@prestyj/cli 5.29.1 → 5.30.1

package/dist/core/agent-session/transcript-markers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcript-markers.js","sourceRoot":"","sources":["../../../src/core/agent-session/transcript-markers.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,4BAA4B,EAC5B,sBAAsB,GAQvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAOxF;;;;;;;GAOG;AACH,MAAM,OAAO,iBAAiB;IAcT;IACA;IAdnB,iFAAiF;IACjF,kEAAkE;IAC1D,UAAU,GAAuB,EAAE,CAAC;IAC5C,6EAA6E;IAC7E,8EAA8E;IAC9E,4DAA4D;IACpD,gBAAgB,GAA6B,EAAE,CAAC;IACxD,6EAA6E;IAC7E,8BAA8B;IACtB,UAAU,GAAuB,EAAE,CAAC;IACpC,WAAW,GAAwB,EAAE,CAAC;IAE9C,YACmB,iBAAuC,EACvC,cAA4B;QAD5B,sBAAiB,GAAjB,iBAAiB,CAAsB;QACvC,mBAAc,GAAd,cAAc,CAAc;IAC5C,CAAC;IAEJ,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,mBAAmB;QACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC;IAC/B,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvC,GAAG,MAAM;YACT,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;YAC1B,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE;YAC5B,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,8EAA8E;IAC9E,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC;YAC5F,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5F,CAAC,CAAC,SAAS,CAAC;IAChB,CAAC;IAED,yEAAyE;IACzE,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,gBAAgB,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACH,OAAO,CAAC,OAAuB,EAAE,MAAiC;QAChE,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,cAAc,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC,WAAW,GAAG,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,KAAwC;QACnD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,GAAG,CAA0C,OAAU,EAAK,EAAE,CAAC,CAAC;YACxE,GAAG,OAAO;YACV,iBAAiB,EAAE,wBAAwB,CAAC,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC;SAC9E,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,KAAa,EAAE,iBAAyB;QAC9E,MAAM,OAAO,GAAqB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QACrF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAAsC,EACtC,KAAqD,EACrD,iBAAyB;QAEzB,MAAM,OAAO,GAA2B;YACtC,OAAO,EAAE,CAAC;YACV,KAAK;YACL,iBAAiB;YACjB,GAAG,CAAC,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,MAAM,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,IAA8B,EAC9B,IAA6B,EAC7B,iBAAyB;QAEzB,MAAM,OAAO,GAAqB,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;QAChF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,yEAAyE;IACzE,aAAa,CAAC,OAA0B;QACtC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,OAA0B;QAChD,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,WAAW;YAAE,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,SAAS,CAAC,4BAA4B,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC1E,MAAM,IAAI,CAAC,SAAS,CAAC,sBAAsB,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAChE,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO;QACnC,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CACrB,IAAgB,EAChB,QAAmF;QAEnF,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;YAAE,OAAO;QACnC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAgB;gBACzB,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;gBACvB,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC;aACrC,CAAC;YACF,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAClB,IAAgB,EAChB,OAAqE;QAErE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,QAAQ,EAAE,IAAI;YACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,OAAO;SACd,CAAC;QACF,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjE,CAAC;CACF"}

package/dist/core/agent-session/verification-tracker.d.ts

@@ -0,0 +1,46 @@
+import type { AgentToolCallEndEvent, AgentToolCallStartEvent } from "@prestyj/agent";
+import type { BackgroundProcess } from "../process-manager.js";
+import { type VerificationGate } from "../verification-gate.js";
+/** A tool call observed between its start and end events. */
+export interface TrackedToolCall {
+    name: string;
+    args: Record<string, unknown>;
+    revision: number;
+    sourceSnapshot?: string | null;
+}
+/**
+ * Host-observed verification evidence: which files this run mutated, which
+ * tool calls are in flight (with their pre-run workspace snapshot), and which
+ * background checks still owe an exit code. Feeds the session's
+ * {@link VerificationGate}; persistence stays with the session.
+ */
+export declare class VerificationTracker {
+    private readonly gate;
+    private readonly cwd;
+    private readonly listProcesses;
+    private readonly fileEditCounts;
+    private readonly toolCalls;
+    private readonly backgroundVerification;
+    constructor(gate: VerificationGate, cwd: string, listProcesses: () => BackgroundProcess[]);
+    recordFileMutated(relative: string): void;
+    /** Per-run reset of mutated files and in-flight calls. */
+    resetRun(): void;
+    /** Drop background checks whose process no longer exists. */
+    pruneBackground(liveProcessIds: ReadonlySet<string>): void;
+    clearBackground(): void;
+    getToolCall(toolCallId: string): TrackedToolCall | undefined;
+    /** Track a starting call. Resolves true when verification state must be persisted. */
+    recordToolCallStart(event: AgentToolCallStartEvent): Promise<boolean>;
+    /**
+     * Fold a finished call into the gate. Only host-observed successful
+     * mutations and trustworthy check results affect approval. The model's text
+     * is never evidence. Resolves true when verification state changed.
+     */
+    recordToolCallEnd(event: AgentToolCallEndEvent, call: TrackedToolCall | undefined, planMode: boolean): Promise<boolean>;
+    /** Settle every background check whose process has exited. Resolves true if any changed. */
+    settleFinishedBackground(): Promise<boolean>;
+    /** In-flight or unconfirmed evidence, else the gate's own problem. */
+    verificationProblem(): string | null;
+    private recordFinishedBackgroundVerification;
+    private finishSnapshotVerification;
+}

package/dist/core/agent-session/verification-tracker.js

@@ -0,0 +1,250 @@
+import { autoBackgroundedId, REVIEW_REJECTED_BEFORE_START } from "../../tools/bash.js";
+import { editTargetPaths } from "../../tools/edit-targets.js";
+import { isCheckOwnFile, extractAddedLines, isCodeFilePath, isVerificationCommand, } from "../verification-gate.js";
+import { classifyVerificationCommand } from "../verification-evidence.js";
+import { captureVerificationSnapshot } from "../verification-snapshot.js";
+/**
+ * Host-observed verification evidence: which files this run mutated, which
+ * tool calls are in flight (with their pre-run workspace snapshot), and which
+ * background checks still owe an exit code. Feeds the session's
+ * {@link VerificationGate}; persistence stays with the session.
+ */
+export class VerificationTracker {
+    gate;
+    cwd;
+    listProcesses;
+    fileEditCounts = new Map();
+    toolCalls = new Map();
+    backgroundVerification = new Map();
+    constructor(gate, cwd, listProcesses) {
+        this.gate = gate;
+        this.cwd = cwd;
+        this.listProcesses = listProcesses;
+    }
+    recordFileMutated(relative) {
+        this.fileEditCounts.set(relative, (this.fileEditCounts.get(relative) ?? 0) + 1);
+    }
+    /** Per-run reset of mutated files and in-flight calls. */
+    resetRun() {
+        this.fileEditCounts.clear();
+        this.toolCalls.clear();
+    }
+    /** Drop background checks whose process no longer exists. */
+    pruneBackground(liveProcessIds) {
+        for (const id of this.backgroundVerification.keys()) {
+            if (!liveProcessIds.has(id))
+                this.backgroundVerification.delete(id);
+        }
+    }
+    clearBackground() {
+        this.backgroundVerification.clear();
+    }
+    getToolCall(toolCallId) {
+        return this.toolCalls.get(toolCallId);
+    }
+    /** Track a starting call. Resolves true when verification state must be persisted. */
+    async recordToolCallStart(event) {
+        const tracked = {
+            name: event.name,
+            args: event.args ?? {},
+            revision: this.gate.revision,
+        };
+        this.toolCalls.set(event.toolCallId, tracked);
+        const startClassification = event.name === "bash" && typeof event.args?.command === "string"
+            ? classifyVerificationCommand(event.args.command)
+            : null;
+        if (startClassification &&
+            typeof event.args?.command === "string" &&
+            (isVerificationCommand(event.args.command) ||
+                startClassification.accepted ||
+                // Must match the tool_call_end predicate: a snapshot-eligible
+                // command that never captured a "before" snapshot is misread at
+                // the end as an uncomparable workspace and re-arms the gate.
+                startClassification.snapshotEligible === true)) {
+            // A check that can rewrite files (--fix, build scripts, emitters)
+            // invalidates earlier in-flight evidence AND marks the run as
+            // touched. A check that is merely UNRECOGNIZED (`make test`, `deno
+            // test`) rewrites nothing we can point to: bumping the revision for
+            // it poisoned the gate on green output and re-armed the hook into
+            // every later question turn.
+            this.gate.recordVerificationAttempt();
+            const classification = startClassification;
+            if (classification.snapshotEligible && event.args.persist !== true) {
+                const call = tracked;
+                call.sourceSnapshot = await captureVerificationSnapshot(this.cwd, [
+                    ...this.fileEditCounts.keys(),
+                ]);
+                if (call.sourceSnapshot === null)
+                    this.gate.requireFreshVerification(true, event.args.command);
+            }
+            else if ((classification.accepted && event.args.persist !== true) ||
+                (!classification.accepted && classification.mayMutate)) {
+                // Flag the workspace unknown only when tool_call_end can resolve
+                // it: a bounded check records pass/fail, a file-rewriting command
+                // bumps the revision. An unrecognized read-only check (`biome ci`)
+                // or a persistent-shell run records nothing at the end, so
+                // flagging it left verified work Unverified forever — and
+                // autopilot silently refused every later turn.
+                this.gate.requireFreshVerification(!classification.accepted && classification.mayMutate, event.args.command);
+            }
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Fold a finished call into the gate. Only host-observed successful
+     * mutations and trustworthy check results affect approval. The model's text
+     * is never evidence. Resolves true when verification state changed.
+     */
+    async recordToolCallEnd(event, call, planMode) {
+        const name = call?.name ?? "";
+        const args = call?.args;
+        let verificationChanged = false;
+        // In plan mode write/edit can only touch `.ezcoder/plans/*.md`; a code-file
+        // write there was refused (refusals return text, not isError). Counting
+        // it as a change left "unverified" work that blocked plan approval.
+        if (!event.isError && args && !planMode) {
+            if (name === "edit" || name === "write") {
+                // Check-owning files (tsconfig.json, pytest.ini, vitest.config.ts …)
+                // are tracked even when they are not source code: editing one is how
+                // a red suite is turned green without fixing anything. A multi-file
+                // edit records every file; its combined diff is scanned for each.
+                const addedText = name === "write"
+                    ? String(args.content ?? "")
+                    : extractAddedLines(event.details?.diff ?? event.result);
+                for (const filePath of editTargetPaths(args)) {
+                    if (isCodeFilePath(filePath) || isCheckOwnFile(filePath)) {
+                        this.gate.recordMutation(filePath, addedText);
+                        verificationChanged = true;
+                    }
+                }
+            }
+        }
+        if (args && call && name === "bash") {
+            const command = typeof args.command === "string" ? args.command : "";
+            const classification = classifyVerificationCommand(command);
+            if (args.review === true && event.result === REVIEW_REJECTED_BEFORE_START) {
+                // The core tool rejected its arguments BEFORE spawning. Never mint
+                // a pass, or poison the failed-check ledger with an unexecuted check.
+                // A child's output cannot match: bash always prefixes it with Exit code.
+                this.gate.recordRejectedCheck(command, REVIEW_REJECTED_BEFORE_START);
+                delete call.sourceSnapshot;
+                verificationChanged = true;
+            }
+            else if (classification.accepted || classification.snapshotEligible) {
+                // A foreground check that outlived the default budget was moved to
+                // the background, not failed: track it to its real exit the same way.
+                const autoBackgroundId = event.isError ? undefined : autoBackgroundedId(event.result);
+                if ((autoBackgroundId !== undefined || args.run_in_background === true) &&
+                    !event.isError &&
+                    args.persist !== true) {
+                    const id = autoBackgroundId ?? /^ID:\s*(\S+)/m.exec(event.result)?.[1];
+                    // No parseable ID means the check cannot be tracked to a real exit
+                    // code — no evidence either way. Recording a FAILURE here made
+                    // every later green run of a different spelling look owed.
+                    if (id)
+                        this.backgroundVerification.set(id, {
+                            revision: call.revision,
+                            command,
+                            ...(classification.snapshotEligible
+                                ? { sourceSnapshot: call.sourceSnapshot ?? null }
+                                : {}),
+                        });
+                    else if (classification.snapshotEligible)
+                        this.gate.requireFreshVerification(true, command);
+                }
+                else if (args.persist === true) {
+                    // Persistent-shell checks are not bounded evidence (steering can
+                    // interleave): neither a pass nor a failure. A recorded failure
+                    // here blocked approval for sessions that prefer the shell.
+                }
+                else if (classification.snapshotEligible) {
+                    await this.finishSnapshotVerification({ command, revision: call.revision, sourceSnapshot: call.sourceSnapshot ?? null }, !event.isError && /^Exit code:\s*0(?:\s|$)/i.test(event.result.trim()));
+                    verificationChanged = true;
+                }
+                else {
+                    if (!event.isError && /^Exit code:\s*0(?:\s|$)/i.test(event.result.trim())) {
+                        this.gate.recordVerification(call.revision, command);
+                    }
+                    else {
+                        this.gate.recordFailedVerification(command, call.revision);
+                    }
+                    verificationChanged = true;
+                }
+                delete call.sourceSnapshot;
+            }
+            else if (classification.candidate) {
+                // Green but untrusted: remember WHY so the demand can tell the
+                // agent which command shape actually clears the gate.
+                this.gate.recordRejectedCheck(command, classification.reason);
+            }
+        }
+        if (!event.isError && args && name === "task_output" && typeof args.id === "string") {
+            verificationChanged =
+                (await this.recordFinishedBackgroundVerification(args.id)) || verificationChanged;
+        }
+        return verificationChanged;
+    }
+    /** Settle every background check whose process has exited. Resolves true if any changed. */
+    async settleFinishedBackground() {
+        let backgroundChanged = false;
+        for (const id of this.backgroundVerification.keys()) {
+            backgroundChanged =
+                (await this.recordFinishedBackgroundVerification(id)) || backgroundChanged;
+        }
+        return backgroundChanged;
+    }
+    /** In-flight or unconfirmed evidence, else the gate's own problem. */
+    verificationProblem() {
+        if ([...this.toolCalls.values()].some((call) => call.sourceSnapshot !== undefined)) {
+            return "Unverified: a build is still running or its workspace comparison is pending.";
+        }
+        return (this.gate.verificationProblem() ??
+            (this.backgroundVerification.size > 0
+                ? "Unverified: a background check is still running or its result has not been confirmed."
+                : null));
+    }
+    async recordFinishedBackgroundVerification(id) {
+        const started = this.backgroundVerification.get(id);
+        const proc = this.listProcesses().find((entry) => entry.id === id);
+        if (!started || !proc || proc.exitCode === null)
+            return false;
+        if (started.sourceSnapshot !== undefined) {
+            await this.finishSnapshotVerification(started, proc.exitCode === 0);
+        }
+        else if (proc.exitCode === 0) {
+            this.gate.recordVerification(started.revision, started.command);
+        }
+        else {
+            this.gate.recordFailedVerification(started.command, started.revision);
+        }
+        this.backgroundVerification.delete(id);
+        return true;
+    }
+    async finishSnapshotVerification(check, passed) {
+        const after = check.sourceSnapshot
+            ? await captureVerificationSnapshot(this.cwd, [...this.fileEditCounts.keys()])
+            : null;
+        if (after === null || after !== check.sourceSnapshot) {
+            this.gate.requireFreshVerification(true, check.command);
+            this.gate.recordRejectedCheck(check.command, after === null
+                ? "Workspace inputs could not be compared; run a read-only check after the command"
+                : "Command changed workspace inputs; run checks against the changed source");
+            if (!passed)
+                this.gate.recordFailedVerification(check.command);
+        }
+        else if (passed) {
+            const classification = classifyVerificationCommand(check.command);
+            if (classification.snapshotPreserveOnly) {
+                this.gate.recordRejectedCheck(check.command, classification.reason);
+            }
+            else {
+                this.gate.recordVerification(check.revision, check.command);
+            }
+        }
+        else {
+            this.gate.recordFailedVerification(check.command, check.revision);
+        }
+    }
+}
+//# sourceMappingURL=verification-tracker.js.map

package/dist/core/agent-session/verification-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-tracker.js","sourceRoot":"","sources":["../../../src/core/agent-session/verification-tracker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,MAAM,qBAAqB,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,qBAAqB,GAEtB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAsB1E;;;;;GAKG;AACH,MAAM,OAAO,mBAAmB;IAMX;IACA;IACA;IAPF,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,SAAS,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,sBAAsB,GAAG,IAAI,GAAG,EAA2B,CAAC;IAE7E,YACmB,IAAsB,EACtB,GAAW,EACX,aAAwC;QAFxC,SAAI,GAAJ,IAAI,CAAkB;QACtB,QAAG,GAAH,GAAG,CAAQ;QACX,kBAAa,GAAb,aAAa,CAA2B;IACxD,CAAC;IAEJ,iBAAiB,CAAC,QAAgB;QAChC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,0DAA0D;IAC1D,QAAQ;QACN,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,6DAA6D;IAC7D,eAAe,CAAC,cAAmC;QACjD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,eAAe;QACb,IAAI,CAAC,sBAAsB,CAAC,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,WAAW,CAAC,UAAkB;QAC5B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,mBAAmB,CAAC,KAA8B;QACtD,MAAM,OAAO,GAAoB;YAC/B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;SAC7B,CAAC;QACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC9C,MAAM,mBAAmB,GACvB,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ;YAC9D,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;YACjD,CAAC,CAAC,IAAI,CAAC;QACX,IACE,mBAAmB;YACnB,OAAO,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ;YACvC,CAAC,qBAAqB,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBACxC,mBAAmB,CAAC,QAAQ;gBAC5B,8DAA8D;gBAC9D,gEAAgE;gBAChE,6DAA6D;gBAC7D,mBAAmB,CAAC,gBAAgB,KAAK,IAAI,CAAC,EAChD,CAAC;YACD,kEAAkE;YAClE,8DAA8D;YAC9D,mEAAmE;YACnE,oEAAoE;YACpE,kEAAkE;YAClE,6BAA6B;YAC7B,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC;YACtC,MAAM,cAAc,GAAG,mBAAmB,CAAC;YAC3C,IAAI,cAAc,CAAC,gBAAgB,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;gBACnE,MAAM,IAAI,GAAG,OAAO,CAAC;gBACrB,IAAI,CAAC,cAAc,GAAG,MAAM,2BAA2B,CAAC,IAAI,CAAC,GAAG,EAAE;oBAChE,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE;iBAC9B,CAAC,CAAC;gBACH,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI;oBAC9B,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC;iBAAM,IACL,CAAC,cAAc,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;gBACxD,CAAC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,SAAS,CAAC,EACtD,CAAC;gBACD,iEAAiE;gBACjE,kEAAkE;gBAClE,mEAAmE;gBACnE,2DAA2D;gBAC3D,0DAA0D;gBAC1D,+CAA+C;gBAC/C,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAChC,CAAC,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,SAAS,EACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CACnB,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CACrB,KAA4B,EAC5B,IAAiC,EACjC,QAAiB;QAEjB,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;QACxB,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,4EAA4E;QAC5E,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACxC,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACxC,qEAAqE;gBACrE,qEAAqE;gBACrE,oEAAoE;gBACpE,kEAAkE;gBAClE,MAAM,SAAS,GACb,IAAI,KAAK,OAAO;oBACd,CAAC,CAAC,MAAM,CAAE,IAA8B,CAAC,OAAO,IAAI,EAAE,CAAC;oBACvD,CAAC,CAAC,iBAAiB,CACd,KAAK,CAAC,OAAyC,EAAE,IAAI,IAAI,KAAK,CAAC,MAAM,CACvE,CAAC;gBACR,KAAK,MAAM,QAAQ,IAAI,eAAe,CAAC,IAA+B,CAAC,EAAE,CAAC;oBACxE,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;wBACzD,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;wBAC9C,mBAAmB,GAAG,IAAI,CAAC;oBAC7B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,cAAc,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,4BAA4B,EAAE,CAAC;gBAC1E,mEAAmE;gBACnE,sEAAsE;gBACtE,yEAAyE;gBACzE,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;gBACrE,OAAO,IAAI,CAAC,cAAc,CAAC;gBAC3B,mBAAmB,GAAG,IAAI,CAAC;YAC7B,CAAC;iBAAM,IAAI,cAAc,CAAC,QAAQ,IAAI,cAAc,CAAC,gBAAgB,EAAE,CAAC;gBACtE,mEAAmE;gBACnE,sEAAsE;gBACtE,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACtF,IACE,CAAC,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,iBAAiB,KAAK,IAAI,CAAC;oBACnE,CAAC,KAAK,CAAC,OAAO;oBACd,IAAI,CAAC,OAAO,KAAK,IAAI,EACrB,CAAC;oBACD,MAAM,EAAE,GAAG,gBAAgB,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACvE,mEAAmE;oBACnE,+DAA+D;oBAC/D,2DAA2D;oBAC3D,IAAI,EAAE;wBACJ,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,EAAE;4BAClC,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,OAAO;4BACP,GAAG,CAAC,cAAc,CAAC,gBAAgB;gCACjC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;gCACjD,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC,CAAC;yBACA,IAAI,cAAc,CAAC,gBAAgB;wBACtC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBACtD,CAAC;qBAAM,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;oBACjC,iEAAiE;oBACjE,gEAAgE;oBAChE,4DAA4D;gBAC9D,CAAC;qBAAM,IAAI,cAAc,CAAC,gBAAgB,EAAE,CAAC;oBAC3C,MAAM,IAAI,CAAC,0BAA0B,CACnC,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE,EACjF,CAAC,KAAK,CAAC,OAAO,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CACvE,CAAC;oBACF,mBAAmB,GAAG,IAAI,CAAC;gBAC7B,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;wBAC3E,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACvD,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;oBAC7D,CAAC;oBACD,mBAAmB,GAAG,IAAI,CAAC;gBAC7B,CAAC;gBACD,OAAO,IAAI,CAAC,cAAc,CAAC;YAC7B,CAAC;iBAAM,IAAI,cAAc,CAAC,SAAS,EAAE,CAAC;gBACpC,+DAA+D;gBAC/D,sDAAsD;gBACtD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,IAAI,IAAI,KAAK,aAAa,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YACpF,mBAAmB;gBACjB,CAAC,MAAM,IAAI,CAAC,oCAAoC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,mBAAmB,CAAC;QACtF,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,wBAAwB;QAC5B,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAC9B,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,EAAE,CAAC;YACpD,iBAAiB;gBACf,CAAC,MAAM,IAAI,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC,IAAI,iBAAiB,CAAC;QAC/E,CAAC;QACD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,sEAAsE;IACtE,mBAAmB;QACjB,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,EAAE,CAAC;YACnF,OAAO,8EAA8E,CAAC;QACxF,CAAC;QACD,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE;YAC/B,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC;gBACnC,CAAC,CAAC,uFAAuF;gBACzF,CAAC,CAAC,IAAI,CAAC,CACV,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oCAAoC,CAAC,EAAU;QAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;QACtE,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,KAAoB,EAAE,MAAe;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc;YAChC,CAAC,CAAC,MAAM,2BAA2B,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC,CAAC,IAAI,CAAC;QACT,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAC3B,KAAK,CAAC,OAAO,EACb,KAAK,KAAK,IAAI;gBACZ,CAAC,CAAC,iFAAiF;gBACnF,CAAC,CAAC,yEAAyE,CAC9E,CAAC;YACF,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,CAAC;aAAM,IAAI,MAAM,EAAE,CAAC;YAClB,MAAM,cAAc,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,cAAc,CAAC,oBAAoB,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF"}

package/dist/core/agent-session.d.ts

@@ -1,4 +1,4 @@
-import { type AgentTool } from "@prestyj/agent";
+import { type AgentTool, type ToolExecuteResult } from "@prestyj/agent";
 import { type Message, type MessageProvenance, type Provider, type Usage, type ThinkingLevel } from "@prestyj/ai";
 import { EventBus } from "./event-bus.js";
 import { type CompletionReview } from "./completion-review.js";
@@ -11,7 +11,7 @@ import { type ContextLimits } from "./context-limits.js";
 import { type ImportForeignTranscriptResult } from "./foreign-session-import.js";
 import { type CacheExpiryStatus } from "./cache-expiry.js";
 import { type EnhanceResult } from "../utils/prompt-enhancer.js";
-import { type VerificationEvidence } from "./verification-evidence.js";
+import type { VerificationEvidence } from "./verification-evidence.js";
 /** A chat attachment (image / video / other file) prepared for the model. The
  *  raw base64 `data` rides native blocks; `path` (when persisted to disk) lets
  *  the agent's tools open the file directly. */
@@ -127,7 +127,7 @@ export interface AgentSessionOptions {
      * agent to skip planning and implement directly. Any other return accepts.
      */
     onEnterPlan?: (reason?: string) => boolean | void | Promise<boolean | void>;
-    onExitPlan?: (planPath: string) => Promise<string>;
+    onExitPlan?: (planPath: string) => Promise<ToolExecuteResult>;
     /**
      * If provided, the session's tool set is filtered to ONLY these tool names
      * after `createTools()` runs, and the system prompt's Tools section lists only
@@ -193,18 +193,12 @@ export interface AgentSessionOptions {
     additionalTools?: AgentTool[];
     /** Mode-owned completion policy; absent in Coder/chat/worker sessions. */
     completionReview?: CompletionReview;
+    /** Remind the agent to submit its plan (exit_plan) when a run is about to
+     *  stop still in plan mode. Desktop only: an unsubmitted plan there leaves
+     *  nothing to review. See plan-submission-gate.ts. */
+    planSubmissionGate?: boolean;
 }
-/** Resolve the per-result cap passed to the agent loop for the active transport. */
-export declare function resolveSessionToolResultCharLimit(model: string, provider: Provider, accountId?: string): number;
-/**
- * Aggregate budget for ALL tool results produced in one assistant turn.
- * Individual results are already capped, but wide parallel fan-outs (GPT-5.6's
- * signature behavior) were observed injecting 100k+ uncached tokens in a single
- * turn. ~15% of the context window in chars (1 token ≈ 3.5 chars), floored at
- * 100KB so small windows still fit two full-size reads, ceilinged at 240KB so
- * 1M-context models don't waive the budget entirely.
- */
-export declare function resolveSessionTurnToolResultCharLimit(model: string, provider: Provider, accountId?: string): number;
+export { resolveSessionToolResultCharLimit, resolveSessionTurnToolResultCharLimit, } from "./agent-session/helpers.js";
 export interface AgentSessionState {
     provider: Provider;
     model: string;
@@ -226,10 +220,7 @@ export declare class AgentSession {
     private sessionManager;
     private extensionLoader;
     private messages;
-    private nolanTurns;
-    private autopilotMarkers;
-    private appMarkers;
-    private turnMetrics;
+    private readonly markers;
     private readonly cacheDiagnostics;
     /** Internal-only (EZ_INTERNAL): live per-session cost/reliability recorder.
      * Absent entirely in public builds — see core/internal-diagnostics.ts. */
@@ -245,25 +236,8 @@ export declare class AgentSession {
     private recordBashReads;
     private skills;
     private cacheKeyLogged;
-    private hookStats;
-    private hookText;
-    private hookConsecutiveFailures;
-    private hookRepeatedNoProgressCalls;
-    private hookProgressTracker;
-    private hookCycleDetector;
-    private hookCyclicPattern;
-    private hookFileEditCounts;
-    private hookToolCalls;
-    private backgroundVerification;
-    /** 0 = none; 1 = first nudge sent; 2 = final stop-and-report injected. */
-    private loopBreakInjected;
+    private readonly loopMonitor;
     private regroundingInjected;
-    /** Recent tool-call digests for the semantic loop judge — bounded ring. */
-    private hookRecentCalls;
-    /** LLM-judged loop detection state. `verdict` holds a LOOP verdict awaiting
-     *  injection at the next steering poll; judge failures fail open (no
-     *  injection) and still consume budget + cooldown. */
-    private semanticLoop;
     /**
      * The environment as the cached system prompt currently describes it.
      * Re-recorded on every prompt build, so a rebuild (e.g. `/add-dir`) needs no
@@ -274,10 +248,14 @@ export declare class AgentSession {
     private runStartedAt;
     /** Gate injections spent this run, capped by MAX_PROCESS_GATE_INJECTIONS. */
     private processGateInjected;
+    /** Plan-submission reminders spent this run (plan-submission-gate.ts). */
+    private planSubmissionNudges;
     /** Verification gate: code edited this run, nothing proved it since. Always
      *  tracks evidence for run status; the `verificationGateEnabled` setting
      *  decides whether an unverified stop is also continued once. */
     private readonly verificationGate;
+    /** Host-observed evidence (edited files, in-flight and background checks) feeding the gate. */
+    private readonly verificationTracker;
     /** Mirror of the last `hook_armed` value, so the event fires only on an edge. */
     private preFinalArmed;
     private compactionOccurred;
@@ -320,9 +298,8 @@ export declare class AgentSession {
     private readonly notifications;
     private managerAbortSignal?;
     private readonly managerAbortHandler;
-    private mcpManager?;
-    /** Deferred MCP tools awaiting discovery via tool_search. */
-    private mcpCatalog?;
+    /** MCP client, deferred tool_search catalog and cached-stub reconcile state. */
+    private readonly mcp;
     /** Resolved prompt-injection byte budgets (contextLimits setting). */
     private contextLimits;
     /**
@@ -331,11 +308,6 @@ export declare class AgentSession {
      * can discover and promote them; a promoted name drops out of this list.
      */
     private deferredBuiltinToolNames;
-    /** Live (connected) MCP tools by name — the reconcile target for cached stubs. */
-    private liveMcpTools;
-    /** Server name for each cached-only tool, so a stub knows what to wait on. */
-    private cachedMcpToolServers;
-    private readonly mcpCatalogCache;
     private provider;
     private model;
     private cwd;
@@ -444,43 +416,27 @@ export declare class AgentSession {
      * pushed eagerly when the user opted out.
      * Allow-listed sessions (Nolan) always get the eager path — their fixed tool
      * expectations predate the catalog, and tool_search isn't allow-listed.
-     * Promotion pushes onto the live `this.tools` array the running agent loop
-     * re-reads every turn, so promoted tools are callable on the next step.
      */
     private addMcpTools;
     /**
-     * Register `tool_search` once. Promotion of a cached-only entry waits for its
-     * server so the model is told immediately when that capability turns out to
-     * be unreachable, instead of promoting a tool that fails on first call.
-     *
-     * The catalog is created on demand rather than required up front: deferred
-     * built-in tools populate it with zero MCP servers connected, so gating
-     * registration on an existing catalog would leave those tools unreachable.
-     */
-    private ensureToolSearchTool;
-    /**
-     * `wait_agent` is deferred, yet nearly every `spawn_agent` is followed by it,
-     * so the model spent a whole turn on `tool_search` just to load it (bench 41:
-     * ~6 s per fan-out). Promote it as soon as a spawn succeeds instead: the tool
-     * list grows exactly as it would after that `tool_search`, one turn earlier,
-     * and sessions that never spawn keep the smaller prefix.
+     * Deferred follow-up tools whose need is certain once a trigger succeeds.
+     * `wait_agent` follows nearly every `spawn_agent`, and loading it through
+     * `tool_search` cost a whole turn (bench 41: ~6 s per fan-out). Likewise a
+     * background `bash` is always followed by `task_output` (and sometimes
+     * `task_send`/`task_stop`). Promote them as soon as the trigger succeeds: the
+     * tool list grows exactly as it would after that `tool_search`, one turn
+     * earlier, and sessions that never trigger keep the smaller prefix.
+     * Call before tier partitioning so a deferred trigger is wrapped too.
      */
-    private promoteWaitAgentAfterSpawn;
-    /** Append tools, replacing any same-named entry (cached stub → live tool). */
-    private replaceOrPushTools;
-    /** Swap already-promoted cached stubs for their live equivalents, in place. */
-    private replaceLivePromotedTools;
+    private promoteFollowUpTools;
+    /** Append a deferred built-in to the live tool list (append-only). */
+    private promoteDeferredBuiltin;
+    private wrapToPromote;
     /**
      * Publish cached tool definitions into the deferred catalog so `tool_search`
-     * answers correctly on turn 1. A cached stub carries the real name, one-line
-     * description and input schema; calling it waits for the live connection and
-     * then dispatches against the real client, or returns a clear error when that
-     * server ultimately failed. Live tools replace stubs on connect.
+     * answers correctly on turn 1 (see {@link McpToolRegistry.seedFromCache}).
      */
     private seedMcpCatalogFromCache;
-    /** Catalog-only registration for cached stubs — never marks them live. */
-    private addCachedMcpTools;
-    private buildCachedMcpTool;
     /**
      * Resolve a `/name [args]` input to the prompt template it expands into, or
      * null when it isn't a prompt-template command for THIS session (an ordinary
@@ -839,7 +795,6 @@ export declare class AgentSession {
     getMessages(): Message[];
     getTurnMetrics(): TurnMetricPayload[];
     private persistTurnMetric;
-    private rePersistTurnMetrics;
     /** Nolan Grout (mentor) turns recorded against this session, in record order. Used
      *  by the host to interleave Nolan's advisory exchanges back into the transcript
      *  on resume. Never part of the LLM message history. */
@@ -870,11 +825,6 @@ export declare class AgentSession {
      * appendEntry's own handling.
      */
     persistNolanTurn(question: string, reply: string): Promise<void>;
-    /** Re-append the in-memory Nolan turns to the current session file. Called after
-     *  a continuation/compaction file is created so Nolan's advisory history isn't
-     *  lost when the session is rewritten (those rewrites only re-persist
-     *  messages). Each turn keeps its original `afterMessageCount` anchor. */
-    private rePersistNolanTurns;
     /**
      * Record one autopilot verdict marker (prompted / done / human / capped)
      * against this build session. Kept in memory for the live transcript and
@@ -883,7 +833,6 @@ export declare class AgentSession {
      * instead of dropping the marker or falling back to a raw verdict string.
      * No-op persistence for transient sessions (kept in memory only).
      */
-    private recordFinishedBackgroundVerification;
     getVerificationEvidence(): VerificationEvidence[];
     /** Current request activity, separate from persistent workspace verification debt. */
     getRunVerificationActivity(): {
@@ -891,7 +840,6 @@ export declare class AgentSession {
         checked: boolean;
         evidence: VerificationEvidence[];
     };
-    private finishSnapshotVerification;
     getVerificationProblem(): string | null;
     private persistCompletionReviewState;
     private persistVerificationState;
@@ -899,10 +847,6 @@ export declare class AgentSession {
         reason?: string;
         body?: string;
     }): Promise<void>;
-    /** Re-append the in-memory autopilot markers to the current session file.
-     *  Mirrors `rePersistNolanTurns` — called after a continuation/compaction file
-     *  is created so the auto-review history survives the rewrite. */
-    private rePersistAutopilotMarkers;
     /** App transcript markers recorded against this session, in record order.
      *  Used by the host to interleave display-only rows (plan banner, task
      *  header, errors, user-bubble hints) back into the transcript on resume. */
@@ -927,10 +871,6 @@ export declare class AgentSession {
     persistRunStarted(generation: number): Promise<void>;
     /** Close the run journal. Its absence is what marks a run as crashed. */
     persistRunFinished(generation: number, outcome: RunOutcome): Promise<void>;
-    /** Re-append the in-memory app markers to the current session file. Mirrors
-     *  `rePersistNolanTurns` — called after a continuation/compaction file is
-     *  created so display-only rows survive the rewrite. */
-    private rePersistAppMarkers;
     /**
      * Rewrite a draft prompt into a tighter, terminology-correct version using
      * the ACTIVE provider/model. A stateless one-off LLM call (no agent loop, no