    init_attestation();
-    init_merkle();
-    RUN_EXPORT_FORMAT = "oxagen.run-export/3";
-    FORMAT_1 = "oxagen.run-export/1";
-    ACCEPTED_FORMATS = /* @__PURE__ */ new Set([
-      FORMAT_1,
-      "oxagen.run-export/2",
-      RUN_EXPORT_FORMAT
+      bot_authors: setting(
+        uniqueArray(external_exports.string().min(1).max(200), "bot_authors").describe(
+          "Authors whose commits history ignores."
+        ),
+        CODEGRAPH_BOT_AUTHORS_DEFAULT
+      ),
+      co_change_half_life_days: setting(
+        external_exports.number().int().min(1).describe("A co-change counts half as much after this many days."),
+        365
+      ),
+      cross_repo_window_hours: setting(
+        external_exports.number().int().min(1).describe("Commits in two repositories this close together can pair."),
+        24
+      ),
+      owner_features: setting(
+        external_exports.boolean().describe("Compute owners from history."),
+        true
+      )
+    }).strict();
+    CODEGRAPH_HISTORY_DEFAULTS = {
+      change_size_cutoff_files: 30,
+      bot_authors: CODEGRAPH_BOT_AUTHORS_DEFAULT,
+      co_change_half_life_days: 365,
+      cross_repo_window_hours: 24,
+      owner_features: true
+    };
+    codegraphDecisionsSchema = external_exports.object({
+      importance_threshold: setting(
+        share().describe(
+          "A signal at or above this importance suggests a decision record. The M4 backtest sets it."
+        ),
+        0.7
+      ),
+      grouping_window_days: setting(
+        external_exports.number().int().min(1).describe("Signals on one topic within this many days group into one."),
+        7
+      ),
+      stale_proposal_days: setting(
+        external_exports.number().int().min(1).describe("A proposal untouched this many days is stale."),
+        30
+      ),
+      package_categories: uniqueArray(
+        external_exports.string().min(1).max(100),
+        "package_categories"
+      ).optional().describe(
+        "The package categories signals weigh. Unset: the curated list."
+      )
+    }).strict();
+    CODEGRAPH_DECISIONS_DEFAULTS = {
+      importance_threshold: 0.7,
+      grouping_window_days: 7,
+      stale_proposal_days: 30
+    };
+    codegraphHostDefaultSchema = external_exports.enum([
+      "sandbox",
+      "ask",
+      "approval"
     ]);
-    RUN_EXPORT_REDACTIONS_FORMAT = "oxagen.run-export.redactions/1";
-    GENESIS_PREV_HASH2 = digestBytes("");
-    EMPTY_EVENT_STREAM_DIGEST = digestJcs([]);
-    DIGEST2 = /^sha256:[0-9a-f]{64}$/;
-    WITHHELD_BODY = "frame_body";
-    WITHHELD_ENCRYPTED_PAYLOAD = "encrypted_payload";
-  }
-});
-
-// ../../packages/tacho/src/evidence/index.ts
-var init_evidence = __esm({
-  "../../packages/tacho/src/evidence/index.ts"() {
-    "use strict";
-    init_archive_segment();
-    init_merkle();
-    init_redaction();
-    init_retention();
-    init_replay_grade();
-    init_transcript_kinds();
-    init_attestation();
-    init_frame_body();
-    init_run_export();
+    CODEGRAPH_HOST_DEFAULTS = {
+      "read-only": "sandbox",
+      test: "sandbox",
+      build: "sandbox",
+      "local-write": "ask",
+      "remote-write": "approval",
+      destructive: "approval",
+      unknown: "approval"
+    };
+    codegraphScriptsSchema = external_exports.object({
+      host_defaults: external_exports.object({
+        "read-only": setting(
+          codegraphHostDefaultSchema,
+          CODEGRAPH_HOST_DEFAULTS["read-only"]
+        ),
+        test: setting(codegraphHostDefaultSchema, CODEGRAPH_HOST_DEFAULTS.test),
+        build: setting(
+          codegraphHostDefaultSchema,
+          CODEGRAPH_HOST_DEFAULTS.build
+        ),
+        "local-write": setting(
+          codegraphHostDefaultSchema,
+          CODEGRAPH_HOST_DEFAULTS["local-write"]
+        ),
+        "remote-write": setting(
+          codegraphHostDefaultSchema,
+          CODEGRAPH_HOST_DEFAULTS["remote-write"]
+        ),
+        destructive: setting(
+          codegraphHostDefaultSchema,
+          CODEGRAPH_HOST_DEFAULTS.destructive
+        ),
+        unknown: setting(
+          codegraphHostDefaultSchema,
+          CODEGRAPH_HOST_DEFAULTS.unknown
+        )
+      }).strict().optional().describe(
+        "What a host does with a script of each effect class: run it in a sandbox, ask first, or wait for approval."
+      ),
+      trusted_policies: uniqueArray(
+        external_exports.string().min(1).max(200),
+        "trusted_policies"
+      ).optional().describe("Script policies the workspace trusts. Unset: none.")
+    }).strict();
+    CODEGRAPH_SCRIPTS_DEFAULTS = {
+      host_defaults: CODEGRAPH_HOST_DEFAULTS,
+      trusted_policies: []
+    };
+    codegraphDomainIdSchema = external_exports.string().regex(/^[a-z0-9][a-z0-9_.-]{0,127}$/, "a domain id is lowercase");
+    codegraphBoundariesSchema = external_exports.object({
+      allowed_crossings: uniqueArray(
+        external_exports.object({
+          from: codegraphDomainIdSchema,
+          to: codegraphDomainIdSchema
+        }).strict(),
+        "allowed_crossings"
+      ).optional().describe(
+        "The domain crossings code may make. Unset: the table the current build found."
+      )
+    }).strict();
+    CODEGRAPH_BOUNDARIES_DEFAULTS = {};
+    codegraphBudgetsSchema = external_exports.object({
+      answer_budget_tokens: setting(
+        external_exports.number().int().min(1).describe(
+          "The default token budget of one answer. The spending cap is on the AI models and keys screen."
+        ),
+        4e3
+      )
+    }).strict();
+    CODEGRAPH_BUDGETS_DEFAULTS = {
+      answer_budget_tokens: 4e3
+    };
+    codegraphFreshnessSchema = external_exports.object({
+      lag_window_minutes: setting(
+        external_exports.number().int().min(1).describe(
+          "The freshness check fails when the graph lags the code this long."
+        ),
+        30
+      ),
+      revision_retention_days: setting(
+        external_exports.number().int().min(1).describe("Days a default-branch revision is kept."),
+        90
+      ),
+      pr_copy_retention_days: setting(
+        external_exports.number().int().min(0).describe("Days a PR copy is kept after the PR closes."),
+        7
+      )
+    }).strict();
+    CODEGRAPH_FRESHNESS_DEFAULTS = {
+      lag_window_minutes: 30,
+      revision_retention_days: 90,
+      pr_copy_retention_days: 7
+    };
+    CODEGRAPH_SETTINGS_GROUPS = [
+      {
+        group: "sources",
+        id: "codegraph-sources/v1",
+        title: "Code graph sources",
+        description: "codegraph/sources.toml: the source tags each linked code repository carries.",
+        schema: codegraphSourcesSchema,
+        defaults: CODEGRAPH_SOURCES_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "indexing",
+        id: "codegraph-indexing/v1",
+        title: "Code graph indexing",
+        description: "codegraph/indexing.toml: the file size limit, skipped paths, live cloud inventory, and per-repository SCIP and version lookup.",
+        schema: codegraphIndexingSchema,
+        defaults: CODEGRAPH_INDEXING_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "models",
+        id: "codegraph-models/v1",
+        title: "Code graph AI models and keys",
+        description: "codegraph/models.toml: the key source, the model for each task, call mode, providers, and escalation limits. The key itself is never stored here.",
+        schema: codegraphModelsSchema,
+        defaults: CODEGRAPH_MODELS_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "embeddings",
+        id: "codegraph-embeddings/v1",
+        title: "Code graph embeddings",
+        description: "codegraph/embeddings.toml: whether builds embed cards, and with the Oxagen provider or the workspace's own endpoint.",
+        schema: codegraphEmbeddingsSchema,
+        defaults: CODEGRAPH_EMBEDDINGS_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "local",
+        id: "codegraph-local/v1",
+        title: "Code graph local graphs",
+        description: "codegraph/local.toml: whether operators may build local graphs, the watch debounce, the memory limit, and local SCIP.",
+        schema: codegraphLocalSchema,
+        defaults: CODEGRAPH_LOCAL_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "confidence",
+        id: "codegraph-confidence/v1",
+        title: "Code graph confidence",
+        description: "codegraph/confidence.toml: the confidence of each provenance, the default minConfidence, and the agent link limits.",
+        schema: codegraphConfidenceSchema,
+        defaults: CODEGRAPH_CONFIDENCE_DEFAULTS,
+        timing: "next_call"
+      },
+      {
+        group: "domains",
+        id: "codegraph-domains/v1",
+        title: "Code graph domains",
+        description: "codegraph/domains.toml: the tag score, the close-call margin and limit, and the regrouping threshold.",
+        schema: codegraphDomainsSchema,
+        defaults: CODEGRAPH_DOMAINS_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "history",
+        id: "codegraph-history/v1",
+        title: "Code graph history",
+        description: "codegraph/history.toml: the change-size cutoff, bot authors, co-change half-life, cross-repository window, and owner features.",
+        schema: codegraphHistorySchema,
+        defaults: CODEGRAPH_HISTORY_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "decisions",
+        id: "codegraph-decisions/v1",
+        title: "Code graph decision records",
+        description: "codegraph/decisions.toml: the importance threshold, grouping window, stale-proposal age, and package categories.",
+        schema: codegraphDecisionsSchema,
+        defaults: CODEGRAPH_DECISIONS_DEFAULTS,
+        timing: "next_build"
+      },
+      {
+        group: "scripts",
+        id: "codegraph-scripts/v1",
+        title: "Code graph scripts",
+        description: "codegraph/scripts.toml: the host default for each effect class and the trusted script policies.",
+        schema: codegraphScriptsSchema,
+        defaults: CODEGRAPH_SCRIPTS_DEFAULTS,
+        timing: "next_call"
+      },
+      {
+        group: "boundaries",
+        id: "codegraph-boundaries/v1",
+        title: "Code graph boundaries",
+        description: "codegraph/boundaries.toml: the crossings allowed between domains.",
+        schema: codegraphBoundariesSchema,
+        defaults: CODEGRAPH_BOUNDARIES_DEFAULTS,
+        timing: "next_call"
+      },
+      {
+        group: "budgets",
+        id: "codegraph-budgets/v1",
+        title: "Code graph budgets",
+        description: "codegraph/budgets.toml: the default answer budget.",
+        schema: codegraphBudgetsSchema,
+        defaults: CODEGRAPH_BUDGETS_DEFAULTS,
+        timing: "next_call"
+      },
+      {
+        group: "freshness",
+        id: "codegraph-freshness/v1",
+        title: "Code graph freshness and retention",
+        description: "codegraph/freshness.toml: the CI check's lag window and how long revisions and PR copies are kept.",
+        schema: codegraphFreshnessSchema,
+        defaults: CODEGRAPH_FRESHNESS_DEFAULTS,
+        timing: "next_build"
+      }
+    ];
   }
 });
 
-// ../../packages/tacho/src/session-subject.ts
-var ENRICHMENT_BUDGET_NOTE, ENRICHMENT_LIMIT_NOTE, PARTIAL_NOTE_HEAD, PARTIAL_NOTE_TAIL, escapeRegExp2, NOTE_SOURCE, TRAILING_NOTES, GITHUB_REF_SOURCE;
-var init_session_subject = __esm({
-  "../../packages/tacho/src/session-subject.ts"() {
+// ../../packages/oxagen/src/steering-repo/governance.ts
+var ledgerRotationSchema, governanceSchema;
+var init_governance = __esm({
+  "../../packages/oxagen/src/steering-repo/governance.ts"() {
     "use strict";
-    ENRICHMENT_BUDGET_NOTE = " The account covers only the start of the run: its enrichment budget ran out before the rest was read.";
-    ENRICHMENT_LIMIT_NOTE = " The account covers only the start of the run because its transcript reached a read limit.";
-    PARTIAL_NOTE_HEAD = "Evidence is partial: ";
-    PARTIAL_NOTE_TAIL = " recorded bodies were unavailable.";
-    escapeRegExp2 = (text5) => text5.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
-    NOTE_SOURCE = [
-      `${escapeRegExp2(PARTIAL_NOTE_HEAD)}\\d+${escapeRegExp2(PARTIAL_NOTE_TAIL)}`,
-      escapeRegExp2(ENRICHMENT_BUDGET_NOTE.trim()),
-      escapeRegExp2(ENRICHMENT_LIMIT_NOTE.trim())
-    ].join("|");
-    TRAILING_NOTES = new RegExp(
-      `(?:^|\\s)((?:${NOTE_SOURCE})(?:\\s(?:${NOTE_SOURCE}))*)$`,
-      "u"
+    init_zod();
+    init_context_steering_shared();
+    init_common();
+    init_json_schema();
+    init_tokens();
+    ledgerRotationSchema = external_exports.enum(["day", "week", "month", "year"]);
+    governanceSchema = withRules(
+      external_exports.object({
+        schema: external_exports.literal("governance/v1"),
+        mode: governanceModeSchema,
+        steering: external_exports.object({
+          always_on_tokens: external_exports.union([external_exports.number().int().positive(), external_exports.literal("off")]).optional().describe(
+            "The always-on budget per code repository, or off. Unset inherits Oxagen's default, the largest harness hook limit. A budget above that limit fails the budget check."
+          )
+        }).strict().optional(),
+        ledger: external_exports.object({
+          rotate: ledgerRotationSchema.optional(),
+          max_lines: external_exports.number().int().positive().optional().describe("A new file starts here even mid-period.")
+        }).strict().optional(),
+        // `recall_unreviewed` left the memory table on 2026-09-30, because
+        // Oxagen no longer recalls a memory that waits for review (ADR-238).
+        memory: external_exports.object({
+          batch_size: external_exports.number().int().positive().optional().describe("Memories per memory PR."),
+          retire_after_days: external_exports.number().int().positive().optional(),
+          auto_merge: external_exports.boolean().optional().describe("Allowed in solo mode only.")
+        }).strict().optional(),
+        reviewers: external_exports.array(
+          external_exports.object({
+            paths: external_exports.array(external_exports.string().min(1)).min(1),
+            group: organizationSlugSchema
+          }).strict()
+        ).optional().describe(
+          "Route the folders a pull request changes to a reviewer group."
+        )
+      }).strict(),
+      [
+        {
+          kind: "equals",
+          when: { field: "mode", isNot: "solo" },
+          path: ["memory", "auto_merge"],
+          value: false
+        }
+      ]
     );
-    GITHUB_REF_SOURCE = String.raw`\bhttps?:\/\/(?:www\.)?github\.com\/[\w.-]+\/[\w.-]+\/(pull|issues)\/(\d+)\S*`;
   }
 });
 
-// ../../packages/tacho/src/session-title.ts
-var init_session_title = __esm({
-  "../../packages/tacho/src/session-title.ts"() {
+// ../../packages/oxagen/src/steering-repo/health.ts
+var REPO_HEALTH_STATES, repoHealthSchema, settingsDifferenceSchema;
+var init_health = __esm({
+  "../../packages/oxagen/src/steering-repo/health.ts"() {
     "use strict";
-    init_session_subject();
+    init_zod();
+    init_common();
+    REPO_HEALTH_STATES = [
+      "healthy",
+      "drifted",
+      "disconnected",
+      "diverged"
+    ];
+    repoHealthSchema = external_exports.enum(REPO_HEALTH_STATES);
+    settingsDifferenceSchema = external_exports.object({
+      setting: external_exports.string().min(1).describe(
+        "The setting's path in the baseline, such as rulesets.oxagen_merges."
+      ),
+      expected: external_exports.unknown(),
+      actual: external_exports.unknown(),
+      changed_by: external_exports.string().nullable(),
+      changed_at: instantSchema2.nullable()
+    }).strict();
   }
 });
 
-// ../../packages/tacho/src/index.ts
-var init_src4 = __esm({
-  "../../packages/tacho/src/index.ts"() {
+// ../../packages/oxagen/src/steering-repo/promotion.ts
+var promotionChangeSchema, branchSchema, promotionSchema;
+var init_promotion = __esm({
+  "../../packages/oxagen/src/steering-repo/promotion.ts"() {
     "use strict";
-    init_chain();
-    init_columns();
-    init_digest();
-    init_envelope();
-    init_ids();
-    init_interjection();
-    init_record_basis();
-    init_remote();
-    init_timestamp();
-    init_wire();
-    init_evidence();
-    init_llm_call_dedupe();
-    init_session_subject();
-    init_session_title();
-    init_context_window();
+    init_zod();
+    init_src3();
+    init_context_steering_shared();
+    init_common();
+    init_names();
+    promotionChangeSchema = external_exports.object({
+      path: repoPathSchema,
+      action: external_exports.enum(["added", "modified", "removed"]),
+      lineage: lineageSchema.optional(),
+      id: recordIdSchema.optional(),
+      hash: sha256Schema2.optional(),
+      replaces: recordIdSchema.optional().describe(
+        "The id this record had before a format change, such as the v0.1 conversion."
+      )
+    }).strict();
+    branchSchema = external_exports.string().regex(new RegExp(`^(?:${BRANCH_PREFIXES.join("|")})/.+$`)).describe("Starts with the top-level folder the change touches.");
+    promotionSchema = external_exports.object({
+      schema: external_exports.literal("promotion/v1"),
+      seq: external_exports.number().int().min(1).describe("The line's place in the whole chain, across files."),
+      at: instantSchema2,
+      pull_request: external_exports.object({
+        provider: repositoryProviderSchema,
+        number: external_exports.number().int().positive()
+      }).strict(),
+      branch: branchSchema,
+      mode: governanceModeSchema,
+      approved_by: external_exports.array(actorSchema),
+      merged_by: actorSchema,
+      without_review: external_exports.boolean().describe(
+        "True when the owner, or a role with merge_pr_without_review, merged without an approval."
+      ),
+      changes: external_exports.array(promotionChangeSchema).min(1),
+      prev: sha256Schema2.nullable().describe(
+        "The hash of the line before, or null on the first line of the chain."
+      ),
+      hash: sha256Schema2.describe(
+        "sha256 over the RFC 8785 canonical JSON of this line without hash."
+      )
+    }).strict();
   }
 });
 
@@ -73355,7 +73981,7 @@ var init_run_shared = __esm({
 });
 
 // ../../packages/oxagen/src/contracts/run.list.ts
-var runPublicIdSchema, runSourceSchema, runStatusSchema, runOutcomeSchema, runCostSchema, replayGradeSchema, generatedRunSummarySchema, editedRunSummarySchema, runSummarySchema, operatorKindSchema, RUN_OPERATOR_ROLES, runOperatorRoleSchema, runModelSchema, runMachineSnapshotSchema, runMachineSchema, COMMAND_BLOCKS, STEER_BLOCKS, HOST_POLL_WINDOW_MS, RUN_PULL_REQUEST_MAX, runPullRequestSchema, runDiffSchema, RUN_PULL_REQUEST_FILTERS, RUN_PAUSE_STATES, runPauseSchema, RUN_REPLAY_FILTERS, RUN_SORT_KEYS, RUN_LIST_TOTAL_BOUND, RUN_LABEL_MAX, runItemSchema, runList;
+var runPublicIdSchema, runSourceSchema, runStatusSchema, runOutcomeSchema, runCostSchema, replayGradeSchema, generatedRunSummarySchema, editedRunSummarySchema, runSummarySchema, operatorKindSchema, RUN_OPERATOR_ROLES, runOperatorRoleSchema, runModelSchema, runMachineSnapshotSchema, runMachineSchema, COMMAND_BLOCKS, STEER_BLOCKS, HOST_POLL_WINDOW_MS, RUN_PULL_REQUEST_MAX, runPullRequestSchema, runDiffSchema, runAttributionSchema, RUN_PULL_REQUEST_FILTERS, RUN_PAUSE_STATES, runPauseSchema, RUN_REPLAY_FILTERS, RUN_SORT_KEYS, RUN_LIST_TOTAL_BOUND, RUN_LABEL_MAX, runItemSchema, runList;
 var init_run_list = __esm({
   "../../packages/oxagen/src/contracts/run.list.ts"() {
     "use strict";
@@ -73465,6 +74091,13 @@ var init_run_list = __esm({
       removed: external_exports.number().int().nonnegative(),
       basis: external_exports.enum(["harness_reported", "git_observed"])
     }).strict();
+    runAttributionSchema = external_exports.object({
+      commits: external_exports.number().int().nonnegative(),
+      merges: external_exports.number().int().nonnegative(),
+      written: external_exports.object({ added: external_exports.number().int().nonnegative(), removed: external_exports.number().int().nonnegative() }),
+      shipped: external_exports.object({ added: external_exports.number().int().nonnegative(), removed: external_exports.number().int().nonnegative() }).nullable(),
+      uncommitted: external_exports.object({ added: external_exports.number().int().nonnegative(), removed: external_exports.number().int().nonnegative() }).nullable()
+    });
     RUN_PULL_REQUEST_FILTERS = ["any", "with", "without"];
     RUN_PAUSE_STATES = ["pausing", "paused", "resuming"];
     runPauseSchema = external_exports.object({
@@ -73810,6 +74443,7 @@ var init_run_list = __esm({
       pullRequestsOpened: external_exports.number().int().nonnegative().optional(),
       /** Lines added and removed; null when neither the harness nor git reported any. */
       diff: runDiffSchema.nullable().optional(),
+      attribution: runAttributionSchema.nullable().optional(),
       /**
        * The run's token counts by class, from its `cost.run_totals` row. Null
        * when the run has no rollup row. The column is NOT NULL, so an unpriced
@@ -74722,6 +75356,41 @@ function definitionBudget(tree) {
 function repositoryName(repository) {
   return repository ?? "a repository no record names";
 }
+function harnessNames(harnesses) {
+  const names2 = harnesses.map((harness) => HARNESS_LABELS[harness] ?? harness);
+  if (names2.length <= 1) return names2.join("");
+  return `${names2.slice(0, -1).join(", ")} and ${names2[names2.length - 1]}`;
+}
+function budgetCeiling(budget, line) {
+  if (budget === "off" || budget.tokens <= LARGEST_PREFIX_BUDGET_TOKENS)
+    return null;
+  const at = harnessesAtLargestBudget();
+  const limit = formatCount(LARGEST_PREFIX_BUDGET_TOKENS);
+  const chars = formatCount(
+    Math.max(...at.map((harness) => HARNESS_HOOK_LIMITS[harness].chars))
+  );
+  return find2({
+    rule: "always-on-ceiling",
+    severity: "error",
+    path: GOVERNANCE_TOML_PATH,
+    line,
+    field: "steering.always_on_tokens",
+    message: `always_on_tokens is ${formatCount(budget.tokens)}, above the ${limit} tokens ${harnessNames(at)} take from one hook answer (${chars} characters). No harness would hand an agent the extra text.`,
+    expected: `At most ${limit} tokens, the largest harness hook limit.`,
+    fix: `Set always_on_tokens to ${limit} or less in this PR, or remove it to inherit Oxagen's default, which is that limit.`,
+    detail: {
+      budget: budget.tokens,
+      budget_source: budget.source,
+      ceiling: LARGEST_PREFIX_BUDGET_TOKENS,
+      harnesses: at.map((harness) => ({
+        harness,
+        chars: HARNESS_HOOK_LIMITS[harness].chars,
+        tokens: prefixBudgetTokens(harness),
+        source: HARNESS_HOOK_LIMITS[harness].source
+      }))
+    }
+  });
+}
 function sameBudget(a, b5) {
   if (a === "off" || b5 === "off") return a === b5;
   return a.tokens === b5.tokens;
@@ -74776,6 +75445,8 @@ function alwaysOnPart(env) {
   const line = governance === void 0 ? null : tomlLine(governance, "steering.always_on_tokens");
   const findings = [];
   const notes = [];
+  const ceiling = budgetCeiling(budget, line);
+  if (ceiling !== null) findings.push(ceiling);
   for (const block of alwaysOnBlocks(env.head)) {
     const prior = before.get(block.repository);
     if (!budgetMoved && prior?.text === block.text) continue;
@@ -74888,16 +75559,23 @@ function toolsPart(env) {
     ]
   };
 }
-var find2, LARGEST, budgetCheck;
+var find2, LARGEST, HARNESS_LABELS, budgetCheck;
 var init_budget3 = __esm({
   "../../packages/steering-check/src/checks/budget.ts"() {
     "use strict";
+    init_src4();
     init_steering_repo();
     init_always_on();
     init_finding();
     init_repo2();
     find2 = finder("budget");
     LARGEST = 3;
+    HARNESS_LABELS = {
+      "claude-code": "Claude Code",
+      codex: "Codex",
+      cursor: "Cursor",
+      stella: "Stella"
+    };
     budgetCheck = (env) => {
       const always = alwaysOnPart(env);
       const tools = toolsPart(env);
@@ -76914,7 +77592,9 @@ function importFilename(path2, folder) {
 async function readImportDocuments(sources, target2, writer) {
   const documents = [];
   const unreadable = [];
+  const binary = [];
   const tooLong = [];
+  const tooMany = [];
   for (const source of sources) {
     let content;
     try {
@@ -76932,9 +77612,36 @@ async function readImportDocuments(sources, target2, writer) {
       continue;
     }
     const filename = importFilename(source.path, source.folder);
-    documents.push(
-      target2 === void 0 ? { filename, content } : { filename, content, target: target2 }
-    );
+    const document = { filename, content };
+    if (target2 !== void 0) document.target = target2;
+    if (source.source !== void 0) document.source = source.source;
+    if (source.files !== void 0 && source.files.length > 0) {
+      const files3 = [];
+      for (const file of source.files) {
+        let text5;
+        try {
+          text5 = await readFile9(file.file, "utf8");
+        } catch {
+          unreadable.push(file.file);
+          continue;
+        }
+        if (text5.includes("\0")) {
+          binary.push(file.file);
+          continue;
+        }
+        if (text5.length > MARKDOWN_IMPORT_FILE_CHARS_MAX) {
+          tooLong.push(file.file);
+          continue;
+        }
+        if (files3.length >= MARKDOWN_IMPORT_SKILL_FILES_MAX) {
+          tooMany.push(file.file);
+          continue;
+        }
+        files3.push({ path: file.path, content: text5 });
+      }
+      if (files3.length > 0) document.files = files3;
+    }
+    documents.push(document);
   }
   if (unreadable.length > 0) {
     writer.writeErr(
@@ -76942,12 +77649,24 @@ async function readImportDocuments(sources, target2, writer) {
   ${unreadable.join("\n  ")}`
     );
   }
+  if (binary.length > 0) {
+    writer.writeErr(
+      `Skipped binary files, which the import does not carry:
+  ${binary.join("\n  ")}`
+    );
+  }
   if (tooLong.length > 0) {
     writer.writeErr(
       `Skipped files over ${MARKDOWN_IMPORT_FILE_CHARS_MAX.toLocaleString("en-US")} characters, the most one file may hold:
   ${tooLong.join("\n  ")}`
     );
   }
+  if (tooMany.length > 0) {
+    writer.writeErr(
+      `Skipped skill files past the ${MARKDOWN_IMPORT_SKILL_FILES_MAX} one skill may carry:
+  ${tooMany.join("\n  ")}`
+    );
+  }
   if (documents.length === 0) {
     failCommand("No readable, non-empty files to import.", writer);
   }
@@ -77136,24 +77855,25 @@ var init_markdown_import = __esm({
 // src/commands/steering-import.ts
 var steering_import_exports = {};
 __export(steering_import_exports, {
-  CURSOR_FOLDER: () => CURSOR_FOLDER,
-  CURSOR_RULES_FOLDER: () => CURSOR_RULES_FOLDER,
-  CURSOR_RULE_EXTENSIONS: () => CURSOR_RULE_EXTENSIONS,
+  CATALOGUE_FOLDERS: () => CATALOGUE_FOLDERS,
   MARKDOWN_EXTENSIONS: () => MARKDOWN_EXTENSIONS,
   STEERING_IMPORT_CAPABILITIES: () => STEERING_IMPORT_CAPABILITIES,
   findMarkdownFiles: () => findMarkdownFiles,
   handleSteeringImport: () => handleSteeringImport
 });
 import { readdir as readdir4, realpath as realpath2, stat as stat4 } from "node:fs/promises";
-import { basename as basename8, extname, join as join50 } from "node:path";
+import { basename as basename8, extname, join as join50, relative as relative7, sep as sep8 } from "node:path";
 function byName(a, b5) {
   return a.name < b5.name ? -1 : 1;
 }
+function under(root, path2) {
+  return relative7(root, path2).split(sep8).join("/");
+}
 async function findMarkdownFiles(paths) {
   const sources = [];
   const unreadable = [];
   const seen = /* @__PURE__ */ new Set();
-  const take = async (path2, folder) => {
+  const take = async (path2, extra = {}) => {
     let real = path2;
     try {
       real = await realpath2(path2);
@@ -77161,9 +77881,29 @@ async function findMarkdownFiles(paths) {
     }
     if (seen.has(real)) return;
     seen.add(real);
-    sources.push(folder === void 0 ? { path: path2 } : { path: path2, folder });
+    sources.push({ path: path2, ...extra });
+  };
+  const filesUnder = async (dir, from) => {
+    let entries2;
+    try {
+      entries2 = await readdir4(dir, { withFileTypes: true });
+    } catch {
+      unreadable.push(dir);
+      return [];
+    }
+    const found = [];
+    for (const entry2 of entries2.sort(byName)) {
+      const path2 = join50(dir, entry2.name);
+      if (entry2.isDirectory()) {
+        if (!entry2.name.startsWith(".") && entry2.name !== "node_modules")
+          found.push(...await filesUnder(path2, from));
+      } else if (entry2.isFile() || entry2.isSymbolicLink()) {
+        if (under(from, path2) !== "SKILL.md") found.push(path2);
+      }
+    }
+    return found;
   };
-  const walk2 = async (dir, folder, place2) => {
+  const walk2 = async (dir, root, folder, inCatalogue) => {
     let entries2;
     try {
       entries2 = await readdir4(dir, { withFileTypes: true });
@@ -77172,25 +77912,45 @@ async function findMarkdownFiles(paths) {
       return;
     }
     entries2.sort(byName);
-    const extensions2 = place2 === "rules" ? CURSOR_RULE_EXTENSIONS : MARKDOWN_EXTENSIONS;
     for (const entry2 of entries2) {
       const path2 = join50(dir, entry2.name);
+      const rel = under(root, path2);
       if (entry2.isDirectory()) {
-        if (place2 === "cursor") {
-          if (entry2.name === CURSOR_RULES_FOLDER) {
-            await walk2(path2, folder, "rules");
-          }
-          continue;
-        }
         if (entry2.name === "node_modules") continue;
-        if (entry2.name === CURSOR_FOLDER && place2 === "plain") {
-          await walk2(path2, folder, "cursor");
+        if (entry2.name.startsWith(".")) {
+          if (!inCatalogue && CATALOGUE_FOLDERS.has(entry2.name))
+            await walk2(path2, root, folder, true);
           continue;
         }
-        if (entry2.name.startsWith(".")) continue;
-        await walk2(path2, folder, place2);
-      } else if (place2 !== "cursor" && (entry2.isFile() || entry2.isSymbolicLink()) && extensions2.has(extname(entry2.name).toLowerCase())) {
-        await take(path2, folder);
+        await walk2(path2, root, folder, inCatalogue);
+        continue;
+      }
+      if (!entry2.isFile() && !entry2.isSymbolicLink()) continue;
+      const source = markdownImportSourceOf(rel);
+      if (inCatalogue) {
+        if (source === null) continue;
+        if (source.kind === "skill") {
+          const skillDir = dir;
+          await take(path2, {
+            folder,
+            source: { ...source, path: rel },
+            files: (await filesUnder(skillDir, skillDir)).map((file) => ({
+              path: under(skillDir, file),
+              file
+            }))
+          });
+        } else {
+          await take(path2, { folder, source: { ...source, path: rel } });
+        }
+        continue;
+      }
+      if (MARKDOWN_EXTENSIONS.has(extname(entry2.name).toLowerCase())) {
+        await take(
+          path2,
+          source === null ? { folder } : { folder, source: { ...source, path: rel } }
+        );
+      } else if (source !== null && source.kind === "instructions") {
+        await take(path2, { folder, source: { ...source, path: rel } });
       }
     }
   };
@@ -77203,9 +77963,16 @@ async function findMarkdownFiles(paths) {
       continue;
     }
     if (isFolder) {
-      const place2 = basename8(path2) === CURSOR_FOLDER ? "cursor" : "plain";
-      await walk2(path2, path2, place2);
-    } else await take(path2);
+      const named = CATALOGUE_FOLDERS.has(basename8(path2));
+      await walk2(path2, named ? join50(path2, "..") : path2, path2, false);
+    } else {
+      const rel = under(process.cwd(), path2);
+      const source = rel.startsWith("..") ? null : markdownImportSourceOf(rel);
+      await take(
+        path2,
+        source === null ? {} : { source: { ...source, path: rel } }
+      );
+    }
   }
   return { sources, unreadable };
 }
@@ -77246,9 +78013,11 @@ async function handleSteeringImport(paths, opts, writer = stdoutWriter) {
     writer
   );
 }
-var STEERING_IMPORT_CAPABILITIES, MARKDOWN_EXTENSIONS, CURSOR_FOLDER, CURSOR_RULES_FOLDER, CURSOR_RULE_EXTENSIONS, TARGETS;
+var STEERING_IMPORT_CAPABILITIES, MARKDOWN_EXTENSIONS, CATALOGUE_FOLDERS, TARGETS;
 var init_steering_import = __esm({
   "src/commands/steering-import.ts"() {
+    init_steering_markdown_import_shared();
+    init_harness_files();
     init_capture_writer();
     init_markdown_import();
     STEERING_IMPORT_CAPABILITIES = [
@@ -77261,12 +78030,11 @@ var init_steering_import = __esm({
       ".mdx",
       ".mdc"
     ]);
-    CURSOR_FOLDER = ".cursor";
-    CURSOR_RULES_FOLDER = "rules";
-    CURSOR_RULE_EXTENSIONS = /* @__PURE__ */ new Set([
-      ".mdc",
-      ".md"
-    ]);
+    CATALOGUE_FOLDERS = new Set(
+      WELL_KNOWN_FOLDERS.map((folder) => folder.split("/")[0] ?? "").filter(
+        (name) => name.startsWith(".")
+      )
+    );
     TARGETS = [
       "records",
       "policies",
@@ -79393,7 +80161,7 @@ async function handleMemoryList(opts, writer = stdoutWriter) {
   const states2 = listOpt(opts.state);
   for (const state of states2)
     oneOf(state, WORKSPACE_MEMORY_STATES, "--state", writer);
-  const harness = oneOf(opts.harness, HARNESSES2, "--harness", writer);
+  const harness = oneOf(opts.harness, HARNESSES3, "--harness", writer);
   try {
     const result2 = await listWorkspaceMemories({
       states: states2.length === 0 ? void 0 : states2,
@@ -79600,7 +80368,7 @@ async function handleMemoryImport(files3, opts, writer = stdoutWriter) {
     writer
   );
 }
-var MEMORY_COMMAND_CAPABILITIES, HARNESSES2, KINDS2, FORCES2, EFFECTS2, DISMISS_REASONS, MEMORY_IMPORT_CAPABILITIES;
+var MEMORY_COMMAND_CAPABILITIES, HARNESSES3, KINDS2, FORCES2, EFFECTS2, DISMISS_REASONS, MEMORY_IMPORT_CAPABILITIES;
 var init_memory2 = __esm({
   "src/commands/memory.ts"() {
     init_api();
@@ -79615,7 +80383,7 @@ var init_memory2 = __esm({
       "dismiss_memories",
       "drop_memory_record"
     ];
-    HARNESSES2 = [
+    HARNESSES3 = [
       "claude-code",
       "codex",
       "cursor",
@@ -79893,7 +80661,7 @@ import {
   writeFileSync as writeFileSync10
 } from "node:fs";
 import { homedir as homedir12, hostname as osHostname3 } from "node:os";
-import { join as join52, relative as relative7, resolve as resolve20, sep as sep8 } from "node:path";
+import { join as join52, relative as relative8, resolve as resolve20, sep as sep9 } from "node:path";
 function git4(cwd, args) {
   return new Promise((done) => {
     try {
@@ -79964,7 +80732,7 @@ function symlinkState(root) {
     try {
       if (!lstatSync9(at).isSymbolicLink()) return "missing";
       const target2 = realpathSync8(at);
-      if (target2 !== oxagenReal && !target2.startsWith(oxagenReal + sep8)) {
+      if (target2 !== oxagenReal && !target2.startsWith(oxagenReal + sep9)) {
         return "missing";
       }
     } catch {
@@ -80054,10 +80822,10 @@ async function ensureWorkspaceLinkIgnored(root) {
   const top = await git4(root, ["rev-parse", "--show-toplevel"]);
   if (!top) return null;
   const topDir = resolve20(top);
-  const entry2 = relative7(
+  const entry2 = relative8(
     topDir,
     join52(realpathOr2(root), ".oxagen", "workspace.json")
-  ).split(sep8).join("/");
+  ).split(sep9).join("/");
   if (entry2.startsWith("../")) return null;
   const rule = await git4(topDir, ["check-ignore", "--no-index", "-v", entry2]);
   if (rule !== null) return null;
@@ -80548,7 +81316,7 @@ import {
   join as join53,
   parse as parsePath2,
   posix as posix4,
-  sep as sep9
+  sep as sep10
 } from "node:path";
 function checkSteeringPath(path2) {
   if (typeof path2 !== "string" || path2.length === 0) {
@@ -80695,7 +81463,7 @@ function assertInsideOxagen(root, path2) {
       real = null;
     }
     if (real !== null) {
-      if (real !== oxagenReal && !real.startsWith(oxagenReal + sep9)) {
+      if (real !== oxagenReal && !real.startsWith(oxagenReal + sep10)) {
         throw new Error(`${path2} resolves outside .oxagen/`);
       }
       return;
@@ -80708,7 +81476,7 @@ function assertInsideOxagen(root, path2) {
 function pruneEmptyDirs(root, path2) {
   const stop = join53(root, OXAGEN_DIR);
   let dir = dirname29(join53(root, ...path2.split("/")));
-  while (dir.startsWith(stop + sep9)) {
+  while (dir.startsWith(stop + sep10)) {
     try {
       if (readdirSync14(dir).length > 0) return;
       rmdirSync7(dir);
@@ -124025,7 +124793,7 @@ import {
   readlinkSync as readlinkSync4,
   statSync as statSync13
 } from "node:fs";
-import { dirname as dirname30, isAbsolute as isAbsolute15, join as join54, relative as relative8, resolve as resolve22, sep as sep10 } from "node:path";
+import { dirname as dirname30, isAbsolute as isAbsolute15, join as join54, relative as relative9, resolve as resolve22, sep as sep11 } from "node:path";
 function git5(cwd, args, input) {
   try {
     return execFileSync2("git", args, {
@@ -124165,11 +124933,11 @@ function within3(path2, scope) {
 function scopesFor(root, cwd, paths, trees) {
   const scopes = [];
   for (const path2 of paths) {
-    const rel = relative8(root, resolve22(cwd, path2));
-    if (rel === ".." || rel.startsWith(`..${sep10}`) || isAbsolute15(rel)) {
+    const rel = relative9(root, resolve22(cwd, path2));
+    if (rel === ".." || rel.startsWith(`..${sep11}`) || isAbsolute15(rel)) {
       return { error: `${path2} is outside the steering repo at ${root}.` };
     }
-    const scope = rel.split(sep10).join("/");
+    const scope = rel.split(sep11).join("/");
     const known = trees.some(
       (tree) => tree !== null && [...tree.keys()].some((file) => within3(file, scope))
     );
@@ -124477,7 +125245,7 @@ async function check(paths = [], opts = {}, writer = stdoutWriter, cwd = process
   }
   if (!report.passed) process.exitCode = 1;
 }
-var ROOT_FILES2, TREE_DIRS, PATHSPECS, DEFAULT_BASES, NOT_A_STEERING_REPO, NO_BASE, GIT_TIMEOUT_MS2, GIT_MAX_BUFFER, CACHE_MAX_AGE_MS, CONTEXT_KEYS, workspaceSlugs, KEY_SCOPE_MISMATCH, ScopeMismatchError;
+var ROOT_FILES3, TREE_DIRS, PATHSPECS, DEFAULT_BASES, NOT_A_STEERING_REPO, NO_BASE, GIT_TIMEOUT_MS2, GIT_MAX_BUFFER, CACHE_MAX_AGE_MS, CONTEXT_KEYS, workspaceSlugs, KEY_SCOPE_MISMATCH, ScopeMismatchError;
 var init_check3 = __esm({
   "src/commands/check.ts"() {
     init_paths2();
@@ -124490,7 +125258,7 @@ var init_check3 = __esm({
     init_capture_writer();
     init_config();
     init_output();
-    ROOT_FILES2 = [
+    ROOT_FILES3 = [
       AGENTS_MD_PATH,
       CLAUDE_MD_PATH,
       README_PATH,
@@ -124503,7 +125271,7 @@ var init_check3 = __esm({
       TOOLS_DIR,
       POLICY_DIR
     ];
-    PATHSPECS = [...ROOT_FILES2, ...TREE_DIRS];
+    PATHSPECS = [...ROOT_FILES3, ...TREE_DIRS];
     DEFAULT_BASES = ["origin/HEAD", "origin/main"];
     NOT_A_STEERING_REPO = "This directory is not in a steering repo. Run oxagen check inside a clone that holds workspace.toml, or AGENTS.md and steering/ for an organization repo.";
     NO_BASE = `No production branch to compare with. ${DEFAULT_BASES.join(" and ")} do not resolve in this clone, so the checks read the working tree whole. Pass --base <ref> to compare with a branch.`;
@@ -128181,13 +128949,13 @@ var init_src9 = __esm({
 
 // src/commands/codegraph-upload/files.ts
 import { readdir as readdir5, stat as stat5 } from "node:fs/promises";
-import { join as join55, relative as relative9, sep as sep11 } from "node:path";
+import { join as join55, relative as relative10, sep as sep12 } from "node:path";
 function hasGlobChars(pattern) {
   return /[*?[\]{}]/.test(pattern);
 }
 function normalize2(path2) {
   const trimmed = path2.replace(/^\.\//, "");
-  return sep11 === "/" ? trimmed : trimmed.split(sep11).join("/");
+  return sep12 === "/" ? trimmed : trimmed.split(sep12).join("/");
 }
 async function walk(root, dir, out) {
   const entries2 = await readdir5(dir, { withFileTypes: true });
@@ -128197,7 +128965,7 @@ async function walk(root, dir, out) {
     if (entry2.isDirectory()) {
       if (!SKIP_DIRS.has(entry2.name)) await walk(root, full, out);
     } else if (entry2.isFile()) {
-      out.push(normalize2(relative9(root, full)));
+      out.push(normalize2(relative10(root, full)));
     }
   }
 }