delegation-layer 0.1.19 → 0.1.21

package/plugins/delegation-layer/skills/agent-integration/references/interaction.md

@@ -0,0 +1,110 @@
+# Questions and guidance during an active task
+
+Use this reference when an external task may need clarification or guidance
+before it finishes, including planning, consultation, and debate. Use only
+Delegate commands; do not open a terminal session with the provider.
+
+## Choose the transport
+
+Read the selected provider's `interaction` capability and
+`interaction.supported_modes`. `clarification` and `steering` are independent.
+Add `--interactive` to dispatch when the chosen provider and permission mode
+support the interaction you need. Keep the user's exact provider, model,
+effort, workspace, permission, and budget.
+
+Without a named provider, `dispatch --auto --interactive` selects among
+providers that support interaction. If a named provider does not support it,
+use ordinary bounded turns and `continue` for discussion when native
+continuation is available. Explain that questions cannot be answered during
+that provider's active turn. Never replace the requested provider silently.
+
+In the worker brief, explicitly request **native structured clarification**:
+"Use your native question tool to request clarification and await its answer.
+Do not ask only in final text or a progress message and then sleep: the lead
+can answer structured requests, not an unstructured prompt. If the question
+tool is unavailable, report that blocker and finish instead of waiting."
+Assign the actual work directly; the worker should not start another delegate.
+
+No change is needed for self-contained tasks that do not need mid-turn input.
+Continuation inherits interaction from its predecessor. `continue --task ID
+--interactive` can enable it for a previously ordinary task.
+
+## Respond to questions
+
+1. Save the admitted task ID and state root. Run `collect TASK_ID --watch 30s
+   --json` with that same root. Exit 3 is pending, not completion. Collection
+   returns early when there is an outstanding native question.
+2. Read `interaction.pending_requests`. Use the returned request ID, question
+   IDs, options, `multiple`, and `free_text`; do not invent or guess IDs.
+3. Answer facts already supplied by the user or verified during the task.
+   Ask the user for missing preferences, business decisions, new scope, or
+   authorization. Do not guess an answer to keep the worker moving. A question
+   reply does not approve tool access or change the task's permission mode.
+4. Write one JSON object mapping **every question ID in that request** to an
+   array of answer strings. A single-choice question takes one value. Use exact
+   option labels unless `free_text` permits another answer. Example:
+
+   ```json
+   {"color": ["Blue"], "sections": ["Summary", "Evidence"]}
+   ```
+
+5. Allocate a new 32-character lowercase hexadecimal message ID and save it
+   together with the exact answers. Submit once:
+
+   ```sh
+   delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" reply "$task_id" \
+     --request "$request_id" --answers "$answers_file" \
+     --id "$message_id" --json
+   ```
+
+6. Keep collecting. A receipt is not task completion. Only the task's
+   authoritative `outcome` establishes the final result.
+
+Use the same root expression for dispatch, collection, reply, and steering.
+If the user explicitly chose another root, use that exact path for all of
+them. The other variables stand for actual values saved from this task;
+reassign them in each shell invocation if your tool does not preserve variables.
+A pending response without questions means keep collecting, not inspect OS
+processes or dispatch a replacement task.
+
+## Guide active work
+
+When `interaction.capabilities.steering` is true and the task is active, put
+additional guidance in a brief file and submit:
+
+```sh
+delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" steer "$task_id" \
+  --brief "$guidance_file" --id "$message_id" --json
+```
+
+Steering is guidance to the existing turn. It does not change provider, model,
+effort, workspace, permission, or budget. Once the turn ends, use `continue`
+for another authorized turn instead. Do not cancel and redispatch simply to
+send guidance.
+
+## Interpret delivery precisely
+
+| State | What it establishes |
+| --- | --- |
+| `queued` | Delegate durably accepted the message; native delivery is pending. |
+| `unknown` | Delivery was reserved or attempted, but its result is uncertain. |
+| `sent` | The native input write completed; no native acknowledgement is established. |
+| `acknowledged` | A correlated native response acknowledged the message. This does not prove the model followed guidance. |
+| `rejected` | The message could not be delivered or the native protocol rejected it. Read the reason. |
+
+If a submission response was lost, repeat the **same message ID and exact
+content** to recover its receipt. Never allocate a fresh ID to retry an
+`unknown` delivery. Delegate will not replay an ambiguous native write.
+Changed content with an existing ID is a conflict. Observe the task instead
+of guessing whether it consumed the message.
+
+`events TASK_ID --after SEQUENCE --watch 30s --json` returns a bounded event
+page. Save the returned `cursor` for the next page. Events and interaction
+state are progress evidence, not a replacement for `collect` and `outcome`.
+
+Waiting for an answer consumes the original execution budget; it does not
+pause or extend it. `interaction.deadline` shows the recorded wall-clock
+boundary when execution has started. If the task ends while waiting, do not
+reply to the old request. Follow the ordinary continuation guidance only when
+Delegate reports the task resumable. Preserve any verified answers in the new
+brief; uncertain delivery must not become an automatic replay.

package/plugins/delegation-layer/skills/agent-integration/references/result-handling.md

@@ -17,8 +17,10 @@ the same as a successful provider result.
    the result and its payload/evidence descriptors.
 5. If `outcome.verdict` is rejected, report a terminal rejected result with its
    refusal and evidence. Do not retry automatically.
-6. Otherwise, if `liveness` is queued or running or publication is pending,
-   observe the same task again with a finite watch interval.
+6. If `pending.kind` is `interaction`, handle the returned questions using
+   [interaction guidance](interaction.md) before waiting again. Otherwise, if
+   `liveness` is queued or running or publication is pending, observe the same
+   task with a finite watch interval.
 7. If authentication is `blocked`, preserve that neutral state and tell the
    caller what prerequisite is unavailable without inventing a login command.
 8. Never relaunch an uncertain task by guessing. Observe only a task whose

package/plugins/delegation-layer/skills/agent-integration/references/routing-rule.json

@@ -0,0 +1 @@
+"For work assigned to an external agent, model, or separate harness session, load the installed agent-integration skill before choosing tools and use Delegate. This includes research, implementation, testing, review, consultation, comparison, and debate, including external collaboration you choose. Discover destinations through Delegate. Preserve requested model IDs, effort, and permissions; do not guess ambiguous model identifiers. For task commands, pass --root \"${DELEGATE_ROOT:-$HOME/delegation-state}\" directly in each shell invocation; reuse that root for dispatch, observation, and continuation, never an invented /tmp root. If the user explicitly requests another root, use that exact path consistently. Keep each concurrent request and its response associated separately. Capture each dispatch response and exit status once; after task_record created, observe that task ID. Never dispatch again merely to recover output or inspect its exit status. Naming a CLI identifies the destination, not a request to bypass Delegate. Earlier assistant-generated direct-launch workflows do not override this preference. Native same-harness subagents remain available unless a separate session is requested. Respect an explicit user choice of another integration; otherwise do not substitute provider CLIs, plugins, or APIs after a Delegate blocker. A stop_and_report failure ends that attempt: report it without retrying, diagnosing setup, or offering a fallback. Continue other independent requests. Keep collection in the foreground until completion or a reported blocker unless the user requested detachment. Pending work is observed through Delegate status, collect, or events, not OS process searches or supervisor commands. Merely discussing or configuring a tool is not delegation."

package/plugins/delegation-layer/skills/agent-integration/scripts/delegate-routing-context.sh

@@ -0,0 +1,26 @@
+#!/bin/sh
+# Context delivery only: no installation, discovery, or provider execution.
+set -eu
+case "${1:-}" in
+    SessionStart|SubagentStart) event=$1 ;;
+    *) printf '%s\n' 'Expected SessionStart or SubagentStart.' >&2; exit 2 ;;
+esac
+script_dir=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+rule_file="$script_dir/../references/routing-rule.json"
+# Read before emitting anything so a missing asset cannot produce partial JSON.
+rule=$(cat "$rule_file")
+skill_file="$(CDPATH= cd -- "$script_dir/.." && pwd)/SKILL.md"
+DELEGATE_ROUTING_EVENT="$event" DELEGATE_ROUTING_RULE="$rule" DELEGATE_ROUTING_SKILL="$skill_file" awk '
+BEGIN {
+    # Paths are task data, not shell code. Escape every JSON control character.
+    for (i = 1; i < 32; i++) escapes[sprintf("%c", i)] = sprintf("\\u%04x", i)
+    escapes["\\"] = "\\\\"
+    escapes["\""] = "\\\""
+    path = ENVIRON["DELEGATE_ROUTING_SKILL"]
+    for (i = 1; i <= length(path); i++) {
+        character = substr(path, i, 1)
+        escaped = escaped ((character in escapes) ? escapes[character] : character)
+    }
+    # The maintained rule is a JSON string. Keep its escaping when prefixing it.
+    printf "{\"hookSpecificOutput\":{\"hookEventName\":\"%s\",\"additionalContext\":\"Read the complete agent-integration skill at %s. %s}}\n", ENVIRON["DELEGATE_ROUTING_EVENT"], escaped, substr(ENVIRON["DELEGATE_ROUTING_RULE"], 2)
+}'

package/scripts/install-agent-integration.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { accessSync, constants } from "node:fs";
-import { copyFile, lstat, mkdir, readdir, readFile } from "node:fs/promises";
+import { copyFile, lstat, mkdir, open, readdir, readFile, rename, unlink } from "node:fs/promises";
 import { emitKeypressEvents } from "node:readline";
 import { delimiter, dirname, isAbsolute, join, resolve } from "node:path";
 import { homedir } from "node:os";
@@ -90,14 +90,14 @@ function usage(message, exitCode = 2) {
     console.error(`Error: ${message}`);
   }
   console.error(
-    "Usage:\n  delegation-layer install [--scope project|global] [--harness NAME[,NAME...]] [--yes] [--force]\n  delegation-layer --target ABSOLUTE_SKILL_DIR [--force]\n  delegation-layer install-cli [--version VERSION] [--install-dir ABSOLUTE_DIR]",
+    "Usage:\n  delegation-layer install [--scope project|global] [--harness NAME[,NAME...]] [--yes] [--force] [--routing default|skill-only]\n  delegation-layer routing status|disable [--scope project|global] [--harness NAME[,NAME...]]\n  delegation-layer --target ABSOLUTE_SKILL_DIR [--force]\n  delegation-layer install-cli [--version VERSION] [--install-dir ABSOLUTE_DIR]",
   );
   process.exitCode = exitCode;
 }
 
 function help() {
   console.log(
-    "Usage:\n  delegation-layer install [--scope project|global] [--harness NAME[,NAME...]] [--yes] [--force]\n  delegation-layer --target ABSOLUTE_SKILL_DIR [--force]\n  delegation-layer install-cli [--version VERSION] [--install-dir ABSOLUTE_DIR]\n\nThe install command detects supported agent harnesses and installs the skill for a project or user.\nGlobal scope is the default; use --scope project for a project-local install.\nUse --harness universal when no specific harness is detected.",
+    "Usage:\n  delegation-layer install [--scope project|global] [--harness NAME[,NAME...]] [--yes] [--force] [--routing default|skill-only]\n  delegation-layer routing status|disable [--scope project|global] [--harness NAME[,NAME...]]\n  delegation-layer --target ABSOLUTE_SKILL_DIR [--force]\n  delegation-layer install-cli [--version VERSION] [--install-dir ABSOLUTE_DIR]\n\nThe install command detects supported agent harnesses and installs the skill for a project or user.\nGlobal scope is the default; use --scope project for a project-local install.\nUse --harness universal when no specific harness is detected.",
   );
 }
 
@@ -152,6 +152,7 @@ function parseInstallArguments(argumentsList) {
   let harnessNames;
   let scope;
   let yes = false;
+  let routing;
 
   for (let index = 0; index < argumentsList.length; index += 1) {
     const argument = argumentsList[index];
@@ -163,6 +164,12 @@ function parseInstallArguments(argumentsList) {
       yes = true;
       continue;
     }
+    if (argument === "--routing") {
+      routing = requiredValue(argumentsList, index, "--routing");
+      if (!routing) return null;
+      index += 1;
+      continue;
+    }
     if (argument === "--scope") {
       scope = requiredValue(argumentsList, index, "--scope");
       if (!scope) {
@@ -201,7 +208,11 @@ function parseInstallArguments(argumentsList) {
     usage(`unknown harness ${unknown}; choose from ${harnesses.map((harness) => harness.name).join(", ")}`);
     return null;
   }
-  return { force, harnessNames, scope, yes };
+  if (routing && !["default", "skill-only"].includes(routing)) {
+    usage("--routing must be default or skill-only");
+    return null;
+  }
+  return { force, harnessNames, scope, yes, routing };
 }
 
 async function existingPath(path) {
@@ -486,7 +497,7 @@ function pickOptions({ initialValues = [], multiple = false, options, title }) {
   });
 }
 
-async function chooseInstallOptions({ force, harnessNames, scope, yes }) {
+async function chooseInstallOptions({ force, harnessNames, scope, yes, routing }) {
   const cwd = process.cwd();
   const home = resolve(process.env.DELEGATION_LAYER_HOME ?? homedir());
   const detections = await detectHarnesses({ cwd, home });
@@ -536,7 +547,20 @@ async function chooseInstallOptions({ force, harnessNames, scope, yes }) {
     }
   }
 
+  if (needsPrompt && !routing) {
+    routing = await pickOptions({
+      initialValues: ["default"],
+      options: [
+        { value: "default", label: "Prefer Delegate", description: "Install collaboration context hooks for Claude and Codex; native hook trust still applies" },
+        { value: "skill-only", label: "Skill only", description: "Install guidance without adding hooks; keep existing routing settings" },
+      ],
+      title: "How should external collaboration be routed?",
+    });
+    if (!routing) return null;
+  }
+
   return {
+    routing: routing ?? "skill-only",
     cwd,
     force,
     harnessNames: harnessNames ?? defaults,
@@ -546,6 +570,9 @@ async function chooseInstallOptions({ force, harnessNames, scope, yes }) {
 }
 
 function targetFor(harness, scope, cwd, home) {
+  if (scope === "global" && harness.name === "claude" && process.env.CLAUDE_CONFIG_DIR) {
+    return join(resolve(process.env.CLAUDE_CONFIG_DIR), "skills", "agent-integration");
+  }
   const root = scope === "global" ? home : cwd;
   const relativePath = scope === "global" ? harness.globalPath : harness.projectPath;
   return join(resolve(root, relativePath), "agent-integration");
@@ -576,6 +603,165 @@ async function install({ force, target }) {
   console.log(`Installed agent integration skill: ${join(target, "SKILL.md")}`);
 }
 
+function shellQuote(value) {
+  return "'" + value.replaceAll("'", "'\\''") + "'";
+}
+
+function routingPath(name, { scope, cwd, home }) {
+  if (name === "claude") {
+    return scope === "global"
+      ? join(resolve(process.env.CLAUDE_CONFIG_DIR || join(home, ".claude")), "settings.json")
+      : join(cwd, ".claude", "settings.local.json");
+  }
+  if (name === "codex") {
+    return join(scope === "global" ? resolve(process.env.CODEX_HOME || join(home, ".codex")) : join(cwd, ".codex"), "hooks.json");
+  }
+  return null;
+}
+
+function jsonObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+
+function validateHookConfig(config, path) {
+  if (!jsonObject(config) || (config.hooks !== undefined && !jsonObject(config.hooks))) {
+    throw new Error(`expected a JSON object with an optional hooks object: ${path}`);
+  }
+  for (const groups of Object.values(config.hooks ?? {})) {
+    if (!Array.isArray(groups) || groups.some((group) => !jsonObject(group)
+      || !Array.isArray(group.hooks) || group.hooks.some((hook) => !jsonObject(hook) || typeof hook.type !== "string"))) {
+      throw new Error(`invalid hook configuration; no routing changes written: ${path}`);
+    }
+  }
+}
+
+async function prepareRouting(selected, action) {
+  const plans = [];
+  for (const name of new Set(selected.harnessNames)) {
+    const path = routingPath(name, selected);
+    if (!path || process.platform === "win32") {
+      plans.push({ name, status: "unsupported-host" });
+      continue;
+    }
+    await assertNoSymlinkComponents(path);
+    const stat = await existingPath(path);
+    if (stat && !stat.isFile()) throw new Error(`routing configuration must be a regular file: ${path}`);
+    const before = stat ? await readFile(path, "utf8") : null;
+    let config;
+    try {
+      config = before === null ? {} : JSON.parse(before);
+    } catch {
+      throw new Error(`invalid JSON; routing configuration left unchanged: ${path}`);
+    }
+    validateHookConfig(config, path);
+    const target = targetFor(harnessByName.get(name), selected.scope, selected.cwd, selected.home);
+    const script = join(target, "scripts", "delegate-routing-context.sh");
+    const hooks = config.hooks ?? {};
+    let present = 0;
+    let changed = false;
+    for (const event of ["SessionStart", "SubagentStart"]) {
+      const command = `/bin/sh ${shellQuote(script)} ${event}`;
+      const groups = hooks[event] ?? [];
+      const matches = groups.flatMap((group) => group.hooks).filter((hook) => hook.type === "command" && hook.command === command);
+      if (matches.length) present += 1;
+      if (action === "disable") {
+        if (!matches.length) continue;
+        hooks[event] = groups.flatMap((group) => {
+          const remaining = group.hooks.filter((hook) => hook.type !== "command" || hook.command !== command);
+          if (remaining.length === group.hooks.length) return [group];
+          return remaining.length ? [{ ...group, hooks: remaining }] : [];
+        });
+        if (!hooks[event].length) delete hooks[event];
+        changed = true;
+      } else if (action === "enable" && !matches.length) {
+        hooks[event] = [...groups, { hooks: [{ type: "command", command }] }];
+        changed = true;
+      }
+    }
+    if (changed) config.hooks = hooks;
+    let assetsPresent = true;
+    if (action === "status" && present) {
+      for (const relative of ["SKILL.md", "scripts/delegate-routing-context.sh", "references/routing-rule.json"]) {
+        const asset = await existingPath(join(target, relative));
+        if (!asset?.isFile() || asset.isSymbolicLink()) assetsPresent = false;
+      }
+    }
+    plans.push({ name, path, target, before, after: changed ? JSON.stringify(config, null, 2) + "\n" : before,
+      mode: stat ? stat.mode & 0o777 : 0o600,
+      status: action === "disable" ? "disabled" : action === "enable" || (present === 2 && assetsPresent) ? "configured" : present ? "incomplete" : "not-configured" });
+  }
+  return plans;
+}
+
+async function replaceRoutingConfig(plan, before, after) {
+  await assertNoSymlinkComponents(plan.path);
+  await mkdir(dirname(plan.path), { recursive: true });
+  const lockPath = plan.path + ".delegation-layer.lock";
+  let lock;
+  try {
+    lock = await open(lockPath, "wx", 0o600);
+  } catch (error) {
+    if (error.code === "EEXIST") throw new Error(`routing configuration is locked: ${lockPath}; verify no other installer is running before removing a stale lock`);
+    throw error;
+  }
+  const suffix = `${process.pid}-${Date.now()}-${Math.random().toString(16).slice(2)}`;
+  const temporary = plan.path + `.delegation-layer-stage-${suffix}`;
+  try {
+    const stat = await existingPath(plan.path);
+    if (stat && (!stat.isFile() || stat.isSymbolicLink())) throw new Error(`routing configuration changed during installation: ${plan.path}`);
+    const current = stat ? await readFile(plan.path, "utf8") : null;
+    if (current !== before) throw new Error(`routing configuration changed during installation; retry: ${plan.path}`);
+    if (before !== null) {
+      const backup = await open(plan.path + `.delegation-layer-backup-${suffix}`, "wx", 0o600);
+      try { await backup.writeFile(before); await backup.sync(); } finally { await backup.close(); }
+    }
+    if (after === null) {
+      await unlink(plan.path);
+      return;
+    }
+    const staged = await open(temporary, "wx", plan.mode);
+    try { await staged.writeFile(after); await staged.sync(); } finally { await staged.close(); }
+    await rename(temporary, plan.path);
+  } finally {
+    try {
+      try { await unlink(temporary); } catch (error) { if (error.code !== "ENOENT") throw error; }
+    } finally {
+      try { await lock.close(); } finally { await unlink(lockPath); }
+    }
+  }
+}
+
+async function applyRouting(plans) {
+  const applied = [];
+  try {
+    for (const plan of plans) {
+      if (!plan.path || plan.before === plan.after) continue;
+      await replaceRoutingConfig(plan, plan.before, plan.after);
+      applied.push(plan);
+    }
+  } catch (error) {
+    const failures = [];
+    for (const plan of applied.reverse()) {
+      try { await replaceRoutingConfig(plan, plan.after, plan.before); }
+      catch (rollbackError) { failures.push(rollbackError.message); }
+    }
+    throw new Error(`${error.message}${failures.length ? `; rollback needs attention: ${failures.join("; ")}` : "; earlier routing changes rolled back"}`);
+  }
+}
+
+function printRouting(plan, action) {
+  if (!plan.path) {
+    console.log(`${plan.name}: unsupported-host for automatic routing; skill-only guidance remains available.`);
+    return;
+  }
+  console.log(`${plan.name}: ${plan.status} (${plan.path}).`);
+  if (plan.status === "configured") {
+    console.log("Activation not verified: start or resume a session and check the native hook output. Installation is not proof of model compliance.");
+    if (plan.name === "codex") console.log("Codex: review and trust the hooks using /hooks. New or changed definitions are skipped until trusted.");
+  }
+  if (action === "disable") console.log("Only this installer's matching hooks were removed; plugin hooks are managed by the host plugin manager.");
+}
+
 async function validateSourceTree() {
   const files = await skillFiles(sourceDirectory);
   if (!files.includes("SKILL.md")) {
@@ -595,6 +781,23 @@ if (argumentsList[0] === "install-cli") {
     console.error(`Error: ${error.message}`);
     process.exitCode = 1;
   }
+} else if (argumentsList[0] === "routing") {
+  const action = argumentsList[1];
+  const options = parseInstallArguments(argumentsList.slice(2));
+  if (!["status", "disable"].includes(action)) {
+    usage("routing requires status or disable");
+  } else if (options) {
+    try {
+      if (options.routing || options.force) throw new Error("routing status/disable do not accept --routing or --force");
+      const selected = await chooseInstallOptions({ ...options, yes: true, harnessNames: options.harnessNames ?? ["claude", "codex"] });
+      const plans = await prepareRouting(selected, action);
+      if (action === "disable") await applyRouting(plans);
+      for (const plan of plans) printRouting(plan, action);
+    } catch (error) {
+      console.error(`Error: ${error.message}`);
+      process.exitCode = 1;
+    }
+  }
 } else if (argumentsList[0] === "install") {
   const options = parseInstallArguments(argumentsList.slice(1));
   if (options) {
@@ -603,12 +806,16 @@ if (argumentsList[0] === "install-cli") {
       if (!selected) {
         console.log("Installation cancelled.");
       } else {
+        const routingPlans = selected.routing === "default" ? await prepareRouting(selected, "enable") : [];
         const targets = selected.harnessNames.map((name) => targetFor(harnessByName.get(name), selected.scope, selected.cwd, selected.home));
         const uniqueTargets = [...new Set(targets)];
         console.log(`Installing for ${selected.scope}: ${uniqueTargets.join(", ")}`);
         for (const target of uniqueTargets) {
           await install({ force: selected.force, target });
         }
+        await applyRouting(routingPlans);
+        for (const plan of routingPlans) printRouting(plan, "enable");
+        if (selected.routing === "skill-only") console.log("Skill-only installation; existing routing settings were not changed.");
       }
     } catch (error) {
       console.error(`Error: ${error.message}`);

package/skills/agent-integration/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agent-integration
-description: Delegate external tasks to CCR (Claude Code Router) and other agents. Use for Codex, Claude, AGY, and other external agent or model collaboration for reviews, research, implementation, testing, second opinions, comparisons, and debates, including collaboration you choose during a task. Discover other supported harnesses such as Pi and OpenCode through Delegate. Not for ordinary native subagents, provider setup, or questions merely about a tool.
+description: Coordinate external agent, model, and separate harness tasks through Delegate, including research, implementation, tests, reviews, consultations, comparisons, and debates. Use before choosing an external integration; ordinary native subagents and questions about tools remain local.
 ---
 
 # Delegation Layer
@@ -56,13 +56,27 @@ tasks may proceed; the failed attempt must remain reported as failed or blocked.
    finite budget. Keep the state root outside the workspace. Reuse a supplied
    `DELEGATE_ROOT` for all providers and tasks; do not invent per-provider or
    per-task state roots. Task IDs separate work within that root.
-4. Use `--json` and save the returned `task_id`. Read `admission`, `liveness`,
+4. Use `--json` and save each response separately with its requested destination,
+   model, effort, workspace, and returned `task_id`. Never merge concurrent
+   responses into an unlabeled output stream. Read `admission`, `liveness`,
    `publication`, `status`, `outcome`, `continuation`, `task_record`, `failure`,
    and `error` as separate fields.
    Delegate owns the supervisor lifecycle. Never install, configure, start,
    inspect, or repair Pueue, and never poll a task unless the response says its
    `task_record` is `created`.
-5. Observe with `status` and collect with `collect`. Collection may recover the
+5. Observe tasks only through Delegate `status`, `collect`, or `events`.
+   Do not run `ps`, `pgrep`, process-tree searches, or supervisor commands to
+   monitor delegated work. Pending output is normal startup or work in progress;
+   empty `pending_requests` means keep collecting, not diagnose the environment.
+   Environment diagnostics require a separately requested troubleshooting task.
+   Keep collection in the
+   foreground until all requested tasks reach a terminal result or an explicit
+   blocker. Do not end a headless turn promising a background notification.
+   Pending publication (exit 3) means keep waiting, not success. When the JSON
+   includes an outstanding `interaction.pending_requests` batch, follow
+   [active-task interaction](references/interaction.md) before waiting again. Only detach
+   when the user explicitly requests it, retaining the exact task IDs.
+   Collection may recover the
    saved supervisor only to observe an already-requested budget stop; it never
    launches a provider or retries a task.
 6. If a task is timed out and its JSON says `continuation.resumable: true`, use
@@ -114,7 +128,7 @@ normal task. For an explicitly requested readiness check, see
 [preflight guidance](references/command-reference.md#checking-readiness).
 
 The catalog and `capabilities` response expose supported permission modes,
-request options, continuation, and the read-only mechanism. A read-only
+request options, continuation, native interaction, and the read-only mechanism. A read-only
 capability with `containment: "provider-owned"` selects the provider's native
 behavior but is not an independent delegate-owned sandbox. Static discovery
 does not prove authentication or live acceptance; use the dispatch or live
@@ -129,28 +143,48 @@ name belongs to CCR; clarify only if discovery leaves the destination ambiguous.
 
 Keep provider defaults when no model or effort was requested and neither is required. When an explicit
 choice is needed, read [model and effort guidance](references/command-reference.md#choosing-models-and-effort).
-Pass requested choices through Delegate's public `--model` and `--effort`
-fields; discovery is advisory, never an allowlist.
+Pass exact requested model IDs and effort values unchanged through Delegate's
+public `--model` and `--effort` fields; discovery is advisory, never an allowlist.
+For a natural-language model name, resolve one exact ID through discovery. If
+it remains ambiguous or discovery is unavailable, ask for the exact model ID;
+do not turn a display name into a guessed alias. An explicit ID needs no such
+clarification just because it is absent from discovery.
+
+For planning, consultation, debate, or other external work that may need
+answers or guidance while it runs, read [active-task interaction](references/interaction.md)
+and use `--interactive` when supported. Answer known facts yourself; ask the
+user for missing preferences, authorization, or scope. Keep ordinary native
+subagents available under the same-harness rule above.
 
 ### 3. Prepare separate paths and a finite brief
 
 Use an existing task brief when one is supplied. Otherwise create a bounded
 brief file that contains the requested work and its acceptance criteria. Keep
 the state root outside the workspace and provider-writable trees (which can
-include the system temporary directory). Use `DELEGATE_ROOT` when supplied:
+include the system temporary directory). Use `DELEGATE_ROOT` when supplied.
 
 Run path preparation and dispatch in **one shell/tool invocation**, as shown
 below. Shell variables may disappear between tool calls. For later commands,
 use the actual saved absolute paths or assign them again in that invocation;
 never pass an empty `--root`, `--brief`, or `--cwd`.
 
-Replace the example brief below with the actual user request. Do not place the state
+Write the brief as the **worker’s own assignment**, not a copy of the
+orchestration request. For “consult another agent about X”, tell the worker
+“Investigate X and return your findings; you are the assigned worker, do not
+delegate this assignment.” Keep dispatching, answering questions, and
+collecting results in the lead session unless recursive delegation was
+explicitly requested.
+
+Replace the example brief below with that bounded worker assignment. Do not place the state
 root inside the workspace or place secrets in either path’s task data. Keep it
 outside provider configuration and runtime directories as well. If delegate
 rejects a caller-supplied state root, report the placement error rather than
-silently replacing that root. If no root was supplied, choose one outside the
-workspace and reuse it. Do not change provider settings. Retain the selected
-root for every observation and continuation.
+silently replacing that root. For every task command, use
+`--root "${DELEGATE_ROOT:-$HOME/delegation-state}"` as shown below. This reads the supplied root in each shell call and uses the
+same default when none was supplied; no root setup or new directory choice is
+needed. If the user explicitly requests another root, substitute that exact
+absolute path consistently. Do not change provider settings or switch roots
+when waiting, replying, steering, or continuing.
 
 ### 4. Dispatch one bounded turn
 
@@ -159,19 +193,22 @@ For a named harness or provider resolved in step 2, replace `--auto` with `--pro
 combine the two:
 
 ```sh
-STATE_ROOT="${DELEGATE_ROOT:-$HOME/delegation-state}"
 WORKSPACE="$PWD"
 BRIEF="$(mktemp)"
+RESPONSE="$(mktemp)"
 cat >"$BRIEF" <<'EOF'
 Describe the delegated task, the files or behavior to change, and the checks
 that must pass. Keep the response concise and report validation evidence.
 EOF
-delegate --root "$STATE_ROOT" dispatch --auto \
+delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" dispatch --auto \
   --brief "$BRIEF" \
   --cwd "$WORKSPACE" \
   --permission read-only \
   --budget 30m \
-  --json
+  --json >"$RESPONSE"
+dispatch_exit=$?
+cat "$RESPONSE"
+printf '\nDispatch exit: %s; saved response: %s\n' "$dispatch_exit" "$RESPONSE"
 ```
 
 For an authorized code change, use `--permission workspace-write`; this requests
@@ -185,7 +222,16 @@ For independent work, the model may run several complete `dispatch` commands
 concurrently. Keep each task's brief, workspace, permission, and task ID
 independent. Do not configure Pueue or wait for one task before dispatching the
 next solely to serialize ordinary work. Inspect each returned task separately
-with `status` and `collect`.
+with `status` and `collect`. Use independent tool calls or separate response
+files, never background commands writing to the same stdout. Read
+[parallel reviews and debates](references/collaboration.md) when coordinating
+multiple participants or challenge rounds.
+
+Capture the response and exit status in the **original** dispatch invocation,
+as above. Read the saved response if you need it again. Never repeat dispatch
+to obtain its exit code, recover output, or confirm that it worked: each call
+can create new paid work. Once a response says `task_record: created`, save its
+`task_id` and switch to observation. A missing exit code does not undo admission.
 
 Save the exact `task_id` from the JSON response. Apply this decision separately
 for **each attempt**, including requests issued together:
@@ -205,16 +251,20 @@ never retry that uncertain ID or run Pueue commands.
 
 ### 5. Observe and collect
 
-Use the same state root and task ID:
+Use the same state root and task ID. Each command below resolves the root
+in its own shell call, so it does not depend on a previous shell variable:
 
 ```sh
-delegate --root "$STATE_ROOT" status TASK_ID --json
-delegate --root "$STATE_ROOT" collect TASK_ID --watch 5s --json
+delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" status TASK_ID --json
+delegate --root "${DELEGATE_ROOT:-$HOME/delegation-state}" collect TASK_ID --watch 5s --json
 ```
 
 Check `status` first: if it is `timed_out`, follow step 6 even when publication
-is pending and no outcome is present. Otherwise, if `collect` exits with code
-`3` because publication is still pending, wait a short interval and run
+is pending and no outcome is present. If `interaction.pending_requests` is
+nonempty and the interaction is not closed, answer the questions using
+[active-task interaction](references/interaction.md) before collecting again.
+Otherwise, if `collect` exits with code `3` because publication is still
+pending, wait a short interval and run
 `collect` again. Do not dispatch again. Continue until
 the response has a terminal `outcome` or a bounded operational error that
 requires the caller’s attention.