impel-cli 0.18.16 → 0.18.18-beta.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.18.16",
+  "version": "0.18.18-beta.0",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/agents.js

@@ -12,6 +12,15 @@ import path from "node:path";
 import { normalizeGatewayUrl, redactSecretText } from "./config.js";
 import { impelMcpInvocation } from "./selfInvocation.js";
 import { normalizeTenantId } from "./tenants.js";
+import {
+  adapterCallerSpawnGuidance,
+  adapterHardCompletionGuidance,
+  adapterSoftCompletionGuidance,
+  claudeHardCompletionGuidance,
+  claudeSoftCompletionGuidance,
+  customAgentVerbatimDescriptionLead,
+  usesVerbatimRelay,
+} from "./verbatimRelay.js";
 import { renameWithWindowsRetry } from "./windowsFs.js";
 
 export const AGENT_SYNC_TTL_MS = 6 * 60 * 60 * 1000;
@@ -21,7 +30,7 @@ export const NATIVE_AGENT_LIST_TOOL = "impel_specialists-list_native_agents";
 export const NATIVE_AGENT_START_TOOL = "impel_specialists-start_native_agent_run";
 export const NATIVE_AGENT_READ_TOOL = "impel_specialists-read_native_agent_run";
 export const MANAGED_AGENT_MCP_SERVER = "impel_agent";
-export const MANAGED_AGENT_MANIFEST_VERSION = 4;
+export const MANAGED_AGENT_MANIFEST_VERSION = 5;
 
 const NATIVE_AGENT_TOOL_NAMES = [
   NATIVE_AGENT_LIST_TOOL,
@@ -125,6 +134,9 @@ export function normalizeNativeAgentCatalog(payload, expectedTenantId) {
       throw new Error(`native-agent catalog returned duplicate binding ${binding}`);
     }
     seenBindings.add(binding);
+    if (agent.verbatimRelay !== undefined && typeof agent.verbatimRelay !== "boolean") {
+      throw new Error("native-agent catalog returned an invalid verbatimRelay");
+    }
     return {
       agentId,
       title: boundedString(agent.title, "title", { max: 160 }),
@@ -135,6 +147,7 @@ export function normalizeNativeAgentCatalog(payload, expectedTenantId) {
       exclusions: stringList(agent.exclusions, "exclusions"),
       requiredContext: stringList(agent.requiredContext, "requiredContext"),
       sideEffects: enumString(agent.sideEffects, "sideEffects", ["read-only", "writes"]),
+      ...(agent.verbatimRelay === true ? { verbatimRelay: true } : {}),
     };
   });
   return { orgId: tenantId, agents };
@@ -329,6 +342,9 @@ function claudeAdapterInstructions(tenantId, agent) {
   const sideEffectInstruction = agent.sideEffects === "writes"
     ? `The catalog declares that this agent writes user or workspace data. Use this adapter only when the user explicitly selected this exact agent for the current request; that explicit selection is the required side-effect confirmation, so pass confirmedSideEffects true. If the agent was chosen automatically or the selection is ambiguous, do not start it and ask the user to select it explicitly.`
     : `The catalog declares that this agent is read-only; omit confirmedSideEffects.`;
+  const completionGuidance = usesVerbatimRelay(agent)
+    ? claudeHardCompletionGuidance()
+    : claudeSoftCompletionGuidance();
   return [
     `You are a thin transport adapter for the exact Impel native agent ${JSON.stringify(agent.agentId)} in tenant ${JSON.stringify(tenantId)}.`,
     `Do not perform the assigned task yourself and do not delegate to any other agent.`,
@@ -336,7 +352,7 @@ function claudeAdapterInstructions(tenantId, agent) {
     sideEffectInstruction,
     `Call ${toolName(NATIVE_AGENT_START_TOOL)} exactly once with agentId ${JSON.stringify(agent.agentId)}, scopeParam ${JSON.stringify(agent.scopeParam)}, task set to the complete assigned task, optional context set to one string containing all supplied context (omit it when no context was supplied), contextKeys naming the context fields present in that string, confirmedSideEffects as directed above, and one stable idempotencyKey that you reuse for this logical task.${contextRequirement}`,
     `Then call ${toolName(NATIVE_AGENT_READ_TOOL)} with the returned runId and waitSeconds 20 until the run reaches a terminal state.`,
-    `When it succeeds, return result.finalText faithfully as the answer. When it fails, return the durable runId, preserved output, and error. Never invent or independently synthesize a replacement result.`,
+    completionGuidance,
   ].join(" ");
 }
 
@@ -494,22 +510,36 @@ function codexAdapterInstructions(tenantId, agent) {
     ? `The catalog declares that this agent writes user or workspace data. Use this adapter only when the user explicitly selected this exact agent for the current request; that explicit selection is the required side-effect confirmation. If the agent was chosen automatically or the selection is ambiguous, do not run the orchestration and ask the user to select this exact agent explicitly.`
     : `The catalog declares that this agent is read-only; the orchestration omits confirmedSideEffects.`;
   const source = renderCodexAdapterOrchestration(tenantId, agent);
+  const callerSpawnGuidance = usesVerbatimRelay(agent)
+    ? adapterCallerSpawnGuidance("Codex")
+    : null;
+  const completionGuidance = usesVerbatimRelay(agent)
+    ? adapterHardCompletionGuidance()
+    : adapterSoftCompletionGuidance();
   return [
     `You are a thin transport adapter for the exact Impel native agent ${JSON.stringify(agent.agentId)} in tenant ${JSON.stringify(tenantId)}.`,
-    `Callers must spawn this explicit custom Codex agent with fork_turns="none" and must relay your result verbatim; this is caller guidance and cannot enforce host spawn behavior.`,
+    ...(callerSpawnGuidance ? [callerSpawnGuidance] : []),
     `Do not perform the assigned task yourself, do not delegate to any other agent, and do not independently synthesize or rewrite the result.`,
     `Confirm that the assigned request fits the cataloged capabilities ${JSON.stringify(agent.capabilities)} and none of the exclusions ${JSON.stringify(agent.exclusions)} before starting.${contextRequirement}`,
     sideEffectInstruction,
     `Invoke functions.exec exactly once for the orchestration below. Do not call the MCP tools directly or select a separate MCP call for any poll. Replace ${CODEX_TASK_PLACEHOLDER} with a JSON string literal for the complete assigned task. Replace ${CODEX_CONTEXT_PLACEHOLDER} with one JSON string literal containing all supplied caller context, or with null when no context was supplied; never use an object or array. Replace ${CODEX_CONTEXT_KEYS_PLACEHOLDER} with a JSON array naming the context fields present in that string, or [] when context is absent. Replace ${CODEX_IDEMPOTENCY_KEY_PLACEHOLDER} with one new opaque idempotency key for this logical invocation: choose it exactly once, reuse it unchanged for any retry of this invocation, and never reuse it for a separate request even when task and context are identical. Then pass the raw JavaScript without Markdown fences.`,
     `The JavaScript validates the exact tenant, agent binding, and catalog policy; passes the one stable logical-invocation idempotencyKey; starts exactly once; and polls deterministically with the compatible 20-second server wait until status is succeeded or failed. If functions.exec yields a running cell, use functions.wait with max_tokens 30000 only to resume that same orchestration; never start another orchestration or poll the MCP tool yourself.`,
-    `After the orchestration completes, return its single text output verbatim with no preface, rewriting, Markdown changes, or independent synthesis. A successful output is result.finalText exactly. A failure output preserves the durable runId, output, and error.`,
+    completionGuidance,
     "",
     source,
   ].join("\n\n");
 }
 
+function customAgentDescription(tenantId, agent) {
+  const sideEffectsLabel = agent.sideEffects === "writes" ? " (may write user or workspace data)" : " (read-only)";
+  return (usesVerbatimRelay(agent)
+    ? `${customAgentVerbatimDescriptionLead()}. Runs ${agent.title} for Impel tenant ${tenantId}${sideEffectsLabel}: ${agent.description}`
+    : `Explicitly runs ${agent.title} for Impel tenant ${tenantId}${sideEffectsLabel}: ${agent.description}`
+  ).slice(0, 900);
+}
+
 function renderClaudeAgent({ tenantId, agent, name, invocation }) {
-  const description = `Explicitly runs ${agent.title} for Impel tenant ${tenantId}${agent.sideEffects === "writes" ? " (may write user or workspace data)" : " (read-only)"}: ${agent.description}`.slice(0, 900);
+  const description = customAgentDescription(tenantId, agent);
   const lines = [
     "---",
     `name: ${JSON.stringify(name)}`,
@@ -534,7 +564,7 @@ function renderClaudeAgent({ tenantId, agent, name, invocation }) {
 }
 
 function renderCodexAgent({ tenantId, agent, name, invocation }) {
-  const description = `Explicit custom agent: callers must use fork_turns="none" and relay its result verbatim. Runs ${agent.title} for Impel tenant ${tenantId}${agent.sideEffects === "writes" ? " (may write user or workspace data)" : " (read-only)"}: ${agent.description}`.slice(0, 900);
+  const description = customAgentDescription(tenantId, agent);
   const envEntries = Object.entries(invocation.env || {})
     .map(([key, value]) => `${JSON.stringify(key)} = ${JSON.stringify(value)}`)
     .join(", ");
@@ -628,7 +658,7 @@ export function syncAgentProfile({ client, root, label, tenantId, agents, now =
   const prior = readManifest(manifestPath);
   const rendered = renderManagedAgents(client, tenantId, agents);
   const priorFiles = new Set(prior?.files || []);
-  const priorUsesDiscoveryRoot = [2, 3, MANAGED_AGENT_MANIFEST_VERSION].includes(prior?.version);
+  const priorUsesDiscoveryRoot = [2, 3, 4, MANAGED_AGENT_MANIFEST_VERSION].includes(prior?.version);
 
   // Native clients discover standalone definitions directly under `agents/`.
   // Preflight every destination before writing so an unmanaged file with the

package/src/apps.js

@@ -16,6 +16,7 @@ import { ensureClaudeSessionHooks, ensureCodexSessionHooks } from "./sessionHook
 import { ADHOC_IDENTITY, codesignIdentityArgs, desiredSigningMode, resolveSigningIdentity } from "./codesign.js";
 import { applyImpelClaudeSandbox } from "./claudeSandbox.js";
 import { brandedEnvironmentName, RUNTIME_BRAND } from "./runtimeBrand.js";
+import { IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS } from "./commands/launch.js";
 
 export const CLAUDE_CONFIG_ID = "1ced0000-0000-4000-8000-000000000001";
 const CHATGPT_CONFIG_START = `# >>> ${RUNTIME_BRAND.cli.command} app managed gateway >>>`;
@@ -130,6 +131,10 @@ const MAX_REASONING_LEVEL = { effort: "max", description: "Maximum reasoning dep
 const ULTRA_REASONING_LEVEL = { effort: "ultra", description: "Maximum reasoning with automatic task delegation" };
 const FAST_SERVICE_TIER = { id: "priority", name: "Fast", description: "1.5x speed, increased usage" };
 const FAST_MODE_AUTH_GATE = /([A-Za-z_$][\w$]*)=([A-Za-z_$][\w$]*)&&!([A-Za-z_$][\w$]*)&&([A-Za-z_$][\w$]*)!=null&&\4\?\.requirements\?\.featureRequirements\?\.fast_mode!==!1/gu;
+const CHATGPT_THREAD_START_PROVIDER = /serviceName:([A-Za-z_$][\w$]*)\.serviceName\?\?this\.options\.defaultServiceName,threadSource:\1\.threadSource===void 0\?`user`:\1\.threadSource/gu;
+const CHATGPT_THREAD_FORK_PROVIDER = /let ([A-Za-z_$][\w$]*)=\{\.\.\.([A-Za-z_$][\w$]*),threadSource:\2\.threadSource===void 0\?`user`:\2\.threadSource\}/gu;
+const CHATGPT_THREAD_RESUME_PROVIDER = /modelProvider:null,cwd:([A-Za-z_$][\w$]*)\?\.cwd\?\?null,approvalPolicy:null,sandbox:null,config:\1\?\.config\?\?null,developerInstructions:\1\?\.developerInstructions\?\?void 0/gu;
+const CHATGPT_STRUCTURED_PROVIDER_FALLBACK = /allowProviderModelFallback:!0/gu;
 const CHATGPT_RESOURCE_ROOT = "linked_vendor_resources_with_patched_asar";
 const CLAUDE_PLAN_USAGE_GUARD = "if(!PSe()){cz();return}if(!Ge().hasOrgPolicyBackend())return;if((r=ar())";
 const IMPEL_CLAUDE_PLAN_USAGE_GUARD = `if(!PSe()){cz();return}${"".padEnd("if(!Ge().hasOrgPolicyBackend())return;".length, " ")}if((r=ar())`;
@@ -262,7 +267,8 @@ export function managedAppIdentity(target, tenantId = null, tenantName = null) {
 // 26: remember the managed provider defaults and move legacy GPT-5.5 profiles
 // onto GPT-5.6 Sol so ChatGPT's compact Work picker does not fall back to its
 // unsupported-selection "Reset to default" treatment.
-export const CURRENT_CONFIG_VERSION = 26;
+// 27: add managed ChatGPT parent delegation instructions, including custom-agent verbatim relay opt-in.
+export const CURRENT_CONFIG_VERSION = 27;
 
 // Identifies the bundle-BUILDING logic — the asar patches, plist rewrites,
 // helper rebranding, and signing. A vendored bundle is rebuilt only when this
@@ -271,7 +277,7 @@ export const CURRENT_CONFIG_VERSION = 26;
 // — which is what made every `impel update` re-trigger macOS permission
 // prompts. Bump this ONLY when a code change alters the bytes of a built
 // bundle; leave it alone for changes that don't touch bundle contents.
-export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-07-31.2";
+export const BUNDLE_BUILD_FINGERPRINT = "bundle-2026-08-01.1";
 
 /** Parse the tenant's install manifest, or null when absent/corrupt. */
 export function readTenantManifest(homeDir = os.homedir(), tenantId = null) {
@@ -349,6 +355,10 @@ export function bundleIsCurrent(status, {
       compatibility.vendorSignaturesPreserved === true
       && compatibility.resourceRoot === CHATGPT_RESOURCE_ROOT
       && compatibility.patches?.fastModeForGatewayAuth > 0
+      && compatibility.patches?.threadStartProviderOverride === 1
+      && compatibility.patches?.threadForkProviderOverride === 1
+      && compatibility.patches?.threadResumeProviderOverride === 1
+      && compatibility.patches?.structuredProviderFallbackDisabled === 2
       && compatibility.patches?.tenantDisplayNamePreload === 2
     )),
   );
@@ -1261,6 +1271,9 @@ function writeChatGPTConfig(
     `model_catalog_json = ${tomlString(paths.chatgpt.catalog)}`,
     ...(selectedEffort ? [`model_reasoning_effort = ${tomlString(selectedEffort)}`] : []),
     ...(selectedTier ? [`service_tier = ${tomlString(selectedTier)}`] : []),
+    ...(RUNTIME_BRAND.features.agents
+      ? [`developer_instructions = ${tomlString(IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS)}`]
+      : []),
     "",
     // The built-in ChatGPT provider derives its inference endpoint from
     // chatgpt.com even when chatgpt_base_url points at the gateway. Keep the
@@ -1729,6 +1742,8 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
     linkVendoredChatGPTResources(staging, vendorBundleName);
     const runtimeAsarPath = path.join(staging, "Contents", "Resources", "app.asar");
     const fastModePatchCount = patchFastModeAuthGate(runtimeAsarPath);
+    const threadProviderPatches = patchChatGPTThreadRouting(runtimeAsarPath);
+    const structuredFallbackPatchCount = patchChatGPTStructuredProviderFallback(runtimeAsarPath);
     const asarHash = asarHeaderHash(runtimeAsarPath);
     const vendorExecutable = path.join(vendorBundle, "Contents", "MacOS", executableName);
     const signingIdentity = resolveVendoredAppSigningIdentity(vendorExecutable);
@@ -1773,6 +1788,10 @@ function writeVendoredChatGPTBundleLocked(paths, vendorPath, gatewayUrl, homeDir
       browserData: paths.chatgpt.browserData,
       patches: {
         fastModeForGatewayAuth: fastModePatchCount,
+        threadStartProviderOverride: threadProviderPatches.start,
+        threadForkProviderOverride: threadProviderPatches.fork,
+        threadResumeProviderOverride: threadProviderPatches.resume,
+        structuredProviderFallbackDisabled: structuredFallbackPatchCount,
         desktopAPIForGatewayAuth: 0,
         tenantDisplayNamePreload: 2,
       },
@@ -1995,6 +2014,99 @@ function patchFastModeAuthGate(asarPath) {
   return applyFixedWidthAsarPatches(asarPath, archive, patches, "ChatGPT/Codex Fast-mode eligibility contract");
 }
 
+/**
+ * Force every desktop app-server thread request onto the tenant's configured
+ * Impel provider. The pinned renderer passes null for internal metadata turns,
+ * which otherwise lets those turns escape to native OpenAI authentication.
+ */
+function patchChatGPTThreadRouting(asarPath) {
+  const archive = fs.readFileSync(asarPath);
+  const source = archive.toString("latin1");
+  const provider = JSON.stringify(RUNTIME_BRAND.cli.providerId);
+  const contracts = [
+    {
+      name: "start",
+      pattern: CHATGPT_THREAD_START_PROVIDER,
+      replacement: (match) => (
+        `modelProvider:${provider},serviceName:${match[1]}.serviceName??this.options.defaultServiceName,`
+        + `threadSource:${match[1]}.threadSource??\`user\``
+      ),
+    },
+    {
+      name: "fork",
+      pattern: CHATGPT_THREAD_FORK_PROVIDER,
+      replacement: (match) => (
+        `let ${match[1]}={...${match[2]},modelProvider:${provider},`
+        + `threadSource:${match[2]}.threadSource??\`user\`}`
+      ),
+    },
+    {
+      name: "resume",
+      pattern: CHATGPT_THREAD_RESUME_PROVIDER,
+      replacement: (match) => (
+        `modelProvider:${provider},cwd:${match[1]}?.cwd??null,approvalPolicy:null,sandbox:null,`
+        + `config:${match[1]}?.config??null,developerInstructions:${match[1]}?.developerInstructions`
+      ),
+    },
+  ];
+  const counts = {};
+  const patches = [];
+  for (const contract of contracts) {
+    const matches = [...source.matchAll(contract.pattern)];
+    if (matches.length !== 1) {
+      throw new Error(
+        `ChatGPT/Codex thread-${contract.name} provider patch expected 1 match, found ${matches.length}`,
+      );
+    }
+    const match = matches[0];
+    const replacement = contract.replacement(match);
+    if (replacement.length > match[0].length) {
+      throw new Error(
+        `ChatGPT/Codex thread-${contract.name} provider replacement no longer fits the vendor ASAR contract`,
+      );
+    }
+    patches.push({
+      offset: match.index,
+      original: match[0],
+      replacement: replacement.padEnd(match[0].length, " "),
+    });
+    counts[contract.name] = 1;
+  }
+  applyFixedWidthAsarPatches(
+    asarPath,
+    archive,
+    patches,
+    "ChatGPT/Codex thread-provider routing contract",
+  );
+  return counts;
+}
+
+/**
+ * Structured title, description, and classification turns opt into falling
+ * back to another provider in the pinned renderer. Keep those turns fail
+ * closed on Impel by changing the two reviewed boolean literals in place.
+ */
+function patchChatGPTStructuredProviderFallback(asarPath) {
+  const archive = fs.readFileSync(asarPath);
+  const source = archive.toString("latin1");
+  const matches = [...source.matchAll(CHATGPT_STRUCTURED_PROVIDER_FALLBACK)];
+  if (matches.length !== 2) {
+    throw new Error(
+      `ChatGPT/Codex structured provider-fallback patch expected 2 matches, found ${matches.length}`,
+    );
+  }
+  return applyFixedWidthAsarPatches(
+    asarPath,
+    archive,
+    matches.map((match) => ({
+      offset: match.index,
+      original: match[0],
+      replacement: "allowProviderModelFallback:!1",
+    })),
+    "ChatGPT/Codex structured provider-fallback contract",
+  );
+}
+
 function applyFixedWidthAsarPatches(asarPath, archive, patches, label) {
   if (patches.length === 0) {
     throw new Error(`this desktop app version has an unsupported ${label}; update impel-cli before installing it`);

package/src/commands/launch.js

@@ -14,6 +14,7 @@ import {
   resolveDefaultGateway,
   saveConfig,
 } from "../config.js";
+import { parentVerbatimRelayAppendix } from "../verbatimRelay.js";
 import { impelClaudeBaseUrl, impelCrossAppClaudeBaseUrl } from "../claudeSetup.js";
 import { withGitEnvironment } from "../skills.js";
 import { assertProviderScopes, ensureTenantSelection, tenantCredential } from "../tenants.js";
@@ -49,10 +50,18 @@ export {
 
 export const IMPEL_SPECIALIST_DELEGATION_INSTRUCTIONS = `You are running in an Impel tenant-scoped session. Before starting any non-trivial task, call the Impel MCP tool list_specialists. If exactly one available specialist clearly matches the user's request, its capabilities and its exclusions, delegate the complete request by calling start_specialist_run exactly once with a stable idempotency key, then call read_specialist_run until it reaches a terminal state. When the run succeeds, use the specialist's result as your response instead of redoing the work. If no specialist clearly matches, the tools are unavailable, or the run fails, continue normally yourself. Do not delegate trivial requests, do not call a specialist excluded from the request, and never invent a specialist result.`;
 
+export const IMPEL_CUSTOM_AGENT_VERBATIM_RELAY_APPENDIX = parentVerbatimRelayAppendix();
+
+export const IMPEL_CLAUDE_PARENT_DELEGATION_INSTRUCTIONS =
+  `${IMPEL_SPECIALIST_DELEGATION_INSTRUCTIONS} ${IMPEL_CUSTOM_AGENT_VERBATIM_RELAY_APPENDIX}`;
+
 export const IMPEL_CODEX_SPECIALIST_DELEGATION_INSTRUCTIONS =
   `${IMPEL_SPECIALIST_DELEGATION_INSTRUCTIONS} ` +
   `Codex can defer MCP tools behind tool_search. If an Impel specialist tool is not directly visible, call tool_search for its exact name before treating it as unavailable: impel_specialists-list_specialists for discovery, impel_specialists-start_specialist_run to delegate, and impel_specialists-read_specialist_run to poll the result. Use the returned tool for the same one-run delegation flow.`;
 
+export const IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS =
+  `${IMPEL_CODEX_SPECIALIST_DELEGATION_INSTRUCTIONS} ${IMPEL_CUSTOM_AGENT_VERBATIM_RELAY_APPENDIX}`;
+
 const IMPEL_CODEX_RUNTIME_OVERRIDES = [
   // Codex models may select code mode even when the standalone
   // `codex-code-mode-host` companion is not present in the vendor install.
@@ -64,14 +73,14 @@ const IMPEL_CODEX_RUNTIME_OVERRIDES = [
 export function impelLaunchArguments(tool, argv) {
   if (!RUNTIME_BRAND.features.agents) return [...argv];
   if (tool === "claude") {
-    return ["--append-system-prompt", IMPEL_SPECIALIST_DELEGATION_INSTRUCTIONS, ...argv];
+    return ["--append-system-prompt", IMPEL_CLAUDE_PARENT_DELEGATION_INSTRUCTIONS, ...argv];
   }
   if (tool === "codex") {
     // `-c` is a Codex global option, so it must precede subcommands such as
     // `exec`, `resume`, and `mcp`. JSON strings are valid TOML basic strings.
     return [
       "-c",
-      `developer_instructions=${JSON.stringify(IMPEL_CODEX_SPECIALIST_DELEGATION_INSTRUCTIONS)}`,
+      `developer_instructions=${JSON.stringify(IMPEL_CODEX_PARENT_DELEGATION_INSTRUCTIONS)}`,
       ...IMPEL_CODEX_RUNTIME_OVERRIDES.flatMap((override) => ["-c", override]),
       ...argv,
     ];

package/src/verbatimRelay.js

@@ -0,0 +1,64 @@
+export const VERBATIM_RELAY_OPT_IN_MARKER = "verbatimRelay enabled";
+
+export const VERBATIM_SPAWN_REQUIREMENT = 'fork_turns="none"';
+
+export const VERBATIM_FINAL_TEXT_CONSTRAINTS =
+  "no preface, rewriting, Markdown changes, or independent synthesis";
+
+export function usesVerbatimRelay(agent) {
+  return agent?.verbatimRelay === true;
+}
+
+export function parentVerbatimRelayAppendix() {
+  return (
+    `When an explicit custom agent's catalog-derived description declares that verbatimRelay is enabled, ` +
+    `spawn it with ${VERBATIM_SPAWN_REQUIREMENT} and relay its finalText verbatim with ${VERBATIM_FINAL_TEXT_CONSTRAINTS}; ` +
+    "preserve Sources sections and citations exactly. " +
+    "Custom agents without that declaration keep the default delegation behavior."
+  );
+}
+
+export function customAgentVerbatimDescriptionLead() {
+  return (
+    `Explicit custom agent with ${VERBATIM_RELAY_OPT_IN_MARKER}: ` +
+    `callers must use ${VERBATIM_SPAWN_REQUIREMENT} and relay its result verbatim`
+  );
+}
+
+export function adapterCallerSpawnGuidance(clientLabel) {
+  return (
+    `Callers must spawn this explicit custom ${clientLabel} agent with ${VERBATIM_SPAWN_REQUIREMENT} ` +
+    "and must relay your result verbatim; this is caller guidance and cannot enforce host spawn behavior."
+  );
+}
+
+export function adapterHardCompletionGuidance() {
+  return (
+    `After the orchestration completes, return its single text output verbatim with ${VERBATIM_FINAL_TEXT_CONSTRAINTS}. ` +
+    "A successful output is result.finalText exactly. A failure output preserves the durable runId, output, and error."
+  );
+}
+
+export function adapterSoftCompletionGuidance() {
+  return (
+    "After the orchestration completes, return its single text output as the answer. " +
+    "A successful output is result.finalText. A failure output preserves the durable runId, output, and error. " +
+    "Never invent or independently synthesize a replacement result."
+  );
+}
+
+export function claudeHardCompletionGuidance() {
+  return (
+    `When it succeeds, return result.finalText exactly with ${VERBATIM_FINAL_TEXT_CONSTRAINTS}. ` +
+    "When it fails, return the durable runId, preserved output, and error. " +
+    "Never invent or independently synthesize a replacement result."
+  );
+}
+
+export function claudeSoftCompletionGuidance() {
+  return (
+    "When it succeeds, return result.finalText faithfully as the answer. " +
+    "When it fails, return the durable runId, preserved output, and error. " +
+    "Never invent or independently synthesize a replacement result."
+  );
+}