ai-foreman 1.7.29 → 2.0.1

package/README.md

@@ -48,7 +48,7 @@ Helpful when:
 
 Requires:
 
-- Node.js 20 or newer.
+- Node.js 24.
 
 ### Claude runtime and enterprise authentication
 

package/dist/adapters/claude.d.ts

@@ -1,4 +1,4 @@
-import { ProviderPhaseBarrier, type ProviderTurnPurpose } from "../providerPhase.js";
+import { ProviderPhaseBarrier } from "../providerPhase.js";
 import type { SDKSessionInfo, PermissionResult } from "@anthropic-ai/claude-agent-sdk";
 /** Lazy-load the Claude Agent SDK. Throws an actionable error if not installed. */
 export declare function requireClaudeSDK(): Promise<typeof import("@anthropic-ai/claude-agent-sdk")>;
@@ -9,7 +9,7 @@ import type { ProviderSessionRefV1, SessionAvailabilityV1 } from "rafi-spec";
  * Extracted so tests can assert on the shape without making a live SDK call.
  * `canUseTool` is omitted here — it's a closure that the constructor adds.
  */
-export declare function buildClaudeQueryOptions(opts: Omit<BuilderAdapterOptions, "permission">): Record<string, unknown>;
+export declare function buildClaudeQueryOptions(opts: Omit<BuilderAdapterOptions, "permission">, scratchDirectory?: string): Record<string, unknown>;
 export declare function probeClaudeSession(ref: ProviderSessionRefV1, input: {
     cwd: string;
     configRoot?: string;
@@ -43,6 +43,7 @@ export declare function claudeApiRetryEvent(message: {
  */
 export declare class ClaudeAdapter implements BuilderAdapter {
     private readonly opts;
+    private readonly queryFactory;
     readonly agent: "claude";
     graphRuntimeSettings(): {
         model: string | undefined;
@@ -50,11 +51,16 @@ export declare class ClaudeAdapter implements BuilderAdapter {
         fast: boolean | undefined;
         runtimeExecutable: string | undefined;
     };
-    private readonly inbox;
+    private inbox;
     private readonly eventQueue;
-    private readonly query;
-    private readonly abort;
-    private readonly pumpDone;
+    private query;
+    private abort;
+    private pumpDone;
+    private rotatingQuery;
+    private configuringTurn;
+    private output?;
+    private outputWireContract?;
+    private responseOnlyViolation;
     private _sessionId?;
     private _sessionRef?;
     private readonly sessionIdentityReady;
@@ -76,8 +82,10 @@ export declare class ClaudeAdapter implements BuilderAdapter {
     private cumulativeUsage;
     private priorTurnUsage;
     private activeProviderTurnId?;
+    private activeTurnPolicy?;
     private activeProviderTurnSpanId?;
     private readonly toolSpans;
+    private readonly structuredSubmissionIds;
     private readonly toolCalls;
     private readonly completedToolCalls;
     private readonly unknownToolResults;
@@ -96,6 +104,7 @@ export declare class ClaudeAdapter implements BuilderAdapter {
     private streamEnded;
     private closed;
     private closePromise?;
+    private readonly scratchDirectory?;
     private launchScopeObserved;
     private providerIdentityObserved;
     private toolCwd?;
@@ -109,16 +118,18 @@ export declare class ClaudeAdapter implements BuilderAdapter {
     private disableFastMode;
     static create(opts: BuilderAdapterOptions): Promise<ClaudeAdapter>;
     private constructor();
+    private queryBudget?;
+    private queryBudgetAbort?;
+    private finishQueryBudget;
+    private startQuery;
+    private isResultSubmission;
+    private resultSubmissionError;
+    private configureOutput;
     /** Background loop: consume the SDK message stream until it ends. */
     private providerInputs;
     private pump;
     private handle;
-    sendTurn(text: string, policy?: {
-        handback?: boolean;
-        responseOnly?: boolean;
-        logicalActionId?: string;
-        purpose?: ProviderTurnPurpose;
-    }): Promise<TurnResult>;
+    sendTurn(text: string, policy?: import("./types.js").ProviderTurnPolicy): Promise<TurnResult>;
     private sendTurnInternal;
     private sendTurnAttempt;
     private captureStderr;

package/dist/adapters/claude.js

@@ -1,7 +1,11 @@
+import { inheritedStructuredLiveBudget } from "../structuredLiveBudget.js";
 import { ProviderPhaseBarrier } from "../providerPhase.js";
 import { OperationDeadline } from "../util/deadline.js";
+import { assertActiveProviderDispatch } from "../structuredDispatchAuthority.js";
 import { createHash, randomUUID } from "node:crypto";
 import { dirname, join, relative, isAbsolute } from "node:path";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
 /** Lazy-load the Claude Agent SDK. Throws an actionable error if not installed. */
 export async function requireClaudeSDK() {
     try {
@@ -22,19 +26,21 @@ import { createProviderSessionRef, validateProviderSessionScope, canonicalSessio
 import { SessionUnavailableError, sessionUnavailableResult } from "./sessionFailure.js";
 import { isFastModeUnavailable, reportFastModeUnavailable } from "./fastMode.js";
 import { handoffSystemInstructions } from "../handoffProtocol.js";
+import { providerControlOperationV2, providerWireContract, renderProviderWireInstruction, validateProviderWireValue } from "rafi-spec";
+import { structuredReceipt } from "./structured.js";
 const DEFAULT_PROVIDER_IDLE_TIMEOUT_MS = 30 * 60_000;
 /**
  * Pure function: build the `options` object passed to `query()`.
  * Extracted so tests can assert on the shape without making a live SDK call.
  * `canUseTool` is omitted here — it's a closure that the constructor adds.
  */
-export function buildClaudeQueryOptions(opts) {
+export function buildClaudeQueryOptions(opts, scratchDirectory = join(dirname(opts.cwd), "scratch")) {
     const qaReadOnly = opts.sessionRole === "qa" || opts.sandboxMode === "read-only";
     const confinedBuilder = opts.sessionRole === "builder";
     const base = {
         cwd: opts.cwd,
         pathToClaudeCodeExecutable: opts.runtimeExecutable,
-        env: qaReadOnly ? qaEnvironment(process.env, opts.cwd) : { ...process.env },
+        env: qaReadOnly ? qaEnvironment(process.env, scratchDirectory) : { ...process.env },
         model: opts.model,
         resume: opts.resumeSessionRef?.sessionId ?? opts.resumeSessionId,
         permissionMode: qaReadOnly ? "default" : "acceptEdits",
@@ -57,14 +63,15 @@ export function buildClaudeQueryOptions(opts) {
                 failIfUnavailable: true,
                 autoAllowBashIfSandboxed: true,
                 allowUnsandboxedCommands: false,
-                network: { allowedDomains: [], deniedDomains: ["*"] },
-                filesystem: { allowWrite: [join(dirname(opts.cwd), "scratch")], denyWrite: [opts.cwd, ...(opts.configRoot ? [opts.configRoot] : [])] },
+                // QA stays offline unless the operator granted --qa-network for this build.
+                network: opts.networkAccess === true ? { allowedDomains: ["*"] } : { allowedDomains: [], deniedDomains: ["*"] },
+                filesystem: { allowWrite: [scratchDirectory], denyWrite: [opts.cwd, ...(opts.configRoot ? [opts.configRoot] : [])] },
             } } : {}),
     };
     const exactSkills = opts.preloadedSkillContent?.length
         ? ["# Preloaded Skills", "Use the following skills for this run.", ...opts.preloadedSkillContent.map((skill) => skill.content)].join("\n\n")
         : undefined;
-    const systemAppend = [handoffSystemInstructions(opts.sessionRole, opts.systemPromptAppend), opts.sessionRole === "builder" ? `Builder runtime contract: shell network ${opts.networkAccess === true ? "explicitly approved for this build" : "disabled"}; sandbox fallback disabled. If acquisition requires unavailable access, request input first or use a provenance-verified local bundle. A ticket answer does not grant runtime permissions.` : undefined, exactSkills].filter((part) => Boolean(part)).join("\n\n");
+    const systemAppend = [handoffSystemInstructions(opts.sessionRole, opts.systemPromptAppend), opts.sessionRole === "builder" ? `Builder runtime contract: shell network ${opts.networkAccess === true ? "explicitly approved for this build" : "disabled"}; sandbox fallback disabled. If acquisition requires unavailable access, request input first or use a provenance-verified local bundle. A ticket answer does not grant runtime permissions.` : undefined, opts.sessionRole === "qa" && opts.networkAccess === true ? "QA runtime contract: shell network explicitly approved for this review (--qa-network); you may run live checks against operator-provided local or remote services. Workspace stays read-only." : undefined, exactSkills].filter((part) => Boolean(part)).join("\n\n");
     if (systemAppend) {
         base.systemPrompt = { type: "preset", preset: "claude_code", append: systemAppend };
     }
@@ -73,9 +80,9 @@ export function buildClaudeQueryOptions(opts) {
     }
     return base;
 }
-function qaEnvironment(source, cwd) {
+function qaEnvironment(source, scratchDirectory) {
     const allowed = ["PATH", "HOME", "USER", "LOGNAME", "SHELL", "TMPDIR", "LANG", "LC_ALL", "TERM", "NO_COLOR", "FORCE_COLOR", "ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL", "CLAUDE_CODE_API_KEY_HELPER_TTL_MS", "HTTPS_PROXY", "HTTP_PROXY", "NO_PROXY", "SSL_CERT_FILE", "SSL_CERT_DIR", "NODE_EXTRA_CA_CERTS"];
-    return { ...Object.fromEntries(allowed.flatMap((key) => source[key] === undefined ? [] : [[key, source[key]]])), TMPDIR: join(dirname(cwd), "scratch") };
+    return { ...Object.fromEntries(allowed.flatMap((key) => source[key] === undefined ? [] : [[key, source[key]]])), TMPDIR: scratchDirectory };
 }
 export async function probeClaudeSession(ref, input) {
     const now = input.now ?? new Date();
@@ -176,6 +183,7 @@ export function claudeApiRetryEvent(message) {
  */
 export class ClaudeAdapter {
     opts;
+    queryFactory;
     agent = "claude";
     graphRuntimeSettings() { return { model: this.opts.model, effort: this.opts.effort, fast: this.opts.fast, runtimeExecutable: this.opts.runtimeExecutable }; }
     inbox = new AsyncQueue();
@@ -183,6 +191,11 @@ export class ClaudeAdapter {
     query;
     abort = new AbortController();
     pumpDone;
+    rotatingQuery = false;
+    configuringTurn = false;
+    output;
+    outputWireContract;
+    responseOnlyViolation = false;
     _sessionId;
     _sessionRef;
     sessionIdentityReady;
@@ -204,8 +217,10 @@ export class ClaudeAdapter {
     cumulativeUsage = { observedAt: new Date(0).toISOString(), source: "provider" };
     priorTurnUsage = {};
     activeProviderTurnId;
+    activeTurnPolicy;
     activeProviderTurnSpanId;
     toolSpans = new Map();
+    structuredSubmissionIds = new Set();
     toolCalls = new Map();
     completedToolCalls = new Set();
     unknownToolResults = new Map();
@@ -221,6 +236,7 @@ export class ClaudeAdapter {
     streamEnded = false;
     closed = false;
     closePromise;
+    scratchDirectory;
     launchScopeObserved = false;
     providerIdentityObserved = false;
     toolCwd;
@@ -251,6 +267,7 @@ export class ClaudeAdapter {
                 return;
             }
             try {
+                providerControlOperationV2("claude", "applyFlagSettings");
                 await new OperationDeadline("Claude fast mode", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.applyFlagSettings({ fastMode: true }));
                 this.fastModeEnabled = true;
             }
@@ -269,10 +286,13 @@ export class ClaudeAdapter {
         this.fastModeEnabled = false;
     }
     async disableFastMode() {
+        providerControlOperationV2("claude", "applyFlagSettings");
         await new OperationDeadline("Claude standard speed", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.applyFlagSettings({ fastMode: false }));
         this.disableFastModeNotice();
     }
     static async create(opts) {
+        const inheritedBudget = inheritedStructuredLiveBudget("claude");
+        opts = { ...opts, queryBudget: opts.queryBudget ?? inheritedBudget };
         try {
             const runtimeExecutable = opts.runtimeExecutable ?? resolveExecutablePath("claude");
             if (!runtimeExecutable) {
@@ -310,8 +330,9 @@ export class ClaudeAdapter {
         }
     }
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
-    constructor(opts, query) {
+    constructor(opts, queryFactory) {
         this.opts = opts;
+        this.queryFactory = queryFactory;
         this.phaseBarrier.begin("initialization");
         this._sessionId = opts.resumeSessionRef?.sessionId ?? opts.resumeSessionId;
         this._sessionRef = opts.resumeSessionRef;
@@ -324,15 +345,61 @@ export class ClaudeAdapter {
             start: (attemptId) => opts.observer.store.startSpan(this.observationContext(), { kind: "provider_wait", name: "Waiting for Claude after question answer", attributes: { attemptId } }),
             finish: (spanId, outcome) => opts.observer.store.finishSpan(spanId, { outcome }),
         } : undefined);
-        this.query = query({
+        // Planning and interpretation also use read-only sessions, without a QA
+        // snapshot's sibling scratch directory. Own a real, private directory for
+        // the complete query lifecycle, including exact-session schema rotations.
+        // macOS's default TMPDIR is too long for the SDK's Unix socket paths.
+        if (opts.sessionRole === "qa" || opts.sandboxMode === "read-only")
+            this.scratchDirectory = mkdtempSync(join(process.platform === "darwin" ? "/tmp" : tmpdir(), "rf-c-"));
+        try {
+            this.startQuery();
+        }
+        catch (error) {
+            this.finishQueryBudget();
+            if (this.scratchDirectory)
+                rmSync(this.scratchDirectory, { recursive: true, force: true });
+            throw error;
+        }
+    }
+    queryBudget;
+    queryBudgetAbort;
+    finishQueryBudget() {
+        if (this.queryBudgetAbort)
+            this.queryBudget?.signal.removeEventListener("abort", this.queryBudgetAbort);
+        this.queryBudgetAbort = undefined;
+        this.queryBudget?.close();
+        this.queryBudget = undefined;
+    }
+    startQuery() {
+        const opts = this.opts;
+        this.queryBudget = opts.queryBudget?.reserveQuery("claude");
+        if (this.queryBudget) {
+            const lease = this.queryBudget;
+            this.queryBudgetAbort = () => { this.abort.abort(); void this.close(); };
+            lease.signal.addEventListener("abort", this.queryBudgetAbort, { once: true });
+            if (lease.signal.aborted) {
+                this.finishQueryBudget();
+                throw new Error("Live query deadline expired before launch");
+            }
+        }
+        this.query = this.queryFactory({
             prompt: this.providerInputs(),
             options: {
-                ...buildClaudeQueryOptions(opts),
+                ...buildClaudeQueryOptions(opts, this.scratchDirectory),
+                ...(this.queryBudget ? { maxBudgetUsd: this.queryBudget.maximumSpendUsd } : {}),
+                ...(this._sessionId ? { resume: this._sessionId } : {}),
+                ...(this.outputWireContract ? { outputFormat: { type: "json_schema", schema: this.outputWireContract.wireSchema } } : {}),
                 abortController: this.abort,
                 hooks: {
                     PreToolUse: [{ hooks: [async (input) => {
                                     if (input.hook_event_name !== "PreToolUse")
                                         return {};
+                                    if (this.isResultSubmission(input.tool_name, input.tool_input)) {
+                                        const reason = this.resultSubmissionError(input.tool_input);
+                                        return reason ? { hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } } : {};
+                                    }
+                                    if (this.output && this.responseOnlyTurn)
+                                        this.responseOnlyViolation = true;
                                     this.toolCwd = input.cwd;
                                     this.toolCwds.set(input.tool_use_id, input.cwd);
                                     if (this.toolCwds.size > 1000)
@@ -356,6 +423,12 @@ export class ClaudeAdapter {
                 },
                 stderr: (data) => this.captureStderr(data),
                 canUseTool: async (toolName, input, requestOptions = {}) => {
+                    if (this.isResultSubmission(toolName, input)) {
+                        const reason = this.resultSubmissionError(input);
+                        return reason ? { behavior: "deny", message: reason } : { behavior: "allow", updatedInput: input };
+                    }
+                    if (this.output && this.responseOnlyTurn)
+                        this.responseOnlyViolation = true;
                     if (this.responseOnlyTurn)
                         return { behavior: "deny", message: "QA response correction forbids all tools, including read-only tools", interrupt: true };
                     const isProviderQuestion = toolName === "AskUserQuestion";
@@ -394,6 +467,60 @@ export class ClaudeAdapter {
         });
         this.pumpDone = this.pump();
     }
+    isResultSubmission(name, input) {
+        // Only the SDK's built-in submission in a host-configured structured query.
+        // An MCP name or arbitrary tool cannot acquire this exception.
+        return Boolean(this.pending && this.output && name === "StructuredOutput");
+    }
+    resultSubmissionError(input) {
+        try {
+            // This SDK hook sees provider wire data, not the canonical artifact.
+            // Canonical validation is deliberately deferred until the selected
+            // normalizer runs in structuredReceipt.
+            validateProviderWireValue(this.outputWireContract, input);
+            return undefined;
+        }
+        catch (error) {
+            // The SDK submission is data, including when malformed. Give its bounded
+            // native retry the actual wire-contract violations, never a mutation-policy
+            // diagnosis. Only a valid wire payload may invoke the SDK submission tool.
+            return `Native structured result violates selected ${this.outputWireContract.profile} wire contract for ${this.output.operation}: ${String(error).slice(0, 2400)}. Return every required field with the declared type.`;
+        }
+    }
+    async configureOutput(output, wireContract) {
+        const selected = output ? wireContract ?? providerWireContract(output, "claude", "default", { requireRegistered: true }) : undefined;
+        if (selected && (selected.provider !== "claude" || selected.canonical.schemaDigest !== output.schemaDigest))
+            throw new Error("Claude received a mismatched provider wire contract");
+        if (output?.schemaDigest === this.output?.schemaDigest && output?.operation === this.output?.operation && selected?.descriptorDigest === this.outputWireContract?.descriptorDigest)
+            return;
+        if (this.pending || this.closed || this.streamEnded)
+            throw new Error("Cannot change output schema on an active or unavailable Claude query");
+        this.rotatingQuery = true;
+        try {
+            this.inbox.close();
+            this.abort.abort();
+            this.query.close?.();
+            await new OperationDeadline("Claude schema transition", this.opts.shutdownTimeoutMs ?? 10_000).run(() => this.pumpDone);
+            this.finishQueryBudget();
+        }
+        catch (error) {
+            this.streamEnded = true;
+            throw error;
+        }
+        finally {
+            this.rotatingQuery = false;
+        }
+        this.inbox = new AsyncQueue();
+        this.abort = new AbortController();
+        this.output = output;
+        this.outputWireContract = selected;
+        this.fastModePrepared = undefined;
+        this.fastModeEnabled = false;
+        this.providerIdentityObserved = false;
+        this.startQuery();
+        if (this._sessionId)
+            this.eventQueue.push({ kind: "session-transition", transition: "resumed", detail: "Exact session resumed for output schema change" });
+    }
     /** Background loop: consume the SDK message stream until it ends. */
     async *providerInputs() {
         for await (const message of this.inbox) {
@@ -413,6 +540,8 @@ export class ClaudeAdapter {
             }
         }
         catch (err) {
+            if (this.rotatingQuery)
+                return;
             this.questionTrace?.finish(this.closed ? "closed" : "stream-error");
             // Suppress the AbortError that fires when close() aborts the stream.
             const isShutdownAbort = this.closed &&
@@ -429,6 +558,8 @@ export class ClaudeAdapter {
             }
         }
         finally {
+            if (this.rotatingQuery)
+                return;
             this.questionTrace?.finish(this.closed ? "closed" : "stream-ended");
             this.streamEnded = true;
             if (!this.closed && this.pending) {
@@ -464,7 +595,7 @@ export class ClaudeAdapter {
                 this.turnSignals.push(`assistant error: ${msg.error}`);
             }
             for (const block of msg.message.content) {
-                this.eventQueue.push({ kind: "provider-item", provider: "claude", lifecycle: "completed", itemType: String(block.type ?? "unknown"), payload: structuredClone(block), payloadCompleteness: "complete", providerTurnId: this.activeProviderTurnId, eventId: randomUUID(), observedAt: new Date().toISOString() });
+                this.eventQueue.push({ kind: "provider-item", provider: "claude", lifecycle: "completed", itemType: block.type === "tool_use" && this.isResultSubmission(block.name, block.input) ? "structuredOutput" : String(block.type ?? "unknown"), payload: structuredClone(block), payloadCompleteness: "complete", providerTurnId: this.activeProviderTurnId, eventId: randomUUID(), observedAt: new Date().toISOString() });
                 if (block.type === "text" && block.text) {
                     if (msg.error && this.fastModeEnabled && isFastModeUnavailable(block.text) && !this.turnSawWork)
                         continue;
@@ -473,6 +604,16 @@ export class ClaudeAdapter {
                     this.opts.observer?.signal(true);
                 }
                 else if (block.type === "tool_use") {
+                    // The SDK result submission is transport, not a domain tool. Retain its
+                    // provider-item evidence without falsely reporting an acceptance violation.
+                    if (this.isResultSubmission(block.name, block.input)) {
+                        this.structuredSubmissionIds.add(block.id);
+                        if (this.structuredSubmissionIds.size > 1000)
+                            this.structuredSubmissionIds.delete(this.structuredSubmissionIds.values().next().value);
+                        continue;
+                    }
+                    if (this.output && this.responseOnlyTurn && !this.isResultSubmission(block.name, block.input))
+                        this.responseOnlyViolation = true;
                     this.turnSawWork = true;
                     const callId = block.id;
                     this.toolCalls.set(callId, { name: block.name, input: block.input });
@@ -537,6 +678,8 @@ export class ClaudeAdapter {
             this.eventQueue.push({ kind: "activity", provider: "claude", state: "running tool", detail: `${msg.tool_name} (${Math.floor(msg.elapsed_time_seconds)}s)`, transient: true });
             const progress = msg;
             const callId = typeof progress.tool_use_id === "string" ? progress.tool_use_id : typeof progress.toolUseID === "string" ? progress.toolUseID : undefined;
+            if (callId && this.structuredSubmissionIds.has(callId))
+                return;
             this.eventQueue.push({ kind: "tool", name: msg.tool_name, input: {}, lifecycle: "progress", callId, durationMs: Math.max(0, msg.elapsed_time_seconds * 1000), completionKnown: false, eventId: randomUUID(), observedAt: new Date().toISOString() });
             this.opts.observer?.signal(false);
         }
@@ -586,7 +729,8 @@ export class ClaudeAdapter {
                     cwd: this.opts.cwd,
                     diagnostics: rawDiagnostics,
                 } : undefined;
-            const result = {
+            this.queryBudget?.record(msg.total_cost_usd);
+            let result = {
                 text: failure ? formatClaudeFailure(failure) : text,
                 isError: msg.is_error,
                 numTurns: msg.num_turns,
@@ -599,8 +743,21 @@ export class ClaudeAdapter {
                 rawResponse: text,
                 cleanedResponse: failure ? formatClaudeFailure(failure) : text,
                 providerMetadata: { provider: "claude", sessionId: this._sessionId, sessionRef: this._sessionRef },
+                ...(this.activeTurnPolicy?.selectedDispatch ? { selectedDispatch: this.activeTurnPolicy.selectedDispatch } : {}),
             };
             const rawResult = msg;
+            if (this.output) {
+                const selectedDispatch = this.activeTurnPolicy?.selectedDispatch;
+                if (!selectedDispatch || !this._sessionId)
+                    throw new Error("Structured terminal lost its sealed dispatch tuple or session");
+                result = { ...result, selectedDispatch, structured: msg.subtype !== "success" || msg.is_error || this.responseOnlyViolation
+                        ? { state: "rejected", reason: this.responseOnlyViolation ? "tool-policy-violation" : "execution-not-completed", detail: `Claude terminal ${msg.subtype}`, dispatchId: result.turnId }
+                        : !this.outputWireContract || !this.activeTurnPolicy?.selectedDispatch
+                            ? { state: "rejected", reason: "invalid-contract", detail: "Claude structured turn has no sealed descriptor or tuple", dispatchId: result.turnId }
+                            : structuredReceipt(this.output, "claude", rawResult.structured_output, { dispatchId: result.turnId, sessionId: this._sessionId, nativeTurnId: typeof rawResult.uuid === "string" ? rawResult.uuid : undefined }, "decoded-json", this.outputWireContract, this.activeTurnPolicy.selectedDispatch) };
+                if (result.structured.state === "rejected")
+                    result.isError = true;
+            }
             const mergedUsage = mergeClaudeProviderSessionUsage(this.cumulativeUsage, rawResult);
             result.inputTokens = mergedUsage.inputTokens;
             result.outputTokens = mergedUsage.outputTokens;
@@ -616,11 +773,30 @@ export class ClaudeAdapter {
         }
     }
     async sendTurn(text, policy) {
-        if (this.pending)
+        if (this.pending || this.configuringTurn)
             throw new Error("a turn is already in progress");
+        if (policy?.output)
+            assertActiveProviderDispatch(policy, text, "claude", this.sessionRef());
+        this.configuringTurn = true;
+        try {
+            const selected = policy?.output ? policy.wireContract ?? providerWireContract(policy.output, "claude", "default", { requireRegistered: true }) : undefined;
+            if (selected && policy?.renderedWireContractDigest && policy.renderedWireContractDigest !== selected.descriptorDigest)
+                throw new Error("Claude received mismatched rendered wire guidance");
+            if (selected) {
+                text = renderProviderWireInstruction(text, selected);
+                policy = { ...policy, wireContract: selected, renderedWireContractDigest: selected.descriptorDigest };
+            }
+            if (policy?.output?.schemaDigest !== this.output?.schemaDigest || policy?.output?.operation !== this.output?.operation || selected?.descriptorDigest !== this.outputWireContract?.descriptorDigest)
+                await this.configureOutput(policy?.output, selected);
+        }
+        finally {
+            this.configuringTurn = false;
+        }
+        this.responseOnlyViolation = false;
+        this.activeTurnPolicy = policy;
         this.responseOnlyTurn = Boolean(policy?.responseOnly);
         this.phaseBarrier.begin(policy?.purpose ?? (policy?.responseOnly ? "response-repair" : "implementation"));
-        const turnId = randomUUID();
+        const turnId = policy?.dispatchId ?? randomUUID();
         this.activeProviderTurnId = turnId;
         const observer = this.opts.observer;
         if (!observer) {
@@ -663,7 +839,7 @@ export class ClaudeAdapter {
         if (this.opts.fast)
             await this.prepareFastMode();
         const result = await this.sendTurnAttempt(text);
-        if (result.isError && this.fastModeEnabled && !this.turnSawWork && isFastModeUnavailable(result.rawResponse ?? result.text) && !this.streamEnded) {
+        if (!this.output && result.isError && this.fastModeEnabled && !this.turnSawWork && isFastModeUnavailable(result.rawResponse ?? result.text) && !this.streamEnded) {
             await this.disableFastMode();
             return this.sendTurnAttempt(text);
         }
@@ -712,9 +888,9 @@ export class ClaudeAdapter {
         for (const block of body.content) {
             if (block.type !== "tool_result")
                 continue;
-            this.eventQueue.push({ kind: "provider-item", provider: "claude", lifecycle: "completed", itemType: "tool_result", payload: structuredClone(block), payloadCompleteness: "complete", providerTurnId: this.activeProviderTurnId, eventId: randomUUID(), observedAt: new Date().toISOString() });
+            this.eventQueue.push({ kind: "provider-item", provider: "claude", lifecycle: "completed", itemType: typeof block.tool_use_id === "string" && this.structuredSubmissionIds.has(block.tool_use_id) ? "structuredOutput" : "tool_result", payload: structuredClone(block), payloadCompleteness: "complete", providerTurnId: this.activeProviderTurnId, eventId: randomUUID(), observedAt: new Date().toISOString() });
             const callId = typeof block.tool_use_id === "string" ? block.tool_use_id : undefined;
-            if (!callId)
+            if (!callId || this.structuredSubmissionIds.has(callId))
                 continue;
             if (this.completedToolCalls.has(callId))
                 continue;
@@ -735,11 +911,15 @@ export class ClaudeAdapter {
                         : failed && /cancel(?:led|ed)/i.test(text) ? "cancelled"
                             : failed && /permission denied/i.test(text) ? "permission_denied"
                                 : failed && /not found/i.test(text) ? "not_found"
-                                    : failed && /\b(?:exit(?:ed)?|status)\s+[1-9]\d*\b/i.test(text) ? "nonzero_exit"
-                                        : failed && /\b(?:failed|error|exception)\b/i.test(text) ? "explicit_error"
-                                            : failed ? "unexplained_error"
-                                                : "completed";
-            const status = resultReason === "host_policy_denied" ? "denied" : resultReason === "timeout" ? "timed_out" : resultReason === "cancelled" ? "cancelled" : ["permission_denied", "not_found", "nonzero_exit", "explicit_error"].includes(resultReason) ? "failed" : resultReason === "completed" ? "completed" : "unknown";
+                                    // Claude's Read tool explicitly reports its size guard this
+                                    // way. It is a terminal, observed rejection, not a
+                                    // provisional transport error that might later complete.
+                                    : failed && /\b(?:content|file)\b[\s\S]{0,160}\bexceeds\s+(?:the\s+)?maximum\s+allowed\s+tokens\b/i.test(text) ? "output_limit"
+                                        : failed && /\b(?:exit(?:ed)?|status)\s+[1-9]\d*\b/i.test(text) ? "nonzero_exit"
+                                            : failed && /\b(?:failed|error|exception)\b/i.test(text) ? "explicit_error"
+                                                : failed ? "unexplained_error"
+                                                    : "completed";
+            const status = resultReason === "host_policy_denied" ? "denied" : resultReason === "timeout" ? "timed_out" : resultReason === "cancelled" ? "cancelled" : ["permission_denied", "not_found", "output_limit", "nonzero_exit", "explicit_error"].includes(resultReason) ? "failed" : resultReason === "completed" ? "completed" : "unknown";
             if (status !== "unknown") {
                 this.completedToolCalls.add(callId);
                 if (this.completedToolCalls.size > 1000)
@@ -795,6 +975,7 @@ export class ClaudeAdapter {
                     // Require an advertised built-in local command; never substitute a
                     // model-generated warm-up for QA's pre-dispatch identity validation.
                     if (commands.some(command => command.name === "context" && "builtin" in command && command.builtin === true)) {
+                        providerControlOperationV2("claude", "/context");
                         this.opts.onLifecycleTrace?.({ phase: "local-context-initialization-start", at: new Date().toISOString() });
                         const result = await this.sendTurn("/context", { responseOnly: true });
                         this.opts.onLifecycleTrace?.({ phase: "local-context-initialization-complete", at: new Date().toISOString() });
@@ -807,7 +988,11 @@ export class ClaudeAdapter {
                 }
                 return this.sessionIdentityReady;
             };
-            const ref = await Promise.race([prepare(), interrupted]);
+            const ready = await Promise.race([prepare(), interrupted]);
+            // The identity promise resolves once. A host may later adopt a new scope
+            // for the same conversation (for example a handoff generation), so the
+            // prepared session is the adapter's current reference, as for Codex.
+            const ref = this._sessionRef?.sessionId === ready.sessionId ? this._sessionRef : ready;
             if (!ref.validatedAt)
                 throw new Error("Claude session identity was not provider-validated during initialization");
             return ref;
@@ -857,6 +1042,7 @@ export class ClaudeAdapter {
         }
     }
     async compactInternal() {
+        providerControlOperationV2("claude", "/compact");
         this.compactResult = undefined;
         this.manualCompactionInFlight = true;
         const normalMs = Math.min(180_000, Math.max(1, this.opts.compactionTimeoutMs ?? 120_000));
@@ -898,7 +1084,9 @@ export class ClaudeAdapter {
         // queue, including a later local command. Establish identity first.
         if (!this.providerIdentityObserved && typeof this.query.supportedCommands === "function")
             await this.prepareSession();
+        providerControlOperationV2("claude", "applyFlagSettings");
         await new OperationDeadline("Claude settings", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.applyFlagSettings({ autoCompactEnabled: true }));
+        providerControlOperationV2("claude", "getContextUsage");
         const baseline = await new OperationDeadline("Claude context usage", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.getContextUsage());
         if (!Number.isFinite(baseline.maxTokens) || baseline.maxTokens <= 0
             || !Number.isFinite(baseline.autoCompactThreshold) || baseline.autoCompactThreshold === undefined
@@ -912,7 +1100,9 @@ export class ClaudeAdapter {
         if (reserve < 0)
             throw new Error("Claude reported an invalid automatic-compaction reserve");
         const requestedWindow = tokenLimit(baseline.maxTokens, threshold) + reserve;
+        providerControlOperationV2("claude", "applyFlagSettings");
         await new OperationDeadline("Claude settings", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.applyFlagSettings({ autoCompactEnabled: true, autoCompactWindow: requestedWindow }));
+        providerControlOperationV2("claude", "getContextUsage");
         const installed = await new OperationDeadline("Claude context usage", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.getContextUsage());
         if (!installed.isAutoCompactEnabled || !Number.isFinite(installed.maxTokens) || installed.maxTokens <= 0
             || !Number.isFinite(installed.autoCompactThreshold) || installed.autoCompactThreshold === undefined) {
@@ -942,6 +1132,7 @@ export class ClaudeAdapter {
     restoreNativeCompactions(compactions) { this.nativeCompactions.unshift(...compactions); }
     async contextUsage() {
         try {
+            providerControlOperationV2("claude", "getContextUsage");
             const usage = await new OperationDeadline("Claude context usage", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.getContextUsage());
             const result = { used: usage.totalTokens, maximum: usage.maxTokens, percentage: usage.percentage, observedAt: new Date().toISOString(), source: "provider-query" };
             this.eventQueue.push({ kind: "context-usage", ...result });
@@ -959,14 +1150,21 @@ export class ClaudeAdapter {
             return { ok: false, error: "Claude SDK cannot change reasoning/fast controls on an existing transport" };
         if (settings.model === this.opts.model)
             return { ok: true };
+        providerControlOperationV2("claude", "/model");
+        if (settings.model && /[\r\n]/.test(settings.model))
+            return { ok: false, error: "Model control requires one model identifier" };
         if (this.opts.fast)
             await this.prepareFastMode();
+        if (this.fastModeEnabled)
+            providerControlOperationV2("claude", "applyFlagSettings");
         if (this.fastModeEnabled)
             await new OperationDeadline("Claude standard speed", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.query.applyFlagSettings({ fastMode: false }));
         this.fastModeEnabled = false;
         const result = await new OperationDeadline("Claude model settings", this.opts.rpcTimeoutMs ?? 60_000).run(() => this.sendTurn(`/model ${settings.model ?? "default"}`), () => this.abort.abort());
         if (result.isError)
             return { ok: false, error: result.text, ...(result.failure ? { failure: result.failure } : {}) };
+        if (result.numTurns !== 0 || result.structured)
+            return { ok: false, error: "Model control did not complete as a non-authoritative provider acknowledgement" };
         this.opts.model = settings.model;
         this.fastModePrepared = undefined;
         this.fastModeUnavailable = false;
@@ -995,8 +1193,15 @@ export class ClaudeAdapter {
         catch {
             // interrupt is best-effort — ignore if no turn is active
         }
-        this.query.close?.();
-        await new OperationDeadline("Claude shutdown", this.opts.shutdownTimeoutMs ?? 10_000).run(() => this.pumpDone).catch(() => { });
+        try {
+            this.query.close?.();
+            await new OperationDeadline("Claude shutdown", this.opts.shutdownTimeoutMs ?? 10_000).run(() => this.pumpDone).catch(() => { });
+        }
+        finally {
+            this.finishQueryBudget();
+            if (this.scratchDirectory)
+                rmSync(this.scratchDirectory, { recursive: true, force: true });
+        }
     }
     failSessionIdentity(error) {
         this.rejectSessionIdentity(error);
@@ -1137,7 +1342,7 @@ export class ClaudeAdapter {
         pending.idleTimer.unref();
     }
     providerIdleTimeoutMs() {
-        const configured = this.opts.providerIdleTimeoutMs;
+        const configured = this.opts.providerIdleTimeoutMs ?? Number(process.env.RAFI_PROVIDER_IDLE_TIMEOUT_MS);
         return Number.isFinite(configured) && configured > 0 ? configured : DEFAULT_PROVIDER_IDLE_TIMEOUT_MS;
     }
     streamFailureResult(message, sessionUnavailable) {