@plurnk/plurnk-service 1.16.5 → 1.18.0

package/dist/core/TurnRunner.js

@@ -1,28 +1,37 @@
-import { PathSyntax, PlurnkParser, PlurnkParseError, UNKNOWN_POSITION } from "@plurnk/plurnk-contracts";
+var _a;
+import { TurnDisposition } from "@plurnk/plurnk-contracts";
+import NativeContent from "./NativeContent.js";
+import { PlurnkParser } from "@plurnk/plurnk-parser";
+import { PathSyntax, PlurnkParseError, UNKNOWN_POSITION } from "@plurnk/plurnk-contracts";
 import { setTimeout as delay } from "node:timers/promises";
 import { aggregateProviderAccounting } from "@plurnk/plurnk-providers";
 const comparePosition = (a, b) => a.line - b.line || a.column - b.column;
 import Meta from "@plurnk/plurnk-meta";
-import EntryCrud from "../schemes/_entry-crud.js";
 import GitMembership from "./git-membership.js";
 import { acceptedKinds } from "./attachments.js";
 import GitState from "./git-state.js";
 import WorkspaceSettings from "./workspace-settings.js";
-import { generatedPathname, promptPathname, promptLoopPrefix } from "./plurnk-uri.js";
+import { taskTiming } from "./LoopLifecycle.js";
+import { generatedPathname, promptLoopPrefix } from "./plurnk-uri.js";
+import PromptFrames from "./PromptFrames.js";
 import { readFile } from "node:fs/promises";
-// {§grammar-rail-registration} — bare names are the built-in rail namespace;
-// everything else is an import specifier resolved through the Node chain.
-export const resolveGrammarRailPath = (variant) => variant.startsWith("/") || variant.startsWith(".")
-    || variant.includes("/") || variant.includes(":")
-    ? (variant.startsWith("/") || variant.startsWith(".")
-        ? variant
-        : fileURLToPath(import.meta.resolve(variant)))
-    : fileURLToPath(import.meta.resolve(`@plurnk/plurnk-contracts/${variant}`));
-import { fileURLToPath } from "node:url";
+import { resolve as resolvePath } from "node:path";
+import { homedir } from "node:os";
+// {§operator-grammar} — an operator's own GBNF is a file path: absolute, `~`-relative, or
+// relative to the daemon's working directory. The service ships no grammar profile, so a bare
+// name (no separator) is refused by name rather than resolved against anything.
+export const resolveOperatorGrammarPath = (value) => {
+    if (value === "~" || value.startsWith("~/"))
+        return resolvePath(homedir(), value.slice(2));
+    if (value.startsWith("/") || value.startsWith(".") || value.includes("/"))
+        return resolvePath(value);
+    throw new Error(`PLURNK_PROVIDERS_GBNF=${value} names a bundled grammar profile; the service ships none (#588). Give the path of a grammar file you wrote.`);
+};
 // Shared module imported by both Engine and bin/digest.ts, so wire
 // projection and digest projection are structurally one function — no
 // drift between wire and digest possible.
 import PacketWire from "./packet-wire.js";
+import ReasoningView from "./ReasoningView.js";
 import Results, { OperationFailureError } from "./results.js";
 import Turn from "./Turn.js";
 import StoredPacket from "./StoredPacket.js";
@@ -30,39 +39,29 @@ import { observed, observedSync } from "../observe/spans.js";
 import { GEN_AI_REQUEST_SPAN, genAiRequestOptions, settleGenAiResponse } from "../observe/genai.js";
 import { PROVIDER_CALLS, recordCounter } from "../observe/metrics.js";
 import ModelCall, { ModelCallPersistenceError, ProviderAccountingIntegrityError } from "./ModelCall.js";
-import OverflowTurn from "./OverflowTurn.js";
+import WorkerName from "./WorkerName.js";
 import TurnOps from "./TurnOps.js";
 import CapabilityPolicies from "./CapabilityPolicies.js";
 import CapabilityResolver from "./CapabilityResolver.js";
-import LoopPolicyReader from "./LoopPolicyReader.js";
-// The prompt entry target - prompt:///<loop>/<N>, self-only ({§prompt-self-only}):
-// the owner rides the owner_id column, the address carries only the loop coordinate.
-const promptTarget = (loopSeq, promptOrdinal) => {
-    const storage = promptPathname(loopSeq, promptOrdinal);
+// {§prompt-address}: the same literal address in every observer's packet.
+const promptTarget = (workerName, storage) => {
     return {
-        kind: "url", raw: `prompt://${storage}`,
+        kind: "url", raw: `prompt://${workerName}${storage}`,
         scheme: "prompt", username: null, password: null,
-        hostname: null, port: null,
+        hostname: workerName, port: null,
         pathname: storage, query: null, fragment: null,
     };
 };
 const regexLiteral = (value) => value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
-const workerCatalogTarget = (namespace, availableNames, admittedNames) => {
-    if (availableNames.length > 0 && admittedNames.length === 0)
-        return null;
-    const leaf = availableNames.length === 0 || admittedNames.length === availableNames.length
-        ? "*.md"
-        : admittedNames.length === 1
-            ? `${admittedNames[0]}.md`
-            : `{${admittedNames.join(",")}}.md`;
-    const pathname = generatedPathname(`/${namespace}/${leaf}`);
+const workerCatalogTarget = (namespace) => {
+    const pathname = generatedPathname(`/${namespace}/*.md`);
     return {
         kind: "url",
-        raw: `worker://~${pathname}`,
+        raw: `worker://${pathname}`,
         scheme: "worker",
         username: null,
         password: null,
-        hostname: "~",
+        hostname: null,
         port: null,
         pathname,
         query: null,
@@ -115,35 +114,12 @@ const readFilesItems = () => {
     return normalizeFilesItems(Number.parseInt(raw, 10));
 };
 import { ProviderError, scopeEnvToAlias } from "@plurnk/plurnk-providers";
-import { validateGbnf } from "@plurnk/gbnf";
 import ProviderInstantiate from "./ProviderInstantiate.js";
 import TurnMaterialization from "./TurnMaterialization.js";
 import BareBatchRunner from "./BareBatchRunner.js";
-import { TERMINAL_SEND_SIGNALS, TURN_STATUS_IMPLICIT_CONTINUE } from "./turn-signals.js";
+import { TURN_STATUS_IMPLICIT_CONTINUE } from "./turn-signals.js";
 import AdmittedTurnExecutor from "./AdmittedTurnExecutor.js";
-// A generated rail may constrain only the sampled continuation while the chat
-// template contributes a prefix that llama-server preserves in its response.
-// The artifact names the alternate root that composes those bytes for evidence
-// grading; arbitrary grammars without the declaration retain their transport root.
-const grammarConstraint = (grammar) => {
-    const declarations = [...grammar.matchAll(/^# @plurnk-response-root ([A-Za-z][A-Za-z0-9-]*)$/gm)];
-    if (declarations.length === 0)
-        return { transport: grammar, response: grammar };
-    if (declarations.length !== 1)
-        throw new Error("GBNF constraint declares multiple @plurnk-response-root values");
-    const responseRoot = declarations[0][1];
-    if (!grammar.split("\n").some((line) => line.startsWith(`${responseRoot} ::=`))) {
-        throw new Error(`GBNF constraint declares missing response root ${responseRoot}`);
-    }
-    const roots = [...grammar.matchAll(/^root ::= ([A-Za-z][A-Za-z0-9-]*)$/gm)];
-    if (roots.length !== 1)
-        throw new Error("GBNF constraint must declare exactly one simple root");
-    return {
-        transport: grammar,
-        response: grammar.replace(roots[0][0], `root ::= ${responseRoot}`),
-    };
-};
-const TOKEN_BUDGET_OVERFLOW_HARD_DETAIL = "Context Token Budget Overflow: tokensActiveTotal exceeded tokensActiveMax, and the causal overflow turn could not make enough room.";
+const TOKEN_BUDGET_OVERFLOW_HARD_DETAIL = "Context Token Budget Overflow: logTokensTotal exceeds logTokensMax; retained context cannot fit.";
 const curationOverflowFailure = (pressure) => Results.failure("engine:context", "token-budget-overflow", 413, TOKEN_BUDGET_OVERFLOW_HARD_DETAIL, {}, {
     usage: pressure.weight,
     ceiling: pressure.budget,
@@ -180,7 +156,23 @@ const readProviderRecoveryBackoff = () => readMilliseconds("PLURNK_SERVICE_PROVI
 const RECOVERABLE_PROVIDER_FAILURES = new Set(["rate_limit", "network_failure", "deadline_exceeded", "resource_interrupted"]);
 // The wall's abort reason — runLoop branches a mid-turn teardown to the 504 terminal on it.
 export const LOOP_TIMEOUT_REASON = "loop_timeout";
-export default class TurnRunner {
+// Every turn result carries the same shape; a diversion names only what differs.
+const turnResult = ({ createdTurnIds, turnId }, status, facts = {}) => ({
+    createdTurnIds,
+    turnId,
+    producer: "model",
+    kind: "inference",
+    status,
+    outcomes: [],
+    fingerprint: "",
+    capacityHardStop: false,
+    providerParked: false,
+    emptyTurn: false,
+    emissionAttempts: 0,
+    emissionExhausted: false,
+    ...facts,
+});
+class TurnRunner {
     #db;
     #schemes;
     #mimetypes;
@@ -202,7 +194,8 @@ export default class TurnRunner {
     #warmWorkspace;
     #dispatch;
     #resolveWorkerProviderIdentity;
-    #gbnfCache = new Map();
+    // {§operator-grammar} — one read per path per daemon; the file is the operator's and static.
+    #grammarCache = new Map();
     #materialization;
     #bareBatch;
     #admitted;
@@ -228,8 +221,8 @@ export default class TurnRunner {
         this.#warmWorkspace = warmWorkspace;
         this.#dispatch = dispatch;
         this.#resolveWorkerProviderIdentity = resolveWorkerProviderIdentity;
-        this.#materialization = new TurnMaterialization({ db: this.#db, schemes: this.#schemes, weighContent: this.#weighContent });
-        this.#bareBatch = new BareBatchRunner({ db: this.#db, providerAttributions: this.#providerAttributions.bind(this), providerFailure: TurnRunner.#providerFailure });
+        this.#materialization = new TurnMaterialization({ db: this.#db, weighContent: this.#weighContent });
+        this.#bareBatch = new BareBatchRunner({ db: this.#db, providerAttributions: this.#providerAttributions.bind(this), providerFailure: _a.#providerFailure });
         this.#admitted = new AdmittedTurnExecutor({ db: this.#db, schemes: this.#schemes, notices: this.#notices, problems: this.#problems, dispatcher: this.#dispatcher, bareBatch: this.#bareBatch });
     }
     async #recordInference(args) {
@@ -243,66 +236,31 @@ export default class TurnRunner {
             workerId: args.workerId,
             loopId: args.loopId,
             packetCount: packetCount.count,
+            ...taskTiming(packetCount),
         });
     }
-    // {§rail-truth-engine-verdict} — the verify GAP (a configured grammar @plurnk/gbnf can't
-    // parse): warn once per message, never per turn; the turn records railsVerdict "unverifiable".
-    static #railGapWarned = new Set();
-    static #warnRailVerdictGapOnce(message) {
-        if (TurnRunner.#railGapWarned.has(message))
-            return;
-        TurnRunner.#railGapWarned.add(message);
-        process.stderr.write(`plurnk-engine: rail verdict unavailable — the configured grammar did not parse in @plurnk/gbnf (${message})\n`);
-    }
-    static #requireGrammarEvidence(response, allowWithheld) {
-        const evidence = response.grammarEvidence;
-        if (evidence === undefined) {
-            throw new Error("provider contract violation: configured GBNF response omitted grammar evidence");
-        }
-        const input = [...evidence.input];
-        if (!Number.isInteger(evidence.contentStart)
-            || evidence.contentStart < 0
-            || evidence.contentStart > input.length
-            || typeof evidence.transported !== "boolean"
-            || input.slice(evidence.contentStart).join("") !== response.assistant.content) {
-            throw new Error("provider contract violation: grammar evidence does not map exactly to assistant.content");
-        }
-        if (!allowWithheld && !evidence.transported) {
-            throw new Error("provider contract violation: configured GBNF was not transported outside explicit debug mode");
-        }
-        return evidence;
-    }
-    async #grammarConstraint(provider) {
-        // A real alias scopes its rail; an alias-free direct route uses the
-        // global provider configuration. Unrelated alias settings never apply.
-        // {§grammar-configuration-admission}
+    // {§operator-grammar} — the operator's grammar text for this provider, or undefined when
+    // none is configured. A real alias scopes its knob; an alias-free direct route uses the
+    // global provider configuration. Unrelated alias settings never apply
+    // ({§grammar-configuration-admission}). An unreadable file throws: a configured grammar
+    // never silently degrades.
+    async #operatorGrammar(provider) {
         ProviderInstantiate.assertGrammarConfigurationScope(provider);
         const alias = ProviderInstantiate.configurationAliasOf(provider);
         const scoped = alias === undefined
             ? process.env
-            : scopeEnvToAlias(process.env, alias, [
-                "PLURNK_PROVIDERS_GBNF",
-                "PLURNK_PROVIDERS_GBNF_DEBUG",
-            ]);
-        const variant = scoped.PLURNK_PROVIDERS_GBNF;
-        if (variant === undefined || variant === "" || variant === "0")
+            : scopeEnvToAlias(process.env, alias, ["PLURNK_PROVIDERS_GBNF"]);
+        const configured = scoped.PLURNK_PROVIDERS_GBNF;
+        if (configured === undefined || configured === "" || configured === "0")
             return undefined;
-        const allowWithheld = scoped.PLURNK_PROVIDERS_GBNF_DEBUG !== undefined
-            && scoped.PLURNK_PROVIDERS_GBNF_DEBUG !== ""
-            && scoped.PLURNK_PROVIDERS_GBNF_DEBUG !== "0";
-        const hit = this.#gbnfCache.get(variant);
+        const path = resolveOperatorGrammarPath(configured);
+        const hit = this.#grammarCache.get(path);
         if (hit !== undefined)
-            return { ...hit, allowWithheld };
-        // {§grammar-rail-registration} — a bare name is a built-in rail subpath
-        // under @plurnk/plurnk-contracts; any other form is an import specifier
-        // (an operator file path or a package export subpath), so a third-party
-        // rail package plugs in with no built-in registry change.
-        const path = resolveGrammarRailPath(variant);
-        const text = await readFile(path, "utf8"); // unresolvable/unreadable throws — a configured rail never silently degrades
-        const constraint = grammarConstraint(text);
-        this.#gbnfCache.set(variant, constraint);
-        process.stderr.write(`plurnk-engine: GBNF constraint: ${alias || "(bare)"} → ${variant} (${text.length} chars)\n`);
-        return { ...constraint, allowWithheld };
+            return hit;
+        const text = await readFile(path, "utf8");
+        this.#grammarCache.set(path, text);
+        process.stderr.write(`plurnk-engine: operator grammar: ${alias || "(bare)"} → ${path} (${text.length} chars)\n`);
+        return text;
     }
     // A lineage's no-parent root; a root worker resolves to itself. Fail hard
     // when corruption leaves a worker without one. {§worker-primary}
@@ -342,10 +300,9 @@ export default class TurnRunner {
         }
         return { line, column };
     }
-    // {§packet-attachment-parts} — a route receives, as native parts read from the scheme's bytes at
-    // request time, the packet's attachments of every kind its model accepts; every other attachment
-    // reaches it as the text projection alone.
-    async #wireMessages(packet, workspaceId, provider) {
+    // {§packet-attachment-parts}: native parts come from the READ's immutable snapshot,
+    // never from a source that may have changed since the observation.
+    async #wireMessages(packet, ctx, provider) {
         const accepted = acceptedKinds(provider.inputModalities);
         if (accepted.length === 0 || !(packet.attachments ?? []).some((attachment) => accepted.includes(attachment.kind))) {
             return {
@@ -355,28 +312,69 @@ export default class TurnRunner {
         }
         const nativeInputs = new Set();
         const messages = await PacketWire.wireMessages(packet, async (attachment) => {
-            const handler = this.#schemes.get(attachment.scheme);
-            const source = handler?.byteSource?.(attachment.pathname, { db: this.#db, workspaceId });
-            if (source === undefined)
-                return null;
-            const total = await source.size();
-            if (total === null || total === 0)
-                return null;
-            const bytes = await source.read(1, total);
+            const bytes = await NativeContent.read(ctx.db, attachment.contentHash);
             nativeInputs.add(attachment.coordinate);
             return bytes;
         }, (kind) => accepted.includes(kind));
         return { messages, nativeInputs: [...nativeInputs] };
     }
-    async runTurn({ provider, childProvider = provider, messages, recap = "", workspaceId, workerId, loopId, signal, onDispatch, onSettled, turnNumber = 1, maxTurns = 50, invalidEmissionRecoveryEntryId, }) {
+    // One inference cycle: the six phases in order, over the records declared above.
+    // A diversion (curation overflow, a provider failure, an exhausted emission)
+    // completes the turn and returns; anything else that throws fails every turn
+    // this cycle opened.
+    async runTurn({ provider, childProvider = provider, messages, recap = "", workspaceId, workerId, loopId, signal, onDispatch, onSettled, turnNumber = 1, invalidEmissionRecoveryEntryId, }) {
+        const args = {
+            provider, childProvider, messages, recap, workspaceId, workerId, loopId, signal, onDispatch, onSettled,
+            turnNumber, invalidEmissionRecoveryEntryId,
+        };
+        const createdTurnIds = [];
+        try {
+            const container = await this.#openTurnContainer(args, createdTurnIds);
+            const gitStatus = await this.#deriveWorkspace(args, container.systemCtx);
+            if (container.initializationTurn !== null)
+                await this.#runInitializationTurn(args, container, container.initializationTurn);
+            const request = await this.#composeRequest(args, container, gitStatus);
+            const overflow = this.#packets.curationOverflow(request.packet);
+            if (overflow !== null)
+                return await this.#failCuration(request, overflow);
+            const attempts = await this.#prepareProviderAttempts(args, request);
+            let emission;
+            try {
+                emission = await this.#attemptProvider(args, request, attempts);
+            }
+            catch (error) {
+                return await this.#settleProviderFailure(error, args, request, attempts);
+            }
+            if (!emission.split.emissionValid)
+                return await this.#rejectExhaustedEmission(args, request, emission);
+            await this.#recordAdmittedEmission(args, request, emission);
+            return await this.#settleAdmittedTurn(args, request, emission);
+        }
+        catch (cause) {
+            const completionFailures = [];
+            for (const createdTurnId of createdTurnIds) {
+                try {
+                    await Turn.failOpen(this.#db, createdTurnId);
+                }
+                catch (completionCause) {
+                    completionFailures.push(completionCause);
+                }
+            }
+            if (completionFailures.length > 0) {
+                throw new AggregateError([cause, ...completionFailures], "turn execution failed and its open turn containers could not all be completed");
+            }
+            throw cause;
+        }
+    }
+    // Phase 1 — the producer-neutral turn container. Every producer opens the same
+    // durable turn and completes it only after its ordered operations settle; model
+    // packets and provider metadata are optional inference evidence, not turn identity.
+    async #openTurnContainer(args, createdTurnIds) {
+        const { workspaceId, workerId, loopId, turnNumber, invalidEmissionRecoveryEntryId } = args;
+        const workerName = await WorkerName.forId(this.#db, workerId);
         const transientOpenLogEntryId = typeof invalidEmissionRecoveryEntryId === "number"
             ? invalidEmissionRecoveryEntryId
             : null;
-        // === Producer-neutral turn container ===
-        //
-        // Every producer opens the same durable turn and completes it only
-        // after its ordered operations settle. Model packets and provider
-        // metadata are optional inference evidence, not turn identity.
         const initialSequence = await this.#db.engine_next_turn_sequence.get({ loop_id: loopId });
         if (initialSequence === undefined)
             throw new Error("Engine.runTurn: next turn sequence is unavailable");
@@ -392,1193 +390,1052 @@ export default class TurnRunner {
             worker_id: workerId,
         });
         const workerFirstInference = priorInference?.present === 0;
-        const createdTurnIds = [];
-        try {
-            // {§worker-initialization-entry} — turn zero is an ordinary `_plurnk`
-            // operation turn. Its model-facing zero is a phase label; durable turn
-            // coordinates remain one-based.
-            const initializationTurn = initialSequence.next === 1 && workerFirstInference
-                ? await Turn.open(this.#db, { loopId, producer: "_plurnk", kind: "initialization" })
-                : null;
-            if (initializationTurn !== null)
-                createdTurnIds.push(initializationTurn.id);
-            const initializationPolicies = initializationTurn === null
-                ? []
-                : (await CapabilityPolicies.layers(this.#db, workspaceId, workerId, await LoopPolicyReader.read(this.#db, loopId))).map((layer) => layer.policy);
-            const initializationAdmits = (statement) => this.#capabilities.allowsAcross(statement, workerId, initializationPolicies);
-            let modelTurn = initializationTurn === null
-                ? await Turn.open(this.#db, { loopId, producer: "model", kind: "inference" })
-                : null;
-            if (modelTurn !== null)
-                createdTurnIds.push(modelTurn.id);
-            // {§env-delta-log-pull} — creation atomically owns the ordinary worker
-            // baseline or fork snapshot. Packet assembly consumes, never invents,
-            // that durable observation boundary.
-            const ambientCursor = await this.#db.engine_initialize_ambient_cursor.get({ workspace_id: workspaceId, worker_id: workerId });
-            if (ambientCursor?.ambient_event_cursor === null || ambientCursor === undefined) {
-                throw new Error(`worker ${workerId} has no durable ambient observation boundary`);
-            }
-            // Threaded per turn, never engine state, so concurrent loops on
-            // different providers each read their own honest tokenizer values.
-            const systemContext = (contextTurnId) => ({
-                db: this.#db, workspaceId, workerId, functionalityWorkerId: workerId, loopId, turnId: contextTurnId,
-                writer: "_plurnk",
-                signal: this.#loopSignal(loopId),
-                streamEventNotify: this.#streamEventNotify,
-                wakeWorkerNotify: this.#wakeWorkerNotify,
-                weigh: this.#weighContent,
-                mimetypes: this.#mimetypes,
-                defaultChannelFor: (s) => this.#schemes.defaultChannelFor(s, workerId),
-                pushNotice: (notice) => this.#notices.push(workspaceId, workerId, loopId, notice),
-                requestInteraction: (request) => this.#interactions.request(request, { workspaceId, workerId, loopId, turnId: contextTurnId }, this.#loopSignal(loopId)),
-            });
-            let systemCtx = systemContext(initializationTurn?.id ?? modelTurn.id);
-            // {§prompt-entry} — the prompt entry exists before any turn of the loop
-            // runs, so the initialization COPY archives a real source; its `prompt`
-            // log row is published to the model turn below (one durable publication
-            // per loop, decided by that row).
-            const promptPublication = turnNumber === 1 && loopRow?.prompt_published === 0
-                && typeof loopRow.prompt === "string" && loopRow.prompt.length > 0
-                ? {
-                    content: loopRow.prompt,
-                    source: loopRow.prompt_source,
-                    path: promptTarget(loopRow.sequence, 1),
+        // {§worker-initialization-entry} — turn zero is an ordinary `_plurnk`
+        // operation turn. Its model-facing zero is a phase label; durable turn
+        // coordinates remain one-based.
+        const initializationTurn = initialSequence.next === 1 && workerFirstInference
+            ? await Turn.open(this.#db, { loopId, producer: "_plurnk", kind: "initialization" })
+            : null;
+        if (initializationTurn !== null)
+            createdTurnIds.push(initializationTurn.id);
+        const initializationPolicies = initializationTurn === null
+            ? []
+            : (await CapabilityPolicies.layers(this.#db, workspaceId)).map((layer) => layer.policy);
+        const modelTurn = initializationTurn === null
+            ? await Turn.open(this.#db, { loopId, producer: "model", kind: "inference" })
+            : null;
+        if (modelTurn !== null)
+            createdTurnIds.push(modelTurn.id);
+        // {§env-delta-log-pull} — creation atomically owns the ordinary worker
+        // baseline or fork snapshot. Packet assembly consumes, never invents,
+        // that durable observation boundary.
+        const ambientCursor = await this.#db.engine_initialize_ambient_cursor.get({ workspace_id: workspaceId, worker_id: workerId });
+        if (ambientCursor?.ambient_event_cursor === null || ambientCursor === undefined) {
+            throw new Error(`worker ${workerId} has no durable ambient observation boundary`);
+        }
+        const systemCtx = this.#schemeContext(args, initializationTurn?.id ?? modelTurn.id);
+        // {§prompt-entry} — the prompt entry exists before any turn of the loop
+        // runs; its `prompt` log row is published to the model turn below (one
+        // durable publication per loop, decided by that row).
+        const promptPublication = turnNumber === 1 && loopRow?.prompt_published === 0
+            && typeof loopRow.prompt === "string" && loopRow.prompt.length > 0
+            ? {
+                content: loopRow.prompt,
+                source: loopRow.prompt_source,
+                path: promptTarget(workerName, await PromptFrames.write(systemCtx, {
+                    loopSequence: loopRow.sequence, ordinal: 1, content: loopRow.prompt,
+                    source: loopRow.prompt_source, pathname: loopRow.prompt_pathname,
                     openPaths: assertOpenPaths(JSON.parse(loopRow.open_paths), `Loop ${loopId} open_paths`),
-                }
-                : null;
-            if (promptPublication !== null) {
-                const entry = {
-                    channels: { body: { content: promptPublication.content, mimetype: "text/markdown" } },
-                    attributes: {
-                        openPaths: promptPublication.openPaths,
-                        ...(promptPublication.source === null ? {} : { source: promptPublication.source }),
-                    },
-                };
-                await EntryCrud.writeEntry({ authority: "", pathname: promptPublication.path.pathname }, entry, systemCtx, "prompt", workerId);
+                })),
+                openPaths: assertOpenPaths(JSON.parse(loopRow.open_paths), `Loop ${loopId} open_paths`),
             }
-            const initializationStatements = [];
-            // {§worker-initialization-entry} — the worker's first turn is the worked
-            // example itself: an ordinary PLAN, the actual orienting operations,
-            // and an ordinary terminal SEND.
-            if (initializationTurn !== null) {
-                const plan = {
-                    op: "PLAN", delimiter: "", annotation: "Determinations and Decisions must be persisted as `memory` items.",
-                    target: null, metadata: null, lineMarker: null,
-                    body: [
-                        {
-                            content: "Discover the tooling available and survey the workspace file root.",
-                            status: "in_progress",
-                        },
-                    ],
-                    position: UNKNOWN_POSITION,
+            : null;
+        const initializationStatements = [];
+        // {§worker-initialization-entry} — the worker's first turn is the worked
+        // example itself: the actual orienting operations and an ordinary TASK.
+        // {§turn0-agents-stunt} — the project AGENTS.md (materialized by LoopDocs as
+        // worker:///_plurnk/agents.md) gets one foisted READ on the worker's first
+        // loop, so local repo guidance is visible turn-0 content. Global policy
+        // stays in the system prompt; nothing else is force-read.
+        if (initializationTurn !== null) {
+            const agentsEntry = await this.#db.crud_find_workspace_entry.get({
+                workspace_id: workspaceId,
+                scheme: "worker",
+                authority: "",
+                pathname: generatedPathname("/agents.md"),
+            });
+            if (agentsEntry !== undefined) {
+                const agentsTarget = {
+                    kind: "url", raw: "worker:///_plurnk/agents.md", scheme: "worker",
+                    username: null, password: null, hostname: null, port: null,
+                    pathname: generatedPathname("/agents.md"), query: null, fragment: null,
                 };
-                initializationStatements.push(plan);
-                // {§worker-initialization-entry} — the prompt is archived into the
-                // worker's private space: the worked COPY specimen, and the private
-                // space shown as scratch. An append onto an absent entry creates it.
-                // Authored first among the operations because it executes first
-                // ({§op-mode-phases}: Mutate precedes Observe).
-                if (promptPublication !== null) {
-                    const archive = {
-                        op: "COPY", delimiter: "", annotation: null,
-                        source: { target: promptPublication.path, metadata: null, lineMarker: null },
-                        destination: {
-                            target: { kind: "url", raw: "worker://~/prompts.md", scheme: "worker", username: null, password: null, hostname: "~", port: null, pathname: "/prompts.md", query: null, fragment: null },
-                            metadata: null,
-                            lineMarker: { marks: [-1] },
-                        },
-                        position: UNKNOWN_POSITION,
-                    };
-                    initializationStatements.push(archive);
-                }
-                // {§turn0-agents-stunt} — the project AGENTS.md (materialized by LoopDocs as
-                // worker://~/_plurnk/agents.md) gets one foisted READ on the worker's first
-                // loop, so local repo guidance is visible turn-0 content. Global policy
-                // stays in the system prompt; nothing else is force-read.
-                if (workerFirstInference) {
-                    const agentsEntry = await this.#db.crud_find_workspace_entry.get({
-                        workspace_id: workspaceId,
-                        owner_id: workerId,
-                        scheme: "worker",
-                        authority: "",
-                        pathname: generatedPathname("/agents.md"),
-                    });
-                    if (agentsEntry !== undefined) {
-                        const agentsTarget = {
-                            kind: "url", raw: "worker://~/_plurnk/agents.md", scheme: "worker",
-                            username: null, password: null, hostname: "~", port: null,
-                            pathname: generatedPathname("/agents.md"), query: null, fragment: null,
-                        };
-                        const agentsRead = {
-                            op: "READ", delimiter: "", annotation: null, target: agentsTarget,
-                            metadata: null, lineMarker: null, body: null, position: UNKNOWN_POSITION,
-                        };
-                        initializationStatements.push(agentsRead);
-                    }
-                }
-            }
-            // The persistent search-index pass (_search-index.maintain) attaches
-            // every readable entry/log projection to complete graph/FTS/vector derivations.
-            // NOT an action: no log entry, no sequence slot,
-            // not dispatched. There is no materialized manifest entry — the catalog
-            // is served on demand by FIND: recursive when asked, shallow-mapped below.
-            // {§semantic-embed-dedup} — one pass-wide semantic plan binds every
-            // chunk counter to the derivation identity it produces.
-            // SPEC {§membership} D4/D5 — git-ls-files workspace membership, resolved at
-            // prompt-composition (EMI is eager + exhaustive — git is the only bound). When the
-            // workspace's project_root is a git working tree, tracked files are
-            // members without a client `add`; active members are materialized
-            // (disk → body channel) so they appear in the catalog. No-ops
-            // on headless / non-git workspaces. Runs BEFORE the derivation pump so
-            // this turn's packet reflects them.
-            // Joining here is the correctness boundary: passive workspace creation and
-            // attachment spend nothing, while the model never runs against partial
-            // graph/vector coverage.
-            await this.#warmWorkspace(systemCtx, false);
-            // The warm materialized membership before deriving. This second pass is the
-            // ordinary cheap change detector and captures any drift that landed meanwhile.
-            const fsDivergences = await GitMembership.indexGitMembership(systemCtx);
-            // {§packet-git-status} — one post-reconciliation snapshot supplies both
-            // the compact packet summary and each causal file event's exact XY state.
-            const gitStatus = await GitState.status(this.#db, workspaceId, this.#loopSignal(loopId));
-            await this.#materialization.logFsFictions(workspaceId, fsDivergences, gitStatus);
-            // The refresh above may have changed bodies (including model/client edits
-            // since the startup warm). Re-derive to completion before packet/model
-            // construction. Membership is already current, so this pass does not
-            // consume the filesystem divergences a second time.
-            await this.#warmWorkspace(systemCtx, true, false);
-            // Turn-0 catalog preview (PLURNK_SERVICE_FILES_ITEMS, {§actor-boundary-catalog-preview}):
-            // Eight bodyless FIND surveys in the worker's packetless initialization turn establish the Agent
-            // Skills, the plurnk references, the enabled tools, agents, and members, then the project, commons,
-            // and private surfaces, in that order.
-            // Their `init` classification lets the model curate this opening survey as one log set.
-            if (initializationTurn !== null) {
-                // {§operator-config-workspace-files-items} — workspace filesItems replaces the env default.
-                const { filesItems: workspaceMI } = await WorkspaceSettings.read(this.#db, workspaceId);
-                const filesItems = workspaceMI !== null ? normalizeFilesItems(workspaceMI) : readFilesItems();
-                if (filesItems !== null && workerFirstInference) { // {§actor-boundary-catalog-preview} — once per worker
-                    const catalogSchemes = await this.#db.engine_scheme_catalog_summary.all({ workspace_id: workspaceId });
-                    const fileItems = catalogSchemes.find(({ scheme }) => scheme === "file")?.shallow_items ?? 0;
-                    const fileCap = filesItems > 0 && fileItems > 0 ? Math.min(filesItems, fileItems) : null;
-                    // {§tools-resource-materialization} — a PLURNK_MCP_EXPANDED server
-                    // contributes one FIND over its family document matching the
-                    // `### EXEC0` headings: one row per tool — heading, annotation,
-                    // signature — paged like every survey. No document is delivered
-                    // unasked; per-target child documents do not exist.
-                    const registry = this.#executors();
-                    const references = await this.#packets.referenceEntries(workspaceId, workerId);
-                    const referenceNames = (namespace) => {
-                        const prefix = generatedPathname(`/${namespace}/`);
-                        return [...new Set(references.flatMap(({ pathname }) => {
-                                if (!pathname.startsWith(prefix) || !pathname.endsWith(".md"))
-                                    return [];
-                                const name = pathname.slice(prefix.length, -3);
-                                return name.includes("/") ? [] : [name];
-                            }))].toSorted();
-                    };
-                    const schemeExamples = new Map(this.#schemes.examples(workerId).map(({ name, source }) => [name, source]));
-                    const runtimeAdmitted = (runtime) => {
-                        const tools = registry?.toolRegistry(runtime, workerId);
-                        return tools === null || tools === undefined
-                            ? this.#capabilities.allowsRuntimeAcross(runtime, null, workerId, initializationPolicies)
-                            : tools.tools.some((tool) => this.#capabilities.allowsRuntimeAcross(runtime, tool.target, workerId, initializationPolicies));
-                    };
-                    const referenceAdmitted = (namespace, name) => {
-                        const entry = registry?.entry(name, workerId);
-                        const entryNamespace = entry?.resourcesPath === "/tools" ? "tools" : "plurnk";
-                        if (entry !== undefined && entryNamespace === namespace)
-                            return runtimeAdmitted(name);
-                        const source = schemeExamples.get(name);
-                        return source === undefined
-                            || this.#capabilities.allowsExampleAcross(source, workerId, initializationPolicies);
-                    };
-                    const plurnkReferences = referenceNames("plurnk");
-                    const toolReferences = referenceNames("tools");
-                    const plurnkCatalog = workerCatalogTarget("plurnk", plurnkReferences, plurnkReferences.filter((name) => referenceAdmitted("plurnk", name)));
-                    const toolsCatalog = workerCatalogTarget("tools", toolReferences, toolReferences.filter((name) => referenceAdmitted("tools", name)));
-                    const toolExpansions = [];
-                    for (const tag of registry?.availableRuntimes(workerId) ?? []) {
-                        const entry = registry?.entry(tag, workerId);
-                        if (entry?.resourcesPath !== "/tools" || entry.expandTools !== true)
-                            continue;
-                        const tools = registry?.toolRegistry(tag, workerId);
-                        const admittedTools = tools?.tools.filter((tool) => this.#capabilities.allowsRuntimeAcross(tag, tool.target, workerId, initializationPolicies)) ?? [];
-                        if (admittedTools.length === 0)
-                            continue;
-                        const pattern = tools !== null && tools !== undefined && admittedTools.length !== tools.tools.length
-                            ? `^### EXEC0 \\[${regexLiteral(tag)}\\] \\((?:${admittedTools
-                                .map((tool) => regexLiteral(PathSyntax.escapeTarget(tool.target)))
-                                .join("|")})\\).*\\n.*$`
-                            : "^### EXEC0 .*\\n.*$";
-                        toolExpansions.push({
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: null,
-                                target: { kind: "url", raw: `worker://~/_plurnk/tools/${tag}.md`, scheme: "worker", username: null, password: null, hostname: "~", port: null, pathname: generatedPathname(`/tools/${tag}.md`), query: null, fragment: null },
-                                metadata: null,
-                                body: { dialect: "regex", raw: `/${pattern.replaceAll("/", "\\/")}/m`, pattern, flags: "m" },
-                                lineMarker: null, position: UNKNOWN_POSITION,
-                            },
-                        });
-                    }
-                    const surveys = [
-                        {
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: null,
-                                target: { kind: "url", raw: "worker://~/_plurnk/skills/*.md", scheme: "worker", username: null, password: null, hostname: "~", port: null, pathname: generatedPathname("/skills/*.md"), query: null, fragment: null },
-                                metadata: null,
-                                body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
-                            },
-                        },
-                        ...(plurnkCatalog === null ? [] : [{
-                                statement: {
-                                    op: "FIND", delimiter: "", annotation: null,
-                                    target: plurnkCatalog,
-                                    metadata: null,
-                                    body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
-                                },
-                            }]),
-                        ...(toolsCatalog === null ? [] : [{
-                                // {§tools-resource-materialization} — enabled tool families
-                                // (MCP servers) survey at family level; each row's summary is
-                                // the server one-liner or its flagship invocation form, so the
-                                // discovery row itself orients. Servers named in
-                                // PLURNK_MCP_EXPANDED add a second survey of their complete
-                                // tool tree.
-                                statement: {
-                                    op: "FIND", delimiter: "", annotation: null,
-                                    target: toolsCatalog,
-                                    metadata: null,
-                                    body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
-                                },
-                            }]),
-                        ...toolExpansions,
-                        {
-                            // {§a2a-agents-catalog} — enabled outbound agents survey at
-                            // alias level; each row's summary is the agent's identity line,
-                            // the exact card stays pullable through READ a2a://<alias>.
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: null,
-                                target: { kind: "url", raw: "worker://~/_plurnk/agents/*.md", scheme: "worker", username: null, password: null, hostname: "~", port: null, pathname: generatedPathname("/agents/*.md"), query: null, fragment: null },
-                                metadata: null,
-                                body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
-                            },
-                        },
-                        {
-                            // {§members-projection} — enabled members definitions survey at alias
-                            // level; each row's summary is what its glob resolved to.
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: null,
-                                target: { kind: "url", raw: "worker://~/_plurnk/members/*.md", scheme: "worker", username: null, password: null, hostname: "~", port: null, pathname: generatedPathname("/members/*.md"), query: null, fragment: null },
-                                metadata: null,
-                                body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
-                            },
-                        },
-                        {
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: "workspace files",
-                                target: { kind: "local", raw: "*" },
-                                metadata: null,
-                                body: null,
-                                lineMarker: fileCap === null ? null : { marks: [1, fileCap] },
-                                position: UNKNOWN_POSITION,
-                            },
-                        },
-                        {
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: "workspace entries",
-                                target: { kind: "url", raw: "worker:///*", scheme: "worker", username: null, password: null, hostname: null, port: null, pathname: "/*", query: null, fragment: null },
-                                metadata: null,
-                                body: null, lineMarker: null, position: UNKNOWN_POSITION,
-                            },
-                        },
-                        {
-                            statement: {
-                                op: "FIND", delimiter: "", annotation: "private worker entries",
-                                target: { kind: "url", raw: "worker://~/*", scheme: "worker", username: null, password: null, hostname: "~", port: null, pathname: "/*", query: null, fragment: null },
-                                metadata: null,
-                                body: null, lineMarker: null, position: UNKNOWN_POSITION,
-                            },
-                        },
-                    ];
-                    initializationStatements.push(...surveys.map(({ statement }) => statement));
-                }
-                const send = {
-                    op: "SEND", delimiter: "", annotation: null,
-                    status: 102, target: null, metadata: null, lineMarker: null,
-                    body: { raw: "Next: Address the prompt.", json: null },
-                    position: UNKNOWN_POSITION,
+                const agentsRead = {
+                    op: "READ", aside: null, target: agentsTarget,
+                    metadata: null, lineMarker: null, matcher: null, body: null, position: UNKNOWN_POSITION,
                 };
-                initializationStatements.push(send);
-                const admittedInitializationStatements = initializationStatements.filter(initializationAdmits);
-                const source = TurnOps.renderInternal(admittedInitializationStatements);
-                const admitted = TurnOps.parseInternal(source);
-                const result = await this.executeAdmittedTurn({
-                    statements: admitted,
-                    source,
-                    sourceFolded: false,
-                    origin: "_plurnk",
-                    workspaceId,
-                    workerId,
-                    loopId,
-                    turnId: initializationTurn.id,
-                    fromSequence: 1,
-                    failOnOperationError: true,
-                    signal: this.#loopSignal(loopId),
-                    onDispatch,
-                    onSettled,
-                });
-                if (result.status !== TURN_STATUS_IMPLICIT_CONTINUE) {
-                    throw new Error(`initialization SEND returned ${result.status}; expected ${TURN_STATUS_IMPLICIT_CONTINUE}`);
-                }
+                initializationStatements.push(agentsRead);
             }
-            // Initialization is a complete preceding turn, not a set of rows
-            // interleaved with the model boundary. The engine may now acquire the
-            // inference turn inside the same warmed workspace cycle.
-            if (modelTurn === null) {
-                modelTurn = await Turn.open(this.#db, { loopId, producer: "model", kind: "inference" });
-                createdTurnIds.push(modelTurn.id);
-            }
-            const seq = modelTurn.sequence;
-            const turnId = modelTurn.id;
-            systemCtx = systemContext(turnId);
-            // Pre-model writes. Each prompt the model has not seen yet becomes a
-            // `prompt` operation row whose target is its durable prompt:// entry.
-            // Model operations continue the same turn sequence after these rows.
-            let nextActionIndex = 1;
-            const turnOpenPaths = [];
-            if (promptPublication !== null) { // {§prompt-entry} — one durable publication per loop
-                turnOpenPaths.push(...promptPublication.openPaths);
-                const promptLogId = await this.#materialization.writePromptLog({
-                    workerId,
-                    loopId,
-                    turnId,
-                    sequence: nextActionIndex++,
-                    target: promptPublication.path,
-                    content: promptPublication.content,
-                    source: promptPublication.source,
-                });
-                onDispatch?.(promptLogId);
-                await onSettled?.(promptLogId);
-            }
-            // {§prompt-loop-containment}: the loop contains every prompt that arrived
-            // while it ran. Publish each undelivered frame oldest-first exactly once.
+        }
+        return {
+            workerName, transientOpenLogEntryId, loopRow, createdTurnIds,
+            initializationTurn, initializationPolicies, initializationStatements,
+            modelTurn, systemCtx, promptPublication,
+        };
+    }
+    // The `_plurnk` scheme context for one turn. Threaded per turn, never engine
+    // state, so concurrent loops on different providers each read their own honest
+    // tokenizer values.
+    #schemeContext({ workspaceId, workerId, loopId }, turnId) {
+        return {
+            db: this.#db, workspaceId, workerId, loopId, turnId,
+            writer: "_plurnk",
+            signal: this.#loopSignal(loopId),
+            streamEventNotify: this.#streamEventNotify,
+            wakeWorkerNotify: this.#wakeWorkerNotify,
+            weigh: this.#weighContent,
+            mimetypes: this.#mimetypes,
+            defaultChannelFor: (s) => this.#schemes.defaultChannelFor(s, workspaceId),
+            pushNotice: (notice) => this.#notices.push(workspaceId, workerId, loopId, notice),
+            requestInteraction: (request, signal = this.#loopSignal(loopId)) => this.#interactions.request(request, { workspaceId, workerId, loopId, turnId }, signal),
+        };
+    }
+    // Phase 2 — membership and derivation to completion, then the one git snapshot
+    // every packet rebuild reads.
+    async #deriveWorkspace({ workspaceId, loopId }, systemCtx) {
+        // The persistent search-index pass (_search-index.maintain) attaches
+        // every readable entry/log projection to complete graph/FTS derivations.
+        // NOT an action: no log entry, no sequence slot,
+        // not dispatched. There is no materialized manifest entry — the catalog
+        // is served on demand by FIND: recursive when asked, shallow-mapped below.
+        // SPEC {§membership} D4/D5 — git-ls-files workspace membership, resolved at
+        // prompt-composition (EMI is eager + exhaustive — git is the only bound). When the
+        // workspace's project_root is a git working tree, tracked files are
+        // members without a client `add`; active members are materialized
+        // (disk → body channel) so they appear in the catalog. No-ops
+        // on headless / non-git workspaces. Runs BEFORE the derivation pump so
+        // this turn's packet reflects them.
+        // Joining here is the correctness boundary: passive workspace creation and
+        // attachment spend nothing, while the model never runs against partial
+        // graph/vector coverage.
+        await this.#warmWorkspace(systemCtx, false);
+        // The warm materialized membership before deriving. This second pass is the
+        // ordinary cheap change detector and captures any drift that landed meanwhile.
+        const fsDivergences = await GitMembership.indexGitMembership(systemCtx);
+        // {§packet-git-status} — one post-reconciliation snapshot supplies both
+        // the compact packet summary and each causal file event's exact XY state.
+        const gitStatus = await GitState.status(this.#db, workspaceId, this.#loopSignal(loopId));
+        await this.#materialization.logFsFictions(workspaceId, fsDivergences, gitStatus);
+        // The refresh above may have changed bodies (including model/client edits
+        // since the startup warm). Re-derive to completion before packet/model
+        // construction. Membership is already current, so this pass does not
+        // consume the filesystem divergences a second time.
+        await this.#warmWorkspace(systemCtx, true, false);
+        return gitStatus;
+    }
+    // {§worker-initialization-entry} — the worker's first turn is the worked example
+    // itself: the actual orienting operations and an ordinary TASK, executed as a
+    // complete turn before the model boundary.
+    async #runInitializationTurn(args, container, initializationTurn) {
+        const { provider, workspaceId, workerId, loopId, onDispatch, onSettled } = args;
+        const { loopRow, initializationStatements, initializationPolicies } = container;
+        // Turn-0 catalog preview (PLURNK_SERVICE_FILES_ITEMS, {§actor-boundary-catalog-preview}):
+        // Eight bodyless FIND surveys in the worker's packetless initialization turn establish the Agent
+        // Skills, the plurnk references, the enabled tools, agents, and members, then the project, commons,
+        // and named scratch, in that order.
+        // Their `init` classification lets the model curate this opening survey as one log set.
+        // {§operator-config-workspace-files-items} — workspace filesItems replaces the env default.
+        const { filesItems: workspaceMI } = await WorkspaceSettings.read(this.#db, workspaceId);
+        const filesItems = workspaceMI !== null ? normalizeFilesItems(workspaceMI) : readFilesItems();
+        if (filesItems !== null) { // {§actor-boundary-catalog-preview} — once per worker
+            initializationStatements.push(...await this.#catalogSurveys(args, container, filesItems));
+        }
+        const task = {
+            op: "TASK", aside: null, target: null, metadata: null, lineMarker: null,
+            body: [{ content: "Address the prompt.", status: "in_progress" }],
+            position: UNKNOWN_POSITION,
+        };
+        const pathname = `/${loopRow.sequence}/${initializationTurn.sequence}`;
+        await Turn.recordSource(this.#db, initializationTurn.id, "reasoning", ReasoningView.initialSource());
+        // {§reasoning-initial-read} — the pattern READ needs a text/plain projection to run the regex.
+        const pluck = await this.#mimetypes.getHandler("text/plain") !== null;
+        const reasoningRead = ReasoningView.initialRead(provider, loopRow.sequence, initializationTurn.sequence, pluck);
+        if (reasoningRead !== null)
+            initializationStatements.push(reasoningRead);
+        initializationStatements.push({
+            op: "READ", aside: "inspect this turn's emission", matcher: null, body: null, metadata: null,
+            target: {
+                kind: "url", raw: `ops://${pathname}`, scheme: "ops", pathname,
+                username: null, password: null, hostname: null, port: null, query: null, fragment: null,
+            },
+            lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
+        });
+        // {§prompt-entry} — the prompt reaches the model as its `prompt` row in the first
+        // model turn; initialization does not READ it a second time.
+        initializationStatements.push(task);
+        const admittedInitializationStatements = initializationStatements.filter((statement) => this.#capabilities.allowsAcross(statement, workspaceId, initializationPolicies));
+        const source = TurnOps.renderInternal(admittedInitializationStatements);
+        const admitted = TurnOps.parseInternal(source);
+        const result = await this.executeAdmittedTurn({
+            statements: admitted,
+            source,
+            origin: "_plurnk",
+            workspaceId,
+            workerId,
+            loopId,
+            turnId: initializationTurn.id,
+            fromSequence: 1,
+            failOnOperationError: true,
+            signal: this.#loopSignal(loopId),
+            onDispatch,
+            onSettled,
+        });
+        if (result.status !== TURN_STATUS_IMPLICIT_CONTINUE) {
+            throw new Error(`initialization TASK returned ${result.status}; expected ${TURN_STATUS_IMPLICIT_CONTINUE}`);
+        }
+    }
+    // {§actor-boundary-catalog-preview} — the opening surveys, each admitted only when
+    // its scheme is registered for the workspace. A positive filesItems caps the
+    // project rows.
+    async #catalogSurveys({ workspaceId }, { workerName, initializationPolicies }, filesItems) {
+        const catalogSchemes = await this.#db.engine_scheme_catalog_summary.all({ workspace_id: workspaceId });
+        const fileItems = catalogSchemes.find(({ scheme }) => scheme === "file")?.shallow_items ?? 0;
+        const fileCap = filesItems > 0 && fileItems > 0 ? Math.min(filesItems, fileItems) : null;
+        const surveys = [
             {
-                const loopSeqRow = await this.#db.engine_loop_sequence.get({ loop_id: loopId });
-                const loopSeq = loopSeqRow?.sequence ?? loopId;
-                const prefix = promptLoopPrefix(loopSeq);
-                const undelivered = (await this.#db.drain_undelivered_prompts_for_loop.all({
-                    owner_id: workerId,
-                    pattern: `${prefix}%`,
-                    prefix_len: prefix.length,
-                    loop_id: loopId,
-                }))
-                    .filter((row) => typeof row.content === "string" && row.content.length > 0);
-                for (const injectedRow of undelivered) {
-                    const attributes = parsePromptAttributes(injectedRow.attributes, `Prompt ${injectedRow.pathname} attributes`);
-                    if (attributes.openPaths !== undefined) {
-                        turnOpenPaths.push(...assertOpenPaths(attributes.openPaths, `Prompt ${injectedRow.pathname} openPaths`));
-                    }
-                    const ordinal = Number(injectedRow.pathname.split("/").filter(Boolean).at(-1));
-                    const promptLogId = await this.#materialization.writePromptLog({
-                        workerId,
-                        loopId,
-                        turnId,
-                        sequence: nextActionIndex++,
-                        target: promptTarget(loopSeq, ordinal),
-                        content: injectedRow.content,
-                        source: promptSourceFromAttributes(attributes, `Prompt ${injectedRow.pathname} attributes`),
-                    });
-                    onDispatch?.(promptLogId);
-                    await onSettled?.(promptLogId);
-                }
-            }
-            // {§methods-loop-run-open-paths}: selected workspace paths belong to
-            // the prompt frame. Publish the frame, then dispatch ordinary core READs
-            // in that same turn; missing/non-member paths retain their normal 4xx.
-            for (const raw of turnOpenPaths) {
-                const pathname = raw.startsWith("/") ? raw : `/${raw}`;
-                const fileRead = {
-                    op: "READ", delimiter: "", annotation: null, lineMarker: null,
-                    target: {
-                        kind: "url", raw: `file://${pathname}`, scheme: "file",
-                        username: null, password: null, hostname: null, port: null,
-                        pathname, query: null, fragment: null,
-                    },
-                    metadata: null,
-                    body: null, position: UNKNOWN_POSITION,
-                };
-                await this.#dispatch({
-                    statement: fileRead, workspaceId, workerId, loopId, turnId,
-                    sequence: nextActionIndex, origin: "_plurnk", onDispatch, onSettled,
-                });
-                nextActionIndex++;
-            }
-            // {§env-delta-log-pull} — materialize ambient observations before packet
-            // composition and reserve their action indices. {§exec-stream} owns the
-            // distinct byte-cursor path for this worker's streams.
-            // {§exec-poll} — EXEC `<0>` is turn-scoped: reap the worker's open turn-scoped streams (necessarily
-            // from a prior turn — this runs before the turn's own spawns) so a `<0>` never survives into
-            // the subsequent turn. The terminal output then surfaces initially visible via the stream-delta path.
-            await this.#reapTurnScopedStreams(workerId);
-            nextActionIndex += await this.#materialization.materializeEnvironmentDeltas({ workspaceId, workerId, loopId, turnId, fromSequence: nextActionIndex });
-            nextActionIndex += await this.#materialization.materializeStreamDeltas({ workerId, loopId, turnId, fromSequence: nextActionIndex });
-            // The post-reconciliation Git snapshot above is threaded into the packet
-            // and every budget rebuild; overflow never shells again.
-            // Notices are non-terminal observations, never operation-failure truth.
-            // Drain once and thread the same set through every overflow rebuild.
-            const notices = this.#notices.drain(loopId)
-                .filter((event) => event.level !== "info");
-            // Build the model request packet ({§packet-stored-shape}). The log build
-            // queries log_entries scoped to the worker — the prompt entry just
-            // written (if turn 1) is part of that query result.
-            let promptProjection = "automatic";
-            const buildPacket = () => this.#packets.buildRequestPacket({
-                initialMessages: messages,
-                recap,
-                workspaceId,
+                op: "FIND", aside: null,
+                target: { kind: "url", raw: "skill://*/SKILL.md", scheme: "skill", username: null, password: null, hostname: "*", port: null, pathname: "/SKILL.md", query: null, fragment: null },
+                metadata: null,
+                matcher: null, body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
+            },
+            {
+                op: "FIND", aside: null,
+                target: workerCatalogTarget("plurnk"),
+                metadata: null,
+                matcher: null, body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
+            },
+            {
+                // {§tools-resource-materialization} — enabled tool families
+                // (MCP servers) survey at family level; each row's summary is
+                // the server one-liner or its flagship invocation form, so the
+                // discovery row itself orients. Servers named in
+                // PLURNK_MCP_EXPANDED add a second survey of their complete
+                // tool tree.
+                op: "FIND", aside: null,
+                target: workerCatalogTarget("tools"),
+                metadata: null,
+                matcher: null, body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
+            },
+            ...this.#toolExpansions(workspaceId, initializationPolicies),
+            {
+                // {§a2a-agents-catalog} — enabled outbound agents survey at
+                // alias level; each row's summary is the agent's identity line,
+                // the exact card stays pullable through READ a2a://<alias>.
+                op: "FIND", aside: null,
+                target: { kind: "url", raw: "worker:///_plurnk/agents/*.md", scheme: "worker", username: null, password: null, hostname: null, port: null, pathname: generatedPathname("/agents/*.md"), query: null, fragment: null },
+                metadata: null,
+                matcher: null, body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
+            },
+            {
+                // {§members-projection} — enabled members definitions survey at alias
+                // level; each row's summary is what its glob resolved to.
+                op: "FIND", aside: null,
+                target: { kind: "url", raw: "worker:///_plurnk/members/*.md", scheme: "worker", username: null, password: null, hostname: null, port: null, pathname: generatedPathname("/members/*.md"), query: null, fragment: null },
+                metadata: null,
+                matcher: null, body: null, lineMarker: { marks: [1, -1] }, position: UNKNOWN_POSITION,
+            },
+            {
+                op: "FIND", aside: "project root member files",
+                target: { kind: "local", raw: "*" },
+                metadata: null,
+                matcher: null,
+                body: null,
+                lineMarker: fileCap === null ? null : { marks: [1, fileCap] },
+                position: UNKNOWN_POSITION,
+            },
+            {
+                op: "FIND", aside: "shared worker Extended Context",
+                target: { kind: "url", raw: "worker:///*", scheme: "worker", username: null, password: null, hostname: null, port: null, pathname: "/*", query: null, fragment: null },
+                metadata: null,
+                matcher: null, body: null, lineMarker: null, position: UNKNOWN_POSITION,
+            },
+            {
+                op: "FIND", aside: "private worker Extended Context",
+                target: { kind: "url", raw: `worker://${workerName}/*`, scheme: "worker", username: null, password: null, hostname: workerName, port: null, pathname: "/*", query: null, fragment: null },
+                metadata: null,
+                matcher: null, body: null, lineMarker: null, position: UNKNOWN_POSITION,
+            },
+        ];
+        return surveys.filter(({ target }) => this.#schemes.get(target?.kind === "url" ? target.scheme : "file", workspaceId) !== undefined);
+    }
+    // {§tools-resource-materialization} — expanded families project complete
+    // invocation blocks, paged through ordinary FIND result ranges: one pattern FIND
+    // per family, naming the admitted tools when the policy narrows them.
+    #toolExpansions(workspaceId, policies) {
+        const registry = this.#executors();
+        const expansions = [];
+        for (const tag of registry?.availableRuntimes(workspaceId) ?? []) {
+            const entry = registry?.entry(tag, workspaceId);
+            if (entry?.resourcesPath !== "/tools" || entry.expandTools !== true)
+                continue;
+            const tools = registry?.toolRegistry(tag, workspaceId);
+            const admittedTools = tools?.tools.filter((tool) => this.#capabilities.allowsRuntimeAcross(tag, tool.target, workspaceId, policies)) ?? [];
+            if (admittedTools.length === 0)
+                continue;
+            const targetFilter = tools !== null && tools !== undefined && admittedTools.length !== tools.tools.length
+                ? " \\((?:" + admittedTools.map((tool) => regexLiteral(PathSyntax.escapeTarget(tool.target))).join("|") + ")\\)"
+                : " ";
+            const pattern = "^(\x60{3,})" + regexLiteral(tag) + targetFilter + "[^\\n]*?(?:\\1|\\n[\\s\\S]*?\\n\\1)$";
+            expansions.push({
+                op: "FIND", aside: null,
+                target: { kind: "url", raw: `worker:///_plurnk/tools/${tag}.md`, scheme: "worker", username: null, password: null, hostname: null, port: null, pathname: generatedPathname(`/tools/${tag}.md`), query: null, fragment: null },
+                metadata: null,
+                matcher: { dialect: "regex", raw: `/${pattern.replaceAll("/", "\\/")}/m`, pattern, flags: "m" },
+                body: null, lineMarker: null, position: UNKNOWN_POSITION,
+            });
+        }
+        return expansions;
+    }
+    // Phase 3 — the inference turn and its request: the prompts the model has not
+    // seen, their open-path READs, the ambient and stream deltas, then the packet
+    // ({§packet-stored-shape}).
+    async #composeRequest(args, container, gitStatus) {
+        const { workspaceId, workerId, loopId } = args;
+        // Initialization is a complete preceding turn, not a set of rows
+        // interleaved with the model boundary. The engine may now acquire the
+        // inference turn inside the same warmed workspace cycle.
+        const modelTurn = container.modelTurn ?? await Turn.open(this.#db, { loopId, producer: "model", kind: "inference" });
+        if (container.modelTurn === null)
+            container.createdTurnIds.push(modelTurn.id);
+        const { id: turnId, sequence: seq } = modelTurn;
+        const systemCtx = this.#schemeContext(args, turnId);
+        const loopSeq = (await this.#db.engine_loop_sequence.get({ loop_id: loopId }))?.sequence ?? loopId;
+        const prompts = await this.#publishPrompts(args, container, turnId, loopSeq);
+        let nextActionIndex = await this.#readOpenPaths(args, turnId, prompts.openPaths, prompts.nextActionIndex);
+        // {§env-delta-log-pull} — materialize ambient observations before packet
+        // composition and reserve their action indices. {§exec-stream} owns the
+        // distinct byte-cursor path for this worker's streams.
+        // {§exec-poll} — an execution `<0>` is turn-scoped: reap the worker's open turn-scoped streams (necessarily
+        // from a prior turn — this runs before the turn's own spawns) so a `<0>` never survives into
+        // the subsequent turn. The terminal output then surfaces initially visible via the stream-delta path.
+        await this.#reapTurnScopedStreams(workerId);
+        nextActionIndex += await this.#materialization.materializeEnvironmentDeltas({ workspaceId, workerId, loopId, turnId, fromSequence: nextActionIndex });
+        nextActionIndex += await this.#materialization.materializeStreamDeltas({ workspaceId, workerId, loopId, turnId, fromSequence: nextActionIndex });
+        // The post-reconciliation Git snapshot above is threaded into the packet
+        // and every budget rebuild; overflow never shells again.
+        // Notices are non-terminal observations, never operation-failure truth.
+        // Drain once and thread the same set through every overflow rebuild.
+        const notices = this.#notices.drain(loopId)
+            .filter((event) => event.level !== "info");
+        // Build the model request packet ({§packet-stored-shape}). The log build
+        // queries log_entries scoped to the worker — the prompt entry just
+        // written (if turn 1) is part of that query result.
+        const facts = { turnId, seq, gitStatus, notices, transientOpenLogEntryId: container.transientOpenLogEntryId, promptProjection: "automatic" };
+        let packet = await this.#buildPacket(args, facts);
+        // {§context-output-admission} — output admission changes no operation
+        // outcome, authored inventory, or turn identity.
+        if (await this.#packets.admitOutput(packet, turnId))
+            packet = await this.#buildPacket(args, facts);
+        return { ...facts, createdTurnIds: container.createdTurnIds, loopSeq, systemCtx, nextActionIndex, packet };
+    }
+    // Pre-model writes. Each prompt the model has not seen yet becomes a `prompt`
+    // operation row whose target is its durable prompt:// entry; model operations
+    // continue the same turn sequence after these rows. Returns the next action index
+    // and the frames' open paths.
+    async #publishPrompts({ workerId, loopId, onDispatch, onSettled }, { workerName, promptPublication }, turnId, loopSeq) {
+        let nextActionIndex = 1;
+        const openPaths = [];
+        if (promptPublication !== null) { // {§prompt-entry} — one durable publication per loop
+            openPaths.push(...promptPublication.openPaths);
+            const promptLogId = await this.#materialization.writePromptLog({
                 workerId,
                 loopId,
-                currentTurnSeq: seq,
-                provider,
-                gitStatus,
-                notices,
-                transientOpenLogEntryId,
-                promptProjection,
+                turnId,
+                sequence: nextActionIndex++,
+                target: promptPublication.path,
+                content: promptPublication.content,
+                source: promptPublication.source,
             });
-            let requestPacket = await buildPacket();
-            // {§overflow-turn} — measured overflow diverts this would-be model
-            // turn into an ordinary packetless `_plurnk` operation batch. Every
-            // visibility effect goes through an ordinary Dispatcher scoped KILL; provider I/O is
-            // structurally unreachable on this branch.
-            const pressure = this.#packets.curationOverflow(requestPacket, provider);
-            if (pressure !== null) {
-                const kills = await OverflowTurn.plan(this.#db, loopId, turnId);
-                await Turn.becomeOverflow(this.#db, turnId);
-                const internalStatements = [
-                    OverflowTurn.planStatement(),
-                    ...kills.map(({ statement }) => statement),
-                    OverflowTurn.sendStatement(),
-                ];
-                const source = TurnOps.renderInternal(internalStatements);
-                const admitted = TurnOps.parseInternal(source);
-                const executed = await this.executeAdmittedTurn({
-                    statements: admitted,
-                    source,
-                    sourceFolded: true,
-                    origin: "_plurnk",
-                    workspaceId,
-                    workerId,
-                    loopId,
-                    turnId,
-                    fromSequence: nextActionIndex,
-                    failOnOperationError: true,
-                    signal: this.#loopSignal(loopId),
-                    onDispatch,
-                    onSettled,
-                });
-                if (executed.status !== TURN_STATUS_IMPLICIT_CONTINUE) {
-                    throw new Error(`overflow SEND returned ${executed.status}; expected ${TURN_STATUS_IMPLICIT_CONTINUE}`);
-                }
-                const rebuilt = await buildPacket();
-                const remaining = this.#packets.curationOverflow(rebuilt, provider);
-                const curationFailure = kills.length === 0 || remaining !== null
-                    ? curationOverflowFailure(remaining ?? pressure)
-                    : undefined;
-                return {
-                    createdTurnIds,
-                    turnId,
-                    producer: "_plurnk",
-                    kind: "overflow",
-                    status: curationFailure?.status ?? TURN_STATUS_IMPLICIT_CONTINUE,
-                    outcomes: [],
-                    fingerprint: "",
-                    capacityHardStop: false,
-                    providerParked: false,
-                    steerStruck: false,
-                    emissionAttempts: 0,
-                    emissionExhausted: false,
-                    ...(curationFailure === undefined ? {} : { curationFailure }),
-                };
+            onDispatch?.(promptLogId);
+            await onSettled?.(promptLogId);
+        }
+        // {§prompt-loop-containment}: the loop contains every prompt that arrived
+        // while it ran. Publish each undelivered frame oldest-first exactly once.
+        const prefix = promptLoopPrefix(loopSeq);
+        const undelivered = (await this.#db.drain_undelivered_prompts_for_loop.all({
+            worker_id: workerId,
+            pattern: `${prefix}%`,
+            prefix_len: prefix.length,
+            loop_id: loopId,
+        }))
+            .filter((row) => typeof row.content === "string" && row.content.length > 0);
+        for (const injectedRow of undelivered) {
+            const attributes = parsePromptAttributes(injectedRow.attributes, `Prompt ${injectedRow.pathname} attributes`);
+            if (attributes.openPaths !== undefined) {
+                openPaths.push(...assertOpenPaths(attributes.openPaths, `Prompt ${injectedRow.pathname} openPaths`));
             }
-            let materializedRequest = await this.#wireMessages(requestPacket, workspaceId, provider);
-            let modelMessages = materializedRequest.messages;
-            let nativeInputs = materializedRequest.nativeInputs;
-            // Curation pressure and provider generation are independent. The
-            // provider owns its configured total output envelope.
-            let response;
-            let splitResponse;
-            let railGrammar;
-            let railResponseGrammar;
-            let railAllowWithheld = false;
-            let railEvidence;
-            let emissionAttempts = 0;
-            let providerCallInFlight = false;
-            let modelCallSequence = 0;
-            let currentEmissionAttempt = 0;
-            let providerAttemptId = null;
-            let providerModelCall = null;
-            // {§provider-recovery} — this turn's recovery clock: the first recoverable provider
-            // failure starts it; the budget and backoff are the operator's.
-            let recoveryStartedAt = null;
-            let recoveryFailures = 0;
-            let providerParked = false;
-            const recoveryBudget = readProviderRecovery();
-            const recoveryBackoff = readProviderRecoveryBackoff();
-            let providerAttemptAttributions = [];
-            const providerSignal = this.#loopSignal(loopId) ?? signal;
-            // {§client-metadata}
-            const { client } = await WorkspaceSettings.read(this.#db, workspaceId);
-            const loopSeq = (await this.#db.engine_loop_sequence.get({ loop_id: loopId }))?.sequence ?? loopId;
-            const providerIdentity = await this.#resolveWorkerProviderIdentity(workerId);
-            const { workerId: providerWorkerId, primaryWorkerId } = providerIdentity;
-            const classifyProviderAttempt = async (id, attemptSplit, emissionAttempt, accepted) => {
-                const result = await this.#db.engine_classify_turn_attempt_response.run({
-                    id,
-                    accepted: accepted ? 1 : 0,
-                    parse_errors: JSON.stringify(attemptSplit.parseErrors),
-                });
-                if (result.changes !== 1) {
-                    throw new Error(`emission attempt ${id} was not awaiting classification`);
-                }
-                emissionAttempts = emissionAttempt;
-            };
-            const recoverCapacityPacket = async () => {
-                let baselineMessages = modelMessages;
-                if (promptProjection === "automatic") {
-                    promptProjection = "withheld";
-                    const candidate = await buildPacket();
-                    const candidateRequest = await this.#wireMessages(candidate, workspaceId, provider);
-                    if (JSON.stringify(candidateRequest.messages) !== JSON.stringify(baselineMessages)) {
-                        requestPacket = candidate;
-                        materializedRequest = candidateRequest;
-                        modelMessages = materializedRequest.messages;
-                        nativeInputs = materializedRequest.nativeInputs;
-                        return true;
-                    }
-                    baselineMessages = candidateRequest.messages;
-                }
-                return false;
+            const promptLogId = await this.#materialization.writePromptLog({
+                workerId,
+                loopId,
+                turnId,
+                sequence: nextActionIndex++,
+                target: promptTarget(workerName, injectedRow.pathname),
+                content: injectedRow.content,
+                source: promptSourceFromAttributes(attributes, `Prompt ${injectedRow.pathname} attributes`),
+            });
+            onDispatch?.(promptLogId);
+            await onSettled?.(promptLogId);
+        }
+        return { nextActionIndex, openPaths };
+    }
+    // {§methods-loop-run-open-paths}: selected workspace paths belong to the prompt
+    // frame. Publish the frame, then dispatch ordinary core READs in that same turn;
+    // missing/non-member paths retain their normal 4xx. Returns the next action index.
+    async #readOpenPaths({ workspaceId, workerId, loopId, onDispatch, onSettled }, turnId, openPaths, fromSequence) {
+        let nextActionIndex = fromSequence;
+        for (const raw of openPaths) {
+            const pathname = raw.startsWith("/") ? raw : `/${raw}`;
+            const fileRead = {
+                op: "READ", aside: null, lineMarker: null, matcher: null,
+                target: {
+                    kind: "url", raw: `file://${pathname}`, scheme: "file",
+                    username: null, password: null, hostname: null, port: null,
+                    pathname, query: null, fragment: null,
+                },
+                metadata: null,
+                body: null, position: UNKNOWN_POSITION,
             };
-            try {
-                // {§turn-lifecycle}: bracket the complete provider-attempt window with liveness notices.
-                if (!signal?.aborted)
-                    this.#notices.push(workspaceId, workerId, loopId, { source: "engine:turn", kind: "turn_awaiting_model", level: "info", message: "awaiting model response" });
-                const railConstraint = await this.#grammarConstraint(provider);
-                railGrammar = railConstraint?.transport;
-                railResponseGrammar = railConstraint?.response;
-                railAllowWithheld = railConstraint?.allowWithheld ?? false;
-                const attemptLimit = readEmissionAttempts();
-                const strikeStreak = this.#strikes.streak(loopId);
-                // {§turn-accounting-notice} (#465) — every physical exchange this turn pays
-                // for, successes and failed calls alike, so the completion notice carries
-                // the exact settled wire spend.
-                const turnWireAccounting = [];
-                for (let attempt = 1; attempt <= attemptLimit;) {
-                    // Capacity recovery may rebuild and resend the request without
-                    // consuming a grammar-emission attempt. Every logical provider
-                    // call still receives its own durable sequence and accounting.
-                    currentEmissionAttempt = attempt;
-                    modelCallSequence++;
-                    const attributionContext = Object.freeze({
-                        workspaceId: String(workspaceId),
-                        workerId: providerWorkerId,
-                        primaryWorkerId,
-                        loop: loopSeq,
-                        turn: seq,
-                        attempt: modelCallSequence,
-                    });
-                    providerAttemptAttributions = await this.#attemptAttributions(provider, attributionContext);
-                    requestPacket = { ...requestPacket, attributions: providerAttemptAttributions };
-                    providerModelCall = await ModelCall.open(this.#db, {
-                        turnId,
-                        kind: "emission",
-                        attributions: providerAttemptAttributions,
-                        model: provider.model,
-                    });
-                    const attemptRow = await this.#db.engine_open_turn_attempt.get({
-                        model_call_id: providerModelCall.id,
-                    });
-                    if (attemptRow === undefined) {
-                        throw new Error(`Engine.runTurn: provider call ${modelCallSequence} did not open`);
-                    }
-                    providerAttemptId = attemptRow.id;
-                    providerCallInFlight = true;
-                    const currentModelCall = providerModelCall;
-                    let reasoningStarted = false;
-                    let reasoningRequestSequence = 0;
-                    const endReasoning = () => {
-                        if (!reasoningStarted)
-                            return;
-                        this.#reasoningEventNotify(workspaceId, {
-                            workerId,
-                            loopId,
-                            turnId,
-                            modelCallId: currentModelCall.id,
-                            requestSequence: reasoningRequestSequence,
-                            phase: "end",
-                        });
-                        reasoningStarted = false;
-                    };
-                    const observeRequest = async (...args) => {
-                        endReasoning();
-                        const settle = await currentModelCall.observeRequest(...args);
-                        reasoningRequestSequence = currentModelCall.requestSequence;
-                        return settle;
-                    };
-                    // {§notifications-reasoning-event} Only the parent emission is
-                    // conversational; BARE has no observer on its isolated calls.
-                    const observeReasoning = this.#reasoningEventNotify === undefined
-                        ? undefined
-                        : (delta) => {
-                            if (reasoningRequestSequence === 0) {
-                                throw new Error("provider emitted reasoning before opening its physical request");
-                            }
-                            if (!reasoningStarted) {
-                                reasoningStarted = true;
-                                this.#reasoningEventNotify(workspaceId, {
-                                    workerId,
-                                    loopId,
-                                    turnId,
-                                    modelCallId: currentModelCall.id,
-                                    requestSequence: reasoningRequestSequence,
-                                    phase: "start",
-                                });
-                            }
-                            this.#reasoningEventNotify(workspaceId, {
-                                workerId,
-                                loopId,
-                                turnId,
-                                modelCallId: currentModelCall.id,
-                                requestSequence: reasoningRequestSequence,
-                                phase: "content",
-                                delta,
-                            });
-                        };
-                    let completedResponse;
-                    try {
-                        completedResponse = await observed(// {§observability-boundary}
-                        GEN_AI_REQUEST_SPAN, { model: provider.model, attempt: modelCallSequence }, async (span) => {
-                            try {
-                                const generated = await provider.generate({
-                                    messages: modelMessages,
-                                    workerId: providerWorkerId,
-                                    primaryWorkerId,
-                                    signal: providerSignal,
-                                    grammar: railGrammar,
-                                    strikes: strikeStreak,
-                                    attributions: providerAttemptAttributions.length > 0
-                                        ? providerAttemptAttributions
-                                        : undefined,
-                                    client: client ?? undefined,
-                                    workspaceId: String(workspaceId),
-                                    loop: loopSeq,
-                                    turn: seq,
-                                    observeRequest,
-                                    observeReasoning,
-                                    callKind: "emission",
-                                }); // {§provider-surface-generate} {§provider-guarantees-signal-wired} {§provider-guarantees-serial-attempts} {§attribution} {§client-metadata}
-                                currentModelCall.assertAccounting(generated.accounting);
-                                providerCallInFlight = false;
-                                recordCounter(PROVIDER_CALLS, {
-                                    model: provider.model,
-                                    attempt: modelCallSequence,
-                                    status: "resolved",
-                                });
-                                span.setAttribute("status", "resolved");
-                                settleGenAiResponse(span, generated);
-                                return generated;
-                            }
-                            catch (error) {
-                                if (error instanceof ProviderError) {
-                                    currentModelCall.assertAccounting(error.accounting);
-                                    turnWireAccounting.push(...error.accounting);
-                                }
-                                throw error;
-                            }
-                        }, genAiRequestOptions(ProviderInstantiate.aliasOf(provider) ?? "plurnk", provider.model));
-                    }
-                    catch (error) {
-                        if (error instanceof ProviderError
-                            && RECOVERABLE_PROVIDER_FAILURES.has(error.kind)
-                            && providerSignal?.aborted !== true) {
-                            // {§provider-recovery} — a transient provider failure never ends the loop:
-                            // record it, wait, and re-issue the same turn; once the budget is spent the
-                            // outer handler parks the loop instead of failing it.
-                            recoveryStartedAt ??= Date.now();
-                            const elapsed = Date.now() - recoveryStartedAt;
-                            if (elapsed >= recoveryBudget) {
-                                providerParked = true;
-                                throw error;
-                            }
-                            recoveryFailures += 1;
-                            const failure = TurnRunner.#providerFailure(error, providerSignal);
-                            if (error.attempt !== undefined) {
-                                // {§provider-interrupted-attempt} — the interrupted response stays durable
-                                // as an unaccepted attempt; it is never admitted or replayed.
-                                await currentModelCall.observeResponse(error.attempt, failure, nativeInputs);
-                                await classifyProviderAttempt(providerAttemptId, this.#splitResponse(error.attempt), currentEmissionAttempt, false);
-                            }
-                            else {
-                                await currentModelCall.fail(failure, error.capacity ?? null);
-                            }
-                            providerCallInFlight = false;
-                            await this.#problems.record({
-                                workerId,
-                                loopId,
-                                turnId,
-                                sequence: nextActionIndex++,
-                                origin: "_plurnk",
-                                source: "provider",
-                                result: failure,
-                            });
-                            const wait = Math.min(recoveryBackoff * 2 ** (recoveryFailures - 1), recoveryBackoff * 12);
-                            this.#notices.push(workspaceId, workerId, loopId, {
-                                source: "engine:provider",
-                                kind: "provider_unavailable",
-                                level: "warn",
-                                message: `${failure.problem?.title ?? "Provider failure"}: retrying in ${Math.round(wait / 1000)}s (${Math.round(elapsed / 1000)}s of the ${Math.round(recoveryBudget / 1000)}s recovery budget spent).`,
-                            });
-                            // An abort during the wait re-enters generate, which refuses on the aborted signal.
-                            await delay(wait, undefined, { signal: providerSignal }).catch(() => undefined);
-                            // The response is still owed for this exact input. Failure rows remain
-                            // durable, but recursively materializing them would mutate and cache-bust
-                            // the request being recovered. {§provider-recovery}
-                            continue;
-                        }
-                        if (!(error instanceof ProviderError)
-                            || error.kind !== "capacity_exceeded"
-                            || providerSignal?.aborted === true
-                            || !await recoverCapacityPacket()) {
-                            throw error;
-                        }
-                        const failure = TurnRunner.#providerFailure(error, providerSignal);
-                        await currentModelCall.fail(failure, error.capacity ?? null);
-                        providerCallInFlight = false;
-                        await this.#problems.record({
-                            workerId,
-                            loopId,
-                            turnId,
-                            sequence: nextActionIndex++,
-                            origin: "_plurnk",
-                            source: "provider",
-                            result: failure,
-                        });
-                        // Include the durable recovery signal in the replacement
-                        // request while preserving the selected recovery posture.
-                        requestPacket = await buildPacket();
-                        materializedRequest = await this.#wireMessages(requestPacket, workspaceId, provider);
-                        modelMessages = materializedRequest.messages;
-                        nativeInputs = materializedRequest.nativeInputs;
-                        continue;
-                    }
-                    finally {
-                        endReasoning();
-                    }
-                    if (recoveryFailures > 0) {
-                        this.#notices.push(workspaceId, workerId, loopId, {
-                            source: "engine:provider",
-                            kind: "provider_recovered",
-                            level: "info",
-                            message: `Provider recovered after ${recoveryFailures} failed call${recoveryFailures === 1 ? "" : "s"}.`,
-                        });
-                        recoveryFailures = 0;
-                        recoveryStartedAt = null;
-                    }
-                    response = completedResponse;
-                    turnWireAccounting.push(...completedResponse.accounting);
-                    await currentModelCall.observeResponse(completedResponse, null, nativeInputs);
-                    railEvidence = railGrammar === undefined
-                        ? undefined
-                        : TurnRunner.#requireGrammarEvidence(completedResponse, railAllowWithheld);
-                    splitResponse = this.#splitResponse(completedResponse);
-                    await classifyProviderAttempt(attemptRow.id, splitResponse, attempt, splitResponse.emissionValid);
-                    if (splitResponse.emissionValid)
-                        break;
-                    attempt++;
-                }
-                if (!signal?.aborted) {
-                    const wire = aggregateProviderAccounting(turnWireAccounting);
-                    this.#notices.push(workspaceId, workerId, loopId, {
-                        source: "engine:turn",
-                        kind: "turn_generated",
-                        level: "info",
-                        message: "parsing model response",
-                        // {§turn-accounting-notice} (#465) — the exact settled derivation,
-                        // never a second stored fact: a live watcher accrues loop cost per turn.
-                        accounting: {
-                            requests: turnWireAccounting.length,
-                            costUsd: wire.costUsd,
-                            inputTokens: wire.usage?.inputTokens ?? null,
-                            outputTokens: wire.usage?.outputTokens ?? null,
-                            reasoningTokens: wire.usage?.outputTokenDetails?.reasoningTokens ?? null,
-                            cacheReadTokens: wire.usage?.inputTokenDetails?.cacheReadTokens ?? null,
-                        },
-                    });
-                }
-            }
-            catch (err) {
-                // This handler owns only provider-call failures. Parser, cost, SQL,
-                // and engine-contract failures retain their original source.
-                if (err instanceof ModelCallPersistenceError || err instanceof ProviderAccountingIntegrityError)
-                    throw err;
-                if (!providerCallInFlight)
-                    throw err;
-                providerCallInFlight = false;
-                if (providerAttemptId === null || providerModelCall === null) {
-                    throw new Error("provider call failed without durable model-call and attempt identities", { cause: err });
-                }
-                const failure = TurnRunner.#providerFailure(err, providerSignal);
-                const capacityFailure = err instanceof ProviderError && err.kind === "capacity_exceeded";
-                // {§provider-interrupted-attempt} — a provider-declared interruption
-                // carries response evidence without becoming a completed exchange.
-                // Persist it as an unaccepted attempt before settling the failure.
-                if (err instanceof ProviderError && err.attempt !== undefined) {
-                    response = err.attempt;
-                    await providerModelCall.observeResponse(response, failure, nativeInputs);
-                    splitResponse = this.#splitResponse(response);
-                    await classifyProviderAttempt(providerAttemptId, splitResponse, currentEmissionAttempt, false);
-                }
-                else {
-                    await providerModelCall.fail(failure, err instanceof ProviderError ? err.capacity ?? null : null);
-                    if (!capacityFailure)
-                        emissionAttempts = currentEmissionAttempt;
-                }
-                // {§turn-never-blank} — a ProviderError means no completed exchange exists.
-                // Persist its exact RFC 9457 result before propagating it. Grammar evidence
-                // and its engine-owned verdict exist only on completed responses
-                // ({§rail-truth-engine-verdict}). Cancellation is lifecycle truth, not a
-                // provider failure. Close the
-                // attempted turn without inventing an assistant response, then let
-                // runLoop/Daemon settle the exact 504/499 loop result.
-                if (providerSignal?.aborted) {
-                    const status = providerSignal.reason === LOOP_TIMEOUT_REASON ? 504 : 499;
-                    await this.#recordInference({
-                        workspaceId, workerId, loopId, turnId,
-                        evidence: {
-                            packet: StoredPacket.stringify(requestPacket),
-                            usageCurationBudget: this.#packets.curationBudgetFor(provider),
-                            finishReason: splitResponse?.callMetadata.finishReason ?? null,
-                            model: splitResponse?.callMetadata.model ?? provider.model,
-                            meta: JSON.stringify(response?.meta ?? {}),
-                        },
-                    });
-                    await Turn.complete(this.#db, turnId, status);
-                    throw err;
-                }
-                const recorded = await this.#problems.record({
-                    workerId,
-                    loopId,
-                    turnId,
-                    sequence: nextActionIndex,
-                    origin: "_plurnk",
-                    source: "provider",
-                    result: failure,
-                });
-                // The provider call was attempted, but no completed exchange exists.
-                // Persist the exact request half and failure status; omitting assistant
-                // is materially different from fabricating an empty model turn.
-                await this.#recordInference({
-                    workspaceId, workerId, loopId, turnId,
-                    evidence: {
-                        packet: StoredPacket.stringify(requestPacket),
-                        usageCurationBudget: this.#packets.curationBudgetFor(provider),
-                        finishReason: splitResponse?.callMetadata.finishReason ?? null,
-                        model: splitResponse?.callMetadata.model ?? provider.model,
-                        meta: JSON.stringify(response?.meta ?? {}),
-                    },
-                });
-                await Turn.complete(this.#db, turnId, providerParked ? 202 : recorded.result.status);
-                if (providerParked) {
-                    // {§provider-recovery} — the recovery budget is spent: the loop parks exactly like a
-                    // [202] wait and resumes on the next prompt or wake; the failure stays durable.
-                    this.#notices.push(workspaceId, workerId, loopId, {
-                        source: "engine:provider",
-                        kind: "provider_unavailable",
-                        level: "error",
-                        message: `${recorded.result.problem?.title ?? "Provider failure"}: the ${Math.round(recoveryBudget / 1000)}s recovery budget is spent; the loop is parked and resumes on the next prompt or wake.`,
-                    });
-                    return {
-                        createdTurnIds,
-                        turnId,
-                        producer: "model",
-                        kind: "inference",
-                        status: 202,
-                        outcomes: [],
-                        fingerprint: "",
-                        capacityHardStop: false, providerParked: true,
-                        providerFailure: recorded.result,
-                        steerStruck: false,
-                        emissionAttempts,
-                        emissionExhausted: false,
-                    };
-                }
-                if (capacityFailure) {
-                    return {
-                        createdTurnIds,
-                        turnId,
-                        producer: "model",
-                        kind: "inference",
-                        status: recorded.result.status,
-                        outcomes: [],
-                        fingerprint: "",
-                        capacityHardStop: true,
-                        providerParked: false,
-                        capacityFailure: recorded.result,
-                        steerStruck: false,
-                        emissionAttempts,
-                        emissionExhausted: false,
-                    };
-                }
-                if (err instanceof ProviderError
-                    && err.kind === "invalid_response"
-                    && providerSignal?.aborted !== true) {
-                    // {§engine-rails} Contract Strikes: the provider violated its response
-                    // contract. The failure is durable and the turn is complete; the strike
-                    // rail — never an instant loop death — rules whether the streak ends it.
-                    return {
-                        createdTurnIds,
-                        turnId,
-                        producer: "model",
-                        kind: "inference",
-                        status: recorded.result.status,
-                        outcomes: [{ op: null, status: recorded.result.status, problemType: recorded.result.problem?.type ?? null }],
-                        fingerprint: `provider-contract-violation:${turnId}`,
-                        capacityHardStop: false,
-                        providerParked: false,
-                        providerFailure: recorded.result,
-                        steerStruck: false,
-                        emissionAttempts,
-                        emissionExhausted: false,
-                    };
-                }
-                throw new OperationFailureError(recorded.result, { cause: err });
+            await this.#dispatch({
+                statement: fileRead, workspaceId, workerId, loopId, turnId,
+                sequence: nextActionIndex, origin: "_plurnk", onDispatch, onSettled,
+            });
+            nextActionIndex++;
+        }
+        return nextActionIndex;
+    }
+    #buildPacket({ messages, recap, workspaceId, workerId, loopId, provider }, facts) {
+        return this.#packets.buildRequestPacket({
+            initialMessages: messages,
+            recap,
+            workspaceId,
+            workerId,
+            loopId,
+            currentTurnSeq: facts.seq,
+            provider,
+            gitStatus: facts.gitStatus,
+            notices: facts.notices,
+            transientOpenLogEntryId: facts.transientOpenLogEntryId,
+            promptProjection: facts.promptProjection,
+            turnId: facts.turnId,
+        });
+    }
+    // Retained context cannot fit: the turn completes on the curation failure and
+    // the loop rules the terminal.
+    async #failCuration(request, overflow) {
+        const curationFailure = curationOverflowFailure(overflow);
+        await Turn.complete(this.#db, request.turnId, curationFailure.status);
+        return turnResult(request, curationFailure.status, { curationFailure });
+    }
+    // Phase 4's bookkeeping: the wire request, the recovery knobs, the signal the
+    // provider sees, the client id and the worker's provider identity.
+    async #prepareProviderAttempts({ provider, workspaceId, workerId, loopId, signal }, request) {
+        const wire = await this.#wireMessages(request.packet, request.systemCtx, provider);
+        // {§provider-recovery} — this turn's recovery clock: the first recoverable provider
+        // failure starts it; the budget and backoff are the operator's.
+        const recoveryBudget = readProviderRecovery();
+        const recoveryBackoff = readProviderRecoveryBackoff();
+        const providerSignal = this.#loopSignal(loopId) ?? signal;
+        // {§client-metadata}
+        const { client } = await WorkspaceSettings.read(this.#db, workspaceId);
+        const { workerId: providerWorkerId, primaryWorkerId } = await this.#resolveWorkerProviderIdentity(workerId);
+        return {
+            wire,
+            response: undefined,
+            split: undefined,
+            railGrammar: undefined,
+            railEvidence: undefined,
+            emissionAttempts: 0,
+            callInFlight: false,
+            modelCallSequence: 0,
+            currentEmissionAttempt: 0,
+            attemptId: null,
+            modelCall: null,
+            recoveryStartedAt: null,
+            recoveryFailures: 0,
+            parked: false,
+            attributions: [],
+            recoveryBudget,
+            recoveryBackoff,
+            signal: providerSignal,
+            client,
+            providerWorkerId,
+            primaryWorkerId,
+            turnWireAccounting: [],
+        };
+    }
+    // Phase 4 — the provider attempt loop. Each iteration is one logical call: a
+    // recoverable failure or a capacity rebuild re-issues the same emission attempt,
+    // an invalid emission spends one, and a valid emission ends the loop
+    // ({§invalid-emission-attempts}).
+    async #attemptProvider(args, request, attempts) {
+        const { provider, workspaceId, workerId, loopId, signal } = args;
+        // {§turn-lifecycle}: bracket the complete provider-attempt window with liveness notices.
+        if (!signal?.aborted)
+            this.#notices.push(workspaceId, workerId, loopId, { source: "engine:turn", kind: "turn_awaiting_model", level: "info", message: "awaiting model response" });
+        attempts.railGrammar = await this.#operatorGrammar(provider);
+        const attemptLimit = readEmissionAttempts();
+        const strikeStreak = await this.#strikes.streak(loopId);
+        for (let attempt = 1; attempt <= attemptLimit;) {
+            const verdict = await this.#issueProviderCall(args, request, attempts, attempt, strikeStreak);
+            if (verdict === "admitted")
+                break;
+            if (verdict === "rejected")
+                attempt++;
+        }
+        if (!signal?.aborted) {
+            const wire = aggregateProviderAccounting(attempts.turnWireAccounting);
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:turn",
+                kind: "turn_generated",
+                level: "info",
+                message: "parsing model response",
+                // {§turn-accounting-notice} (#465) — the exact settled derivation,
+                // never a second stored fact: a live watcher accrues loop cost per turn.
+                accounting: {
+                    requests: attempts.turnWireAccounting.length,
+                    costUsd: wire.costUsd,
+                    inputTokens: wire.usage?.inputTokens ?? null,
+                    outputTokens: wire.usage?.outputTokens ?? null,
+                    reasoningTokens: wire.usage?.outputTokenDetails?.reasoningTokens ?? null,
+                    cacheReadTokens: wire.usage?.inputTokenDetails?.cacheReadTokens ?? null,
+                },
+            });
+        }
+        if (attempts.response === undefined || attempts.split === undefined || attempts.modelCall === null) {
+            throw new Error("provider attempt loop completed without a response");
+        }
+        const emission = {
+            response: attempts.response,
+            split: attempts.split,
+            modelCallId: attempts.modelCall.id,
+            railGrammar: attempts.railGrammar,
+            railEvidence: attempts.railEvidence,
+            emissionAttempts: attempts.emissionAttempts,
+            signal: attempts.signal,
+            primaryWorkerId: attempts.primaryWorkerId,
+        };
+        if (emission.split.packetAssistant.reasoning?.length) {
+            await Turn.recordSource(this.#db, request.turnId, "reasoning", emission.split.packetAssistant.reasoning, { modelCallId: emission.modelCallId });
+        }
+        return emission;
+    }
+    // One logical provider call: its durable model call and attempt row, the exchange
+    // under the reasoning observer, and its classification. Capacity recovery and
+    // {§provider-recovery} re-issue the same emission attempt; the parser's admission
+    // is the one verdict on a completed exchange.
+    async #issueProviderCall(args, request, attempts, attempt, strikeStreak) {
+        const { provider, workspaceId, workerId, loopId } = args;
+        // Capacity recovery may rebuild and resend the request without
+        // consuming a grammar-emission attempt. Every logical provider
+        // call still receives its own durable sequence and accounting.
+        attempts.currentEmissionAttempt = attempt;
+        attempts.modelCallSequence++;
+        const attributionContext = Object.freeze({
+            workspaceId: String(workspaceId),
+            workerId: attempts.providerWorkerId,
+            primaryWorkerId: attempts.primaryWorkerId,
+            loop: request.loopSeq,
+            turn: request.seq,
+            attempt: attempts.modelCallSequence,
+        });
+        attempts.attributions = await this.#attemptAttributions(provider, attributionContext);
+        request.packet = { ...request.packet, attributions: attempts.attributions };
+        const modelCall = await ModelCall.open(this.#db, {
+            turnId: request.turnId,
+            kind: "emission",
+            attributions: attempts.attributions,
+            model: provider.model,
+        });
+        attempts.modelCall = modelCall;
+        const attemptRow = await this.#db.engine_open_turn_attempt.get({
+            model_call_id: modelCall.id,
+        });
+        if (attemptRow === undefined) {
+            throw new Error(`Engine.runTurn: provider call ${attempts.modelCallSequence} did not open`);
+        }
+        attempts.attemptId = attemptRow.id;
+        attempts.callInFlight = true;
+        const reasoning = this.#reasoningObserver(args, request.turnId, modelCall);
+        let completedResponse;
+        try {
+            completedResponse = await this.#generate(args, request, attempts, modelCall, reasoning, strikeStreak);
+        }
+        catch (error) {
+            if (error instanceof ProviderError
+                && RECOVERABLE_PROVIDER_FAILURES.has(error.kind)
+                && attempts.signal?.aborted !== true) {
+                await this.#recoverProviderFailure(args, request, attempts, modelCall, attemptRow.id, error);
+                return "reissued";
             }
-            if (response === undefined || splitResponse === undefined || providerModelCall === null) {
-                throw new Error("provider attempt loop completed without a response");
+            if (!(error instanceof ProviderError)
+                || error.kind !== "capacity_exceeded"
+                || attempts.signal?.aborted === true
+                || !await this.#recoverCapacityPacket(args, request, attempts)) {
+                throw error;
             }
-            const emissionModelCallId = providerModelCall.id;
-            if (!splitResponse.emissionValid) {
-                // {§invalid-emission-attempts} Every exhaustion publishes the raw final
-                // response and its recovery fact; {§engine-rails} Contract Strikes rule
-                // how many consecutive frame-contract violations the loop survives.
-                let rejectedModelEntryId;
-                {
-                    rejectedModelEntryId = await this.#dispatcher.writeEmissionAttempt({
-                        verbatim: splitResponse.packetAssistant.content,
+            await this.#resendForCapacity(args, request, attempts, modelCall, error);
+            return "reissued";
+        }
+        finally {
+            reasoning.end();
+        }
+        if (attempts.recoveryFailures > 0) {
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:provider",
+                kind: "provider_recovered",
+                level: "info",
+                message: `Provider recovered after ${attempts.recoveryFailures} failed call${attempts.recoveryFailures === 1 ? "" : "s"}.`,
+            });
+            attempts.recoveryFailures = 0;
+            attempts.recoveryStartedAt = null;
+        }
+        attempts.response = completedResponse;
+        attempts.turnWireAccounting.push(...completedResponse.accounting);
+        await modelCall.observeResponse(completedResponse, null, attempts.wire.nativeInputs);
+        attempts.railEvidence = attempts.railGrammar === undefined ? undefined : completedResponse.grammarEvidence;
+        const split = this.#splitResponse(completedResponse, this.#executors()?.availableRuntimes(workspaceId) ?? []);
+        attempts.split = split;
+        await this.#classifyProviderAttempt(attempts, attemptRow.id, split, attempt, split.emissionValid);
+        return split.emissionValid ? "admitted" : "rejected";
+    }
+    // {§notifications-reasoning-event} — only the parent emission is conversational;
+    // BARE has no observer on its isolated calls. Reasoning deltas cite the physical
+    // request they stream in; a new request or the call's end closes the open span.
+    #reasoningObserver({ workspaceId, workerId, loopId }, turnId, modelCall) {
+        let reasoningStarted = false;
+        let reasoningRequestSequence = 0;
+        const end = () => {
+            if (!reasoningStarted)
+                return;
+            this.#reasoningEventNotify(workspaceId, {
+                workerId,
+                loopId,
+                turnId,
+                modelCallId: modelCall.id,
+                requestSequence: reasoningRequestSequence,
+                phase: "end",
+            });
+            reasoningStarted = false;
+        };
+        const observeRequest = async (...args) => {
+            end();
+            const settle = await modelCall.observeRequest(...args);
+            reasoningRequestSequence = modelCall.requestSequence;
+            return settle;
+        };
+        const observeReasoning = this.#reasoningEventNotify === undefined
+            ? undefined
+            : (delta) => {
+                if (reasoningRequestSequence === 0) {
+                    throw new Error("provider emitted reasoning before opening its physical request");
+                }
+                if (!reasoningStarted) {
+                    reasoningStarted = true;
+                    this.#reasoningEventNotify(workspaceId, {
                         workerId,
                         loopId,
                         turnId,
-                        sequence: nextActionIndex,
-                        modelCallId: emissionModelCallId,
-                        ...(response.assistant.reasoningEncrypted?.length
-                            ? { reasoningItems: response.assistant.reasoningEncrypted }
-                            : {}),
+                        modelCallId: modelCall.id,
+                        requestSequence: reasoningRequestSequence,
+                        phase: "start",
                     });
-                    // {§invalid-emission-attempts} — the informed turn carries the parser's own
-                    // diagnostic and position: the model sees WHY, not only that it was refused.
-                    const diagnostic = splitResponse.parseErrors[0];
-                    const cut = allowanceCutMessage(splitResponse.callMetadata.finishReason, response.capacity.responseMax ?? provider.outputBudget);
-                    if (cut !== null) {
-                        this.#notices.push(workspaceId, workerId, loopId, {
-                            source: "engine:capacity",
-                            kind: "output_truncated",
-                            level: "error",
-                            message: `${cut}; no operations were performed`,
-                        });
-                    }
-                    else {
-                        this.#notices.push(workspaceId, workerId, loopId, {
-                            source: "engine:grammar",
-                            kind: "invalid_emission",
-                            level: "error",
-                            message: diagnostic === undefined
-                                ? INVALID_EMISSION_RECOVERY_MESSAGE
-                                : `${INVALID_EMISSION_RECOVERY_MESSAGE} Parser: ${diagnostic.message}`,
-                            ...(diagnostic !== undefined && diagnostic.line > 0
-                                ? { position: { type: "content-offset", line: diagnostic.line, column: diagnostic.column } }
-                                : {}),
-                        });
-                    }
                 }
-                const status = TURN_STATUS_IMPLICIT_CONTINUE;
-                await this.#recordInference({
-                    workspaceId, workerId, loopId, turnId,
-                    evidence: {
-                        packet: StoredPacket.stringify(requestPacket),
-                        usageCurationBudget: this.#packets.curationBudgetFor(provider),
-                        finishReason: splitResponse.callMetadata.finishReason,
-                        model: splitResponse.callMetadata.model,
-                        meta: JSON.stringify(response.meta ?? {}),
-                    },
-                });
-                await Turn.complete(this.#db, turnId, status);
-                return {
-                    createdTurnIds,
+                this.#reasoningEventNotify(workspaceId, {
+                    workerId,
+                    loopId,
                     turnId,
-                    producer: "model",
-                    kind: "inference",
-                    status: TURN_STATUS_IMPLICIT_CONTINUE,
-                    outcomes: [{ op: null, status: 500, problemType: "https://problems.plurnk.xyz/engine/invalid-emission-exhausted" }],
-                    fingerprint: `frame-contract-violation:${turnId}`,
-                    capacityHardStop: false,
-                    providerParked: false,
-                    steerStruck: false,
-                    emissionAttempts,
-                    emissionExhausted: true,
-                    ...(rejectedModelEntryId === undefined ? {} : { rejectedModelEntryId }),
-                };
-            }
-            // {§packet-stored-shape} — admitted emission data extends the packet;
-            // provider-call metadata remains on the Turn row.
-            const { packetAssistant, callMetadata, parseNotices, recoverableParseErrors, } = splitResponse; // raw assistant content is opaque — split, never interpreted — {§provider-guarantees-assistantraw-opaque}
-            for (const notice of parseNotices) {
-                this.#notices.push(workspaceId, workerId, loopId, notice);
-            }
-            // Non-fatal provider transport notices on an accepted turn. Forward each
-            // Notice with a content-offset `line:col`;
-            // the model resolves it against its own emission — READ the body-suppressed turnOps row at the
-            // cited lines ({§turn-ops-entry}) — not an embedded snippet that would duplicate the emission.
-            for (const notice of response.notices ?? []) {
-                const located = typeof notice.position === "number"
-                    ? this.#offsetToLineColumn(packetAssistant.content, notice.position)
-                    : null;
-                this.#notices.push(workspaceId, workerId, loopId, {
-                    source: notice.source,
-                    kind: notice.kind,
-                    message: notice.message ?? "",
-                    level: notice.level,
-                    ...(located !== null
-                        ? { position: { type: "content-offset", line: located.line, column: located.column } }
-                        : {}),
+                    modelCallId: modelCall.id,
+                    requestSequence: reasoningRequestSequence,
+                    phase: "content",
+                    delta,
                 });
-            }
-            const allowanceCut = allowanceCutMessage(splitResponse.callMetadata.finishReason, response.capacity.responseMax ?? provider.outputBudget);
-            if (allowanceCut !== null) {
-                this.#notices.push(workspaceId, workerId, loopId, {
-                    source: "engine:capacity",
-                    kind: "output_truncated",
-                    message: allowanceCut,
-                    level: "warn",
+            };
+        return { observeRequest, observeReasoning, end };
+    }
+    // The exchange under its GenAI span: the packet's observations are recorded, the
+    // provider generates against the wire request, and the call's accounting is
+    // asserted whether it resolved or failed.
+    async #generate({ provider, workspaceId }, request, attempts, modelCall, reasoning, strikeStreak) {
+        return await observed(// {§observability-boundary}
+        GEN_AI_REQUEST_SPAN, { model: provider.model, attempt: attempts.modelCallSequence }, async (span) => {
+            try {
+                await this.#packets.recordObservations(request.packet);
+                const generated = await provider.generate({
+                    messages: attempts.wire.messages,
+                    workerId: attempts.providerWorkerId,
+                    primaryWorkerId: attempts.primaryWorkerId,
+                    signal: attempts.signal,
+                    grammar: attempts.railGrammar,
+                    strikes: strikeStreak,
+                    attributions: attempts.attributions.length > 0
+                        ? attempts.attributions
+                        : undefined,
+                    client: attempts.client ?? undefined,
+                    workspaceId: String(workspaceId),
+                    loop: request.loopSeq,
+                    turn: request.seq,
+                    observeRequest: reasoning.observeRequest,
+                    observeReasoning: reasoning.observeReasoning,
+                    callKind: "emission",
+                }); // {§provider-surface-generate} {§provider-guarantees-signal-wired} {§provider-guarantees-serial-attempts} {§attribution} {§client-metadata}
+                modelCall.assertAccounting(generated.accounting);
+                attempts.callInFlight = false;
+                recordCounter(PROVIDER_CALLS, {
+                    model: provider.model,
+                    attempt: attempts.modelCallSequence,
+                    status: "resolved",
                 });
+                span.setAttribute("status", "resolved");
+                settleGenAiResponse(span, generated);
+                return generated;
             }
-            // Grade configured local evidence independently. Endpoint-owned
-            // constraints remain provider observations. {§rail-truth-engine-verdict}
-            let railKeys;
-            if (railGrammar !== undefined) {
-                if (railEvidence === undefined)
-                    throw new Error("configured GBNF response has no final grammar evidence");
-                if (railResponseGrammar === undefined)
-                    throw new Error("configured GBNF has no response grammar");
-                let verdict = null;
-                try {
-                    verdict = validateGbnf(railResponseGrammar, railEvidence.input);
-                }
-                catch (cause) {
-                    TurnRunner.#warnRailVerdictGapOnce(cause.message);
-                }
-                railKeys = {
-                    railsAttached: railEvidence.transported ? "client" : "withheld",
-                    railsVerdict: verdict?.status ?? "unverifiable",
-                };
-                if (verdict !== null && verdict.status !== "accept" && allowanceCut === null) {
-                    const contentPosition = verdict.pos >= railEvidence.contentStart
-                        ? verdict.pos - railEvidence.contentStart
-                        : null;
-                    const located = contentPosition === null
-                        ? null
-                        : this.#offsetToLineColumn(packetAssistant.content, contentPosition);
-                    this.#notices.push(workspaceId, workerId, loopId, {
-                        source: "engine:rails",
-                        kind: "grammar_unenforced",
-                        message: verdict.status === "reject"
-                            ? `emission rejects the grammar at raw code point ${verdict.pos}`
-                            : `emission is an incomplete grammar sentence (ends at raw code point ${verdict.pos})`,
-                        level: "warn",
-                        ...(located === null
-                            ? {}
-                            : { position: { type: "content-offset", line: located.line, column: located.column } }),
-                    });
+            catch (error) {
+                if (error instanceof ProviderError) {
+                    modelCall.assertAccounting(error.accounting);
+                    attempts.turnWireAccounting.push(...error.accounting);
                 }
+                throw error;
             }
-            // Attach the admitted inference evidence. The turn remains open until
-            // the producer-neutral admitted-turn executor settles every operation
-            // and its exact source artifact.
-            const packet = StoredPacket.admit(requestPacket, packetAssistant, response.assistantRaw);
-            await this.#recordInference({
-                workspaceId, workerId, loopId, turnId,
-                evidence: {
-                    packet: StoredPacket.stringify(packet),
-                    usageCurationBudget: this.#packets.curationBudgetFor(provider), // {§tokenomics-client-gauge}
-                    finishReason: callMetadata.finishReason,
-                    model: callMetadata.model,
-                    // Opaque provider metadata plus engine-authored rail keys.
-                    // {§meta-passthrough}, {§rail-truth-engine-verdict}
-                    meta: JSON.stringify({ ...(response.meta ?? {}), ...(railKeys ?? {}) }),
-                },
-            });
-            // {§operator-config-workspace-max-commands} — workspace maxCommands
-            // narrows the operator ceiling before the admitted program reaches the
-            // shared executor.
-            const maxCommands = Math.min(readMaxCommands(), (await WorkspaceSettings.read(this.#db, workspaceId)).maxCommands ?? Number.POSITIVE_INFINITY);
-            const reasoningItems = response.assistant.reasoningEncrypted?.length
-                ? response.assistant.reasoningEncrypted
-                : undefined;
-            const executed = await this.executeAdmittedTurn({
-                statements: packetAssistant.ops,
-                source: splitResponse.sourceBacked ? packetAssistant.content : null,
-                sourceFolded: true,
-                sourceModelCallId: emissionModelCallId,
-                ...(reasoningItems !== undefined ? { sourceReasoningItems: reasoningItems } : {}),
-                origin: "model",
-                workspaceId,
-                workerId,
-                loopId,
-                turnId,
-                fromSequence: nextActionIndex,
-                maxCommands,
-                enforceIdle: true,
-                recoverableParseErrors,
-                bare: {
-                    provider: childProvider,
-                    primaryWorkerId,
-                    loopSequence: loopSeq,
-                    turnSequence: seq,
-                    signal: providerSignal,
-                },
-                signal: providerSignal,
-                onDispatch,
-                onSettled,
+        }, genAiRequestOptions(ProviderInstantiate.aliasOf(provider) ?? "plurnk", provider.model));
+    }
+    // {§provider-recovery} — a transient provider failure never ends the loop: record
+    // it, wait, and re-issue the same turn; once the budget is spent the failure
+    // handler parks the loop instead of failing it.
+    async #recoverProviderFailure({ workspaceId, workerId, loopId }, request, attempts, modelCall, attemptId, error) {
+        attempts.recoveryStartedAt ??= Date.now();
+        const elapsed = Date.now() - attempts.recoveryStartedAt;
+        if (elapsed >= attempts.recoveryBudget) {
+            attempts.parked = true;
+            throw error;
+        }
+        attempts.recoveryFailures += 1;
+        const failure = _a.#providerFailure(error, attempts.signal);
+        if (error.attempt !== undefined) {
+            // {§provider-interrupted-attempt} — the interrupted response stays durable
+            // as an unaccepted attempt; it is never admitted or replayed.
+            await modelCall.observeResponse(error.attempt, failure, attempts.wire.nativeInputs);
+            await this.#classifyProviderAttempt(attempts, attemptId, this.#splitResponse(error.attempt, this.#executors()?.availableRuntimes(workspaceId) ?? []), attempts.currentEmissionAttempt, false);
+        }
+        else {
+            await modelCall.fail(failure, error.capacity ?? null);
+        }
+        attempts.callInFlight = false;
+        await this.#problems.record({
+            workerId,
+            loopId,
+            turnId: request.turnId,
+            sequence: request.nextActionIndex++,
+            origin: "_plurnk",
+            source: "provider",
+            result: failure,
+        });
+        const wait = Math.min(attempts.recoveryBackoff * 2 ** (attempts.recoveryFailures - 1), attempts.recoveryBackoff * 12);
+        this.#notices.push(workspaceId, workerId, loopId, {
+            source: "engine:provider",
+            kind: "provider_unavailable",
+            level: "warn",
+            message: `${failure.problem?.title ?? "Provider failure"}: retrying in ${Math.round(wait / 1000)}s (${Math.round(elapsed / 1000)}s of the ${Math.round(attempts.recoveryBudget / 1000)}s recovery budget spent).`,
+        });
+        // An abort during the wait re-enters generate, which refuses on the aborted signal.
+        await delay(wait, undefined, { signal: attempts.signal }).catch(() => undefined);
+        // The response is still owed for this exact input. Failure rows remain
+        // durable, but recursively materializing them would mutate and cache-bust
+        // the request being recovered. {§provider-recovery}
+    }
+    // The first capacity rejection withholds the automatic prompt projection; the
+    // rebuilt request is resent only when it actually changed the wire messages.
+    async #recoverCapacityPacket(args, request, attempts) {
+        if (request.promptProjection !== "automatic")
+            return false;
+        request.promptProjection = "withheld";
+        const candidate = await this.#buildPacket(args, request);
+        const candidateRequest = await this.#wireMessages(candidate, request.systemCtx, args.provider);
+        if (JSON.stringify(candidateRequest.messages) === JSON.stringify(attempts.wire.messages))
+            return false;
+        request.packet = candidate;
+        attempts.wire = candidateRequest;
+        return true;
+    }
+    // The capacity rejection is durable as a failed call and a problem row; the
+    // replacement request is rebuilt to include that recovery signal while keeping
+    // the selected projection.
+    async #resendForCapacity(args, request, attempts, modelCall, error) {
+        const { workerId, loopId, provider } = args;
+        const failure = _a.#providerFailure(error, attempts.signal);
+        await modelCall.fail(failure, error.capacity ?? null);
+        attempts.callInFlight = false;
+        await this.#problems.record({
+            workerId,
+            loopId,
+            turnId: request.turnId,
+            sequence: request.nextActionIndex++,
+            origin: "_plurnk",
+            source: "provider",
+            result: failure,
+        });
+        // Include the durable recovery signal in the replacement
+        // request while preserving the selected recovery posture.
+        request.packet = await this.#buildPacket(args, request);
+        attempts.wire = await this.#wireMessages(request.packet, request.systemCtx, provider);
+    }
+    // The attempt row's verdict: accepted, or rejected with the parser's errors. The
+    // classified emission attempt is the turn's spent count.
+    async #classifyProviderAttempt(attempts, id, split, emissionAttempt, accepted) {
+        const result = await this.#db.engine_classify_turn_attempt_response.run({
+            id,
+            accepted: accepted ? 1 : 0,
+            parse_errors: JSON.stringify(split.parseErrors),
+        });
+        if (result.changes !== 1) {
+            throw new Error(`emission attempt ${id} was not awaiting classification`);
+        }
+        attempts.emissionAttempts = emissionAttempt;
+    }
+    // The provider-call failure handler. It owns only failures raised while a call
+    // was in flight; parser, cost, SQL, and engine-contract failures retain their
+    // original source.
+    async #settleProviderFailure(err, args, request, attempts) {
+        if (err instanceof ModelCallPersistenceError || err instanceof ProviderAccountingIntegrityError)
+            throw err;
+        if (!attempts.callInFlight)
+            throw err;
+        attempts.callInFlight = false;
+        if (attempts.attemptId === null || attempts.modelCall === null) {
+            throw new Error("provider call failed without durable model-call and attempt identities", { cause: err });
+        }
+        const { provider, workspaceId, workerId, loopId } = args;
+        const { turnId } = request;
+        const failure = _a.#providerFailure(err, attempts.signal);
+        const capacityFailure = err instanceof ProviderError && err.kind === "capacity_exceeded";
+        // {§provider-interrupted-attempt} — a provider-declared interruption
+        // carries response evidence without becoming a completed exchange.
+        // Persist it as an unaccepted attempt before settling the failure.
+        if (err instanceof ProviderError && err.attempt !== undefined) {
+            attempts.response = err.attempt;
+            await attempts.modelCall.observeResponse(err.attempt, failure, attempts.wire.nativeInputs);
+            attempts.split = this.#splitResponse(err.attempt, this.#executors()?.availableRuntimes(workspaceId) ?? []);
+            await this.#classifyProviderAttempt(attempts, attempts.attemptId, attempts.split, attempts.currentEmissionAttempt, false);
+        }
+        else {
+            await attempts.modelCall.fail(failure, err instanceof ProviderError ? err.capacity ?? null : null);
+            if (!capacityFailure)
+                attempts.emissionAttempts = attempts.currentEmissionAttempt;
+        }
+        const evidence = this.#requestEvidence(provider, request.packet, attempts.split, attempts.response);
+        // {§turn-never-blank} — a ProviderError means no completed exchange exists.
+        // Persist its exact RFC 9457 result before propagating it. Grammar transport
+        // evidence exists only on completed responses ({§operator-grammar}).
+        // Cancellation is lifecycle truth, not a provider failure. Close the
+        // attempted turn without inventing an assistant response, then let
+        // runLoop/Daemon settle the exact 504/499 loop result.
+        if (attempts.signal?.aborted) {
+            const status = attempts.signal.reason === LOOP_TIMEOUT_REASON ? 504 : 499;
+            await this.#recordInference({ workspaceId, workerId, loopId, turnId, evidence });
+            await Turn.complete(this.#db, turnId, status);
+            throw err;
+        }
+        const recorded = await this.#problems.record({
+            workerId,
+            loopId,
+            turnId,
+            sequence: request.nextActionIndex,
+            origin: "_plurnk",
+            source: "provider",
+            result: failure,
+        });
+        // The provider call was attempted, but no completed exchange exists.
+        // Persist the exact request half and failure status; omitting assistant
+        // is materially different from fabricating an empty model turn.
+        await this.#recordInference({ workspaceId, workerId, loopId, turnId, evidence });
+        await Turn.complete(this.#db, turnId, attempts.parked ? 202 : recorded.result.status);
+        const { emissionAttempts } = attempts;
+        if (attempts.parked) {
+            // {§provider-recovery} — the recovery budget is spent: the loop parks exactly like a
+            // [202] wait and resumes on the next prompt or wake; the failure stays durable.
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:provider",
+                kind: "provider_unavailable",
+                level: "error",
+                message: `${recorded.result.problem?.title ?? "Provider failure"}: the ${Math.round(attempts.recoveryBudget / 1000)}s recovery budget is spent; the loop is parked and resumes on the next prompt or wake.`,
             });
-            return {
-                createdTurnIds,
-                turnId,
-                producer: "model",
-                kind: "inference",
-                status: executed.status,
-                outcomes: executed.outcomes,
-                fingerprint: executed.fingerprint,
-                capacityHardStop: false,
-                providerParked: false,
-                steerStruck: executed.steerStruck,
+            return turnResult(request, 202, { providerParked: true, providerFailure: recorded.result, emissionAttempts });
+        }
+        if (capacityFailure) {
+            return turnResult(request, recorded.result.status, { capacityHardStop: true, capacityFailure: recorded.result, emissionAttempts });
+        }
+        if (err instanceof ProviderError && err.kind === "invalid_response") {
+            // {§engine-rails} Contract Strikes: the provider violated its response
+            // contract. The failure is durable and the turn is complete; the strike
+            // rail — never an instant loop death — rules whether the streak ends it.
+            return turnResult(request, recorded.result.status, {
+                outcomes: [{ op: null, status: recorded.result.status, problemType: recorded.result.problem?.type ?? null }],
+                fingerprint: `provider-contract-violation:${turnId}`,
+                providerFailure: recorded.result,
                 emissionAttempts,
-                emissionExhausted: false,
-            };
+            });
         }
-        catch (cause) {
-            const completionFailures = [];
-            for (const createdTurnId of createdTurnIds) {
-                try {
-                    await Turn.failOpen(this.#db, createdTurnId);
-                }
-                catch (completionCause) {
-                    completionFailures.push(completionCause);
-                }
-            }
-            if (completionFailures.length > 0) {
-                throw new AggregateError([cause, ...completionFailures], "turn execution failed and its open turn containers could not all be completed");
-            }
-            throw cause;
+        throw new OperationFailureError(recorded.result, { cause: err });
+    }
+    // Inference evidence for a turn without an admitted exchange: the exact request
+    // half, the last attempt's metadata when one exists, the provider's own model otherwise.
+    #requestEvidence(provider, packet, split, response) {
+        return {
+            packet: StoredPacket.stringify(packet),
+            sections: StoredPacket.sections(packet),
+            usageCurationBudget: this.#packets.curationBudgetFor(packet),
+            finishReason: split?.callMetadata.finishReason ?? null,
+            model: split?.callMetadata.model ?? provider.model,
+            meta: JSON.stringify(response?.meta ?? {}),
+        };
+    }
+    // Phase 5, refused — {§invalid-emission-attempts}: every exhaustion publishes the
+    // raw final response and its recovery fact; {§engine-rails} Contract Strikes rule
+    // how many consecutive frame-contract violations the loop survives.
+    async #rejectExhaustedEmission({ provider, workspaceId, workerId, loopId }, request, emission) {
+        const { split, response } = emission;
+        const { turnId } = request;
+        const rejectedModelEntryId = await this.#dispatcher.writeEmissionAttempt({
+            verbatim: split.packetAssistant.content,
+            workerId,
+            loopId,
+            turnId,
+            sequence: request.nextActionIndex,
+            modelCallId: emission.modelCallId,
+        });
+        // {§invalid-emission-attempts} — the informed turn carries the parser's own
+        // diagnostic and position: the model sees WHY, not only that it was refused.
+        const diagnostic = split.parseErrors[0];
+        const cut = allowanceCutMessage(split.callMetadata.finishReason, response.capacity.responseMax ?? provider.outputBudget);
+        if (cut !== null) {
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:capacity",
+                kind: "output_truncated",
+                level: "error",
+                message: `${cut}; no operations were performed`,
+            });
         }
+        else {
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:grammar",
+                kind: "invalid_emission",
+                level: "error",
+                message: diagnostic === undefined
+                    ? INVALID_EMISSION_RECOVERY_MESSAGE
+                    : `${INVALID_EMISSION_RECOVERY_MESSAGE} Parser: ${diagnostic.message}`,
+                ...(diagnostic !== undefined && diagnostic.line > 0
+                    ? { position: { type: "content-offset", line: diagnostic.line, column: diagnostic.column } }
+                    : {}),
+            });
+        }
+        await this.#recordInference({ workspaceId, workerId, loopId, turnId, evidence: this.#requestEvidence(provider, request.packet, split, response) });
+        await Turn.complete(this.#db, turnId, TURN_STATUS_IMPLICIT_CONTINUE);
+        return turnResult(request, TURN_STATUS_IMPLICIT_CONTINUE, {
+            outcomes: [{ op: null, status: 500, problemType: "https://problems.plurnk.xyz/engine/invalid-emission-exhausted" }],
+            fingerprint: `frame-contract-violation:${turnId}`,
+            emissionAttempts: emission.emissionAttempts,
+            emissionExhausted: true,
+            rejectedModelEntryId,
+        });
+    }
+    // Phase 5, admitted — the emission's notices, then {§packet-stored-shape}: admitted
+    // emission data extends the packet while provider-call metadata remains on the
+    // Turn row.
+    async #recordAdmittedEmission({ provider, workspaceId, workerId, loopId }, request, emission) {
+        const { split, response } = emission;
+        const { packetAssistant, callMetadata, parseNotices } = split; // raw assistant content is opaque — split, never interpreted — {§provider-guarantees-assistantraw-opaque}
+        for (const notice of parseNotices) {
+            this.#notices.push(workspaceId, workerId, loopId, notice);
+        }
+        const allowanceCut = allowanceCutMessage(callMetadata.finishReason, response.capacity.responseMax ?? provider.outputBudget);
+        // {§empty-turn} — a response cut at the output allowance with nothing admitted names the
+        // cut, so the model reads the ceiling, never a parser symptom (#478).
+        if (split.emptyTurn && allowanceCut !== null) {
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:turn",
+                kind: "output_truncated",
+                level: "warn",
+                message: `${allowanceCut}; no operations were performed`,
+            });
+        }
+        // Non-fatal provider transport notices on an accepted turn. Forward each
+        // Notice with a content-offset `line:col`;
+        // the model resolves it against its own emission — READ ops:///<loop>/<turn> at the
+        // cited lines ({§turn-ops-entry}) — not an embedded snippet that would duplicate the emission.
+        for (const notice of response.notices ?? []) {
+            const located = typeof notice.position === "number"
+                ? this.#offsetToLineColumn(packetAssistant.content, notice.position)
+                : null;
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: notice.source,
+                kind: notice.kind,
+                message: notice.message ?? "",
+                level: notice.level,
+                ...(located !== null
+                    ? { position: { type: "content-offset", line: located.line, column: located.column } }
+                    : {}),
+            });
+        }
+        if (allowanceCut !== null) {
+            this.#notices.push(workspaceId, workerId, loopId, {
+                source: "engine:capacity",
+                kind: "output_truncated",
+                message: allowanceCut,
+                level: "warn",
+            });
+        }
+        // {§operator-grammar} — transport evidence only: the turn records whether the operator's
+        // grammar reached the wire. Nothing grades the response against it; the parser's
+        // admission is the one verdict (#588).
+        const railKeys = emission.railGrammar === undefined
+            ? undefined
+            : { railsAttached: emission.railEvidence?.transported === true ? "client" : "withheld" };
+        // Attach the admitted inference evidence. The turn remains open until
+        // the producer-neutral admitted-turn executor settles every operation
+        // and its exact source artifact.
+        const packet = StoredPacket.admit(request.packet, packetAssistant, response.assistantRaw);
+        await this.#recordInference({
+            workspaceId, workerId, loopId, turnId: request.turnId,
+            evidence: {
+                packet: StoredPacket.stringify(packet),
+                sections: StoredPacket.sections(packet),
+                usageCurationBudget: this.#packets.curationBudgetFor(request.packet), // {§tokenomics-client-gauge}
+                finishReason: callMetadata.finishReason,
+                model: callMetadata.model,
+                // Opaque provider metadata plus the grammar transport key.
+                // {§meta-passthrough}, {§operator-grammar}
+                meta: JSON.stringify({ ...(response.meta ?? {}), ...(railKeys ?? {}) }),
+            },
+        });
+    }
+    // Phase 6 — the admitted program runs under the workspace's command ceiling and
+    // the turn settles on the executor's verdict.
+    async #settleAdmittedTurn(args, request, emission) {
+        const { childProvider, workspaceId, workerId, loopId, onDispatch, onSettled } = args;
+        const { split } = emission;
+        // {§operator-config-workspace-max-commands} — workspace maxCommands
+        // narrows the operator ceiling before the admitted program reaches the
+        // shared executor.
+        const maxCommands = Math.min(readMaxCommands(), (await WorkspaceSettings.read(this.#db, workspaceId)).maxCommands ?? Number.POSITIVE_INFINITY);
+        const executed = await this.executeAdmittedTurn({
+            statements: split.packetAssistant.ops,
+            source: split.sourceBacked ? split.packetAssistant.content : null,
+            sourceModelCallId: emission.modelCallId,
+            origin: "model",
+            workspaceId,
+            workerId,
+            loopId,
+            turnId: request.turnId,
+            fromSequence: request.nextActionIndex,
+            maxCommands,
+            recoverableParseErrors: split.recoverableParseErrors,
+            emptyTurn: split.emptyTurn,
+            bare: {
+                provider: childProvider,
+                primaryWorkerId: emission.primaryWorkerId,
+                loopSequence: request.loopSeq,
+                turnSequence: request.seq,
+                signal: emission.signal,
+            },
+            signal: emission.signal,
+            onDispatch,
+            onSettled,
+        });
+        return turnResult(request, executed.status, {
+            outcomes: executed.outcomes,
+            fingerprint: executed.fingerprint,
+            emptyTurn: executed.emptyTurn,
+            emissionAttempts: emission.emissionAttempts,
+        });
     }
     // Split the wire-level ProviderResponse into the two destinations:
     // packet.assistant gets the model's emission (content, ops, reasoning);
@@ -1592,13 +1449,11 @@ export default class TurnRunner {
     // its assistant payload to skip the parse roundtrip. The wire Provider
     // contract has no `ops` field; only Mock exposes one. Real providers
     // always take the parse path because their `assistant.ops` is undefined.
-    #splitResponse(response) {
+    #splitResponse(response, executors = []) {
         const { assistant } = response;
         const preParsedOps = assistant.ops;
         const ops = [];
-        // PLAN is an ordinary op — emitted by the model, dispatched, and passed to the
-        // client as a log entry. No special hoisting into the reasoning field. Only
-        // structured operations are executable; interstitial text is not an operation.
+        // Only structured operations are executable; interstitial text is not an operation.
         // Full PlurnkParseError context is preserved on rejected attempt evidence;
         // warnings remain admissible Notices. {§parse-diagnostics}
         const parseErrors = [];
@@ -1611,7 +1466,9 @@ export default class TurnRunner {
             // {§observability-boundary} — the parse is observed without its input;
             // only the resulting statement count is attributable.
             const parsed = observedSync("contracts.parse", {}, (span) => {
-                const result = PlurnkParser.parse(assistant.content);
+                // {§fence-heading-in-body} {§interstitial-fence} — the executors this workspace can run
+                // are heading tags to the parser; anything else tagged is a code block.
+                const result = PlurnkParser.parse(assistant.content, { executors });
                 span.setAttribute("statements", result.items.filter((item) => item.kind === "statement").length);
                 return result;
             });
@@ -1637,7 +1494,7 @@ export default class TurnRunner {
                             });
                         }
                         else {
-                            parseErrors.push({ message: err.message, line: err.line, column: err.column, source: err.source });
+                            parseErrors.push({ message: err.message, line: err.line, column: err.column, source: err.source, ...(err.code === undefined ? {} : { code: err.code }) });
                         }
                     }
                     else {
@@ -1655,25 +1512,23 @@ export default class TurnRunner {
             }
         }
         const sourceStatementCount = ops.filter(({ position }) => position.line > 0).length;
-        const plan = ops[0]?.op === "PLAN" ? ops[0] : undefined;
-        const finalOp = ops.at(-1);
-        const terminalSend = finalOp?.op === "SEND"
-            && finalOp.status !== null
-            && TERMINAL_SEND_SIGNALS.has(finalOp.status)
-            ? finalOp
-            : undefined;
-        const recoveredSend = terminalSend?.position.line === 0;
-        // {§turn-shape} — PLAN is a SHOULD: a turn without one is complete once it ends in a
-        // terminal SEND, and the recoverable window then starts at the turn's first statement.
-        const recoverableParseErrors = terminalSend !== undefined && !hasUnparsedTail
-            ? parseErrors.filter((error) => (error.message === PlurnkParser.MISSING_SEND
-                || ((plan === undefined || comparePosition(error, plan.position) > 0)
-                    && (recoveredSend || comparePosition(error, terminalSend.position) < 0)))).toSorted(comparePosition)
+        const dispositions = ops.filter(TurnDisposition.is);
+        const trustworthyBoundary = dispositions.length <= 1 && !hasUnparsedTail;
+        // {§turn-shape} — bounded operation errors are recoverable and ride with the
+        // admitted program; document-boundary failures still reject it.
+        const recoverableParseErrors = trustworthyBoundary
+            ? parseErrors.filter((error) => error.code !== "invalid-turn-structure").toSorted(comparePosition)
             : [];
+        // {§empty-turn} — no operation and no other hard error: admitted as an empty turn, never
+        // resampled; its advisories ({§bare-heading-advisory}) ride as notices.
+        const emptyTurn = preParsedOps === undefined
+            && trustworthyBoundary
+            && sourceStatementCount === 0
+            && parseErrors.every((error) => error.message === PlurnkParser.NO_VALID_OPERATION);
         const emissionValid = preParsedOps !== undefined
-            || (terminalSend !== undefined
+            || emptyTurn
+            || (trustworthyBoundary
                 && sourceStatementCount > 0
-                && !hasUnparsedTail
                 && recoverableParseErrors.length === parseErrors.length);
         const reasoning = assistant.reasoning ?? null;
         return {
@@ -1681,19 +1536,20 @@ export default class TurnRunner {
             sourceBacked: preParsedOps === undefined,
             callMetadata: { finishReason: assistant.finishReason, model: assistant.model },
             parseErrors,
-            recoverableParseErrors: emissionValid ? recoverableParseErrors : [],
+            recoverableParseErrors: emissionValid && !emptyTurn ? recoverableParseErrors : [],
+            emptyTurn,
             parseNotices,
             // The ANTLR model-turn parser is authoritative. At least one source
-            // operation lets an omitted terminal SEND default around it; the
-            // exact defaults and bounded statement failures become durable
-            // operation results. Boundary loss and an unparsed tail still reject
+            // operation is required; TASK omission continues silently. Bounded
+            // statement failures become durable operation results.
+            // Boundary loss and an unparsed tail still reject
             // wholesale. Pre-parsed ops are Mock's trusted test seam.
             emissionValid,
         };
     }
     // #note12 — plugin reference docs are materialized beneath
-    // worker://~/_plurnk/plurnk/ by LoopDocs.
-    // {§exec-poll} — EXEC `<0>` is turn-scoped: abort the worker's open turn-scoped streams via their
+    // worker:///_plurnk/plurnk/ by LoopDocs.
+    // {§exec-poll} — an execution `<0>` is turn-scoped: abort the worker's open turn-scoped streams via their
     // owning scheme (the same registry-routed abort the total reap uses). Called at each pre-turn
     // before the turn's own spawns, so every open turn-scoped sub here is from a prior turn — it
     // never survives into the subsequent turn. Fire-and-forget: the spawn finalizes async and its
@@ -1706,4 +1562,6 @@ export default class TurnRunner {
         return this.#admitted.executeAdmittedTurn(...args);
     }
 }
+_a = TurnRunner;
+export default TurnRunner;
 //# sourceMappingURL=TurnRunner.js.map