motebit 1.8.3 → 1.9.0

package/dist/index.js

@@ -657,6 +657,16 @@ var init_eval_attestation = __esm({
   }
 });
 
+// ../../packages/protocol/dist/routing-transcript.js
+var ROUTING_TRANSCRIPT_SPEC_ID;
+var init_routing_transcript = __esm({
+  "../../packages/protocol/dist/routing-transcript.js"() {
+    "use strict";
+    init_esm_shims();
+    ROUTING_TRANSCRIPT_SPEC_ID = "motebit/routing-transcript@1.0";
+  }
+});
+
 // ../../packages/protocol/dist/merkle-tree-hash.js
 function isMerkleTreeVersion(value) {
   return typeof value === "string" && value in MERKLE_TREE_VERSION_REGISTRY;
@@ -889,7 +899,7 @@ function sensitivityPermits(upper, candidate) {
 function isSensitivityLevel(value) {
   return typeof value === "string" && ALL_SENSITIVITY_LEVELS.includes(value);
 }
-var SENSITIVITY_RANK, ALL_SENSITIVITY_LEVELS;
+var SENSITIVITY_RANK, ALL_SENSITIVITY_LEVELS, CONTEXT_SAFE_SENSITIVITY;
 var init_sensitivity = __esm({
   "../../packages/protocol/dist/sensitivity.js"() {
     "use strict";
@@ -908,6 +918,7 @@ var init_sensitivity = __esm({
       "financial",
       "secret"
     ]);
+    CONTEXT_SAFE_SENSITIVITY = Object.freeze(ALL_SENSITIVITY_LEVELS.filter((l6) => rankSensitivity(l6) < rankSensitivity("medical")));
   }
 });
 
@@ -1283,6 +1294,7 @@ var init_dist = __esm({
     init_crypto_suite();
     init_evidence_provenance();
     init_eval_attestation();
+    init_routing_transcript();
     init_merkle_tree_hash();
     init_retention_policy();
     init_computer_use();
@@ -4132,6 +4144,7 @@ __export(dist_exports, {
   COLOR_PRESETS: () => COLOR_PRESETS,
   COMPUTER_ACTION_KINDS: () => COMPUTER_ACTION_KINDS,
   COMPUTER_FAILURE_REASONS: () => COMPUTER_FAILURE_REASONS,
+  CONTEXT_SAFE_SENSITIVITY: () => CONTEXT_SAFE_SENSITIVITY,
   CONVERSATION_LIST_ARTIFACT: () => CONVERSATION_LIST_ARTIFACT,
   CONVERSATION_MESSAGES_ARTIFACT: () => CONVERSATION_MESSAGES_ARTIFACT,
   CO_BROWSE_TRANSITION_KINDS: () => CO_BROWSE_TRANSITION_KINDS,
@@ -4206,6 +4219,7 @@ __export(dist_exports, {
   RESEARCH_TASK_SHAPE: () => RESEARCH_TASK_SHAPE,
   RISK_LABELS: () => RISK_LABELS,
   ROTATE_KEY_AUDIENCE: () => ROTATE_KEY_AUDIENCE,
+  ROUTING_TRANSCRIPT_SPEC_ID: () => ROUTING_TRANSCRIPT_SPEC_ID,
   RUNTIME_ATTACH_AUDIENCE: () => RUNTIME_ATTACH_AUDIENCE,
   RUNTIME_RETENTION_REGISTRY: () => RUNTIME_RETENTION_REGISTRY,
   RegulatoryRiskSemiring: () => RegulatoryRiskSemiring,
@@ -6443,208 +6457,6 @@ var init_promotion = __esm({
   }
 });
 
-// ../../packages/memory-graph/dist/memory-index.js
-function resolveOptions(options) {
-  return {
-    maxBytes: options?.maxBytes ?? DEFAULT_INDEX_BYTE_BUDGET,
-    nowMs: options?.nowMs ?? Date.now(),
-    maxSummaryChars: options?.maxSummaryChars ?? DEFAULT_MAX_SUMMARY_CHARS
-  };
-}
-function classifyCertainty(confidence) {
-  if (confidence >= 0.95)
-    return "absolute";
-  if (confidence >= 0.7)
-    return "confident";
-  return "tentative";
-}
-function scoreForIndex(node, edgeCount, decayedConfidence2) {
-  const pinBonus = node.pinned ? 0.5 : 0;
-  const connectivityBonus = Math.log1p(edgeCount) * 0.15;
-  return decayedConfidence2 + pinBonus + connectivityBonus;
-}
-function rankIndexEntries(nodes, edges, options) {
-  const o5 = resolveOptions(options);
-  const liveNodes = nodes.filter((n2) => !n2.tombstoned);
-  const edgeCounts = /* @__PURE__ */ new Map();
-  for (const edge of edges) {
-    edgeCounts.set(edge.source_id, (edgeCounts.get(edge.source_id) ?? 0) + 1);
-    edgeCounts.set(edge.target_id, (edgeCounts.get(edge.target_id) ?? 0) + 1);
-  }
-  const entries = [];
-  for (const node of liveNodes) {
-    const edgeCount = edgeCounts.get(node.node_id) ?? 0;
-    const decayed = computeDecayedConfidence(node.confidence, node.half_life, o5.nowMs - node.created_at);
-    const score = scoreForIndex(node, edgeCount, decayed);
-    entries.push({
-      node,
-      certainty: classifyCertainty(decayed),
-      score,
-      edgeCount,
-      decayedConfidence: decayed
-    });
-  }
-  entries.sort((a3, b3) => {
-    if (b3.score !== a3.score)
-      return b3.score - a3.score;
-    if (b3.node.created_at !== a3.node.created_at)
-      return b3.node.created_at - a3.node.created_at;
-    return a3.node.node_id < b3.node.node_id ? -1 : 1;
-  });
-  return entries;
-}
-function renderLine(entry, maxSummaryChars) {
-  const shortId = entry.node.node_id.slice(0, 8);
-  const summary = entry.node.content.replace(/\s+/g, " ").trim().slice(0, maxSummaryChars);
-  const suffix = entry.node.pinned ? " [pinned]" : "";
-  const marker = entry.node.source !== void 0 ? MEMORY_SOURCE_MARKERS[entry.node.source] : MEMORY_SOURCE_MARKER_UNKNOWN;
-  return `- [${shortId}] ${summary} (${entry.certainty}, from:${marker})${suffix}`;
-}
-function buildMemoryIndex(nodes, edges, options) {
-  const o5 = resolveOptions(options);
-  const entries = rankIndexEntries(nodes, edges, options);
-  if (entries.length === 0)
-    return "";
-  const header = [
-    "# Memory Index (Layer 1)",
-    "Entries ranked by index-worthiness. Certainty: absolute | confident | tentative. Provenance: from:user is a direct user statement; every other from:* label (tool, peer-agent, inference, consolidation, unknown) is an absorbed, unverified claim. Pull full detail via recall; correct a stale entry via the `rewrite_memory` tool (node_id is the `[xxxxxxxx]` short id).",
-    ""
-  ];
-  const lines = [...header];
-  let bytesUsed = new Blob([lines.join("\n")]).size;
-  for (const entry of entries) {
-    const line = renderLine(entry, o5.maxSummaryChars);
-    const lineBytes = new Blob([line + "\n"]).size;
-    if (bytesUsed + lineBytes > o5.maxBytes)
-      break;
-    lines.push(line);
-    bytesUsed += lineBytes;
-  }
-  return lines.join("\n");
-}
-var DEFAULT_INDEX_BYTE_BUDGET, DEFAULT_MAX_SUMMARY_CHARS;
-var init_memory_index = __esm({
-  "../../packages/memory-graph/dist/memory-index.js"() {
-    "use strict";
-    init_esm_shims();
-    init_dist2();
-    init_dist3();
-    DEFAULT_INDEX_BYTE_BUDGET = 2048;
-    DEFAULT_MAX_SUMMARY_CHARS = 120;
-  }
-});
-
-// ../../packages/memory-graph/dist/embeddings.js
-async function remoteEmbed(text) {
-  const res = await fetch(remoteEmbedUrl, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ texts: [text] }),
-    signal: AbortSignal.timeout(1e4)
-  });
-  const data = await res.json();
-  if (!data.ok || !data.embeddings?.[0]) {
-    throw new Error(data.error ?? "Remote embedding failed");
-  }
-  return data.embeddings[0];
-}
-async function getPipeline() {
-  if (pipelineInstance !== null)
-    return pipelineInstance;
-  if (pipelineFailed)
-    throw new Error("Pipeline previously failed to load");
-  try {
-    const { pipeline } = await import("@xenova/transformers");
-    pipelineInstance = await pipeline("feature-extraction", "Xenova/all-MiniLM-L6-v2");
-    return pipelineInstance;
-  } catch (e2) {
-    pipelineFailed = true;
-    throw e2;
-  }
-}
-async function embedText(text) {
-  if (text === "") {
-    return new Array(EMBEDDING_DIMENSIONS).fill(0);
-  }
-  if (remoteEmbedUrl) {
-    try {
-      return await remoteEmbed(text);
-    } catch {
-    }
-  }
-  try {
-    const extractor = await getPipeline();
-    const output = await extractor(text, { pooling: "mean", normalize: true });
-    return Array.from(output.data);
-  } catch {
-    const hash2 = embedTextHash(text);
-    const padded = new Array(EMBEDDING_DIMENSIONS).fill(0);
-    for (let i3 = 0; i3 < hash2.length; i3++) {
-      padded[i3] = hash2[i3];
-    }
-    return padded;
-  }
-}
-function tokenize(text) {
-  return text.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((t3) => t3.length > 0);
-}
-function hashToken(token) {
-  let h5 = 0;
-  for (let i3 = 0; i3 < token.length; i3++) {
-    h5 = h5 * 31 + token.charCodeAt(i3) | 0;
-  }
-  return (h5 % HASH_DIMENSIONS + HASH_DIMENSIONS) % HASH_DIMENSIONS;
-}
-function charTrigrams(token) {
-  const grams = [];
-  if (token.length < 3) {
-    grams.push(token);
-  } else {
-    for (let i3 = 0; i3 <= token.length - 3; i3++) {
-      grams.push(token.slice(i3, i3 + 3));
-    }
-  }
-  return grams;
-}
-function embedTextHash(text) {
-  const vec = new Array(HASH_DIMENSIONS).fill(0);
-  const tokens = tokenize(text);
-  for (const token of tokens) {
-    const bucket = hashToken(token);
-    vec[bucket] = (vec[bucket] ?? 0) + 1;
-  }
-  for (const token of tokens) {
-    const grams = charTrigrams(token);
-    for (const gram of grams) {
-      const bucket = hashToken("#" + gram);
-      vec[bucket] = (vec[bucket] ?? 0) + 0.5;
-    }
-  }
-  let norm = 0;
-  for (let i3 = 0; i3 < HASH_DIMENSIONS; i3++) {
-    norm += vec[i3] * vec[i3];
-  }
-  norm = Math.sqrt(norm);
-  if (norm > 0) {
-    for (let i3 = 0; i3 < HASH_DIMENSIONS; i3++) {
-      vec[i3] = vec[i3] / norm;
-    }
-  }
-  return vec;
-}
-var EMBEDDING_DIMENSIONS, remoteEmbedUrl, pipelineInstance, pipelineFailed, HASH_DIMENSIONS;
-var init_embeddings = __esm({
-  "../../packages/memory-graph/dist/embeddings.js"() {
-    "use strict";
-    init_esm_shims();
-    EMBEDDING_DIMENSIONS = 384;
-    remoteEmbedUrl = null;
-    pipelineInstance = null;
-    pipelineFailed = false;
-    HASH_DIMENSIONS = 128;
-  }
-});
-
 // ../../packages/memory-graph/dist/retrieval.js
 var retrieval_exports = {};
 __export(retrieval_exports, {
@@ -6911,6 +6723,209 @@ var init_retrieval = __esm({
   }
 });
 
+// ../../packages/memory-graph/dist/memory-index.js
+function resolveOptions(options) {
+  return {
+    maxBytes: options?.maxBytes ?? DEFAULT_INDEX_BYTE_BUDGET,
+    nowMs: options?.nowMs ?? Date.now(),
+    maxSummaryChars: options?.maxSummaryChars ?? DEFAULT_MAX_SUMMARY_CHARS
+  };
+}
+function classifyCertainty(confidence) {
+  if (confidence >= 0.95)
+    return "absolute";
+  if (confidence >= 0.7)
+    return "confident";
+  return "tentative";
+}
+function scoreForIndex(node, edgeCount, decayedConfidence2) {
+  const pinBonus = node.pinned ? 0.5 : 0;
+  const connectivityBonus = Math.log1p(edgeCount) * 0.15;
+  return decayedConfidence2 + pinBonus + connectivityBonus;
+}
+function rankIndexEntries(nodes, edges, options) {
+  const o5 = resolveOptions(options);
+  const liveNodes = nodes.filter((n2) => !n2.tombstoned && isValidAt(n2, o5.nowMs));
+  const edgeCounts = /* @__PURE__ */ new Map();
+  for (const edge of edges) {
+    edgeCounts.set(edge.source_id, (edgeCounts.get(edge.source_id) ?? 0) + 1);
+    edgeCounts.set(edge.target_id, (edgeCounts.get(edge.target_id) ?? 0) + 1);
+  }
+  const entries = [];
+  for (const node of liveNodes) {
+    const edgeCount = edgeCounts.get(node.node_id) ?? 0;
+    const decayed = computeDecayedConfidence(node.confidence, node.half_life, o5.nowMs - node.created_at);
+    const score = scoreForIndex(node, edgeCount, decayed);
+    entries.push({
+      node,
+      certainty: classifyCertainty(decayed),
+      score,
+      edgeCount,
+      decayedConfidence: decayed
+    });
+  }
+  entries.sort((a3, b3) => {
+    if (b3.score !== a3.score)
+      return b3.score - a3.score;
+    if (b3.node.created_at !== a3.node.created_at)
+      return b3.node.created_at - a3.node.created_at;
+    return a3.node.node_id < b3.node.node_id ? -1 : 1;
+  });
+  return entries;
+}
+function renderLine(entry, maxSummaryChars) {
+  const shortId = entry.node.node_id.slice(0, 8);
+  const summary = entry.node.content.replace(/\s+/g, " ").trim().slice(0, maxSummaryChars);
+  const suffix = entry.node.pinned ? " [pinned]" : "";
+  const marker = entry.node.source !== void 0 ? MEMORY_SOURCE_MARKERS[entry.node.source] : MEMORY_SOURCE_MARKER_UNKNOWN;
+  return `- [${shortId}] ${summary} (${entry.certainty}, from:${marker})${suffix}`;
+}
+function buildMemoryIndex(nodes, edges, options) {
+  const o5 = resolveOptions(options);
+  const entries = rankIndexEntries(nodes, edges, options);
+  if (entries.length === 0)
+    return "";
+  const header = [
+    "# Memory Index (Layer 1)",
+    "Entries ranked by index-worthiness. Certainty: absolute | confident | tentative. Provenance: from:user is a direct user statement; every other from:* label (tool, peer-agent, inference, consolidation, unknown) is an absorbed, unverified claim. Pull full detail via recall; correct a stale entry via the `rewrite_memory` tool (node_id is the `[xxxxxxxx]` short id).",
+    ""
+  ];
+  const lines = [...header];
+  let bytesUsed = new Blob([lines.join("\n")]).size;
+  for (const entry of entries) {
+    const line = renderLine(entry, o5.maxSummaryChars);
+    const lineBytes = new Blob([line + "\n"]).size;
+    if (bytesUsed + lineBytes > o5.maxBytes)
+      break;
+    lines.push(line);
+    bytesUsed += lineBytes;
+  }
+  return lines.join("\n");
+}
+var DEFAULT_INDEX_BYTE_BUDGET, DEFAULT_MAX_SUMMARY_CHARS;
+var init_memory_index = __esm({
+  "../../packages/memory-graph/dist/memory-index.js"() {
+    "use strict";
+    init_esm_shims();
+    init_dist2();
+    init_dist3();
+    init_retrieval();
+    DEFAULT_INDEX_BYTE_BUDGET = 2048;
+    DEFAULT_MAX_SUMMARY_CHARS = 120;
+  }
+});
+
+// ../../packages/memory-graph/dist/embeddings.js
+async function remoteEmbed(text) {
+  const res = await fetch(remoteEmbedUrl, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ texts: [text] }),
+    signal: AbortSignal.timeout(1e4)
+  });
+  const data = await res.json();
+  if (!data.ok || !data.embeddings?.[0]) {
+    throw new Error(data.error ?? "Remote embedding failed");
+  }
+  return data.embeddings[0];
+}
+async function getPipeline() {
+  if (pipelineInstance !== null)
+    return pipelineInstance;
+  if (pipelineFailed)
+    throw new Error("Pipeline previously failed to load");
+  try {
+    const { pipeline } = await import("@xenova/transformers");
+    pipelineInstance = await pipeline("feature-extraction", "Xenova/all-MiniLM-L6-v2");
+    return pipelineInstance;
+  } catch (e2) {
+    pipelineFailed = true;
+    throw e2;
+  }
+}
+async function embedText(text) {
+  if (text === "") {
+    return new Array(EMBEDDING_DIMENSIONS).fill(0);
+  }
+  if (remoteEmbedUrl) {
+    try {
+      return await remoteEmbed(text);
+    } catch {
+    }
+  }
+  try {
+    const extractor = await getPipeline();
+    const output = await extractor(text, { pooling: "mean", normalize: true });
+    return Array.from(output.data);
+  } catch {
+    const hash2 = embedTextHash(text);
+    const padded = new Array(EMBEDDING_DIMENSIONS).fill(0);
+    for (let i3 = 0; i3 < hash2.length; i3++) {
+      padded[i3] = hash2[i3];
+    }
+    return padded;
+  }
+}
+function tokenize(text) {
+  return text.toLowerCase().replace(/[^a-z0-9\s]/g, " ").split(/\s+/).filter((t3) => t3.length > 0);
+}
+function hashToken(token) {
+  let h5 = 0;
+  for (let i3 = 0; i3 < token.length; i3++) {
+    h5 = h5 * 31 + token.charCodeAt(i3) | 0;
+  }
+  return (h5 % HASH_DIMENSIONS + HASH_DIMENSIONS) % HASH_DIMENSIONS;
+}
+function charTrigrams(token) {
+  const grams = [];
+  if (token.length < 3) {
+    grams.push(token);
+  } else {
+    for (let i3 = 0; i3 <= token.length - 3; i3++) {
+      grams.push(token.slice(i3, i3 + 3));
+    }
+  }
+  return grams;
+}
+function embedTextHash(text) {
+  const vec = new Array(HASH_DIMENSIONS).fill(0);
+  const tokens = tokenize(text);
+  for (const token of tokens) {
+    const bucket = hashToken(token);
+    vec[bucket] = (vec[bucket] ?? 0) + 1;
+  }
+  for (const token of tokens) {
+    const grams = charTrigrams(token);
+    for (const gram of grams) {
+      const bucket = hashToken("#" + gram);
+      vec[bucket] = (vec[bucket] ?? 0) + 0.5;
+    }
+  }
+  let norm = 0;
+  for (let i3 = 0; i3 < HASH_DIMENSIONS; i3++) {
+    norm += vec[i3] * vec[i3];
+  }
+  norm = Math.sqrt(norm);
+  if (norm > 0) {
+    for (let i3 = 0; i3 < HASH_DIMENSIONS; i3++) {
+      vec[i3] = vec[i3] / norm;
+    }
+  }
+  return vec;
+}
+var EMBEDDING_DIMENSIONS, remoteEmbedUrl, pipelineInstance, pipelineFailed, HASH_DIMENSIONS;
+var init_embeddings = __esm({
+  "../../packages/memory-graph/dist/embeddings.js"() {
+    "use strict";
+    init_esm_shims();
+    EMBEDDING_DIMENSIONS = 384;
+    remoteEmbedUrl = null;
+    pipelineInstance = null;
+    pipelineFailed = false;
+    HASH_DIMENSIONS = 128;
+  }
+});
+
 // ../../packages/memory-graph/dist/accrual.js
 function recalledMemoryBasis(queryEmbedding, nodes, opts = {}) {
   if (queryEmbedding.length === 0)
@@ -6973,7 +6988,7 @@ function scoreNode(node, edgeCount, hasConflictPartner, decayedConfidence2, opti
 }
 function rankNotableMemories(nodes, edges, options) {
   const o5 = resolve(options);
-  const live = nodes.filter((n2) => !n2.tombstoned);
+  const live = nodes.filter((n2) => !n2.tombstoned && (n2.valid_until == null || n2.valid_until > o5.nowMs));
   const liveIds = new Set(live.map((n2) => n2.node_id));
   const nodeMap = new Map(live.map((n2) => [n2.node_id, n2]));
   const edgeCounts = /* @__PURE__ */ new Map();
@@ -7138,6 +7153,8 @@ function findCuriosityTargets(nodes, options) {
   for (const node of nodes) {
     if (node.tombstoned || node.pinned)
       continue;
+    if (node.valid_until != null && node.valid_until <= now)
+      continue;
     if (node.confidence < minOriginalConfidence)
       continue;
     const elapsed = now - node.created_at;
@@ -7945,14 +7962,24 @@ var init_dist3 = __esm({
        * consolidation LLM classifier because the agent has already
        * decided the rewrite is correct. Preserves the original
        * `memory_formed` event (append-only; §3.1) — the old node is
-       * tombstoned + marked `valid_until` now, a fresh node carries the
-       * new content, a Supersedes edge links them, and a
-       * `memory_consolidated` event with `action: "supersede"` is
-       * emitted for the sync layer.
-       *
-       * Returns the new node id. Throws when `oldNodeId` is unknown or
-       * already tombstoned — the tool handler turns that into a
-       * user-surface error.
+       * INVALIDATED (`valid_until` set to now) but kept LIVE, a fresh node
+       * carries the new content, a Supersedes edge links them, and a
+       * `memory_consolidated` event with `action: "supersede"` is emitted
+       * for the sync layer.
+       *
+       * Invalidation-with-provenance, never destruction: the superseded
+       * node is NOT tombstoned, so as-of-`T` recall can still reconstruct
+       * what was believed inside `[valid_from, valid_until)` (doctrine
+       * `memory-architecture.md` invariant #2 — "history is preserved").
+       * This makes the one supersede mechanism identical to the
+       * consolidation `UPDATE` path, and matches what syncing peers apply
+       * (they close the interval via `superseded_valid_until`, they do not
+       * tombstone) — so a tool-superseded node no longer ends up tombstoned
+       * locally yet live on every peer.
+       *
+       * Returns the new node id. Throws when `oldNodeId` is unknown, already
+       * superseded (`valid_until` set), or tombstoned (deleted) — the tool
+       * handler turns that into a user-surface error.
        */
       async supersedeMemoryByNodeId(oldNodeId, newContent, reason) {
         const oldNode = await this.storage.getNode(oldNodeId);
@@ -7960,6 +7987,8 @@ var init_dist3 = __esm({
           throw new Error(`No memory node with id ${oldNodeId}`);
         if (oldNode.tombstoned)
           throw new Error(`Memory ${oldNodeId} is already tombstoned`);
+        if (oldNode.valid_until != null)
+          throw new Error(`Memory ${oldNodeId} is already superseded`);
         const embedding = await this.embed(newContent);
         const now = Date.now();
         const newNode = await this.formMemory({
@@ -7975,7 +8004,6 @@ var init_dist3 = __esm({
           source_turn_id: oldNode.source_turn_id
         }, embedding, oldNode.half_life, now);
         oldNode.valid_until = now;
-        oldNode.tombstoned = true;
         await this.storage.saveNode(oldNode);
         await this.link(newNode.node_id, oldNodeId, RelationType.Supersedes);
         try {
@@ -8373,7 +8401,7 @@ async function* runTurnStreaming(deps, userMessage, options) {
   let providerCallStart;
   let contextPipelineMs;
   let firstTokenAt;
-  const CONTEXT_SAFE_SENSITIVITY = [SensitivityLevel.None, SensitivityLevel.Personal];
+  const CONTEXT_SAFE_SENSITIVITY2 = [...CONTEXT_SAFE_SENSITIVITY];
   const hasMemory = await withStageTimeout("memory_probe", STAGE_TIMEOUTS_MS.memory_probe, memoryGraph.hasAnyMemory());
   const [recentEvents, queryEmbedding, pinnedMemoriesRaw] = await Promise.all([
     withStageTimeout("event_query", STAGE_TIMEOUTS_MS.event_query, eventStore.query({ motebit_id: motebitId, limit: 10 }), (ms) => {
@@ -8386,11 +8414,11 @@ async function* runTurnStreaming(deps, userMessage, options) {
       pinnedMs = ms;
     }) : Promise.resolve([])
   ]);
-  const pinnedMemories = pinnedMemoriesRaw.filter((m3) => CONTEXT_SAFE_SENSITIVITY.includes(m3.sensitivity));
+  const pinnedMemories = pinnedMemoriesRaw.filter((m3) => CONTEXT_SAFE_SENSITIVITY2.includes(m3.sensitivity));
   const similarityMemories = hasMemory ? await withStageTimeout("memory_retrieve", STAGE_TIMEOUTS_MS.memory_retrieve, memoryGraph.recallRelevant(queryEmbedding, {
     limit: 5,
     strengthenCoRetrieved: true,
-    sensitivityFilter: CONTEXT_SAFE_SENSITIVITY
+    sensitivityFilter: CONTEXT_SAFE_SENSITIVITY2
   }), (ms) => {
     memoryRetrieveMs = ms;
   }) : [];
@@ -9032,6 +9060,7 @@ var init_loop = __esm({
     "use strict";
     init_esm_shims();
     init_dist2();
+    init_dist2();
     init_dist3();
     init_infer_state();
     init_core();
@@ -9093,6 +9122,8 @@ __export(dist_exports2, {
   KEY_SUCCESSION_SUITE: () => KEY_SUCCESSION_SUITE,
   MOTEBIT_ANNOUNCEMENT_MAX_AGE_MS: () => MOTEBIT_ANNOUNCEMENT_MAX_AGE_MS,
   MOTEBIT_ANNOUNCEMENT_SUITE: () => MOTEBIT_ANNOUNCEMENT_SUITE,
+  ROUTING_TRANSCRIPT_SPEC_MIRROR: () => ROUTING_TRANSCRIPT_SPEC_MIRROR,
+  ROUTING_TRANSCRIPT_SUITE: () => ROUTING_TRANSCRIPT_SUITE,
   SETTLEMENT_RECORD_SUITE: () => SETTLEMENT_RECORD_SUITE,
   SIGNED_REQUEST_ENVELOPE_SUITE: () => SIGNED_REQUEST_ENVELOPE_SUITE,
   SIGNED_TOKEN_SUITE: () => SIGNED_TOKEN_SUITE,
@@ -9192,6 +9223,7 @@ __export(dist_exports2, {
   signMigrationRequest: () => signMigrationRequest,
   signMotebitAnnouncement: () => signMotebitAnnouncement,
   signRequestEnvelope: () => signRequestEnvelope,
+  signRoutingTranscript: () => signRoutingTranscript,
   signSettlement: () => signSettlement,
   signSkillEnvelope: () => signSkillEnvelope,
   signSkillManifest: () => signSkillManifest,
@@ -9259,6 +9291,7 @@ __export(dist_exports2, {
   verifyRequestEnvelope: () => verifyRequestEnvelope,
   verifyRetentionManifest: () => verifyRetentionManifest,
   verifyRevocationAnchor: () => verifyRevocationAnchor,
+  verifyRoutingTranscript: () => verifyRoutingTranscript,
   verifySettlement: () => verifySettlement,
   verifySignedToken: () => verifySignedToken,
   verifySkillBundle: () => verifySkillBundle,
@@ -10457,8 +10490,8 @@ function createFROST(opts) {
   const Signature = {
     // RFC 9591 Appendix A encodes signatures canonically as
     // SerializeElement(R) || SerializeScalar(z).
-    encode: (R3, z43) => {
-      let res = concatBytes3(serializePoint(R3), Fn.toBytes(z43));
+    encode: (R3, z44) => {
+      let res = concatBytes3(serializePoint(R3), Fn.toBytes(z44));
       if (opts.adjustTx)
         res = opts.adjustTx.encode(res);
       return res;
@@ -10467,8 +10500,8 @@ function createFROST(opts) {
       if (opts.adjustTx)
         sig = opts.adjustTx.decode(sig);
       const R3 = parsePoint(sig.subarray(0, -Fn.BYTES));
-      const z43 = Fn.fromBytes(sig.subarray(-Fn.BYTES));
-      return { R: R3, z: z43 };
+      const z44 = Fn.fromBytes(sig.subarray(-Fn.BYTES));
+      return { R: R3, z: z44 };
     }
   };
   const genPointScalarPair = (rng = randomBytes3) => {
@@ -10554,10 +10587,10 @@ function createFROST(opts) {
     validate(id, commitment, proof) {
       if (commitment.length < 1)
         throw new Error("commitment should have at least one element");
-      const { R: R3, z: z43 } = Signature.decode(proof);
+      const { R: R3, z: z44 } = Signature.decode(proof);
       const phi = parsePoint(commitment[0]);
       const c3 = this.challenge(id, phi, R3);
-      if (!R3.equals(Point2.BASE.multiply(z43).subtract(phi.multiply(c3))))
+      if (!R3.equals(Point2.BASE.multiply(z44).subtract(phi.multiply(c3))))
         throw new Error("invalid proof of knowledge");
     }
   };
@@ -10571,16 +10604,16 @@ function createFROST(opts) {
       const { point: R3, scalar: r2 } = genPointScalarPair(rng);
       const PK = Point2.BASE.multiply(sk);
       const c3 = this.challenge(R3, PK, msg);
-      const z43 = Fn.add(r2, Fn.mul(c3, sk));
-      return [R3, z43];
+      const z44 = Fn.add(r2, Fn.mul(c3, sk));
+      return [R3, z44];
     },
-    verify(msg, R3, z43, PK) {
+    verify(msg, R3, z44, PK) {
       if (opts.adjustPoint)
         PK = opts.adjustPoint(PK);
       if (opts.adjustPoint)
         R3 = opts.adjustPoint(R3);
       const c3 = this.challenge(R3, PK, msg);
-      const zB = Point2.BASE.multiply(z43);
+      const zB = Point2.BASE.multiply(z44);
       const cA = PK.multiply(c3);
       let check = zB.subtract(cA).subtract(R3);
       if (check.clearCofactor)
@@ -10917,10 +10950,10 @@ function createFROST(opts) {
       }
       const GPK = parsePoint(pub.commitments[0]);
       const { groupCommitment } = getGroupCommitment(GPK, commitmentList, msg);
-      let z43 = Fn.ZERO;
+      let z44 = Fn.ZERO;
       for (const id of ids)
-        z43 = Fn.add(z43, Fn.fromBytes(sigShares[id]));
-      if (!Basic.verify(msg, groupCommitment, z43, GPK)) {
+        z44 = Fn.add(z44, Fn.fromBytes(sigShares[id]));
+      if (!Basic.verify(msg, groupCommitment, z44, GPK)) {
         const cheaters = [];
         for (const id of ids) {
           if (!this.verifyShare(pub, commitmentList, msg, id, sigShares[id]))
@@ -10928,20 +10961,20 @@ function createFROST(opts) {
         }
         throw new AggErr("aggregation failed", cheaters);
       }
-      return Signature.encode(groupCommitment, z43);
+      return Signature.encode(groupCommitment, z44);
     },
     // Basic sign/verify using single key
     sign(msg, secretKey) {
       let sk = Fn.fromBytes(secretKey);
       if (opts.adjustScalar)
         sk = opts.adjustScalar(sk);
-      const [R3, z43] = Basic.sign(msg, sk);
-      return Signature.encode(R3, z43);
+      const [R3, z44] = Basic.sign(msg, sk);
+      return Signature.encode(R3, z44);
     },
     verify(sig, msg, publicKey) {
       const PK = opts.parsePublicKey ? opts.parsePublicKey(publicKey) : parsePoint(publicKey);
-      const { R: R3, z: z43 } = Signature.decode(sig);
-      return Basic.verify(msg, R3, z43, PK);
+      const { R: R3, z: z44 } = Signature.decode(sig);
+      return Basic.verify(msg, R3, z44, PK);
     },
     // Combine multiple secret shares to restore secret
     combineSecret(shares, signers) {
@@ -14384,6 +14417,60 @@ async function verifyEvalAttestation(attestation) {
   }
   return { valid: true };
 }
+function canonicalizeForSigning3(unsigned) {
+  return new TextEncoder().encode(canonicalJson(unsigned));
+}
+async function signRoutingTranscript(body, delegatorPrivateKey) {
+  const unsigned = {
+    ...body,
+    suite: ROUTING_TRANSCRIPT_SUITE
+  };
+  const message2 = canonicalizeForSigning3(unsigned);
+  const sig = await signBySuite(ROUTING_TRANSCRIPT_SUITE, message2, delegatorPrivateKey);
+  return { ...unsigned, signature: toBase64Url(sig) };
+}
+async function verifyRoutingTranscript(transcript) {
+  if (transcript.suite !== ROUTING_TRANSCRIPT_SUITE) {
+    return { valid: false, reason: "unsupported_suite" };
+  }
+  if (transcript.spec !== ROUTING_TRANSCRIPT_SPEC_MIRROR) {
+    return { valid: false, reason: "unsupported_spec" };
+  }
+  const candidates = Array.isArray(
+    transcript.candidates
+  ) ? transcript.candidates : [];
+  if (candidates.length === 0) {
+    return { valid: false, reason: "empty_candidates" };
+  }
+  if (!candidates.some((c3) => c3.motebit_id === transcript.winner_motebit_id)) {
+    return { valid: false, reason: "winner_not_in_candidates" };
+  }
+  if (!/^[0-9a-f]{64}$/i.test(transcript.delegator_public_key)) {
+    return { valid: false, reason: "malformed_public_key" };
+  }
+  const publicKey = hexToBytes5(transcript.delegator_public_key);
+  let sigBytes;
+  try {
+    sigBytes = fromBase64Url(transcript.signature);
+  } catch {
+    return { valid: false, reason: "malformed_signature" };
+  }
+  if (sigBytes.length !== 64) {
+    return { valid: false, reason: "malformed_signature" };
+  }
+  const { signature: _sig, ...unsigned } = transcript;
+  const message2 = canonicalizeForSigning3(unsigned);
+  let valid;
+  try {
+    valid = await verifyBySuite(transcript.suite, message2, sigBytes, publicKey);
+  } catch {
+    return { valid: false, reason: "signature_invalid" };
+  }
+  if (!valid) {
+    return { valid: false, reason: "signature_invalid" };
+  }
+  return { valid: true };
+}
 async function computeCredentialLeaf(credential, treeHashVersion = "merkle-sha256-plain-v1") {
   return canonicalLeaf(credential, treeHashVersion);
 }
@@ -16488,7 +16575,7 @@ async function verify(artifact, options) {
       return verifySkillEnvelopeArtifact(resolved);
   }
 }
-var __defProp2, __getOwnPropNames2, __esm2, __export2, hasHexBuiltin, hexes, asciis, oidNist, init_utils, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, U32_MASK64, _32n, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, SHA256_K, SHA256_W, SHA2_32B, _SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA2_64B, _SHA512, _SHA384, sha256, sha512, sha384, init_sha2, abytes3, anumber2, bytesToHex3, concatBytes3, hexToBytes3, isBytes3, randomBytes3, _0n, _1n, isPosBig, bitMask, init_utils2, _0n2, _1n2, _2n, _3n, _4n, _5n, _7n, _8n, _9n, _16n, FIELD_FIELDS, FIELD_SQRT, _Field, init_modular, _0n3, _1n3, pointPrecomputes, pointWindowSizes, wNAF2, init_curve, init_fft, os2ip, _DST_scalar, init_hash_to_curve, validateSigners, validateCommitmentsNum, AggErr, init_frost, _DST_scalarBytes, init_oprf, _HMAC, hmac, init_hmac, divNearest, DERErr, DER, _0n4, _1n4, _2n2, _3n2, _4n2, init_weierstrass, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, p256_Point, p256, p256_hasher, p256_oprf, p256_FROST, p384_Point, p384, p384_hasher, p384_oprf, p521_Point, p521, p521_hasher, p521_oprf, init_nist, ed25519_CURVE, P, N, Gx, Gy, _a, _d, h, L, captureTrace, err, isBig, isStr, isBytes, abytes, u8n, u8fr, padh, bytesToHex, C, _ch, hexToBytes, cr, subtle, concatBytes, randomBytes, big, assertRange, M, P_MASK, modP, modN, invert, callHash, checkDigest, apoint, B256, Point, G, I, numTo32bLE, bytesToNumberLE, pow2, pow_2_252_3, RM1, uvRatio, modL_LE, sha512a, hash2extK, getExtendedPublicKeyAsync, getPublicKeyAsync, hashFinishA, _sign, signAsync, defaultVerifyOpts, _verify, verifyAsync, hashes, randomSecretKey, keygenAsync, W, scalarBits, pwindows, pwindowSize, precompute, Gpows, ctneg, wNAF, SIGNED_TOKEN_SUITE, BASE58_ALPHABET, NODE_TAG_V2, LEAF_TAG_V2, EXECUTION_RECEIPT_SUITE, TOOL_INVOCATION_RECEIPT_SUITE, COMPUTER_SESSION_RECEIPT_SUITE, DELEGATION_TOKEN_SUITE, NANOS_PER_MINOR, SIGNED_REQUEST_ENVELOPE_SUITE, ADJUDICATOR_VOTE_SUITE, DISPUTE_RESOLUTION_SUITE, DISPUTE_REQUEST_SUITE, DISPUTE_EVIDENCE_SUITE, DISPUTE_APPEAL_SUITE, APPROVAL_DECISION_SUITE, BOND_COMMITMENT_SUITE, CONSOLIDATION_RECEIPT_SUITE, CONSOLIDATION_MUTATION_MANIFEST_SUITE, BALANCE_WAIVER_SUITE, SETTLEMENT_RECORD_SUITE, FEDERATION_SETTLEMENT_RECORD_SUITE, KEY_SUCCESSION_SUITE, GUARDIAN_REVOCATION_SUITE, COLLABORATIVE_RECEIPT_SUITE, DEVICE_REGISTRATION_SUITE, DEVICE_REGISTRATION_MAX_AGE_MS, MOTEBIT_ANNOUNCEMENT_SUITE, MOTEBIT_ANNOUNCEMENT_MAX_AGE_MS, ANNOUNCEMENT_SURFACES, SKILL_SIGNATURE_SUITE, VC_TYPE_GRADIENT2, VC_TYPE_REPUTATION2, VC_TYPE_TRUST2, ONE_HOUR_MS, CONTENT_ARTIFACT_SUITE, EVAL_ATTESTATION_SUITE, EVAL_KINDS_MIRROR, CREDENTIAL_ANCHOR_SUITE, REVOCATION_ANCHOR_SUITE, AGENT_SETTLEMENT_ANCHOR_SUITE, FEDERATION_SETTLEMENT_ANCHOR_SUITE, DELETION_CERTIFICATE_SUITE, WITNESS_OMISSION_DISPUTE_WINDOW_MS, EMPTY_FEDERATION_GRAPH_ANCHOR_ROOT, REASON_TABLE, WITNESS_OMISSION_DISPUTE_SUITE, FEDERATION_HEARTBEAT_SUITE, HEARTBEAT_FRESHNESS_WINDOW_MS, BASE58_ALPHABET2, IDENTITY_FILE_SUITE, SIG_PREFIX, SIG_SUFFIX, DEFAULT_CLOCK_SKEW_SECONDS;
+var __defProp2, __getOwnPropNames2, __esm2, __export2, hasHexBuiltin, hexes, asciis, oidNist, init_utils, HashMD, SHA256_IV, SHA384_IV, SHA512_IV, init_md, U32_MASK64, _32n, shrSH, shrSL, rotrSH, rotrSL, rotrBH, rotrBL, add3L, add3H, add4L, add4H, add5L, add5H, init_u64, SHA256_K, SHA256_W, SHA2_32B, _SHA256, K512, SHA512_Kh, SHA512_Kl, SHA512_W_H, SHA512_W_L, SHA2_64B, _SHA512, _SHA384, sha256, sha512, sha384, init_sha2, abytes3, anumber2, bytesToHex3, concatBytes3, hexToBytes3, isBytes3, randomBytes3, _0n, _1n, isPosBig, bitMask, init_utils2, _0n2, _1n2, _2n, _3n, _4n, _5n, _7n, _8n, _9n, _16n, FIELD_FIELDS, FIELD_SQRT, _Field, init_modular, _0n3, _1n3, pointPrecomputes, pointWindowSizes, wNAF2, init_curve, init_fft, os2ip, _DST_scalar, init_hash_to_curve, validateSigners, validateCommitmentsNum, AggErr, init_frost, _DST_scalarBytes, init_oprf, _HMAC, hmac, init_hmac, divNearest, DERErr, DER, _0n4, _1n4, _2n2, _3n2, _4n2, init_weierstrass, nist_exports, p256_CURVE, p384_CURVE, p521_CURVE, p256_Point, p256, p256_hasher, p256_oprf, p256_FROST, p384_Point, p384, p384_hasher, p384_oprf, p521_Point, p521, p521_hasher, p521_oprf, init_nist, ed25519_CURVE, P, N, Gx, Gy, _a, _d, h, L, captureTrace, err, isBig, isStr, isBytes, abytes, u8n, u8fr, padh, bytesToHex, C, _ch, hexToBytes, cr, subtle, concatBytes, randomBytes, big, assertRange, M, P_MASK, modP, modN, invert, callHash, checkDigest, apoint, B256, Point, G, I, numTo32bLE, bytesToNumberLE, pow2, pow_2_252_3, RM1, uvRatio, modL_LE, sha512a, hash2extK, getExtendedPublicKeyAsync, getPublicKeyAsync, hashFinishA, _sign, signAsync, defaultVerifyOpts, _verify, verifyAsync, hashes, randomSecretKey, keygenAsync, W, scalarBits, pwindows, pwindowSize, precompute, Gpows, ctneg, wNAF, SIGNED_TOKEN_SUITE, BASE58_ALPHABET, NODE_TAG_V2, LEAF_TAG_V2, EXECUTION_RECEIPT_SUITE, TOOL_INVOCATION_RECEIPT_SUITE, COMPUTER_SESSION_RECEIPT_SUITE, DELEGATION_TOKEN_SUITE, NANOS_PER_MINOR, SIGNED_REQUEST_ENVELOPE_SUITE, ADJUDICATOR_VOTE_SUITE, DISPUTE_RESOLUTION_SUITE, DISPUTE_REQUEST_SUITE, DISPUTE_EVIDENCE_SUITE, DISPUTE_APPEAL_SUITE, APPROVAL_DECISION_SUITE, BOND_COMMITMENT_SUITE, CONSOLIDATION_RECEIPT_SUITE, CONSOLIDATION_MUTATION_MANIFEST_SUITE, BALANCE_WAIVER_SUITE, SETTLEMENT_RECORD_SUITE, FEDERATION_SETTLEMENT_RECORD_SUITE, KEY_SUCCESSION_SUITE, GUARDIAN_REVOCATION_SUITE, COLLABORATIVE_RECEIPT_SUITE, DEVICE_REGISTRATION_SUITE, DEVICE_REGISTRATION_MAX_AGE_MS, MOTEBIT_ANNOUNCEMENT_SUITE, MOTEBIT_ANNOUNCEMENT_MAX_AGE_MS, ANNOUNCEMENT_SURFACES, SKILL_SIGNATURE_SUITE, VC_TYPE_GRADIENT2, VC_TYPE_REPUTATION2, VC_TYPE_TRUST2, ONE_HOUR_MS, CONTENT_ARTIFACT_SUITE, EVAL_ATTESTATION_SUITE, EVAL_KINDS_MIRROR, ROUTING_TRANSCRIPT_SUITE, ROUTING_TRANSCRIPT_SPEC_MIRROR, CREDENTIAL_ANCHOR_SUITE, REVOCATION_ANCHOR_SUITE, AGENT_SETTLEMENT_ANCHOR_SUITE, FEDERATION_SETTLEMENT_ANCHOR_SUITE, DELETION_CERTIFICATE_SUITE, WITNESS_OMISSION_DISPUTE_WINDOW_MS, EMPTY_FEDERATION_GRAPH_ANCHOR_ROOT, REASON_TABLE, WITNESS_OMISSION_DISPUTE_SUITE, FEDERATION_HEARTBEAT_SUITE, HEARTBEAT_FRESHNESS_WINDOW_MS, BASE58_ALPHABET2, IDENTITY_FILE_SUITE, SIG_PREFIX, SIG_SUFFIX, DEFAULT_CLOCK_SKEW_SECONDS;
 var init_dist5 = __esm({
   "../../packages/crypto/dist/index.js"() {
     "use strict";
@@ -18364,6 +18451,8 @@ var init_dist5 = __esm({
     CONTENT_ARTIFACT_SUITE = "motebit-jcs-ed25519-hex-v1";
     EVAL_ATTESTATION_SUITE = "motebit-jcs-ed25519-b64-v1";
     EVAL_KINDS_MIRROR = Object.freeze(["verification_audit"]);
+    ROUTING_TRANSCRIPT_SUITE = "motebit-jcs-ed25519-b64-v1";
+    ROUTING_TRANSCRIPT_SPEC_MIRROR = "motebit/routing-transcript@1.0";
     CREDENTIAL_ANCHOR_SUITE = "motebit-jcs-ed25519-hex-v1";
     REVOCATION_ANCHOR_SUITE = "motebit-concat-ed25519-hex-v1";
     AGENT_SETTLEMENT_ANCHOR_SUITE = "motebit-jcs-ed25519-hex-v1";
@@ -20988,7 +21077,7 @@ var init_config2 = __esm({
   "src/config.ts"() {
     "use strict";
     init_esm_shims();
-    VERSION = true ? "1.8.3" : "0.0.0-dev";
+    VERSION = true ? "1.9.0" : "0.0.0-dev";
     CONFIG_DIR = process.env["MOTEBIT_CONFIG_DIR"] ?? path2.join(os.homedir(), ".motebit");
     CONFIG_PATH = path2.join(CONFIG_DIR, "config.json");
     RELAY_DIR = path2.join(CONFIG_DIR, "relay");
@@ -27367,6 +27456,9 @@ function cappedCounts(successful, failed) {
   return { s: s3, f: COUNT_CAP - s3 };
 }
 function exploratoryQuality(c3, explore, capability) {
+  return exploratoryQualityDetail(c3, explore, capability).quality;
+}
+function exploratoryQualityDetail(c3, explore, capability) {
   const prior = levelPrior(c3.trustRecord?.trust_level);
   const counts = competenceCounts(c3.trustRecord, capability);
   const { s: s3, f: f6 } = cappedCounts(counts.successful, counts.failed);
@@ -27376,9 +27468,9 @@ function exploratoryQuality(c3, explore, capability) {
   const base = clampStrength(explore.strength ?? 1);
   const strength = c3.bonded ? Math.min(1, base * BOND_EXPLORE_BOOST) : base;
   if (strength <= 0)
-    return mean;
+    return { quality: mean, alpha, beta };
   const draw = thompsonDraw(alpha, beta, `${explore.seed}|${c3.motebit_id}`);
-  return mean + strength * (draw - mean);
+  return { quality: mean + strength * (draw - mean), alpha, beta, theta: draw };
 }
 function reliabilityOf(record, capability) {
   if (!record)
@@ -27414,10 +27506,65 @@ function rankWorkers(selfId, candidates, opts) {
   });
   return ranked.map((r2) => ({ motebit_id: r2.motebit_id, score: r2.score, route: r2.route })).sort((a3, b3) => b3.score - a3.score || (a3.motebit_id < b3.motebit_id ? -1 : 1));
 }
-function selectWorker(selfId, candidates, opts) {
-  return rankWorkers(selfId, candidates, opts)[0] ?? null;
+function rankWorkersWithBasis(selfId, candidates, opts) {
+  const weights = opts?.weights ?? DEFAULT_WEIGHTS;
+  const capability = opts?.capability;
+  const explore = opts?.explore != null && clampStrength(opts.explore.strength ?? 1) > 0 ? opts.explore : void 0;
+  const ranking = rankWorkers(selfId, candidates, opts);
+  const winner = ranking[0] ?? null;
+  if (winner == null)
+    return { winner: null, basis: null };
+  const rankIndex = new Map(ranking.map((r2, i3) => [r2.motebit_id, i3]));
+  const frozen = candidates.filter((c3) => c3.trustRecord?.trust_level !== AgentTrustLevel.Blocked).map((c3) => {
+    const shared = {
+      motebit_id: c3.motebit_id,
+      ...c3.unitCost != null ? { unit_cost: c3.unitCost } : {},
+      ...c3.bonded === true ? { bonded: true } : {}
+    };
+    if (explore) {
+      const d4 = exploratoryQualityDetail(c3, explore, capability);
+      return {
+        ...shared,
+        trust_axis: d4.quality,
+        reliability_axis: d4.quality,
+        alpha: d4.alpha,
+        beta: d4.beta,
+        ...d4.theta != null ? { theta: d4.theta } : {}
+      };
+    }
+    return {
+      ...shared,
+      trust_axis: trustLevelToScore(c3.trustRecord?.trust_level ?? AgentTrustLevel.Unknown),
+      reliability_axis: reliabilityOf(c3.trustRecord, capability)
+    };
+  }).sort((a3, b3) => (rankIndex.get(a3.motebit_id) ?? Number.MAX_SAFE_INTEGER) - (rankIndex.get(b3.motebit_id) ?? Number.MAX_SAFE_INTEGER));
+  const exploitTop = explore ? rankWorkers(selfId, candidates, {
+    ...opts?.weights != null ? { weights: opts.weights } : {},
+    ...capability != null ? { capability } : {}
+  })[0] ?? null : winner;
+  return {
+    winner,
+    basis: {
+      capability: capability ?? "",
+      candidates: frozen,
+      seed: opts?.explore?.seed ?? "",
+      strength: explore ? clampStrength(explore.strength ?? 1) : 0,
+      weights: {
+        trust: weights.trust,
+        reliability: weights.reliability,
+        cost: weights.cost,
+        latency: weights.latency
+      },
+      count_cap: COUNT_CAP,
+      bond_explore_boost: BOND_EXPLORE_BOOST,
+      default_latency_ms: DEFAULT_LATENCY_MS,
+      algorithm_version: WORKER_SELECTION_ALGORITHM_VERSION,
+      winner_motebit_id: winner.motebit_id,
+      explored: explore != null && exploitTop != null && winner.motebit_id !== exploitTop.motebit_id
+    }
+  };
 }
-var DEFAULT_LATENCY_MS, COUNT_CAP, BOND_EXPLORE_BOOST, DEFAULT_WEIGHTS;
+var DEFAULT_LATENCY_MS, COUNT_CAP, BOND_EXPLORE_BOOST, DEFAULT_WEIGHTS, WORKER_SELECTION_ALGORITHM_VERSION;
 var init_worker_selection = __esm({
   "../../packages/semiring/dist/worker-selection.js"() {
     "use strict";
@@ -27434,6 +27581,7 @@ var init_worker_selection = __esm({
       cost: 0.2,
       latency: 0
     };
+    WORKER_SELECTION_ALGORITHM_VERSION = "motebit-worker-selection@1";
   }
 });
 
@@ -31628,11 +31776,11 @@ var init_three_core = __esm({
        * @param {number} [z=0] - The z value of this quaternion.
        * @param {number} [w=1] - The w value of this quaternion.
        */
-      constructor(x3 = 0, y5 = 0, z43 = 0, w2 = 1) {
+      constructor(x3 = 0, y5 = 0, z44 = 0, w2 = 1) {
         this.isQuaternion = true;
         this._x = x3;
         this._y = y5;
-        this._z = z43;
+        this._z = z44;
         this._w = w2;
       }
       /**
@@ -31776,10 +31924,10 @@ var init_three_core = __esm({
        * @param {number} w - The w value of this quaternion.
        * @return {Quaternion} A reference to this quaternion.
        */
-      set(x3, y5, z43, w2) {
+      set(x3, y5, z44, w2) {
         this._x = x3;
         this._y = y5;
-        this._z = z43;
+        this._z = z44;
         this._w = w2;
         this._onChangeCallback();
         return this;
@@ -31815,15 +31963,15 @@ var init_three_core = __esm({
        * @return {Quaternion} A reference to this quaternion.
        */
       setFromEuler(euler, update2 = true) {
-        const x3 = euler._x, y5 = euler._y, z43 = euler._z, order = euler._order;
+        const x3 = euler._x, y5 = euler._y, z44 = euler._z, order = euler._order;
         const cos = Math.cos;
         const sin = Math.sin;
         const c1 = cos(x3 / 2);
         const c22 = cos(y5 / 2);
-        const c3 = cos(z43 / 2);
+        const c3 = cos(z44 / 2);
         const s1 = sin(x3 / 2);
         const s22 = sin(y5 / 2);
-        const s3 = sin(z43 / 2);
+        const s3 = sin(z44 / 2);
         switch (order) {
           case "XYZ":
             this._x = s1 * c22 * c3 + c1 * s22 * s3;
@@ -32101,12 +32249,12 @@ var init_three_core = __esm({
        * @return {Quaternion} A reference to this quaternion.
        */
       slerp(qb, t3) {
-        let x3 = qb._x, y5 = qb._y, z43 = qb._z, w2 = qb._w;
+        let x3 = qb._x, y5 = qb._y, z44 = qb._z, w2 = qb._w;
         let dot = this.dot(qb);
         if (dot < 0) {
           x3 = -x3;
           y5 = -y5;
-          z43 = -z43;
+          z44 = -z44;
           w2 = -w2;
           dot = -dot;
         }
@@ -32118,13 +32266,13 @@ var init_three_core = __esm({
           t3 = Math.sin(t3 * theta) / sin;
           this._x = this._x * s3 + x3 * t3;
           this._y = this._y * s3 + y5 * t3;
-          this._z = this._z * s3 + z43 * t3;
+          this._z = this._z * s3 + z44 * t3;
           this._w = this._w * s3 + w2 * t3;
           this._onChangeCallback();
         } else {
           this._x = this._x * s3 + x3 * t3;
           this._y = this._y * s3 + y5 * t3;
-          this._z = this._z * s3 + z43 * t3;
+          this._z = this._z * s3 + z44 * t3;
           this._w = this._w * s3 + w2 * t3;
           this.normalize();
         }
@@ -32247,10 +32395,10 @@ var init_three_core = __esm({
        * @param {number} [y=0] - The y value of this vector.
        * @param {number} [z=0] - The z value of this vector.
        */
-      constructor(x3 = 0, y5 = 0, z43 = 0) {
+      constructor(x3 = 0, y5 = 0, z44 = 0) {
         this.x = x3;
         this.y = y5;
-        this.z = z43;
+        this.z = z44;
       }
       /**
        * Sets the vector components.
@@ -32260,11 +32408,11 @@ var init_three_core = __esm({
        * @param {number} z - The value of the z component.
        * @return {Vector3} A reference to this vector.
        */
-      set(x3, y5, z43) {
-        if (z43 === void 0) z43 = this.z;
+      set(x3, y5, z44) {
+        if (z44 === void 0) z44 = this.z;
         this.x = x3;
         this.y = y5;
-        this.z = z43;
+        this.z = z44;
         return this;
       }
       /**
@@ -32305,8 +32453,8 @@ var init_three_core = __esm({
        * @param {number} z - The value to set.
        * @return {Vector3} A reference to this vector.
        */
-      setZ(z43) {
-        this.z = z43;
+      setZ(z44) {
+        this.z = z44;
         return this;
       }
       /**
@@ -32520,11 +32668,11 @@ var init_three_core = __esm({
        * @return {Vector3} A reference to this vector.
        */
       applyMatrix3(m3) {
-        const x3 = this.x, y5 = this.y, z43 = this.z;
+        const x3 = this.x, y5 = this.y, z44 = this.z;
         const e2 = m3.elements;
-        this.x = e2[0] * x3 + e2[3] * y5 + e2[6] * z43;
-        this.y = e2[1] * x3 + e2[4] * y5 + e2[7] * z43;
-        this.z = e2[2] * x3 + e2[5] * y5 + e2[8] * z43;
+        this.x = e2[0] * x3 + e2[3] * y5 + e2[6] * z44;
+        this.y = e2[1] * x3 + e2[4] * y5 + e2[7] * z44;
+        this.z = e2[2] * x3 + e2[5] * y5 + e2[8] * z44;
         return this;
       }
       /**
@@ -32545,12 +32693,12 @@ var init_three_core = __esm({
        * @return {Vector3} A reference to this vector.
        */
       applyMatrix4(m3) {
-        const x3 = this.x, y5 = this.y, z43 = this.z;
+        const x3 = this.x, y5 = this.y, z44 = this.z;
         const e2 = m3.elements;
-        const w2 = 1 / (e2[3] * x3 + e2[7] * y5 + e2[11] * z43 + e2[15]);
-        this.x = (e2[0] * x3 + e2[4] * y5 + e2[8] * z43 + e2[12]) * w2;
-        this.y = (e2[1] * x3 + e2[5] * y5 + e2[9] * z43 + e2[13]) * w2;
-        this.z = (e2[2] * x3 + e2[6] * y5 + e2[10] * z43 + e2[14]) * w2;
+        const w2 = 1 / (e2[3] * x3 + e2[7] * y5 + e2[11] * z44 + e2[15]);
+        this.x = (e2[0] * x3 + e2[4] * y5 + e2[8] * z44 + e2[12]) * w2;
+        this.y = (e2[1] * x3 + e2[5] * y5 + e2[9] * z44 + e2[13]) * w2;
+        this.z = (e2[2] * x3 + e2[6] * y5 + e2[10] * z44 + e2[14]) * w2;
         return this;
       }
       /**
@@ -32598,11 +32746,11 @@ var init_three_core = __esm({
        * @return {Vector3} A reference to this vector.
        */
       transformDirection(m3) {
-        const x3 = this.x, y5 = this.y, z43 = this.z;
+        const x3 = this.x, y5 = this.y, z44 = this.z;
         const e2 = m3.elements;
-        this.x = e2[0] * x3 + e2[4] * y5 + e2[8] * z43;
-        this.y = e2[1] * x3 + e2[5] * y5 + e2[9] * z43;
-        this.z = e2[2] * x3 + e2[6] * y5 + e2[10] * z43;
+        this.x = e2[0] * x3 + e2[4] * y5 + e2[8] * z44;
+        this.y = e2[1] * x3 + e2[5] * y5 + e2[9] * z44;
+        this.z = e2[2] * x3 + e2[6] * y5 + e2[10] * z44;
         return this.normalize();
       }
       /**
@@ -34139,10 +34287,10 @@ var init_three_core = __esm({
        * @param {number} [z=0] - The z value of this vector.
        * @param {number} [w=1] - The w value of this vector.
        */
-      constructor(x3 = 0, y5 = 0, z43 = 0, w2 = 1) {
+      constructor(x3 = 0, y5 = 0, z44 = 0, w2 = 1) {
         this.x = x3;
         this.y = y5;
-        this.z = z43;
+        this.z = z44;
         this.w = w2;
       }
       /**
@@ -34176,10 +34324,10 @@ var init_three_core = __esm({
        * @param {number} w - The value of the w component.
        * @return {Vector4} A reference to this vector.
        */
-      set(x3, y5, z43, w2) {
+      set(x3, y5, z44, w2) {
         this.x = x3;
         this.y = y5;
-        this.z = z43;
+        this.z = z44;
         this.w = w2;
         return this;
       }
@@ -34222,8 +34370,8 @@ var init_three_core = __esm({
        * @param {number} z - The value to set.
        * @return {Vector4} A reference to this vector.
        */
-      setZ(z43) {
-        this.z = z43;
+      setZ(z44) {
+        this.z = z44;
         return this;
       }
       /**
@@ -34432,12 +34580,12 @@ var init_three_core = __esm({
        * @return {Vector4} A reference to this vector.
        */
       applyMatrix4(m3) {
-        const x3 = this.x, y5 = this.y, z43 = this.z, w2 = this.w;
+        const x3 = this.x, y5 = this.y, z44 = this.z, w2 = this.w;
         const e2 = m3.elements;
-        this.x = e2[0] * x3 + e2[4] * y5 + e2[8] * z43 + e2[12] * w2;
-        this.y = e2[1] * x3 + e2[5] * y5 + e2[9] * z43 + e2[13] * w2;
-        this.z = e2[2] * x3 + e2[6] * y5 + e2[10] * z43 + e2[14] * w2;
-        this.w = e2[3] * x3 + e2[7] * y5 + e2[11] * z43 + e2[15] * w2;
+        this.x = e2[0] * x3 + e2[4] * y5 + e2[8] * z44 + e2[12] * w2;
+        this.y = e2[1] * x3 + e2[5] * y5 + e2[9] * z44 + e2[13] * w2;
+        this.z = e2[2] * x3 + e2[6] * y5 + e2[10] * z44 + e2[14] * w2;
+        this.w = e2[3] * x3 + e2[7] * y5 + e2[11] * z44 + e2[15] * w2;
         return this;
       }
       /**
@@ -34491,7 +34639,7 @@ var init_three_core = __esm({
        * @return {Vector4} A reference to this vector.
        */
       setAxisAngleFromRotationMatrix(m3) {
-        let angle, x3, y5, z43;
+        let angle, x3, y5, z44;
         const epsilon = 0.01, epsilon2 = 0.1, te2 = m3.elements, m11 = te2[0], m12 = te2[4], m13 = te2[8], m21 = te2[1], m22 = te2[5], m23 = te2[9], m31 = te2[2], m32 = te2[6], m33 = te2[10];
         if (Math.abs(m12 - m21) < epsilon && Math.abs(m13 - m31) < epsilon && Math.abs(m23 - m32) < epsilon) {
           if (Math.abs(m12 + m21) < epsilon2 && Math.abs(m13 + m31) < epsilon2 && Math.abs(m23 + m32) < epsilon2 && Math.abs(m11 + m22 + m33 - 3) < epsilon2) {
@@ -34509,34 +34657,34 @@ var init_three_core = __esm({
             if (xx < epsilon) {
               x3 = 0;
               y5 = 0.707106781;
-              z43 = 0.707106781;
+              z44 = 0.707106781;
             } else {
               x3 = Math.sqrt(xx);
               y5 = xy / x3;
-              z43 = xz / x3;
+              z44 = xz / x3;
             }
           } else if (yy > zz) {
             if (yy < epsilon) {
               x3 = 0.707106781;
               y5 = 0;
-              z43 = 0.707106781;
+              z44 = 0.707106781;
             } else {
               y5 = Math.sqrt(yy);
               x3 = xy / y5;
-              z43 = yz / y5;
+              z44 = yz / y5;
             }
           } else {
             if (zz < epsilon) {
               x3 = 0.707106781;
               y5 = 0.707106781;
-              z43 = 0;
+              z44 = 0;
             } else {
-              z43 = Math.sqrt(zz);
-              x3 = xz / z43;
-              y5 = yz / z43;
+              z44 = Math.sqrt(zz);
+              x3 = xz / z44;
+              y5 = yz / z44;
             }
           }
-          this.set(x3, y5, z43, angle);
+          this.set(x3, y5, z44, angle);
           return this;
         }
         let s3 = Math.sqrt((m32 - m23) * (m32 - m23) + (m13 - m31) * (m13 - m31) + (m21 - m12) * (m21 - m12));
@@ -35150,10 +35298,10 @@ var init_three_core = __esm({
        */
       makeRotationFromEuler(euler) {
         const te2 = this.elements;
-        const x3 = euler.x, y5 = euler.y, z43 = euler.z;
+        const x3 = euler.x, y5 = euler.y, z44 = euler.z;
         const a3 = Math.cos(x3), b3 = Math.sin(x3);
         const c3 = Math.cos(y5), d4 = Math.sin(y5);
-        const e2 = Math.cos(z43), f6 = Math.sin(z43);
+        const e2 = Math.cos(z44), f6 = Math.sin(z44);
         if (euler.order === "XYZ") {
           const ae = a3 * e2, af = a3 * f6, be = b3 * e2, bf = b3 * f6;
           te2[0] = c3 * e2;
@@ -35438,7 +35586,7 @@ var init_three_core = __esm({
        * @param {number} z - The z component of the vector.
        * @return {Matrix4} A reference to this matrix.
        */
-      setPosition(x3, y5, z43) {
+      setPosition(x3, y5, z44) {
         const te2 = this.elements;
         if (x3.isVector3) {
           te2[12] = x3.x;
@@ -35447,7 +35595,7 @@ var init_three_core = __esm({
         } else {
           te2[12] = x3;
           te2[13] = y5;
-          te2[14] = z43;
+          te2[14] = z44;
         }
         return this;
       }
@@ -35489,19 +35637,19 @@ var init_three_core = __esm({
        */
       scale(v2) {
         const te2 = this.elements;
-        const x3 = v2.x, y5 = v2.y, z43 = v2.z;
+        const x3 = v2.x, y5 = v2.y, z44 = v2.z;
         te2[0] *= x3;
         te2[4] *= y5;
-        te2[8] *= z43;
+        te2[8] *= z44;
         te2[1] *= x3;
         te2[5] *= y5;
-        te2[9] *= z43;
+        te2[9] *= z44;
         te2[2] *= x3;
         te2[6] *= y5;
-        te2[10] *= z43;
+        te2[10] *= z44;
         te2[3] *= x3;
         te2[7] *= y5;
-        te2[11] *= z43;
+        te2[11] *= z44;
         return this;
       }
       /**
@@ -35524,7 +35672,7 @@ var init_three_core = __esm({
        * @param {number} z - The amount to translate in the z axis.
        * @return {Matrix4} A reference to this matrix.
        */
-      makeTranslation(x3, y5, z43) {
+      makeTranslation(x3, y5, z44) {
         if (x3.isVector3) {
           this.set(
             1,
@@ -35557,7 +35705,7 @@ var init_three_core = __esm({
             0,
             0,
             1,
-            z43,
+            z44,
             0,
             0,
             0,
@@ -35668,20 +35816,20 @@ var init_three_core = __esm({
         const c3 = Math.cos(angle);
         const s3 = Math.sin(angle);
         const t3 = 1 - c3;
-        const x3 = axis.x, y5 = axis.y, z43 = axis.z;
+        const x3 = axis.x, y5 = axis.y, z44 = axis.z;
         const tx = t3 * x3, ty = t3 * y5;
         this.set(
           tx * x3 + c3,
-          tx * y5 - s3 * z43,
-          tx * z43 + s3 * y5,
+          tx * y5 - s3 * z44,
+          tx * z44 + s3 * y5,
           0,
-          tx * y5 + s3 * z43,
+          tx * y5 + s3 * z44,
           ty * y5 + c3,
-          ty * z43 - s3 * x3,
+          ty * z44 - s3 * x3,
           0,
-          tx * z43 - s3 * y5,
-          ty * z43 + s3 * x3,
-          t3 * z43 * z43 + c3,
+          tx * z44 - s3 * y5,
+          ty * z44 + s3 * x3,
+          t3 * z44 * z44 + c3,
           0,
           0,
           0,
@@ -35698,7 +35846,7 @@ var init_three_core = __esm({
        * @param {number} z - The amount to scale in the Z axis.
        * @return {Matrix4} A reference to this matrix.
        */
-      makeScale(x3, y5, z43) {
+      makeScale(x3, y5, z44) {
         this.set(
           x3,
           0,
@@ -35710,7 +35858,7 @@ var init_three_core = __esm({
           0,
           0,
           0,
-          z43,
+          z44,
           0,
           0,
           0,
@@ -35762,10 +35910,10 @@ var init_three_core = __esm({
        */
       compose(position, quaternion, scale) {
         const te2 = this.elements;
-        const x3 = quaternion._x, y5 = quaternion._y, z43 = quaternion._z, w2 = quaternion._w;
-        const x22 = x3 + x3, y22 = y5 + y5, z210 = z43 + z43;
+        const x3 = quaternion._x, y5 = quaternion._y, z44 = quaternion._z, w2 = quaternion._w;
+        const x22 = x3 + x3, y22 = y5 + y5, z210 = z44 + z44;
         const xx = x3 * x22, xy = x3 * y22, xz = x3 * z210;
-        const yy = y5 * y22, yz = y5 * z210, zz = z43 * z210;
+        const yy = y5 * y22, yz = y5 * z210, zz = z44 * z210;
         const wx = w2 * x22, wy = w2 * y22, wz = w2 * z210;
         const sx = scale.x, sy = scale.y, sz = scale.z;
         te2[0] = (1 - (yy + zz)) * sx;
@@ -36013,11 +36161,11 @@ var init_three_core = __esm({
        * @param {number} [z=0] - The angle of the z axis in radians.
        * @param {string} [order=Euler.DEFAULT_ORDER] - A string representing the order that the rotations are applied.
        */
-      constructor(x3 = 0, y5 = 0, z43 = 0, order = _Euler.DEFAULT_ORDER) {
+      constructor(x3 = 0, y5 = 0, z44 = 0, order = _Euler.DEFAULT_ORDER) {
         this.isEuler = true;
         this._x = x3;
         this._y = y5;
-        this._z = z43;
+        this._z = z44;
         this._order = order;
       }
       /**
@@ -36081,10 +36229,10 @@ var init_three_core = __esm({
        * @param {string} [order] - A string representing the order that the rotations are applied.
        * @return {Euler} A reference to this Euler instance.
        */
-      set(x3, y5, z43, order = this._order) {
+      set(x3, y5, z44, order = this._order) {
         this._x = x3;
         this._y = y5;
-        this._z = z43;
+        this._z = z44;
         this._order = order;
         this._onChangeCallback();
         return this;
@@ -36704,11 +36852,11 @@ var init_three_core = __esm({
        * @param {number} [y] - The y coordinate in world space.
        * @param {number} [z] - The z coordinate in world space.
        */
-      lookAt(x3, y5, z43) {
+      lookAt(x3, y5, z44) {
         if (x3.isVector3) {
           _target.copy(x3);
         } else {
-          _target.set(x3, y5, z43);
+          _target.set(x3, y5, z44);
         }
         const parent = this.parent;
         this.updateWorldMatrix(true, false);
@@ -43006,7 +43154,11 @@ async function resolveP2pPaymentRequest(params) {
       const priceFor3 = (a3) => (a3.pricing ?? []).find((p5) => p5.capability === capability)?.unit_cost ?? (a3.pricing ?? [])[0]?.unit_cost ?? void 0;
       const chosenId = await params.selectWorker(admissible.map((a3) => {
         const unitCost = priceFor3(a3);
-        return { motebit_id: a3.motebit_id, ...unitCost != null ? { unitCost } : {} };
+        return {
+          motebit_id: a3.motebit_id,
+          ...unitCost != null ? { unitCost } : {},
+          ...a3.bonded === true ? { bonded: true } : {}
+        };
       }));
       if (chosenId != null) {
         const chosen = admissible.find((a3) => a3.motebit_id === chosenId);
@@ -53495,7 +53647,7 @@ ${snippet}`;
        * CLI/desktop/mobile with SQLite is sync all the way down and needs
        * no preload.
        */
-      searchHistory(query, limit = 5) {
+      searchHistory(query, limit = 5, sensitivityFilter) {
         const { store } = this.deps;
         if (store == null)
           return [];
@@ -53506,6 +53658,9 @@ ${snippet}`;
           for (const m3 of msgs) {
             if (m3.role !== "user" && m3.role !== "assistant")
               continue;
+            if (sensitivityFilter != null && (m3.sensitivity == null || !sensitivityFilter.includes(m3.sensitivity))) {
+              continue;
+            }
             messages.push({
               conversationId: c3.conversationId,
               role: m3.role,
@@ -56522,6 +56677,13 @@ var init_motebit_runtime = __esm({
       latencyStatsStore;
       agentGraph;
       _signingKeys;
+      /**
+       * Bounded buffer of recently minted routing-decision transcripts
+       * (docs/doctrine/routing-decision-transcript.md — minted always, retained
+       * locally, egressed on dispute or owner choice, never broadcast). The
+       * `getRecentApprovalDecisions()` buffer-and-getter shape.
+       */
+      _recentRoutingTranscripts = [];
       /**
        * Sovereign Solana wallet rail. Null when the runtime has no signing keys
        * or the caller did not configure a Solana rail. When present, exposes
@@ -58033,7 +58195,8 @@ var init_motebit_runtime = __esm({
        * logic.
        */
       searchConversations(query, limit = 5) {
-        return this.conversation.searchHistory(query, limit);
+        const sensitivityFilter = this.providerIsSovereign() ? void 0 : CONTEXT_SAFE_SENSITIVITY;
+        return this.conversation.searchHistory(query, limit, sensitivityFilter);
       }
       /**
        * Resolve when no background memory-formation jobs are pending.
@@ -59017,6 +59180,18 @@ var init_motebit_runtime = __esm({
       getRecentApprovalDecisions() {
         return this._recentApprovalDecisions;
       }
+      /**
+       * Recently minted routing-decision transcripts, newest last — the signed
+       * record of why each ranked paid hire won
+       * (docs/doctrine/routing-decision-transcript.md). Session-scoped and
+       * bounded, like `getRecentApprovalDecisions()`: disclosure is
+       * dispute-scoped or owner-initiated, never broadcast, and the buffer
+       * REVEALS, never authorizes. Durable cross-restart archival is a deferred,
+       * consumer-shaped concern.
+       */
+      getRecentRoutingTranscripts() {
+        return this._recentRoutingTranscripts;
+      }
       /**
        * Per-session pixel-passthrough consent. Composed into the loop's
        * `projectForAi` pixel gate alongside provider mode and effective
@@ -59179,6 +59354,41 @@ var init_motebit_runtime = __esm({
       providerIsSovereign() {
         return this._providerMode === "on-device";
       }
+      /**
+       * The `recall_memories` tool's search backend — the ONE sanctioned path for
+       * the agent's explicit memory recall, so the egress boundary lives here and
+       * cannot be forgotten per-surface (it was, on all four; that leak is what this
+       * method closes). Surfaces wire it as `memorySearchFn` instead of hand-rolling
+       * a `memory.recallRelevant` closure.
+       *
+       * The load-bearing privacy invariant (root CLAUDE.md — "medical/financial/
+       * secret never reach external AI") is enforced here by keying the sensitivity
+       * ceiling on the provider: an EXTERNAL provider gets only `CONTEXT_SAFE_
+       * SENSITIVITY` (< medical), so a stored medical/financial/secret memory is
+       * never returned toward it; a SOVEREIGN (on-device) provider recalls every
+       * tier, because that content never leaves the device. Fail-closed: an unset
+       * provider mode is non-sovereign, so it also gets the filtered set.
+       *
+       * Embeds, recalls (threading the bi-temporal `asOf` / `includeExpired` modes),
+       * and maps to the tool's result shape (`supersededAt` from `valid_until`).
+       */
+      async recallMemoriesForTool(query, opts) {
+        const queryEmbedding = await embedText(query);
+        const nodes = await this.memory.recallRelevant(queryEmbedding, {
+          limit: opts.limit,
+          ...opts.asOf != null ? { asOf: opts.asOf } : {},
+          ...opts.includeExpired ? { includeExpired: true } : {},
+          // Egress ceiling: undefined ⇒ no filter (sovereign, all tiers stay local);
+          // otherwise restrict to the context-safe tiers before anything can reach
+          // an external provider.
+          ...this.providerIsSovereign() ? {} : { sensitivityFilter: [...CONTEXT_SAFE_SENSITIVITY] }
+        });
+        return nodes.map((n2) => ({
+          content: n2.content,
+          confidence: n2.confidence,
+          ...n2.valid_until != null ? { supersededAt: n2.valid_until } : {}
+        }));
+      }
       /**
        * Effective session sensitivity — the max of the explicit
        * `_sessionSensitivity` (set via `setSessionSensitivity`) and the
@@ -59722,25 +59932,61 @@ var init_motebit_runtime = __esm({
             const rankable = await Promise.all(candidates.map(async (c3) => ({
               motebit_id: c3.motebit_id,
               trustRecord: await this.getAgentTrust(c3.motebit_id),
-              ...c3.unitCost != null ? { unitCost: c3.unitCost } : {}
+              ...c3.unitCost != null ? { unitCost: c3.unitCost } : {},
+              // Relay-verified commitment bond → exploration PRIORITY
+              // (a faster shot, never a quality score — the sybil-swarm
+              // bound of docs/doctrine/exploration-as-market-vitality.md
+              // Inc 2, live on real hops now that discovery surfaces it).
+              ...c3.bonded === true ? { bonded: true } : {}
             })));
             const repCostUsd = Math.min(...rankable.map((r2) => r2.unitCost ?? 0));
             const strength = explorationStrengthForStakes(repCostUsd);
             const capability = params.capability;
-            const exploitTop = selectWorker(this.motebitId, rankable, { capability });
-            const winner = selectWorker(this.motebitId, rankable, {
+            const { winner, basis } = rankWorkersWithBasis(this.motebitId, rankable, {
               capability,
               explore: { seed: exploreSeed, strength }
             });
-            if (winner != null) {
+            if (winner != null && basis != null) {
               this._logger.warn("routing.worker_selected", {
                 selected: winner.motebit_id,
                 capability,
                 candidates: rankable.length,
                 strength: Number(strength.toFixed(3)),
-                explored: exploitTop != null && winner.motebit_id !== exploitTop.motebit_id,
-                quality: Number(winner.route.trust.toFixed(3))
+                explored: basis.explored,
+                quality: Number(winner.route.trust.toFixed(3)),
+                bonded: rankable.find((r2) => r2.motebit_id === winner.motebit_id)?.bonded === true
               });
+              if (this._signingKeys != null) {
+                try {
+                  const transcript = await signRoutingTranscript({
+                    spec: "motebit/routing-transcript@1.0",
+                    delegator_motebit_id: this.motebitId,
+                    delegator_public_key: bytesToHex4(this._signingKeys.publicKey),
+                    issued_at: Date.now(),
+                    ...basis
+                  }, this._signingKeys.privateKey);
+                  this._recentRoutingTranscripts.push(transcript);
+                  if (this._recentRoutingTranscripts.length > 50) {
+                    this._recentRoutingTranscripts.shift();
+                  }
+                  this._logger.warn("routing.transcript_minted", {
+                    winner: transcript.winner_motebit_id,
+                    capability: transcript.capability,
+                    candidates: transcript.candidates.length,
+                    explored: transcript.explored,
+                    // The signature is the transcript's collision-resistant
+                    // handle (it covers the JCS-canonical bytes) — the
+                    // binding key a consumer joins on. Wire-level digest
+                    // binding into the delegation record lands with Inc 4's
+                    // consumer (the conformance probe), consumer-forced.
+                    transcript_sig: transcript.signature.slice(0, 16)
+                  });
+                } catch (err2) {
+                  this._logger.warn("routing.transcript_mint_failed", {
+                    error: err2 instanceof Error ? err2.message : String(err2)
+                  });
+                }
+              }
             }
             return winner?.motebit_id ?? null;
           };
@@ -83039,6 +83285,53 @@ var init_eval_attestation2 = __esm({
   }
 });
 
+// ../../packages/wire-schemas/dist/routing-transcript.js
+import { z as z40 } from "zod";
+import { zodToJsonSchema as zodToJsonSchema39 } from "zod-to-json-schema";
+var TranscriptCandidateSchema, RoutingDecisionTranscriptSchema;
+var init_routing_transcript2 = __esm({
+  "../../packages/wire-schemas/dist/routing-transcript.js"() {
+    "use strict";
+    init_esm_shims();
+    init_assemble();
+    TranscriptCandidateSchema = z40.object({
+      motebit_id: z40.string().min(1),
+      unit_cost: z40.number().nonnegative().optional(),
+      bonded: z40.literal(true).optional(),
+      trust_axis: z40.number(),
+      reliability_axis: z40.number(),
+      alpha: z40.number().int().positive().optional(),
+      beta: z40.number().int().positive().optional(),
+      theta: z40.number().optional()
+    }).strict();
+    RoutingDecisionTranscriptSchema = z40.object({
+      spec: z40.literal("motebit/routing-transcript@1.0").describe("Wire-format version discriminator."),
+      capability: z40.string().describe("The capability hired for."),
+      delegator_motebit_id: z40.string().min(1).describe("The delegator \u2014 the chooser and the signer (subject = signer)."),
+      delegator_public_key: z40.string().regex(/^[0-9a-f]{64}$/).describe("The delegator's Ed25519 public key, lowercase hex."),
+      candidates: z40.array(TranscriptCandidateSchema).min(1).describe("The frozen admissible candidate set, in ranked order."),
+      seed: z40.string().describe("Seed provenance: the tick token's Ed25519 signature \u2014 binds the transcript to the delegation turn; per-candidate draw seed is `${seed}|${motebit_id}`."),
+      strength: z40.number().min(0).max(1).describe("Base exploration strength in [0,1], before any bond boost."),
+      weights: z40.object({
+        trust: z40.number(),
+        reliability: z40.number(),
+        cost: z40.number(),
+        latency: z40.number()
+      }).strict().describe("The composite weights the ranking consumed."),
+      count_cap: z40.number().int().positive().describe("Evidence cap applied to posterior counts (frozen ranker-internal literal)."),
+      bond_explore_boost: z40.number().positive().describe("Multiplicative bond exploration boost (frozen ranker-internal literal)."),
+      default_latency_ms: z40.number().nonnegative().describe("Neutral latency (ms) assumed per candidate (frozen ranker-internal literal)."),
+      algorithm_version: z40.string().min(1).describe("The ranking-implementation version this transcript is recomputable under."),
+      winner_motebit_id: z40.string().min(1).describe("The worker hired; MUST be a member of `candidates`."),
+      pinned: z40.literal(true).optional().describe("Present (true) only when the hire was a pinned deterministic override \u2014 no draw ran."),
+      explored: z40.boolean().describe("Whether the exploration draw overrode the exploit-favorite."),
+      issued_at: z40.number().int().nonnegative().describe("Decision time, epoch milliseconds."),
+      suite: z40.literal("motebit-jcs-ed25519-b64-v1").describe("Cryptosuite (pinned literal \u2014 new suites arrive as new transcript versions)."),
+      signature: z40.string().min(1).describe("Ed25519 over the JCS-canonical transcript minus this field, base64url.")
+    }).strict();
+  }
+});
+
 // ../../packages/wire-schemas/dist/index.js
 var init_dist31 = __esm({
   "../../packages/wire-schemas/dist/index.js"() {
@@ -83083,6 +83376,7 @@ var init_dist31 = __esm({
     init_retention_manifest();
     init_witness_omission_dispute();
     init_eval_attestation2();
+    init_routing_transcript2();
   }
 });
 
@@ -84410,14 +84704,54 @@ function createRecallMemoriesHandler(searchFn) {
     if (!query)
       return { ok: false, error: "Missing required parameter: query" };
     const limit = args.limit ?? 5;
+    const includeHistory = args.include_history === true;
+    let asOf;
+    const asOfRaw = args.as_of;
+    if (asOfRaw != null && asOfRaw !== "") {
+      if (typeof asOfRaw !== "string") {
+        return { ok: false, error: "Invalid as_of: expected an ISO 8601 date string." };
+      }
+      const parsed = Date.parse(asOfRaw);
+      if (Number.isNaN(parsed)) {
+        return {
+          ok: false,
+          error: `Invalid as_of date: "${asOfRaw}". Use an ISO 8601 date, e.g. "2026-06-01".`
+        };
+      }
+      asOf = parsed;
+    }
+    if (asOf != null && includeHistory) {
+      return {
+        ok: false,
+        error: "Use as_of OR include_history, not both: as_of is a point-in-time snapshot; include_history returns every version."
+      };
+    }
     try {
-      const memories = await searchFn(query, limit);
+      const memories = await searchFn(query, {
+        limit,
+        ...asOf != null ? { asOf } : {},
+        ...includeHistory ? { includeExpired: true } : {}
+      });
       if (memories.length === 0) {
-        return { ok: true, data: "No relevant memories found." };
+        return {
+          ok: true,
+          data: asOf != null ? `No memories were valid as of ${new Date(asOf).toISOString()}.` : "No relevant memories found."
+        };
       }
       const escape3 = (content) => content.replace(/\[MEMORY_DATA\b/g, "[ESCAPED_MEMORY").replace(/\[\/MEMORY_DATA\]/g, "[/ESCAPED_MEMORY]").replace(/\[from:/g, "[escaped-from:");
-      const formatted = memories.map((m3, i3) => `${i3 + 1}. [confidence=${m3.confidence.toFixed(2)}] ${escape3(m3.content)}`).join("\n");
-      return { ok: true, data: formatted };
+      const formatted = memories.map((m3, i3) => {
+        const status = includeHistory ? m3.supersededAt != null ? `[superseded ${new Date(m3.supersededAt).toISOString()}] ` : "[current] " : "";
+        return `${i3 + 1}. ${status}[confidence=${m3.confidence.toFixed(2)}] ${escape3(m3.content)}`;
+      }).join("\n");
+      let data = formatted;
+      if (asOf != null) {
+        data = `As of ${new Date(asOf).toISOString()}, you believed (historical snapshot \u2014 some may since have been superseded):
+${formatted}`;
+      } else if (includeHistory) {
+        data = `All versions found \u2014 current beliefs and the ones they replaced. A [superseded] entry is NOT current fact:
+${formatted}`;
+      }
+      return { ok: true, data };
     } catch (err2) {
       const msg = err2 instanceof Error ? err2.message : String(err2);
       return { ok: false, error: `Memory search error: ${msg}` };
@@ -84432,12 +84766,20 @@ var init_recall_memories = __esm({
     recallMemoriesDefinition = {
       name: "recall_memories",
       mode: "api",
-      description: "Search your own memory graph for relevant information. Use when you need to remember something about the user or past conversations.",
+      description: 'Search your own memory graph for relevant information. Use when you need to remember something about the user or past conversations. Two optional bi-temporal modes (mutually exclusive): pass `as_of` (an ISO date, e.g. "2026-06-01") to reconstruct what you believed AS OF that date; pass `include_history: true` to see ALL versions of a belief at once \u2014 current beliefs and the ones they replaced, each labelled. In both modes some results are beliefs you have since revised, so report them as past belief, never as current fact.',
       inputSchema: {
         type: "object",
         properties: {
           query: { type: "string", description: "What to search for in memories" },
-          limit: { type: "number", description: "Max results (default 5)" }
+          limit: { type: "number", description: "Max results (default 5)" },
+          as_of: {
+            type: "string",
+            description: "Optional ISO 8601 date/datetime. Reconstruct beliefs valid AS OF this point in time (a snapshot). Mutually exclusive with include_history. Omit for current recall."
+          },
+          include_history: {
+            type: "boolean",
+            description: "Optional. Return ALL versions of a belief \u2014 current and since-superseded \u2014 each labelled [current] or [superseded <date>]. Use to see how a belief changed. Mutually exclusive with as_of."
+          }
         },
         required: ["query"]
       }
@@ -84492,7 +84834,7 @@ var init_rewrite_memory = __esm({
     rewriteMemoryDefinition = {
       name: "rewrite_memory",
       mode: "api",
-      description: "Correct a stale or incorrect memory by superseding it with new content. Use when you discover a previously-formed memory is wrong \u2014 the user corrected something, a newer fact contradicts an older one, or you realize your prior claim was mistaken. Pass the 8-char short node id shown in the memory index (the `[xxxxxxxx]` prefix). The original memory is tombstoned but preserved in the event log for audit.",
+      description: "Correct a stale or incorrect memory by superseding it with new content. Use when you discover a previously-formed memory is wrong \u2014 the user corrected something, a newer fact contradicts an older one, or you realize your prior claim was mistaken. Pass the 8-char short node id shown in the memory index (the `[xxxxxxxx]` prefix). The original memory is not destroyed \u2014 it is superseded (marked no longer current) but kept, so it drops out of current recall yet can still be reconstructed via `recall_memories` with `as_of` or `include_history`.",
       inputSchema: {
         type: "object",
         properties: {
@@ -85394,11 +85736,9 @@ function buildToolRegistry(config, runtimeRef, motebitId) {
   registry.register(currentTimeDefinition, createCurrentTimeHandler());
   registry.register(webSearchDefinition, createWebSearchHandler(searchProvider));
   registry.register(readUrlDefinition, createReadUrlHandler());
-  const memorySearchFn = async (query, limit) => {
+  const memorySearchFn = async (query, opts) => {
     if (!runtimeRef.current) return [];
-    const queryEmbedding = await embedText(query);
-    const nodes = await runtimeRef.current.memory.recallRelevant(queryEmbedding, { limit });
-    return nodes.map((n2) => ({ content: n2.content, confidence: n2.confidence }));
+    return runtimeRef.current.recallMemoriesForTool(query, opts);
   };
   const eventQueryFn = async (limit, eventType) => {
     if (!runtimeRef.current) return [];
@@ -85616,7 +85956,6 @@ var init_runtime_factory = __esm({
     init_esm_shims();
     init_dist23();
     init_dist28();
-    init_dist3();
     init_dist4();
     init_dist30();
     init_dist20();
@@ -89980,6 +90319,24 @@ function enrichWithLatencyStats(agents, db) {
     return { ...a3, latency_stats: projection };
   });
 }
+function enrichWithBondStatus(agents, db, nowMs = Date.now()) {
+  if (agents.length === 0)
+    return agents;
+  const placeholders = agents.map(() => "?").join(",");
+  const rows = db.prepare(`SELECT DISTINCT motebit_id
+         FROM relay_bond_commitments
+        WHERE motebit_id IN (${placeholders})
+          AND expires_at > ?
+          AND backing_state = 'backed'`).all(...agents.map((a3) => a3.motebit_id), nowMs);
+  if (rows.length === 0)
+    return agents;
+  const backed = new Set(rows.map((r2) => r2.motebit_id));
+  return agents.map((a3) => {
+    if (a3.bonded != null)
+      return a3;
+    return backed.has(a3.motebit_id) ? { ...a3, bonded: true } : a3;
+  });
+}
 function registerAgentAuthMiddleware(deps) {
   const { app, apiToken, identityManager, parseTokenPayloadUnsafe: parseTokenPayloadUnsafe2, verifySignedTokenForDevice: verifySignedTokenForDevice2, isTokenBlacklisted, isAgentRevoked } = deps;
   app.use("/api/v1/agents/*", async (c3, next) => {
@@ -90568,7 +90925,8 @@ function registerAgentRoutes(deps) {
       const enriched = enrichWithCallerTrust(localResults, c3.get("callerMotebitId"), moteDb.db);
       const withHa2 = enrichWithHardwareAttestation(enriched, moteDb.db);
       const withLatency2 = enrichWithLatencyStats(withHa2, moteDb.db);
-      return c3.json({ agents: withLatency2 });
+      const withBond2 = enrichWithBondStatus(withLatency2, moteDb.db);
+      return c3.json({ agents: withBond2 });
     }
     const queryId = crypto.randomUUID();
     federationQueryCache.set(queryId, Date.now());
@@ -90576,17 +90934,18 @@ function registerAgentRoutes(deps) {
     const peers = moteDb.db.prepare("SELECT peer_relay_id, endpoint_url, public_key FROM relay_peers WHERE state = 'active'").all();
     const forwardPromises = peers.map(async (peer) => {
       try {
+        const discoverBody = await signDiscoverBody({
+          query: { capability, motebit_id: motebitId, limit },
+          hop_count: 0,
+          max_hops: 3,
+          visited,
+          query_id: queryId,
+          origin_relay: relayIdentity.relayMotebitId
+        }, relayIdentity);
         const resp = await fetch(`${peer.endpoint_url}/federation/v1/discover`, {
           method: "POST",
           headers: { "Content-Type": "application/json", "X-Correlation-ID": queryId },
-          body: JSON.stringify({
-            query: { capability, motebit_id: motebitId, limit },
-            hop_count: 0,
-            max_hops: 3,
-            visited,
-            query_id: queryId,
-            origin_relay: relayIdentity.relayMotebitId
-          }),
+          body: JSON.stringify(discoverBody),
           signal: AbortSignal.timeout(5e3)
         });
         if (!resp.ok)
@@ -90610,8 +90969,9 @@ function registerAgentRoutes(deps) {
     const final = enrichWithCallerTrust(trimmed, c3.get("callerMotebitId"), moteDb.db);
     const withHa = enrichWithHardwareAttestation(final, moteDb.db);
     const withLatency = enrichWithLatencyStats(withHa, moteDb.db);
+    const withBond = enrichWithBondStatus(withLatency, moteDb.db);
     const peerKeyById = new Map(peers.map((p5) => [p5.peer_relay_id, p5.public_key]));
-    const withPeerKey = withLatency.map((agent) => {
+    const withPeerKey = withBond.map((agent) => {
       const sourceRelay = agent.source_relay;
       const peerKey = sourceRelay != null ? peerKeyById.get(sourceRelay) : void 0;
       return peerKey != null ? { ...agent, source_relay_public_key: peerKey } : agent;
@@ -91947,9 +92307,9 @@ var init_federation = __esm({
     init_retry_policy();
     init_dist31();
     FEDERATION_SUITE = "motebit-concat-ed25519-hex-v1";
-    RELAY_SPEC_VERSION = "motebit/relay-federation@1.3";
+    RELAY_SPEC_VERSION = "motebit/relay-federation@1.4";
     logger18 = createLogger({ service: "relay", module: "federation" });
-    DEFAULT_REQUIRE_DISCOVER_SIGNATURE = false;
+    DEFAULT_REQUIRE_DISCOVER_SIGNATURE = true;
     REVOCATION_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
     PBKDF2_ITERATIONS = 6e5;
     AUTH_TAG_BYTES = 16;
@@ -100642,7 +101002,7 @@ init_dist2();
 init_dist6();
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { isInitializeRequest } from "@modelcontextprotocol/sdk/types.js";
-import { z as z40 } from "zod";
+import { z as z41 } from "zod";
 
 // ../../packages/mcp-server/dist/service.js
 init_esm_shims();
@@ -100885,17 +101245,17 @@ function jsonSchemaToZodShape(inputSchema) {
     let zodType;
     switch (prop["type"]) {
       case "string":
-        zodType = z40.string();
+        zodType = z41.string();
         break;
       case "number":
       case "integer":
-        zodType = z40.number();
+        zodType = z41.number();
         break;
       case "boolean":
-        zodType = z40.boolean();
+        zodType = z41.boolean();
         break;
       default:
-        zodType = z40.unknown();
+        zodType = z41.unknown();
         break;
     }
     if (typeof prop["description"] === "string") {
@@ -101078,7 +101438,7 @@ var McpServerAdapter = class _McpServerAdapter {
     if (this.deps.sendMessage) {
       const sendMessage = this.deps.sendMessage;
       const toolDef = _McpServerAdapter.syntheticToolDef("motebit_query", "Ask this motebit a question \u2014 AI response with memory context", RiskLevel.R2_WRITE);
-      server.tool("motebit_query", "Ask this motebit a question \u2014 AI response with memory context", { message: z40.string().describe("The question or message to send") }, async (args) => {
+      server.tool("motebit_query", "Ask this motebit a question \u2014 AI response with memory context", { message: z41.string().describe("The question or message to send") }, async (args) => {
         const denied = await this.validateSyntheticTool(toolDef, args);
         if (denied)
           return denied;
@@ -101091,8 +101451,8 @@ var McpServerAdapter = class _McpServerAdapter {
       const storeMemory = this.deps.storeMemory;
       const toolDef = _McpServerAdapter.syntheticToolDef("motebit_remember", "Store a memory in this motebit", RiskLevel.R2_WRITE);
       server.tool("motebit_remember", "Store a memory in this motebit", {
-        content: z40.string().describe("The content to remember"),
-        sensitivity: z40.string().optional().describe("Sensitivity level (none, personal)")
+        content: z41.string().describe("The content to remember"),
+        sensitivity: z41.string().optional().describe("Sensitivity level (none, personal)")
       }, async (args) => {
         const denied = await this.validateSyntheticTool(toolDef, args);
         if (denied)
@@ -101117,8 +101477,8 @@ var McpServerAdapter = class _McpServerAdapter {
       const queryMemories = this.deps.queryMemories;
       const toolDef = _McpServerAdapter.syntheticToolDef("motebit_recall", "Search this motebit's semantic memory", RiskLevel.R1_DRAFT);
       server.tool("motebit_recall", "Search this motebit's semantic memory", {
-        query: z40.string().describe("Semantic search query"),
-        limit: z40.number().optional().describe("Max results to return")
+        query: z41.string().describe("Semantic search query"),
+        limit: z41.number().optional().describe("Max results to return")
       }, async (args) => {
         const denied = await this.validateSyntheticTool(toolDef, args);
         if (denied)
@@ -101132,10 +101492,10 @@ var McpServerAdapter = class _McpServerAdapter {
       const handleAgentTask2 = this.deps.handleAgentTask;
       const toolDef = _McpServerAdapter.syntheticToolDef("motebit_task", "Submit an autonomous task \u2014 returns a signed ExecutionReceipt", RiskLevel.R3_EXECUTE);
       server.tool("motebit_task", "Submit an autonomous task \u2014 returns a signed ExecutionReceipt", {
-        prompt: z40.string().describe("The task prompt for the agent to execute"),
-        delegation_token: z40.string().optional().describe("Signed delegation token (JSON) authorizing this task within a specific scope"),
-        required_capabilities: z40.unknown().optional().describe('Array of capability names required for this task (e.g. ["web_search"])'),
-        relay_task_id: z40.string().optional().describe("Relay-assigned task ID for economic binding \u2014 included in the signed receipt")
+        prompt: z41.string().describe("The task prompt for the agent to execute"),
+        delegation_token: z41.string().optional().describe("Signed delegation token (JSON) authorizing this task within a specific scope"),
+        required_capabilities: z41.unknown().optional().describe('Array of capability names required for this task (e.g. ["web_search"])'),
+        relay_task_id: z41.string().optional().describe("Relay-assigned task ID for economic binding \u2014 included in the signed receipt")
       }, async (args) => {
         const denied = await this.validateSyntheticTool(toolDef, args);
         if (denied)
@@ -101376,7 +101736,7 @@ var McpServerAdapter = class _McpServerAdapter {
   }
   // --- Prompt Registration ---
   registerPromptsOn(server) {
-    server.prompt("chat", "Send a message to this motebit", { message: z40.string() }, ({ message: message2 }) => ({
+    server.prompt("chat", "Send a message to this motebit", { message: z41.string() }, ({ message: message2 }) => ({
       messages: [
         {
           role: "user",
@@ -101387,7 +101747,7 @@ var McpServerAdapter = class _McpServerAdapter {
         }
       ]
     }));
-    server.prompt("recall", "Search semantic memory", { query: z40.string(), limit: z40.string().optional() }, ({ query, limit }) => ({
+    server.prompt("recall", "Search semantic memory", { query: z41.string(), limit: z41.string().optional() }, ({ query, limit }) => ({
       messages: [
         {
           role: "user",
@@ -105785,53 +106145,53 @@ import { TextDocument } from "vscode-languageserver-textdocument";
 // src/yaml-config.ts
 init_esm_shims();
 import * as crypto2 from "crypto";
-import { z as z41 } from "zod";
-var ProviderSchema = z41.object({
-  mode: z41.enum(["byok", "paid", "sovereign"]).optional().describe(
+import { z as z42 } from "zod";
+var ProviderSchema = z42.object({
+  mode: z42.enum(["byok", "paid", "sovereign"]).optional().describe(
     "Provider mode. `byok` = bring-your-own API key (env var). `paid` = motebit cloud. `sovereign` = local on-device model (no external calls)."
   ),
-  wireProtocol: z41.enum(["anthropic", "openai"]).optional().describe(
+  wireProtocol: z42.enum(["anthropic", "openai"]).optional().describe(
     "Wire protocol the endpoint speaks. `anthropic` for Claude, `openai` for OpenAI-compatible endpoints (OpenAI, Ollama, LM Studio, vLLM)."
   ),
-  model: z41.string().optional().describe("Model identifier, e.g. `claude-sonnet-4-6`, `gpt-5.4-mini`, `llama3.2`."),
-  baseUrl: z41.string().url().optional().describe(
+  model: z42.string().optional().describe("Model identifier, e.g. `claude-sonnet-4-6`, `gpt-5.4-mini`, `llama3.2`."),
+  baseUrl: z42.string().url().optional().describe(
     "Override the API base URL. Used for local inference servers (`http://localhost:11434/v1` for Ollama) or routing through a proxy."
   ),
-  maxTokens: z41.number().int().positive().optional().describe("Upper bound on response length (model output tokens).")
+  maxTokens: z42.number().int().positive().optional().describe("Upper bound on response length (model output tokens).")
 }).strict().describe(
   "AI provider configuration. API keys are NEVER declared here \u2014 they're read from environment variables or the OS keyring."
 );
-var GovernanceSchema = z41.object({
-  approvalPreset: z41.enum(["cautious", "balanced", "autonomous"]).describe(
+var GovernanceSchema = z42.object({
+  approvalPreset: z42.enum(["cautious", "balanced", "autonomous"]).describe(
     "Default gate for tool calls. `cautious` = approve every sensitive call. `balanced` = approve writes, auto-approve reads. `autonomous` = auto-approve most calls."
   ),
-  persistenceThreshold: z41.number().min(0).max(1).describe(
+  persistenceThreshold: z42.number().min(0).max(1).describe(
     "Memory-formation threshold [0, 1]. Higher = fewer memories formed; only strong signals persist. Typical: 0.6."
   ),
-  rejectSecrets: z41.boolean().describe(
+  rejectSecrets: z42.boolean().describe(
     "When true, the privacy layer blocks any tool call or outbound message whose content is classified as `secret`. Fail-closed: error on classifier failure."
   ),
-  maxCallsPerTurn: z41.number().int().positive().describe(
+  maxCallsPerTurn: z42.number().int().positive().describe(
     "Per-turn tool-call ceiling. Bounds runaway loops and protects the policy gate from exhaustion attacks."
   ),
-  maxMemoriesPerTurn: z41.number().int().positive().describe(
+  maxMemoriesPerTurn: z42.number().int().positive().describe(
     "Per-turn memory-formation ceiling. Prevents a single turn from flooding the memory graph."
   )
 }).strict().describe("Governance at the boundary \u2014 surface-tension constraints that apply to every turn.");
-var McpServerSchema = z41.object({
-  name: z41.string().min(1).describe("Local name for the MCP server. Must be unique."),
-  transport: z41.enum(["stdio", "http"]).describe("Transport. `stdio` spawns a child process; `http` connects to a URL."),
-  command: z41.string().optional().describe("Executable to spawn when `transport: stdio`. E.g. `npx`, `node`, `python`."),
-  args: z41.array(z41.string()).optional().describe("Argument vector passed to `command` when `transport: stdio`."),
-  url: z41.string().url().optional().describe("Endpoint URL when `transport: http`. Must be a full URL including scheme."),
-  env: z41.record(z41.string(), z41.string()).optional().describe("Environment variables set for the child process (stdio transport)."),
-  trusted: z41.boolean().optional().describe(
+var McpServerSchema = z42.object({
+  name: z42.string().min(1).describe("Local name for the MCP server. Must be unique."),
+  transport: z42.enum(["stdio", "http"]).describe("Transport. `stdio` spawns a child process; `http` connects to a URL."),
+  command: z42.string().optional().describe("Executable to spawn when `transport: stdio`. E.g. `npx`, `node`, `python`."),
+  args: z42.array(z42.string()).optional().describe("Argument vector passed to `command` when `transport: stdio`."),
+  url: z42.string().url().optional().describe("Endpoint URL when `transport: http`. Must be a full URL including scheme."),
+  env: z42.record(z42.string(), z42.string()).optional().describe("Environment variables set for the child process (stdio transport)."),
+  trusted: z42.boolean().optional().describe(
     "Auto-approve tool calls from this server. Equivalent to promoting the server into `mcp_trusted_servers`. Off by default."
   ),
-  motebit: z41.boolean().optional().describe(
+  motebit: z42.boolean().optional().describe(
     "This server is another motebit instance \u2014 enables motebit-to-motebit transport with caller identity injected into every call."
   ),
-  motebitType: z41.enum(["personal", "service", "collaborative"]).optional().describe(
+  motebitType: z42.enum(["personal", "service", "collaborative"]).optional().describe(
     "Semantic role of the peer motebit. `personal` = another device of yours. `service` = paid worker. `collaborative` = peer agent."
   )
 }).strict().refine((s3) => s3.transport === "stdio" ? s3.command != null : s3.url != null, {
@@ -105839,65 +106199,65 @@ var McpServerSchema = z41.object({
 }).describe(
   "MCP server \u2014 a tool source. stdio transports spawn a subprocess; http transports dial a remote endpoint."
 );
-var IntervalString = z41.string().min(1).transform((raw, ctx) => {
+var IntervalString = z42.string().min(1).transform((raw, ctx) => {
   try {
     return parseInterval(raw);
   } catch (err2) {
     ctx.addIssue({
-      code: z41.ZodIssueCode.custom,
+      code: z42.ZodIssueCode.custom,
       message: err2 instanceof Error ? err2.message : String(err2)
     });
-    return z41.NEVER;
+    return z42.NEVER;
   }
 }).describe("Interval string: `<n>m` minutes, `<n>h` hours, `<n>d` days. E.g. `30m`, `1h`, `7d`.");
-var RoutineSchema = z41.object({
-  id: z41.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/, {
+var RoutineSchema = z42.object({
+  id: z42.string().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]*$/, {
     message: "routine id must be lowercase alphanumeric with _ or - (e.g. 'daily-digest')"
   }).describe(
     "Stable identifier for the routine. Used as the upsert key \u2014 changing the id renames the routine (old one is pruned, new one added). Lowercase alphanumeric with `-` or `_`."
   ),
-  prompt: z41.string().min(1).describe(
+  prompt: z42.string().min(1).describe(
     "Natural-language prompt the agent runs on each tick. Content changes update the same goal row (preserving `created_at`)."
   ),
   every: IntervalString.describe(
     "Run cadence. Interval string (`<n>m`, `<n>h`, `<n>d`). E.g. `1h` = hourly."
   ),
-  mode: z41.enum(["recurring", "once"]).default("recurring").describe(
+  mode: z42.enum(["recurring", "once"]).default("recurring").describe(
     "`recurring` runs every `every` tick forever. `once` runs a single time then marks the goal completed."
   ),
   wall_clock: IntervalString.optional().describe(
     "Hard wall-clock timeout per run. Kills the turn if it exceeds this. Default: 10m."
   ),
-  project: z41.string().min(1).optional().describe("Project identifier \u2014 groups goals that share context (shared memory scope)."),
-  enabled: z41.boolean().default(true).describe(
+  project: z42.string().min(1).optional().describe("Project identifier \u2014 groups goals that share context (shared memory scope)."),
+  enabled: z42.boolean().default(true).describe(
     "Set false to pause the routine without deleting it. Preserves state and history; resumable with no data loss."
   )
 }).strict().describe(
   "A scheduled routine \u2014 compiles to exactly one Goal row. Changing fields other than `id` updates the same row in place."
 );
-var MotebitYamlObjectSchema = z41.object({
+var MotebitYamlObjectSchema = z42.object({
   // Pinning the version lets us rev the schema later without silently
   // interpreting v2 yaml as v1. Mismatch → the loader prints a targeted
   // error telling the user which CLI version expects which yaml version.
-  version: z41.literal(1).describe(
+  version: z42.literal(1).describe(
     "Schema version. Currently `1`. Pinning lets future CLI versions print a targeted error on mismatch instead of silently misinterpreting the document."
   ),
-  name: z41.string().optional().describe(
+  name: z42.string().optional().describe(
     "Display name for this motebit. Surfaces in the REPL banner and delegation listings."
   ),
-  personality_notes: z41.string().optional().describe(
+  personality_notes: z42.string().optional().describe(
     "Free-form personality guidance. Appended to the system prompt on every turn. Keep short \u2014 every token here costs on every call."
   ),
-  temperature: z41.number().min(0).max(2).optional().describe(
+  temperature: z42.number().min(0).max(2).optional().describe(
     "Sampling temperature for the default provider [0, 2]. Unset = model default. Only applied when explicitly set."
   ),
-  max_tokens: z41.number().int().positive().optional().describe("Default max output tokens per response. Overridden by `--max-tokens` at the CLI."),
+  max_tokens: z42.number().int().positive().optional().describe("Default max output tokens per response. Overridden by `--max-tokens` at the CLI."),
   provider: ProviderSchema.optional(),
   governance: GovernanceSchema.optional(),
-  mcp_servers: z41.array(McpServerSchema).optional().describe(
+  mcp_servers: z42.array(McpServerSchema).optional().describe(
     "MCP tool servers to connect on start. Each entry declares transport, endpoint, and (optionally) trust status."
   ),
-  routines: z41.array(RoutineSchema).optional().describe(
+  routines: z42.array(RoutineSchema).optional().describe(
     "Scheduled routines. Each compiles to exactly one Goal row; `id` is the upsert key. Re-running `motebit up` on unchanged yaml is a true no-op."
   )
 });
@@ -105909,7 +106269,7 @@ var MotebitYamlSchema = MotebitYamlObjectSchema.strict().superRefine((data, ctx)
       const prev = seen.get(id);
       if (prev !== void 0) {
         ctx.addIssue({
-          code: z41.ZodIssueCode.custom,
+          code: z42.ZodIssueCode.custom,
           path: ["routines", i3, "id"],
           message: `duplicate routine id "${id}" (also used at routines[${prev}])`
         });
@@ -106081,12 +106441,12 @@ function walk(node, offset, path19) {
 
 // src/lsp/schema-walker.ts
 init_esm_shims();
-import { z as z42 } from "zod";
+import { z as z43 } from "zod";
 function unwrapOne(schema) {
-  if (schema instanceof z42.ZodOptional) return schema.unwrap();
-  if (schema instanceof z42.ZodDefault) return schema.removeDefault();
-  if (schema instanceof z42.ZodEffects) return schema.innerType();
-  if (schema instanceof z42.ZodNullable) return schema.unwrap();
+  if (schema instanceof z43.ZodOptional) return schema.unwrap();
+  if (schema instanceof z43.ZodDefault) return schema.removeDefault();
+  if (schema instanceof z43.ZodEffects) return schema.innerType();
+  if (schema instanceof z43.ZodNullable) return schema.unwrap();
   return null;
 }
 function unwrapAll(schema) {
@@ -106111,14 +106471,14 @@ function resolvePath(schema, path19) {
   let cur = schema;
   for (const seg of path19) {
     const inner = unwrapAll(cur);
-    if (inner instanceof z42.ZodObject) {
+    if (inner instanceof z43.ZodObject) {
       const shape = inner.shape;
       const next = shape[String(seg)];
       if (!next) return null;
       cur = next;
       continue;
     }
-    if (inner instanceof z42.ZodArray) {
+    if (inner instanceof z43.ZodArray) {
       cur = inner.element;
       continue;
     }
@@ -106130,12 +106490,12 @@ function objectKeys(schema, path19) {
   const target = resolvePath(schema, path19);
   if (target == null) return [];
   const inner = unwrapAll(target);
-  if (inner instanceof z42.ZodObject) {
+  if (inner instanceof z43.ZodObject) {
     return Object.keys(inner.shape);
   }
-  if (inner instanceof z42.ZodArray) {
+  if (inner instanceof z43.ZodArray) {
     const elem = unwrapAll(inner.element);
-    if (elem instanceof z42.ZodObject) {
+    if (elem instanceof z43.ZodObject) {
       return Object.keys(elem.shape);
     }
   }
@@ -106145,13 +106505,13 @@ function enumValues(schema, path19) {
   const target = resolvePath(schema, path19);
   if (target == null) return null;
   const inner = unwrapAll(target);
-  if (inner instanceof z42.ZodEnum) {
+  if (inner instanceof z43.ZodEnum) {
     return [...inner.options];
   }
-  if (inner instanceof z42.ZodLiteral) {
+  if (inner instanceof z43.ZodLiteral) {
     return [String(inner.value)];
   }
-  if (inner instanceof z42.ZodBoolean) {
+  if (inner instanceof z43.ZodBoolean) {
     return ["true", "false"];
   }
   return null;
@@ -118299,10 +118659,10 @@ init_esm_shims();
 
 // src/yaml-json-schema.ts
 init_esm_shims();
-import { zodToJsonSchema as zodToJsonSchema39 } from "zod-to-json-schema";
+import { zodToJsonSchema as zodToJsonSchema40 } from "zod-to-json-schema";
 var MOTEBIT_YAML_SCHEMA_ID = "https://raw.githubusercontent.com/motebit/motebit/main/apps/cli/schema/motebit-yaml-v1.json";
 function buildYamlJsonSchema() {
-  const schema = zodToJsonSchema39(MotebitYamlObjectSchema, {
+  const schema = zodToJsonSchema40(MotebitYamlObjectSchema, {
     name: "MotebitYaml",
     $refStrategy: "none",
     target: "jsonSchema7"