agent-nuvira 3.3.1 → 3.3.4

package/dist/cli/failover-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"failover-runner.d.ts","sourceRoot":"","sources":["../../src/cli/failover-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGnE;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAU5F;AAED,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;OAIG;IACH,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjH;;;;OAIG;IACH,aAAa,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACxG;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiJpF"}
+{"version":3,"file":"failover-runner.d.ts","sourceRoot":"","sources":["../../src/cli/failover-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGnE;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAU5F;AAED,wEAAwE;AACxE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;OAIG;IACH,KAAK,EAAE,CAAC,gBAAgB,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1D;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjH;;;;OAIG;IACH,aAAa,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACxG;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAuJpF"}

package/dist/cli/failover-runner.js

@@ -24,7 +24,7 @@
  */
 import { resolveProvider } from './router.js';
 import { getAutoRouter } from '../learning/auto-router.js';
-import { resolveWorkingModel } from '../inference/model-validator.js';
+import { resolveRoute } from '../inference/route-resolver.js';
 import { recordRoutingDecision } from '../learning/routing-history.js';
 import { shouldConfirmFailover, promptFailoverChoice } from './failover-prompt.js';
 import { classifyFallbackError } from '../learning/provider-fallback.js';
@@ -88,8 +88,14 @@ export async function runSingleShotAuto(opts) {
                 ? first.model
                 : getAutoRouter().resolveModel(candidateType, opts.action, opts.configManager);
             // Model health: only use models that actually exist on the provider
-            // (a pinned config.model can be deprecated → 404) — repair to live.
-            const model = await resolveWorkingModel(resolved.provider, candidateType, desired);
+            // (a pinned config.model can be deprecated → 404) — repair to live, and
+            // say so out loud when the model is not the one that was asked for.
+            const model = (await resolveRoute({
+                providerType: candidateType,
+                provider: resolved.provider,
+                model: desired,
+                source: 'failover',
+            })).model;
             candidateModel = model;
             resolvedProvider = resolved.provider;
         }

package/dist/cli/failover-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"failover-runner.js","sourceRoot":"","sources":["../../src/cli/failover-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,qBAAqB,EAAsB,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG9E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,aAA4B,EAAE,YAAoB;IAChF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC5D,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAqDD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA2B;IACjE,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,SAAS,GAAY,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvG,KAAK,MAAM,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,SAAS;QAC3C,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7B,0EAA0E;QAC1E,6DAA6D;QAC7D,IAAI,cAAkC,CAAC;QACvC,IAAI,oBAAoB,GAAG,aAAa,CAAC;QACzC,IAAI,gBAA+C,CAAC;QAEpD,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,uDAAuD,CAAC,CAAC;gBAC3F,SAAS;YACX,CAAC;YACD,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9C,MAAM,OAAO,GAAG,aAAa,KAAK,KAAK,CAAC,IAAI;gBAC1C,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACjF,oEAAoE;YACpE,oEAAoE;YACpE,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;YACnF,cAAc,GAAG,KAAK,CAAC;YACvB,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,0BAA0B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACtH,SAAS;QACX,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,WAAW,GAA8B,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChG,IAAI,WAAW,GAAY,SAAS,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAiB,EAAE,aAAa,EAAE,cAAe,EAAE,GAAG,CAAC,CAAC;gBAC3F,IAAI,aAAa,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,kCAAkC,oBAAoB,KAAK,cAAc,WAAW,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC;oBACxH,mEAAmE;oBACnE,6DAA6D;oBAC7D,aAAa;oBACb,qBAAqB,CAAC;wBACpB,iEAAiE;wBACjE,+DAA+D;wBAC/D,6CAA6C;wBAC7C,MAAM,EAAE,IAAI,CAAC,MAAuB;wBACpC,SAAS,EAAE,IAAI,CAAC,MAAM;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,QAAQ,EAAE,aAAa;wBACvB,KAAK,EAAE,cAAe;wBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;qBACnB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,2DAA2D;oBAC3D,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,iBAAiB,QAAQ,+BAA+B,CAAC,CAAC;gBAC9F,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,GAAG,GAAG,CAAC;gBAClB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,GAAG,EAAE,CAAC;oBACR,kEAAkE;oBAClE,kEAAkE;oBAClE,gDAAgD;oBAChD,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;oBACxC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC7C,+DAA+D;wBAC/D,4DAA4D;wBAC5D,6DAA6D;wBAC7D,gEAAgE;wBAChE,yDAAyD;wBACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;wBAC9F,IAAI,CAAC;4BACH,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;wBAC3E,CAAC;wBAAC,MAAM,CAAC;4BACP,eAAe;wBACjB,CAAC;oBACH,CAAC;oBACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,IAAI,QAAQ,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iCAAiC,CAAC,CAAC;wBAC9G,SAAS;oBACX,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,4DAA4D;YACrE,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,SAAS,GAAG,WAAW,CAAC;QACxB,MAAM,GAAG,GAAG,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrF,sEAAsE;QACtE,+DAA+D;QAC/D,sEAAsE;QACtE,qEAAqE;QACrE,qDAAqD;QACrD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,sEAAsE;QACtE,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,aAAa,IAAI,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/F,IAAI,gBAAgB,GAAG,aAAa,CAAC;YACrC,IAAI,CAAC;gBACH,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;YAC1D,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,KAAK,KAAK,CAAC,IAAI;gBAC5C,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;YACtF,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,SAAS,CAAC;QAC3C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC"}
+{"version":3,"file":"failover-runner.js","sourceRoot":"","sources":["../../src/cli/failover-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAsB,MAAM,gCAAgC,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAG9E,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,aAA4B,EAAE,YAAoB;IAChF,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAC5D,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAC1D,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAqDD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA2B;IACjE,2EAA2E;IAC3E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,iDAAiD;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,mDAAmD;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,IAAI,SAAS,GAAY,IAAI,KAAK,CAAC,0CAA0C,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAEvG,KAAK,MAAM,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,IAAI,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,SAAS;QAC3C,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7B,0EAA0E;QAC1E,6DAA6D;QAC7D,IAAI,cAAkC,CAAC;QACvC,IAAI,oBAAoB,GAAG,aAAa,CAAC;QACzC,IAAI,gBAA+C,CAAC;QAEpD,0EAA0E;QAC1E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;YACpE,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,uDAAuD,CAAC,CAAC;gBAC3F,SAAS;YACX,CAAC;YACD,oBAAoB,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC9C,MAAM,OAAO,GAAG,aAAa,KAAK,KAAK,CAAC,IAAI;gBAC1C,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACjF,oEAAoE;YACpE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,KAAK,GAAG,CAAC,MAAM,YAAY,CAAC;gBAChC,YAAY,EAAE,aAAa;gBAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,OAAO;gBACd,MAAM,EAAE,UAAU;aACnB,CAAC,CAAC,CAAC,KAAK,CAAC;YACV,cAAc,GAAG,KAAK,CAAC;YACvB,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,GAAG,GAAG,CAAC;YAChB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,0BAA0B,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACtH,SAAS;QACX,CAAC;QAED,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,WAAW,GAA8B,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAChG,IAAI,WAAW,GAAY,SAAS,CAAC;QAErC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAiB,EAAE,aAAa,EAAE,cAAe,EAAE,GAAG,CAAC,CAAC;gBAC3F,IAAI,aAAa,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBACjC,MAAM,CAAC,OAAO,CAAC,kCAAkC,oBAAoB,KAAK,cAAc,WAAW,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC;oBACxH,mEAAmE;oBACnE,6DAA6D;oBAC7D,aAAa;oBACb,qBAAqB,CAAC;wBACpB,iEAAiE;wBACjE,+DAA+D;wBAC/D,6CAA6C;wBAC7C,MAAM,EAAE,IAAI,CAAC,MAAuB;wBACpC,SAAS,EAAE,IAAI,CAAC,MAAM;wBACtB,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,UAAU,EAAE,KAAK,CAAC,UAAU;wBAC5B,QAAQ,EAAE,aAAa;wBACvB,KAAK,EAAE,cAAe;wBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;qBACnB,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,GAAG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,2DAA2D;oBAC3D,MAAM,CAAC,OAAO,CAAC,MAAM,aAAa,iBAAiB,QAAQ,+BAA+B,CAAC,CAAC;gBAC9F,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,WAAW,GAAG,GAAG,CAAC;gBAClB,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC5D,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,GAAG,EAAE,CAAC;oBACR,kEAAkE;oBAClE,kEAAkE;oBAClE,gDAAgD;oBAChD,MAAM,IAAI,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;oBACxC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;wBAC7C,+DAA+D;wBAC/D,4DAA4D;wBAC5D,6DAA6D;wBAC7D,gEAAgE;wBAChE,yDAAyD;wBACzD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;wBAC9F,IAAI,CAAC;4BACH,MAAM,CAAC,WAAW,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;wBAC3E,CAAC;wBAAC,MAAM,CAAC;4BACP,eAAe;wBACjB,CAAC;oBACH,CAAC;oBACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC1B,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,IAAI,QAAQ,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,iCAAiC,CAAC,CAAC;wBAC9G,SAAS;oBACX,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,4DAA4D;YACrE,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,SAAS,GAAG,WAAW,CAAC;QACxB,MAAM,GAAG,GAAG,WAAW,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrF,sEAAsE;QACtE,+DAA+D;QAC/D,sEAAsE;QACtE,qEAAqE;QACrE,qDAAqD;QACrD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,sEAAsE;QACtE,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,aAAa,IAAI,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/F,IAAI,gBAAgB,GAAG,aAAa,CAAC;YACrC,IAAI,CAAC;gBACH,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YACtF,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;YAC1D,CAAC;YACD,MAAM,SAAS,GAAG,aAAa,KAAK,KAAK,CAAC,IAAI;gBAC5C,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,aAAa,EAAE,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;YACtF,IAAI,MAAM,KAAK,QAAQ;gBAAE,MAAM,SAAS,CAAC;QAC3C,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,SAAS,aAAa,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;IAC1G,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC"}

package/dist/cli/loop-executor.d.ts

@@ -25,6 +25,8 @@
  * remains available for CI/publish — enterprise semantics are not weakened.
  */
 import { ConfigManager } from '../config/manager.js';
+import { type IsolationOutcome } from '../tools/worktree.js';
+import { type ResumeOutcome } from '../learning/step-checkpoint.js';
 /** The loop executor's result — every metric the Phase 0 eval needs. */
 export interface LoopExecutorResult {
     /** Final assistant content (the loop's end-turn answer). */
@@ -37,6 +39,20 @@ export interface LoopExecutorResult {
     toolCalls: string[];
     /** Tool names that returned an error result (captured from tool:called). */
     erroredTools: string[];
+    /**
+     * Per-call tool outcomes, in call order — WHICH call succeeded or failed, not
+     * a name list beside a separate error set.
+     *
+     * Captured from the loop's own `tool`/`refusal` trace events (the ones that
+     * carry `ok`), so pairing is unambiguous even when a tool runs more than once
+     * — a call that failed and later succeeded used to be indistinguishable from
+     * one that failed once. This is the `execute` arm's answer to the chat
+     * surfaces' `onToolCall` lifecycle (`tool-call-lifecycle@cli-execute`).
+     */
+    toolOutcomes: Array<{
+        tool: string;
+        ok: boolean;
+    }>;
     /** Wall-clock duration (ms). */
     durationMs: number;
     /** The provider id used (telemetry echo). */
@@ -61,6 +77,30 @@ export interface LoopExecutorResult {
     runTrace?: import('../learning/run-trace.js').RunTraceSnapshot;
     /** G18 — gate decisions recorded this turn (nudges spent, bounds reached). */
     gateDecisions?: number;
+    /**
+     * R2 — the tool transport that served the run (`native` / `json` / `none`),
+     * reported by the loop's own model-call seam. Absent when no model call was
+     * made at all (a routing failure), which is the honest answer there.
+     */
+    transport?: 'native' | 'json' | 'none';
+    /**
+     * WS5 (#27) — the isolation this run had, and the diff against its base.
+     * Present only when isolation was asked for AND the run happened; a refused
+     * run reports the refusal as its content instead.
+     */
+    worktree?: IsolationOutcome;
+    /** WS5 (#27) — what this run's resume replayed, and what it saved. */
+    resume?: ResumeOutcome;
+    /**
+     * WS1 — every finding this run recorded, in call order, already gated.
+     *
+     * Read from the `finding:recorded` event the tool emits on this loop's own
+     * context bus — the same seam that carries `autonomy:write-applied` — so the
+     * command reports the verdicts its turn produced rather than leaving them in
+     * the model thread. `[]`/absent is "none recorded", never silence about a
+     * surface that cannot report them.
+     */
+    findings?: import('../findings/verdicts.js').WireFinding[];
 }
 /** Options for runLoopExecutor — mirrors the pipeline arm's surface. */
 export interface LoopExecutorOptions {
@@ -84,6 +124,21 @@ export interface LoopExecutorOptions {
     maxSteps?: number;
     /** Quiet mode: no progress logging (eval arms). */
     quiet?: boolean;
+    /**
+     * WS5 (#27) — run this turn in its own git worktree of the project and report
+     * the diff against the base commit. `undefined` defers to `NUVIRA_ISOLATE`,
+     * which is how a surface with no command line asks.
+     */
+    worktree?: boolean;
+    /** WS5 (#27) — keep the worktree after the run (its path is reported either way). */
+    keepWorktree?: boolean;
+    /**
+     * WS5 (#27) — replay this run's recorded steps whose input is unchanged instead
+     * of paying for them again. `--resume [id]` on `nuvira execute` carries it, and
+     * it means the SAME thing as the pipeline arm's `--resume`: the last run of this
+     * ask in this directory (both resolve their id through `checkpointIdFor`).
+     */
+    resume?: string | boolean;
     /**
      * G18 — echo each tool RESULT (first line, bounded) under the call line.
      * Previously even `-v` printed only the call (`⚙ edit_file({path: …})`) and

package/dist/cli/loop-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"loop-executor.d.ts","sourceRoot":"","sources":["../../src/cli/loop-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AA2ErD,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,0BAA0B,EAAE,gBAAgB,CAAC;IAC/D,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4DAA4D;IAC5D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAeD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,aAAa,EAC5B,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CA4oB7B"}
+{"version":3,"file":"loop-executor.d.ts","sourceRoot":"","sources":["../../src/cli/loop-executor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAUrD,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,gCAAgC,CAAC;AA8ExC,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gEAAgE;IAChE,OAAO,EAAE,OAAO,CAAC;IACjB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,4EAA4E;IAC5E,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;;;;;;OASG;IACH,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACnD,gCAAgC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,0BAA0B,EAAE,gBAAgB,CAAC;IAC/D,8EAA8E;IAC9E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,sEAAsE;IACtE,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,OAAO,yBAAyB,EAAE,WAAW,EAAE,CAAC;CAC5D;AAED,wEAAwE;AACxE,MAAM,WAAW,mBAAmB;IAClC,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,gDAAgD;IAChD,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4DAA4D;IAC5D,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qFAAqF;IACrF,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B;;;;;;OAMG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAeD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,aAAa,EAC5B,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,kBAAkB,CAAC,CA64B7B"}

package/dist/cli/loop-executor.js

@@ -25,22 +25,35 @@
  * remains available for CI/publish — enterprise semantics are not weakened.
  */
 import { resolveProvider } from './router.js';
-import { resolveWorkingModel } from '../inference/model-validator.js';
-import { getAutoRouter, isAutoModel, isAutoProvider, governanceVerdict } from '../learning/auto-router.js';
+import { resolveRoute, servedRouteFrom } from '../inference/route-resolver.js';
+import { debugLogNotice, sessionDebugLog } from '../observability/debug-log.js';
+// WS3 (#25) — the turn as a span, when an operator has asked for OTLP export.
+import { flushSpans, otelNoticeOnce, startTurnSpan } from '../observability/otel.js';
+// WS5 (#27) — isolation (a git worktree around the whole run) and resume
+// (replaying recorded steps). Both are resolved from the CLI's flags AND the
+// environment, so `nuvira execute --worktree` and an isolated deployment take the
+// same path (see `resolveIsolationRequest`).
+import { beginIsolation, endIsolation, resolveIsolationRequest, worktreeNotice, } from '../tools/worktree.js';
+import { closeResume, openResume, resolveResumeRequest, } from '../learning/step-checkpoint.js';
+import { noteServedRoute } from '../tools/loop-route-feed.js';
+import { getAutoRouter, isAutoProvider, governanceVerdict } from '../learning/auto-router.js';
 import { buildDeepFailoverPool, createFailoverExclusionFilter } from '../learning/resilient-call.js';
 import { recordActionFailure } from '../learning/failure-bookkeeping.js';
 import { recordRegistrySuccess, getProviderFallback, classifyFallbackError, isRetryableError, } from '../learning/provider-fallback.js';
 import { resolveThreadBudgetChars } from '../learning/context-budget.js';
 import { buildLoopProjectContext } from '../tools/loop-project-context.js';
+import { deliverablesNamedIn, recordStepHandoff } from '../agents/step-handoff.js';
 import { getLoopExposureMode } from '../tools/toolsets.js';
 import { resolveModelHarnessProfile } from '../learning/model-harness.js';
 import { hasCredentials } from '../learning/model-selection.js';
 import { resolveEngine } from '../learning/engine-router.js';
 import { logger } from '../utils/logger.js';
-import { beginTrace, endTrace, recordStep, recordTraceEvent, buildTraceOutcome, } from '../learning/reasoning-trace.js';
+import { beginTrace, endTrace, recordStep, recordTraceEvent, recordTraceFindings, buildTraceOutcome, } from '../learning/reasoning-trace.js';
 import { estimateTokens } from '../learning/cost-tracker.js';
 import { createHash } from 'node:crypto';
 import { toUserFacingGenerationError, detectAnswerQualityFailure, answerQualityError, } from '../inference/tool-call-utils.js';
+// WS1 — the finding tool's bus event (the loop's context emit carries it).
+import { FINDING_EVENT } from '../tools/finding-tool.js';
 /**
  * Serialize the loop's thread the way the chat transport does, so the SAME
  * layer splitter (and therefore the same per-layer digests) applies to both
@@ -108,6 +121,84 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
     const traceId = beginTrace({ goal, source: 'loop' });
     /** Refusals/gates recorded this turn — reported in the CLI summary. */
     const recorded = { refusals: 0, gateDecisions: 0 };
+    /** Per-call tool outcomes, in call order (see LoopExecutorResult.toolOutcomes). */
+    const toolOutcomes = [];
+    // ─── WS5 (#27) — ISOLATION AND RESUME, the run's envelope ───────────────
+    //
+    // Resolved BEFORE routing, so a run that cannot be isolated refuses without
+    // walking providers or spending a token: the request is the first thing it
+    // honours, and the refusal is a result the command reports as a failure rather
+    // than an answer (see `isolationRefusalText`).
+    const isolationRequest = resolveIsolationRequest({
+        worktree: opts.worktree,
+        keepWorktree: opts.keepWorktree,
+    });
+    const projectDir = process.cwd();
+    const isolation = beginIsolation({ request: isolationRequest, repoCwd: projectDir, label: goal });
+    if (isolation && !isolation.ok) {
+        if (!opts.quiet)
+            logger.error(isolation.refusal);
+        return failureResult(isolation.refusal, startedAt, opts.provider ?? 'auto', opts.model ?? 'default', 'refused: the run could not be isolated in a git worktree');
+    }
+    const worktree = isolation?.ok ? isolation.worktree : null;
+    /**
+     * The directory this run works in: the worktree when isolated, else the
+     * process's own cwd. Every directory-dependent path below reads this — the
+     * ambient project snapshot, the step hand-off record and the tools' `cwd` —
+     * because a run isolated for its tools but reading its context from the
+     * original tree is not isolated, it is confused.
+     */
+    const turnCwd = worktree?.dir ?? projectDir;
+    const resumeRequest = resolveResumeRequest({ resume: opts.resume });
+    // Opened only when a resume was asked for: an ordinary run never touches the
+    // record store (no read, no write, no directory created).
+    const resume = resumeRequest
+        ? openResume({ goal, cwd: turnCwd, resume: resumeRequest })
+        : null;
+    if (worktree && !opts.quiet)
+        logger.info(worktreeNotice(worktree));
+    // WS5 — what the RECORD holds, said before the run. The outcome is reported by
+    // `finishResult` below, where the counts are real (see `StepReplay.openNotice`).
+    if (resume && !opts.quiet)
+        logger.info(resume.ledger.openNotice());
+    /**
+     * Attach this run's isolation and resume outcomes to whatever it returns.
+     *
+     * Called on EVERY exit path (a routing failure included), because a worktree
+     * that is not measured and removed is a directory left in the operator's profile
+     * with a branch pointing at it — the same reason `endIsolation` measures the
+     * diff before it tears anything down. `endIsolation` never throws, so cleanup
+     * cannot replace this run's own result with a git error.
+     */
+    const finishResult = (result) => {
+        const extra = {};
+        if (worktree) {
+            const outcome = endIsolation(worktree, { keep: isolationRequest.keep });
+            extra.worktree = outcome;
+            if (!opts.quiet)
+                logger.info(outcome.notice);
+        }
+        if (resume) {
+            const outcome = closeResume(resume, { goal, cwd: turnCwd });
+            extra.resume = outcome;
+            extra.replayedSteps = outcome.replayed;
+            if (!opts.quiet)
+                logger.info(outcome.notice);
+        }
+        return { ...result, ...extra };
+    };
+    /** WS1 — findings recorded this run, in call order (see LoopExecutorResult.findings). */
+    const findings = [];
+    // WS2 (#24) — the optional session debug log for this `execute` turn. Opened
+    // before routing (like the trace) so a run that dies in the provider walk
+    // still leaves the evidence of what it tried. Null unless logging is on.
+    const debugLog = sessionDebugLog({ surface: 'cli-execute', goal, backend: { engine: 'loop' } });
+    debugLog?.event('turn.start');
+    // WS3 (#25) — the turn's span root, when span export is on (else null). Opened
+    // beside the debug log and before routing, for the same reason: a run that
+    // dies in the provider walk is exactly the run whose shape a reader needs, and
+    // a span that only exists for successful turns cannot explain a failure.
+    const otelSpan = await startTurnSpan({ surface: 'cli-execute', goal });
     /**
      * G18 — one sink for the loop's non-LLM facts: persisted to the trace store,
      * and (only under `-v`) echoed to the console so a live run is readable
@@ -115,10 +206,24 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
      */
     const onTraceEvent = (event) => {
         recordTraceEvent(traceId, event);
+        // WS2 — the same facts into the session debug log (bounded + redacted): a
+        // bug report needs the tool calls, gate decisions and refusals in order.
+        debugLog?.event(event.kind, {
+            ...(event.tool ? { tool: event.tool } : {}),
+            ...(event.gate ? { gate: event.gate } : {}),
+            ...(event.ok === undefined ? {} : { ok: event.ok }),
+            summary: event.summary,
+        });
         if (event.kind === 'refusal')
             recorded.refusals += 1;
         if (event.kind === 'gate')
             recorded.gateDecisions += 1;
+        // One event per executed call, so this is the call-ordered per-call outcome
+        // (a refusal event is a call that ran and did not succeed). `ok` is set on
+        // both; fall back to the kind only if a future emitter omits it.
+        if ((event.kind === 'tool' || event.kind === 'refusal') && event.tool) {
+            toolOutcomes.push({ tool: event.tool, ok: event.ok ?? event.kind === 'tool' });
+        }
         if (!opts.quiet && opts.verbose && (event.kind === 'tool' || event.kind === 'refusal')) {
             logger.info(`   ${event.ok ? '↳' : '⛔'} ${event.tool}: ${previewLine(event.result ?? event.summary)}`);
         }
@@ -127,6 +232,12 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
     let providerType = 'auto';
     let model = 'default';
     let provider = null;
+    /**
+     * The route ACTUALLY serving this turn, kept current through every failover
+     * and handed to the loop (which re-reads it before each model call) so the
+     * model can answer about itself from a measured fact instead of a guess.
+     */
+    let servedRoute = null;
     // ── Mid-turn failover candidate pool ────────────────────────────────────
     // The SAME deep chain the orchestrator/chat walk. Before this the loop only
     // used the chain to pick its STARTING provider: a 429 on the second step
@@ -224,9 +335,19 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
             const resolved = resolveProvider(configManager, opts.provider);
             providerType = resolved.type;
             provider = resolved.provider;
-            model = opts.model && !isAutoModel(opts.model)
-                ? opts.model
-                : await resolveWorkingModel(provider, providerType, undefined);
+            // Validate the pin against the provider that will serve it, ALWAYS — an
+            // explicit `--model` used to be used as-is (`opts.model ? opts.model :
+            // resolve…`), so `-p groq -m <a gemini model>` reached the API unvalidated
+            // and 404'd with the repair machinery sitting right there (issue #10).
+            const pinned = await resolveRoute({
+                providerType,
+                provider,
+                model: opts.model,
+                source: 'cli',
+                task: 'interactive loop (pinned provider)',
+            });
+            model = pinned.model;
+            servedRoute = servedRouteFrom(pinned);
             pushCandidate(providerType, model);
             // ── A PINNED RUN FAILS OVER TOO ──────────────────────────────────────
             // A pinned provider used to contribute a SINGLE candidate, so any
@@ -297,7 +418,15 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
                             : getAutoRouter().resolveModel(pair.provider, 'execute', configManager);
                         providerType = resolved.type;
                         provider = resolved.provider;
-                        model = await resolveWorkingModel(resolved.provider, resolved.type, desired);
+                        const route = await resolveRoute({
+                            providerType: resolved.type,
+                            provider: resolved.provider,
+                            model: desired,
+                            source: 'cli',
+                            task: 'interactive loop (failover chain)',
+                        });
+                        model = route.model;
+                        servedRoute = servedRouteFrom(route);
                         break;
                     }
                 }
@@ -310,14 +439,14 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
     catch (err) {
         // G18 — a routing failure is a FAILED trace, not a missing one.
         endTrace(traceId, false, { kind: 'failed', tools: [] });
-        return failureResult(
+        return finishResult(failureResult(
         // User-facing reason is sanitized (no provider wire text); the raw error
         // rides along as the technical explanation below.
-        toUserFacingGenerationError(err), startedAt, opts.provider ?? 'auto', opts.model ?? 'default', `routing failed before an engine decision was possible: ${err instanceof Error ? err.message : String(err)}`);
+        toUserFacingGenerationError(err), startedAt, opts.provider ?? 'auto', opts.model ?? 'default', `routing failed before an engine decision was possible: ${err instanceof Error ? err.message : String(err)}`));
     }
     if (!provider) {
         endTrace(traceId, false, { kind: 'failed', tools: [] });
-        return failureResult('No available provider for the loop engine (check API keys / local runner).', startedAt, opts.provider ?? 'auto', opts.model ?? 'default', 'no available provider after the candidate walk');
+        return finishResult(failureResult('No available provider for the loop engine (check API keys / local runner).', startedAt, opts.provider ?? 'auto', opts.model ?? 'default', 'no available provider after the candidate walk'));
     }
     // ── Engine decision (Phase 2): audit-trail echo for the caller/telemetry ──
     // The CALLER decides loop-vs-pipeline with the same function; this echo
@@ -335,7 +464,7 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
     let projectContext;
     if (!opts.skipProjectContext) {
         try {
-            const built = await buildLoopProjectContext(process.cwd());
+            const built = await buildLoopProjectContext(turnCwd);
             if (built)
                 projectContext = built;
         }
@@ -390,10 +519,14 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
     /** One generation attempt on a concrete provider × model (native → JSON). */
     const tryOnce = async (prov, mdl, messages, schemas, abort) => {
         if (typeof prov.generateTools === 'function' && schemas.length > 0) {
+            // R2 — tag the transport on the way out, the same vocabulary chat and the
+            // subagent child report, so an `execute` run can be attributed too.
             if (typeof prov.generateToolsStream === 'function' && opts.onToken) {
-                return prov.generateToolsStream(messages, schemas, { model: mdl, signal: abort }, opts.onToken);
+                const streamed = await prov.generateToolsStream(messages, schemas, { model: mdl, signal: abort }, opts.onToken);
+                return { ...streamed, transport: 'native' };
             }
-            return prov.generateTools(messages, schemas, { model: mdl, signal: abort });
+            const native = await prov.generateTools(messages, schemas, { model: mdl, signal: abort });
+            return { ...native, transport: 'native' };
         }
         // JSON fallback transport — the shared helper the chat engine uses.
         const { buildJsonFallbackPrompt } = await import('../inference/tool-call-utils.js');
@@ -412,7 +545,8 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
             raw = await prov.generate(prompt, { model: mdl, signal: abort });
         }
         const { text, calls } = extractFallbackToolCalls(raw);
-        return { content: text, toolCalls: calls };
+        // R2 — the shared JSON fallback, named as such.
+        return { content: text, toolCalls: calls, transport: 'json' };
     };
     const callModel = async (messages, schemas, _stepOnToken, stepSignal) => {
         void _stepOnToken;
@@ -471,12 +605,24 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
                 const desired = cand.model !== 'default'
                     ? cand.model
                     : getAutoRouter().resolveModel(cand.provider, 'execute', configManager);
-                const mdl = await resolveWorkingModel(prov, cand.provider, desired);
+                const route = await resolveRoute({
+                    providerType: cand.provider,
+                    provider: prov,
+                    model: desired,
+                    source: 'failover',
+                    task: 'interactive loop (mid-turn failover)',
+                });
+                const mdl = route.model;
                 // Flip the loop's active provider/model to the candidate that answers,
                 // so telemetry and the NEXT step's primary pick follow the winner.
                 providerType = cand.provider;
                 provider = prov;
                 model = mdl;
+                // The model is TOLD about this, honestly (see loop-route-feed.ts): a
+                // failover that the model does not learn about is how a turn ends up
+                // answering "which model are you?" about a model that stopped serving
+                // it several steps earlier.
+                servedRoute = noteServedRoute(servedRoute, servedRouteFrom(route));
                 const resp = await tryOnce(prov, mdl, messages, schemas, abort);
                 // ── ANSWER-QUALITY GATE ──────────────────────────────────────────
                 // A reply that is the model's own REASONING, or its narration of the
@@ -559,6 +705,32 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
                     }
                 }
                 extendWithPinnedFallbacks();
+                // ── DURABLE HAND-OFF ────────────────────────────────────────────────
+                // The failure is written down BEFORE the walk moves on, so the next
+                // candidate, the next turn and the next run all inherit it. The design
+                // already said "a broken task is handed to another model" — what was
+                // missing is the RECORD that survives the hand-off, which is why the
+                // live NVDA-addon ask re-planned the identical step 18 times and would
+                // have re-planned a 19th (see step-handoff.ts).
+                //
+                // What the record carries is deliberately not "model X failed": it is
+                // the route, the failure KIND, the reason, and the artifacts the ask
+                // named — reconciled against the filesystem on every later read, so the
+                // incoming model is told what is genuinely still outstanding.
+                try {
+                    recordStepHandoff({
+                        projectPath: turnCwd,
+                        goal,
+                        stepDescription: goal,
+                        declared: deliverablesNamedIn(goal),
+                        route: `${cand.provider}:${cand.model !== 'default' ? cand.model : model}`,
+                        kind: qualityKind ? 'quality' : 'failed',
+                        reason: err instanceof Error ? err.message : String(err),
+                    });
+                }
+                catch {
+                    // Best-effort — a hand-off write must never mask the generation error.
+                }
                 if (!opts.quiet) {
                     logger.warn(qualityKind
                         ? `   \u26A0\uFE0F ${cand.provider} answered with ${qualityKind === 'reasoning' ? 'its own reasoning' : 'tool-contract confusion'} instead of the task — trying the next loop candidate...`
@@ -578,6 +750,9 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
         });
         const result = await runToolLoop({
             messages: thread,
+            // Read fresh on every step: a mid-turn failover must be visible to the
+            // model, not just to the log (see the route feed).
+            servedRoute: () => servedRoute,
             maxSteps: opts.maxSteps ?? 16,
             // Model-window-aware thread budget: a 1M-token model keeps its whole
             // window instead of being trimmed to the fixed ~50K-token default.
@@ -585,12 +760,19 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
             threadBudgetChars: resolveThreadBudgetChars({ provider: providerType, model }),
             toolExposure: harness.exposure,
             maxParallelReads: harness.maxParallelReads,
+            // WS3 (#25) — the turn span the loop hangs each tool call under.
+            otel: otelSpan,
+            // WS4 (#26) — the label a tool hook reports this call under.
+            surface: 'cli-execute',
+            // WS5 (#27) — the resume ledger, when this run was asked to resume.
+            // Omitted otherwise, so an ordinary run never consults it.
+            ...(resume ? { resume: resume.ledger } : {}),
             onToken: opts.onToken,
             signal: opts.signal,
             context: {
                 configManager,
                 loadedExtraTools,
-                cwd: process.cwd(),
+                cwd: turnCwd,
                 // G18 — the autonomy gates report their DECISIONS on this bus
                 // (`autonomy:write-applied`, emitted by write_file/edit_file/
                 // run_terminal/run_cli/git). Forwarding them here is what makes "the
@@ -598,6 +780,11 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
                 // reason" reviewable after the fact instead of inferred from a missing
                 // round trip.
                 emit: (event, data) => {
+                    // WS1 — a finding the turn recorded, with the gate's verdict.
+                    if (event === FINDING_EVENT) {
+                        findings.push(data);
+                        return;
+                    }
                     if (event !== 'autonomy:write-applied')
                         return;
                     const d = data;
@@ -704,12 +891,68 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
             unverifiedEditClaim: result.unverifiedEditClaim,
             undeliveredArtifact: result.undeliveredArtifact,
         }));
-        return {
+        // WS1 (#23) — persist the run's findings on its trace too, so a `nuvira
+        // execute` turn's verdicts are auditable from the Trace tab exactly like a
+        // chat turn's. Best-effort; an id-less traceId would still attach to the
+        // run in progress, but the explicit id is what `endTrace` just closed.
+        recordTraceFindings(traceId, findings);
+        // WS2 — close the session debug log with the backend that ACTUALLY served
+        // the run: `servedRoute` is kept current through every failover, which is
+        // exactly the fact a debug header exists to record.
+        if (debugLog) {
+            const servedModel = servedRoute?.model ?? model;
+            debugLog.backendOf({
+                provider: servedRoute?.providerType ?? providerType,
+                ...(servedModel ? { model: servedModel } : {}),
+                transport: result.transport ?? null,
+            });
+            debugLog.event('turn.end', {
+                generationFailed: result.generationFailed === true,
+                toolCalls: toolOutcomes.length,
+                refusals: recorded.refusals,
+                gateDecisions: recorded.gateDecisions,
+                findings: findings.length,
+            });
+            // A QUIET run (which is what `--json-events` sets) prints nothing extra:
+            // its stdout is a machine-readable event stream, and a helpful log line
+            // inside it is a corrupt event. The file is still written.
+            const path = debugLog.write();
+            const notice = opts.quiet ? null : debugLogNotice('cli-execute', path);
+            if (notice)
+                logger.info(notice);
+        }
+        // WS3 (#25) — close the turn span and ship it. The status is the turn's own
+        // outcome, so a failed turn is a RED span in the collector rather than an
+        // absent one — the same rule the debug log follows for a crash. Flushed here
+        // rather than left to the batch scheduler's clock: a one-shot `nuvira
+        // execute` has to be gone before the next tick.
+        if (otelSpan) {
+            otelSpan.attr('nuvira.toolCalls', toolOutcomes.length);
+            otelSpan.attr('nuvira.findings', findings.length);
+            otelSpan.end({
+                ok: result.generationFailed !== true && result.cancelled !== true,
+                ...(result.generationFailed === true
+                    ? { message: 'the turn did not produce a usable answer' }
+                    : result.cancelled === true
+                        ? { message: 'the turn was cancelled' }
+                        : {}),
+            });
+            // A QUIET run (which is what `--json-events` sets) prints nothing extra:
+            // its stdout is the machine-readable event stream, and a notice inside it
+            // is a corrupt event. The span is still exported.
+            const otelLine = opts.quiet ? null : otelNoticeOnce('cli-execute');
+            if (otelLine)
+                logger.info(otelLine);
+            await flushSpans();
+        }
+        return finishResult({
             content: result.content,
             generationFailed: result.generationFailed ?? false,
             bounded: result.bounded,
             toolCalls: result.toolCalls,
             erroredTools,
+            toolOutcomes,
+            ...(findings.length > 0 ? { findings } : {}),
             durationMs: Date.now() - startedAt,
             provider: providerType,
             model,
@@ -717,12 +960,34 @@ export async function runLoopExecutor(goal, configManager, opts = {}) {
             traceId,
             refusals: recorded.refusals,
             gateDecisions: recorded.gateDecisions,
+            ...(result.transport ? { transport: result.transport } : {}),
             ...(result.runTrace ? { runTrace: result.runTrace } : {}),
-        };
+        });
     }
     catch (err) {
         endTrace(traceId, false, { kind: 'failed', tools: [] });
-        return failureResult(toUserFacingGenerationError(err), startedAt, providerType, model, `loop execution failed: ${err instanceof Error ? err.message : String(err)}`);
+        // WS3 (#25) — a run that THREW still ships its span, for the same reason it
+        // still writes its log: a crash is the single most useful thing to see in a
+        // trace, and a span that vanishes exactly when the run broke is worse than
+        // no tracing at all.
+        if (otelSpan) {
+            otelSpan.end({ ok: false, message: err instanceof Error ? err.message : String(err) });
+            const otelLine = opts.quiet ? null : otelNoticeOnce('cli-execute');
+            if (otelLine)
+                logger.info(otelLine);
+            await flushSpans();
+        }
+        // WS2 — a run that THREW still writes its log: a crash is the single most
+        // useful bug report there is, and the backend fields stay `unknown` rather
+        // than being invented.
+        if (debugLog) {
+            debugLog.event('turn.error', { error: err instanceof Error ? err.message : String(err) });
+            const path = debugLog.write();
+            const notice = opts.quiet ? null : debugLogNotice('cli-execute', path);
+            if (notice)
+                logger.info(notice);
+        }
+        return finishResult(failureResult(toUserFacingGenerationError(err), startedAt, providerType, model, `loop execution failed: ${err instanceof Error ? err.message : String(err)}`));
     }
 }
 /** Build a failed result (shape-complete for the eval arm comparison). */
@@ -733,6 +998,7 @@ function failureResult(message, startedAt, provider, model, engineExplanation) {
         bounded: false,
         toolCalls: [],
         erroredTools: [],
+        toolOutcomes: [],
         durationMs: Date.now() - startedAt,
         provider,
         model,