@zq-silk/yui 2.1.0 → 2.2.0

package/dist/web/assets/styles/layout.js

@@ -2,7 +2,9 @@
  * LAYOUT — the three-region workspace.
  *   sidebar | center (task details) | divider | dock (session)
  * body.dock-open shows the dock; body.dock-center swaps the dock into the
- * middle so the order becomes sidebar | dock | divider | center.
+ * middle so the order becomes sidebar | dock | divider | center. The sidebar's
+ * own divider overlays its right edge, so it adds no grid column; --sidebar-w
+ * is the default width and a stored preference overrides it inline.
  */
 export const LAYOUT_STYLES = `
 .app{display:grid;height:100vh;height:100dvh;grid-template-rows:minmax(0,1fr);
@@ -12,16 +14,21 @@ body.dock-open .app{grid-template-columns:var(--sidebar-w) minmax(0,1fr) var(--d
 body.dock-open.dock-center .app{grid-template-areas:"sidebar dock divider center";grid-template-columns:var(--sidebar-w) var(--dock-w) var(--divider-w) minmax(0,1fr)}
 
 /* Sidebar */
-.sidebar{grid-area:sidebar;display:flex;flex-direction:column;min-width:0;min-height:0;background:var(--surface);border-right:1px solid var(--line)}
+.sidebar{grid-area:sidebar;display:flex;flex-direction:column;min-width:0;min-height:0;background:var(--surface);border-right:1px solid var(--line);container:sidebar/inline-size}
+.sidebar-divider{grid-area:sidebar;justify-self:end;position:relative;z-index:20;width:9px;margin-right:-5px;cursor:col-resize;touch-action:none}
+.sidebar-divider span{position:absolute;top:0;bottom:0;left:3px;width:1px;background:transparent;transition:background var(--t-fast),box-shadow var(--t-fast)}
+.sidebar-divider:hover span,.sidebar-divider:focus-visible span,body.sidebar-resizing .sidebar-divider span{background:var(--accent);box-shadow:0 0 0 1px var(--accent)}
+.sidebar-divider:focus-visible{box-shadow:none}
+body.sidebar-resizing{cursor:col-resize;user-select:none}
 .side-head{flex:none;display:flex;align-items:center;gap:10px;height:var(--header-h);padding:0 12px 0 16px;border-bottom:1px solid var(--line)}
 .brand{display:flex;align-items:center;gap:10px;flex:1;min-width:0}
 .search-field{flex:none;margin:12px 12px 0}
 .attention-bar{flex:none;margin:10px 12px 0}
 .status-tabs{flex:none;margin:10px 0 0;padding:0 12px}
-.task-list{flex:1;min-height:0;overflow-y:auto;padding:6px 8px 12px;scrollbar-gutter:stable}
+.task-list{flex:1;min-height:0;overflow-y:auto;padding:4px 8px 12px;scrollbar-gutter:stable}
 .pager{flex:none;display:grid;grid-template-columns:auto 1fr auto;align-items:center;gap:6px;padding:8px 12px;border-top:1px solid var(--line)}
 .pager .pager-clear{grid-column:1/-1}
-.side-foot{flex:none;display:flex;align-items:center;gap:6px;padding:10px 12px;border-top:1px solid var(--line)}
+.side-foot{flex:none;display:flex;align-items:center;gap:4px;padding:10px;border-top:1px solid var(--line)}
 
 /* Center */
 .center{grid-area:center;min-width:0;min-height:0;overflow-y:auto;scrollbar-gutter:stable;background:var(--canvas)}

package/dist/web/assets/styles/responsive.js

@@ -3,15 +3,23 @@
  *   ≤1200px  narrower sidebar and dock defaults
  *   ≤900px   master–detail: task list OR task page; the dock becomes a
  *            full-screen sheet over the task page
+ * Sidebar container queries adapt its footer to the width the user chose.
  */
 export const RESPONSIVE_STYLES = `
+@container sidebar (max-width:299px){
+  .foot-btn kbd{display:none}
+}
+@container sidebar (max-width:259px){
+  .foot-btn{gap:0;padding:0 9px}
+  .foot-btn span{position:absolute;width:1px;height:1px;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap}
+}
 @media(max-width:1200px){
   :root{--sidebar-w:264px}
-  .card-grid{grid-template-columns:minmax(0,1fr)}
+  .card-grid,.card-columns{grid-template-columns:minmax(0,1fr)}
   .metric-strip{grid-template-columns:repeat(3,minmax(0,1fr))}
 }
 @media(max-width:1040px){
-  body.dock-open .overview-grid{grid-template-columns:minmax(0,1fr)}
+  body.dock-open .overview-layout{grid-template-columns:minmax(0,1fr)}
 }
 @media(max-width:900px){
   .app,body.dock-open .app,body.dock-open.dock-center .app{grid-template-areas:"main";grid-template-columns:minmax(0,1fr)}
@@ -21,10 +29,10 @@ export const RESPONSIVE_STYLES = `
   body.task-open .center{display:block}
   .back-btn{display:inline-grid}
   .crumbs .crumb,.crumbs .crumb-sep{display:none}
-  .dock-divider{display:none}
+  .dock-divider,.sidebar-divider{display:none}
   .dock{position:fixed;inset:0;z-index:60;padding-top:env(safe-area-inset-top,0px);padding-bottom:env(safe-area-inset-bottom,0px)}
   #dock-swap{display:none}
-  .overview-grid{grid-template-columns:minmax(0,1fr)}
+  .overview-layout{grid-template-columns:minmax(0,1fr)}
   .dock-toggle span{display:none}
   .dock-toggle{width:32px;padding:0}
 }

package/dist/web/assets/styles/views.js

@@ -25,29 +25,32 @@ export const VIEW_STYLES = `
 .attention-pill[aria-pressed="true"]{background:var(--tone);color:var(--canvas)}
 .attention-clear{display:flex;align-items:center;gap:6px;color:var(--ink-4);font-size:var(--fs-xs)}
 .attention-clear .icon{color:var(--ok)}
-.tabs-row{display:flex;gap:2px;overflow-x:auto;scrollbar-width:none;padding-bottom:2px;border-bottom:1px solid var(--line)}
+.tabs-row{position:relative;display:flex;gap:2px;overflow-x:auto;scrollbar-width:none;padding-bottom:2px;border-bottom:1px solid var(--line)}
+.tabs-row[data-fade="end"]{-webkit-mask-image:linear-gradient(90deg,#000 calc(100% - 28px),transparent);mask-image:linear-gradient(90deg,#000 calc(100% - 28px),transparent)}
+.tabs-row[data-fade="start"]{-webkit-mask-image:linear-gradient(90deg,transparent,#000 28px);mask-image:linear-gradient(90deg,transparent,#000 28px)}
+.tabs-row[data-fade="both"]{-webkit-mask-image:linear-gradient(90deg,transparent,#000 28px,#000 calc(100% - 28px),transparent);mask-image:linear-gradient(90deg,transparent,#000 28px,#000 calc(100% - 28px),transparent)}
 .tabs-row::-webkit-scrollbar{display:none}
 .status-tab{position:relative;display:inline-flex;align-items:center;gap:5px;flex:none;height:32px;padding:0 8px;border:0;background:transparent;color:var(--ink-3);font-size:var(--fs-xs);font-weight:500;white-space:nowrap}
 .status-tab:hover{color:var(--ink)}
 .status-tab[aria-pressed="true"]{color:var(--ink)}
 .status-tab[aria-pressed="true"]::after{content:"";position:absolute;left:6px;right:6px;bottom:-3px;height:2px;border-radius:2px;background:var(--accent)}
 .status-tab-count{color:var(--ink-4);font-size:var(--fs-2xs);font-variant-numeric:tabular-nums}
-.task-group{margin-top:10px}
-.task-group-head{display:flex;align-items:center;gap:6px;padding:4px 8px 6px;color:var(--ink-4);font-size:var(--fs-2xs);font-weight:600;text-transform:uppercase;letter-spacing:.07em}
+.task-group{margin-top:8px}
+.task-group-head{display:flex;align-items:center;gap:6px;padding:4px 8px 4px;color:var(--ink-4);font-size:var(--fs-2xs);font-weight:600;text-transform:uppercase;letter-spacing:.07em}
 .task-group-head .count{background:transparent;padding:0;min-width:0}
-.task-row{position:relative;display:flex;align-items:flex-start;gap:10px;width:100%;padding:9px 10px;border:0;border-radius:var(--r-md);background:transparent;text-align:left;transition:background var(--t-fast)}
-.task-row>.dot{margin-top:6px}
+.task-row{position:relative;display:flex;align-items:flex-start;gap:9px;width:100%;padding:7px 10px;border:0;border-radius:var(--r-md);background:transparent;text-align:left;transition:background var(--t-fast)}
+.task-row>.dot{margin-top:5px}
 .task-row:hover{background:var(--surface-3)}
 .task-row[aria-current="true"]{background:var(--surface-3);box-shadow:inset 0 0 0 1px var(--line-2)}
-.task-row[aria-current="true"]::before{content:"";position:absolute;left:-8px;top:10px;bottom:10px;width:3px;border-radius:0 3px 3px 0;background:var(--accent)}
-.task-body{display:grid;gap:3px;flex:1;min-width:0}
+.task-row[aria-current="true"]::before{content:"";position:absolute;left:0;top:9px;bottom:9px;width:3px;border-radius:0 3px 3px 0;background:var(--accent)}
+.task-body{display:grid;gap:1px;flex:1;min-width:0}
 .task-line{display:flex;align-items:center;gap:8px;min-width:0}
-.task-name{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--ink);font-size:var(--fs-md);font-weight:500}
+.task-name{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;color:var(--ink);font-size:var(--fs-md);font-weight:500;line-height:1.35}
 .task-time{flex:none;color:var(--ink-4);font-size:var(--fs-2xs);font-variant-numeric:tabular-nums}
 .task-sub{gap:8px;height:18px;color:var(--ink-4);font-size:var(--fs-2xs)}
 .task-id{font-size:var(--fs-2xs);line-height:1;color:var(--ink-3)}
-.task-meta{display:inline-flex;align-items:center;gap:3px;line-height:1;white-space:nowrap}
-.task-meta .icon{width:11px;height:11px}
+.task-count{display:inline-flex;align-items:center;gap:3px;line-height:1;white-space:nowrap}
+.task-count .icon{width:11px;height:11px}
 .task-signals{display:inline-flex;gap:4px;margin-left:auto}
 .signal{display:inline-flex;align-items:center;gap:3px;height:18px;padding:0 6px;border-radius:var(--r-pill);background:var(--tone-soft);color:var(--tone);font-size:10.5px;font-weight:600;font-variant-numeric:tabular-nums}
 .signal .icon{width:11px;height:11px;stroke-width:2}
@@ -59,12 +62,11 @@ export const VIEW_STYLES = `
 .pager-count{grid-column:2;text-align:center;color:var(--ink-4);font-size:var(--fs-2xs);font-variant-numeric:tabular-nums}
 .pager-clear{height:28px;border:1px dashed var(--line-3);border-radius:var(--r-sm);background:transparent;color:var(--ink-3);font-size:var(--fs-xs)}
 .pager-clear:hover{color:var(--accent);border-color:var(--accent-line)}
-.foot-btn{display:inline-flex;align-items:center;gap:7px;height:32px;padding:0 10px;border:1px solid var(--line-2);border-radius:var(--r-sm);background:transparent;color:var(--ink-2);font-size:var(--fs-xs);font-weight:500;min-width:0}
+.foot-btn{display:inline-flex;align-items:center;gap:6px;height:32px;padding:0 8px;border:1px solid var(--line-2);border-radius:var(--r-sm);background:transparent;color:var(--ink-2);font-size:var(--fs-xs);font-weight:500;min-width:0}
 .foot-btn span{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
 .foot-btn:hover{color:var(--ink);border-color:var(--line-3);background:var(--surface-3)}
 .foot-btn[aria-pressed="true"]{color:var(--accent);border-color:var(--accent-line);background:var(--accent-soft)}
 .foot-btn kbd{margin-left:2px}
-.side-foot .foot-btn:first-child{flex:1}
 .side-foot .icon-btn{margin-left:auto}
 
 /* ---------- Page scaffolding ---------- */
@@ -83,7 +85,8 @@ export const VIEW_STYLES = `
 .metric-strip{display:grid;grid-template-columns:repeat(5,minmax(0,1fr));gap:10px;margin-bottom:14px}
 .metric-strip .metric{padding:14px 16px;border-radius:var(--r-lg)}
 .metric-strip .metric-value{font-size:var(--fs-2xl)}
-.overview-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:14px;margin-bottom:14px;align-items:start}
+.overview-layout{display:grid;grid-template-columns:minmax(0,1fr) minmax(300px,380px);gap:14px;align-items:start}
+.overview-col{display:flex;flex-direction:column;gap:14px;min-width:0}
 .overview>.card{margin-bottom:14px}
 .row-list{display:grid;gap:2px;margin:-4px -8px}
 .list-row{display:flex;align-items:center;gap:10px;width:100%;min-height:38px;padding:7px 8px;border:0;border-radius:var(--r-sm);background:transparent;color:var(--ink);text-align:left;font-size:var(--fs-sm)}

package/docs/agent-result-consumption.md

@@ -65,6 +65,22 @@ silently rerun successful Producers.
 
 ## Review
 
+Capturing a Run-backed WorkItem Candidate freezes its exact source report and
+Candidate identity in the existing immutable Context Snapshot store. Review
+receives a `source-run` pointer with `evidenceOf=<work-item>/<candidate>` and
+expands the original report through `task run context expand`, including all
+content pages. Source, Candidate or report drift refuses a new dispatch; already
+frozen Run Context remains readable. Task-final producer evidence requires an
+exact Candidate head or a committed Integration at the fixed head and Task-main
+target. Earlier attempts sharing a target are not ancestry proof. A later direct
+Task-main repair remains reviewable without a matching producer report: the
+ReviewRound pointer identifies the evidence gap. Attached reports describe their
+named Candidate, not validation of the entire Task head; a Reviewer assesses
+the fixed code and reports missing validation rather than borrowing old success.
+Historical Candidates without this frozen proof remain inspectable, but need
+newly captured delivery evidence before a new Candidate Review; old Snapshots
+are never backfilled.
+
 ReviewRound owns frozen Candidate or Task-head identity, workspace provenance,
 execution topology, exact main Reviewer Run, lifecycle and Core diagnostics.
 Its completed state is structural execution evidence, not a “pass” extracted

package/docs/agent-result-consumption.zh-CN.md

@@ -52,6 +52,19 @@ Review 结果。Producer 从不直接进入 Integration 或验收。重试针对
 
 ## Review
 
+捕获 Run 来源的 WorkItem Candidate 时，会在现有不可变 Context Snapshot 存储中
+冻结其精确原始报告与 Candidate 身份。Review 获得带
+`evidenceOf=<work-item>/<candidate>` 的 `source-run` 指针，通过
+`task run context expand` 读取原文与所有内容分页。来源、Candidate 或报告漂移会
+拒绝新的派发，但已经冻结的 Run Context 仍可读取。Task-final 来源证据需要精确
+匹配 Candidate 提交，或匹配固定 head 与 Task-main 目标的已提交 Integration。
+仅共享目标的历史 attempts 不是血缘证明。Task-main 后续直接修复没有匹配报告时，
+仍可审查，ReviewRound 指针明确提示证据缺口。附带报告只描述其命名的 Candidate，
+不是整个 Task head 已通过验证的证明；Reviewer 应审查固定代码、报告验证缺口，
+不能借用旧成功结论。
+缺少冻结证据的历史 Candidate 仍可诊断；新的 Candidate Review 需要新捕获的交付
+证据，不回填旧 Snapshot。
+
 ReviewRound 拥有冻结的 Candidate 或 Task-head 身份、工作区来源、执行拓扑、精确
 的 main Reviewer Run、生命周期和 Core 诊断。它的 completed 状态是结构性执行证据，
 而不是从报告里提取出来的“通过”。

package/docs/examples/agent-offline.mjs

@@ -0,0 +1,194 @@
+import assert from 'node:assert/strict';
+import { spawn } from 'node:child_process';
+import { existsSync, realpathSync } from 'node:fs';
+import { mkdtemp, mkdir, writeFile, readFile, rm } from 'node:fs/promises';
+import { createServer } from 'node:http';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+const packageRoot = fileURLToPath(new URL('../../', import.meta.url));
+const localLauncher = join(packageRoot, 'output/dev/bin/yui');
+const directory = await mkdtemp(join(tmpdir(), 'native-agent-offline-'));
+const workingDirectory = join(directory, 'child');
+const launchDirectory = join(directory, 'different-launch');
+const secret = 'dummy-offline-example-token';
+const executable = realpathSync(process.execPath);
+// Trusted fixture code reviewed here, not arbitrary text supplied by the model.
+const argv = ['-e',
+  'const fs=require("node:fs");if(fs.readFileSync("../input.txt","utf8")!=="after\\n"||process.env.EXAMPLE_CREDENTIAL)process.exit(1);console.log("local check passed");'];
+const commandConfig = JSON.stringify({ env: {}, specs: [{ executable, argv, effect: 'read' }] });
+let phase = 'read', step = 0, active;
+let initialSkillBody = false, loadedSkillBody = false, commandFromCurrentFacts = false;
+const server = createServer(async (request, response) => {
+  let source = '';
+  for await (const part of request) source += part;
+  const input = JSON.parse(source);
+  assert.equal(request.headers.authorization, `Bearer ${secret}`);
+  const call = (id, name, args) => ({ id, type: 'function',
+    function: { name, arguments: JSON.stringify(args) } });
+  let calls;
+  assert.equal(input.messages.filter(message => message.role === 'system').length, 1);
+  const material = input.messages.filter(message => message.role === 'user')
+    .map(message => { try { return JSON.parse(message.content).contextMaterial; } catch { return undefined; } })
+    .find(material => material?.loader === 'product-runtime');
+  assert.ok(material, 'The actual model request must include current runtime facts');
+  const currentFacts = JSON.parse(material.content);
+  assert.deepEqual({ root: currentFacts.root, cwd: currentFacts.cwd },
+    { root: directory, cwd: workingDirectory });
+  assert.ok(!source.includes(secret));
+  const configuredCheck = id => {
+    const spec = currentFacts.commands[0];
+    assert.ok(spec, 'Choose the configured check from the actual model request');
+    commandFromCurrentFacts = true;
+    return call(id, 'command', { command: spec.executable, argv: spec.argv, cwd: currentFacts.cwd });
+  };
+  if (phase === 'read' && step++ === 0) calls = [call('read-example', 'read', { path: 'input.txt' })];
+  else if (phase === 'edit' && step++ === 0) {
+    const previousRead = input.messages.find(message => message.role === 'tool');
+    const sha256 = JSON.parse(JSON.parse(previousRead.content).content).sha256;
+    calls = [call('edit-example', 'edit',
+      { path: 'input.txt', expectedSha256: sha256, oldText: 'before', newText: 'after' })];
+  } else if (phase === 'edit' && step === 2) calls = [configuredCheck('check-example')];
+  else if (phase === 'reopen' && step++ === 0) {
+    assert.deepEqual(currentFacts.commands, []);
+    assert.equal(currentFacts.grants.allowCommand, false);
+    // Deliberately replay the old command as a negative authorization probe.
+    calls = [call('reopen-check', 'command', { command: executable, cwd: workingDirectory, argv })];
+  }
+  else if (phase === 'restored' && step++ === 0) calls = [call('restored-read', 'read', { path: 'input.txt' })];
+  else if (phase === 'restored' && step === 2) calls = [configuredCheck('restored-check')];
+  else if (phase === 'skill') {
+    const loaded = input.messages.some(message => message.content.includes('COMPLETE_OFFLINE_SKILL_BODY'));
+    if (step++ === 0) {
+      initialSkillBody = loaded;
+      calls = [call('skill-example', 'project_context', {
+        action: 'load_skill', locator: '.agents/skills/check/SKILL.md' })];
+    } else loadedSkillBody = loaded;
+    assert.ok(input.messages.filter(message => message.content.includes('COMPLETE_OFFLINE_SKILL_BODY'))
+      .every(message => message.role === 'user'));
+  } else if (['memory-denied', 'memory-write', 'memory-reopen'].includes(phase) && step++ === 0)
+    calls = [call(phase, 'project_memory', {
+      action: 'replace', expectedSha256: null, content: 'offline confirmed experience' })];
+  response.setHeader('content-type', 'application/json');
+  response.end(JSON.stringify({ choices: [{ index: 0, message: { role: 'assistant', content: 'Offline facts saved',
+    ...(calls ? { tool_calls: calls } : {}) }, finish_reason: calls ? 'tool_calls' : 'stop' }] }));
+});
+try {
+  await mkdir(workingDirectory);
+  await mkdir(launchDirectory);
+  await writeFile(join(directory, 'input.txt'), 'before\n');
+  await mkdir(join(directory, '.agents/skills/check'), { recursive: true });
+  await writeFile(join(directory, '.agents/skills/check/SKILL.md'),
+    '---\nname: check\ndescription: Offline check.\nallowed-tools: command\n---\nCOMPLETE_OFFLINE_SKILL_BODY');
+  await new Promise(resolve => server.listen(0, '127.0.0.1', resolve));
+  const shared = ['--allow-http', '--endpoint', `http://127.0.0.1:${server.address().port}/chat`,
+    '--model', 'offline-fixture', '--credential-ref', 'env:EXAMPLE_CREDENTIAL',
+    '--state-dir', join(directory, 'state')];
+  const execute = (args, expectedCode = 0, command = 'run') => new Promise((resolve, reject) => {
+    // Installed package uses its public bin; source checkout uses the required absolute local launcher.
+    active = spawn(existsSync(localLauncher) ? localLauncher : process.execPath,
+      [...(existsSync(localLauncher) ? [] : [join(packageRoot, 'dist/cli.js')]), 'agent', command,
+        ...(command === 'run' ? [...shared,
+          ...(args.includes('--session') ? [] : ['--root', directory, '--cwd', workingDirectory])]
+          : ['--state-dir', join(directory, 'state'), '--credential-ref', 'env:EXAMPLE_CREDENTIAL']),
+        ...args],
+      { env: { PATH: `${dirname(process.execPath)}:/usr/bin:/bin`, TMPDIR: tmpdir(),
+        YUI_HOME: join(directory, 'unused-control-home'), EXAMPLE_CREDENTIAL: secret },
+        cwd: launchDirectory, stdio: ['ignore', 'pipe', 'pipe'] });
+    let output = '', error = '';
+    active.stdout.on('data', data => { output += data; });
+    active.stderr.on('data', data => { error += data; });
+    active.on('error', reject);
+    active.on('close', code => {
+      active = undefined;
+      if (code !== expectedCode) reject(new Error(`Offline entry failed (${code}): ${error}`));
+      else resolve(JSON.parse(output || error));
+    });
+  });
+  const first = await execute(['--input', 'Read input.txt']);
+  phase = 'edit'; step = 0;
+  const second = await execute(['--session', first.receipt.sessionId,
+    '--tools', 'read,edit,command', '--allow-write', '--allow-command', '--command-config', commandConfig,
+    '--input', 'Edit and check']);
+  assert.equal(await readFile(join(directory, 'input.txt'), 'utf8'), 'after\n');
+  assert.equal(second.receipt.sessionId, first.receipt.sessionId);
+  assert.equal(second.receipt.source.durability, 'persistent');
+  const checked = second.result.messages.find(message => message.role === 'tool' && message.name === 'command');
+  assert.equal(JSON.parse(checked.outcome.content).exitCode, 0);
+  assert.equal(JSON.parse(checked.outcome.content).processGroup, 'absent');
+  assert.ok(second.receipt.revision > first.receipt.revision);
+  assert.ok(!JSON.stringify(second).includes(secret));
+  assert.ok(!(await readFile(join(directory, 'state', 'sessions.sqlite'))).includes(Buffer.from(secret)));
+  assert.ok(!existsSync(join(directory, 'unused-control-home')));
+  phase = 'reopen'; step = 0;
+  const third = await execute(['--session', first.receipt.sessionId, '--input', 'Reopen without granting command'], 1);
+  assert.equal(third.result.reason, 'error');
+  assert.equal(third.binding.allowCommand, false);
+  assert.equal(third.binding.allowWrite, false);
+  assert.equal(third.receipt.sessionId, first.receipt.sessionId);
+  assert.ok(third.receipt.revision > second.receipt.revision);
+  const resume = ['--session', first.receipt.sessionId];
+  phase = 'skill'; step = 0;
+  await execute([...resume, '--input', 'Load the relevant check Skill completely']);
+  assert.equal(initialSkillBody, false);
+  assert.equal(loadedSkillBody, true);
+  phase = 'memory-denied'; step = 0;
+  const denied = await execute([...resume, '--allow-write', '--input', 'Try memory without its grant']);
+  assert.equal(denied.result.messages.filter(message => message.role === 'tool'
+    && message.name === 'project_memory').at(-1).outcome.error.code, 'permission_denied');
+  assert.ok(!existsSync(join(directory, '.agents/MEMORY.md')));
+  phase = 'memory-write'; step = 0;
+  await execute([...resume, '--allow-memory-write', '--input', 'Save confirmed experience']);
+  assert.equal(await readFile(join(directory, '.agents/MEMORY.md'), 'utf8'), 'offline confirmed experience');
+  phase = 'memory-reopen'; step = 0;
+  const ungranted = await execute([...resume, '--input', 'Reopen without memory grant']);
+  assert.equal(ungranted.result.messages.filter(message => message.role === 'tool'
+    && message.name === 'project_memory').at(-1).outcome.error.code, 'permission_denied');
+  assert.equal(ungranted.projectAuthority.allowMemoryWrite, false);
+  phase = 'read'; step = 0;
+  const another = await execute(['--input', 'Create another explicitly separate Session']);
+  for (const saved of [first, another]) await execute(['--session', saved.receipt.sessionId,
+    '--title', '"Same title"', '--expected-metadata-revision', '0'], 0, 'rename');
+  const page = await execute(['--limit', '1'], 0, 'sessions');
+  const next = await execute(['--limit', '1', '--cursor', page.nextCursor], 0, 'sessions');
+  assert.notEqual(page.items[0].sessionId, next.items[0].sessionId);
+  assert.equal(page.items[0].title, next.items[0].title);
+  assert.ok([page.items[0], next.items[0]].some(item => item.sessionId === first.receipt.sessionId));
+  const facts = await execute([...resume, '--limit', '2'], 0, 'history');
+  assert.equal(facts.records.length, 2);
+  const detail = await execute(resume, 0, 'session-info');
+  assert.equal(detail.sessionId, first.receipt.sessionId);
+  assert.deepEqual(detail.location, { root: directory, cwd: workingDirectory });
+  await execute([...resume, '--title', '"Chosen exact ID"', '--expected-metadata-revision', '1'], 0, 'rename');
+  const stale = await execute(['--limit', '1', '--cursor', page.nextCursor], 1, 'sessions');
+  assert.equal(stale.field, 'cursor_stale');
+  await execute(['--limit', '1'], 0, 'sessions'); // Explicit refresh, no automatic cursor fallback.
+  await execute([...resume, '--limit', '2', '--cursor', facts.nextCursor], 0, 'history');
+  phase = 'restored'; step = 0;
+  const restored = await execute([...resume, '--tools', 'read,command', '--allow-command',
+    '--command-config', commandConfig, '--input', 'Continue by exact catalog ID with fresh command authority']);
+  assert.equal(restored.binding.root, directory);
+  assert.equal(restored.binding.cwd, workingDirectory);
+  assert.equal(restored.receipt.sessionId, detail.sessionId);
+  assert.ok(restored.receipt.revision > detail.revision);
+  const restoredCheck = restored.result.messages.filter(message => message.role === 'tool' && message.name === 'command').at(-1);
+  assert.equal(JSON.parse(restoredCheck.outcome.content).exitCode, 0);
+  console.log(JSON.stringify({ offline: true, editedAndChecked: true, resumedExactId: true,
+    persistentReceiptVerified: true, exactCommandAuthority: true, reopenDefaultsReadOnly: true,
+    progressiveCompleteSkill: true, memoryRequiresSeparateInvocationGrant: true,
+    persistentCatalogDiscovered: true, duplicateTitlesSelectedById: true, boundedHistoryRead: true,
+    explicitStaleCursorRefresh: true, controlHomeCreated: false,
+    originalRootCwdRestoredAcrossLaunchDirectories: true, rootDiffersFromCwd: true,
+    freshCommandAuthorizationAfterCatalogSelection: true,
+    commandChosenFromCurrentModelRequest: commandFromCurrentFacts }));
+} finally {
+  if (active) {
+    const stopped = new Promise(resolve => active.once('close', resolve));
+    active.kill('SIGTERM');
+    await stopped;
+  }
+  server.closeAllConnections();
+  await new Promise(resolve => server.close(resolve));
+  await rm(directory, { recursive: true, force: true });
+}