chainlesschain 0.166.14 → 0.166.16

package/src/commands/learning.js

@@ -8,6 +8,56 @@ import ora from "ora";
 import { logger } from "../lib/logger.js";
 import { bootstrap, shutdown } from "../runtime/bootstrap.js";
 
+export function classifySynthesisResult(result) {
+  if (result?.status === "unavailable") {
+    return {
+      kind: "unavailable",
+      exitCode: 1,
+      message: result.reason || "Synthesis dependencies unavailable",
+      jsonResult: result,
+    };
+  }
+  if (result?.status === "error") {
+    return {
+      kind: "failed",
+      exitCode: 1,
+      message:
+        result.reason ||
+        (Array.isArray(result.errors) && result.errors.length > 0
+          ? result.errors.join("; ")
+          : "Synthesis failed"),
+      jsonResult: result,
+    };
+  }
+  const wellFormedCompletion =
+    result?.status === "completed" &&
+    Array.isArray(result.created) &&
+    Array.isArray(result.skipped) &&
+    (!Object.hasOwn(result, "errors") ||
+      (Array.isArray(result.errors) && result.errors.length === 0));
+  if (wellFormedCompletion) {
+    return {
+      kind: "completed",
+      exitCode: 0,
+      message: null,
+      jsonResult: result,
+    };
+  }
+  const invalidResult = {
+    status: "error",
+    code: "LEARNING_SYNTHESIS_INVALID_RESULT",
+    reason: "Synthesis returned an invalid or unknown result",
+    created: [],
+    skipped: [],
+  };
+  return {
+    kind: "failed",
+    exitCode: 1,
+    message: invalidResult.reason,
+    jsonResult: invalidResult,
+  };
+}
+
 export function registerLearningCommand(program) {
   const learning = program
     .command("learning")
@@ -271,6 +321,24 @@ export function registerLearningCommand(program) {
 
         const spinner = ora("Scanning for synthesizable patterns...").start();
         const result = await synthesizer.synthesize();
+        const outcome = classifySynthesisResult(result);
+
+        if (outcome.exitCode !== 0) {
+          spinner.fail(
+            outcome.kind === "unavailable"
+              ? "Synthesis unavailable"
+              : "Synthesis failed",
+          );
+          if (options.json) {
+            console.log(JSON.stringify(outcome.jsonResult, null, 2));
+          } else {
+            logger.error(outcome.message);
+          }
+          await shutdown();
+          process.exitCode = outcome.exitCode;
+          return;
+        }
+
         spinner.succeed("Synthesis complete");
 
         if (options.json) {
@@ -278,7 +346,9 @@ export function registerLearningCommand(program) {
         } else {
           if (result.created.length > 0) {
             logger.log(
-              chalk.green(`Created ${result.created.length} skill(s):`),
+              chalk.green(
+                `Created ${result.created.length} candidate skill(s):`,
+              ),
             );
             for (const name of result.created) {
               logger.log(`  ${chalk.cyan(name)}`);

package/src/commands/team.js

@@ -74,6 +74,12 @@ import {
   SecureFileIdentityError,
   withTrustedFileParentSync,
 } from "../lib/secure-file-identity.js";
+import {
+  FORMAL_QUALITY_ALLOWED_FILES_ENV,
+  formalQualityChildEnvironment,
+  formalQualityTaskAllowedFiles,
+  isFormalQualityHermeticRuntime,
+} from "../lib/formal-quality-eval-runtime.js";
 
 export const _deps = {
   spawn: (...args) => executionBroker.spawn(...args),
@@ -788,6 +794,35 @@ export function buildTeamAgentPrompt(prompt, { inbox = [] } = {}) {
   ].join("\n");
 }
 
+export function formalQualityAgentWorkingDirectory(
+  worktreeRoot,
+  task,
+  environment = process.env,
+) {
+  const root = path.resolve(worktreeRoot);
+  if (!isFormalQualityHermeticRuntime(environment)) return root;
+  const scopes = task?.metadata?.scopePaths;
+  if (!Array.isArray(scopes) || scopes.length !== 1) {
+    throw new Error(
+      "Formal quality teammate requires exactly one declared scopePath",
+    );
+  }
+  const scoped = path.resolve(root, String(scopes[0] || ""));
+  const relation = path.relative(root, scoped);
+  if (
+    !relation ||
+    relation === ".." ||
+    relation.startsWith(`..${path.sep}`) ||
+    path.isAbsolute(relation) ||
+    !fs.statSync(scoped).isDirectory()
+  ) {
+    throw new Error(
+      "Formal quality teammate scopePath must resolve to an existing worktree subdirectory",
+    );
+  }
+  return scoped;
+}
+
 function normalizePermissionMode(value) {
   const mode = String(value || "acceptEdits");
   const allowed = new Set([
@@ -876,6 +911,19 @@ export function loadRegistry(file, { ttlMs } = {}) {
         `task "${task.key}" scopePaths must be an array of at most 128 paths`,
       );
     }
+    if (
+      task.formalQualityAllowedFiles !== undefined &&
+      (!Array.isArray(task.formalQualityAllowedFiles) ||
+        task.formalQualityAllowedFiles.length === 0 ||
+        task.formalQualityAllowedFiles.length > 16 ||
+        task.formalQualityAllowedFiles.some(
+          (file) => typeof file !== "string" || file.length === 0,
+        ))
+    ) {
+      throw new Error(
+        `task "${task.key}" formalQualityAllowedFiles must be a non-empty array of at most 16 paths`,
+      );
+    }
     for (const field of ["command", "prompt"]) {
       if (task[field] !== undefined && typeof task[field] !== "string") {
         throw new Error(`task "${task.key}" ${field} must be a string`);
@@ -921,6 +969,9 @@ export function loadRegistry(file, { ttlMs } = {}) {
         agent: t.agent || null,
         policy: t.policy || null,
         scopePaths: Array.isArray(t.scopePaths) ? t.scopePaths : [],
+        formalQualityAllowedFiles: Array.isArray(t.formalQualityAllowedFiles)
+          ? t.formalQualityAllowedFiles
+          : [],
         idempotencyKey: t.idempotencyKey || null,
         retrySafe: t.retrySafe === true,
         sparsePaths: t.sparsePaths || null,
@@ -1078,6 +1129,7 @@ export function makeShellRunTask() {
 /** Spawn a headless `cc agent -p` for one prompt in `cwd`; resolve on exit 0. */
 function spawnAgentProcess(prompt, cwd, opts = {}) {
   return new Promise((resolve, reject) => {
+    const formalQualityHermetic = isFormalQualityHermeticRuntime(process.env);
     const parser = new TeamAgentStreamParser({
       maxLineBytes: opts.maxStreamLineBytes,
       maxTotalBytes: opts.maxStreamTotalBytes,
@@ -1091,7 +1143,23 @@ function spawnAgentProcess(prompt, cwd, opts = {}) {
       "stream-json",
     ];
     if (opts.model) args.push("--model", opts.model);
-    if (opts.sessionId) args.push("--session", opts.sessionId);
+    if (opts.sessionId && !formalQualityHermetic) {
+      args.push("--session", opts.sessionId);
+    }
+    if (formalQualityHermetic) {
+      args.push(
+        "--ephemeral",
+        "--bare",
+        "--no-checkpoint",
+        "--output-style",
+        "concise",
+        "--allowed-tools",
+        "read_file,list_dir,search_files,write_file,edit_file,edit_file_hashed",
+      );
+    }
+    if (opts.sandboxMode) {
+      args.push("--sandbox-mode", opts.sandboxMode);
+    }
     if (opts.checkpointRequired === true) args.push("--checkpoint");
     if (Number(opts.maxTurns) > 0) {
       args.push("--max-turns", String(opts.maxTurns));
@@ -1377,7 +1445,9 @@ function spawnAgentProcess(prompt, cwd, opts = {}) {
 }
 
 export function spawnAgent(prompt, cwd, opts = {}) {
-  if (!opts.messageBridge) return spawnAgentProcess(prompt, cwd, opts);
+  if (!opts.messageBridge || isFormalQualityHermeticRuntime(process.env)) {
+    return spawnAgentProcess(prompt, cwd, opts);
+  }
   return (async () => {
     let bridge;
     try {
@@ -1456,6 +1526,7 @@ export function makeAgentRunTask(opts = {}) {
     );
     return spawnAgent(buildTeamAgentPrompt(prompt, { inbox }), process.cwd(), {
       ...effectiveContract,
+      sandboxMode: opts.sandboxMode,
       sessionId: opts.sessionIdForTask?.(key, task) || null,
       signal,
       ...(mailbox && holder
@@ -2001,6 +2072,10 @@ export function registerTeamCommand(program, { logger } = {}) {
     .option("--agent-max-turns <n>", "Per-agent task turn cap")
     .option("--agent-max-budget-usd <amount>", "Per-agent task cost cap")
     .option("--agent-max-tokens <n>", "Per-agent task token cap")
+    .option(
+      "--agent-sandbox-mode <mode>",
+      "Sandbox posture for each --agent task: off | workspace-write | strict",
+    )
     .option(
       "--agent-max-wall <seconds>",
       "Per-agent task wall-clock cap in seconds",
@@ -2799,6 +2874,10 @@ export function registerTeamCommand(program, { logger } = {}) {
             }),
             graphAuthorityMode,
             graphAuthority: graphRuntime?.status() || null,
+            graphTraceProjection:
+              graphRuntime?.status()?.phase === "open"
+                ? null
+                : graphRuntime?.traceProjection() || null,
             graphShadowDivergences: [...shadowDivergences],
           });
         };
@@ -2907,9 +2986,16 @@ export function registerTeamCommand(program, { logger } = {}) {
                   taskContractFor(key, task),
                   budgetReservation,
                 );
+                const agentCwd = formalQualityAgentWorkingDirectory(cwd, task);
+                const formalAllowedFiles = formalQualityTaskAllowedFiles(
+                  task.metadata?.formalQualityAllowedFiles,
+                );
+                const formalChildEnvironment = formalAllowedFiles
+                  ? formalQualityChildEnvironment(key)
+                  : null;
                 return spawnAgent(
                   buildTeamAgentPrompt(prompt, { inbox }),
-                  cwd,
+                  agentCwd,
                   {
                     ...contract,
                     // The outer worktree transaction is the workspace
@@ -2919,6 +3005,16 @@ export function registerTeamCommand(program, { logger } = {}) {
                       ? false
                       : contract.checkpointRequired,
                     managedCheckpoint,
+                    sandboxMode: options.agentSandboxMode,
+                    ...(formalAllowedFiles
+                      ? {
+                          childEnv: {
+                            ...formalChildEnvironment,
+                            [FORMAL_QUALITY_ALLOWED_FILES_ENV]:
+                              JSON.stringify(formalAllowedFiles),
+                          },
+                        }
+                      : {}),
                     sessionId: collaborationUnits.get(
                       sessionTaskKeyFor(key, task),
                     )?.sessionId,
@@ -2961,6 +3057,7 @@ export function registerTeamCommand(program, { logger } = {}) {
               collaborationUnits.get(sessionTaskKeyFor(key, task))?.sessionId,
             onMailboxMutation: persist,
             mailboxDurable: Boolean(options.state),
+            sandboxMode: options.agentSandboxMode,
           });
         else runTask = async () => ({ dryRun: true });
 

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.16",
+      "cliVersions": ["0.166.15", "0.166.16"],
+      "date": "2026-09-01",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.16: harden evidence and release gates",
+          "body": "> `chainlesschain` **0.166.15 -> 0.166.16** (release candidate,\n> 2026-09-01).\n\n- **Authenticated evidence consumption**: protected qualification and Graph\n  production consumers bind artifacts to the selected repository, workflow\n  run, and exact commit, reject stale or unsigned producer runs, and keep\n  GitHub API response bodies bounded.\n- **Cross-platform CI stability**: CLI and evidence matrices use the same\n  pinned Node.js `22.22.2` runtime, the workflow lint gate uses a pinned\n  `actionlint`, and the Windows P1 helper allows a wider outer cold-start\n  budget without weakening the verifier's exact inner timeout contract.\n- **Exact RC runtime contract**: the release-candidate audit now requires the\n  same Node.js `v22.22.2` runtime used by the workflows, and a unit assertion\n  pins that value so future workflow/verifier drift fails closed.\n- **Large-team scheduling throughput**: priority inheritance stays cached\n  across lease-only state transitions and is invalidated when priority or\n  cancellation semantics change, so the 10,000-task / 64-worker qualification\n  completes within the cross-platform budget without weakening donation or\n  dependency ordering.\n- **Audited JetBrains steady-state qualification**: the real-host gate retains\n  40–75 readiness lifecycle samples and a stable quiescence proof before the\n  governed 100-sample distribution. The `needs_input` P95 threshold remains\n  strictly below 2 seconds, and both readiness and measured cycles remain bound\n  to the exact fixture ledger.\n- **Canonical registry roots across host path aliases**: candidate and release\n  registries canonicalize an existing ancestor alias while binding the created\n  non-link leaf by filesystem identity. Leaf links and parent escapes remain\n  rejected, and marketplace upgrade tests still prohibit candidate artifact\n  fetches on every fail-closed validation path.\n- **Release and evidence boundary**: this candidate is not yet published;\n  publication still requires the exact release commit to pass the configured\n  Linux, Windows, and macOS release workflows. External P1 production rollout,\n  protected-run, and trust-root evidence remains open and is not claimed by\n  this source release."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.15",
+      "cliVersions": ["0.166.14", "0.166.15"],
+      "date": "2026-08-31",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.15: align the formal quality file-tool ceiling",
+          "body": "> `chainlesschain` **0.166.14 -> 0.166.15**, published 2026-08-31 from exact\n> commit `22db04f55974d2e5823772c4bae5e87171fa51db` under immutable tag\n> `v-npm-0-166-15`.\n\n- **Formal quality startup restored**: the exact hermetic file-tool ceiling now\n  admits the same read, list, search, write, and edit tools exposed by the\n  protected single-Agent and Graph candidate harness, so all platforms can\n  advance past preflight into the real-model evaluation.\n- **One canonical tool contract**: the headless runtime and formal quality\n  producer consume one frozen tool list, while the agent-loop regression proves\n  the complete list remains inside the fail-closed exact mutation boundary.\n- **No shell or network widening**: `run_shell`, `run_code`, Git, MCP, plugin,\n  IDE, and sub-agent tools remain unavailable; writes are still limited to the\n  task's exact allowed files.\n- **Release and quality boundary**: the exact release commit passed CLI CI and\n  CLI Strict Sandbox on Linux, Windows, and macOS, then completed npm OIDC\n  publication and independent registry/provenance readback. The post-release\n  quality decision below does not change those artifact bytes or their evidence\n  identity.\n- **Post-release Windows evidence**: `main@458b342f5f` freezes the Windows\n  candidate latency-ratio ceiling at `1.65`; Linux, macOS, and the aggregate\n  remain at `1.5`. Exact run `33411796790`, pinned to `db53dc2da4`, passed\n  Linux, macOS, and all three platforms' functional/security metrics, but its\n  Windows ratio was `1.6379980224` against the then-current `1.6` ceiling, so\n  the run, workflow aggregate, and OIDC attestation did not succeed. The\n  offline weighted three-platform aggregate was `0.6008293973 < 1.5`.\n- **P2-3 accepted-risk closure**: after final threshold commit `917d18b055`,\n  the release owner explicitly accepted the residual risk of no rerun and no\n  final-SHA aggregate/OIDC evidence and closed P2-3. This does not rewrite the\n  failed run as successful, is not part of the `0.166.15` artifact, and is not\n  a general precedent for release gates."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.14",
@@ -10,7 +36,7 @@
       "sections": [
         {
           "heading": "Fixed - cc CLI 0.166.14: restore Docker-optional startup on Windows",
-          "body": "> `chainlesschain` **0.166.13 -> 0.166.14** (hotfix candidate, 2026-08-30).\n\n- **Docker remains opt-in**: a normal agent session no longer probes or\n  requires Docker unless the CLI flag, settings, or managed policy explicitly\n  selects container isolation.\n- **Windows executable lookup**: bare commands resolve through `PATHEXT`\n  before launch, so Docker Desktop's POSIX `docker` script cannot shadow\n  `docker.exe` and trigger `CreateProcessAsUser` error 193.\n- **Explicit isolation stays fail-closed**: `workspace-write`, `strict`, and\n  managed sandbox requirements still reject unavailable engines instead of\n  silently degrading."
+          "body": "> `chainlesschain` **0.166.13 -> 0.166.14**, published 2026-08-30 from exact\n> commit `ee88125256b5de8281be0a8e57157811bb80c105` under immutable tag\n> `v-npm-0-166-14`.\n\n- **Docker remains opt-in**: a normal agent session no longer probes or\n  requires Docker unless the CLI flag, settings, or managed policy explicitly\n  selects container isolation.\n- **Windows executable lookup**: bare commands resolve through `PATHEXT`\n  before launch, so Docker Desktop's POSIX `docker` script cannot shadow\n  `docker.exe` and trigger `CreateProcessAsUser` error 193.\n- **Explicit isolation stays fail-closed**: `workspace-write`, `strict`, and\n  managed sandbox requirements still reject unavailable engines instead of\n  silently degrading.\n- **Release validation**: the exact release commit passed every configured\n  Linux, Windows, and macOS job in `CLI CI` and `CLI Strict Sandbox`, then\n  completed npm Trusted Publishing and public-registry readback. This was the\n  public CLI baseline and is now superseded by `0.166.15`; later source-only\n  Graph/Team quality evidence retains its own exact-commit boundary."
         }
       ]
     },
@@ -23,7 +49,7 @@
       "sections": [
         {
           "heading": "Fixed - cc CLI 0.166.13 and Session Core 0.3.8: fail-closed P0 security closure",
-          "body": "> `chainlesschain` **0.166.12 -> 0.166.13** and Session Core\n> **0.3.7 -> 0.3.8** (release candidates, 2026-08-30).\n\n- **Fixed renderer IPC capabilities**: remove the environment-controlled\n  generic bridge bypass and generate an exact renderer/main capability\n  manifest that fails the Desktop build when it drifts.\n- **Default sandbox and approval boundary**: restore workspace-write with\n  network disabled as the CLI default, deny shell execution when the approval\n  gate is unavailable, and fail closed when approval policy loading or\n  persistence fails.\n- **Durable process audit**: require a persistent, redacted admission record\n  before high-risk process creation and retain bounded actor, session,\n  authorization, policy, sandbox, and result context.\n- **Release boundary**: these versions identify the source candidates for the\n  security fixes; publication still requires the exact candidate to pass the\n  repository's Linux, Windows, and macOS release matrices."
+          "body": "> `chainlesschain` **0.166.12 -> 0.166.13** and Session Core\n> **0.3.7 -> 0.3.8**, published 2026-08-30; the CLI release commit is\n> `d44374e576e5426eb419537bef15ae83385daf05` under immutable tag\n> `v-npm-0-166-13` and is superseded by public CLI `0.166.14`.\n\n- **Fixed renderer IPC capabilities**: remove the environment-controlled\n  generic bridge bypass and generate an exact renderer/main capability\n  manifest that fails the Desktop build when it drifts.\n- **Default sandbox and approval boundary**: restore workspace-write with\n  network disabled as the CLI default, deny shell execution when the approval\n  gate is unavailable, and fail closed when approval policy loading or\n  persistence fails.\n- **Durable process audit**: require a persistent, redacted admission record\n  before high-risk process creation and retain bounded actor, session,\n  authorization, policy, sandbox, and result context.\n- **Release boundary**: these versions closed the P0 execution-security fixes;\n  CLI `0.166.14` retains the same boundary while adding the Windows\n  Docker-optional startup repair."
         }
       ]
     },
@@ -36,7 +62,7 @@
       "sections": [
         {
           "heading": "Added - cc CLI 0.166.12: durable rollout storage and converged Hooks v2",
-          "body": "> `chainlesschain` **0.166.10 -> 0.166.12** (release candidate,\n> 2026-08-30). The immutable `0.166.11` candidate was withheld after its npm\n> workflow could not bootstrap the new scoped runtime dependency; its tag is\n> not reused. Coordinated candidates are Context/Memory Kernel `0.1.0`,\n> Session Core `0.3.7`, Agent Protocol `0.1.7`, TypeScript Agent SDK `0.2.7`,\n> Python Agent SDK `0.2.7`, VS Code `0.37.75`, and JetBrains `0.4.105`.\n\n- **Canonical context planning**: ship deterministic budget allocation,\n  compaction, memory reducers, inventory validation, and cross-surface\n  conformance through `@chainlesschain/context-memory-kernel`.\n- **Durable memory cutover**: route CLI context, compaction, hierarchical\n  memory, App Server, WebSocket, REPL, and session flows through fail-closed\n  authority stages with crash-safe persistence and privacy purge receipts;\n  Session Core `0.3.7` exposes the write guard used to fence legacy writers.\n- **Protocol and SDK projections**: add bounded Context/Memory messages and App\n  Server pilot clients to the generated Agent Protocol, TypeScript SDK, Python\n  SDK, VS Code extension, and JetBrains plugin without granting IDE surfaces\n  independent write authority.\n- **Durable rollout stores**: converge App Server, WebSocket, and CLI entry\n  points on bounded memory, JSON, or SQLite rollout stores with explicit\n  selection, migration, recovery, and corruption handling.\n- **Hooks v2 convergence**: route CLI, REPL, headless, settings, plugins, and\n  App Server through one trust-aware event runtime with deterministic ordering,\n  audit replay, timeout supervision, and fail-closed decision semantics.\n- **Release integrity**: publish the new fixed CLI runtime dependency before\n  the immutable CLI tarball, then verify its registry bytes and npm provenance\n  against the exact release tag and commit."
+          "body": "> `chainlesschain` **0.166.10 -> 0.166.12** (2026-08-30 capability baseline,\n> now included in public `0.166.14`). The immutable `0.166.11` candidate was withheld after its npm\n> workflow could not bootstrap the new scoped runtime dependency; its tag is\n> not reused. Coordinated candidates are Context/Memory Kernel `0.1.0`,\n> Session Core `0.3.7`, Agent Protocol `0.1.7`, TypeScript Agent SDK `0.2.7`,\n> Python Agent SDK `0.2.7`, VS Code `0.37.75`, and JetBrains `0.4.105`.\n\n- **Canonical context planning**: ship deterministic budget allocation,\n  compaction, memory reducers, inventory validation, and cross-surface\n  conformance through `@chainlesschain/context-memory-kernel`.\n- **Durable memory cutover**: route CLI context, compaction, hierarchical\n  memory, App Server, WebSocket, REPL, and session flows through fail-closed\n  authority stages with crash-safe persistence and privacy purge receipts;\n  Session Core `0.3.7` exposes the write guard used to fence legacy writers.\n- **Protocol and SDK projections**: add bounded Context/Memory messages and App\n  Server pilot clients to the generated Agent Protocol, TypeScript SDK, Python\n  SDK, VS Code extension, and JetBrains plugin without granting IDE surfaces\n  independent write authority.\n- **Durable rollout stores**: converge App Server, WebSocket, and CLI entry\n  points on bounded memory, JSON, or SQLite rollout stores with explicit\n  selection, migration, recovery, and corruption handling.\n- **Hooks v2 convergence**: route CLI, REPL, headless, settings, plugins, and\n  App Server through one trust-aware event runtime with deterministic ordering,\n  audit replay, timeout supervision, and fail-closed decision semantics.\n- **Release integrity**: publish the new fixed CLI runtime dependency before\n  the immutable CLI tarball, then verify its registry bytes and npm provenance\n  against the exact release tag and commit."
         }
       ]
     },

package/src/harness/worktree-isolator.js

@@ -173,7 +173,7 @@ function parseRegisteredWorktrees(output) {
 
 function readRegisteredWorktrees(repoDir) {
   return parseRegisteredWorktrees(
-    gitExec("worktree list --porcelain", repoDir),
+    gitExecArgs(["worktree", "list", "--porcelain"], repoDir),
   );
 }
 
@@ -251,10 +251,16 @@ function assertNoSymlinkAncestors(root, target, label) {
   }
 }
 
+function managedWorktreePathFromContext(context, branchName) {
+  return resolve(context.managedRoot, branchName.replace(/\//g, "-"));
+}
+
 export function managedWorktreePath(repoDir, branchName) {
   assertSafeGitRef(branchName, "branch name");
-  const { managedRoot } = repositoryManagementContext(repoDir);
-  return resolve(managedRoot, branchName.replace(/\//g, "-"));
+  return managedWorktreePathFromContext(
+    repositoryManagementContext(repoDir),
+    branchName,
+  );
 }
 
 /**
@@ -262,10 +268,11 @@ export function managedWorktreePath(repoDir, branchName) {
  * removal. Managed worktrees are direct children of `<repo>/.worktrees` and,
  * when a branch is known, have exactly the deterministic path created for it.
  */
-export function assertManagedWorktreePath(
+function assertManagedWorktreePathWithContext(
   repoDir,
   worktreePath,
   { branchName = null } = {},
+  context,
 ) {
   if (
     typeof repoDir !== "string" ||
@@ -280,7 +287,6 @@ export function assertManagedWorktreePath(
     assertSafeGitRef(branchName, "branch name");
   }
 
-  const context = repositoryManagementContext(repoDir);
   const candidate = resolve(worktreePath);
   const candidatePath = canonicalExistingPrefixPath(candidate);
   const candidateIdentity = normalizeFilesystemPath(candidatePath);
@@ -335,6 +341,19 @@ export function assertManagedWorktreePath(
   return candidatePath;
 }
 
+export function assertManagedWorktreePath(
+  repoDir,
+  worktreePath,
+  options = {},
+) {
+  return assertManagedWorktreePathWithContext(
+    repoDir,
+    worktreePath,
+    options,
+    repositoryManagementContext(repoDir),
+  );
+}
+
 function pathSeparator() {
   return process.platform === "win32" ? "\\" : "/";
 }
@@ -404,10 +423,11 @@ export function createWorktree(repoDir, branchName, baseBranch, options = {}) {
 
   const context = repositoryManagementContext(repoDir);
   ensureManagedWorktreeExcluded(context);
-  const worktreePath = assertManagedWorktreePath(
+  const worktreePath = assertManagedWorktreePathWithContext(
     repoDir,
-    managedWorktreePath(repoDir, branchName),
+    managedWorktreePathFromContext(context, branchName),
     { branchName },
+    context,
   );
 
   if (existsSync(worktreePath)) {
@@ -449,7 +469,12 @@ export function createWorktree(repoDir, branchName, baseBranch, options = {}) {
     )
       .trim()
       .toLowerCase();
-    assertManagedWorktreePath(repoDir, worktreePath, { branchName });
+    assertManagedWorktreePathWithContext(
+      repoDir,
+      worktreePath,
+      { branchName },
+      repositoryManagementContext(repoDir),
+    );
     // Sparse checkout: only materialize the packages this task needs. For a
     // large monorepo this cuts worktree creation time and disk. Cone mode wants
     // directory paths — our sparsePaths are package dirs. Fail-closed on unsafe
@@ -1067,6 +1092,44 @@ export function previewWorktreeMerge(repoDir, branchName, options = {}) {
     throw new Error(`Worktree not found for branch: ${branchName}`);
   }
 
+  // Prefer Git's read-only merge-tree for the overwhelmingly common clean
+  // preview. It computes the same recursive merge result without mutating the
+  // task worktree and then running a second process to abort it. A conflict or
+  // an older Git falls back to the established worktree-based path below so
+  // detailed conflict summaries and compatibility remain unchanged.
+  try {
+    const previewTree = gitExecArgs(
+      ["merge-tree", "--write-tree", baseBranch, branchName],
+      repoDir,
+    )
+      .split(/\r?\n/u)[0]
+      ?.trim();
+    if (/^[a-f0-9]{40,64}$/iu.test(previewTree || "")) {
+      return {
+        success: true,
+        previewOnly: true,
+        strategy,
+        branch: branchName,
+        baseBranch,
+        message: `Merge preview is clean. ${branchName} can be merged into ${baseBranch} without conflicts.`,
+        summary: {
+          conflictedFiles: 0,
+          bothModified: 0,
+          bothAdded: 0,
+          deleteModify: 0,
+        },
+        conflicts: [],
+        suggestions: [
+          `No merge conflicts detected between ${branchName} and ${baseBranch}.`,
+          "You can proceed with the final merge when ready.",
+        ],
+        previewEntrypoints: [],
+      };
+    }
+  } catch {
+    // Conflict/unsupported Git: preserve the detailed compatibility path.
+  }
+
   _abortMergeIfPresent(worktree.path);
 
   let mergeStarted = false;
@@ -1626,7 +1689,9 @@ function _resolveBaseBranchForMerge(repoDir, baseBranch) {
   }
 
   try {
-    return gitExec("rev-parse --abbrev-ref HEAD", repoDir) || "HEAD";
+    return (
+      gitExecArgs(["rev-parse", "--abbrev-ref", "HEAD"], repoDir) || "HEAD"
+    );
   } catch (_e) {
     return "HEAD";
   }

package/src/lib/agent-team/task-lease.js

@@ -1988,7 +1988,18 @@ export class TaskLeaseRegistry {
         patch,
         actor: patch.assignee,
       });
-      if (patch.status !== undefined) this._priorityInheritanceCache = null;
+      // Lease lifecycle changes do not alter the dependency-priority graph.
+      // In particular, a successfully completed task can only have completed
+      // ancestors because acquire() gates on every dependency. Cancelling is
+      // different: recovery may fail a blocked descendant closed, which must
+      // withdraw its donated priority from unfinished ancestors.
+      if (
+        (patch.priority !== undefined && patch.priority !== task.priority) ||
+        (patch.status === TASK_STATUS.CANCELLED &&
+          task.status !== TASK_STATUS.CANCELLED)
+      ) {
+        this._priorityInheritanceCache = null;
+      }
       return true;
     } catch {
       // ConcurrencyError (rev changed under us) — caller re-reads and retries.

package/src/lib/agent-team/team-graph-runtime-adapter.js

@@ -7,6 +7,7 @@ import {
 import { GraphEventStore } from "../graph-kernel/event-store.js";
 import { GraphKernel } from "../graph-kernel/runtime.js";
 import { createGraphAuthorityBinding } from "../graph-kernel/authority.js";
+import { reduceGraphTrace } from "../graph-kernel/trace-reducer.js";
 
 const IDENTIFIER = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,159}$/u;
 const DIGEST = /^sha256:[a-f0-9]{64}$/u;
@@ -1906,6 +1907,11 @@ export class TeamGraphRuntimeAdapter {
     return this.kernel.getRun(this.runId);
   }
 
+  traceProjection(options = {}) {
+    if (!this.kernel || !this.runId) return null;
+    return reduceGraphTrace(this.kernel.events(this.runId), options);
+  }
+
   events(options = {}) {
     if (!this.kernel || !this.runId) return [];
     return this.kernel.events(this.runId, options);

package/src/lib/agent-team/team-runner.js

@@ -2785,6 +2785,10 @@ export class TeamRunner {
           key,
           holder,
           error: failure?.message || String(failure),
+          code: failure?.code || null,
+          exitCode: Number.isInteger(failure?.exitCode)
+            ? failure.exitCode
+            : null,
           retry: outcome.retry === true,
           attempts: outcome.attempts,
           interrupted: failure?.code === "TEAM_TASK_HUMAN_INTERRUPTED",

package/src/lib/agent-team/team-worktree.js

@@ -1974,6 +1974,10 @@ export class TeamWorktreeCoordinator {
           ...(executionResult?.usageRecords
             ? { usageRecords: executionResult.usageRecords }
             : {}),
+          terminalEvidence: {
+            ...(executionResult?.terminalEvidence || {}),
+            commit: commitOid,
+          },
         };
       };