@tekmidian/pai 0.42.6 → 0.43.0

package/dist/hooks/whisper-reinject.mjs

@@ -7,6 +7,13 @@ if (!process.env.PAI_QUIET_NOTICES) process.env.PAI_QUIET_NOTICES = '1';
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { tmpdir } from "node:os";
+
+// src/hooks/ts/lib/worker-session.ts
+function isWorkerSession(env = process.env) {
+  return env.PAI_WORKER === "1";
+}
+
+// src/hooks/ts/post-tool-use/whisper-reinject.ts
 var QUIET_BELOW = 6;
 var EVERY = 8;
 function counterFile(sessionId) {
@@ -43,6 +50,7 @@ function main() {
     if (raw.trim()) sessionId = JSON.parse(raw).session_id ?? "";
   } catch {
   }
+  if (isWorkerSession()) return;
   const n = bump(counterFile(sessionId));
   if (n < QUIET_BELOW || n % EVERY !== 0) return;
   const lines = [

package/dist/hooks/whisper-reinject.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
-  "sources": ["../../../src/hooks/ts/post-tool-use/whisper-reinject.ts"],
-  "sourcesContent": ["#!/usr/bin/env node\n\n/**\n * whisper-reinject \u2014 put the output-shape rules back in view mid-turn.\n *\n * The whisper rules are injected once per user message, by the UserPromptSubmit\n * hook. That is the wrong place for the rules that govern how a turn is\n * *written*, because a long turn does not write its answer next to that\n * injection: it runs twenty tool calls first. Attention follows the tool\n * output, the injected block scrolls out of working memory, and by the time the\n * answer is composed the rules are gone. Nothing in the loop re-checks them, so\n * compliance decays with turn length \u2014 exactly the turns where it matters most.\n *\n * This fires after a tool call instead, so the reminder lands where the decay\n * happens. It stays quiet for short sequences (nothing has decayed yet) and\n * emits a compressed set \u2014 not all of them \u2014 every few calls after that. The\n * full rule set is deliberately not repeated: a wall of text re-read every few\n * calls is skimmed, and it costs context that the actual work needs.\n *\n * Only rules about the shape of the reply belong here. Rules about actions\n * (what may be sent, published, or committed) are enforced at the point of\n * action, not by reminding.\n */\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { tmpdir } from \"node:os\";\n\n/** Stay silent below this many tool calls \u2014 a short turn has not drifted yet. */\nconst QUIET_BELOW = 6;\n\n/** Re-emit every N calls once past QUIET_BELOW. */\nconst EVERY = 8;\n\nfunction counterFile(sessionId: string): string {\n  const safe = sessionId.replace(/[^A-Za-z0-9_-]/g, \"\") || \"nosession\";\n  return join(tmpdir(), \"pai-whisper-reinject\", `${safe}.count`);\n}\n\nfunction bump(path: string): number {\n  try {\n    mkdirSync(dirname(path), { recursive: true });\n    const n = existsSync(path) ? Number.parseInt(readFileSync(path, \"utf-8\").trim(), 10) || 0 : 0;\n    const next = n + 1;\n    writeFileSync(path, String(next));\n    return next;\n  } catch {\n    return 0;\n  }\n}\n\nfunction localTime(): string {\n  const d = new Date();\n  const p = (n: number) => String(n).padStart(2, \"0\");\n  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`;\n}\n\nfunction readStdin(): string {\n  try {\n    return readFileSync(0, \"utf-8\");\n  } catch {\n    return \"\";\n  }\n}\n\nfunction main(): void {\n  let sessionId = \"\";\n  try {\n    const raw = readStdin();\n    if (raw.trim()) sessionId = (JSON.parse(raw) as { session_id?: string }).session_id ?? \"\";\n  } catch { /* no session id \u2014 fall back to a shared counter */ }\n\n  const n = bump(counterFile(sessionId));\n  if (n < QUIET_BELOW || n % EVERY !== 0) return;\n\n  const lines = [\n    `CURRENT LOCAL TIME: ${localTime()} \u2014 use verbatim for any [YYYY-MM-DD HH:MM] stamp. Never estimate it, never increment a previous one.`,\n    `You are ${n} tool calls into this turn. Before the next one, check:`,\n    \"- One command at a time: say what you are about to run, run it, say what came back. Do not batch several steps into one call.\",\n    \"- Report what CHANGED, not what you learned. A finding is not a deliverable.\",\n    \"- Prove it: show the reading that says it failed before and works now.\",\n    \"- Found a fault while working? Fix it. Filing it is not fixing it.\",\n    \"- Corrections stay to one line. No re-litigating your own mistakes.\",\n  ];\n\n  console.log(`<system-reminder>\\n${lines.join(\"\\n\")}\\n</system-reminder>`);\n}\n\nmain();\n"],
-  "mappings": ";;;;;;AAuBA,SAAyB,YAAY,WAAW,cAAc,qBAAqB;AACnF,SAAS,SAAS,YAAY;AAC9B,SAAS,cAAc;AAGvB,IAAM,cAAc;AAGpB,IAAM,QAAQ;AAEd,SAAS,YAAY,WAA2B;AAC9C,QAAM,OAAO,UAAU,QAAQ,mBAAmB,EAAE,KAAK;AACzD,SAAO,KAAK,OAAO,GAAG,wBAAwB,GAAG,IAAI,QAAQ;AAC/D;AAEA,SAAS,KAAK,MAAsB;AAClC,MAAI;AACF,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAM,IAAI,WAAW,IAAI,IAAI,OAAO,SAAS,aAAa,MAAM,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,IAAI;AAC5F,UAAM,OAAO,IAAI;AACjB,kBAAc,MAAM,OAAO,IAAI,CAAC;AAChC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAoB;AAC3B,QAAM,IAAI,oBAAI,KAAK;AACnB,QAAM,IAAI,CAAC,MAAc,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG;AAClD,SAAO,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;AAC5G;AAEA,SAAS,YAAoB;AAC3B,MAAI;AACF,WAAO,aAAa,GAAG,OAAO;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,OAAa;AACpB,MAAI,YAAY;AAChB,MAAI;AACF,UAAM,MAAM,UAAU;AACtB,QAAI,IAAI,KAAK,EAAG,aAAa,KAAK,MAAM,GAAG,EAA8B,cAAc;AAAA,EACzF,QAAQ;AAAA,EAAsD;AAE9D,QAAM,IAAI,KAAK,YAAY,SAAS,CAAC;AACrC,MAAI,IAAI,eAAe,IAAI,UAAU,EAAG;AAExC,QAAM,QAAQ;AAAA,IACZ,uBAAuB,UAAU,CAAC;AAAA,IAClC,WAAW,CAAC;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,UAAQ,IAAI;AAAA,EAAsB,MAAM,KAAK,IAAI,CAAC;AAAA,mBAAsB;AAC1E;AAEA,KAAK;",
+  "sources": ["../../../src/hooks/ts/post-tool-use/whisper-reinject.ts", "../../../src/hooks/ts/lib/worker-session.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\n\n/**\n * whisper-reinject \u2014 put the output-shape rules back in view mid-turn.\n *\n * The whisper rules are injected once per user message, by the UserPromptSubmit\n * hook. That is the wrong place for the rules that govern how a turn is\n * *written*, because a long turn does not write its answer next to that\n * injection: it runs twenty tool calls first. Attention follows the tool\n * output, the injected block scrolls out of working memory, and by the time the\n * answer is composed the rules are gone. Nothing in the loop re-checks them, so\n * compliance decays with turn length \u2014 exactly the turns where it matters most.\n *\n * This fires after a tool call instead, so the reminder lands where the decay\n * happens. It stays quiet for short sequences (nothing has decayed yet) and\n * emits a compressed set \u2014 not all of them \u2014 every few calls after that. The\n * full rule set is deliberately not repeated: a wall of text re-read every few\n * calls is skimmed, and it costs context that the actual work needs.\n *\n * Only rules about the shape of the reply belong here. Rules about actions\n * (what may be sent, published, or committed) are enforced at the point of\n * action, not by reminding.\n */\nimport { appendFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { dirname, join } from \"node:path\";\nimport { tmpdir } from \"node:os\";\nimport { isWorkerSession } from \"../lib/worker-session.js\";\n\n/** Stay silent below this many tool calls \u2014 a short turn has not drifted yet. */\nconst QUIET_BELOW = 6;\n\n/** Re-emit every N calls once past QUIET_BELOW. */\nconst EVERY = 8;\n\nfunction counterFile(sessionId: string): string {\n  const safe = sessionId.replace(/[^A-Za-z0-9_-]/g, \"\") || \"nosession\";\n  return join(tmpdir(), \"pai-whisper-reinject\", `${safe}.count`);\n}\n\nfunction bump(path: string): number {\n  try {\n    mkdirSync(dirname(path), { recursive: true });\n    const n = existsSync(path) ? Number.parseInt(readFileSync(path, \"utf-8\").trim(), 10) || 0 : 0;\n    const next = n + 1;\n    writeFileSync(path, String(next));\n    return next;\n  } catch {\n    return 0;\n  }\n}\n\nfunction localTime(): string {\n  const d = new Date();\n  const p = (n: number) => String(n).padStart(2, \"0\");\n  return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`;\n}\n\nfunction readStdin(): string {\n  try {\n    return readFileSync(0, \"utf-8\");\n  } catch {\n    return \"\";\n  }\n}\n\nfunction main(): void {\n  let sessionId = \"\";\n  try {\n    const raw = readStdin();\n    if (raw.trim()) sessionId = (JSON.parse(raw) as { session_id?: string }).session_id ?? \"\";\n  } catch { /* no session id \u2014 fall back to a shared counter */ }\n\n  if (isWorkerSession()) return;\n\n  const n = bump(counterFile(sessionId));\n  if (n < QUIET_BELOW || n % EVERY !== 0) return;\n\n  const lines = [\n    `CURRENT LOCAL TIME: ${localTime()} \u2014 use verbatim for any [YYYY-MM-DD HH:MM] stamp. Never estimate it, never increment a previous one.`,\n    `You are ${n} tool calls into this turn. Before the next one, check:`,\n    \"- One command at a time: say what you are about to run, run it, say what came back. Do not batch several steps into one call.\",\n    \"- Report what CHANGED, not what you learned. A finding is not a deliverable.\",\n    \"- Prove it: show the reading that says it failed before and works now.\",\n    \"- Found a fault while working? Fix it. Filing it is not fixing it.\",\n    \"- Corrections stay to one line. No re-litigating your own mistakes.\",\n  ];\n\n  console.log(`<system-reminder>\\n${lines.join(\"\\n\")}\\n</system-reminder>`);\n}\n\nmain();\n", "/**\n * Worker-session detection.\n *\n * A disposable headless worker (a `claude -p` run started by an orchestrating\n * session, possibly against a different model provider with a different\n * context window) shares the project directory and the hook configuration\n * with the real session that spawned it. Left alone, the hooks treat it as a\n * session in its own right: they inject project context into it, create and\n * rename a numbered session note for it, autosave it, and enqueue a\n * model-written handover for it. Its compactions also land in the project's\n * transcript folder, where they are indistinguishable from a real session's\n * and drag the measured compaction trigger down (observed 2026-09-17: two\n * workers compacting at ~151k tokens pulled a project's trigger from ~784k\n * to ~151k, and the real session's handover fired at ~50k tokens).\n *\n * The launcher marks such sessions with `PAI_WORKER=1`. Every hook that does\n * per-session bookkeeping returns immediately when this predicate is true.\n * Deliberately NOT guarded: the security validator (a worker's shell\n * commands must still be checked) and observability capture.\n */\nexport function isWorkerSession(env: NodeJS.ProcessEnv = process.env): boolean {\n  return env.PAI_WORKER === \"1\";\n}\n"],
+  "mappings": ";;;;;;AAuBA,SAAyB,YAAY,WAAW,cAAc,qBAAqB;AACnF,SAAS,SAAS,YAAY;AAC9B,SAAS,cAAc;;;ACLhB,SAAS,gBAAgB,MAAyB,QAAQ,KAAc;AAC7E,SAAO,IAAI,eAAe;AAC5B;;;ADOA,IAAM,cAAc;AAGpB,IAAM,QAAQ;AAEd,SAAS,YAAY,WAA2B;AAC9C,QAAM,OAAO,UAAU,QAAQ,mBAAmB,EAAE,KAAK;AACzD,SAAO,KAAK,OAAO,GAAG,wBAAwB,GAAG,IAAI,QAAQ;AAC/D;AAEA,SAAS,KAAK,MAAsB;AAClC,MAAI;AACF,cAAU,QAAQ,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC5C,UAAM,IAAI,WAAW,IAAI,IAAI,OAAO,SAAS,aAAa,MAAM,OAAO,EAAE,KAAK,GAAG,EAAE,KAAK,IAAI;AAC5F,UAAM,OAAO,IAAI;AACjB,kBAAc,MAAM,OAAO,IAAI,CAAC;AAChC,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,YAAoB;AAC3B,QAAM,IAAI,oBAAI,KAAK;AACnB,QAAM,IAAI,CAAC,MAAc,OAAO,CAAC,EAAE,SAAS,GAAG,GAAG;AAClD,SAAO,GAAG,EAAE,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;AAC5G;AAEA,SAAS,YAAoB;AAC3B,MAAI;AACF,WAAO,aAAa,GAAG,OAAO;AAAA,EAChC,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,OAAa;AACpB,MAAI,YAAY;AAChB,MAAI;AACF,UAAM,MAAM,UAAU;AACtB,QAAI,IAAI,KAAK,EAAG,aAAa,KAAK,MAAM,GAAG,EAA8B,cAAc;AAAA,EACzF,QAAQ;AAAA,EAAsD;AAE9D,MAAI,gBAAgB,EAAG;AAEvB,QAAM,IAAI,KAAK,YAAY,SAAS,CAAC;AACrC,MAAI,IAAI,eAAe,IAAI,UAAU,EAAG;AAExC,QAAM,QAAQ;AAAA,IACZ,uBAAuB,UAAU,CAAC;AAAA,IAClC,WAAW,CAAC;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAEA,UAAQ,IAAI;AAAA,EAAsB,MAAM,KAAK,IAAI,CAAC;AAAA,mBAAsB;AAC1E;AAEA,KAAK;",
   "names": []
 }

package/dist/hooks/worker-status-line.mjs

@@ -8288,49 +8288,116 @@ function recordSessionMapEntry(logDir, cwd2, session, term2, now = Date.now()) {
   }
 }
 
+// src/workers/agentish.ts
+import { execFileSync } from "node:child_process";
+var AG2_SPEC_FALLBACK = "AG2. msg=kind line+k=v lines. kinds T R S Q A X. keys i id g goal o own n forbid d steps p proof u out l limits r res c changes t tests G gate I inst m images # nums w worst x next z note(<200ch). sep |. outcomes + - ~ ? !. @n=path declared once then reused; @n:12=file:line. tests as Name+ Name-. no prose, no articles, never restate, unknown=?. r=+ only if all t +.";
+var AG2_EXTENSIONS_FALLBACK = "y why(\u2264600ch)";
+var cachedSpec = null;
+function ag2Spec() {
+  if (cachedSpec) return cachedSpec;
+  try {
+    const out = execFileSync("aibroker", ["agentish", "spec"], {
+      timeout: 3e3,
+      stdio: ["ignore", "pipe", "ignore"],
+      encoding: "utf8"
+    });
+    const lines = out.split("\n").filter((l) => l.trim());
+    if (lines[0]?.startsWith("AG2.")) {
+      cachedSpec = { spec: lines[0], extensions: lines[1] ?? AG2_EXTENSIONS_FALLBACK, source: "aibroker" };
+      return cachedSpec;
+    }
+  } catch {
+  }
+  cachedSpec = { spec: AG2_SPEC_FALLBACK, extensions: AG2_EXTENSIONS_FALLBACK, source: "builtin" };
+  return cachedSpec;
+}
+
 // src/workers/report.ts
 var OPERATOR_MARK = "[operator]";
-var WORKER_CONTRACT_PROMPT = [
-  "You are a headless implementation worker, run non-interactively by an orchestrating session.",
-  "You are the worker: this task is yours to finish in this process. Never hand your whole task to a",
-  "single child worker and step back \u2014 that is delegation, not work. Child workers are for two things",
-  "only: (1) PARALLELISING independent parts of your task, each part a self-contained spec; (2) CHEAPER",
-  "bounded sub-tasks \u2014 probes, renders, test runs, lookups \u2014 run one tier down with --class spotcheck or",
-  "--class simple. Always pin --provider anthropic on children.",
-  "You own your children's results: run them in the foreground or poll until each has finished, read",
-  "their result, verify it, and fold it into your own report. When your turn ends this run ends and any",
-  "running child is killed, so never end with a child still running.",
-  "Ending your turn ends this run. There is no later wake-up: never call ScheduleWakeup, never say you",
-  "will pick something up later, never leave a background command as your final action. Finish, then",
-  "report.",
-  "No narration, no timestamps, no greetings, no summaries of what you read; act, verify, then stop.",
-  "Your ONE final message is a JSON object and nothing else \u2014 no prose before or after, no code fence:",
-  '{"changed":[{"path":"\u2026","summary":"\u2026"}],"commands":["\u2026"],"checks":[{"name":"\u2026","ok":true,"detail":"\u2026"}],"open":["\u2026"],"notes":"one line"}',
-  "changed: files you touched (path + one-line summary). commands: the commands that verify the work.",
-  "checks: each with ok true/false and the evidence in detail. open: what you could not finish, if anything.",
-  "notes: one line, the headline a reviewer reads first.",
-  "NEVER put a multi-line or quoted payload inline in a shell command \u2014 no heredocs (<<EOF), no long",
-  "-p '\u2026' specs for child workers, no inline JSON, no inline scripts. ALWAYS write it to a file with",
-  'the Write tool first and pass the file: -p "$(cat spec.txt)", --file spec.txt, or < spec.txt.',
-  "Inline quoting fails silently or dies with a parse error and burns a worker launch; there are no",
-  "exceptions.",
-  "Never inline code one-liners (python3 -c, node -e, ruby -e and friends) \u2014 the permission layer",
-  'denies them ("ztk: command denied by permission rules"); write the script to a file with the',
-  "Write tool and run it (python3 script.py), or use jq for JSON inspection.",
-  "",
-  `Operator messages: a user turn starting with ${OPERATOR_MARK} was typed by the operator while you`,
-  "run (the prompt of a resumed run is the operator's too). Answer it FIRST, in one or two plain lines \u2014",
-  "a question gets its answer, an instruction gets one line naming what will change \u2014 then continue the",
-  "task you were on.",
-  "",
-  "Sub-workers: you may start your own workers with `pai worker run --class <class> -p '<prompt>'`",
-  "(Bash tool). Your children run on their own provider and report back to you automatically when",
-  "they finish. Send a handoff UP instead of doing work yourself when a cheaper provider would",
-  "suffice, the task is out of your scope, or a decision is needed:",
-  '`pai worker handoff \'{"kind":"proposal","text":"\u2026","data":{\u2026}}\'` (kinds: proposal,',
-  "question, blocker; results are sent for you when you finish). Sibling workers are not a",
-  "coordination path \u2014 there is no sideways channel; everything goes up to your parent."
-].join("\n");
+function ag2ReportBlock() {
+  const spec = ag2Spec();
+  return [
+    spec.spec,
+    spec.extensions,
+    "Final message: one AG2 `R` message only \u2014 no prose, no code fence, no markdown.",
+    "R requires i (id), r (+ - ~ ? !), t (tests, Name+ Name-), c (path summary|path summary).",
+    "r=+ requires G=+ (gate) and p non-empty (proof command), and every t entry +. z= the answer/note,",
+    "one line, always present. x= what is left (omit if nothing). y= one line why when r is not +.",
+    "Example:",
+    "R",
+    "i=count-audit-ts",
+    "r=+",
+    "G=+",
+    "c=src/audit summary of files counted",
+    "t=Count+",
+    "p=wc -l src/audit/*.ts",
+    "z=19 files, 2523 lines"
+  ];
+}
+function jsonReportBlock(lead) {
+  return [
+    lead,
+    '{"changed":[{"path":"\u2026","summary":"\u2026"}],"commands":["\u2026"],"checks":[{"name":"\u2026","ok":true,"detail":"\u2026"}],"open":["\u2026"],"notes":"one line"}'
+  ];
+}
+function fileNotInlineBlock() {
+  return [
+    "NEVER put a multi-line or quoted payload inline in a shell command \u2014 no heredocs (<<EOF), no long",
+    "-p '\u2026' specs for child workers, no inline JSON, no inline scripts. ALWAYS write it to a file with",
+    'the Write tool first and pass the file: -p "$(cat spec.txt)", --file spec.txt, or < spec.txt.',
+    "Inline quoting fails silently or dies with a parse error and burns a worker launch; there are no",
+    "exceptions.",
+    "Never inline code one-liners (python3 -c, node -e, ruby -e and friends) \u2014 the permission layer",
+    'denies them ("ztk: command denied by permission rules"); write the script to a file with the',
+    "Write tool and run it (python3 script.py), or use jq for JSON inspection."
+  ];
+}
+function fullContractPrompt(format) {
+  const lines = [
+    "You are a headless implementation worker, run non-interactively by an orchestrating session.",
+    "You are the worker: this task is yours to finish in this process. Never hand your whole task to a",
+    "single child worker and step back \u2014 that is delegation, not work. Child workers are for two things",
+    "only: (1) PARALLELISING independent parts of your task, each part a self-contained spec; (2) CHEAPER",
+    "bounded sub-tasks \u2014 probes, renders, test runs, lookups \u2014 run one tier down with --class spotcheck or",
+    "--class simple. Always pin --provider anthropic on children.",
+    "You own your children's results: run them in the foreground or poll until each has finished, read",
+    "their result, verify it, and fold it into your own report. When your turn ends this run ends and any",
+    "running child is killed, so never end with a child still running.",
+    "Ending your turn ends this run. There is no later wake-up: never call ScheduleWakeup, never say you",
+    "will pick something up later, never leave a background command as your final action. Finish, then",
+    "report.",
+    "No narration, no timestamps, no greetings, no summaries of what you read; act, verify, then stop.",
+    ...fileNotInlineBlock(),
+    "",
+    `Operator messages: a user turn starting with ${OPERATOR_MARK} was typed by the operator while you`,
+    "run (the prompt of a resumed run is the operator's too). Answer it FIRST, in one or two plain lines \u2014",
+    "a question gets its answer, an instruction gets one line naming what will change \u2014 then continue the",
+    "task you were on.",
+    "",
+    "Sub-workers: you may start your own workers with `pai worker run --class <class> -p '<prompt>'`",
+    "(Bash tool). Your children run on their own provider and report back to you automatically when",
+    "they finish. Send a handoff UP instead of doing work yourself when a cheaper provider would",
+    "suffice, the task is out of your scope, or a decision is needed:",
+    '`pai worker handoff \'{"kind":"proposal","text":"\u2026","data":{\u2026}}\'` (kinds: proposal,',
+    "question, blocker; results are sent for you when you finish). Sibling workers are not a",
+    "coordination path \u2014 there is no sideways channel; everything goes up to your parent.",
+    ""
+  ];
+  lines.push(
+    ...format === "ag2" ? ag2ReportBlock() : jsonReportBlock(
+      "Your ONE final message is a JSON object and nothing else \u2014 no prose before or after, no code fence:"
+    )
+  );
+  if (format === "json") {
+    lines.push(
+      "changed: files you touched (path + one-line summary). commands: the commands that verify the work.",
+      "checks: each with ok true/false and the evidence in detail. open: what you could not finish, if anything.",
+      "notes: one line, the headline a reviewer reads first."
+    );
+  }
+  return lines.join("\n");
+}
+var WORKER_CONTRACT_PROMPT = fullContractPrompt("ag2");
 
 // src/workers/render.ts
 function shortModel(model) {