omnius 1.0.556 → 1.0.557

package/dist/index.js

@@ -9349,9 +9349,9 @@ function normalizeCameraRotationDegrees(value2) {
   const raw = String(value2).trim().toLowerCase();
   if (!raw)
     return 0;
-  const numeric = Number(raw.replace(/deg(?:rees)?$/i, ""));
-  if (Number.isFinite(numeric))
-    return normalizeCameraRotationDegrees(numeric);
+  const numeric2 = Number(raw.replace(/deg(?:rees)?$/i, ""));
+  if (Number.isFinite(numeric2))
+    return normalizeCameraRotationDegrees(numeric2);
   if (["none", "off", "upright", "normal", "0"].includes(raw))
     return 0;
   if (["cw", "clockwise", "right", "rotate-cw", "rotate_cw", "90"].includes(raw))
@@ -26877,6 +26877,16 @@ function isRetirableEvidence(message2, minChars) {
 }
 function foldEvidenceOutcome(message2) {
   const text2 = message2.content;
+  const admissionBlock = text2.match(RUNTIME_ADMISSION_BLOCK);
+  if (admissionBlock) {
+    const after = text2.slice((admissionBlock.index ?? 0) + admissionBlock[0].length);
+    const reason = after.split("\n").map((line) => line.trim()).find((line) => line.length > 0 && !/^\w+=/.test(line));
+    return `runtime admission: ${admissionBlock[0]}${reason ? ` — ${reason.slice(0, 160)}` : ""}`;
+  }
+  const runtimeException = text2.match(RUNTIME_EXCEPTION_LINE);
+  if (runtimeException) {
+    return `runtime exception: ${runtimeException[0].trim().slice(0, 220)}`;
+  }
   const diag = extractDiagnosticSymbols(text2);
   if (diag.count > 0) {
     const syms = diag.symbols.slice(0, 6);
@@ -26938,12 +26948,14 @@ function retireStaleEvidence(messages2, options2) {
   });
   return { messages: out, retiredCount, reclaimedChars };
 }
-var DIAG_LINE, QUOTED_SYMBOL, EVIDENCE_MARKERS;
+var DIAG_LINE, QUOTED_SYMBOL, RUNTIME_ADMISSION_BLOCK, RUNTIME_EXCEPTION_LINE, EVIDENCE_MARKERS;
 var init_evidence_retirement = __esm({
   "packages/memory/dist/evidence-retirement.js"() {
     "use strict";
     DIAG_LINE = /\berror\b\s*:/i;
     QUOTED_SYMBOL = /['"`]([A-Za-z_][A-Za-z0-9_:.<>]{1,80})['"`]/g;
+    RUNTIME_ADMISSION_BLOCK = /\[(?:COMPILE ERROR FIX LOOP BLOCKED|EXPLORATION ADMISSION BLOCK|PARENT(?:\s+[^\]]*)?\s+BLOCK(?:ED)?|FOCUS SUPERVISOR BLOCK|STEERING RECONCILIATION REQUIRED|STALE EDIT LOOP BLOCKED|FULL FILE WRITE LOOP BLOCKED)[^\]]*\]/i;
+    RUNTIME_EXCEPTION_LINE = /^\s*(?:[A-Za-z_][\w.]*?(?:Error|Exception)|AssertionError)\s*:\s*(.+)$/m;
     EVIDENCE_MARKERS = [
       "[SHELL TRANSCRIPT]",
       "[FILE CONTEXT",
@@ -62146,12 +62158,12 @@ var init_mock_stream = __esm({
 });
 
 // ../node_modules/unlimited-timeout/index.js
-function setTimeout2(callback, delay4, ...arguments_) {
+function setTimeout2(callback, delay5, ...arguments_) {
   if (typeof callback !== "function") {
     throw new TypeError("Expected callback to be a function");
   }
-  delay4 ??= 0;
-  delay4 = Number(delay4);
+  delay5 ??= 0;
+  delay5 = Number(delay5);
   let shouldUnref = false;
   const timeout2 = {
     [brandSymbol]: true,
@@ -62168,13 +62180,13 @@ function setTimeout2(callback, delay4, ...arguments_) {
       return timeout2;
     }
   };
-  if (delay4 === Number.POSITIVE_INFINITY || delay4 > Number.MAX_SAFE_INTEGER) {
+  if (delay5 === Number.POSITIVE_INFINITY || delay5 > Number.MAX_SAFE_INTEGER) {
     return timeout2;
   }
-  if (!Number.isFinite(delay4) || delay4 < 0) {
-    delay4 = 0;
+  if (!Number.isFinite(delay5) || delay5 < 0) {
+    delay5 = 0;
   }
-  const targetTime = performance.now() + delay4;
+  const targetTime = performance.now() + delay5;
   const schedule = (remainingDelay) => {
     if (timeout2.cleared) {
       return;
@@ -62199,7 +62211,7 @@ function setTimeout2(callback, delay4, ...arguments_) {
       }
     }
   };
-  schedule(delay4);
+  schedule(delay5);
   return timeout2;
 }
 function clearTimeout2(timeout2) {
@@ -72204,15 +72216,15 @@ var init_dist3 = __esm({
           const activeTicksCount = this.#getActiveTicksCount();
           if (activeTicksCount >= this.#intervalCap) {
             const oldestTick = this.#strictTicks[this.#strictTicksStartIndex];
-            const delay4 = this.#interval - (now2 - oldestTick);
-            this.#createIntervalTimeout(delay4);
+            const delay5 = this.#interval - (now2 - oldestTick);
+            this.#createIntervalTimeout(delay5);
             return true;
           }
           return false;
         }
         if (this.#intervalId === void 0) {
-          const delay4 = this.#intervalEnd - now2;
-          if (delay4 < 0) {
+          const delay5 = this.#intervalEnd - now2;
+          if (delay5 < 0) {
             if (this.#lastExecutionTime > 0) {
               const timeSinceLastExecution = now2 - this.#lastExecutionTime;
               if (timeSinceLastExecution < this.#interval) {
@@ -72222,19 +72234,19 @@ var init_dist3 = __esm({
             }
             this.#intervalCount = this.#carryoverIntervalCount ? this.#pending : 0;
           } else {
-            this.#createIntervalTimeout(delay4);
+            this.#createIntervalTimeout(delay5);
             return true;
           }
         }
         return false;
       }
-      #createIntervalTimeout(delay4) {
+      #createIntervalTimeout(delay5) {
         if (this.#timeoutId !== void 0) {
           return;
         }
         this.#timeoutId = setTimeout(() => {
           this.#onResumeInterval();
-        }, delay4);
+        }, delay5);
       }
       #clearIntervalTimer() {
         if (this.#intervalId) {
@@ -84795,8 +84807,8 @@ function validateKeyName(name10) {
 async function randomDelay() {
   const min = 200;
   const max = 1e3;
-  const delay4 = Math.random() * (max - min) + min;
-  await new Promise((resolve82) => setTimeout(resolve82, delay4));
+  const delay5 = Math.random() * (max - min) + min;
+  await new Promise((resolve82) => setTimeout(resolve82, delay5));
 }
 function DsName(name10) {
   return new Key(keyPrefix + name10);
@@ -97999,13 +98011,13 @@ var require_lazy_helpers = __commonJS({
       }
     };
     exports.DelayedConstructor = DelayedConstructor;
-    function delay4(wrappedConstructor) {
+    function delay5(wrappedConstructor) {
       if (typeof wrappedConstructor === "undefined") {
         throw new Error("Attempt to `delay` undefined. Constructor must be wrapped in a callback");
       }
       return new DelayedConstructor(wrappedConstructor);
     }
-    exports.delay = delay4;
+    exports.delay = delay5;
   }
 });
 
@@ -103023,12 +103035,12 @@ var require_x509_cjs = __commonJS({
 var require_crypto = __commonJS({
   "../node_modules/acme-client/src/crypto/index.js"(exports) {
     var net5 = __require("net");
-    var { promisify: promisify9 } = __require("util");
+    var { promisify: promisify10 } = __require("util");
     var crypto14 = __require("crypto");
     var asn1js4 = require_build2();
     var x5093 = require_x509_cjs();
-    var randomInt2 = promisify9(crypto14.randomInt);
-    var generateKeyPair2 = promisify9(crypto14.generateKeyPair);
+    var randomInt2 = promisify10(crypto14.randomInt);
+    var generateKeyPair2 = promisify10(crypto14.generateKeyPair);
     x5093.cryptoProvider.set(crypto14.webcrypto);
     var subjectAltNameOID = "2.5.29.17";
     var alpnAcmeIdentifierOID = "1.3.6.1.5.5.7.1.31";
@@ -137873,9 +137885,9 @@ var require_lib = __commonJS({
 var require_forge2 = __commonJS({
   "../node_modules/acme-client/src/crypto/forge.js"(exports) {
     var net5 = __require("net");
-    var { promisify: promisify9 } = __require("util");
+    var { promisify: promisify10 } = __require("util");
     var forge = require_lib();
-    var generateKeyPair2 = promisify9(forge.pki.rsa.generateKeyPair);
+    var generateKeyPair2 = promisify10(forge.pki.rsa.generateKeyPair);
     function forgeObjectFromPem(input) {
       const msg = forge.pem.decode(input)[0];
       let result;
@@ -142419,9 +142431,9 @@ var require_timers = __commonJS({
        * before the specified function or code is executed.
        * @param {*} arg
        */
-      constructor(callback, delay4, arg) {
+      constructor(callback, delay5, arg) {
         this._onTimeout = callback;
-        this._idleTimeout = delay4;
+        this._idleTimeout = delay5;
         this._timerArg = arg;
         this.refresh();
       }
@@ -142466,8 +142478,8 @@ var require_timers = __commonJS({
        * when the timer expires.
        * @returns {NodeJS.Timeout|FastTimer}
        */
-      setTimeout(callback, delay4, arg) {
-        return delay4 <= RESOLUTION_MS ? setTimeout(callback, delay4, arg) : new FastTimer(callback, delay4, arg);
+      setTimeout(callback, delay5, arg) {
+        return delay5 <= RESOLUTION_MS ? setTimeout(callback, delay5, arg) : new FastTimer(callback, delay5, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated Timer previously created
@@ -142493,8 +142505,8 @@ var require_timers = __commonJS({
        * when the timer expires.
        * @returns {FastTimer}
        */
-      setFastTimeout(callback, delay4, arg) {
-        return new FastTimer(callback, delay4, arg);
+      setFastTimeout(callback, delay5, arg) {
+        return new FastTimer(callback, delay5, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated FastTimer previously
@@ -142520,8 +142532,8 @@ var require_timers = __commonJS({
        * @deprecated
        * @param {number} [delay=0] The delay in milliseconds to add to the now value.
        */
-      tick(delay4 = 0) {
-        fastNow += delay4 - RESOLUTION_MS + 1;
+      tick(delay5 = 0) {
+        fastNow += delay5 - RESOLUTION_MS + 1;
         onTick();
         onTick();
       },
@@ -148914,21 +148926,21 @@ var require_client_h1 = __commonJS({
         this.connection = "";
         this.maxResponseSize = client[kMaxResponseSize];
       }
-      setTimeout(delay4, type) {
-        if (delay4 !== this.timeoutValue || type & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
+      setTimeout(delay5, type) {
+        if (delay5 !== this.timeoutValue || type & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
           if (this.timeout) {
             timers.clearTimeout(this.timeout);
             this.timeout = null;
           }
-          if (delay4) {
+          if (delay5) {
             if (type & USE_FAST_TIMER) {
-              this.timeout = timers.setFastTimeout(onParserTimeout, delay4, new WeakRef(this));
+              this.timeout = timers.setFastTimeout(onParserTimeout, delay5, new WeakRef(this));
             } else {
-              this.timeout = setTimeout(onParserTimeout, delay4, new WeakRef(this));
+              this.timeout = setTimeout(onParserTimeout, delay5, new WeakRef(this));
               this.timeout?.unref();
             }
           }
-          this.timeoutValue = delay4;
+          this.timeoutValue = delay5;
         } else if (this.timeout) {
           if (this.timeout.refresh) {
             this.timeout.refresh();
@@ -154794,7 +154806,7 @@ var require_mock_utils = __commonJS({
       if (mockDispatch2.data.callback) {
         mockDispatch2.data = { ...mockDispatch2.data, ...mockDispatch2.data.callback(opts) };
       }
-      const { data: { statusCode, data, headers, trailers, error }, delay: delay4, persist: persist4 } = mockDispatch2;
+      const { data: { statusCode, data, headers, trailers, error }, delay: delay5, persist: persist4 } = mockDispatch2;
       const { timesInvoked, times } = mockDispatch2;
       mockDispatch2.consumed = !persist4 && timesInvoked >= times;
       mockDispatch2.pending = timesInvoked < times;
@@ -154817,11 +154829,11 @@ var require_mock_utils = __commonJS({
         handler.onError(err);
       }
       handler.onConnect?.(abort, null);
-      if (typeof delay4 === "number" && delay4 > 0) {
+      if (typeof delay5 === "number" && delay5 > 0) {
         timer = setTimeout(() => {
           timer = null;
           handleReply(this[kDispatches]);
-        }, delay4);
+        }, delay5);
       } else {
         handleReply(this[kDispatches]);
       }
@@ -155101,7 +155113,7 @@ var require_mock_interceptor = __commonJS({
 var require_mock_client = __commonJS({
   "../node_modules/undici/lib/mock/mock-client.js"(exports, module) {
     "use strict";
-    var { promisify: promisify9 } = __require("node:util");
+    var { promisify: promisify10 } = __require("node:util");
     var Client2 = require_client2();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -155149,7 +155161,7 @@ var require_mock_client = __commonJS({
         this[kDispatches] = [];
       }
       async [kClose]() {
-        await promisify9(this[kOriginalClose])();
+        await promisify10(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -155362,7 +155374,7 @@ var require_mock_call_history = __commonJS({
 var require_mock_pool = __commonJS({
   "../node_modules/undici/lib/mock/mock-pool.js"(exports, module) {
     "use strict";
-    var { promisify: promisify9 } = __require("node:util");
+    var { promisify: promisify10 } = __require("node:util");
     var Pool = require_pool();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -155410,7 +155422,7 @@ var require_mock_pool = __commonJS({
         this[kDispatches] = [];
       }
       async [kClose]() {
-        await promisify9(this[kOriginalClose])();
+        await promisify10(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -288327,9 +288339,9 @@ function inferHoleRadius(lower) {
 function inferHoleCount(lower) {
   if (!/hole|bolt|mount|screw|fastener/.test(lower))
     return 0;
-  const numeric = lower.match(/\b(\d{1,2})\s*(?:x\s*)?(?:corner\s*)?(?:mounting\s*)?(?:holes?|bolts?|screws?|fasteners?)\b/);
-  if (numeric)
-    return clampInteger(Number(numeric[1]), 0, 16, 4);
+  const numeric2 = lower.match(/\b(\d{1,2})\s*(?:x\s*)?(?:corner\s*)?(?:mounting\s*)?(?:holes?|bolts?|screws?|fasteners?)\b/);
+  if (numeric2)
+    return clampInteger(Number(numeric2[1]), 0, 16, 4);
   const wordCounts = {
     one: 1,
     two: 2,
@@ -289570,12 +289582,12 @@ ${plan.notes.map((n2) => `- ${n2}`).join("\n")}`,
                 durationMs: Date.now() - t0
               };
             }
-            const delay4 = Math.min(BASE_DELAY * Math.pow(2, attempt - 1), MAX_BACKOFF);
+            const delay5 = Math.min(BASE_DELAY * Math.pow(2, attempt - 1), MAX_BACKOFF);
             this.emitProgress({
               stage: "generate",
-              message: `Attempt ${attempt} ${msg.includes("timed out") ? "timed out" : "backend unavailable"}, retrying in ${Math.round(delay4 / 1e3)}s...`
+              message: `Attempt ${attempt} ${msg.includes("timed out") ? "timed out" : "backend unavailable"}, retrying in ${Math.round(delay5 / 1e3)}s...`
             });
-            await new Promise((r2) => setTimeout(r2, delay4));
+            await new Promise((r2) => setTimeout(r2, delay5));
           }
         }
         let result = {};
@@ -298094,6 +298106,9 @@ function validateCardTransition(from3, to) {
   return { valid: true, message: "transition allowed" };
 }
 function verifyCardEvidence(card) {
+  const declaredVerifierEvidence = verifyDeclaredVerifierEvidence(card);
+  if (!declaredVerifierEvidence.valid)
+    return declaredVerifierEvidence;
   const compileEvidence = verifyCompileCardEvidence(card);
   if (!compileEvidence.valid)
     return compileEvidence;
@@ -298115,6 +298130,13 @@ function verifyCardEvidence(card) {
   });
   return { valid: missing.length === 0, missing };
 }
+function verifyDeclaredVerifierEvidence(card) {
+  const verifier = normalizeCommandText(card.verifierCommand ?? "");
+  if (!verifier)
+    return { valid: true, missing: [] };
+  const hasExactLiveCommand = card.evidence.some((evidence) => evidence.kind === "tool_result" && normalizeCommandText(evidence.command ?? "") === verifier);
+  return hasExactLiveCommand ? { valid: true, missing: [] } : { valid: false, missing: [`live verifier output: ${card.verifierCommand}`] };
+}
 function verifyCompileCardEvidence(card) {
   if (!card.diagnosticFingerprint && !card.id.startsWith("compile-")) {
     return { valid: true, missing: [] };
@@ -491768,14 +491790,14 @@ ${content}
       function getOrganizeImportsUnicodeStringComparer(ignoreCase, preferences) {
         const resolvedLocale = getOrganizeImportsLocale(preferences);
         const caseFirst = preferences.organizeImportsCaseFirst ?? false;
-        const numeric = preferences.organizeImportsNumericCollation ?? false;
+        const numeric2 = preferences.organizeImportsNumericCollation ?? false;
         const accents = preferences.organizeImportsAccentCollation ?? true;
         const sensitivity = ignoreCase ? accents ? "accent" : "base" : accents ? "variant" : "case";
         const collator = new Intl.Collator(resolvedLocale, {
           usage: "sort",
           caseFirst: caseFirst || "false",
           sensitivity,
-          numeric
+          numeric: numeric2
         });
         return collator.compare;
       }
@@ -502591,12 +502613,12 @@ ${options2.prefix}` : "\n" : options2.prefix
          * of the new one.  (Note that the amount of time the canceled operation had been
          * waiting does not affect the amount of time that the new operation waits.)
          */
-        schedule(operationId, delay4, cb) {
+        schedule(operationId, delay5, cb) {
           const pendingTimeout = this.pendingTimeouts.get(operationId);
           if (pendingTimeout) {
             this.host.clearTimeout(pendingTimeout);
           }
-          this.pendingTimeouts.set(operationId, this.host.setTimeout(_ThrottledOperations.run, delay4, operationId, this, cb));
+          this.pendingTimeouts.set(operationId, this.host.setTimeout(_ThrottledOperations.run, delay5, operationId, this, cb));
           if (this.logger) {
             this.logger.info(`Scheduled: ${operationId}${pendingTimeout ? ", Cancelled earlier one" : ""}`);
           }
@@ -502616,9 +502638,9 @@ ${options2.prefix}` : "\n" : options2.prefix
         }
       };
       var GcTimer = class _GcTimer {
-        constructor(host, delay4, logger2) {
+        constructor(host, delay5, logger2) {
           this.host = host;
-          this.delay = delay4;
+          this.delay = delay5;
           this.logger = logger2;
         }
         scheduleCollect() {
@@ -512967,12 +512989,12 @@ Project '${project.projectName}' (${ProjectKind[project.projectKind]}) ${counter
           const project = this.projectService.tryGetDefaultProjectForFile(fileName);
           return project && { fileName, project };
         }
-        getDiagnostics(next, delay4, fileArgs) {
+        getDiagnostics(next, delay5, fileArgs) {
           if (this.suppressDiagnosticEvents) {
             return;
           }
           if (fileArgs.length > 0) {
-            this.updateErrorCheck(next, fileArgs, delay4);
+            this.updateErrorCheck(next, fileArgs, delay5);
           }
         }
         change(args) {
@@ -513372,7 +513394,7 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
           const spans = languageService.getBraceMatchingAtPosition(file, position);
           return !spans ? void 0 : simplifiedResult ? spans.map((span) => toProtocolTextSpan(span, scriptInfo)) : spans;
         }
-        getDiagnosticsForProject(next, delay4, fileName) {
+        getDiagnosticsForProject(next, delay5, fileName) {
           if (this.suppressDiagnosticEvents) {
             return;
           }
@@ -513417,7 +513439,7 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
           this.updateErrorCheck(
             next,
             checkList,
-            delay4,
+            delay5,
             /*requireOpen*/
             false
           );
@@ -514947,7 +514969,7 @@ var require_commonjs2 = __commonJS({
     var commaPattern = /\\,/g;
     var periodPattern = /\\\./g;
     exports.EXPANSION_MAX = 1e5;
-    function numeric(str) {
+    function numeric2(str) {
       return !isNaN(str) ? parseInt(str, 10) : str.charCodeAt(0);
     }
     function escapeBraces(str) {
@@ -515037,10 +515059,10 @@ var require_commonjs2 = __commonJS({
         }
         let N;
         if (isSequence && n2[0] !== void 0 && n2[1] !== void 0) {
-          const x = numeric(n2[0]);
-          const y = numeric(n2[1]);
+          const x = numeric2(n2[0]);
+          const y = numeric2(n2[1]);
           const width = Math.max(n2[0].length, n2[1].length);
-          let incr = n2.length === 3 && n2[2] !== void 0 ? Math.max(Math.abs(numeric(n2[2])), 1) : 1;
+          let incr = n2.length === 3 && n2[2] !== void 0 ? Math.max(Math.abs(numeric2(n2[2])), 1) : 1;
           let test = lte;
           const reverse = y < x;
           if (reverse) {
@@ -563021,8 +563043,8 @@ var init_VllmBackend = __esm({
             const errorText = await response.text().catch(() => "");
             const isRetryable = response.status >= 500 || response.status === 429;
             if (isRetryable && attempt < this.maxRetries) {
-              const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-              await new Promise((r2) => setTimeout(r2, delay4));
+              const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+              await new Promise((r2) => setTimeout(r2, delay5));
               return this.postWithRetry(path16, body, attempt + 1);
             }
             throw new Error(`vLLM POST ${path16} failed with HTTP ${response.status}: ${errorText}`);
@@ -563032,8 +563054,8 @@ var init_VllmBackend = __esm({
           clearTimeout(timer);
           const isNetworkError2 = err instanceof TypeError || err instanceof Error && err.name === "AbortError";
           if (isNetworkError2 && attempt < this.maxRetries) {
-            const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-            await new Promise((r2) => setTimeout(r2, delay4));
+            const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+            await new Promise((r2) => setTimeout(r2, delay5));
             return this.postWithRetry(path16, body, attempt + 1);
           }
           throw err;
@@ -563281,8 +563303,8 @@ var init_OllamaBackend = __esm({
             const errorText = await response.text().catch(() => "");
             const isRetryable = response.status >= 500 || response.status === 429;
             if (isRetryable && attempt < this.maxRetries) {
-              const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-              await new Promise((r2) => setTimeout(r2, delay4));
+              const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+              await new Promise((r2) => setTimeout(r2, delay5));
               return this.postWithRetry(path16, body, attempt + 1);
             }
             throw new Error(`Ollama POST ${path16} failed with HTTP ${response.status}: ${errorText}`);
@@ -563292,8 +563314,8 @@ var init_OllamaBackend = __esm({
           clearTimeout(timer);
           const isNetworkError2 = err instanceof TypeError || err instanceof Error && err.name === "AbortError";
           if (isNetworkError2 && attempt < this.maxRetries) {
-            const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-            await new Promise((r2) => setTimeout(r2, delay4));
+            const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+            await new Promise((r2) => setTimeout(r2, delay5));
             return this.postWithRetry(path16, body, attempt + 1);
           }
           throw err;
@@ -565670,9 +565692,9 @@ var init_verifierRunner = __esm({
       async executeTests(patch, repoRoot) {
         if (patch.testsToRun.length === 0)
           return "(no tests specified)";
-        const { execFile: execFile11 } = await import("node:child_process");
-        const { promisify: promisify9 } = await import("node:util");
-        const execFileAsync6 = promisify9(execFile11);
+        const { execFile: execFile12 } = await import("node:child_process");
+        const { promisify: promisify10 } = await import("node:util");
+        const execFileAsync7 = promisify10(execFile12);
         const outputs = [];
         const workDir = this.options.workingDir || repoRoot;
         for (const cmd of patch.testsToRun.slice(0, 3)) {
@@ -565681,7 +565703,7 @@ var init_verifierRunner = __esm({
             const [bin, ...args] = parts;
             if (!bin)
               continue;
-            const { stdout, stderr } = await execFileAsync6(bin, args, {
+            const { stdout, stderr } = await execFileAsync7(bin, args, {
               cwd: workDir,
               timeout: 15e3,
               maxBuffer: 1024 * 1024
@@ -574071,15 +574093,19 @@ function buildTrajectoryCheckpoint(input) {
   const latestFailure = [...observations].reverse().find((item) => item.type === "tool_result" && item.success === false || item.type === "error");
   const failureText = sanitizeTrajectoryText(latestFailure?.content, 300);
   const fallbackFailure = input.recentFailures?.at(-1);
+  const failureTurn = Math.max(typeof latestFailure?.turn === "number" ? latestFailure.turn : -1, typeof fallbackFailure?.turn === "number" ? fallbackFailure.turn : -1);
+  const verifiedFailureRecovery = input.lastVerifier?.passed === true && typeof input.lastVerifier.turn === "number" && input.lastVerifier.turn > failureTurn;
   const combinedFailure = [
-    failureText,
-    sanitizeTrajectoryText(fallbackFailure?.error || fallbackFailure?.output, 300)
+    ...verifiedFailureRecovery ? [] : [
+      failureText,
+      sanitizeTrajectoryText(fallbackFailure?.error || fallbackFailure?.output, 300)
+    ]
   ].filter(Boolean).join(" ");
   const focus = sanitizeTrajectoryText(input.focusDirective, 300);
   const targetPath = inferTargetPath(combinedFailure || outcomeText || focus) ?? latestFailure?.targetPath ?? mostRecentTargetForTool(observations, latestFailure?.toolName);
   const targetFreshness = targetPath ? input.evidenceFreshness?.(targetPath) ?? "unknown" : "unknown";
   const modifiedFiles = Array.from(state.modifiedFiles).slice(-3);
-  const fullWriteIssue = (latestFailure?.toolName === "file_write" || fallbackFailure?.tool === "file_write" || /file_write/i.test(combinedFailure)) && /FULL FILE (?:WRITE LOOP BLOCKED|REWRITE CONTRACT)|overwrite(?:=true)?|expected_hash|Refusing to overwrite existing file/i.test(combinedFailure);
+  const fullWriteIssue = !verifiedFailureRecovery && (latestFailure?.toolName === "file_write" || fallbackFailure?.tool === "file_write" || /file_write/i.test(combinedFailure)) && /FULL FILE (?:WRITE LOOP BLOCKED|REWRITE CONTRACT)|overwrite(?:=true)?|expected_hash|Refusing to overwrite existing file/i.test(combinedFailure);
   const fullWriteRecoveredByMutation = fullWriteIssue && Boolean(targetPath) && modifiedFiles.some(([path16]) => sameProjectPath(path16, targetPath)) && typeof latestFailure?.turn === "number" && typeof input.lastMutationTurn === "number" && input.lastMutationTurn > latestFailure.turn;
   const explicitBlock = /(?:permission denied|needs user input|ask_user|cannot proceed|external dependency|\[.*BLOCKED\])/i.test(combinedFailure);
   const hasRecentFailure = Boolean(combinedFailure);
@@ -578615,17 +578641,12 @@ var init_context_fabric = __esm({
           "Scope: runtime state for the next action. Do not quote or re-emit this frame. Prior evidence is orientation; execute a narrow file_read or the declared verifier whenever current text/hash or post-mutation proof is required."
         ].filter(Boolean);
         let content = [...header, "", ...sectionLines].join("\n").trim();
-        const controlChars = included.filter(isControlSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
-        const evidenceChars = included.filter(isEvidenceSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
-        const controlToEvidenceRatio = Number((controlChars / Math.max(1, evidenceChars)).toFixed(3));
+        let visibleIncluded = [...included];
+        let controlChars = 0;
+        let evidenceChars = 0;
+        let controlToEvidenceRatio = 0;
         const qualityWarnings = [];
         const maxControlRatio = options2.maxControlToEvidenceRatio ?? 0.45;
-        if (controlToEvidenceRatio > maxControlRatio) {
-          qualityWarnings.push(`control_context_ratio_high:${controlToEvidenceRatio}`);
-        }
-        const activeFrameCount = (content.match(/\[ACTIVE CONTEXT FRAME\]/g) ?? []).length;
-        if (activeFrameCount > 1)
-          qualityWarnings.push(`active_frame_count:${activeFrameCount}`);
         if (sectionLines.length === 0) {
           return {
             content: null,
@@ -578661,6 +578682,21 @@ var init_context_fabric = __esm({
               dropped.push(signal);
           }
         }
+        visibleIncluded = included.filter((signal) => content.includes(signal.content));
+        for (const signal of included) {
+          if (!visibleIncluded.includes(signal) && !dropped.includes(signal)) {
+            dropped.push(signal);
+          }
+        }
+        controlChars = visibleIncluded.filter(isControlSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
+        evidenceChars = visibleIncluded.filter(isEvidenceSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
+        controlToEvidenceRatio = Number((controlChars / Math.max(1, evidenceChars)).toFixed(3));
+        if (controlToEvidenceRatio > maxControlRatio) {
+          qualityWarnings.push(`control_context_ratio_high:${controlToEvidenceRatio}`);
+        }
+        const activeFrameCount = (content.match(/\[ACTIVE CONTEXT FRAME\]/g) ?? []).length;
+        if (activeFrameCount > 1)
+          qualityWarnings.push(`active_frame_count:${activeFrameCount}`);
         if (options2.includeDiagnostics) {
           content += `
 
@@ -578669,7 +578705,7 @@ context_fabric: included=${included.length} dropped=${dropped.length} truncated=
         return {
           content,
           diagnostics: {
-            includedSignals: included.length,
+            includedSignals: visibleIncluded.length,
             droppedSignals: dropped.length + droppedByAdmission.length,
             hiddenSignals: hidden.length,
             semanticDedupedSignals,
@@ -578678,7 +578714,7 @@ context_fabric: included=${included.length} dropped=${dropped.length} truncated=
             truncatedSignals,
             estimatedTokens: estimateTokens2(content),
             totalChars: content.length,
-            semanticChunkCount: included.filter((signal) => signal.kind === "semantic_chunk").length,
+            semanticChunkCount: visibleIncluded.filter((signal) => signal.kind === "semantic_chunk").length,
             controlChars,
             evidenceChars,
             controlToEvidenceRatio,
@@ -578686,7 +578722,7 @@ context_fabric: included=${included.length} dropped=${dropped.length} truncated=
             ...metadataReports,
             sections: sectionDiagnostics
           },
-          included,
+          included: visibleIncluded,
           dropped: [...dropped, ...droppedByAdmission, ...hidden]
         };
       }
@@ -578710,7 +578746,7 @@ function isAdmittedFileReadMessage(message2) {
 function isProtectedControllerMessage(message2) {
   return isControllerStateMessage(message2) || isActionGroundTruthMessage(message2) || isActiveSteeringMessage(message2);
 }
-function modelFacingMessageCap(message2) {
+function modelFacingMessageCapWithLimits(message2, limits) {
   if (isControllerStateMessage(message2)) {
     return MODEL_FACING_CONTROLLER_STATE_CHAR_CAP;
   }
@@ -578721,12 +578757,12 @@ function modelFacingMessageCap(message2) {
     return Math.max(MODEL_FACING_ACTION_GROUND_TRUTH_CHAR_CAP, 7e3);
   }
   if (isAdmittedFileReadMessage(message2)) {
-    return MODEL_FACING_ADMITTED_FILE_READ_CHAR_CAP;
+    return limits.admittedFileReadChars ?? MODEL_FACING_ADMITTED_FILE_READ_CHAR_CAP;
   }
   if (message2.role === "tool")
-    return MODEL_FACING_TOOL_CHAR_CAP;
+    return limits.toolChars ?? MODEL_FACING_TOOL_CHAR_CAP;
   if (message2.role === "system")
-    return MODEL_FACING_SYSTEM_CHAR_CAP;
+    return limits.systemChars ?? MODEL_FACING_SYSTEM_CHAR_CAP;
   return messageText(message2.content).length;
 }
 function stripLegacyRuntimeControlFragments(content) {
@@ -578736,18 +578772,18 @@ function stripLegacyRuntimeControlFragments(content) {
   out = pieces.map((piece) => LEGACY_RUNTIME_CONTROL_FRAGMENT_RE.test(piece) ? "" : piece).join("");
   return collapseWhitespace(out);
 }
-function splitOversizedSystemMessages(messages2) {
+function splitOversizedSystemMessages(messages2, systemCharCap = MODEL_FACING_SYSTEM_CHAR_CAP) {
   const out = [];
   for (const message2 of messages2) {
-    if (message2.role !== "system" || typeof message2.content !== "string" || isProtectedControllerMessage(message2) || message2.content.length <= MODEL_FACING_SYSTEM_CHAR_CAP) {
+    if (message2.role !== "system" || typeof message2.content !== "string" || isProtectedControllerMessage(message2) || message2.content.length <= systemCharCap) {
       out.push(message2);
       continue;
     }
     let remaining = message2.content.trim();
-    while (remaining.length > MODEL_FACING_SYSTEM_CHAR_CAP) {
-      const window2 = remaining.slice(0, MODEL_FACING_SYSTEM_CHAR_CAP);
+    while (remaining.length > systemCharCap) {
+      const window2 = remaining.slice(0, systemCharCap);
       const boundary = Math.max(window2.lastIndexOf("\n\n"), window2.lastIndexOf("\n"));
-      const cut = boundary >= Math.floor(MODEL_FACING_SYSTEM_CHAR_CAP * 0.5) ? boundary : MODEL_FACING_SYSTEM_CHAR_CAP;
+      const cut = boundary >= Math.floor(systemCharCap * 0.5) ? boundary : systemCharCap;
       const chunk = remaining.slice(0, cut).trim();
       if (chunk)
         out.push({ ...message2, content: chunk });
@@ -578761,17 +578797,17 @@ function splitOversizedSystemMessages(messages2) {
 function isCurrentGoalMessage(message2) {
   return typeof message2.content === "string" && message2.content.includes("[CURRENT USER GOAL]");
 }
-function applyModelFacingBudget(messages2, preserveFirstSystem) {
+function applyModelFacingBudget(messages2, preserveFirstSystem, limits = {}) {
   const reservedTransaction = latestResolvedToolTransaction(messages2);
-  const reservedChars = [...reservedTransaction].reduce((sum2, index) => sum2 + modelFacingReservedChars(messages2[index]), 0);
-  let remaining = Math.max(0, MODEL_FACING_CONTEXT_CHAR_BUDGET - reservedChars);
+  const reservedChars = [...reservedTransaction].reduce((sum2, index) => sum2 + modelFacingReservedChars(messages2[index], limits), 0);
+  let remaining = Math.max(0, (limits.contextChars ?? MODEL_FACING_CONTEXT_CHAR_BUDGET) - reservedChars);
   const kept = [];
   for (let index = 0; index < messages2.length; index++) {
     const message2 = messages2[index];
     const content = messageText(message2.content);
     const isReservedTransactionMessage = reservedTransaction.has(index);
     const isPriorityIntent = message2.role === "user" || isCurrentGoalMessage(message2) || isActiveSteeringMessage(message2);
-    const perMessageCap = modelFacingMessageCap(message2);
+    const perMessageCap = modelFacingMessageCapWithLimits(message2, limits);
     const isProtectedController = isProtectedControllerMessage(message2);
     const allowed = isReservedTransactionMessage ? perMessageCap : isPriorityIntent ? content.length : isProtectedController ? perMessageCap : Math.min(remaining, perMessageCap);
     if (!isReservedTransactionMessage && !isPriorityIntent && !isProtectedController && allowed <= 0) {
@@ -578882,9 +578918,9 @@ function latestResolvedToolTransaction(messages2) {
   }
   return /* @__PURE__ */ new Set();
 }
-function modelFacingReservedChars(message2) {
+function modelFacingReservedChars(message2, limits = {}) {
   const content = messageText(message2.content);
-  const cap = modelFacingMessageCap(message2);
+  const cap = modelFacingMessageCapWithLimits(message2, limits);
   return Math.min(content.length, cap);
 }
 function retireLinkedAssistantReadIntents(messages2) {
@@ -578906,6 +578942,64 @@ function retireLinkedAssistantReadIntents(messages2) {
     return { ...message2, content: ASSISTANT_READ_INTENT_RETIRED_MARKER };
   });
 }
+function retireHistoricalAssistantNarratives(messages2) {
+  const resolvedToolCallIds = new Set(messages2.filter((message2) => message2.role === "tool").map(linkedToolCallId).filter((id2) => id2 !== null));
+  const newestTransaction = latestResolvedToolTransaction(messages2);
+  const keepFreeform = /* @__PURE__ */ new Set();
+  let freeformSlots = 1;
+  const assistantControllerRecap = /(?:\[?(?:controller state v1|active context frame|trajectory checkpoint|branch-extract(?: v\d+)?|recent action ground truth)\]?|\b(?:controller|admin)\s+(?:directive|state|summary|recap|reflection)\b|\b(?:verifier|compile)\s+(?:is\s+)?locked\b|\b(?:read tool|read wrapper)\s+(?:is|was)\s+(?:contaminated|untrusted)\b|\b(?:failure|recovery|doom)[ -]?(?:loop|recap|summary)\b)/i;
+  for (let index = messages2.length - 1; index >= 0; index--) {
+    const message2 = messages2[index];
+    if (message2.role !== "assistant" || typeof message2.content !== "string" || toolCallIds(message2).length > 0 || !message2.content.trim() || assistantControllerRecap.test(message2.content)) {
+      continue;
+    }
+    if (freeformSlots-- > 0)
+      keepFreeform.add(index);
+  }
+  return messages2.map((message2, index) => {
+    if (message2.role !== "assistant" || typeof message2.content !== "string") {
+      return message2;
+    }
+    if (assistantControllerRecap.test(message2.content)) {
+      return { ...message2, content: "" };
+    }
+    const callIds = toolCallIds(message2);
+    if (callIds.length > 0) {
+      const allResolved = callIds.every((id2) => resolvedToolCallIds.has(id2));
+      if (allResolved && !newestTransaction.has(index)) {
+        return { ...message2, content: "" };
+      }
+      return message2;
+    }
+    if (!keepFreeform.has(index))
+      return { ...message2, content: "" };
+    return message2;
+  });
+}
+function retireHistoricalRunEvidence(messages2) {
+  const retainedByBucket = /* @__PURE__ */ new Map();
+  const limitByBucket = {
+    discovery: 3,
+    mutation: 2,
+    verification: 1
+  };
+  const out = [...messages2];
+  for (let index = out.length - 1; index >= 0; index--) {
+    const message2 = out[index];
+    if (message2.role !== "system" || typeof message2.content !== "string" || !message2.content.includes("[RUN EVIDENCE]")) {
+      continue;
+    }
+    const text2 = message2.content.toLowerCase();
+    const bucket = /\b(?:file_edit|file_write|patch|apply_patch)\b/.test(text2) ? "mutation" : /\b(?:shell|verifier|compile|build|test)\b/.test(text2) ? "verification" : "discovery";
+    const retained = retainedByBucket.get(bucket) ?? 0;
+    if (retained >= limitByBucket[bucket]) {
+      out[index] = { ...message2, content: "" };
+      continue;
+    }
+    retainedByBucket.set(bucket, retained + 1);
+  }
+  return out.filter((message2) => message2.role !== "system" || typeof message2.content !== "string" || message2.content.trim());
+}
 function runtimeControlSemanticKey(content) {
   const normalized = content.replace(/\s+/g, " ").trim().toLowerCase();
   if (!normalized)
@@ -578969,9 +579063,13 @@ function hasAssistantPayload(message2) {
 }
 function staleToolFailureKey(content) {
   const text2 = content.replace(/\s+/g, " ").trim();
-  if (!/(FAILED:|failed again|doom-loop|result compacted|Earlier read of .* cleared)/i.test(text2)) {
+  const runtimeBlock = text2.match(/\[(COMPILE ERROR FIX LOOP BLOCKED|EXPLORATION ADMISSION BLOCK|PARENT(?:\s+[^\]]*)?\s+BLOCK(?:ED)?|FOCUS SUPERVISOR BLOCK|STEERING RECONCILIATION REQUIRED|STALE EDIT LOOP BLOCKED|FULL FILE WRITE LOOP BLOCKED)[^\]]*\]/i);
+  if (!/(FAILED:|failed again|doom-loop|result compacted|Earlier read of .* cleared)/i.test(text2) && !runtimeBlock) {
     return null;
   }
+  if (runtimeBlock) {
+    return `runtime-block|${runtimeBlock[1].toLowerCase().replace(/\s+/g, "-")}`;
+  }
   const tool = text2.match(/^\[?([a-zA-Z_][a-zA-Z0-9_]*)\(/)?.[1] ?? "tool";
   const path16 = text2.match(/"path"\s*:\s*"([^"]+)"/)?.[1] ?? text2.match(/Earlier read of ([^ ]+) cleared/)?.[1] ?? "";
   const family = text2.match(/FAILED:\s*\[([^\]\n]+)/i)?.[1] ?? text2.match(/(doom-loop[^.]+)/i)?.[1] ?? text2.match(/(Earlier read of [^ ]+ cleared)/i)?.[1] ?? "failure";
@@ -579003,6 +579101,12 @@ function retireDuplicateToolFailures(messages2) {
 }
 function prepareModelFacingApiMessages(input) {
   const preserveFirstSystem = input.preserveFirstSystem !== false;
+  const limits = {
+    contextChars: input.contextBudgetChars,
+    systemChars: input.systemMessageChars,
+    toolChars: input.toolMessageChars,
+    admittedFileReadChars: input.admittedFileReadChars
+  };
   const sanitized = [];
   const withoutLegacyControl = input.messages.flatMap((message2) => {
     if (message2.role !== "system" || typeof message2.content !== "string" || isProtectedControllerMessage(message2)) {
@@ -579011,7 +579115,7 @@ function prepareModelFacingApiMessages(input) {
     const stripped = stripLegacyRuntimeControlFragments(message2.content);
     return stripped ? [{ ...message2, content: stripped }] : [];
   });
-  const independentlyBounded = splitOversizedSystemMessages(withoutLegacyControl);
+  const independentlyBounded = splitOversizedSystemMessages(withoutLegacyControl, limits.systemChars);
   for (let index = 0; index < independentlyBounded.length; index++) {
     const rawMessage = independentlyBounded[index];
     const message2 = {
@@ -579070,7 +579174,7 @@ function prepareModelFacingApiMessages(input) {
     }
     seenSystemKeys.add(key);
   }
-  const deduped = retireDuplicateToolFailures(epochScoped.filter((_message, index) => keep[index]));
+  const deduped = retireDuplicateToolFailures(retireHistoricalRunEvidence(epochScoped.filter((_message, index) => keep[index])));
   if (!hasUserMessage(deduped) && !hasConcreteGoalMessage(deduped)) {
     const goal = deriveCurrentGoal({
       explicitGoal: input.currentGoal,
@@ -579088,7 +579192,8 @@ function prepareModelFacingApiMessages(input) {
     const insertAt = preserveFirstSystem && deduped[0]?.role === "system" ? 1 : 0;
     deduped.splice(insertAt, 0, goalMessage);
   }
-  return retireLinkedAssistantReadIntents(applyModelFacingBudget(deduped, preserveFirstSystem));
+  const historyPruned = retireHistoricalAssistantNarratives(retireLinkedAssistantReadIntents(deduped));
+  return applyModelFacingBudget(historyPruned, preserveFirstSystem, limits).filter((message2) => message2.role !== "assistant" || hasAssistantPayload(message2));
 }
 function deriveCurrentGoal(input) {
   const explicit = sanitizeModelVisibleContextText(input.explicitGoal ?? "");
@@ -581797,7 +581902,7 @@ var init_focusSupervisor = __esm({
         this.expireDirectiveIfNeeded(this.lastObservedTurn);
         if (!this.enabled || !this.directive)
           return null;
-        if (this.modelTier === "large")
+        if (this.modelTier !== "small")
           return null;
         const d2 = this.directive;
         return [
@@ -582178,13 +582283,10 @@ var init_focusSupervisor = __esm({
           return true;
         if (this.mode === "off")
           return false;
-        if (this.modelTier === "small" || this.modelTier === "medium")
+        if (this.modelTier === "small")
           return true;
-        if (!context2)
-          return false;
-        const pressure = context2.pressureRatio ?? 0;
-        const ratio = context2.signalToNoiseRatio;
-        return pressure >= 0.85 || ratio !== void 0 && ratio < 1.2;
+        void context2;
+        return false;
       }
       hasLowSignalContext(context2) {
         if (!context2)
@@ -584689,7 +584791,10 @@ function buildBranchExtractionBrief(input) {
   const requirements = requirementQuestions.map((question, index) => ({
     id: `R${index + 1}`,
     question,
-    required: index === 0 || requirementQuestions.length === 1,
+    // A declared discovery question is never decorative.  The branch may
+    // return a justified partial result, but it cannot call its contract
+    // complete until every listed requirement has anchored evidence.
+    required: true,
     expectedEvidence: "Exact source declarations, literal values, control/configuration behavior, and their line anchors.",
     searchTerms: queryTerms(question).slice(0, 16)
   }));
@@ -584704,7 +584809,7 @@ function buildBranchExtractionBrief(input) {
     query: cleanBriefText(retrievalQuery, 700),
     requirements,
     completionCriteria: [
-      "Every required requirement is either supported by an exact anchored segment or explicitly marked unresolved.",
+      "Every declared requirement is either supported by an exact anchored segment or has an explicit source-based unresolved reason and deterministic recovery action.",
       "Every returned factual claim names its source line span; discontiguous evidence remains separate.",
       "Stop when the contract is satisfied, no new query/range is available, or the bounded search budget is exhausted."
     ],
@@ -585019,6 +585124,44 @@ function deterministicSegments(input) {
   });
   return { segments, satisfied: [...satisfied], rounds };
 }
+function buildRequirementCoverage(input) {
+  return input.requirements.map((requirement) => {
+    const anchors = input.segments.filter((segment) => segment.requirementIds.includes(requirement.id)).map((segment) => ({
+      startLine: segment.anchor.startLine,
+      endLine: segment.anchor.endLine
+    }));
+    if (anchors.length > 0) {
+      return {
+        id: requirement.id,
+        question: requirement.question,
+        status: "satisfied",
+        anchors
+      };
+    }
+    const terms2 = queryTerms(requirement.question);
+    const candidateIndex = input.lines.findIndex((line) => {
+      const lower = line.toLowerCase();
+      return terms2.some((term) => lower.includes(term));
+    });
+    const reason = candidateIndex >= 0 ? "A candidate source line was found, but no bounded, line-anchored segment established the declared requirement." : terms2.length > 0 ? "None of the requirement's discriminating search terms occurred in the selected source range." : "The requirement had no discriminating file-local search term after normalization.";
+    const recovery = candidateIndex >= 0 ? `file_read({"path":${JSON.stringify(input.path)},"offset":${input.sourceLineOffset + Math.max(1, candidateIndex - 3)},"limit":12,"mode":"full"})` : `grep_search({"pattern":${JSON.stringify(terms2[0] ?? requirement.question.slice(0, 80))},"path":${JSON.stringify(input.path)}})`;
+    return {
+      id: requirement.id,
+      question: requirement.question,
+      status: "unresolved",
+      anchors: [],
+      reason,
+      recovery
+    };
+  });
+}
+function renderBranchRequirementCoverage(evidence) {
+  return [
+    `[REQUIREMENT COVERAGE]`,
+    ...evidence.requirementCoverage.map((coverage) => coverage.status === "satisfied" ? `- ${coverage.id} satisfied anchors=${coverage.anchors.map((anchor) => `L${anchor.startLine}-L${anchor.endLine}`).join(",")}` : `- ${coverage.id} unresolved reason=${coverage.reason ?? "no bounded anchor returned"} recovery=${coverage.recovery ?? "narrow the source query"}`),
+    `branch_contract=${evidence.contractComplete ? "complete" : "partial"}`
+  ];
+}
 async function extractEvidence(opts) {
   const { path: path16, content, fileVersion, backend } = opts;
   const sourceLineOffset = Math.max(0, Math.floor(opts.sourceLineOffset ?? 0));
@@ -585051,12 +585194,19 @@ async function extractEvidence(opts) {
     brief,
     maxSegments
   });
-  const requiredIds = requirements.filter((requirement) => requirement.required).map((requirement) => requirement.id);
+  const requiredIds = requirements.map((requirement) => requirement.id);
   const deterministicSatisfied = new Set(deterministic.satisfied);
   const deterministicComplete = deterministic.segments.length > 0 && requiredIds.every((id2) => deterministicSatisfied.has(id2));
   if (deterministicComplete && !backend) {
     const claim = renderSegments(deterministic.segments, maxInjectedChars);
     const legacySpan = legacyContiguousSpan(deterministic.segments);
+    const requirementCoverage2 = buildRequirementCoverage({
+      requirements,
+      segments: deterministic.segments,
+      lines,
+      path: path16,
+      sourceLineOffset
+    });
     return {
       path: path16,
       query,
@@ -585068,8 +585218,10 @@ async function extractEvidence(opts) {
       exploredLines: lines.length,
       injectedChars: claim.length,
       segments: deterministic.segments,
-      satisfiedRequirementIds: [...deterministicSatisfied],
-      unresolvedRequirementIds: requirements.map((requirement) => requirement.id).filter((id2) => !deterministicSatisfied.has(id2)),
+      satisfiedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "satisfied").map((coverage) => coverage.id),
+      unresolvedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "unresolved").map((coverage) => coverage.id),
+      requirementCoverage: requirementCoverage2,
+      contractComplete: requirementCoverage2.every((coverage) => coverage.status === "satisfied"),
       provenance: {
         contentHash: contentHash2,
         byteCount,
@@ -585177,14 +585329,16 @@ async function extractEvidence(opts) {
   if (semanticSegment && !segments.some((segment) => rangesOverlap(segment.anchor, semanticSegment.anchor))) {
     segments.push(semanticSegment);
   }
-  const satisfied = new Set(deterministic.satisfied);
-  for (const segment of segments) {
-    for (const id2 of segment.requirementIds)
-      satisfied.add(id2);
-  }
   if (segments.length > 0) {
     const claim = renderSegments(segments, maxInjectedChars);
     const legacySpan = legacyContiguousSpan(segments);
+    const requirementCoverage2 = buildRequirementCoverage({
+      requirements,
+      segments,
+      lines,
+      path: path16,
+      sourceLineOffset
+    });
     return {
       path: path16,
       query,
@@ -585196,8 +585350,10 @@ async function extractEvidence(opts) {
       exploredLines: Math.min(lines.length, parsedWindows.reduce((sum2, window2) => sum2 + (window2.end - window2.start + 1), 0) || lines.length),
       injectedChars: claim.length,
       segments,
-      satisfiedRequirementIds: [...satisfied],
-      unresolvedRequirementIds: requirements.map((requirement) => requirement.id).filter((id2) => !satisfied.has(id2)),
+      satisfiedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "satisfied").map((coverage) => coverage.id),
+      unresolvedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "unresolved").map((coverage) => coverage.id),
+      requirementCoverage: requirementCoverage2,
+      contractComplete: requirementCoverage2.every((coverage) => coverage.status === "satisfied"),
       provenance: {
         contentHash: contentHash2,
         byteCount,
@@ -585234,6 +585390,13 @@ async function extractEvidence(opts) {
       matches: 1
     });
   }
+  const requirementCoverage = buildRequirementCoverage({
+    requirements,
+    segments: [structuralSegment],
+    lines,
+    path: path16,
+    sourceLineOffset
+  });
   return {
     path: path16,
     query,
@@ -585246,7 +585409,9 @@ async function extractEvidence(opts) {
     injectedChars: Math.min(structuralClaim.length, maxInjectedChars),
     segments: [structuralSegment],
     satisfiedRequirementIds: [],
-    unresolvedRequirementIds: requirements.map((requirement) => requirement.id),
+    unresolvedRequirementIds: requirementCoverage.map((coverage) => coverage.id),
+    requirementCoverage,
+    contractComplete: false,
     provenance: {
       contentHash: contentHash2,
       byteCount,
@@ -585668,16 +585833,32 @@ var init_contextEngine = __esm({
         let evidenceDropped = 0;
         if (allowCompaction && budget && before > budget) {
           const overhead = estimateTokens3([...evidence, ...hints, ...contract]);
-          const retained = [];
-          let used = overhead;
-          for (const message2 of [...input.messages].reverse()) {
+          const lastUserIndex = input.messages.map((message2, index) => message2.role === "user" ? index : -1).filter((index) => index >= 0).at(-1);
+          const lastTransactionStart = Math.max(0, input.messages.length - 3);
+          const protectedIndexes = /* @__PURE__ */ new Set();
+          for (let index = lastTransactionStart; index < input.messages.length; index++) {
+            protectedIndexes.add(index);
+          }
+          if (lastUserIndex !== void 0)
+            protectedIndexes.add(lastUserIndex);
+          input.messages.forEach((message2, index) => {
+            if (message2.role === "system" && /\[(?:ACTIVE USER STEERING|CONTROLLER STATE v1|RECENT ACTION GROUND TRUTH|EXPLORATION ADMISSION BLOCK|COMPILE ERROR FIX LOOP BLOCKED|BRANCH-EXTRACT)/.test(message2.content)) {
+              protectedIndexes.add(index);
+            }
+          });
+          const retainedIndexes = new Set(protectedIndexes);
+          let used = overhead + [...protectedIndexes].reduce((sum2, index) => sum2 + estimateTokens3([input.messages[index]]), 0);
+          for (let index = input.messages.length - 1; index >= 0; index--) {
+            if (retainedIndexes.has(index))
+              continue;
+            const message2 = input.messages[index];
             const cost = estimateTokens3([message2]);
             if (used + cost > budget)
               continue;
-            retained.push(message2);
+            retainedIndexes.add(index);
             used += cost;
           }
-          compactedMessages = retained.reverse();
+          compactedMessages = input.messages.filter((_message, index) => retainedIndexes.has(index));
           compacted = compactedMessages.length !== input.messages.length;
           evidenceDropped = 0;
         }
@@ -587812,6 +587993,13 @@ function stripShellQuotedSegments(command) {
   }
   return out;
 }
+function isCompilerLikeVerifierCommand(command) {
+  const normalized = command.toLowerCase();
+  return /\b(?:pio|platformio|tsc|gcc|g\+\+|clang\+\+?|clang|cargo\s+(?:build|check)|go\s+(?:build|test)|javac|gradle|mvn|msbuild|dotnet\s+build|python(?:3)?\s+-m\s+(?:py_compile|compileall)|mypy|pyright)\b/.test(normalized);
+}
+function isRecoveryCriticalRuntimeOutcome(content) {
+  return /\[(?:COMPILE ERROR FIX LOOP BLOCKED|EXPLORATION ADMISSION BLOCK|PARENT(?:\s+[^\]]*)?\s+BLOCK(?:ED)?|FOCUS SUPERVISOR BLOCK|STEERING RECONCILIATION REQUIRED|STALE EDIT LOOP BLOCKED|FULL FILE WRITE LOOP BLOCKED)\b/i.test(content);
+}
 function parsePersistentMemoryMode(value2) {
   if (value2 === "full" || value2 === "deferred" || value2 === "off")
     return value2;
@@ -589221,6 +589409,9 @@ var init_agenticRunner = __esm({
       /** Auto-delegation: directive ids we've already auto-delegated for (once each). */
       _autoDelegatedDirectiveIds = /* @__PURE__ */ new Set();
       _compileFixLoop = null;
+      /** A verifier produced a concrete card; the next parent tool slot is an
+       *  orchestrator-owned isolated fixer, not another model-chosen broad edit. */
+      _pendingCompileDelegationCardId = null;
       _declaredVerifierCommand = null;
       _lastDeclaredVerifierOutput = null;
       _lastDeclaredVerifierDiagnostics = [];
@@ -591177,9 +591368,18 @@ Your hypotheses MUST address this specific error, not generic causes.
         }
       }
       _prepareModelFacingMessages(messages2, _turn) {
+        const tier = this.options.modelTier ?? "large";
+        const contextWindow = this.options.contextWindowSize ?? 0;
+        const contextBudgetChars = contextWindow > 0 ? Math.max(48e3, Math.min(384e3, Math.floor(contextWindow * 4 * 0.7))) : tier === "large" ? 16e4 : tier === "medium" ? 96e3 : 48e3;
+        const systemMessageChars = Math.max(8e3, Math.min(32e3, Math.floor(contextBudgetChars * 0.16)));
+        const toolMessageChars = Math.max(6e3, Math.min(64e3, Math.floor(contextBudgetChars * 0.25)));
         const prepared = prepareModelFacingApiMessages({
           messages: messages2,
-          currentGoal: this._taskState.originalGoal || this._taskState.goal || this._taskState.currentStep || this._taskState.nextAction || ""
+          currentGoal: this._taskState.originalGoal || this._taskState.goal || this._taskState.currentStep || this._taskState.nextAction || "",
+          contextBudgetChars,
+          systemMessageChars,
+          toolMessageChars,
+          admittedFileReadChars: Math.min(128e3, contextBudgetChars)
         });
         const withCurrentUserIntent = sanitizeHistoryThink(prepared);
         if (!withCurrentUserIntent.some((message2) => message2.role === "user")) {
@@ -591459,6 +591659,8 @@ ${currentIntent.trim().slice(0, 6e3)}`,
        *               from main-loop fires in the status emit (e.g. "bf-cycle 2").
        */
       _runReg61Check(turn, toolCallLog, messages2, cycleLabel) {
+        if ((this.options.modelTier ?? "large") !== "small")
+          return;
         const REG61_TURN_FLOOR = 4;
         const REG61_MIN_READS = 3;
         const REG61_NO_WRITE_GAP = 5;
@@ -591579,7 +591781,7 @@ Pick the SMALLEST concrete deliverable from the spec — typically the project e
         const _editPath = _editPaths.find((p2) => !this._decomp2MainContextFiles.has(p2)) ?? "";
         if (!_editPath)
           return null;
-        const _hardBlock = process.env["OMNIUS_ENABLE_DECOMP2_HARD_BLOCK"] === "1";
+        const _hardBlock = this._enforcesStrictActionBoundaries() && process.env["OMNIUS_ENABLE_DECOMP2_HARD_BLOCK"] === "1";
         this.emit({
           type: "status",
           content: _hardBlock ? `DECOMP-2 NEW-FILE BLOCK — rejected ${tc.name}('${_editPath}') at turn ${turn}; gate stays active until sub_agent succeeds` : `DECOMP-2 NEW-FILE WARN — ${tc.name}('${_editPath}') at turn ${turn} would have been blocked (${this._decomp2MainContextFiles.size} files edited without sub_agent); proceeding anyway`,
@@ -592078,7 +592280,7 @@ Pick the SMALLEST concrete deliverable from the spec — typically the project e
           return this._declaredVerifierCommand;
         }
         const diagnostics = parseCompilerDiagnostics(output);
-        if (diagnostics.length > 0 && !commandIsPureReadOnlyPipeline(trimmed)) {
+        if (diagnostics.length > 0 && isCompilerLikeVerifierCommand(trimmed) && !commandIsPureReadOnlyPipeline(trimmed)) {
           const latched = stripVerifierFallbackSuffix(trimmed);
           return latched || trimmed;
         }
@@ -592187,7 +592389,7 @@ ${extras.join("\n")}`;
           verifierResultSignature,
           verifierStasisCount,
           verifierStasisBlocked: verifierStasisCount >= 3 && !(input.success && diagnostics.length === 0),
-          prerequisiteRecoverySignature: void 0
+          prerequisiteRecoverySignatures: []
         };
         if (this._compileFixLoop.verifierStasisBlocked) {
           this.emit({
@@ -592227,6 +592429,9 @@ ${extras.join("\n")}`;
           this._compileFixLoop.cards = this._compileFixLoop.cards.map((card) => card.id === top.id ? top : card);
           this._mirrorCompileFixCardAssigned(top, input.turn);
         }
+        if (this._enforcesStrictActionBoundaries() && !this.options.subAgent && this.tools.has("sub_agent")) {
+          this._pendingCompileDelegationCardId = top.id;
+        }
         this.emit({
           type: "status",
           content: `compile_error_fix_loop_started: verifierCommand=${verifierCommand}; cardId=${top.id}; diagnosticFingerprint=${top.diagnostic.fingerprint}; afterDiagnosticCount=${diagnostics.length}`,
@@ -592437,7 +592642,7 @@ ${extras.join("\n")}`;
         state.lastMutationTurn = turn;
         state.verifierStasisCount = 0;
         state.verifierStasisBlocked = false;
-        state.prerequisiteRecoverySignature = void 0;
+        state.prerequisiteRecoverySignatures = [];
         this._focusSupervisor?.markCompletionBlocked({
           turn,
           reason: "A source mutation invalidated the declared verifier; verifier evidence now owns the active focus.",
@@ -592480,12 +592685,31 @@ ${extras.join("\n")}`;
           return owned.some((ownedPath) => this._pathsOverlapForVerifier(pathValue, ownedPath)) || artifacts.some((artifactPath) => this._pathsOverlapForVerifier(pathValue, artifactPath)) || /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|java|kt|c|cc|cpp|cxx|h|hpp|hh|hxx|ino)$/i.test(pathValue);
         });
       }
+      /**
+       * Very small local models benefit from forced next-action rails when they
+       * become lost. Medium and large models need room to investigate, compare
+       * hypotheses, and choose a verifier appropriate to new evidence. Safety,
+       * steering, and evidence-before-mutation remain universal; only controller
+       * action coercion is tier-gated here. An operator can override for a model
+       * whose observed behavior differs from its nominal tier.
+       */
+      _enforcesStrictActionBoundaries() {
+        const tier = this.options.modelTier ?? "large";
+        if (tier !== "small")
+          return false;
+        const override = process.env["OMNIUS_STRICT_ACTION_BOUNDARIES"];
+        if (override === "0")
+          return false;
+        return true;
+      }
       /** Consecutive preflight blocks before the gate yields instead of blocking. */
       static COMPILE_FIX_GATE_YIELD_AFTER = 3;
       _compileFixLoopPreflightBlock(toolName, args, turn, shellLikelyMutatesFilesystem) {
         const state = this._compileFixLoop;
         if (!state?.active)
           return null;
+        if (!this._enforcesStrictActionBoundaries())
+          return null;
         const action = compileFixLoopNextRequiredAction(state);
         const verifierLocked = action === "run_declared_verifier" || state.verifierStasisBlocked === true;
         if (!verifierLocked)
@@ -592503,7 +592727,7 @@ ${extras.join("\n")}`;
               `lastVerifierRunTurn=${state.lastVerifierRunTurn}`,
               `stasisRounds=${state.verifierStasisCount ?? 0}`,
               `blockedTool=${toolName} consecutiveBlocks=${streak}`,
-              `Allowed next actions: the declared verifier; one narrow prerequisite read of an owned file; or a scoped source fix that changes verifier inputs.`
+              `Allowed next actions: the declared verifier; up to three distinct bounded prerequisite reads/searches; or a scoped source fix that changes verifier inputs.`
             ].join("\n")
           };
         };
@@ -592527,16 +592751,17 @@ ${extras.join("\n")}`;
           "file_explore"
         ]);
         if (readLike.has(toolName)) {
-          const target = String(args["path"] ?? args["file"] ?? args["file_path"] ?? "");
-          const owned = state.cards.flatMap((card) => card.ownedFiles);
-          const scoped = target.length > 0 && owned.some((path16) => this._pathsOverlapForVerifier(target, path16));
           const signature = `${toolName}:${this._buildExactArgsKey(args)}`;
-          if (scoped && state.prerequisiteRecoverySignature !== signature) {
-            state.prerequisiteRecoverySignature = signature;
+          const prior = state.prerequisiteRecoverySignatures ?? [];
+          const target = String(args["path"] ?? args["file"] ?? args["file_path"] ?? "").trim();
+          const pattern = String(args["pattern"] ?? "").trim();
+          const explicitBoundedRecovery = toolName === "file_read" && target.length > 0 || toolName === "grep_search" && (target.length > 0 || pattern.length > 0) || toolName === "find_files" && pattern.length > 0 || toolName === "list_directory" && target.length > 0 || toolName === "file_explore" && target.length > 0;
+          if (explicitBoundedRecovery && !prior.includes(signature) && prior.length < 3) {
+            state.prerequisiteRecoverySignatures = [...prior, signature];
             state.preflightBlockStreak = 0;
             return null;
           }
-          return blocked(scoped ? "The one prerequisite-recovery read has already been used; act on its evidence instead of reading again." : "Prerequisite recovery must be a narrow read of a compile-card owned file.");
+          return blocked(prior.includes(signature) ? "This exact prerequisite recovery was already admitted; use its evidence or change the path/range/pattern." : prior.length >= 3 ? "The bounded prerequisite-recovery budget is exhausted; synthesize the three fresh observations before another read." : "Prerequisite recovery must name a file path or search pattern; broad unscoped exploration is not admitted while verifier evidence is locked.");
         }
         if (this._isProjectEditTool(toolName)) {
           const targetPaths = this._extractToolTargetPaths(toolName, args);
@@ -596372,6 +596597,9 @@ ${blob}
       }
       microcompact(messages2, recentToolResults) {
         const tier = this.options.modelTier ?? "large";
+        if (tier !== "small" && process.env["OMNIUS_ENABLE_AGGRESSIVE_MICROCOMPACTION"] !== "1") {
+          return;
+        }
         let keepResults = tier === "small" ? 6 : tier === "medium" ? 10 : 20;
         const idleGapMs = Date.now() - this._lastAssistantTimestamp;
         const IDLE_THRESHOLD_MS = 5 * 6e4;
@@ -598026,6 +598254,17 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
         const value2 = String(args["mode"] ?? "auto").trim().toLowerCase();
         return value2 === "full" || value2 === "extract" ? value2 : "auto";
       }
+      /**
+       * A small canonical source file is more useful as a complete first-class
+       * read than as a one-line branch extract.  In particular, a stale/noisy
+       * resident-context estimate must not turn a 36-line file into a curated
+       * wrapper merely because computed headroom is momentarily zero.  This cap is
+       * deliberately far below ordinary tool output limits and is still subject to
+       * normal model-facing budgeting on the next request.
+       */
+      _mustInlineSmallFileRead(selectedBytes, selectedLines) {
+        return selectedBytes <= 8e3 && selectedLines <= 200;
+      }
       /**
        * Route using the same sanitized, model-facing request shape that will be
        * sent after the tool turn—not the unreduced historical transcript. Using
@@ -598135,7 +598374,8 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
         });
         const requestedMode = this._fileReadMode(input.args);
         const explicitExtraction = requestedMode === "extract";
-        if (!decision2.branch && !explicitExtraction) {
+        const inlineSmallRead = this._mustInlineSmallFileRead(selectedBytes, selectedLines.length);
+        if ((!decision2.branch || inlineSmallRead) && !explicitExtraction) {
           input.batchBudget.inlineTokens += decision2.projectedReadTokens;
           input.batchBudget.reservations.set(input.callId, decision2.projectedReadTokens);
           return null;
@@ -598195,7 +598435,9 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
               sourceRange: {
                 startLine: startIndex + 1,
                 endLine: startIndex + Math.max(1, selectedLines.length)
-              }
+              },
+              contractComplete: cached2.contractComplete,
+              unresolvedRequirementIds: cached2.unresolvedRequirementIds
             }
           };
         }
@@ -598211,6 +598453,7 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
           backend: extractionBackend,
           timeoutMs: 3e4
         });
+        const requirementCoverage = renderBranchRequirementCoverage(ev);
         const verboseOutput = [
           `[BRANCH-EXTRACT v2] path=${rawPath}`,
           `[VERIFIED_RUNTIME_FILE_READ] request_id=${branchRequestId} task_epoch=${this._taskEpoch}`,
@@ -598224,10 +598467,9 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
           `Stop conditions: ${(branchBrief.discoveryContract?.completionCriteria ?? []).join(" | ")}`,
           `[CURATED SEGMENTS]`,
           ev.claim,
-          `satisfied=${ev.satisfiedRequirementIds.join(",") || "none"}`,
-          `unresolved=${ev.unresolvedRequirementIds.join(",") || "none"}`,
+          ...requirementCoverage,
           `provenance=content:${ev.provenance.contentHash} searches:${ev.provenance.searchRounds.length} ranges:${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`,
-          `Contract: use these anchors as evidence. If a required item remains unresolved, issue one narrow grep_search or bounded file_read for that item. Do not use shell/cat to bypass context routing; file_read(mode="full") remains available when live admission permits it.`
+          ev.contractComplete ? `Contract: every declared requirement has anchored evidence. Use these anchors as evidence; file_read(mode="full") remains available when live admission permits it.` : `Contract: this extraction is PARTIAL. Do not treat it as sufficient for a mutation that depends on an unresolved requirement; execute that requirement's listed bounded recovery. Do not use shell/cat to bypass context routing.`
         ].join("\n");
         const outputBudgetChars = Math.max(800, decision2.fractionLimitTokens * 4);
         let output = verboseOutput;
@@ -598241,9 +598483,9 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
             `[CURATED SEGMENTS]`
           ].join("\n");
           const suffix = [
-            `unresolved=${ev.unresolvedRequirementIds.join(",") || "none"}`,
+            ...requirementCoverage,
             `anchors=${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`,
-            `Do not whole-read again; act on these anchors or issue one narrower search.`
+            ev.contractComplete ? `All declared requirements are grounded; act on these anchors.` : `PARTIAL contract: execute the listed bounded recovery before relying on an unresolved requirement.`
           ].join("\n");
           const claimBudget = Math.max(120, outputBudgetChars - prefix.length - suffix.length - 2);
           output = `${prefix}
@@ -598257,13 +598499,19 @@ ${suffix}`.slice(0, outputBudgetChars);
           sourceBytes: stat9.size,
           createdAt: Date.now(),
           taskEpoch: this._taskEpoch,
-          requestId: branchRequestId
+          requestId: branchRequestId,
+          contractComplete: ev.contractComplete,
+          unresolvedRequirementIds: ev.unresolvedRequirementIds,
+          unresolvedRecoveries: ev.requirementCoverage.filter((coverage) => coverage.status === "unresolved").map((coverage) => `${coverage.id}: ${coverage.recovery ?? "narrow recovery required"}`)
         });
         this._branchEvidenceByPath.set(canonicalPath, {
           output,
           contentHash: fullHash,
           mtimeMs: stat9.mtimeMs,
-          taskEpoch: this._taskEpoch
+          taskEpoch: this._taskEpoch,
+          contractComplete: ev.contractComplete,
+          unresolvedRequirementIds: ev.unresolvedRequirementIds,
+          unresolvedRecoveries: ev.requirementCoverage.filter((coverage) => coverage.status === "unresolved").map((coverage) => `${coverage.id}: ${coverage.recovery ?? "narrow recovery required"}`)
         });
         if (explicitExtraction) {
           const evicted = this._evictInlineReadArtifacts(input.messages, canonicalPath, fullHash, "verified_branch_extract");
@@ -598306,7 +598554,9 @@ ${suffix}`.slice(0, outputBudgetChars);
             sourceRange: {
               startLine: startIndex + 1,
               endLine: startIndex + Math.max(1, selectedLines.length)
-            }
+            },
+            contractComplete: ev.contractComplete,
+            unresolvedRequirementIds: ev.unresolvedRequirementIds
           }
         };
       }
@@ -598337,7 +598587,8 @@ ${suffix}`.slice(0, outputBudgetChars);
           safeContextTokens: this.contextLimits().compactionThreshold
         });
         const explicitExtraction = this._fileReadMode(input.args) === "extract";
-        if (!decision2.branch && !explicitExtraction) {
+        const inlineSmallRead = this._mustInlineSmallFileRead(Buffer.byteLength(input.result.output, "utf8"), lines.length);
+        if ((!decision2.branch || inlineSmallRead) && !explicitExtraction) {
           if (reservedForThisCall === 0) {
             input.batchBudget.inlineTokens += decision2.projectedReadTokens;
             input.batchBudget.reservations.set(input.callId, decision2.projectedReadTokens);
@@ -598366,6 +598617,7 @@ ${suffix}`.slice(0, outputBudgetChars);
           backend: process.env["OMNIUS_DISABLE_BRANCH_EXTRACT"] === "1" ? void 0 : this._auxInferenceBackend(),
           timeoutMs: 3e4
         });
+        const requirementCoverage = renderBranchRequirementCoverage(ev);
         const output = [
           `[BRANCH-EXTRACT v2] path=${path16}`,
           `[VERIFIED_RUNTIME_FILE_READ] request_id=branch:${this._taskEpoch}:${input.callId} task_epoch=${this._taskEpoch}`,
@@ -598373,8 +598625,9 @@ ${suffix}`.slice(0, outputBudgetChars);
           `[DISCOVERY CONTRACT] ${brief.request}`,
           `[CURATED SEGMENTS]`,
           ev.claim,
-          `unresolved=${ev.unresolvedRequirementIds.join(",") || "none"}`,
-          `provenance=content:${ev.provenance.contentHash} ranges:${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`
+          ...requirementCoverage,
+          `provenance=content:${ev.provenance.contentHash} ranges:${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`,
+          ev.contractComplete ? "All declared requirements are grounded." : "PARTIAL contract: execute the listed bounded recovery before relying on an unresolved requirement."
         ].join("\n").slice(0, Math.max(800, decision2.fractionLimitTokens * 4));
         return {
           ...input.result,
@@ -598397,7 +598650,9 @@ ${suffix}`.slice(0, outputBudgetChars);
             sourceRange: {
               startLine: 1,
               endLine: Math.max(1, lines.length)
-            }
+            },
+            contractComplete: ev.contractComplete,
+            unresolvedRequirementIds: ev.unresolvedRequirementIds
           }
         };
       }
@@ -599082,6 +599337,7 @@ Respond with the assessment and take the selected evidence-backed action.`;
         this._completionLedger = null;
         this._focusTerminalLedgerRecorded = false;
         this._compileFixLoop = null;
+        this._pendingCompileDelegationCardId = null;
         this._declaredVerifierCommand = null;
         this._lastDeclaredVerifierOutput = null;
         this._lastDeclaredVerifierDiagnostics = [];
@@ -599841,21 +600097,7 @@ ${dynamicProjectContext}`
           find_files: 10,
           grep_search: 12,
           camera_capture: 3
-        } : loopTier === "medium" ? {
-          web_search: 10,
-          web_fetch: 8,
-          list_directory: 18,
-          find_files: 14,
-          grep_search: 18,
-          camera_capture: 4
-        } : {
-          web_search: 20,
-          web_fetch: 15,
-          list_directory: 30,
-          find_files: 20,
-          grep_search: 30,
-          camera_capture: 5
-        };
+        } : {};
         for (const [tool, budget] of Object.entries(toolBudgets)) {
           toolCallBudget.set(tool, budget);
         }
@@ -601365,7 +601607,7 @@ Respond with EXACTLY this structure before your next tool call:
             }
           }
           const turnTier = this.options.modelTier ?? "large";
-          if (turn === 0 && !this.options.disableTodoPlanningNudges && this._todoWriteAvailable() && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && !this.options.disableTodoPlanningNudges && this._todoWriteAvailable() && turnTier === "small") {
             const goal = this._taskState.goal || "";
             const substantiveGoal = goal.replace(/\b(?:then\s+)?call\s+task_complete\b[^.?!;]*/gi, "").replace(/\b(?:observe|report|summarize|finish|complete)\b[^.?!;]*/gi, "");
             const wordCount2 = substantiveGoal.split(/\s+/).filter(Boolean).length;
@@ -601428,7 +601670,7 @@ Now call file_write with YOUR skeleton for this task.`
               });
             }
           }
-          if (turn === 0 && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && turnTier === "small") {
             const taskGoal = this._taskState.goal || "";
             const taskLower = taskGoal.toLowerCase();
             const taskTokens = new Set(taskLower.split(/\s+/).filter((w) => w.length > 2));
@@ -601471,7 +601713,7 @@ Now call file_write with YOUR skeleton for this task.`
 ${top.map((t2) => `- ${t2.name}: ${t2.desc}`).join("\n")}`);
             }
           }
-          if (turn === 0 && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && turnTier === "small") {
             const taskGoal = (this._taskState.goal || "").toLowerCase();
             const isSimpleTask = taskGoal.length < 150 && (taskGoal.match(/\band\b|\bthen\b/gi) || []).length < 3;
             const isSearchTask = /\bfind\b|\bsearch\b|\bwhere\b|\bwhich file\b|\bcontain/i.test(taskGoal);
@@ -601496,7 +601738,7 @@ ${top.map((t2) => `- ${t2.name}: ${t2.desc}`).join("\n")}`);
 ${hints.join("\n")}`);
             }
           }
-          if (turn === 0 && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && turnTier === "small") {
             const taskGoal = this._taskState.goal || "";
             const hasMultiplePremises = (taskGoal.match(/\band\b|\bthen\b|\bif\b|\bbecause\b|\bsince\b|\bgiven\b/gi) || []).length >= 3;
             const hasConditionalLogic = (taskGoal.match(/\bif\b.*\bthen\b|\bwhen\b.*\bshould\b|\bassuming\b/gi) || []).length >= 1;
@@ -601568,7 +601810,7 @@ If you're stuck, try a completely different approach. Do NOT repeat what failed
             compacted = messages2;
           }
           this._retireStaleEvidenceInPlace(messages2, turn);
-          if (turn > 0 && this._toolEvents.length > 0) {
+          if (turn > 0 && this._toolEvents.length > 0 && ((this.options.modelTier ?? "large") === "small" || process.env["OMNIUS_ENABLE_LEGACY_CONTEXT_ENGINE_TRIM"] === "1")) {
             try {
               const _limits = this.contextLimits();
               const ceCompactInput = {
@@ -602100,7 +602342,7 @@ ${memoryLines.join("\n")}`
             "shell"
           ]);
           const selfConsistencyK = this.options.selfConsistencyK ?? 0;
-          const shouldVote = selfConsistencyK >= 2 && this._selfConsistencyVotes < 2 && (this.options.modelTier === "small" || this.options.modelTier === "medium") && firstToolCall && HIGH_STAKE_TOOLS.has(firstToolCall.name) && turn <= 3;
+          const shouldVote = selfConsistencyK >= 2 && this._selfConsistencyVotes < 2 && this.options.modelTier === "small" && firstToolCall && HIGH_STAKE_TOOLS.has(firstToolCall.name) && turn <= 3;
           if (shouldVote && firstToolCall) {
             try {
               const alternativeA = {
@@ -602157,7 +602399,7 @@ ${memoryLines.join("\n")}`
           const isEmptyResponse = !isThinkOnly && (!msg.content || !msg.content.trim()) && (!msg.toolCalls || msg.toolCalls.length === 0);
           if (isEmptyResponse) {
             consecutiveEmptyResponses++;
-            if (consecutiveEmptyResponses >= 2) {
+            if (consecutiveEmptyResponses >= 2 && (this.options.modelTier ?? "large") === "small") {
               this.emit({
                 type: "status",
                 content: `${consecutiveEmptyResponses} consecutive empty responses — injecting recovery nudge`,
@@ -602178,6 +602420,18 @@ ${memoryLines.join("\n")}`
             continue;
           }
           consecutiveEmptyResponses = 0;
+          const pendingCompileDelegation = this._steeringToolGate(turn) ? null : this._takePendingCompileDelegation(messages2, turn);
+          if (pendingCompileDelegation) {
+            const supersededCalls = msg.toolCalls?.length ?? 0;
+            msg.toolCalls = [pendingCompileDelegation];
+            msg.content = null;
+            this.emit({
+              type: "status",
+              content: `[FAN-OUT] automatic compile-fixer dispatch preempted ${supersededCalls} model-selected call${supersededCalls === 1 ? "" : "s"}; the parent will resume only after the isolated fold-back.`,
+              turn,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+          }
           if (msg.toolCalls && msg.toolCalls.length > 0) {
             consecutiveTextOnly = 0;
             consecutiveThinkOnly = 0;
@@ -602190,15 +602444,10 @@ ${memoryLines.join("\n")}`
               });
               continue;
             }
-            const _RESPONSE_CALL_CAPS = {
-              small: 2,
-              medium: 4,
-              large: 6
-            };
-            const _responseCap = _RESPONSE_CALL_CAPS[this.options.modelTier ?? "large"] ?? 6;
+            const _responseCap = (this.options.modelTier ?? "large") === "small" ? 2 : Number.POSITIVE_INFINITY;
             const _originalCallCount = msg.toolCalls.length;
             let _capDeferredCount = 0;
-            if (msg.toolCalls.length > _responseCap) {
+            if (Number.isFinite(_responseCap) && msg.toolCalls.length > _responseCap) {
               _capDeferredCount = msg.toolCalls.length - _responseCap;
               msg.toolCalls = msg.toolCalls.slice(0, _responseCap);
               this.emit({
@@ -602236,7 +602485,7 @@ ${memoryLines.join("\n")}`
                 role: "system",
                 content: [
                   `[BATCH CAPPED]`,
-                  `You emitted ${_originalCallCount} tool calls in one response. The orchestrator caps responses at ${_responseCap} for the ${this.options.modelTier ?? "large"} model tier.`,
+                  `You emitted ${_originalCallCount} tool calls in one response. The small-model safety profile caps responses at ${_responseCap}.`,
                   `The first ${_responseCap} executed; the remaining ${_capDeferredCount} were DROPPED.`,
                   ``,
                   `Best practice for this model tier: emit at most ${_responseCap} tool calls per turn.`,
@@ -602366,7 +602615,8 @@ Corrective action: try a different approach first: read relevant files, adjust a
                 timestampMs: Date.now()
               });
               const _toolLogTailIdx = toolCallLog.length - 1;
-              if (tc.name !== "task_complete") {
+              const isDeclaredCompileVerifier = tc.name === "shell" && Boolean(this._compileFixLoop?.active) && commandReliablySatisfiesVerifyCommand(String((tc.arguments ?? {})["command"] ?? (tc.arguments ?? {})["cmd"] ?? "").trim(), this._compileFixLoop?.verifierCommand ?? "");
+              if (this._enforcesStrictActionBoundaries() && tc.name !== "task_complete" && !isDeclaredCompileVerifier) {
                 const doomHistory = toolCallLog.slice(-5).map((e2) => ({ tool: e2.name, args: e2.argsKey }));
                 doomHistory.push({
                   tool: tc.name,
@@ -602501,7 +602751,7 @@ Corrective action: try a different approach first: read relevant files, adjust a
                   detail: `attempted_tool=${tc.name}`
                 });
               }
-              if (this._reg61PerpetualGateActive && !focusDirectiveForEditPressure && !REG61_BYPASS_TOOLS.has(tc.name) && process.env["OMNIUS_DISABLE_REG61_COERCE"] !== "1") {
+              if (this._enforcesStrictActionBoundaries() && this._reg61PerpetualGateActive && !focusDirectiveForEditPressure && !REG61_BYPASS_TOOLS.has(tc.name) && process.env["OMNIUS_DISABLE_REG61_COERCE"] !== "1") {
                 const _dbgLoop = this._detectDebugLoop([
                   ...toolCallLog,
                   { name: tc.name, argsKey }
@@ -602596,7 +602846,7 @@ Corrective action: try a different approach first: read relevant files, adjust a
               const toolFingerprint = this._resolveReadCoverageFingerprint(tc.name, tc.arguments ?? {}, exactToolFingerprint);
               const repeatedMemoryWriteNoop = tc.name === "memory_write" && noopedMemoryWriteFingerprints.has(toolFingerprint);
               const repeatedProjectWriteNoop = this._isProjectEditTool(tc.name) && noopedProjectWriteFingerprints.has(toolFingerprint);
-              if (repeatedMemoryWriteNoop || repeatedProjectWriteNoop) {
+              if (this._enforcesStrictActionBoundaries() && (repeatedMemoryWriteNoop || repeatedProjectWriteNoop)) {
                 this.emit({
                   type: "tool_call",
                   toolName: tc.name,
@@ -602628,7 +602878,7 @@ Read the current file if needed, make a different concrete edit, or move to veri
                   systemGuidance: repeatNoopMsg
                 };
               }
-              const staleEditBlock = this.staleEditPreflightBlock(tc.name, tc.arguments ?? {});
+              const staleEditBlock = this._enforcesStrictActionBoundaries() ? this.staleEditPreflightBlock(tc.name, tc.arguments ?? {}) : null;
               if (staleEditBlock) {
                 const focusDecision2 = this._focusSupervisor?.evaluateProposedCall({
                   turn,
@@ -602693,7 +602943,7 @@ Read the current file if needed, make a different concrete edit, or move to veri
                   systemGuidance: staleBlockOutput
                 };
               }
-              const staleRewriteBlock = this.staleEditOverwritePreflightBlock(tc.name, tc.arguments ?? {}, turn);
+              const staleRewriteBlock = this._enforcesStrictActionBoundaries() ? this.staleEditOverwritePreflightBlock(tc.name, tc.arguments ?? {}, turn) : null;
               if (staleRewriteBlock) {
                 const focusDecision2 = this._focusSupervisor?.evaluateProposedCall({
                   turn,
@@ -602992,7 +603242,7 @@ Read the current file if needed, make a different concrete edit, or move to veri
                   });
                 }
                 const _repeatGateMax = this._resolveRepeatGateMax();
-                const isFailedShellRepeat = tc.name === "shell" && typeof _existingFp?.result === "string" && _existingFp.result.includes("status: failure") && (_existingFp.mutationEpoch ?? fileMutationEpoch) === fileMutationEpoch && !this._compileFixLoopRequiresLiveShell(String(tc.arguments?.["command"] ?? tc.arguments?.["cmd"] ?? "")) && !shellLikelyMutatesFilesystem;
+                const isFailedShellRepeat = this._enforcesStrictActionBoundaries() && tc.name === "shell" && typeof _existingFp?.result === "string" && _existingFp.result.includes("status: failure") && (_existingFp.mutationEpoch ?? fileMutationEpoch) === fileMutationEpoch && !this._compileFixLoopRequiresLiveShell(String(tc.arguments?.["command"] ?? tc.arguments?.["cmd"] ?? "")) && !shellLikelyMutatesFilesystem;
                 const repeatGateEligible = isReadLike || tc.name === "memory_write" || isFailedShellRepeat;
                 const suppressSuccessfulShellCacheGuidance = tc.name === "shell" && !isFailedShellRepeat;
                 if (suppressSuccessfulShellCacheGuidance)
@@ -603119,6 +603369,15 @@ ${cachedResult}`,
                   timestamp: (/* @__PURE__ */ new Date()).toISOString()
                 });
               }
+              if (!repeatShortCircuit && this.options.subAgent && tc.name === "workboard_complete_card" && String((tc.arguments ?? {})["outcome"] ?? "completed") !== "request_changes") {
+                repeatShortCircuit = {
+                  success: false,
+                  output: "",
+                  error: "[PARENT_COMPLETION_AUTHORITY] A sub-agent may attach action/verifier evidence or request changes, but only its parent/coordinator may complete or verify a workboard card.",
+                  runtimeAuthored: true,
+                  noop: true
+                };
+              }
               const focusCachedEntry = recentToolResults.get(toolFingerprint);
               const focusDuplicateHits = criticDecision.decision === "guidance" ? dedupHitCount.get(toolFingerprint) ?? criticDecision.hitNumber : dedupHitCount.get(toolFingerprint) ?? 0;
               const usesAuthoritativeTargetEvidence = this._toolCallUsesFreshFileReadEvidence(tc.name, tc.arguments ?? {});
@@ -603138,8 +603397,9 @@ ${cachedResult}`,
                 taskEpoch: this._taskEpoch
               });
               if (focusDecision && focusDecision.kind !== "pass") {
+                const advisoryOnlyForLargeModel = focusDecision.kind === "block_tool_call" && !this._enforcesStrictActionBoundaries() && tc.name !== "task_complete";
                 this._emitFocusSupervisorEvent({
-                  decision: focusDecision.kind,
+                  decision: advisoryOnlyForLargeModel ? "inject_guidance" : focusDecision.kind,
                   state: focusDecision.state,
                   directiveId: focusDecision.directive.id,
                   reason: focusDecision.directive.reason,
@@ -603147,22 +603407,26 @@ ${cachedResult}`,
                   blockedTool: focusDecision.kind === "block_tool_call" ? tc.name : void 0,
                   turn
                 });
-                this._maybeMarkFocusTerminalIncomplete({
-                  decision: focusDecision,
-                  blockedTool: focusDecision.kind === "block_tool_call" ? tc.name : void 0,
-                  turn
-                });
-                if (focusDecision.kind === "block_tool_call" && this._maybeAutoDelegate(tc, focusDecision.directive, messages2, turn)) {
-                } else if (focusDecision.kind === "inject_guidance") {
-                  void focusDecision.message;
-                } else if (!repeatShortCircuit) {
-                  repeatShortCircuit = {
-                    success: focusDecision.success,
-                    output: focusDecision.message,
-                    error: focusDecision.success ? void 0 : focusDecision.message,
-                    runtimeAuthored: true,
-                    noop: true
-                  };
+                if (advisoryOnlyForLargeModel) {
+                  pushSoftInjection("system", `[FOCUS ADVISORY — large-model freedom] ${focusDecision.message}`);
+                } else {
+                  this._maybeMarkFocusTerminalIncomplete({
+                    decision: focusDecision,
+                    blockedTool: focusDecision.kind === "block_tool_call" ? tc.name : void 0,
+                    turn
+                  });
+                  if (focusDecision.kind === "block_tool_call" && this._maybeAutoDelegate(tc, focusDecision.directive, messages2, turn)) {
+                  } else if (focusDecision.kind === "inject_guidance") {
+                    void focusDecision.message;
+                  } else if (!repeatShortCircuit) {
+                    repeatShortCircuit = {
+                      success: focusDecision.success,
+                      output: focusDecision.message,
+                      error: focusDecision.success ? void 0 : focusDecision.message,
+                      runtimeAuthored: true,
+                      noop: true
+                    };
+                  }
                 }
               }
               const compileLoopPreflight = !repeatShortCircuit ? this._compileFixLoopPreflightBlock(tc.name, tc.arguments ?? {}, turn, shellLikelyMutatesFilesystem) : null;
@@ -603228,7 +603492,9 @@ ${cachedResult}`,
                   tc.arguments = this._normalizeToolArgsForExecution(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
                   tc.arguments = this._autoDeriveDelegationMutationScope(resolvedTool?.name ?? tc.name, tc.arguments ?? {}, turn);
                   tc.arguments = await this._enrichDelegationToolArgs(resolvedTool?.name ?? tc.name, tc.arguments ?? {}, messages2, turn);
-                  validationError = this._validateFileWriteOverwriteContract(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
+                  validationError = this._partialBranchExplorationMutationBlock(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
+                  if (!validationError)
+                    validationError = this._validateFileWriteOverwriteContract(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
                 }
                 if (!validationError) {
                   validationError = this._validateFreshExpectedHashesForEdit(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
@@ -604643,7 +604909,7 @@ ${bookkeepingGuidance}`;
 
 ${bookkeepingGuidance}` : bookkeepingGuidance;
               }
-              if (!result.success && (this.options.modelTier === "small" || this.options.modelTier === "medium")) {
+              if (!result.success && this.options.modelTier === "small") {
                 const recovery = this.buildRecoveryGuidance(tc.name, result.error ?? "", tc.arguments);
                 if (recovery)
                   output += "\n\n" + recovery;
@@ -605094,7 +605360,7 @@ ${delegateDir}` : delegateDir;
                   sameToolFailStreak = 1;
                 }
                 const consecutiveSameTool = Math.max(sameToolFailStreak, this._taskState.failedApproaches.slice(-2).filter((f2) => f2.startsWith(`${tc.name}(`)).length);
-                if (sameToolFailStreak >= 5 && (this.options.modelTier === "small" || this.options.modelTier === "medium")) {
+                if (sameToolFailStreak >= 5 && this.options.modelTier === "small") {
                   this.enqueueRuntimeGuidance(`[BRANCH — evaluate alternatives before acting]
 Tool "${tc.name}" has failed ${sameToolFailStreak} times. STOP and enumerate:
 Option A: refresh the exact evidence or correct the current tool arguments
@@ -605104,7 +605370,7 @@ Pick the BEST option and explain why, then execute it. Do NOT retry ${tc.name} w
                   sameToolFailStreak = 0;
                   sameToolFailName = null;
                 }
-                if (consecutiveSameTool >= 2 && (this.options.modelTier === "small" || this.options.modelTier === "medium")) {
+                if (consecutiveSameTool >= 2 && this.options.modelTier === "small") {
                   this.enqueueRuntimeGuidance(`[PIVOT REQUIRED] You have failed ${consecutiveSameTool + 1} times in a row with ${tc.name}. Your current approach is not working. You MUST try something fundamentally different:
 - If file_edit/file_patch keeps failing: re-read the implicated current range, then correct the exact text/range/hash or inspect git diff
 - If shell keeps failing: try a different command or check prerequisites
@@ -605151,7 +605417,7 @@ Do NOT retry ${tc.name} with similar arguments and do NOT use file_write to esca
                   } catch {
                   }
                 }
-                if (isModify && (turnTier === "small" || turnTier === "medium")) {
+                if (isModify && turnTier === "small") {
                   const modCount = this._taskState.modifiedFiles.size;
                   if (modCount >= 2 && modCount % 2 === 0) {
                     this.enqueueRuntimeGuidance(`[Test reminder] You've modified ${modCount} files. Run relevant tests NOW to verify: shell(command="npm test") or the project's test command. Fix any failures before continuing.`);
@@ -607943,7 +608209,7 @@ ${marker}` : marker);
         });
         if (active) {
           const tier = this.options.modelTier ?? "large";
-          if (tier !== "small" && tier !== "medium")
+          if (tier !== "small")
             return null;
           return [
             `[EDIT REPAIR LOCK] A recent narrow edit to ${active.path} failed because the model-visible target diverged from disk (${active.errorKind}; latest_file_hash=${active.latestFileHash || "unknown"}).`,
@@ -607989,6 +608255,38 @@ ${marker}` : marker);
         }
         return null;
       }
+      /**
+       * A branch result that still has unanswered discovery requirements is an
+       * exploration state, not mutation authority.  Without this admission gate a
+       * large model could receive one attractive anchor, invent the rest, and make
+       * a broad edit before the branch's own listed recovery was attempted.
+       */
+      _partialBranchExplorationMutationBlock(toolName, args) {
+        const delegatedMutation = (toolName === "sub_agent" || toolName === "agent") && (args["mutation_role"] === "mutation_worker" || args["subagent_type"] === "fixer");
+        if (!this._isProjectEditTool(toolName) && !delegatedMutation)
+          return null;
+        const targetPaths = this._isProjectEditTool(toolName) ? this._extractToolTargetPaths(toolName, args) : [
+          ...Array.isArray(args["owned_files"]) ? args["owned_files"] : [],
+          ...Array.isArray(args["relevant_files"]) ? args["relevant_files"] : []
+        ].filter((value2) => typeof value2 === "string");
+        for (const target of targetPaths) {
+          const normalizedTarget = this._normalizeEvidencePath(target);
+          const partial = [...this._branchEvidenceByPath.entries()].find(([path17, node2]) => node2.taskEpoch === this._taskEpoch && !node2.contractComplete && this._pathsOverlapForVerifier(normalizedTarget, path17));
+          if (!partial)
+            continue;
+          const [path16, node] = partial;
+          return [
+            "[EXPLORATION ADMISSION BLOCK]",
+            `${toolName} was not executed: ${path16} has a fresh but partial branch discovery contract.`,
+            `unresolved=${node.unresolvedRequirementIds.join(",") || "unknown"}`,
+            "The model must not make a creative/source mutation while a required file-local fact is unresolved.",
+            "Required bounded recovery:",
+            ...node.unresolvedRecoveries.length > 0 ? node.unresolvedRecoveries.map((recovery) => `- ${recovery}`) : ["- issue one narrow file_read or grep_search for the unresolved requirement"],
+            "After a complete anchored branch contract is recorded, retry the scoped mutation with fresh hash evidence."
+          ].join("\n");
+        }
+        return null;
+      }
       _validateFreshExpectedHashesForEdit(toolName, args) {
         if (process.env["OMNIUS_ALLOW_UNVERIFIED_OLD_STRING_EDIT"] === "1") {
           return null;
@@ -608806,7 +609104,50 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
        *
        * Returns true if it rewrote `tc` (the caller must let it EXECUTE, not noop it).
        */
+      _takePendingCompileDelegation(messages2, turn) {
+        const cardId = this._pendingCompileDelegationCardId;
+        if (!cardId || !this._enforcesStrictActionBoundaries() || this.options.subAgent || !this.tools.has("sub_agent")) {
+          return null;
+        }
+        const state = this._compileFixLoop;
+        const card = state?.cards.find((candidate) => candidate.id === cardId && (candidate.status === "open" || candidate.status === "assigned" || candidate.status === "needs_changes"));
+        if (!card) {
+          this._pendingCompileDelegationCardId = null;
+          return null;
+        }
+        this._pendingCompileDelegationCardId = null;
+        card.status = "assigned";
+        card.assignedTurn = turn;
+        this._mirrorCompileFixCardAssigned(card, turn);
+        const contract = buildMutationWorkerContractForCard(card);
+        const prompt = buildCuratedFixerPrompt({
+          card,
+          sourceExcerpt: this._compileFixSourceExcerpt(card.diagnostic.file, card.diagnostic.line),
+          declarationExcerpt: card.declarationFiles.length > 0 ? this._compileFixSourceExcerpt(card.declarationFiles[0], void 0) : void 0
+        });
+        const parentTok = estimateMessagesTokens2(messages2);
+        this.emit({
+          type: "status",
+          content: `[FAN-OUT] compile verifier produced ${card.id}; orchestrator is launching one isolated fixer (main ~${parentTok.toLocaleString()} tok -> curated worker frame: ${card.ownedFiles.join(", ") || "diagnostic target"}).`,
+          turn,
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        return {
+          id: `auto-compile-${card.id}-${turn}`,
+          name: "sub_agent",
+          arguments: {
+            subagent_type: "fixer",
+            description: `fix ${card.id}`,
+            prompt,
+            relevant_files: card.ownedFiles,
+            exit_criterion: "diagnostic fingerprint disappeared after verifier rerun",
+            ...contract
+          }
+        };
+      }
       _maybeAutoDelegate(tc, directive, messages2, turn) {
+        if (!this._enforcesStrictActionBoundaries())
+          return false;
         if (directive.requiredNextAction !== "delegate_isolated_fix")
           return false;
         if (tc.name === "sub_agent" || tc.name === "agent")
@@ -608904,11 +609245,20 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
       _retireStaleEvidenceInPlace(messages2, currentTurn) {
         if (process.env["OMNIUS_DISABLE_EVIDENCE_RETIREMENT"] === "1")
           return;
+        const tier = this.options.modelTier ?? "large";
+        const forceRetirement = process.env["OMNIUS_FORCE_EVIDENCE_RETIREMENT"] === "1";
+        const residentTokens = estimateMessagesTokens2(messages2);
+        const pressureThreshold = Math.floor(this.contextLimits().compactionThreshold * 0.9);
+        if (tier !== "small" && !forceRetirement && residentTokens < pressureThreshold) {
+          return;
+        }
         const keepRecent = Math.max(0, Number(process.env["OMNIUS_EVIDENCE_KEEP_TURNS"] ?? 2));
         const minChars = Math.max(512, Number(process.env["OMNIUS_EVIDENCE_MIN_CHARS"] ?? 2e3));
         const staleBefore = currentTurn - keepRecent;
         if (staleBefore <= 0)
           return;
+        const liveToolCallIds = new Set(this._recentToolOutcomes.slice(-4).map((outcome) => outcome.toolCallId).filter((id2) => Boolean(id2)));
+        const unresolvedBranchPaths = [...this._branchEvidenceByPath.entries()].filter(([, node]) => node.taskEpoch === this._taskEpoch && !node.contractComplete).map(([path16]) => this._normalizeEvidencePath(path16)).filter(Boolean);
         let turnCount = 0;
         let retired = 0;
         let reclaimed = 0;
@@ -608922,9 +609272,20 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
           const content = typeof msg.content === "string" ? msg.content : "";
           if (!content)
             continue;
+          if (msg.role === "tool" && liveToolCallIds.has(msg.tool_call_id ?? "")) {
+            continue;
+          }
           if (content.startsWith("[RETIRED EVIDENCE") || content.startsWith("[Todo context archived") || content.startsWith("[Tool result cleared")) {
             continue;
           }
+          if (isRecoveryCriticalRuntimeOutcome(content))
+            continue;
+          if (unresolvedBranchPaths.some((path16) => content.includes(path16)))
+            continue;
+          const fileContextPath = /\[FILE CONTEXT\s*\|\s*([^|\n]+)/.exec(content)?.[1]?.trim();
+          if (fileContextPath && !this._evidenceLedger.hasFresh(this._normalizeEvidencePath(fileContextPath))) {
+            continue;
+          }
           const rm4 = { role: msg.role, content };
           if (!isRetirableEvidence(rm4, minChars))
             continue;
@@ -609463,6 +609824,23 @@ Describe what you see and integrate this into your current approach.` : "[User s
         if (!force && estimatedTokens < limits.compactionThreshold) {
           return messages2;
         }
+        if (!force) {
+          const partialBranchActive = [...this._branchEvidenceByPath.values()].some((node) => node.taskEpoch === this._taskEpoch && !node.contractComplete);
+          const decision2 = decideCompaction({
+            pressureRatio: estimatedTokens / Math.max(1, limits.compactionThreshold),
+            lastSubtaskResolved: this._recentToolOutcomes.at(-1)?.succeeded === true,
+            midDerivation: partialBranchActive,
+            convergenceStalled: this._compileFixLoop?.verifierStasisBlocked === true
+          });
+          if (!decision2.compact) {
+            this.emit({
+              type: "status",
+              content: `[semantic-compaction] held: ${decision2.reason}`,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+            return messages2;
+          }
+        }
         if (force && messages2.length < 5)
           return messages2;
         let keepRecent = limits.keepRecent;
@@ -609643,7 +610021,7 @@ Describe what you see and integrate this into your current approach.` : "[User s
           timestamp: (/* @__PURE__ */ new Date()).toISOString()
         });
         const tier = this.options.modelTier ?? "large";
-        if (tier === "small" || tier === "medium") {
+        if (tier === "small") {
           this._taskState.nextAction = this.inferNextAction(recent);
         }
         const manifestText = (() => {
@@ -609745,14 +610123,14 @@ ${postCompactRestore.join("\n")}`);
         const goalReminder = this._taskState.goal ? `
 
 **YOUR ACTIVE TASK:** ${this._taskState.goal}` : "";
-        const nextActionDirective = (tier === "small" || tier === "medium") && this._taskState.nextAction ? `
+        const nextActionDirective = tier === "small" && this._taskState.nextAction ? `
 
 **DO THIS NEXT:** ${this._taskState.nextAction}` : "";
         const toolCallingReminder = tier === "small" ? `
 
 **IMPORTANT:** You MUST invoke tools through the function calling interface. Do NOT write tool names as text, markdown, or code blocks — that does nothing. Call tools using the structured tool/function API.` : "";
         const readFilesList = Array.from(this._fileRegistry.entries()).filter(([, e2]) => e2.accessCount > 0).map(([p2]) => p2).slice(0, 10);
-        const fileFreshnessReminder = (tier === "small" || tier === "medium") && readFilesList.length > 0 ? `
+        const fileFreshnessReminder = tier === "small" && readFilesList.length > 0 ? `
 
 **PREVIOUSLY OBSERVED FILES:** ${readFilesList.join(", ")}. Treat restored or summarized text as orientation, not guaranteed current bytes. Before editing, make a narrow live read when the body is elided/truncated, the file may have changed, a hash or edit anchor is stale, or exact current text is otherwise required. Avoid only redundant reads when the latest complete authoritative content is still visible and unchanged.` : "";
         const ephemeralSkillPackReminder = this._ephemeralSkillPackContext ? `
@@ -609990,6 +610368,23 @@ ${content.slice(0, 8e3)}${truncated ? "\n[truncated recovery; use a narrow live
             });
           }
         }
+        const pinnedSymbols = [
+          ...[...this._branchEvidenceByPath.entries()].filter(([, node]) => node.taskEpoch === this._taskEpoch && !node.contractComplete).map(([path16]) => this._normalizeEvidencePath(path16)).filter(Boolean),
+          ...this._recentToolOutcomes.slice(-2).map((outcome) => outcome.path).filter((path16) => Boolean(path16))
+        ];
+        const activeSteering = this._renderActiveSteeringSlot();
+        const validation = validateCompaction(result.map((message2) => typeof message2.content === "string" ? message2.content : JSON.stringify(message2.content)).join("\n"), {
+          symbols: pinnedSymbols,
+          ...activeSteering ? { openBugs: ["[ACTIVE USER STEERING]"] } : {}
+        });
+        if (!validation.valid) {
+          this.emit({
+            type: "status",
+            content: `[semantic-compaction] rollback: ${validation.reason}`,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
+          return messages2;
+        }
         if (result.length < 2)
           return messages2;
         return result;
@@ -610222,7 +610617,7 @@ ${trimmedNew}`;
         ];
         const tier = this.options.modelTier ?? "large";
         const directive = this._focusSupervisor?.snapshot().directive;
-        if (directive && tier !== "large") {
+        if (directive && tier === "small") {
           const expiresTurn = Math.max(turn + 1, directive.createdTurn + 6);
           lines.push(`active_directive=next_action:${directive.requiredNextAction}; evidence:${directive.reason.replace(/\s+/g, " ").slice(0, 260)}; expires_turn:${expiresTurn}; exit_when:action_evidence_or_verified_mutation_or_user_redirect`);
         }
@@ -610234,7 +610629,7 @@ ${trimmedNew}`;
           const resultState = outcome ? outcome.succeeded ? "tool_result=success" : "tool_result=failure" : "tool_result=not_recorded";
           const hash = evidence?.contentHash ?? "unknown";
           const bytes = fact && typeof fact.size === "number" ? String(fact.size) : "unknown";
-          const nextAction = verifierRequired ? "run_declared_verifier" : outcome?.succeeded ? "verify_or_complete_distinct_leaf" : "inspect_external_blocker_or_change_scope";
+          const nextAction = tier === "small" ? verifierRequired ? "run_declared_verifier" : outcome?.succeeded ? "verify_or_complete_distinct_leaf" : "inspect_external_blocker_or_change_scope" : "model_select_from_current_evidence";
           const doNot = action === "created" ? "do_not_create_again" : action === "modified" ? "do_not_full_rewrite_without_fresh_read" : "do_not_recreate_without_authoritative_target";
           lines.push(`${action} path=${entry.path} hash=${hash} bytes=${bytes} ${resultState} stateVersion=${outcome?.stateVersion ?? this._adversaryStateVersion} turn=${outcome?.turn ?? turn} next_valid_action=${nextAction} ${doNot}`);
         }
@@ -612241,8 +612636,8 @@ ${description}`
               });
             }
           }
-          const delay4 = isGpuSlotUnavailable ? baseDelayMs : Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
-          const effectiveDelay = delay4;
+          const delay5 = isGpuSlotUnavailable ? baseDelayMs : Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
+          const effectiveDelay = delay5;
           const attemptLabel = maxRetries === Infinity ? `${attempt}` : `${attempt}/${maxRetries}`;
           if (isGpuSlotUnavailable) {
             this.emit({
@@ -624294,8 +624689,8 @@ function normalizeLiveCameraRotation(value2) {
     if (n2 === 0 || n2 === 90 || n2 === 180 || n2 === 270) return n2;
   }
   const raw = String(value2).trim().toLowerCase();
-  const numeric = Number(raw.replace(/deg(?:rees)?$/i, ""));
-  if (Number.isFinite(numeric)) return normalizeLiveCameraRotation(numeric);
+  const numeric2 = Number(raw.replace(/deg(?:rees)?$/i, ""));
+  if (Number.isFinite(numeric2)) return normalizeLiveCameraRotation(numeric2);
   if (["none", "off", "upright", "normal", "0"].includes(raw)) return 0;
   if (["cw", "clockwise", "right", "rotate-cw", "rotate_cw", "90"].includes(raw)) return 90;
   if (["180", "upside-down", "upside_down", "flip", "inverted"].includes(raw)) return 180;
@@ -627783,8 +628178,8 @@ function finiteRecord(value2) {
   return result;
 }
 function sampleTime(value2) {
-  const numeric = finiteNumber(value2);
-  if (numeric !== null) return numeric < 1e11 ? numeric * 1e3 : numeric;
+  const numeric2 = finiteNumber(value2);
+  if (numeric2 !== null) return numeric2 < 1e11 ? numeric2 * 1e3 : numeric2;
   if (typeof value2 !== "string") return null;
   const parsed = Date.parse(value2);
   return Number.isFinite(parsed) ? parsed : null;
@@ -643845,6 +644240,134 @@ var init_profiles = __esm({
   }
 });
 
+// packages/cli/src/tui/ollama-gpu-policy.ts
+import { execFile as execFile9 } from "node:child_process";
+import { promisify as promisify6 } from "node:util";
+function numeric(value2) {
+  const parsed = Number.parseFloat((value2 ?? "").trim());
+  return Number.isFinite(parsed) ? parsed : null;
+}
+function parseNvidiaGpuCsv(stdout) {
+  const result = [];
+  for (const rawLine of stdout.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+    const [rawIndex, rawUuid, rawName, rawMemory, rawCapability] = line.split(",").map((value2) => value2.trim());
+    const index = numeric(rawIndex);
+    const memoryTotalMiB = numeric(rawMemory);
+    const computeCapability = numeric(rawCapability);
+    const uuid = rawUuid ?? "";
+    if (index === null || memoryTotalMiB === null || computeCapability === null || !uuid || !CUDA_IDENTIFIER.test(uuid)) {
+      continue;
+    }
+    result.push({
+      index,
+      uuid,
+      name: rawName ?? "NVIDIA GPU",
+      memoryTotalMiB,
+      computeCapability
+    });
+  }
+  return result;
+}
+function satisfiesOllamaGpuMinimum(gpu) {
+  return gpu.memoryTotalMiB >= MIN_OLLAMA_GPU_VRAM_MIB && gpu.computeCapability >= MIN_OLLAMA_GPU_COMPUTE_CAPABILITY;
+}
+function isA100ClassAccelerator(name10) {
+  return /\b(?:A100|H100|H200|B100|B200|GB200)\b/i.test(name10);
+}
+function describeGpu(gpu) {
+  return `${gpu.name} (${gpu.uuid}; ${Math.round(gpu.memoryTotalMiB / 1024)} GiB; compute ${gpu.computeCapability})`;
+}
+function selectApprovedOllamaGpu(gpus, configuredUuid = process.env[OMNIUS_OLLAMA_GPU_UUID_ENV]) {
+  const requestedUuid = configuredUuid?.trim();
+  if (requestedUuid) {
+    const requested = gpus.find((gpu) => gpu.uuid === requestedUuid);
+    if (!requested) {
+      return {
+        ok: false,
+        reason: `${OMNIUS_OLLAMA_GPU_UUID_ENV}=${requestedUuid} was not found in the current NVIDIA inventory. Refusing to launch Ollama on an inferred device.`
+      };
+    }
+    if (!satisfiesOllamaGpuMinimum(requested)) {
+      return {
+        ok: false,
+        reason: `Configured GPU ${describeGpu(requested)} does not meet the required ${MIN_OLLAMA_GPU_VRAM_MIB / 1024} GiB VRAM and compute capability ${MIN_OLLAMA_GPU_COMPUTE_CAPABILITY}. Refusing to launch Ollama.`
+      };
+    }
+    return {
+      ok: true,
+      approval: {
+        gpu: requested,
+        source: "configured_uuid",
+        cudaVisibleDevices: requested.uuid
+      }
+    };
+  }
+  const automatic = gpus.filter(
+    (gpu) => satisfiesOllamaGpuMinimum(gpu) && isA100ClassAccelerator(gpu.name)
+  ).sort(
+    (left, right) => right.memoryTotalMiB - left.memoryTotalMiB || right.computeCapability - left.computeCapability || left.index - right.index
+  )[0];
+  if (automatic) {
+    return {
+      ok: true,
+      approval: {
+        gpu: automatic,
+        source: "a100_class_auto",
+        cudaVisibleDevices: automatic.uuid
+      }
+    };
+  }
+  const discovered = gpus.length ? gpus.map(describeGpu).join("; ") : "no queryable NVIDIA GPUs";
+  return {
+    ok: false,
+    reason: `No approved GPU is available (${discovered}). Set ${OMNIUS_OLLAMA_GPU_UUID_ENV} to the UUID of a designated GPU meeting ${MIN_OLLAMA_GPU_VRAM_MIB / 1024} GiB VRAM and compute capability ${MIN_OLLAMA_GPU_COMPUTE_CAPABILITY}, or make an A100-class accelerator visible.`
+  };
+}
+async function defaultNvidiaSmiRunner(command, args) {
+  const { stdout } = await execFileAsync5(command, args, {
+    timeout: 5e3,
+    windowsHide: true
+  });
+  return { stdout };
+}
+async function resolveApprovedOllamaGpu(options2 = {}) {
+  try {
+    const runner = options2.runner ?? defaultNvidiaSmiRunner;
+    const { stdout } = await runner("nvidia-smi", [
+      "--query-gpu=index,uuid,name,memory.total,compute_cap",
+      "--format=csv,noheader,nounits"
+    ]);
+    return selectApprovedOllamaGpu(
+      parseNvidiaGpuCsv(stdout),
+      options2.configuredUuid
+    );
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+      ok: false,
+      reason: `Could not verify NVIDIA GPU placement with nvidia-smi (${detail}). Refusing to launch Ollama.`
+    };
+  }
+}
+function withApprovedOllamaGpu(env2, approval) {
+  return {
+    ...env2,
+    CUDA_VISIBLE_DEVICES: approval.cudaVisibleDevices
+  };
+}
+var execFileAsync5, OMNIUS_OLLAMA_GPU_UUID_ENV, MIN_OLLAMA_GPU_VRAM_MIB, MIN_OLLAMA_GPU_COMPUTE_CAPABILITY, CUDA_IDENTIFIER;
+var init_ollama_gpu_policy = __esm({
+  "packages/cli/src/tui/ollama-gpu-policy.ts"() {
+    execFileAsync5 = promisify6(execFile9);
+    OMNIUS_OLLAMA_GPU_UUID_ENV = "OMNIUS_OLLAMA_GPU_UUID";
+    MIN_OLLAMA_GPU_VRAM_MIB = 16 * 1024;
+    MIN_OLLAMA_GPU_COMPUTE_CAPABILITY = 7;
+    CUDA_IDENTIFIER = /^[A-Za-z0-9._:-]+$/;
+  }
+});
+
 // packages/cli/src/tui/omnius-directory.ts
 var omnius_directory_exports = {};
 __export(omnius_directory_exports, {
@@ -644009,7 +644532,7 @@ function watchForOmniusGitignore(repoRoot) {
 function scheduleOmniusGitignoreRescans(repoRoot) {
   const key = resolve62(repoRoot);
   if (gitignoreRetryTimers.has(key)) return;
-  const timers = [25, 100, 250, 500, 1e3].map((delay4) => {
+  const timers = [25, 100, 250, 500, 1e3].map((delay5) => {
     const timer = setTimeout(() => {
       try {
         ensureOmniusIgnored(repoRoot);
@@ -644021,7 +644544,7 @@ function scheduleOmniusGitignoreRescans(repoRoot) {
         if (idx >= 0) list.splice(idx, 1);
         if (list.length === 0) gitignoreRetryTimers.delete(key);
       }
-    }, delay4);
+    }, delay5);
     timer.unref?.();
     return timer;
   });
@@ -648871,8 +649394,8 @@ var init_project_context = __esm({
 });
 
 // packages/cli/src/tui/disk-monitor.ts
-import { execFile as execFile9 } from "node:child_process";
-import { promisify as promisify6 } from "node:util";
+import { execFile as execFile10 } from "node:child_process";
+import { promisify as promisify7 } from "node:util";
 function unavailableDiskMetrics(path16 = process.cwd()) {
   return {
     path: path16,
@@ -648886,7 +649409,7 @@ function unavailableDiskMetrics(path16 = process.cwd()) {
 async function collectDiskMetrics(path16 = process.cwd()) {
   if (process.platform === "win32") return unavailableDiskMetrics(path16);
   try {
-    const { stdout } = await execFileAsync5("df", ["-Pk", path16], {
+    const { stdout } = await execFileAsync6("df", ["-Pk", path16], {
       encoding: "utf8",
       timeout: 3e3,
       maxBuffer: 128 * 1024
@@ -648916,10 +649439,10 @@ async function collectDiskMetrics(path16 = process.cwd()) {
     return unavailableDiskMetrics(path16);
   }
 }
-var execFileAsync5;
+var execFileAsync6;
 var init_disk_monitor = __esm({
   "packages/cli/src/tui/disk-monitor.ts"() {
-    execFileAsync5 = promisify6(execFile9);
+    execFileAsync6 = promisify7(execFile10);
   }
 });
 
@@ -652628,7 +653151,7 @@ var init_status_bar = __esm({
             const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
             const lineContent = `${prefix}${inputWrap.lines[i2]}`;
             buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-            buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+            buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
             buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
           }
           buf += this.buildEnhanceSegment(
@@ -653893,6 +654416,10 @@ ${CONTENT_BG_SEQ}`);
         );
         return `\x1B[38;2;${r2};${g};${b}m`;
       }
+      /** Keep the rail before the `+` prompt static while stream frames animate. */
+      inputLeftRailSeq() {
+        return BOX_FG;
+      }
       /** Box top border with an optional ┬ carving out the enhance segment. */
       buildInputBoxTop(w) {
         if (!this.enhanceSegEnabled(w)) {
@@ -654406,7 +654933,7 @@ ${CONTENT_BG_SEQ}`);
           const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
           const lineContent = `${prefix}${inputWrap.lines[i2]}`;
           buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-          buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+          buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
           buf += `${PANEL_BG_SEQ}\x1B[K`;
           buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
         }
@@ -654425,7 +654952,7 @@ ${CONTENT_BG_SEQ}`);
             const fg2 = isHighlighted ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
             const slash = isHighlighted ? `\x1B[38;5;245m` : `\x1B[38;5;${TEXT_DIM}m`;
             const marker = isHighlighted ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
+            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
             buf += `${bg} ${marker}${slash}/${fg2}${cmd}`;
             buf += `${PANEL_BG_SEQ}\x1B[K`;
             buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
@@ -654480,7 +655007,7 @@ ${CONTENT_BG_SEQ}`);
           const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
           const lineContent = `${prefix}${inputWrap.lines[i2]}`;
           buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-          buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+          buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
           buf += `${PANEL_BG_SEQ}\x1B[K`;
           buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
         }
@@ -654503,7 +655030,7 @@ ${CONTENT_BG_SEQ}`);
             const isHl = si === this._suggestIndex;
             const fg2 = isHl ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
             const marker = isHl ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
+            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
             buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
           }
           buf += `\x1B[${pos.bufferRow};1H${PANEL_BG_SEQ}\x1B[2K${this.buildInputBoxBottom(w)}`;
@@ -654570,7 +655097,7 @@ ${CONTENT_BG_SEQ}`);
             const row2 = pos.inputStartRow + 1 + i2;
             const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
             const lineContent = `${prefix}${inputWrap.lines[i2]}`;
-            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
+            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
           }
           buf += this.buildEnhanceSegment(
             w,
@@ -654585,7 +655112,7 @@ ${CONTENT_BG_SEQ}`);
               const bg = isHl ? `\x1B[48;5;235m` : PANEL_BG_SEQ;
               const fg2 = isHl ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
               const marker = isHl ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
+              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
               buf += `${bg} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
               buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
             }
@@ -654613,7 +655140,7 @@ ${CONTENT_BG_SEQ}`);
             const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
             const lineContent = `${prefix}${inputWrap.lines[i2]}`;
             buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-            buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+            buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
             buf += `${PANEL_BG_SEQ}\x1B[K`;
             buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
           }
@@ -654630,7 +655157,7 @@ ${CONTENT_BG_SEQ}`);
               const bg = isHl ? `\x1B[48;5;235m` : PANEL_BG_SEQ;
               const fg2 = isHl ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
               const marker = isHl ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
+              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
               buf += `${bg} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
               buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
             }
@@ -656814,7 +657341,7 @@ __export(setup_exports, {
 });
 import * as readline from "node:readline";
 import { spawn as spawn34, exec as exec5 } from "node:child_process";
-import { promisify as promisify7 } from "node:util";
+import { promisify as promisify8 } from "node:util";
 import { existsSync as existsSync132, writeFileSync as writeFileSync68, readFileSync as readFileSync109, appendFileSync as appendFileSync15, mkdirSync as mkdirSync80, chmodSync as chmodSync3 } from "node:fs";
 import { delimiter as pathDelimiter, join as join143 } from "node:path";
 import { freemem as freemem8, homedir as homedir48, platform as platform6, totalmem as totalmem9 } from "node:os";
@@ -657646,6 +658173,30 @@ async function installOllamaWindows() {
     return false;
   }
 }
+async function startApprovedOllamaServe() {
+  const admission = await resolveApprovedOllamaGpu();
+  if (!admission.ok) {
+    process.stdout.write(
+      `  ${c3.red("✖")} Ollama launch blocked by GPU safety policy: ${admission.reason}
+`
+    );
+    return false;
+  }
+  try {
+    const child = spawn34("ollama", ["serve"], {
+      stdio: "ignore",
+      detached: true,
+      env: withApprovedOllamaGpu(process.env, admission.approval)
+    });
+    child.unref();
+    return true;
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    process.stdout.write(`  ${c3.cyan("⚠")} Could not start ollama serve: ${detail}
+`);
+    return false;
+  }
+}
 async function ensureOllamaRunning(backendUrl2, rl) {
   const ollamaInstalled = hasCmd("ollama");
   if (!ollamaInstalled) {
@@ -657674,13 +658225,8 @@ async function ensureOllamaRunning(backendUrl2, rl) {
   }
   process.stdout.write(`  ${c3.cyan("●")} Starting ollama serve...
 `);
-  try {
-    const child = spawn34("ollama", ["serve"], { stdio: "ignore", detached: true });
-    child.unref();
-  } catch {
-    process.stdout.write(`  ${c3.cyan("⚠")} Could not start ollama serve.
-
-`);
+  if (!await startApprovedOllamaServe()) {
+    process.stdout.write("\n");
     return false;
   }
   for (let i2 = 0; i2 < 5; i2++) {
@@ -657698,7 +658244,7 @@ async function ensureOllamaRunning(backendUrl2, rl) {
     } catch {
     }
   }
-  process.stdout.write(`  ${c3.cyan("⚠")} Ollama started but not responding. Try ${c3.bold("ollama serve")} manually.
+  process.stdout.write(`  ${c3.cyan("⚠")} Ollama started on the approved GPU but is not responding yet.
 
 `);
   return false;
@@ -658367,9 +658913,7 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
         process.stdout.write(`
   ${c3.cyan("●")} Ollama is installed but not running. Starting automatically...
 `);
-        try {
-          const child = spawn34("ollama", ["serve"], { stdio: "ignore", detached: true });
-          child.unref();
+        if (await startApprovedOllamaServe()) {
           await new Promise((resolve82) => setTimeout(resolve82, 3e3));
           try {
             models = await fetchOllamaModels(config.backendUrl);
@@ -658381,8 +658925,8 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
 
 `);
           }
-        } catch {
-          process.stdout.write(`  ${c3.cyan("⚠")} Could not start Ollama. Try running ${c3.bold("ollama serve")} manually.
+        } else {
+          process.stdout.write(`  ${c3.cyan("⚠")} Ollama was not started. Configure an approved GPU or a custom endpoint.
 
 `);
         }
@@ -658395,9 +658939,7 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
             process.stdout.write(`
   ${c3.cyan("●")} Starting ollama serve...
 `);
-            try {
-              const child = spawn34("ollama", ["serve"], { stdio: "ignore", detached: true });
-              child.unref();
+            if (await startApprovedOllamaServe()) {
               await new Promise((resolve82) => setTimeout(resolve82, 3e3));
               try {
                 models = await fetchOllamaModels(config.backendUrl);
@@ -658405,12 +658947,12 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
 
 `);
               } catch {
-                process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed but not responding yet. Try ${c3.bold("ollama serve")} manually.
+                process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed but not responding yet.
 
 `);
               }
-            } catch {
-              process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed. Start it with: ${c3.bold("ollama serve")}
+            } else {
+              process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed but was not started without an approved GPU.
 
 `);
             }
@@ -659685,7 +660227,8 @@ var init_setup = __esm({
     init_dist6();
     init_tui_select();
     init_listen();
-    execAsync2 = promisify7(exec5);
+    init_ollama_gpu_policy();
+    execAsync2 = promisify8(exec5);
     OMNIUS_FIRST_RUN_BANNER = [
       " ░▒▓██████▓▒░░▒▓██████████████▓▒░░▒▓███████▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░░▒▓███████▓▒░ ",
       "░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░        ",
@@ -664358,6 +664901,7 @@ __export(daemon_exports, {
   getDaemonStatus: () => getDaemonStatus,
   getLocalCliVersion: () => getLocalCliVersion,
   isDaemonRunning: () => isDaemonRunning,
+  recoverDaemonVersionBoundedly: () => recoverDaemonVersionBoundedly,
   releaseDaemonEndpointClaim: () => releaseDaemonEndpointClaim,
   releaseDaemonEndpointForCurrentProcess: () => releaseDaemonEndpointForCurrentProcess,
   restartDaemon: () => restartDaemon,
@@ -664365,7 +664909,7 @@ __export(daemon_exports, {
   stopDaemon: () => stopDaemon
 });
 import { spawn as spawn35 } from "node:child_process";
-import { existsSync as existsSync140, readFileSync as readFileSync114, writeFileSync as writeFileSync70, mkdirSync as mkdirSync82, unlinkSync as unlinkSync27, openSync as openSync5, closeSync as closeSync5, writeSync as writeSync2, statSync as statSync57 } from "node:fs";
+import { existsSync as existsSync140, readFileSync as readFileSync114, writeFileSync as writeFileSync70, mkdirSync as mkdirSync82, unlinkSync as unlinkSync27, openSync as openSync5, closeSync as closeSync5, writeSync as writeSync2, statSync as statSync57, renameSync as renameSync13 } from "node:fs";
 import { join as join149 } from "node:path";
 import { homedir as homedir51 } from "node:os";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
@@ -664527,22 +665071,165 @@ async function waitForDaemonReady(port, expectedVersion, attempts = 24) {
   }
   return { ok: false, observedVersion };
 }
-async function restartDaemon(port, expectedVersion) {
-  const p2 = port ?? getDaemonPort();
+function delay4(ms) {
+  return new Promise((resolve82) => setTimeout(resolve82, ms));
+}
+async function runUserSystemctl(args, timeout2 = 2e4) {
   try {
     const { spawnSync: spawnSync9 } = await import("node:child_process");
-    const enabled2 = spawnSync9("systemctl", ["--user", "is-enabled", "omnius-daemon.service"], {
+    const result = spawnSync9("systemctl", ["--user", ...args], {
       stdio: "ignore",
-      timeout: 5e3
+      timeout: timeout2
+    });
+    return { available: !result.error, ok: result.status === 0 };
+  } catch {
+    return { available: false, ok: false };
+  }
+}
+async function hasManagedDaemonService() {
+  const enabled2 = await runUserSystemctl(["is-enabled", "omnius-daemon.service"], 5e3);
+  if (enabled2.ok) return true;
+  const active = await runUserSystemctl(["is-active", "omnius-daemon.service"], 5e3);
+  return active.ok;
+}
+function systemdQuote(value2) {
+  return /[\s"\\]/.test(value2) ? `"${value2.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"` : value2;
+}
+async function repairManagedDaemonUnit(port) {
+  if (process.platform !== "linux") return false;
+  const command = await resolveDaemonCommand(process.execPath);
+  if (!command) return false;
+  try {
+    const configHome2 = process.env["XDG_CONFIG_HOME"] || join149(homedir51(), ".config");
+    const unitDir = join149(configHome2, "systemd", "user");
+    const unitPath = join149(unitDir, "omnius-daemon.service");
+    const logDir = join149(OMNIUS_DIR2);
+    mkdirSync82(unitDir, { recursive: true });
+    mkdirSync82(logDir, { recursive: true });
+    const execStart = [command.command, ...command.args].map(systemdQuote).join(" ");
+    const unit = [
+      "[Unit]",
+      `Description=Omnius API Daemon (port ${port})`,
+      "After=network-online.target",
+      "Wants=network-online.target",
+      "",
+      "[Service]",
+      "Type=simple",
+      "Environment=OMNIUS_DAEMON=1",
+      `Environment=OMNIUS_PORT=${port}`,
+      "Environment=NODE_ENV=production",
+      `ExecStart=${execStart}`,
+      "Restart=always",
+      "RestartSec=3",
+      "StartLimitIntervalSec=30",
+      "StartLimitBurst=10",
+      `StandardOutput=append:${join149(logDir, "daemon.log")}`,
+      `StandardError=append:${join149(logDir, "daemon.err.log")}`,
+      "",
+      "[Install]",
+      "WantedBy=default.target",
+      ""
+    ].join("\n");
+    const tmp = `${unitPath}.tmp.${process.pid}.${Date.now()}`;
+    writeFileSync70(tmp, unit, { encoding: "utf8", mode: 384 });
+    renameSync13(tmp, unitPath);
+    return (await runUserSystemctl(["daemon-reload"], 1e4)).ok;
+  } catch {
+    return false;
+  }
+}
+async function portHolderPids(port) {
+  try {
+    const { spawnSync: spawnSync9 } = await import("node:child_process");
+    const lsof = spawnSync9("lsof", ["-ti", `:${port}`], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 3e3
     });
-    if (enabled2.status === 0) {
-      spawnSync9("systemctl", ["--user", "restart", "omnius-daemon.service"], { stdio: "ignore", timeout: 2e4 });
-      return (await waitForDaemonReady(p2, expectedVersion)).ok;
+    let output = lsof.stdout ?? "";
+    if (!output.trim()) {
+      const fuser = spawnSync9("fuser", [`${port}/tcp`], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: 3e3
+      });
+      output = `${fuser.stdout ?? ""}
+${fuser.stderr ?? ""}`;
+      if (lsof.error && fuser.error) return null;
     }
+    return output.split(/[\s\n]+/).map((value2) => parseInt(value2, 10)).filter((pid) => Number.isInteger(pid) && pid > 0 && pid !== process.pid);
+  } catch {
+    return null;
+  }
+}
+function processCommandLine(pid) {
+  try {
+    return readFileSync114(`/proc/${pid}/cmdline`, "utf8").replace(/\0/g, " ");
   } catch {
+    return "";
+  }
+}
+function isOwnedOmniusDaemon(pid, daemonPid) {
+  if (pid === daemonPid) return true;
+  if (listProcessLeases({ includeInactive: false }).some((lease) => lease.pid === pid && lease.ownerKind === "daemon")) {
+    return true;
+  }
+  const command = processCommandLine(pid);
+  return /(?:^|[\\/\s])omnius(?:[\\/\s]|$)|omnius-daemon|[\\/]dist[\\/]index\.js\b|launcher\.cjs\b/i.test(command);
+}
+async function ownedDaemonPids(port) {
+  const daemonPid = getDaemonPid();
+  const candidates = /* @__PURE__ */ new Set();
+  if (daemonPid) candidates.add(daemonPid);
+  const holders = await portHolderPids(port);
+  for (const pid of holders ?? []) candidates.add(pid);
+  return [...candidates].filter((pid) => processIsAlive(pid) && isOwnedOmniusDaemon(pid, daemonPid));
+}
+async function waitForDaemonStopped(port, attempts = DAEMON_GRACEFUL_STOP_ATTEMPTS) {
+  for (let attempt = 0; attempt < attempts; attempt++) {
+    const healthy = await isDaemonRunning(port);
+    const holders = await portHolderPids(port);
+    if (!healthy && (holders === null || holders.length === 0)) return true;
+    await delay4(500);
   }
-  await forceKillDaemon(p2);
-  const pid = await startDaemon();
+  return false;
+}
+async function gracefullyStopOwnedDaemon(port) {
+  const pids = await ownedDaemonPids(port);
+  for (const pid of pids) {
+    try {
+      process.kill(pid, "SIGTERM");
+    } catch {
+    }
+  }
+  if (await waitForDaemonStopped(port)) return true;
+  const survivors = await ownedDaemonPids(port);
+  for (const pid of survivors) {
+    try {
+      process.kill(pid, "SIGKILL");
+    } catch {
+    }
+  }
+  return waitForDaemonStopped(port, 10);
+}
+async function restartDaemon(port, expectedVersion) {
+  const p2 = port ?? getDaemonPort();
+  const managed = await hasManagedDaemonService();
+  if (managed) {
+    const restarted = await runUserSystemctl(["restart", "omnius-daemon.service"]);
+    if (restarted.ok && (await waitForDaemonReady(p2, expectedVersion)).ok) return true;
+    const repaired = await repairManagedDaemonUnit(p2);
+    if (repaired) {
+      await runUserSystemctl(["stop", "omnius-daemon.service"]);
+      await waitForDaemonStopped(p2);
+      const started = await runUserSystemctl(["start", "omnius-daemon.service"]);
+      if (started.ok && (await waitForDaemonReady(p2, expectedVersion)).ok) return true;
+    }
+    await runUserSystemctl(["stop", "omnius-daemon.service"]);
+    if (!await waitForDaemonStopped(p2)) return false;
+  }
+  if (await isDaemonRunning(p2) && !await gracefullyStopOwnedDaemon(p2)) return false;
+  const pid = await startDaemon(p2);
   if (!pid) return false;
   return (await waitForDaemonReady(p2, expectedVersion)).ok;
 }
@@ -664579,6 +665266,8 @@ function commandForEntrypoint(path16, nodeExe) {
 }
 async function resolveDaemonCommand(nodeExe) {
   const candidates = [];
+  const thisDir = dirname47(fileURLToPath20(import.meta.url));
+  candidates.push(join149(thisDir, "index.js"));
   if (process.argv[1]) candidates.push(process.argv[1]);
   try {
     const { spawnSync: spawnSync9 } = await import("node:child_process");
@@ -664590,8 +665279,6 @@ async function resolveDaemonCommand(nodeExe) {
     if (first2) candidates.push(first2);
   } catch {
   }
-  const thisDir = dirname47(fileURLToPath20(import.meta.url));
-  candidates.push(join149(thisDir, "index.js"));
   const seen = /* @__PURE__ */ new Set();
   for (const candidate of candidates) {
     if (!candidate || seen.has(candidate)) continue;
@@ -664601,9 +665288,9 @@ async function resolveDaemonCommand(nodeExe) {
   }
   return null;
 }
-async function startDaemon() {
+async function startDaemon(port = getDaemonPort()) {
   mkdirSync82(OMNIUS_DIR2, { recursive: true });
-  const daemonPort = getDaemonPort();
+  const daemonPort = port;
   const endpointClaim = claimDaemonEndpoint(daemonPort);
   if (!endpointClaim) return null;
   const nodeExe = process.execPath;
@@ -664627,6 +665314,7 @@ async function startDaemon() {
         ...processLeaseEnv(leaseId, ownerId, process.cwd()),
         OMNIUS_DAEMON: "1",
         // signal to serve.ts that it's running as daemon
+        OMNIUS_PORT: String(daemonPort),
         OMNIUS_DAEMON_LOCK_TOKEN: endpointClaim.token,
         OMNIUS_DAEMON_LOCK_PORT: String(daemonPort),
         OMNIUS_PROCESS_OWNER_KIND: "daemon",
@@ -664746,15 +665434,45 @@ async function forceKillDaemon(port) {
   }
   return killed;
 }
+async function recoverDaemonVersionBoundedly(expectedVersion, observe, recover, maxAttempts = DAEMON_VERSION_RECOVERY_ATTEMPTS) {
+  let observedVersion = await observe();
+  if (expectedVersion === "0.0.0" || observedVersion === expectedVersion) {
+    return { ok: true, observedVersion, attempts: 0 };
+  }
+  const boundedAttempts = Math.max(1, Math.min(3, Math.floor(maxAttempts)));
+  for (let attempt = 1; attempt <= boundedAttempts; attempt++) {
+    await recover();
+    observedVersion = await observe();
+    if (observedVersion === expectedVersion) {
+      return { ok: true, observedVersion, attempts: attempt };
+    }
+  }
+  return { ok: false, observedVersion, attempts: boundedAttempts };
+}
 async function ensureDaemonVersion(expectedVersion = getLocalCliVersion(), port = getDaemonPort()) {
-  const finish = (ok3, action, observedVersion) => ({ ok: ok3, action, expectedVersion, observedVersion, port });
+  const finish = (ok3, action, observedVersion, recoveryAttempts = 0) => ({
+    ok: ok3,
+    action,
+    expectedVersion,
+    observedVersion,
+    port,
+    recoveryAttempts
+  });
   if (await isDaemonRunning(port)) {
     if (process.env["OMNIUS_NO_VERSION_GUARD"] !== "1") {
       const running = await getDaemonReportedVersion(port);
       if (expectedVersion !== "0.0.0" && running !== expectedVersion) {
-        const ok3 = await restartDaemon(port, expectedVersion);
-        const observedVersion = await getDaemonReportedVersion(port);
-        return finish(ok3 && observedVersion === expectedVersion, ok3 ? "restarted" : "failed", observedVersion);
+        const recovery = await recoverDaemonVersionBoundedly(
+          expectedVersion,
+          () => getDaemonReportedVersion(port),
+          () => restartDaemon(port, expectedVersion)
+        );
+        return finish(
+          recovery.ok,
+          recovery.ok ? "restarted" : "failed",
+          recovery.observedVersion,
+          recovery.attempts
+        );
       }
     }
     return finish(true, "unchanged", await getDaemonReportedVersion(port));
@@ -664770,7 +665488,7 @@ async function ensureDaemonVersion(expectedVersion = getLocalCliVersion(), port
     } catch {
     }
   }
-  const pid = await startDaemon();
+  const pid = await startDaemon(port);
   if (!pid) {
     for (let i2 = 0; i2 < 20; i2++) {
       await new Promise((r2) => setTimeout(r2, 500));
@@ -664817,7 +665535,7 @@ async function getDaemonStatus() {
   }
   return { running, pid, port, uptime: uptime2, pidFile: PID_FILE2 };
 }
-var OMNIUS_DIR2, PID_FILE2, DEFAULT_PORT2, LOCK_INITIALIZATION_GRACE_MS;
+var OMNIUS_DIR2, PID_FILE2, DEFAULT_PORT2, LOCK_INITIALIZATION_GRACE_MS, DAEMON_VERSION_RECOVERY_ATTEMPTS, DAEMON_GRACEFUL_STOP_ATTEMPTS;
 var init_daemon = __esm({
   "packages/cli/src/daemon.ts"() {
     init_dist5();
@@ -664825,6 +665543,8 @@ var init_daemon = __esm({
     PID_FILE2 = join149(OMNIUS_DIR2, "daemon.pid");
     DEFAULT_PORT2 = 11435;
     LOCK_INITIALIZATION_GRACE_MS = 5e3;
+    DAEMON_VERSION_RECOVERY_ATTEMPTS = 2;
+    DAEMON_GRACEFUL_STOP_ATTEMPTS = 20;
   }
 });
 
@@ -686539,6 +687259,15 @@ async function handleParallel(arg, ctx3) {
     );
     return;
   }
+  const gpuAdmission = await resolveApprovedOllamaGpu();
+  if (!gpuAdmission.ok) {
+    renderError(`Ollama restart blocked by GPU safety policy: ${gpuAdmission.reason}`);
+    return;
+  }
+  const approvedGpuEnv = withApprovedOllamaGpu(
+    process.env,
+    gpuAdmission.approval
+  );
   let isSystemd = false;
   try {
     const out = (await execFileText5(
@@ -686557,6 +687286,7 @@ async function handleParallel(arg, ctx3) {
       const overrideFile = `${overrideDir}/parallel.conf`;
       const overrideContent = `[Service]
 Environment="OLLAMA_NUM_PARALLEL=${n2}"
+Environment="CUDA_VISIBLE_DEVICES=${gpuAdmission.approval.cudaVisibleDevices}"
 `;
       const { runElevatedCommand: runElev } = await Promise.resolve().then(() => (init_setup(), setup_exports));
       await runElev(`mkdir -p ${overrideDir}`, { timeoutMs: 3e4 });
@@ -686592,7 +687322,7 @@ ${escapedContent}EOF'`, {
       renderInfo(
         `Manual steps:
   sudo mkdir -p /etc/systemd/system/ollama.service.d
-  echo '[Service]\\nEnvironment="OLLAMA_NUM_PARALLEL=${n2}"' | sudo tee /etc/systemd/system/ollama.service.d/parallel.conf
+  printf '[Service]\\nEnvironment="OLLAMA_NUM_PARALLEL=${n2}"\\nEnvironment="CUDA_VISIBLE_DEVICES=${gpuAdmission.approval.cudaVisibleDevices}"\\n' | sudo tee /etc/systemd/system/ollama.service.d/parallel.conf
   sudo systemctl daemon-reload && sudo systemctl restart ollama`
       );
     }
@@ -686615,13 +687345,14 @@ ${escapedContent}EOF'`, {
       }
       await new Promise((r2) => setTimeout(r2, 1e3));
       process.env.OLLAMA_NUM_PARALLEL = String(n2);
+      process.env.CUDA_VISIBLE_DEVICES = gpuAdmission.approval.cudaVisibleDevices;
       const { spawn: spawn40 } = await import("node:child_process");
       const leaseId = newProcessLeaseId("model-service");
       const child = spawn40("ollama", ["serve"], {
         stdio: "ignore",
         detached: true,
         env: {
-          ...process.env,
+          ...approvedGpuEnv,
           ...processLeaseEnv(leaseId, "ollama", process.cwd()),
           OMNIUS_PROCESS_OWNER_KIND: "model_service",
           OMNIUS_PROCESS_LIFECYCLE: "model",
@@ -688422,14 +689153,13 @@ async function handleUpdate(subcommand, ctx3) {
     await new Promise((r2) => setTimeout(r2, 1200));
     installOverlay.dismiss();
     renderError(
-      `Updated CLI to ${expectedDaemonVersion}, but the shared daemon still reports ${daemonUpgrade.observedVersion ?? "unavailable"}. The TUI will remain open; retry /update after resolving the daemon service.`
+      `Updated CLI to ${expectedDaemonVersion}, but automatic daemon recovery exhausted ${daemonUpgrade.recoveryAttempts} verified restart round(s) and the shared daemon still reports ${daemonUpgrade.observedVersion ?? "unavailable"}. The TUI remains open. Run /daemon status and inspect ~/.omnius/daemon.err.log; the service may be blocked outside Omnius.`
     );
     return;
   }
   installOverlay.setStatus(
     daemonUpgrade.action === "restarted" ? `Daemon upgraded to ${expectedDaemonVersion}` : `Daemon verified at ${expectedDaemonVersion}`
   );
-  registry2.killAll();
   ctx3.contextSave?.();
   const hadActiveTask = ctx3.savePendingTaskState?.() ?? false;
   const resumeFlag = hadActiveTask ? "1" : "update-only";
@@ -688439,7 +689169,7 @@ async function handleUpdate(subcommand, ctx3) {
   await new Promise((r2) => setTimeout(r2, 200));
   ctx3.contextSave?.();
   if (ctx3.hasActiveTask?.()) ctx3.abortActiveTask?.();
-  ctx3.killEphemeral?.();
+  ctx3.killEphemeral?.({ preserveInfrastructure: true });
   process.exit(120);
 }
 async function switchModel(query, ctx3, local = false) {
@@ -688929,6 +689659,7 @@ var OMNIUS_PINNED_DEPENDENCY_SPECS, NEXUS_DIRECTORY_ORIGIN, NEXUS_SPONSORS_URL,
 var init_commands = __esm({
   "packages/cli/src/tui/commands.ts"() {
     init_model_picker();
+    init_ollama_gpu_policy();
     init_render();
     init_session_summary();
     init_generative_progress();
@@ -689487,7 +690218,7 @@ import {
   readFileSync as readFileSync121,
   readdirSync as readdirSync50,
   writeFileSync as writeFileSync76,
-  renameSync as renameSync14,
+  renameSync as renameSync15,
   mkdirSync as mkdirSync88,
   unlinkSync as unlinkSync31,
   appendFileSync as appendFileSync17
@@ -689511,7 +690242,7 @@ function persistSession(s2) {
     const final2 = sessionPath(s2.id);
     const tmp = `${final2}.tmp.${process.pid}.${Date.now()}`;
     writeFileSync76(tmp, JSON.stringify(s2, null, 2), "utf-8");
-    renameSync14(tmp, final2);
+    renameSync15(tmp, final2);
   } catch {
   }
 }
@@ -689521,7 +690252,7 @@ function persistInFlight(j) {
     const final2 = inFlightPath(j.sessionId);
     const tmp = `${final2}.tmp.${process.pid}.${Date.now()}`;
     writeFileSync76(tmp, JSON.stringify(j, null, 2), "utf-8");
-    renameSync14(tmp, final2);
+    renameSync15(tmp, final2);
   } catch {
   }
 }
@@ -696046,7 +696777,7 @@ import {
 } from "node:fs";
 import { join as join165, basename as basename39 } from "node:path";
 import { exec as exec6 } from "node:child_process";
-import { promisify as promisify8 } from "node:util";
+import { promisify as promisify9 } from "node:util";
 function buildDMNGatherPrompt(recentTaskSummaries, dueReminders, attentionItems, memoryTopics, capabilities, competence, reflectionBuffer, projectOpportunities = []) {
   const competenceReport = competence.length > 0 ? competence.map((c9) => {
     const rate = c9.attempts > 0 ? Math.round(c9.successes / c9.attempts * 100) : 0;
@@ -696170,7 +696901,7 @@ var init_dmn_engine = __esm({
     init_render();
     init_promptLoader3();
     init_tool_adapter();
-    execAsync3 = promisify8(exec6);
+    execAsync3 = promisify9(exec6);
     DMNEngine = class {
       constructor(config, repoRoot) {
         this.config = config;
@@ -709937,8 +710668,8 @@ ${mediaContext}` : ""
         }
       }
       telegramChatIdFromArtifact(artifact) {
-        const numeric = Number(artifact.chatId);
-        return Number.isFinite(numeric) && String(Math.trunc(numeric)) === artifact.chatId ? Math.trunc(numeric) : artifact.chatId;
+        const numeric2 = Number(artifact.chatId);
+        return Number.isFinite(numeric2) && String(Math.trunc(numeric2)) === artifact.chatId ? Math.trunc(numeric2) : artifact.chatId;
       }
       async maybeSendTelegramReflectionFollowup(sessionKey, artifact, reason = "reflection") {
         if (!this.agentConfig)
@@ -723591,7 +724322,7 @@ __export(projects_exports, {
   setCurrentProject: () => setCurrentProject,
   unregisterProject: () => unregisterProject
 });
-import { readFileSync as readFileSync132, writeFileSync as writeFileSync86, mkdirSync as mkdirSync99, existsSync as existsSync161, statSync as statSync63, renameSync as renameSync15 } from "node:fs";
+import { readFileSync as readFileSync132, writeFileSync as writeFileSync86, mkdirSync as mkdirSync99, existsSync as existsSync161, statSync as statSync63, renameSync as renameSync16 } from "node:fs";
 import { homedir as homedir58 } from "node:os";
 import { basename as basename43, join as join171, resolve as resolve74 } from "node:path";
 import { randomUUID as randomUUID19 } from "node:crypto";
@@ -723610,7 +724341,7 @@ function writeAll(file) {
   mkdirSync99(OMNIUS_DIR3, { recursive: true });
   const tmp = `${PROJECTS_FILE}.${randomUUID19().slice(0, 8)}.tmp`;
   writeFileSync86(tmp, JSON.stringify(file, null, 2), "utf8");
-  renameSync15(tmp, PROJECTS_FILE);
+  renameSync16(tmp, PROJECTS_FILE);
 }
 function listProjects() {
   const { projects } = readAll2();
@@ -724585,7 +725316,7 @@ var init_access_policy = __esm({
 
 // packages/cli/src/api/project-preferences.ts
 import { createHash as createHash50 } from "node:crypto";
-import { existsSync as existsSync162, mkdirSync as mkdirSync100, readFileSync as readFileSync133, renameSync as renameSync16, writeFileSync as writeFileSync87, unlinkSync as unlinkSync37 } from "node:fs";
+import { existsSync as existsSync162, mkdirSync as mkdirSync100, readFileSync as readFileSync133, renameSync as renameSync17, writeFileSync as writeFileSync87, unlinkSync as unlinkSync37 } from "node:fs";
 import { homedir as homedir59 } from "node:os";
 import { join as join172, resolve as resolve75 } from "node:path";
 import { randomUUID as randomUUID20 } from "node:crypto";
@@ -724639,7 +725370,7 @@ function writeProjectPreferences(root, partial) {
   const tmp = `${file}.${randomUUID20().slice(0, 8)}.tmp`;
   writeFileSync87(tmp, JSON.stringify(merged, null, 2), "utf8");
   try {
-    renameSync16(tmp, file);
+    renameSync17(tmp, file);
   } catch (err) {
     try {
       writeFileSync87(file, JSON.stringify(merged, null, 2), "utf8");
@@ -725689,7 +726420,7 @@ var init_direct_tool_registry = __esm({
 });
 
 // packages/cli/src/api/external-tool-registry.ts
-import { existsSync as existsSync166, mkdirSync as mkdirSync104, readFileSync as readFileSync135, writeFileSync as writeFileSync88, renameSync as renameSync17 } from "node:fs";
+import { existsSync as existsSync166, mkdirSync as mkdirSync104, readFileSync as readFileSync135, writeFileSync as writeFileSync88, renameSync as renameSync18 } from "node:fs";
 import { join as join175 } from "node:path";
 function externalToolStorePath(workingDir) {
   return join175(workingDir, ".omnius", "external-tools.json");
@@ -725713,7 +726444,7 @@ function persist3(workingDir, tools) {
   const file = { version: STORE_VERSION, tools };
   const tmp = `${path16}.tmp`;
   writeFileSync88(tmp, JSON.stringify(file, null, 2), { mode: 384 });
-  renameSync17(tmp, path16);
+  renameSync18(tmp, path16);
 }
 function validateManifest2(input, existing) {
   if (!input || typeof input !== "object") {
@@ -744348,7 +745079,7 @@ import {
   readdirSync as readdirSync59,
   existsSync as existsSync173,
   watch as fsWatch5,
-  renameSync as renameSync18,
+  renameSync as renameSync19,
   unlinkSync as unlinkSync38,
   statSync as statSync68,
   openSync as openSync8,
@@ -745967,7 +746698,7 @@ function atomicJobWrite(dir, id2, job) {
   const tmpPath = `${finalPath}.tmp.${process.pid}.${Date.now()}`;
   try {
     writeFileSync92(tmpPath, JSON.stringify(job, null, 2), "utf-8");
-    renameSync18(tmpPath, finalPath);
+    renameSync19(tmpPath, finalPath);
   } catch {
     try {
       writeFileSync92(finalPath, JSON.stringify(job, null, 2), "utf-8");
@@ -747768,7 +748499,7 @@ function writeUpdateState(state) {
     const finalPath = updateStateFile();
     const tmpPath = `${finalPath}.tmp.${process.pid}`;
     writeFileSync92(tmpPath, JSON.stringify(state, null, 2), "utf-8");
-    renameSync18(tmpPath, finalPath);
+    renameSync19(tmpPath, finalPath);
   } catch {
   }
 }
@@ -755120,9 +755851,9 @@ ${incompleteList}${more}
             const checkScript = scripts["typecheck"] ? "typecheck" : scripts["build"] ? "build" : null;
             if (checkScript) {
               const { exec: exec7 } = await import("node:child_process");
-              const { promisify: promisify9 } = await import("node:util");
+              const { promisify: promisify10 } = await import("node:util");
               try {
-                await promisify9(exec7)(`npm run ${checkScript} --silent 2>&1`, {
+                await promisify10(exec7)(`npm run ${checkScript} --silent 2>&1`, {
                   cwd: cwd4,
                   timeout: 12e4,
                   encoding: "utf-8",
@@ -762073,11 +762804,11 @@ The user pasted a clipboard image saved at ${relPath}. Use the OCR, vision analy
         };
       }
     },
-    killEphemeral() {
+    killEphemeral(options2) {
       if (_shellToolRef) _shellToolRef.killAll();
       killAllFullSubAgents();
       taskManager.stopAll();
-      registry2.killAll();
+      if (!options2?.preserveInfrastructure) registry2.killAll();
       if (_replToolRef) {
         try {
           _replToolRef.dispose();