omnius 1.0.556 → 1.0.558

package/dist/index.js

@@ -9349,9 +9349,9 @@ function normalizeCameraRotationDegrees(value2) {
   const raw = String(value2).trim().toLowerCase();
   if (!raw)
     return 0;
-  const numeric = Number(raw.replace(/deg(?:rees)?$/i, ""));
-  if (Number.isFinite(numeric))
-    return normalizeCameraRotationDegrees(numeric);
+  const numeric2 = Number(raw.replace(/deg(?:rees)?$/i, ""));
+  if (Number.isFinite(numeric2))
+    return normalizeCameraRotationDegrees(numeric2);
   if (["none", "off", "upright", "normal", "0"].includes(raw))
     return 0;
   if (["cw", "clockwise", "right", "rotate-cw", "rotate_cw", "90"].includes(raw))
@@ -14857,14 +14857,14 @@ var init_file_edit = __esm({
           },
           expected_hash: {
             type: "string",
-            description: "SHA-256 from the most recent file_read for this file. The runner refuses unverified exact replacements that omit or mismatch this hash."
+            description: "Optional SHA-256 from file_read. When present, the edit is compare-and-swap protected against concurrent file changes; otherwise old_string must match current file text exactly."
           },
           dry_run: {
             type: "boolean",
             description: "Validate the edit and preview the diff without modifying disk."
           }
         },
-        required: ["path", "expected_hash"],
+        required: ["path"],
         allOf: [
           { anyOf: [{ required: ["old_string"] }, { required: ["old_string_base64"] }] },
           { anyOf: [{ required: ["new_string"] }, { required: ["new_string_base64"] }] }
@@ -26877,6 +26877,16 @@ function isRetirableEvidence(message2, minChars) {
 }
 function foldEvidenceOutcome(message2) {
   const text2 = message2.content;
+  const admissionBlock = text2.match(RUNTIME_ADMISSION_BLOCK);
+  if (admissionBlock) {
+    const after = text2.slice((admissionBlock.index ?? 0) + admissionBlock[0].length);
+    const reason = after.split("\n").map((line) => line.trim()).find((line) => line.length > 0 && !/^\w+=/.test(line));
+    return `runtime admission: ${admissionBlock[0]}${reason ? ` — ${reason.slice(0, 160)}` : ""}`;
+  }
+  const runtimeException = text2.match(RUNTIME_EXCEPTION_LINE);
+  if (runtimeException) {
+    return `runtime exception: ${runtimeException[0].trim().slice(0, 220)}`;
+  }
   const diag = extractDiagnosticSymbols(text2);
   if (diag.count > 0) {
     const syms = diag.symbols.slice(0, 6);
@@ -26938,12 +26948,14 @@ function retireStaleEvidence(messages2, options2) {
   });
   return { messages: out, retiredCount, reclaimedChars };
 }
-var DIAG_LINE, QUOTED_SYMBOL, EVIDENCE_MARKERS;
+var DIAG_LINE, QUOTED_SYMBOL, RUNTIME_ADMISSION_BLOCK, RUNTIME_EXCEPTION_LINE, EVIDENCE_MARKERS;
 var init_evidence_retirement = __esm({
   "packages/memory/dist/evidence-retirement.js"() {
     "use strict";
     DIAG_LINE = /\berror\b\s*:/i;
     QUOTED_SYMBOL = /['"`]([A-Za-z_][A-Za-z0-9_:.<>]{1,80})['"`]/g;
+    RUNTIME_ADMISSION_BLOCK = /\[(?:COMPILE ERROR FIX LOOP BLOCKED|EXPLORATION ADMISSION BLOCK|PARENT(?:\s+[^\]]*)?\s+BLOCK(?:ED)?|FOCUS SUPERVISOR BLOCK|STEERING RECONCILIATION REQUIRED|STALE EDIT LOOP BLOCKED|FULL FILE WRITE LOOP BLOCKED)[^\]]*\]/i;
+    RUNTIME_EXCEPTION_LINE = /^\s*(?:[A-Za-z_][\w.]*?(?:Error|Exception)|AssertionError)\s*:\s*(.+)$/m;
     EVIDENCE_MARKERS = [
       "[SHELL TRANSCRIPT]",
       "[FILE CONTEXT",
@@ -29466,10 +29478,10 @@ var init_batch_edit = __esm({
                 },
                 expected_hash: {
                   type: "string",
-                  description: "SHA-256 from the most recent file_read for this file. All edits for a file must use the same verified hash."
+                  description: "Optional SHA-256 from file_read. When supplied, all edits for a file must use the same value and the atomic batch checks it before writing."
                 }
               },
-              required: ["path", "expected_hash"],
+              required: ["path"],
               allOf: [
                 { anyOf: [{ required: ["old_string"] }, { required: ["old_string_base64"] }] },
                 { anyOf: [{ required: ["new_string"] }, { required: ["new_string_base64"] }] }
@@ -62146,12 +62158,12 @@ var init_mock_stream = __esm({
 });
 
 // ../node_modules/unlimited-timeout/index.js
-function setTimeout2(callback, delay4, ...arguments_) {
+function setTimeout2(callback, delay5, ...arguments_) {
   if (typeof callback !== "function") {
     throw new TypeError("Expected callback to be a function");
   }
-  delay4 ??= 0;
-  delay4 = Number(delay4);
+  delay5 ??= 0;
+  delay5 = Number(delay5);
   let shouldUnref = false;
   const timeout2 = {
     [brandSymbol]: true,
@@ -62168,13 +62180,13 @@ function setTimeout2(callback, delay4, ...arguments_) {
       return timeout2;
     }
   };
-  if (delay4 === Number.POSITIVE_INFINITY || delay4 > Number.MAX_SAFE_INTEGER) {
+  if (delay5 === Number.POSITIVE_INFINITY || delay5 > Number.MAX_SAFE_INTEGER) {
     return timeout2;
   }
-  if (!Number.isFinite(delay4) || delay4 < 0) {
-    delay4 = 0;
+  if (!Number.isFinite(delay5) || delay5 < 0) {
+    delay5 = 0;
   }
-  const targetTime = performance.now() + delay4;
+  const targetTime = performance.now() + delay5;
   const schedule = (remainingDelay) => {
     if (timeout2.cleared) {
       return;
@@ -62199,7 +62211,7 @@ function setTimeout2(callback, delay4, ...arguments_) {
       }
     }
   };
-  schedule(delay4);
+  schedule(delay5);
   return timeout2;
 }
 function clearTimeout2(timeout2) {
@@ -72204,15 +72216,15 @@ var init_dist3 = __esm({
           const activeTicksCount = this.#getActiveTicksCount();
           if (activeTicksCount >= this.#intervalCap) {
             const oldestTick = this.#strictTicks[this.#strictTicksStartIndex];
-            const delay4 = this.#interval - (now2 - oldestTick);
-            this.#createIntervalTimeout(delay4);
+            const delay5 = this.#interval - (now2 - oldestTick);
+            this.#createIntervalTimeout(delay5);
             return true;
           }
           return false;
         }
         if (this.#intervalId === void 0) {
-          const delay4 = this.#intervalEnd - now2;
-          if (delay4 < 0) {
+          const delay5 = this.#intervalEnd - now2;
+          if (delay5 < 0) {
             if (this.#lastExecutionTime > 0) {
               const timeSinceLastExecution = now2 - this.#lastExecutionTime;
               if (timeSinceLastExecution < this.#interval) {
@@ -72222,19 +72234,19 @@ var init_dist3 = __esm({
             }
             this.#intervalCount = this.#carryoverIntervalCount ? this.#pending : 0;
           } else {
-            this.#createIntervalTimeout(delay4);
+            this.#createIntervalTimeout(delay5);
             return true;
           }
         }
         return false;
       }
-      #createIntervalTimeout(delay4) {
+      #createIntervalTimeout(delay5) {
         if (this.#timeoutId !== void 0) {
           return;
         }
         this.#timeoutId = setTimeout(() => {
           this.#onResumeInterval();
-        }, delay4);
+        }, delay5);
       }
       #clearIntervalTimer() {
         if (this.#intervalId) {
@@ -84795,8 +84807,8 @@ function validateKeyName(name10) {
 async function randomDelay() {
   const min = 200;
   const max = 1e3;
-  const delay4 = Math.random() * (max - min) + min;
-  await new Promise((resolve82) => setTimeout(resolve82, delay4));
+  const delay5 = Math.random() * (max - min) + min;
+  await new Promise((resolve82) => setTimeout(resolve82, delay5));
 }
 function DsName(name10) {
   return new Key(keyPrefix + name10);
@@ -97999,13 +98011,13 @@ var require_lazy_helpers = __commonJS({
       }
     };
     exports.DelayedConstructor = DelayedConstructor;
-    function delay4(wrappedConstructor) {
+    function delay5(wrappedConstructor) {
       if (typeof wrappedConstructor === "undefined") {
         throw new Error("Attempt to `delay` undefined. Constructor must be wrapped in a callback");
       }
       return new DelayedConstructor(wrappedConstructor);
     }
-    exports.delay = delay4;
+    exports.delay = delay5;
   }
 });
 
@@ -103023,12 +103035,12 @@ var require_x509_cjs = __commonJS({
 var require_crypto = __commonJS({
   "../node_modules/acme-client/src/crypto/index.js"(exports) {
     var net5 = __require("net");
-    var { promisify: promisify9 } = __require("util");
+    var { promisify: promisify10 } = __require("util");
     var crypto14 = __require("crypto");
     var asn1js4 = require_build2();
     var x5093 = require_x509_cjs();
-    var randomInt2 = promisify9(crypto14.randomInt);
-    var generateKeyPair2 = promisify9(crypto14.generateKeyPair);
+    var randomInt2 = promisify10(crypto14.randomInt);
+    var generateKeyPair2 = promisify10(crypto14.generateKeyPair);
     x5093.cryptoProvider.set(crypto14.webcrypto);
     var subjectAltNameOID = "2.5.29.17";
     var alpnAcmeIdentifierOID = "1.3.6.1.5.5.7.1.31";
@@ -137873,9 +137885,9 @@ var require_lib = __commonJS({
 var require_forge2 = __commonJS({
   "../node_modules/acme-client/src/crypto/forge.js"(exports) {
     var net5 = __require("net");
-    var { promisify: promisify9 } = __require("util");
+    var { promisify: promisify10 } = __require("util");
     var forge = require_lib();
-    var generateKeyPair2 = promisify9(forge.pki.rsa.generateKeyPair);
+    var generateKeyPair2 = promisify10(forge.pki.rsa.generateKeyPair);
     function forgeObjectFromPem(input) {
       const msg = forge.pem.decode(input)[0];
       let result;
@@ -142419,9 +142431,9 @@ var require_timers = __commonJS({
        * before the specified function or code is executed.
        * @param {*} arg
        */
-      constructor(callback, delay4, arg) {
+      constructor(callback, delay5, arg) {
         this._onTimeout = callback;
-        this._idleTimeout = delay4;
+        this._idleTimeout = delay5;
         this._timerArg = arg;
         this.refresh();
       }
@@ -142466,8 +142478,8 @@ var require_timers = __commonJS({
        * when the timer expires.
        * @returns {NodeJS.Timeout|FastTimer}
        */
-      setTimeout(callback, delay4, arg) {
-        return delay4 <= RESOLUTION_MS ? setTimeout(callback, delay4, arg) : new FastTimer(callback, delay4, arg);
+      setTimeout(callback, delay5, arg) {
+        return delay5 <= RESOLUTION_MS ? setTimeout(callback, delay5, arg) : new FastTimer(callback, delay5, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated Timer previously created
@@ -142493,8 +142505,8 @@ var require_timers = __commonJS({
        * when the timer expires.
        * @returns {FastTimer}
        */
-      setFastTimeout(callback, delay4, arg) {
-        return new FastTimer(callback, delay4, arg);
+      setFastTimeout(callback, delay5, arg) {
+        return new FastTimer(callback, delay5, arg);
       },
       /**
        * The clearTimeout method cancels an instantiated FastTimer previously
@@ -142520,8 +142532,8 @@ var require_timers = __commonJS({
        * @deprecated
        * @param {number} [delay=0] The delay in milliseconds to add to the now value.
        */
-      tick(delay4 = 0) {
-        fastNow += delay4 - RESOLUTION_MS + 1;
+      tick(delay5 = 0) {
+        fastNow += delay5 - RESOLUTION_MS + 1;
         onTick();
         onTick();
       },
@@ -148914,21 +148926,21 @@ var require_client_h1 = __commonJS({
         this.connection = "";
         this.maxResponseSize = client[kMaxResponseSize];
       }
-      setTimeout(delay4, type) {
-        if (delay4 !== this.timeoutValue || type & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
+      setTimeout(delay5, type) {
+        if (delay5 !== this.timeoutValue || type & USE_FAST_TIMER ^ this.timeoutType & USE_FAST_TIMER) {
           if (this.timeout) {
             timers.clearTimeout(this.timeout);
             this.timeout = null;
           }
-          if (delay4) {
+          if (delay5) {
             if (type & USE_FAST_TIMER) {
-              this.timeout = timers.setFastTimeout(onParserTimeout, delay4, new WeakRef(this));
+              this.timeout = timers.setFastTimeout(onParserTimeout, delay5, new WeakRef(this));
             } else {
-              this.timeout = setTimeout(onParserTimeout, delay4, new WeakRef(this));
+              this.timeout = setTimeout(onParserTimeout, delay5, new WeakRef(this));
               this.timeout?.unref();
             }
           }
-          this.timeoutValue = delay4;
+          this.timeoutValue = delay5;
         } else if (this.timeout) {
           if (this.timeout.refresh) {
             this.timeout.refresh();
@@ -154794,7 +154806,7 @@ var require_mock_utils = __commonJS({
       if (mockDispatch2.data.callback) {
         mockDispatch2.data = { ...mockDispatch2.data, ...mockDispatch2.data.callback(opts) };
       }
-      const { data: { statusCode, data, headers, trailers, error }, delay: delay4, persist: persist4 } = mockDispatch2;
+      const { data: { statusCode, data, headers, trailers, error }, delay: delay5, persist: persist4 } = mockDispatch2;
       const { timesInvoked, times } = mockDispatch2;
       mockDispatch2.consumed = !persist4 && timesInvoked >= times;
       mockDispatch2.pending = timesInvoked < times;
@@ -154817,11 +154829,11 @@ var require_mock_utils = __commonJS({
         handler.onError(err);
       }
       handler.onConnect?.(abort, null);
-      if (typeof delay4 === "number" && delay4 > 0) {
+      if (typeof delay5 === "number" && delay5 > 0) {
         timer = setTimeout(() => {
           timer = null;
           handleReply(this[kDispatches]);
-        }, delay4);
+        }, delay5);
       } else {
         handleReply(this[kDispatches]);
       }
@@ -155101,7 +155113,7 @@ var require_mock_interceptor = __commonJS({
 var require_mock_client = __commonJS({
   "../node_modules/undici/lib/mock/mock-client.js"(exports, module) {
     "use strict";
-    var { promisify: promisify9 } = __require("node:util");
+    var { promisify: promisify10 } = __require("node:util");
     var Client2 = require_client2();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -155149,7 +155161,7 @@ var require_mock_client = __commonJS({
         this[kDispatches] = [];
       }
       async [kClose]() {
-        await promisify9(this[kOriginalClose])();
+        await promisify10(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -155362,7 +155374,7 @@ var require_mock_call_history = __commonJS({
 var require_mock_pool = __commonJS({
   "../node_modules/undici/lib/mock/mock-pool.js"(exports, module) {
     "use strict";
-    var { promisify: promisify9 } = __require("node:util");
+    var { promisify: promisify10 } = __require("node:util");
     var Pool = require_pool();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -155410,7 +155422,7 @@ var require_mock_pool = __commonJS({
         this[kDispatches] = [];
       }
       async [kClose]() {
-        await promisify9(this[kOriginalClose])();
+        await promisify10(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -288327,9 +288339,9 @@ function inferHoleRadius(lower) {
 function inferHoleCount(lower) {
   if (!/hole|bolt|mount|screw|fastener/.test(lower))
     return 0;
-  const numeric = lower.match(/\b(\d{1,2})\s*(?:x\s*)?(?:corner\s*)?(?:mounting\s*)?(?:holes?|bolts?|screws?|fasteners?)\b/);
-  if (numeric)
-    return clampInteger(Number(numeric[1]), 0, 16, 4);
+  const numeric2 = lower.match(/\b(\d{1,2})\s*(?:x\s*)?(?:corner\s*)?(?:mounting\s*)?(?:holes?|bolts?|screws?|fasteners?)\b/);
+  if (numeric2)
+    return clampInteger(Number(numeric2[1]), 0, 16, 4);
   const wordCounts = {
     one: 1,
     two: 2,
@@ -289570,12 +289582,12 @@ ${plan.notes.map((n2) => `- ${n2}`).join("\n")}`,
                 durationMs: Date.now() - t0
               };
             }
-            const delay4 = Math.min(BASE_DELAY * Math.pow(2, attempt - 1), MAX_BACKOFF);
+            const delay5 = Math.min(BASE_DELAY * Math.pow(2, attempt - 1), MAX_BACKOFF);
             this.emitProgress({
               stage: "generate",
-              message: `Attempt ${attempt} ${msg.includes("timed out") ? "timed out" : "backend unavailable"}, retrying in ${Math.round(delay4 / 1e3)}s...`
+              message: `Attempt ${attempt} ${msg.includes("timed out") ? "timed out" : "backend unavailable"}, retrying in ${Math.round(delay5 / 1e3)}s...`
             });
-            await new Promise((r2) => setTimeout(r2, delay4));
+            await new Promise((r2) => setTimeout(r2, delay5));
           }
         }
         let result = {};
@@ -298094,6 +298106,9 @@ function validateCardTransition(from3, to) {
   return { valid: true, message: "transition allowed" };
 }
 function verifyCardEvidence(card) {
+  const declaredVerifierEvidence = verifyDeclaredVerifierEvidence(card);
+  if (!declaredVerifierEvidence.valid)
+    return declaredVerifierEvidence;
   const compileEvidence = verifyCompileCardEvidence(card);
   if (!compileEvidence.valid)
     return compileEvidence;
@@ -298115,6 +298130,13 @@ function verifyCardEvidence(card) {
   });
   return { valid: missing.length === 0, missing };
 }
+function verifyDeclaredVerifierEvidence(card) {
+  const verifier = normalizeCommandText(card.verifierCommand ?? "");
+  if (!verifier)
+    return { valid: true, missing: [] };
+  const hasExactLiveCommand = card.evidence.some((evidence) => evidence.kind === "tool_result" && normalizeCommandText(evidence.command ?? "") === verifier);
+  return hasExactLiveCommand ? { valid: true, missing: [] } : { valid: false, missing: [`live verifier output: ${card.verifierCommand}`] };
+}
 function verifyCompileCardEvidence(card) {
   if (!card.diagnosticFingerprint && !card.id.startsWith("compile-")) {
     return { valid: true, missing: [] };
@@ -491768,14 +491790,14 @@ ${content}
       function getOrganizeImportsUnicodeStringComparer(ignoreCase, preferences) {
         const resolvedLocale = getOrganizeImportsLocale(preferences);
         const caseFirst = preferences.organizeImportsCaseFirst ?? false;
-        const numeric = preferences.organizeImportsNumericCollation ?? false;
+        const numeric2 = preferences.organizeImportsNumericCollation ?? false;
         const accents = preferences.organizeImportsAccentCollation ?? true;
         const sensitivity = ignoreCase ? accents ? "accent" : "base" : accents ? "variant" : "case";
         const collator = new Intl.Collator(resolvedLocale, {
           usage: "sort",
           caseFirst: caseFirst || "false",
           sensitivity,
-          numeric
+          numeric: numeric2
         });
         return collator.compare;
       }
@@ -502591,12 +502613,12 @@ ${options2.prefix}` : "\n" : options2.prefix
          * of the new one.  (Note that the amount of time the canceled operation had been
          * waiting does not affect the amount of time that the new operation waits.)
          */
-        schedule(operationId, delay4, cb) {
+        schedule(operationId, delay5, cb) {
           const pendingTimeout = this.pendingTimeouts.get(operationId);
           if (pendingTimeout) {
             this.host.clearTimeout(pendingTimeout);
           }
-          this.pendingTimeouts.set(operationId, this.host.setTimeout(_ThrottledOperations.run, delay4, operationId, this, cb));
+          this.pendingTimeouts.set(operationId, this.host.setTimeout(_ThrottledOperations.run, delay5, operationId, this, cb));
           if (this.logger) {
             this.logger.info(`Scheduled: ${operationId}${pendingTimeout ? ", Cancelled earlier one" : ""}`);
           }
@@ -502616,9 +502638,9 @@ ${options2.prefix}` : "\n" : options2.prefix
         }
       };
       var GcTimer = class _GcTimer {
-        constructor(host, delay4, logger2) {
+        constructor(host, delay5, logger2) {
           this.host = host;
-          this.delay = delay4;
+          this.delay = delay5;
           this.logger = logger2;
         }
         scheduleCollect() {
@@ -512967,12 +512989,12 @@ Project '${project.projectName}' (${ProjectKind[project.projectKind]}) ${counter
           const project = this.projectService.tryGetDefaultProjectForFile(fileName);
           return project && { fileName, project };
         }
-        getDiagnostics(next, delay4, fileArgs) {
+        getDiagnostics(next, delay5, fileArgs) {
           if (this.suppressDiagnosticEvents) {
             return;
           }
           if (fileArgs.length > 0) {
-            this.updateErrorCheck(next, fileArgs, delay4);
+            this.updateErrorCheck(next, fileArgs, delay5);
           }
         }
         change(args) {
@@ -513372,7 +513394,7 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
           const spans = languageService.getBraceMatchingAtPosition(file, position);
           return !spans ? void 0 : simplifiedResult ? spans.map((span) => toProtocolTextSpan(span, scriptInfo)) : spans;
         }
-        getDiagnosticsForProject(next, delay4, fileName) {
+        getDiagnosticsForProject(next, delay5, fileName) {
           if (this.suppressDiagnosticEvents) {
             return;
           }
@@ -513417,7 +513439,7 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
           this.updateErrorCheck(
             next,
             checkList,
-            delay4,
+            delay5,
             /*requireOpen*/
             false
           );
@@ -514947,7 +514969,7 @@ var require_commonjs2 = __commonJS({
     var commaPattern = /\\,/g;
     var periodPattern = /\\\./g;
     exports.EXPANSION_MAX = 1e5;
-    function numeric(str) {
+    function numeric2(str) {
       return !isNaN(str) ? parseInt(str, 10) : str.charCodeAt(0);
     }
     function escapeBraces(str) {
@@ -515037,10 +515059,10 @@ var require_commonjs2 = __commonJS({
         }
         let N;
         if (isSequence && n2[0] !== void 0 && n2[1] !== void 0) {
-          const x = numeric(n2[0]);
-          const y = numeric(n2[1]);
+          const x = numeric2(n2[0]);
+          const y = numeric2(n2[1]);
           const width = Math.max(n2[0].length, n2[1].length);
-          let incr = n2.length === 3 && n2[2] !== void 0 ? Math.max(Math.abs(numeric(n2[2])), 1) : 1;
+          let incr = n2.length === 3 && n2[2] !== void 0 ? Math.max(Math.abs(numeric2(n2[2])), 1) : 1;
           let test = lte;
           const reverse = y < x;
           if (reverse) {
@@ -563021,8 +563043,8 @@ var init_VllmBackend = __esm({
             const errorText = await response.text().catch(() => "");
             const isRetryable = response.status >= 500 || response.status === 429;
             if (isRetryable && attempt < this.maxRetries) {
-              const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-              await new Promise((r2) => setTimeout(r2, delay4));
+              const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+              await new Promise((r2) => setTimeout(r2, delay5));
               return this.postWithRetry(path16, body, attempt + 1);
             }
             throw new Error(`vLLM POST ${path16} failed with HTTP ${response.status}: ${errorText}`);
@@ -563032,8 +563054,8 @@ var init_VllmBackend = __esm({
           clearTimeout(timer);
           const isNetworkError2 = err instanceof TypeError || err instanceof Error && err.name === "AbortError";
           if (isNetworkError2 && attempt < this.maxRetries) {
-            const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-            await new Promise((r2) => setTimeout(r2, delay4));
+            const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+            await new Promise((r2) => setTimeout(r2, delay5));
             return this.postWithRetry(path16, body, attempt + 1);
           }
           throw err;
@@ -563281,8 +563303,8 @@ var init_OllamaBackend = __esm({
             const errorText = await response.text().catch(() => "");
             const isRetryable = response.status >= 500 || response.status === 429;
             if (isRetryable && attempt < this.maxRetries) {
-              const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-              await new Promise((r2) => setTimeout(r2, delay4));
+              const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+              await new Promise((r2) => setTimeout(r2, delay5));
               return this.postWithRetry(path16, body, attempt + 1);
             }
             throw new Error(`Ollama POST ${path16} failed with HTTP ${response.status}: ${errorText}`);
@@ -563292,8 +563314,8 @@ var init_OllamaBackend = __esm({
           clearTimeout(timer);
           const isNetworkError2 = err instanceof TypeError || err instanceof Error && err.name === "AbortError";
           if (isNetworkError2 && attempt < this.maxRetries) {
-            const delay4 = Math.min(100 * Math.pow(2, attempt), 2e3);
-            await new Promise((r2) => setTimeout(r2, delay4));
+            const delay5 = Math.min(100 * Math.pow(2, attempt), 2e3);
+            await new Promise((r2) => setTimeout(r2, delay5));
             return this.postWithRetry(path16, body, attempt + 1);
           }
           throw err;
@@ -565670,9 +565692,9 @@ var init_verifierRunner = __esm({
       async executeTests(patch, repoRoot) {
         if (patch.testsToRun.length === 0)
           return "(no tests specified)";
-        const { execFile: execFile11 } = await import("node:child_process");
-        const { promisify: promisify9 } = await import("node:util");
-        const execFileAsync6 = promisify9(execFile11);
+        const { execFile: execFile12 } = await import("node:child_process");
+        const { promisify: promisify10 } = await import("node:util");
+        const execFileAsync7 = promisify10(execFile12);
         const outputs = [];
         const workDir = this.options.workingDir || repoRoot;
         for (const cmd of patch.testsToRun.slice(0, 3)) {
@@ -565681,7 +565703,7 @@ var init_verifierRunner = __esm({
             const [bin, ...args] = parts;
             if (!bin)
               continue;
-            const { stdout, stderr } = await execFileAsync6(bin, args, {
+            const { stdout, stderr } = await execFileAsync7(bin, args, {
               cwd: workDir,
               timeout: 15e3,
               maxBuffer: 1024 * 1024
@@ -574071,15 +574093,19 @@ function buildTrajectoryCheckpoint(input) {
   const latestFailure = [...observations].reverse().find((item) => item.type === "tool_result" && item.success === false || item.type === "error");
   const failureText = sanitizeTrajectoryText(latestFailure?.content, 300);
   const fallbackFailure = input.recentFailures?.at(-1);
+  const failureTurn = Math.max(typeof latestFailure?.turn === "number" ? latestFailure.turn : -1, typeof fallbackFailure?.turn === "number" ? fallbackFailure.turn : -1);
+  const verifiedFailureRecovery = input.lastVerifier?.passed === true && typeof input.lastVerifier.turn === "number" && input.lastVerifier.turn > failureTurn;
   const combinedFailure = [
-    failureText,
-    sanitizeTrajectoryText(fallbackFailure?.error || fallbackFailure?.output, 300)
+    ...verifiedFailureRecovery ? [] : [
+      failureText,
+      sanitizeTrajectoryText(fallbackFailure?.error || fallbackFailure?.output, 300)
+    ]
   ].filter(Boolean).join(" ");
   const focus = sanitizeTrajectoryText(input.focusDirective, 300);
   const targetPath = inferTargetPath(combinedFailure || outcomeText || focus) ?? latestFailure?.targetPath ?? mostRecentTargetForTool(observations, latestFailure?.toolName);
   const targetFreshness = targetPath ? input.evidenceFreshness?.(targetPath) ?? "unknown" : "unknown";
   const modifiedFiles = Array.from(state.modifiedFiles).slice(-3);
-  const fullWriteIssue = (latestFailure?.toolName === "file_write" || fallbackFailure?.tool === "file_write" || /file_write/i.test(combinedFailure)) && /FULL FILE (?:WRITE LOOP BLOCKED|REWRITE CONTRACT)|overwrite(?:=true)?|expected_hash|Refusing to overwrite existing file/i.test(combinedFailure);
+  const fullWriteIssue = !verifiedFailureRecovery && (latestFailure?.toolName === "file_write" || fallbackFailure?.tool === "file_write" || /file_write/i.test(combinedFailure)) && /FULL FILE (?:WRITE LOOP BLOCKED|REWRITE CONTRACT)|overwrite(?:=true)?|expected_hash|Refusing to overwrite existing file/i.test(combinedFailure);
   const fullWriteRecoveredByMutation = fullWriteIssue && Boolean(targetPath) && modifiedFiles.some(([path16]) => sameProjectPath(path16, targetPath)) && typeof latestFailure?.turn === "number" && typeof input.lastMutationTurn === "number" && input.lastMutationTurn > latestFailure.turn;
   const explicitBlock = /(?:permission denied|needs user input|ask_user|cannot proceed|external dependency|\[.*BLOCKED\])/i.test(combinedFailure);
   const hasRecentFailure = Boolean(combinedFailure);
@@ -578615,17 +578641,12 @@ var init_context_fabric = __esm({
           "Scope: runtime state for the next action. Do not quote or re-emit this frame. Prior evidence is orientation; execute a narrow file_read or the declared verifier whenever current text/hash or post-mutation proof is required."
         ].filter(Boolean);
         let content = [...header, "", ...sectionLines].join("\n").trim();
-        const controlChars = included.filter(isControlSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
-        const evidenceChars = included.filter(isEvidenceSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
-        const controlToEvidenceRatio = Number((controlChars / Math.max(1, evidenceChars)).toFixed(3));
+        let visibleIncluded = [...included];
+        let controlChars = 0;
+        let evidenceChars = 0;
+        let controlToEvidenceRatio = 0;
         const qualityWarnings = [];
         const maxControlRatio = options2.maxControlToEvidenceRatio ?? 0.45;
-        if (controlToEvidenceRatio > maxControlRatio) {
-          qualityWarnings.push(`control_context_ratio_high:${controlToEvidenceRatio}`);
-        }
-        const activeFrameCount = (content.match(/\[ACTIVE CONTEXT FRAME\]/g) ?? []).length;
-        if (activeFrameCount > 1)
-          qualityWarnings.push(`active_frame_count:${activeFrameCount}`);
         if (sectionLines.length === 0) {
           return {
             content: null,
@@ -578661,6 +578682,21 @@ var init_context_fabric = __esm({
               dropped.push(signal);
           }
         }
+        visibleIncluded = included.filter((signal) => content.includes(signal.content));
+        for (const signal of included) {
+          if (!visibleIncluded.includes(signal) && !dropped.includes(signal)) {
+            dropped.push(signal);
+          }
+        }
+        controlChars = visibleIncluded.filter(isControlSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
+        evidenceChars = visibleIncluded.filter(isEvidenceSignal).reduce((sum2, signal) => sum2 + signal.content.length, 0);
+        controlToEvidenceRatio = Number((controlChars / Math.max(1, evidenceChars)).toFixed(3));
+        if (controlToEvidenceRatio > maxControlRatio) {
+          qualityWarnings.push(`control_context_ratio_high:${controlToEvidenceRatio}`);
+        }
+        const activeFrameCount = (content.match(/\[ACTIVE CONTEXT FRAME\]/g) ?? []).length;
+        if (activeFrameCount > 1)
+          qualityWarnings.push(`active_frame_count:${activeFrameCount}`);
         if (options2.includeDiagnostics) {
           content += `
 
@@ -578669,7 +578705,7 @@ context_fabric: included=${included.length} dropped=${dropped.length} truncated=
         return {
           content,
           diagnostics: {
-            includedSignals: included.length,
+            includedSignals: visibleIncluded.length,
             droppedSignals: dropped.length + droppedByAdmission.length,
             hiddenSignals: hidden.length,
             semanticDedupedSignals,
@@ -578678,7 +578714,7 @@ context_fabric: included=${included.length} dropped=${dropped.length} truncated=
             truncatedSignals,
             estimatedTokens: estimateTokens2(content),
             totalChars: content.length,
-            semanticChunkCount: included.filter((signal) => signal.kind === "semantic_chunk").length,
+            semanticChunkCount: visibleIncluded.filter((signal) => signal.kind === "semantic_chunk").length,
             controlChars,
             evidenceChars,
             controlToEvidenceRatio,
@@ -578686,7 +578722,7 @@ context_fabric: included=${included.length} dropped=${dropped.length} truncated=
             ...metadataReports,
             sections: sectionDiagnostics
           },
-          included,
+          included: visibleIncluded,
           dropped: [...dropped, ...droppedByAdmission, ...hidden]
         };
       }
@@ -578710,7 +578746,7 @@ function isAdmittedFileReadMessage(message2) {
 function isProtectedControllerMessage(message2) {
   return isControllerStateMessage(message2) || isActionGroundTruthMessage(message2) || isActiveSteeringMessage(message2);
 }
-function modelFacingMessageCap(message2) {
+function modelFacingMessageCapWithLimits(message2, limits) {
   if (isControllerStateMessage(message2)) {
     return MODEL_FACING_CONTROLLER_STATE_CHAR_CAP;
   }
@@ -578721,12 +578757,12 @@ function modelFacingMessageCap(message2) {
     return Math.max(MODEL_FACING_ACTION_GROUND_TRUTH_CHAR_CAP, 7e3);
   }
   if (isAdmittedFileReadMessage(message2)) {
-    return MODEL_FACING_ADMITTED_FILE_READ_CHAR_CAP;
+    return limits.admittedFileReadChars ?? MODEL_FACING_ADMITTED_FILE_READ_CHAR_CAP;
   }
   if (message2.role === "tool")
-    return MODEL_FACING_TOOL_CHAR_CAP;
+    return limits.toolChars ?? MODEL_FACING_TOOL_CHAR_CAP;
   if (message2.role === "system")
-    return MODEL_FACING_SYSTEM_CHAR_CAP;
+    return limits.systemChars ?? MODEL_FACING_SYSTEM_CHAR_CAP;
   return messageText(message2.content).length;
 }
 function stripLegacyRuntimeControlFragments(content) {
@@ -578736,18 +578772,18 @@ function stripLegacyRuntimeControlFragments(content) {
   out = pieces.map((piece) => LEGACY_RUNTIME_CONTROL_FRAGMENT_RE.test(piece) ? "" : piece).join("");
   return collapseWhitespace(out);
 }
-function splitOversizedSystemMessages(messages2) {
+function splitOversizedSystemMessages(messages2, systemCharCap = MODEL_FACING_SYSTEM_CHAR_CAP) {
   const out = [];
   for (const message2 of messages2) {
-    if (message2.role !== "system" || typeof message2.content !== "string" || isProtectedControllerMessage(message2) || message2.content.length <= MODEL_FACING_SYSTEM_CHAR_CAP) {
+    if (message2.role !== "system" || typeof message2.content !== "string" || isProtectedControllerMessage(message2) || message2.content.length <= systemCharCap) {
       out.push(message2);
       continue;
     }
     let remaining = message2.content.trim();
-    while (remaining.length > MODEL_FACING_SYSTEM_CHAR_CAP) {
-      const window2 = remaining.slice(0, MODEL_FACING_SYSTEM_CHAR_CAP);
+    while (remaining.length > systemCharCap) {
+      const window2 = remaining.slice(0, systemCharCap);
       const boundary = Math.max(window2.lastIndexOf("\n\n"), window2.lastIndexOf("\n"));
-      const cut = boundary >= Math.floor(MODEL_FACING_SYSTEM_CHAR_CAP * 0.5) ? boundary : MODEL_FACING_SYSTEM_CHAR_CAP;
+      const cut = boundary >= Math.floor(systemCharCap * 0.5) ? boundary : systemCharCap;
       const chunk = remaining.slice(0, cut).trim();
       if (chunk)
         out.push({ ...message2, content: chunk });
@@ -578761,17 +578797,17 @@ function splitOversizedSystemMessages(messages2) {
 function isCurrentGoalMessage(message2) {
   return typeof message2.content === "string" && message2.content.includes("[CURRENT USER GOAL]");
 }
-function applyModelFacingBudget(messages2, preserveFirstSystem) {
+function applyModelFacingBudget(messages2, preserveFirstSystem, limits = {}) {
   const reservedTransaction = latestResolvedToolTransaction(messages2);
-  const reservedChars = [...reservedTransaction].reduce((sum2, index) => sum2 + modelFacingReservedChars(messages2[index]), 0);
-  let remaining = Math.max(0, MODEL_FACING_CONTEXT_CHAR_BUDGET - reservedChars);
+  const reservedChars = [...reservedTransaction].reduce((sum2, index) => sum2 + modelFacingReservedChars(messages2[index], limits), 0);
+  let remaining = Math.max(0, (limits.contextChars ?? MODEL_FACING_CONTEXT_CHAR_BUDGET) - reservedChars);
   const kept = [];
   for (let index = 0; index < messages2.length; index++) {
     const message2 = messages2[index];
     const content = messageText(message2.content);
     const isReservedTransactionMessage = reservedTransaction.has(index);
     const isPriorityIntent = message2.role === "user" || isCurrentGoalMessage(message2) || isActiveSteeringMessage(message2);
-    const perMessageCap = modelFacingMessageCap(message2);
+    const perMessageCap = modelFacingMessageCapWithLimits(message2, limits);
     const isProtectedController = isProtectedControllerMessage(message2);
     const allowed = isReservedTransactionMessage ? perMessageCap : isPriorityIntent ? content.length : isProtectedController ? perMessageCap : Math.min(remaining, perMessageCap);
     if (!isReservedTransactionMessage && !isPriorityIntent && !isProtectedController && allowed <= 0) {
@@ -578882,9 +578918,9 @@ function latestResolvedToolTransaction(messages2) {
   }
   return /* @__PURE__ */ new Set();
 }
-function modelFacingReservedChars(message2) {
+function modelFacingReservedChars(message2, limits = {}) {
   const content = messageText(message2.content);
-  const cap = modelFacingMessageCap(message2);
+  const cap = modelFacingMessageCapWithLimits(message2, limits);
   return Math.min(content.length, cap);
 }
 function retireLinkedAssistantReadIntents(messages2) {
@@ -578906,6 +578942,64 @@ function retireLinkedAssistantReadIntents(messages2) {
     return { ...message2, content: ASSISTANT_READ_INTENT_RETIRED_MARKER };
   });
 }
+function retireHistoricalAssistantNarratives(messages2) {
+  const resolvedToolCallIds = new Set(messages2.filter((message2) => message2.role === "tool").map(linkedToolCallId).filter((id2) => id2 !== null));
+  const newestTransaction = latestResolvedToolTransaction(messages2);
+  const keepFreeform = /* @__PURE__ */ new Set();
+  let freeformSlots = 1;
+  const assistantControllerRecap = /(?:\[?(?:controller state v1|active context frame|trajectory checkpoint|branch-extract(?: v\d+)?|recent action ground truth)\]?|\b(?:controller|admin)\s+(?:directive|state|summary|recap|reflection)\b|\b(?:verifier|compile)\s+(?:is\s+)?locked\b|\b(?:read tool|read wrapper)\s+(?:is|was)\s+(?:contaminated|untrusted)\b|\b(?:failure|recovery|doom)[ -]?(?:loop|recap|summary)\b)/i;
+  for (let index = messages2.length - 1; index >= 0; index--) {
+    const message2 = messages2[index];
+    if (message2.role !== "assistant" || typeof message2.content !== "string" || toolCallIds(message2).length > 0 || !message2.content.trim() || assistantControllerRecap.test(message2.content)) {
+      continue;
+    }
+    if (freeformSlots-- > 0)
+      keepFreeform.add(index);
+  }
+  return messages2.map((message2, index) => {
+    if (message2.role !== "assistant" || typeof message2.content !== "string") {
+      return message2;
+    }
+    if (assistantControllerRecap.test(message2.content)) {
+      return { ...message2, content: "" };
+    }
+    const callIds = toolCallIds(message2);
+    if (callIds.length > 0) {
+      const allResolved = callIds.every((id2) => resolvedToolCallIds.has(id2));
+      if (allResolved && !newestTransaction.has(index)) {
+        return { ...message2, content: "" };
+      }
+      return message2;
+    }
+    if (!keepFreeform.has(index))
+      return { ...message2, content: "" };
+    return message2;
+  });
+}
+function retireHistoricalRunEvidence(messages2) {
+  const retainedByBucket = /* @__PURE__ */ new Map();
+  const limitByBucket = {
+    discovery: 3,
+    mutation: 2,
+    verification: 1
+  };
+  const out = [...messages2];
+  for (let index = out.length - 1; index >= 0; index--) {
+    const message2 = out[index];
+    if (message2.role !== "system" || typeof message2.content !== "string" || !message2.content.includes("[RUN EVIDENCE]")) {
+      continue;
+    }
+    const text2 = message2.content.toLowerCase();
+    const bucket = /\b(?:file_edit|file_write|patch|apply_patch)\b/.test(text2) ? "mutation" : /\b(?:shell|verifier|compile|build|test)\b/.test(text2) ? "verification" : "discovery";
+    const retained = retainedByBucket.get(bucket) ?? 0;
+    if (retained >= limitByBucket[bucket]) {
+      out[index] = { ...message2, content: "" };
+      continue;
+    }
+    retainedByBucket.set(bucket, retained + 1);
+  }
+  return out.filter((message2) => message2.role !== "system" || typeof message2.content !== "string" || message2.content.trim());
+}
 function runtimeControlSemanticKey(content) {
   const normalized = content.replace(/\s+/g, " ").trim().toLowerCase();
   if (!normalized)
@@ -578969,9 +579063,13 @@ function hasAssistantPayload(message2) {
 }
 function staleToolFailureKey(content) {
   const text2 = content.replace(/\s+/g, " ").trim();
-  if (!/(FAILED:|failed again|doom-loop|result compacted|Earlier read of .* cleared)/i.test(text2)) {
+  const runtimeBlock = text2.match(/\[(COMPILE ERROR FIX LOOP BLOCKED|EXPLORATION ADMISSION BLOCK|PARENT(?:\s+[^\]]*)?\s+BLOCK(?:ED)?|FOCUS SUPERVISOR BLOCK|STEERING RECONCILIATION REQUIRED|STALE EDIT LOOP BLOCKED|FULL FILE WRITE LOOP BLOCKED)[^\]]*\]/i);
+  if (!/(FAILED:|failed again|doom-loop|result compacted|Earlier read of .* cleared)/i.test(text2) && !runtimeBlock) {
     return null;
   }
+  if (runtimeBlock) {
+    return `runtime-block|${runtimeBlock[1].toLowerCase().replace(/\s+/g, "-")}`;
+  }
   const tool = text2.match(/^\[?([a-zA-Z_][a-zA-Z0-9_]*)\(/)?.[1] ?? "tool";
   const path16 = text2.match(/"path"\s*:\s*"([^"]+)"/)?.[1] ?? text2.match(/Earlier read of ([^ ]+) cleared/)?.[1] ?? "";
   const family = text2.match(/FAILED:\s*\[([^\]\n]+)/i)?.[1] ?? text2.match(/(doom-loop[^.]+)/i)?.[1] ?? text2.match(/(Earlier read of [^ ]+ cleared)/i)?.[1] ?? "failure";
@@ -579003,6 +579101,12 @@ function retireDuplicateToolFailures(messages2) {
 }
 function prepareModelFacingApiMessages(input) {
   const preserveFirstSystem = input.preserveFirstSystem !== false;
+  const limits = {
+    contextChars: input.contextBudgetChars,
+    systemChars: input.systemMessageChars,
+    toolChars: input.toolMessageChars,
+    admittedFileReadChars: input.admittedFileReadChars
+  };
   const sanitized = [];
   const withoutLegacyControl = input.messages.flatMap((message2) => {
     if (message2.role !== "system" || typeof message2.content !== "string" || isProtectedControllerMessage(message2)) {
@@ -579011,7 +579115,7 @@ function prepareModelFacingApiMessages(input) {
     const stripped = stripLegacyRuntimeControlFragments(message2.content);
     return stripped ? [{ ...message2, content: stripped }] : [];
   });
-  const independentlyBounded = splitOversizedSystemMessages(withoutLegacyControl);
+  const independentlyBounded = splitOversizedSystemMessages(withoutLegacyControl, limits.systemChars);
   for (let index = 0; index < independentlyBounded.length; index++) {
     const rawMessage = independentlyBounded[index];
     const message2 = {
@@ -579070,7 +579174,7 @@ function prepareModelFacingApiMessages(input) {
     }
     seenSystemKeys.add(key);
   }
-  const deduped = retireDuplicateToolFailures(epochScoped.filter((_message, index) => keep[index]));
+  const deduped = retireDuplicateToolFailures(retireHistoricalRunEvidence(epochScoped.filter((_message, index) => keep[index])));
   if (!hasUserMessage(deduped) && !hasConcreteGoalMessage(deduped)) {
     const goal = deriveCurrentGoal({
       explicitGoal: input.currentGoal,
@@ -579088,7 +579192,8 @@ function prepareModelFacingApiMessages(input) {
     const insertAt = preserveFirstSystem && deduped[0]?.role === "system" ? 1 : 0;
     deduped.splice(insertAt, 0, goalMessage);
   }
-  return retireLinkedAssistantReadIntents(applyModelFacingBudget(deduped, preserveFirstSystem));
+  const historyPruned = retireHistoricalAssistantNarratives(retireLinkedAssistantReadIntents(deduped));
+  return applyModelFacingBudget(historyPruned, preserveFirstSystem, limits).filter((message2) => message2.role !== "assistant" || hasAssistantPayload(message2));
 }
 function deriveCurrentGoal(input) {
   const explicit = sanitizeModelVisibleContextText(input.explicitGoal ?? "");
@@ -579275,9 +579380,9 @@ var init_evidenceLedger = __esm({
         const { path: path16, content, range, fileVersion, turn } = input;
         if (!path16 || !content)
           return;
-        const built = buildExtract(content);
-        if (input.fidelity)
-          built.fidelity = input.fidelity;
+        const built = input.fidelity === "full" ? { text: content, fidelity: "full" } : buildExtract(content);
+        if (input.fidelity === "extract")
+          built.fidelity = "extract";
         const existing = this.entries.get(path16);
         if (existing && existing.readVersion === fileVersion && !existing.stale) {
           const keepNew = input.fidelity === "extract" || built.text.length >= existing.content.length;
@@ -580863,7 +580968,7 @@ ${input.error}`;
     diagnoses.add("tool-failure");
   if (input.failureKind)
     diagnoses.add(input.failureKind);
-  if (out.includes("[FOCUS SUPERVISOR BLOCK]")) {
+  if (!input.success && out.includes("[FOCUS SUPERVISOR BLOCK]")) {
     diagnoses.add("focus-supervisor-block");
   }
   if (input.toolName === "task_status" && /Task not found/i.test(out)) {
@@ -581797,7 +581902,7 @@ var init_focusSupervisor = __esm({
         this.expireDirectiveIfNeeded(this.lastObservedTurn);
         if (!this.enabled || !this.directive)
           return null;
-        if (this.modelTier === "large")
+        if (this.modelTier !== "small")
           return null;
         const d2 = this.directive;
         return [
@@ -582178,13 +582283,10 @@ var init_focusSupervisor = __esm({
           return true;
         if (this.mode === "off")
           return false;
-        if (this.modelTier === "small" || this.modelTier === "medium")
+        if (this.modelTier === "small")
           return true;
-        if (!context2)
-          return false;
-        const pressure = context2.pressureRatio ?? 0;
-        const ratio = context2.signalToNoiseRatio;
-        return pressure >= 0.85 || ratio !== void 0 && ratio < 1.2;
+        void context2;
+        return false;
       }
       hasLowSignalContext(context2) {
         if (!context2)
@@ -584658,12 +584760,12 @@ var init_completion_resolution_verifier = __esm({
 import { createHash as createHash33 } from "node:crypto";
 function buildBranchExtractionBrief(input) {
   const path16 = cleanBriefText(input.path, 320) || "the requested file";
-  const intent = firstBriefText([
+  const intent = fileLocalDiscoveryQuestion(firstBriefText([
     input.assistantIntent,
     input.trajectoryNextAction,
     input.currentStep
-  ]);
-  const openQuestion = cleanBriefText(input.trajectoryOpenQuestion, 280);
+  ]), path16);
+  const openQuestion = fileLocalDiscoveryQuestion(cleanBriefText(input.trajectoryOpenQuestion, 280), path16);
   const focus = openQuestion || intent;
   const goalAnchor = cleanBriefText(input.goalAnchor || input.currentStep || input.trajectoryAssessment || intent, 320);
   const request = openQuestion ? `Determine the exact file-local facts in ${path16} that answer this unresolved agent question: ${openQuestion}` : intent ? `Identify the exact file-local facts in ${path16} that the active agent needs before it can ${asActionClause(intent)}.` : `Identify the exact declarations, behavior, and configuration in ${path16} needed to choose the next narrow action.`;
@@ -584677,11 +584779,12 @@ function buildBranchExtractionBrief(input) {
     input.recentFailure ? `Recent unresolved evidence: ${cleanBriefText(input.recentFailure, 320)}` : ""
   ]);
   const returnContract = focus ? `Return only the exact declarations, values, behavior, and line spans that resolve: ${focus}` : "Return only the exact declarations, values, behavior, and line spans needed for the next safe action.";
+  const relatedFailure = fileLocalFailureForPath(input.recentFailure, path16);
   const requirementQuestions = uniqueBriefLines([
     openQuestion,
     intent,
-    input.currentStep && input.currentStep !== intent ? input.currentStep : "",
-    input.recentFailure ? `Which file-local declaration, value, or behavior explains this unresolved failure: ${cleanBriefText(input.recentFailure, 260)}` : ""
+    input.currentStep && input.currentStep !== intent ? fileLocalDiscoveryQuestion(input.currentStep, path16) : "",
+    relatedFailure ? `Which file-local declaration, value, or behavior explains this unresolved failure: ${relatedFailure}` : ""
   ]).slice(0, 3);
   if (requirementQuestions.length === 0) {
     requirementQuestions.push(`Which declarations, values, and behavior in this file are required for the next narrow action?`);
@@ -584689,7 +584792,10 @@ function buildBranchExtractionBrief(input) {
   const requirements = requirementQuestions.map((question, index) => ({
     id: `R${index + 1}`,
     question,
-    required: index === 0 || requirementQuestions.length === 1,
+    // A declared discovery question is never decorative.  The branch may
+    // return a justified partial result, but it cannot call its contract
+    // complete until every listed requirement has anchored evidence.
+    required: true,
     expectedEvidence: "Exact source declarations, literal values, control/configuration behavior, and their line anchors.",
     searchTerms: queryTerms(question).slice(0, 16)
   }));
@@ -584704,7 +584810,7 @@ function buildBranchExtractionBrief(input) {
     query: cleanBriefText(retrievalQuery, 700),
     requirements,
     completionCriteria: [
-      "Every required requirement is either supported by an exact anchored segment or explicitly marked unresolved.",
+      "Every declared requirement is either supported by an exact anchored segment or has an explicit source-based unresolved reason and deterministic recovery action.",
       "Every returned factual claim names its source line span; discontiguous evidence remains separate.",
       "Stop when the contract is satisfied, no new query/range is available, or the bounded search budget is exhausted."
     ],
@@ -584774,6 +584880,28 @@ function uniqueBriefLines(values) {
 function asActionClause(value2) {
   return cleanBriefText(value2, 320).replace(/^to\s+/i, "").replace(/[.?!]+$/, "").replace(/^([A-Z])/, (match) => match.toLowerCase());
 }
+function fileLocalDiscoveryQuestion(value2, path16) {
+  const clean5 = cleanBriefText(value2, 320);
+  if (!clean5)
+    return "";
+  if (/^(?:exploring|editing|reading|verifying|current|next(?:_valid)?_action)\s*:/i.test(clean5) || /\b(?:controller state|branch-extract|active context frame|file_read block|runtime repair|recovery required)\b/i.test(clean5)) {
+    return "";
+  }
+  const referencedPaths = clean5.match(/[\w./-]+\.(?:[cm]?[jt]sx?|py|cpp|cxx|h(?:pp)?|md|json|yaml|yml)/g) ?? [];
+  const targetBase = path16.split("/").pop() ?? path16;
+  if (referencedPaths.length > 0 && !referencedPaths.some((candidate) => candidate === targetBase || path16.endsWith(candidate))) {
+    return "";
+  }
+  return clean5;
+}
+function fileLocalFailureForPath(value2, path16) {
+  const clean5 = fileLocalDiscoveryQuestion(value2, path16);
+  if (!clean5)
+    return "";
+  const targetBase = path16.split("/").pop() ?? path16;
+  const mentionsTarget = clean5.includes(targetBase) || clean5.includes(path16);
+  return mentionsTarget || !/[\w./-]+\.(?:[cm]?[jt]sx?|py|cpp|cxx|h(?:pp)?)/.test(clean5) ? clean5 : "";
+}
 function selectWindows(lines, terms2) {
   const matched = [];
   for (let i2 = 0; i2 < lines.length; i2++) {
@@ -585019,6 +585147,44 @@ function deterministicSegments(input) {
   });
   return { segments, satisfied: [...satisfied], rounds };
 }
+function buildRequirementCoverage(input) {
+  return input.requirements.map((requirement) => {
+    const anchors = input.segments.filter((segment) => segment.requirementIds.includes(requirement.id)).map((segment) => ({
+      startLine: segment.anchor.startLine,
+      endLine: segment.anchor.endLine
+    }));
+    if (anchors.length > 0) {
+      return {
+        id: requirement.id,
+        question: requirement.question,
+        status: "satisfied",
+        anchors
+      };
+    }
+    const terms2 = queryTerms(requirement.question);
+    const candidateIndex = input.lines.findIndex((line) => {
+      const lower = line.toLowerCase();
+      return terms2.some((term) => lower.includes(term));
+    });
+    const reason = candidateIndex >= 0 ? "A candidate source line was found, but no bounded, line-anchored segment established the declared requirement." : terms2.length > 0 ? "None of the requirement's discriminating search terms occurred in the selected source range." : "The requirement had no discriminating file-local search term after normalization.";
+    const recovery = candidateIndex >= 0 ? `file_read({"path":${JSON.stringify(input.path)},"offset":${input.sourceLineOffset + Math.max(1, candidateIndex - 3)},"limit":12,"mode":"full"})` : `grep_search({"pattern":${JSON.stringify(terms2[0] ?? requirement.question.slice(0, 80))},"path":${JSON.stringify(input.path)}})`;
+    return {
+      id: requirement.id,
+      question: requirement.question,
+      status: "unresolved",
+      anchors: [],
+      reason,
+      recovery
+    };
+  });
+}
+function renderBranchRequirementCoverage(evidence) {
+  return [
+    `[REQUIREMENT COVERAGE]`,
+    ...evidence.requirementCoverage.map((coverage) => coverage.status === "satisfied" ? `- ${coverage.id} satisfied anchors=${coverage.anchors.map((anchor) => `L${anchor.startLine}-L${anchor.endLine}`).join(",")}` : `- ${coverage.id} unresolved reason=${coverage.reason ?? "no bounded anchor returned"} recovery=${coverage.recovery ?? "narrow the source query"}`),
+    `branch_contract=${evidence.contractComplete ? "complete" : "partial"}`
+  ];
+}
 async function extractEvidence(opts) {
   const { path: path16, content, fileVersion, backend } = opts;
   const sourceLineOffset = Math.max(0, Math.floor(opts.sourceLineOffset ?? 0));
@@ -585051,12 +585217,19 @@ async function extractEvidence(opts) {
     brief,
     maxSegments
   });
-  const requiredIds = requirements.filter((requirement) => requirement.required).map((requirement) => requirement.id);
+  const requiredIds = requirements.map((requirement) => requirement.id);
   const deterministicSatisfied = new Set(deterministic.satisfied);
   const deterministicComplete = deterministic.segments.length > 0 && requiredIds.every((id2) => deterministicSatisfied.has(id2));
   if (deterministicComplete && !backend) {
     const claim = renderSegments(deterministic.segments, maxInjectedChars);
     const legacySpan = legacyContiguousSpan(deterministic.segments);
+    const requirementCoverage2 = buildRequirementCoverage({
+      requirements,
+      segments: deterministic.segments,
+      lines,
+      path: path16,
+      sourceLineOffset
+    });
     return {
       path: path16,
       query,
@@ -585068,8 +585241,10 @@ async function extractEvidence(opts) {
       exploredLines: lines.length,
       injectedChars: claim.length,
       segments: deterministic.segments,
-      satisfiedRequirementIds: [...deterministicSatisfied],
-      unresolvedRequirementIds: requirements.map((requirement) => requirement.id).filter((id2) => !deterministicSatisfied.has(id2)),
+      satisfiedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "satisfied").map((coverage) => coverage.id),
+      unresolvedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "unresolved").map((coverage) => coverage.id),
+      requirementCoverage: requirementCoverage2,
+      contractComplete: requirementCoverage2.every((coverage) => coverage.status === "satisfied"),
       provenance: {
         contentHash: contentHash2,
         byteCount,
@@ -585177,14 +585352,16 @@ async function extractEvidence(opts) {
   if (semanticSegment && !segments.some((segment) => rangesOverlap(segment.anchor, semanticSegment.anchor))) {
     segments.push(semanticSegment);
   }
-  const satisfied = new Set(deterministic.satisfied);
-  for (const segment of segments) {
-    for (const id2 of segment.requirementIds)
-      satisfied.add(id2);
-  }
   if (segments.length > 0) {
     const claim = renderSegments(segments, maxInjectedChars);
     const legacySpan = legacyContiguousSpan(segments);
+    const requirementCoverage2 = buildRequirementCoverage({
+      requirements,
+      segments,
+      lines,
+      path: path16,
+      sourceLineOffset
+    });
     return {
       path: path16,
       query,
@@ -585196,8 +585373,10 @@ async function extractEvidence(opts) {
       exploredLines: Math.min(lines.length, parsedWindows.reduce((sum2, window2) => sum2 + (window2.end - window2.start + 1), 0) || lines.length),
       injectedChars: claim.length,
       segments,
-      satisfiedRequirementIds: [...satisfied],
-      unresolvedRequirementIds: requirements.map((requirement) => requirement.id).filter((id2) => !satisfied.has(id2)),
+      satisfiedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "satisfied").map((coverage) => coverage.id),
+      unresolvedRequirementIds: requirementCoverage2.filter((coverage) => coverage.status === "unresolved").map((coverage) => coverage.id),
+      requirementCoverage: requirementCoverage2,
+      contractComplete: requirementCoverage2.every((coverage) => coverage.status === "satisfied"),
       provenance: {
         contentHash: contentHash2,
         byteCount,
@@ -585234,6 +585413,13 @@ async function extractEvidence(opts) {
       matches: 1
     });
   }
+  const requirementCoverage = buildRequirementCoverage({
+    requirements,
+    segments: [structuralSegment],
+    lines,
+    path: path16,
+    sourceLineOffset
+  });
   return {
     path: path16,
     query,
@@ -585246,7 +585432,9 @@ async function extractEvidence(opts) {
     injectedChars: Math.min(structuralClaim.length, maxInjectedChars),
     segments: [structuralSegment],
     satisfiedRequirementIds: [],
-    unresolvedRequirementIds: requirements.map((requirement) => requirement.id),
+    unresolvedRequirementIds: requirementCoverage.map((coverage) => coverage.id),
+    requirementCoverage,
+    contractComplete: false,
     provenance: {
       contentHash: contentHash2,
       byteCount,
@@ -585668,16 +585856,32 @@ var init_contextEngine = __esm({
         let evidenceDropped = 0;
         if (allowCompaction && budget && before > budget) {
           const overhead = estimateTokens3([...evidence, ...hints, ...contract]);
-          const retained = [];
-          let used = overhead;
-          for (const message2 of [...input.messages].reverse()) {
+          const lastUserIndex = input.messages.map((message2, index) => message2.role === "user" ? index : -1).filter((index) => index >= 0).at(-1);
+          const lastTransactionStart = Math.max(0, input.messages.length - 3);
+          const protectedIndexes = /* @__PURE__ */ new Set();
+          for (let index = lastTransactionStart; index < input.messages.length; index++) {
+            protectedIndexes.add(index);
+          }
+          if (lastUserIndex !== void 0)
+            protectedIndexes.add(lastUserIndex);
+          input.messages.forEach((message2, index) => {
+            if (message2.role === "system" && /\[(?:ACTIVE USER STEERING|CONTROLLER STATE v1|RECENT ACTION GROUND TRUTH|EXPLORATION ADMISSION BLOCK|COMPILE ERROR FIX LOOP BLOCKED|BRANCH-EXTRACT)/.test(message2.content)) {
+              protectedIndexes.add(index);
+            }
+          });
+          const retainedIndexes = new Set(protectedIndexes);
+          let used = overhead + [...protectedIndexes].reduce((sum2, index) => sum2 + estimateTokens3([input.messages[index]]), 0);
+          for (let index = input.messages.length - 1; index >= 0; index--) {
+            if (retainedIndexes.has(index))
+              continue;
+            const message2 = input.messages[index];
             const cost = estimateTokens3([message2]);
             if (used + cost > budget)
               continue;
-            retained.push(message2);
+            retainedIndexes.add(index);
             used += cost;
           }
-          compactedMessages = retained.reverse();
+          compactedMessages = input.messages.filter((_message, index) => retainedIndexes.has(index));
           compacted = compactedMessages.length !== input.messages.length;
           evidenceDropped = 0;
         }
@@ -587812,6 +588016,13 @@ function stripShellQuotedSegments(command) {
   }
   return out;
 }
+function isCompilerLikeVerifierCommand(command) {
+  const normalized = command.toLowerCase();
+  return /\b(?:pio|platformio|tsc|gcc|g\+\+|clang\+\+?|clang|cargo\s+(?:build|check)|go\s+(?:build|test)|javac|gradle|mvn|msbuild|dotnet\s+build|python(?:3)?\s+-m\s+(?:py_compile|compileall)|mypy|pyright)\b/.test(normalized);
+}
+function isRecoveryCriticalRuntimeOutcome(content) {
+  return /\[(?:COMPILE ERROR FIX LOOP BLOCKED|EXPLORATION ADMISSION BLOCK|PARENT(?:\s+[^\]]*)?\s+BLOCK(?:ED)?|FOCUS SUPERVISOR BLOCK|STEERING RECONCILIATION REQUIRED|STALE EDIT LOOP BLOCKED|FULL FILE WRITE LOOP BLOCKED)\b/i.test(content);
+}
 function parsePersistentMemoryMode(value2) {
   if (value2 === "full" || value2 === "deferred" || value2 === "off")
     return value2;
@@ -589191,9 +589402,6 @@ var init_agenticRunner = __esm({
       _branchEvidenceCache = /* @__PURE__ */ new Map();
       /** Latest curated node per canonical path for safe post-compaction recovery. */
       _branchEvidenceByPath = /* @__PURE__ */ new Map();
-      /** Exact read fingerprints resolved from canonical evidence, not a fresh tool call. */
-      _resolvedReadEvidence = /* @__PURE__ */ new Map();
-      _deterministicNarrowReadFallbacks = /* @__PURE__ */ new Set();
       // OBS-1: durable "current observed state" for non-file_read tool outputs
       // (shell/web_fetch/list_directory/…). EvidenceLedger's counterpart for the
       // observation channels that were previously invisible after compaction —
@@ -589221,6 +589429,9 @@ var init_agenticRunner = __esm({
       /** Auto-delegation: directive ids we've already auto-delegated for (once each). */
       _autoDelegatedDirectiveIds = /* @__PURE__ */ new Set();
       _compileFixLoop = null;
+      /** A verifier produced a concrete card; the next parent tool slot is an
+       *  orchestrator-owned isolated fixer, not another model-chosen broad edit. */
+      _pendingCompileDelegationCardId = null;
       _declaredVerifierCommand = null;
       _lastDeclaredVerifierOutput = null;
       _lastDeclaredVerifierDiagnostics = [];
@@ -591177,9 +591388,18 @@ Your hypotheses MUST address this specific error, not generic causes.
         }
       }
       _prepareModelFacingMessages(messages2, _turn) {
+        const tier = this.options.modelTier ?? "large";
+        const contextWindow = this.options.contextWindowSize ?? 0;
+        const contextBudgetChars = contextWindow > 0 ? Math.max(48e3, Math.min(384e3, Math.floor(contextWindow * 4 * 0.7))) : tier === "large" ? 16e4 : tier === "medium" ? 96e3 : 48e3;
+        const systemMessageChars = Math.max(8e3, Math.min(32e3, Math.floor(contextBudgetChars * 0.16)));
+        const toolMessageChars = Math.max(6e3, Math.min(64e3, Math.floor(contextBudgetChars * 0.25)));
         const prepared = prepareModelFacingApiMessages({
           messages: messages2,
-          currentGoal: this._taskState.originalGoal || this._taskState.goal || this._taskState.currentStep || this._taskState.nextAction || ""
+          currentGoal: this._taskState.originalGoal || this._taskState.goal || this._taskState.currentStep || this._taskState.nextAction || "",
+          contextBudgetChars,
+          systemMessageChars,
+          toolMessageChars,
+          admittedFileReadChars: Math.min(128e3, contextBudgetChars)
         });
         const withCurrentUserIntent = sanitizeHistoryThink(prepared);
         if (!withCurrentUserIntent.some((message2) => message2.role === "user")) {
@@ -591459,6 +591679,8 @@ ${currentIntent.trim().slice(0, 6e3)}`,
        *               from main-loop fires in the status emit (e.g. "bf-cycle 2").
        */
       _runReg61Check(turn, toolCallLog, messages2, cycleLabel) {
+        if ((this.options.modelTier ?? "large") !== "small")
+          return;
         const REG61_TURN_FLOOR = 4;
         const REG61_MIN_READS = 3;
         const REG61_NO_WRITE_GAP = 5;
@@ -591579,7 +591801,7 @@ Pick the SMALLEST concrete deliverable from the spec — typically the project e
         const _editPath = _editPaths.find((p2) => !this._decomp2MainContextFiles.has(p2)) ?? "";
         if (!_editPath)
           return null;
-        const _hardBlock = process.env["OMNIUS_ENABLE_DECOMP2_HARD_BLOCK"] === "1";
+        const _hardBlock = this._enforcesStrictActionBoundaries() && process.env["OMNIUS_ENABLE_DECOMP2_HARD_BLOCK"] === "1";
         this.emit({
           type: "status",
           content: _hardBlock ? `DECOMP-2 NEW-FILE BLOCK — rejected ${tc.name}('${_editPath}') at turn ${turn}; gate stays active until sub_agent succeeds` : `DECOMP-2 NEW-FILE WARN — ${tc.name}('${_editPath}') at turn ${turn} would have been blocked (${this._decomp2MainContextFiles.size} files edited without sub_agent); proceeding anyway`,
@@ -592078,7 +592300,7 @@ Pick the SMALLEST concrete deliverable from the spec — typically the project e
           return this._declaredVerifierCommand;
         }
         const diagnostics = parseCompilerDiagnostics(output);
-        if (diagnostics.length > 0 && !commandIsPureReadOnlyPipeline(trimmed)) {
+        if (diagnostics.length > 0 && isCompilerLikeVerifierCommand(trimmed) && !commandIsPureReadOnlyPipeline(trimmed)) {
           const latched = stripVerifierFallbackSuffix(trimmed);
           return latched || trimmed;
         }
@@ -592187,7 +592409,7 @@ ${extras.join("\n")}`;
           verifierResultSignature,
           verifierStasisCount,
           verifierStasisBlocked: verifierStasisCount >= 3 && !(input.success && diagnostics.length === 0),
-          prerequisiteRecoverySignature: void 0
+          prerequisiteRecoverySignatures: []
         };
         if (this._compileFixLoop.verifierStasisBlocked) {
           this.emit({
@@ -592227,6 +592449,9 @@ ${extras.join("\n")}`;
           this._compileFixLoop.cards = this._compileFixLoop.cards.map((card) => card.id === top.id ? top : card);
           this._mirrorCompileFixCardAssigned(top, input.turn);
         }
+        if (this._enforcesStrictActionBoundaries() && !this.options.subAgent && this.tools.has("sub_agent")) {
+          this._pendingCompileDelegationCardId = top.id;
+        }
         this.emit({
           type: "status",
           content: `compile_error_fix_loop_started: verifierCommand=${verifierCommand}; cardId=${top.id}; diagnosticFingerprint=${top.diagnostic.fingerprint}; afterDiagnosticCount=${diagnostics.length}`,
@@ -592437,7 +592662,7 @@ ${extras.join("\n")}`;
         state.lastMutationTurn = turn;
         state.verifierStasisCount = 0;
         state.verifierStasisBlocked = false;
-        state.prerequisiteRecoverySignature = void 0;
+        state.prerequisiteRecoverySignatures = [];
         this._focusSupervisor?.markCompletionBlocked({
           turn,
           reason: "A source mutation invalidated the declared verifier; verifier evidence now owns the active focus.",
@@ -592480,12 +592705,23 @@ ${extras.join("\n")}`;
           return owned.some((ownedPath) => this._pathsOverlapForVerifier(pathValue, ownedPath)) || artifacts.some((artifactPath) => this._pathsOverlapForVerifier(pathValue, artifactPath)) || /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|java|kt|c|cc|cpp|cxx|h|hpp|hh|hxx|ino)$/i.test(pathValue);
         });
       }
+      /**
+       * Action rails are an explicitly opt-in diagnostic experiment, never a
+       * normal-model policy. They created deadlocks by denying the very reads and
+       * edits needed to revise a hypothesis. Evidence and the tools' own atomic
+       * checks remain available without a controller admission gate.
+       */
+      _enforcesStrictActionBoundaries() {
+        return process.env["OMNIUS_ENABLE_EXPERIMENTAL_ACTION_GATES"] === "1";
+      }
       /** Consecutive preflight blocks before the gate yields instead of blocking. */
       static COMPILE_FIX_GATE_YIELD_AFTER = 3;
       _compileFixLoopPreflightBlock(toolName, args, turn, shellLikelyMutatesFilesystem) {
         const state = this._compileFixLoop;
         if (!state?.active)
           return null;
+        if (!this._enforcesStrictActionBoundaries())
+          return null;
         const action = compileFixLoopNextRequiredAction(state);
         const verifierLocked = action === "run_declared_verifier" || state.verifierStasisBlocked === true;
         if (!verifierLocked)
@@ -592503,7 +592739,7 @@ ${extras.join("\n")}`;
               `lastVerifierRunTurn=${state.lastVerifierRunTurn}`,
               `stasisRounds=${state.verifierStasisCount ?? 0}`,
               `blockedTool=${toolName} consecutiveBlocks=${streak}`,
-              `Allowed next actions: the declared verifier; one narrow prerequisite read of an owned file; or a scoped source fix that changes verifier inputs.`
+              `Allowed next actions: the declared verifier; up to three distinct bounded prerequisite reads/searches; or a scoped source fix that changes verifier inputs.`
             ].join("\n")
           };
         };
@@ -592527,16 +592763,17 @@ ${extras.join("\n")}`;
           "file_explore"
         ]);
         if (readLike.has(toolName)) {
-          const target = String(args["path"] ?? args["file"] ?? args["file_path"] ?? "");
-          const owned = state.cards.flatMap((card) => card.ownedFiles);
-          const scoped = target.length > 0 && owned.some((path16) => this._pathsOverlapForVerifier(target, path16));
           const signature = `${toolName}:${this._buildExactArgsKey(args)}`;
-          if (scoped && state.prerequisiteRecoverySignature !== signature) {
-            state.prerequisiteRecoverySignature = signature;
+          const prior = state.prerequisiteRecoverySignatures ?? [];
+          const target = String(args["path"] ?? args["file"] ?? args["file_path"] ?? "").trim();
+          const pattern = String(args["pattern"] ?? "").trim();
+          const explicitBoundedRecovery = toolName === "file_read" && target.length > 0 || toolName === "grep_search" && (target.length > 0 || pattern.length > 0) || toolName === "find_files" && pattern.length > 0 || toolName === "list_directory" && target.length > 0 || toolName === "file_explore" && target.length > 0;
+          if (explicitBoundedRecovery && !prior.includes(signature) && prior.length < 3) {
+            state.prerequisiteRecoverySignatures = [...prior, signature];
             state.preflightBlockStreak = 0;
             return null;
           }
-          return blocked(scoped ? "The one prerequisite-recovery read has already been used; act on its evidence instead of reading again." : "Prerequisite recovery must be a narrow read of a compile-card owned file.");
+          return blocked(prior.includes(signature) ? "This exact prerequisite recovery was already admitted; use its evidence or change the path/range/pattern." : prior.length >= 3 ? "The bounded prerequisite-recovery budget is exhausted; synthesize the three fresh observations before another read." : "Prerequisite recovery must name a file path or search pattern; broad unscoped exploration is not admitted while verifier evidence is locked.");
         }
         if (this._isProjectEditTool(toolName)) {
           const targetPaths = this._extractToolTargetPaths(toolName, args);
@@ -592959,6 +593196,8 @@ ${result.output ?? ""}`;
         return openTodoLeaves(todos);
       }
       _todoExpansionRequiredBlocker(toolName) {
+        if (!this._enforcesStrictActionBoundaries())
+          return null;
         if (!this._todoWriteAvailable())
           return null;
         if (toolName === "todo_write" || toolName === "todo_read")
@@ -596372,6 +596611,9 @@ ${blob}
       }
       microcompact(messages2, recentToolResults) {
         const tier = this.options.modelTier ?? "large";
+        if (tier !== "small" && process.env["OMNIUS_ENABLE_AGGRESSIVE_MICROCOMPACTION"] !== "1") {
+          return;
+        }
         let keepResults = tier === "small" ? 6 : tier === "medium" ? 10 : 20;
         const idleGapMs = Date.now() - this._lastAssistantTimestamp;
         const IDLE_THRESHOLD_MS = 5 * 6e4;
@@ -597586,57 +597828,28 @@ ${notice}`;
         }
       }
       _canonicalReadEvidencePayload(canonicalPath, contentHash2) {
+        const evidence = this._evidenceLedger.get(canonicalPath);
+        if (evidence && !evidence.stale && evidence.contentHash === contentHash2 && evidence.fidelity === "full" && this._mustHonorExplicitFullFileRead(Buffer.byteLength(evidence.content, "utf8"), evidence.content.split("\n").length, this._branchRoutingContextWindow())) {
+          return evidence.content;
+        }
         const branch = this._branchEvidenceByPath.get(canonicalPath);
-        if (branch && branch.contentHash === contentHash2 && branch.taskEpoch === this._taskEpoch) {
+        if (branch && branch.contentHash === contentHash2 && branch.taskEpoch === this._taskEpoch && branch.contractComplete) {
           return branch.output;
         }
         return null;
       }
       _rehydrateResolvedReadEvidence(input) {
-        const previous = this._resolvedReadEvidence.get(input.fingerprint);
-        const handle2 = previous?.handle ?? `evidence:${input.canonicalPath}:${input.contentHash.slice(0, 16)}`;
-        this._resolvedReadEvidence.set(input.fingerprint, {
-          state: "resolved_from_cache",
-          handle: handle2,
-          path: input.canonicalPath,
-          contentHash: input.contentHash,
-          resolvedTurn: input.turn,
-          consumed: false
-        });
         return [
           "[REHYDRATED_FILE_EVIDENCE]",
-          `handle=${handle2}`,
-          "fingerprint_state=resolved_from_cache",
           `path=${input.canonicalPath}`,
+          "source=canonical_branch_cache",
           `sha256=${input.contentHash}`,
-          "Facts below are canonical current-run evidence. Consume these facts in the next decision; do not repeat the identical read.",
+          "This is an unchanged, complete branch extraction. A later file_read may still execute whenever current source or broader coverage is needed.",
           "[CANONICAL_FACTS]",
           input.payload.slice(0, 7e3),
           "[/CANONICAL_FACTS]"
         ].join("\n");
       }
-      _rejectRepeatedResolvedRead(tc, messages2) {
-        if (tc.name !== "file_read") {
-          for (const state2 of this._resolvedReadEvidence.values()) {
-            state2.consumed = true;
-          }
-          return null;
-        }
-        const fingerprint = this._buildToolFingerprint(tc.name, tc.arguments);
-        const state = this._resolvedReadEvidence.get(fingerprint);
-        if (!state)
-          return null;
-        const latestAssistant = [...messages2].reverse().find((message2) => message2.role === "assistant" && typeof message2.content === "string");
-        if (latestAssistant && typeof latestAssistant.content === "string" && latestAssistant.content.includes(state.handle)) {
-          state.consumed = true;
-        }
-        return [
-          "[REPEATED_READ_REJECTED]",
-          `handle=${state.handle}`,
-          `fingerprint_state=${state.state}`,
-          state.consumed ? "The evidence handle was acknowledged, but an identical read cannot add facts. Change file/range/query scope or take the evidence-backed next action." : "Consume the rehydrated evidence handle in your next decision before requesting another read. Change file/range/query scope if a different fact is required."
-        ].join("\n");
-      }
       async _drainPendingSteeringMessages(messages2, turn) {
         this.drainPendingRuntimeGuidance(turn);
         const pending2 = this.pendingSteeringInputs.filter((record) => (record.state === "queued" || record.state === "acknowledged") && (!record.taskEpoch || record.taskEpoch === this._taskEpoch));
@@ -598026,6 +598239,27 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
         const value2 = String(args["mode"] ?? "auto").trim().toLowerCase();
         return value2 === "full" || value2 === "extract" ? value2 : "auto";
       }
+      /**
+       * A small canonical source file is more useful as a complete first-class
+       * read than as a one-line branch extract.  In particular, a stale/noisy
+       * resident-context estimate must not turn a 36-line file into a curated
+       * wrapper merely because computed headroom is momentarily zero.  This cap is
+       * deliberately far below ordinary tool output limits and is still subject to
+       * normal model-facing budgeting on the next request.
+       */
+      _mustInlineSmallFileRead(selectedBytes, selectedLines) {
+        return selectedBytes <= 8e3 && selectedLines <= 200;
+      }
+      /**
+       * `mode:"full"` is a first-class model choice, not a request for a wrapper.
+       * Honor it for a bounded source body that still leaves normal output room;
+       * truly overwhelming files continue through the isolated extractor.
+       */
+      _mustHonorExplicitFullFileRead(selectedBytes, selectedLines, contextWindow) {
+        const projected = estimateFileReadInjectionTokens(selectedBytes, selectedLines);
+        const cap = Math.max(4096, Math.min(8192, Math.floor(Math.max(0, contextWindow) * 0.15)));
+        return selectedBytes <= 32e3 && selectedLines <= 800 && projected <= cap;
+      }
       /**
        * Route using the same sanitized, model-facing request shape that will be
        * sent after the tool turn—not the unreduced historical transcript. Using
@@ -598135,7 +598369,10 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
         });
         const requestedMode = this._fileReadMode(input.args);
         const explicitExtraction = requestedMode === "extract";
-        if (!decision2.branch && !explicitExtraction) {
+        const explicitFull = requestedMode === "full";
+        const inlineSmallRead = this._mustInlineSmallFileRead(selectedBytes, selectedLines.length);
+        const honorFull = explicitFull && this._mustHonorExplicitFullFileRead(selectedBytes, selectedLines.length, contextWindow);
+        if ((!decision2.branch || inlineSmallRead || honorFull) && !explicitExtraction) {
           input.batchBudget.inlineTokens += decision2.projectedReadTokens;
           input.batchBudget.reservations.set(input.callId, decision2.projectedReadTokens);
           return null;
@@ -598155,7 +598392,7 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
         const branchRequestId = `branch:${this._taskEpoch}:${_createHash("sha256").update(`${canonicalPath}|${fullHash}|${offset ?? 0}:${limit ?? "EOF"}|${contractFingerprint}`).digest("hex").slice(0, 20)}`;
         const cacheKey = `${this._taskEpoch}|${canonicalPath}|${fullHash}|${offset ?? 0}:${limit ?? "EOF"}|${contractFingerprint}`;
         const cached2 = this._branchEvidenceCache.get(cacheKey);
-        if (cached2) {
+        if (cached2?.contractComplete) {
           const fingerprint = this._buildToolFingerprint(input.toolName, input.args);
           const rehydrated = this._rehydrateResolvedReadEvidence({
             fingerprint,
@@ -598167,7 +598404,7 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
           this.emit({
             type: "status",
             toolName: input.toolName,
-            content: `Branch-extract cache rehydrated: ${rawPath} sha256=${fullHash.slice(0, 12)} contract=${contractFingerprint} fingerprint_state=resolved_from_cache`,
+            content: `Complete branch extraction reused: ${rawPath} sha256=${fullHash.slice(0, 12)} contract=${contractFingerprint}`,
             turn: input.turn,
             timestamp: (/* @__PURE__ */ new Date()).toISOString()
           });
@@ -598195,7 +598432,9 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
               sourceRange: {
                 startLine: startIndex + 1,
                 endLine: startIndex + Math.max(1, selectedLines.length)
-              }
+              },
+              contractComplete: cached2.contractComplete,
+              unresolvedRequirementIds: cached2.unresolvedRequirementIds
             }
           };
         }
@@ -598211,23 +598450,23 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
           backend: extractionBackend,
           timeoutMs: 3e4
         });
+        const requirementCoverage = renderBranchRequirementCoverage(ev);
         const verboseOutput = [
           `[BRANCH-EXTRACT v2] path=${rawPath}`,
           `[VERIFIED_RUNTIME_FILE_READ] request_id=${branchRequestId} task_epoch=${this._taskEpoch}`,
           `routing=${explicitExtraction ? "manual" : "mandatory"} reasons=${decision2.reasons.join(",") || "explicit_extract"} projected_read_tokens=${decision2.projectedReadTokens} fraction_limit_tokens=${decision2.fractionLimitTokens} available_headroom_tokens=${decision2.availableHeadroomTokens}`,
           `source=sha256:${fullHash} selected_lines=${selectedLines.length} selected_bytes=${selectedBytes}${hasRange ? ` range=${offset ?? 1}:${limit ?? "EOF"}` : " range=whole"}`,
-          `[DISCOVERY CONTRACT]`,
-          `Goal anchor: ${branchBrief.discoveryContract?.goalAnchor ?? this._taskState.currentStep}`,
-          `Request: ${branchBrief.request}`,
-          `Required discoveries:`,
+          `[EXTRACTION CONTRACT]`,
+          `Task: ${branchBrief.discoveryContract?.goalAnchor ?? this._taskState.currentStep}`,
+          `Question: ${branchBrief.request}`,
+          `Requirements:`,
           ...(branchBrief.discoveryContract?.requirements ?? []).map((requirement) => `- ${requirement.id}${requirement.required ? " [required]" : ""}: ${requirement.question}`),
           `Stop conditions: ${(branchBrief.discoveryContract?.completionCriteria ?? []).join(" | ")}`,
           `[CURATED SEGMENTS]`,
           ev.claim,
-          `satisfied=${ev.satisfiedRequirementIds.join(",") || "none"}`,
-          `unresolved=${ev.unresolvedRequirementIds.join(",") || "none"}`,
+          ...requirementCoverage,
           `provenance=content:${ev.provenance.contentHash} searches:${ev.provenance.searchRounds.length} ranges:${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`,
-          `Contract: use these anchors as evidence. If a required item remains unresolved, issue one narrow grep_search or bounded file_read for that item. Do not use shell/cat to bypass context routing; file_read(mode="full") remains available when live admission permits it.`
+          ev.contractComplete ? `Coverage: complete; every declared requirement has anchored evidence.` : `Coverage: partial; unresolved requirements include their source-based reason and suggested next evidence query. This extract is advisory and does not restrict other tool calls.`
         ].join("\n");
         const outputBudgetChars = Math.max(800, decision2.fractionLimitTokens * 4);
         let output = verboseOutput;
@@ -598237,13 +598476,13 @@ The steering reconciliation was emitted this turn. Wait for the next model decis
             `[BRANCH-EXTRACT v2] path=${rawPath} sha256=${fullHash}`,
             `[VERIFIED_RUNTIME_FILE_READ] request_id=${branchRequestId} task_epoch=${this._taskEpoch}`,
             `routing=${decision2.reasons.join(",")} projected=${decision2.projectedReadTokens}/${contextWindow}t limit=${decision2.fractionLimitTokens}t`,
-            `[DISCOVERY CONTRACT] required=${required || "next narrow file-local fact"}`,
+            `[EXTRACTION CONTRACT] required=${required || "next narrow file-local fact"}`,
             `[CURATED SEGMENTS]`
           ].join("\n");
           const suffix = [
-            `unresolved=${ev.unresolvedRequirementIds.join(",") || "none"}`,
+            ...requirementCoverage,
             `anchors=${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`,
-            `Do not whole-read again; act on these anchors or issue one narrower search.`
+            ev.contractComplete ? `All declared requirements are grounded; act on these anchors.` : `PARTIAL contract: execute the listed bounded recovery before relying on an unresolved requirement.`
           ].join("\n");
           const claimBudget = Math.max(120, outputBudgetChars - prefix.length - suffix.length - 2);
           output = `${prefix}
@@ -598257,13 +598496,19 @@ ${suffix}`.slice(0, outputBudgetChars);
           sourceBytes: stat9.size,
           createdAt: Date.now(),
           taskEpoch: this._taskEpoch,
-          requestId: branchRequestId
+          requestId: branchRequestId,
+          contractComplete: ev.contractComplete,
+          unresolvedRequirementIds: ev.unresolvedRequirementIds,
+          unresolvedRecoveries: ev.requirementCoverage.filter((coverage) => coverage.status === "unresolved").map((coverage) => `${coverage.id}: ${coverage.recovery ?? "narrow recovery required"}`)
         });
         this._branchEvidenceByPath.set(canonicalPath, {
           output,
           contentHash: fullHash,
           mtimeMs: stat9.mtimeMs,
-          taskEpoch: this._taskEpoch
+          taskEpoch: this._taskEpoch,
+          contractComplete: ev.contractComplete,
+          unresolvedRequirementIds: ev.unresolvedRequirementIds,
+          unresolvedRecoveries: ev.requirementCoverage.filter((coverage) => coverage.status === "unresolved").map((coverage) => `${coverage.id}: ${coverage.recovery ?? "narrow recovery required"}`)
         });
         if (explicitExtraction) {
           const evicted = this._evictInlineReadArtifacts(input.messages, canonicalPath, fullHash, "verified_branch_extract");
@@ -598306,7 +598551,9 @@ ${suffix}`.slice(0, outputBudgetChars);
             sourceRange: {
               startLine: startIndex + 1,
               endLine: startIndex + Math.max(1, selectedLines.length)
-            }
+            },
+            contractComplete: ev.contractComplete,
+            unresolvedRequirementIds: ev.unresolvedRequirementIds
           }
         };
       }
@@ -598337,7 +598584,10 @@ ${suffix}`.slice(0, outputBudgetChars);
           safeContextTokens: this.contextLimits().compactionThreshold
         });
         const explicitExtraction = this._fileReadMode(input.args) === "extract";
-        if (!decision2.branch && !explicitExtraction) {
+        const explicitFull = this._fileReadMode(input.args) === "full";
+        const inlineSmallRead = this._mustInlineSmallFileRead(Buffer.byteLength(input.result.output, "utf8"), lines.length);
+        const honorFull = explicitFull && this._mustHonorExplicitFullFileRead(Buffer.byteLength(input.result.output, "utf8"), lines.length, contextWindow);
+        if ((!decision2.branch || inlineSmallRead || honorFull) && !explicitExtraction) {
           if (reservedForThisCall === 0) {
             input.batchBudget.inlineTokens += decision2.projectedReadTokens;
             input.batchBudget.reservations.set(input.callId, decision2.projectedReadTokens);
@@ -598366,15 +598616,17 @@ ${suffix}`.slice(0, outputBudgetChars);
           backend: process.env["OMNIUS_DISABLE_BRANCH_EXTRACT"] === "1" ? void 0 : this._auxInferenceBackend(),
           timeoutMs: 3e4
         });
+        const requirementCoverage = renderBranchRequirementCoverage(ev);
         const output = [
           `[BRANCH-EXTRACT v2] path=${path16}`,
           `[VERIFIED_RUNTIME_FILE_READ] request_id=branch:${this._taskEpoch}:${input.callId} task_epoch=${this._taskEpoch}`,
           `routing=${explicitExtraction ? "manual" : "post-execution-failsafe"} reasons=${decision2.reasons.join(",") || "explicit_extract"} projected_read_tokens=${decision2.projectedReadTokens}`,
-          `[DISCOVERY CONTRACT] ${brief.request}`,
+          `[EXTRACTION CONTRACT] ${brief.request}`,
           `[CURATED SEGMENTS]`,
           ev.claim,
-          `unresolved=${ev.unresolvedRequirementIds.join(",") || "none"}`,
-          `provenance=content:${ev.provenance.contentHash} ranges:${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`
+          ...requirementCoverage,
+          `provenance=content:${ev.provenance.contentHash} ranges:${ev.provenance.exploredRanges.map((range) => `L${range.startLine}-L${range.endLine}`).join(",")}`,
+          ev.contractComplete ? "Coverage: complete; all declared requirements are grounded." : "Coverage: partial; unresolved requirements include a source-based recovery suggestion. This extract is advisory and does not restrict other tool calls."
         ].join("\n").slice(0, Math.max(800, decision2.fractionLimitTokens * 4));
         return {
           ...input.result,
@@ -598397,7 +598649,9 @@ ${suffix}`.slice(0, outputBudgetChars);
             sourceRange: {
               startLine: 1,
               endLine: Math.max(1, lines.length)
-            }
+            },
+            contractComplete: ev.contractComplete,
+            unresolvedRequirementIds: ev.unresolvedRequirementIds
           }
         };
       }
@@ -599082,6 +599336,7 @@ Respond with the assessment and take the selected evidence-backed action.`;
         this._completionLedger = null;
         this._focusTerminalLedgerRecorded = false;
         this._compileFixLoop = null;
+        this._pendingCompileDelegationCardId = null;
         this._declaredVerifierCommand = null;
         this._lastDeclaredVerifierOutput = null;
         this._lastDeclaredVerifierDiagnostics = [];
@@ -599826,7 +600081,6 @@ ${dynamicProjectContext}`
         let lastShellPivotTurn = -1;
         const recentToolResults = /* @__PURE__ */ new Map();
         const exactFileReadObservations = /* @__PURE__ */ new Map();
-        const exactReadEvidenceEpochs = /* @__PURE__ */ new Map();
         let fileMutationEpoch = 0;
         const dedupHitCount = /* @__PURE__ */ new Map();
         const noopedMemoryWriteFingerprints = /* @__PURE__ */ new Set();
@@ -599841,21 +600095,7 @@ ${dynamicProjectContext}`
           find_files: 10,
           grep_search: 12,
           camera_capture: 3
-        } : loopTier === "medium" ? {
-          web_search: 10,
-          web_fetch: 8,
-          list_directory: 18,
-          find_files: 14,
-          grep_search: 18,
-          camera_capture: 4
-        } : {
-          web_search: 20,
-          web_fetch: 15,
-          list_directory: 30,
-          find_files: 20,
-          grep_search: 30,
-          camera_capture: 5
-        };
+        } : {};
         for (const [tool, budget] of Object.entries(toolBudgets)) {
           toolCallBudget.set(tool, budget);
         }
@@ -601365,7 +601605,7 @@ Respond with EXACTLY this structure before your next tool call:
             }
           }
           const turnTier = this.options.modelTier ?? "large";
-          if (turn === 0 && !this.options.disableTodoPlanningNudges && this._todoWriteAvailable() && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && !this.options.disableTodoPlanningNudges && this._todoWriteAvailable() && turnTier === "small") {
             const goal = this._taskState.goal || "";
             const substantiveGoal = goal.replace(/\b(?:then\s+)?call\s+task_complete\b[^.?!;]*/gi, "").replace(/\b(?:observe|report|summarize|finish|complete)\b[^.?!;]*/gi, "");
             const wordCount2 = substantiveGoal.split(/\s+/).filter(Boolean).length;
@@ -601428,7 +601668,7 @@ Now call file_write with YOUR skeleton for this task.`
               });
             }
           }
-          if (turn === 0 && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && turnTier === "small") {
             const taskGoal = this._taskState.goal || "";
             const taskLower = taskGoal.toLowerCase();
             const taskTokens = new Set(taskLower.split(/\s+/).filter((w) => w.length > 2));
@@ -601471,7 +601711,7 @@ Now call file_write with YOUR skeleton for this task.`
 ${top.map((t2) => `- ${t2.name}: ${t2.desc}`).join("\n")}`);
             }
           }
-          if (turn === 0 && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && turnTier === "small") {
             const taskGoal = (this._taskState.goal || "").toLowerCase();
             const isSimpleTask = taskGoal.length < 150 && (taskGoal.match(/\band\b|\bthen\b/gi) || []).length < 3;
             const isSearchTask = /\bfind\b|\bsearch\b|\bwhere\b|\bwhich file\b|\bcontain/i.test(taskGoal);
@@ -601496,7 +601736,7 @@ ${top.map((t2) => `- ${t2.name}: ${t2.desc}`).join("\n")}`);
 ${hints.join("\n")}`);
             }
           }
-          if (turn === 0 && (turnTier === "small" || turnTier === "medium")) {
+          if (turn === 0 && turnTier === "small") {
             const taskGoal = this._taskState.goal || "";
             const hasMultiplePremises = (taskGoal.match(/\band\b|\bthen\b|\bif\b|\bbecause\b|\bsince\b|\bgiven\b/gi) || []).length >= 3;
             const hasConditionalLogic = (taskGoal.match(/\bif\b.*\bthen\b|\bwhen\b.*\bshould\b|\bassuming\b/gi) || []).length >= 1;
@@ -601568,7 +601808,7 @@ If you're stuck, try a completely different approach. Do NOT repeat what failed
             compacted = messages2;
           }
           this._retireStaleEvidenceInPlace(messages2, turn);
-          if (turn > 0 && this._toolEvents.length > 0) {
+          if (turn > 0 && this._toolEvents.length > 0 && ((this.options.modelTier ?? "large") === "small" || process.env["OMNIUS_ENABLE_LEGACY_CONTEXT_ENGINE_TRIM"] === "1")) {
             try {
               const _limits = this.contextLimits();
               const ceCompactInput = {
@@ -602100,7 +602340,7 @@ ${memoryLines.join("\n")}`
             "shell"
           ]);
           const selfConsistencyK = this.options.selfConsistencyK ?? 0;
-          const shouldVote = selfConsistencyK >= 2 && this._selfConsistencyVotes < 2 && (this.options.modelTier === "small" || this.options.modelTier === "medium") && firstToolCall && HIGH_STAKE_TOOLS.has(firstToolCall.name) && turn <= 3;
+          const shouldVote = selfConsistencyK >= 2 && this._selfConsistencyVotes < 2 && this.options.modelTier === "small" && firstToolCall && HIGH_STAKE_TOOLS.has(firstToolCall.name) && turn <= 3;
           if (shouldVote && firstToolCall) {
             try {
               const alternativeA = {
@@ -602157,7 +602397,7 @@ ${memoryLines.join("\n")}`
           const isEmptyResponse = !isThinkOnly && (!msg.content || !msg.content.trim()) && (!msg.toolCalls || msg.toolCalls.length === 0);
           if (isEmptyResponse) {
             consecutiveEmptyResponses++;
-            if (consecutiveEmptyResponses >= 2) {
+            if (consecutiveEmptyResponses >= 2 && (this.options.modelTier ?? "large") === "small") {
               this.emit({
                 type: "status",
                 content: `${consecutiveEmptyResponses} consecutive empty responses — injecting recovery nudge`,
@@ -602178,6 +602418,18 @@ ${memoryLines.join("\n")}`
             continue;
           }
           consecutiveEmptyResponses = 0;
+          const pendingCompileDelegation = this._steeringToolGate(turn) ? null : this._takePendingCompileDelegation(messages2, turn);
+          if (pendingCompileDelegation) {
+            const supersededCalls = msg.toolCalls?.length ?? 0;
+            msg.toolCalls = [pendingCompileDelegation];
+            msg.content = null;
+            this.emit({
+              type: "status",
+              content: `[FAN-OUT] automatic compile-fixer dispatch preempted ${supersededCalls} model-selected call${supersededCalls === 1 ? "" : "s"}; the parent will resume only after the isolated fold-back.`,
+              turn,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+          }
           if (msg.toolCalls && msg.toolCalls.length > 0) {
             consecutiveTextOnly = 0;
             consecutiveThinkOnly = 0;
@@ -602190,15 +602442,10 @@ ${memoryLines.join("\n")}`
               });
               continue;
             }
-            const _RESPONSE_CALL_CAPS = {
-              small: 2,
-              medium: 4,
-              large: 6
-            };
-            const _responseCap = _RESPONSE_CALL_CAPS[this.options.modelTier ?? "large"] ?? 6;
+            const _responseCap = (this.options.modelTier ?? "large") === "small" ? 2 : Number.POSITIVE_INFINITY;
             const _originalCallCount = msg.toolCalls.length;
             let _capDeferredCount = 0;
-            if (msg.toolCalls.length > _responseCap) {
+            if (Number.isFinite(_responseCap) && msg.toolCalls.length > _responseCap) {
               _capDeferredCount = msg.toolCalls.length - _responseCap;
               msg.toolCalls = msg.toolCalls.slice(0, _responseCap);
               this.emit({
@@ -602236,7 +602483,7 @@ ${memoryLines.join("\n")}`
                 role: "system",
                 content: [
                   `[BATCH CAPPED]`,
-                  `You emitted ${_originalCallCount} tool calls in one response. The orchestrator caps responses at ${_responseCap} for the ${this.options.modelTier ?? "large"} model tier.`,
+                  `You emitted ${_originalCallCount} tool calls in one response. The small-model safety profile caps responses at ${_responseCap}.`,
                   `The first ${_responseCap} executed; the remaining ${_capDeferredCount} were DROPPED.`,
                   ``,
                   `Best practice for this model tier: emit at most ${_responseCap} tool calls per turn.`,
@@ -602266,17 +602513,6 @@ ${memoryLines.join("\n")}`
                 return { tc, output: steeringGate, success: false };
               }
               this._markFirstSteeringAffectedAction(tc.name, this._currentSteeringTurn);
-              const resolvedReadBlock = this._rejectRepeatedResolvedRead(tc, messages2);
-              if (resolvedReadBlock) {
-                this.emit({
-                  type: "status",
-                  toolName: tc.name,
-                  content: "Repeated planned file_read rejected until evidence scope changes.",
-                  turn,
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                });
-                return { tc, output: resolvedReadBlock, success: true };
-              }
               const cohortKey = this.buildArgCohortKey(tc.name, tc.arguments);
               const cohort = this._argCohorts.get(cohortKey);
               if (cohort && cohort.failure >= 3 && cohort.success === 0) {
@@ -602366,7 +602602,8 @@ Corrective action: try a different approach first: read relevant files, adjust a
                 timestampMs: Date.now()
               });
               const _toolLogTailIdx = toolCallLog.length - 1;
-              if (tc.name !== "task_complete") {
+              const isDeclaredCompileVerifier = tc.name === "shell" && Boolean(this._compileFixLoop?.active) && commandReliablySatisfiesVerifyCommand(String((tc.arguments ?? {})["command"] ?? (tc.arguments ?? {})["cmd"] ?? "").trim(), this._compileFixLoop?.verifierCommand ?? "");
+              if (this._enforcesStrictActionBoundaries() && tc.name !== "task_complete" && !isDeclaredCompileVerifier) {
                 const doomHistory = toolCallLog.slice(-5).map((e2) => ({ tool: e2.name, args: e2.argsKey }));
                 doomHistory.push({
                   tool: tc.name,
@@ -602501,7 +602738,7 @@ Corrective action: try a different approach first: read relevant files, adjust a
                   detail: `attempted_tool=${tc.name}`
                 });
               }
-              if (this._reg61PerpetualGateActive && !focusDirectiveForEditPressure && !REG61_BYPASS_TOOLS.has(tc.name) && process.env["OMNIUS_DISABLE_REG61_COERCE"] !== "1") {
+              if (this._enforcesStrictActionBoundaries() && this._reg61PerpetualGateActive && !focusDirectiveForEditPressure && !REG61_BYPASS_TOOLS.has(tc.name) && process.env["OMNIUS_DISABLE_REG61_COERCE"] !== "1") {
                 const _dbgLoop = this._detectDebugLoop([
                   ...toolCallLog,
                   { name: tc.name, argsKey }
@@ -602596,7 +602833,7 @@ Corrective action: try a different approach first: read relevant files, adjust a
               const toolFingerprint = this._resolveReadCoverageFingerprint(tc.name, tc.arguments ?? {}, exactToolFingerprint);
               const repeatedMemoryWriteNoop = tc.name === "memory_write" && noopedMemoryWriteFingerprints.has(toolFingerprint);
               const repeatedProjectWriteNoop = this._isProjectEditTool(tc.name) && noopedProjectWriteFingerprints.has(toolFingerprint);
-              if (repeatedMemoryWriteNoop || repeatedProjectWriteNoop) {
+              if (this._enforcesStrictActionBoundaries() && (repeatedMemoryWriteNoop || repeatedProjectWriteNoop)) {
                 this.emit({
                   type: "tool_call",
                   toolName: tc.name,
@@ -602628,7 +602865,7 @@ Read the current file if needed, make a different concrete edit, or move to veri
                   systemGuidance: repeatNoopMsg
                 };
               }
-              const staleEditBlock = this.staleEditPreflightBlock(tc.name, tc.arguments ?? {});
+              const staleEditBlock = this._enforcesStrictActionBoundaries() ? this.staleEditPreflightBlock(tc.name, tc.arguments ?? {}) : null;
               if (staleEditBlock) {
                 const focusDecision2 = this._focusSupervisor?.evaluateProposedCall({
                   turn,
@@ -602693,7 +602930,7 @@ Read the current file if needed, make a different concrete edit, or move to veri
                   systemGuidance: staleBlockOutput
                 };
               }
-              const staleRewriteBlock = this.staleEditOverwritePreflightBlock(tc.name, tc.arguments ?? {}, turn);
+              const staleRewriteBlock = this._enforcesStrictActionBoundaries() ? this.staleEditOverwritePreflightBlock(tc.name, tc.arguments ?? {}, turn) : null;
               if (staleRewriteBlock) {
                 const focusDecision2 = this._focusSupervisor?.evaluateProposedCall({
                   turn,
@@ -602911,47 +603148,6 @@ Read the current file if needed, make a different concrete edit, or move to veri
                 adversaryRedundantSignal
               });
               let repeatShortCircuit = null;
-              const exactReadArgs = tc.arguments;
-              const exactReadPath = String(exactReadArgs?.["path"] ?? exactReadArgs?.["file"] ?? "");
-              const exactReadEvidence = exactReadEvidenceEpochs.get(toolFingerprint);
-              const exactReadEvidenceFresh = tc.name === "file_read" && exactReadPath.length > 0 && this._evidenceLedger.validateFreshness(this._normalizeEvidencePath(exactReadPath), this._absoluteToolPath(exactReadPath));
-              if (tc.name === "file_read" && exactReadEvidenceFresh && exactReadEvidence?.taskEpoch === this._taskEpoch && exactReadEvidence.mutationEpoch === fileMutationEpoch) {
-                const path16 = this._normalizeEvidencePath(exactReadPath);
-                const evidence = this._evidenceLedger.get(path16);
-                const rawCurated = this._branchEvidenceByPath.get(path16) ?? [...this._branchEvidenceByPath.entries()].find(([candidate]) => this._normalizeEvidencePath(candidate) === path16)?.[1];
-                const curated = rawCurated?.taskEpoch === this._taskEpoch ? rawCurated : void 0;
-                const curatedPayload = curated?.output ?? (evidence?.fidelity === "extract" && evidence.content.includes("[BRANCH-EXTRACT") ? evidence.content : null);
-                repeatShortCircuit = {
-                  success: true,
-                  output: curatedPayload ? this._rehydrateResolvedReadEvidence({
-                    fingerprint: toolFingerprint,
-                    canonicalPath: path16,
-                    contentHash: curated?.contentHash ?? evidence?.contentHash ?? "unknown",
-                    payload: curatedPayload,
-                    turn
-                  }) : [
-                    ...evidence?.fidelity === "extract" ? [
-                      "[REHYDRATED_FILE_EVIDENCE]",
-                      "source=active_context_frame fidelity=extract"
-                    ] : [],
-                    "[READ EVIDENCE REFERENCE]",
-                    `path=${path16 || "unknown"}`,
-                    `task_epoch=${this._taskEpoch}`,
-                    `freshness=${evidence?.stale ? "stale" : "fresh"}`,
-                    evidence?.contentHash ? `sha256=${evidence.contentHash}` : null,
-                    "Exact unchanged range was not re-executed. Use the existing evidence handle or request a newly uncovered range after identifying the missing fact."
-                  ].filter(Boolean).join("\n"),
-                  runtimeAuthored: true,
-                  noop: true
-                };
-                this.emit({
-                  type: "status",
-                  toolName: tc.name,
-                  content: `Exact unchanged file_read blocked before dispatch: ${path16}`,
-                  turn,
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                });
-              }
               if (criticDecision.decision === "guidance" && !repeatShortCircuit) {
                 dedupHitCount.set(toolFingerprint, criticDecision.hitNumber);
                 const _existingFp = recentToolResults.get(toolFingerprint);
@@ -602992,68 +603188,12 @@ Read the current file if needed, make a different concrete edit, or move to veri
                   });
                 }
                 const _repeatGateMax = this._resolveRepeatGateMax();
-                const isFailedShellRepeat = tc.name === "shell" && typeof _existingFp?.result === "string" && _existingFp.result.includes("status: failure") && (_existingFp.mutationEpoch ?? fileMutationEpoch) === fileMutationEpoch && !this._compileFixLoopRequiresLiveShell(String(tc.arguments?.["command"] ?? tc.arguments?.["cmd"] ?? "")) && !shellLikelyMutatesFilesystem;
-                const repeatGateEligible = isReadLike || tc.name === "memory_write" || isFailedShellRepeat;
+                const isFailedShellRepeat = this._enforcesStrictActionBoundaries() && tc.name === "shell" && typeof _existingFp?.result === "string" && _existingFp.result.includes("status: failure") && (_existingFp.mutationEpoch ?? fileMutationEpoch) === fileMutationEpoch && !this._compileFixLoopRequiresLiveShell(String(tc.arguments?.["command"] ?? tc.arguments?.["cmd"] ?? "")) && !shellLikelyMutatesFilesystem;
+                const repeatGateEligible = isReadLike && tc.name !== "file_read" || tc.name === "memory_write" || isFailedShellRepeat;
                 const suppressSuccessfulShellCacheGuidance = tc.name === "shell" && !isFailedShellRepeat;
                 if (suppressSuccessfulShellCacheGuidance)
                   criticGuidance = null;
-                let exactReadEvidenceFresh2 = true;
-                if (isReadLike && this._evidenceLedger) {
-                  const readArgs = tc.arguments;
-                  const readPath2 = String(readArgs?.["path"] ?? readArgs?.["file"] ?? "");
-                  if (readPath2) {
-                    const evidencePath = this._normalizeEvidencePath(readPath2);
-                    const wasFresh = evidencePath && this._evidenceLedger.validateFreshness(evidencePath, this._absoluteToolPath(readPath2));
-                    exactReadEvidenceFresh2 = Boolean(wasFresh);
-                    if (!wasFresh) {
-                      recentToolResults.delete(toolFingerprint);
-                      dedupHitCount.delete(toolFingerprint);
-                      this._recentFailures = (this._recentFailures ?? []).filter((f2) => f2.fingerprint !== toolFingerprint);
-                      repeatShortCircuit = null;
-                      this.emit({
-                        type: "status",
-                        content: `[EXTERNAL MUTATION] ${readPath2} mtime changed since last read — cache invalidated, fresh read allowed`,
-                        timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                      });
-                    }
-                  }
-                }
-                const exactReadEvidence2 = exactReadEvidenceEpochs.get(toolFingerprint);
-                const exactFileReadReference = tc.name === "file_read" && exactReadEvidenceFresh2 && exactReadEvidence2?.taskEpoch === this._taskEpoch && exactReadEvidence2.mutationEpoch === fileMutationEpoch;
-                if (exactFileReadReference) {
-                  const path16 = this._normalizeEvidencePath(String(tc.arguments?.["path"] ?? tc.arguments?.["file"] ?? ""));
-                  const evidence = this._evidenceLedger?.get(path16);
-                  const rawCurated = this._branchEvidenceByPath.get(path16) ?? [...this._branchEvidenceByPath.entries()].find(([candidate]) => this._normalizeEvidencePath(candidate) === path16)?.[1];
-                  const curated = rawCurated?.taskEpoch === this._taskEpoch ? rawCurated : void 0;
-                  const curatedPayload = curated?.output ?? (evidence?.fidelity === "extract" && evidence.content.includes("[BRANCH-EXTRACT") ? evidence.content : null);
-                  repeatShortCircuit = {
-                    success: true,
-                    // Curated branch output is the bounded authoritative payload
-                    // for this source version. Rehydrate it instead of replacing
-                    // it with a pointer; exact/overlap suppression must not force
-                    // the model to reread a large source merely to recover facts.
-                    output: curatedPayload ? this._rehydrateResolvedReadEvidence({
-                      fingerprint: toolFingerprint,
-                      canonicalPath: path16,
-                      contentHash: curated?.contentHash ?? evidence?.contentHash ?? "unknown",
-                      payload: curatedPayload,
-                      turn
-                    }) : [
-                      ...evidence?.fidelity === "extract" ? [
-                        "[REHYDRATED_FILE_EVIDENCE]",
-                        "source=active_context_frame fidelity=extract"
-                      ] : [],
-                      "[READ EVIDENCE REFERENCE]",
-                      `path=${path16 || "unknown"}`,
-                      `task_epoch=${this._taskEpoch}`,
-                      `freshness=${evidence?.stale ? "stale" : "fresh"}`,
-                      evidence?.contentHash ? `sha256=${evidence.contentHash}` : null,
-                      "Exact unchanged range was not re-executed. Use the existing evidence handle or request a newly uncovered range after identifying the missing fact."
-                    ].filter(Boolean).join("\n"),
-                    runtimeAuthored: true,
-                    noop: true
-                  };
-                } else if (repeatGateEligible && _existingFp !== void 0 && _repeatGateMax > 0) {
+                if (repeatGateEligible && _existingFp !== void 0 && _repeatGateMax > 0) {
                   const _rehydrateArgs = tc.arguments;
                   const _rehydratePath = String(_rehydrateArgs?.["path"] ?? _rehydrateArgs?.["file"] ?? "");
                   const _visibleViaEvidenceFrame = _rehydratePath.length > 0 && (this._evidenceLedger?.renderedFullInLastBlock(this._normalizeEvidencePath(_rehydratePath)) ?? false);
@@ -603119,6 +603259,15 @@ ${cachedResult}`,
                   timestamp: (/* @__PURE__ */ new Date()).toISOString()
                 });
               }
+              if (!repeatShortCircuit && this.options.subAgent && tc.name === "workboard_complete_card" && String((tc.arguments ?? {})["outcome"] ?? "completed") !== "request_changes") {
+                repeatShortCircuit = {
+                  success: false,
+                  output: "",
+                  error: "[PARENT_COMPLETION_AUTHORITY] A sub-agent may attach action/verifier evidence or request changes, but only its parent/coordinator may complete or verify a workboard card.",
+                  runtimeAuthored: true,
+                  noop: true
+                };
+              }
               const focusCachedEntry = recentToolResults.get(toolFingerprint);
               const focusDuplicateHits = criticDecision.decision === "guidance" ? dedupHitCount.get(toolFingerprint) ?? criticDecision.hitNumber : dedupHitCount.get(toolFingerprint) ?? 0;
               const usesAuthoritativeTargetEvidence = this._toolCallUsesFreshFileReadEvidence(tc.name, tc.arguments ?? {});
@@ -603138,8 +603287,9 @@ ${cachedResult}`,
                 taskEpoch: this._taskEpoch
               });
               if (focusDecision && focusDecision.kind !== "pass") {
+                const advisoryOnlyForLargeModel = focusDecision.kind === "block_tool_call" && !this._enforcesStrictActionBoundaries() && tc.name !== "task_complete";
                 this._emitFocusSupervisorEvent({
-                  decision: focusDecision.kind,
+                  decision: advisoryOnlyForLargeModel ? "inject_guidance" : focusDecision.kind,
                   state: focusDecision.state,
                   directiveId: focusDecision.directive.id,
                   reason: focusDecision.directive.reason,
@@ -603147,22 +603297,26 @@ ${cachedResult}`,
                   blockedTool: focusDecision.kind === "block_tool_call" ? tc.name : void 0,
                   turn
                 });
-                this._maybeMarkFocusTerminalIncomplete({
-                  decision: focusDecision,
-                  blockedTool: focusDecision.kind === "block_tool_call" ? tc.name : void 0,
-                  turn
-                });
-                if (focusDecision.kind === "block_tool_call" && this._maybeAutoDelegate(tc, focusDecision.directive, messages2, turn)) {
-                } else if (focusDecision.kind === "inject_guidance") {
-                  void focusDecision.message;
-                } else if (!repeatShortCircuit) {
-                  repeatShortCircuit = {
-                    success: focusDecision.success,
-                    output: focusDecision.message,
-                    error: focusDecision.success ? void 0 : focusDecision.message,
-                    runtimeAuthored: true,
-                    noop: true
-                  };
+                if (advisoryOnlyForLargeModel) {
+                  pushSoftInjection("system", `[FOCUS ADVISORY — large-model freedom] ${focusDecision.message}`);
+                } else {
+                  this._maybeMarkFocusTerminalIncomplete({
+                    decision: focusDecision,
+                    blockedTool: focusDecision.kind === "block_tool_call" ? tc.name : void 0,
+                    turn
+                  });
+                  if (focusDecision.kind === "block_tool_call" && this._maybeAutoDelegate(tc, focusDecision.directive, messages2, turn)) {
+                  } else if (focusDecision.kind === "inject_guidance") {
+                    void focusDecision.message;
+                  } else if (!repeatShortCircuit) {
+                    repeatShortCircuit = {
+                      success: focusDecision.success,
+                      output: focusDecision.message,
+                      error: focusDecision.success ? void 0 : focusDecision.message,
+                      runtimeAuthored: true,
+                      noop: true
+                    };
+                  }
                 }
               }
               const compileLoopPreflight = !repeatShortCircuit ? this._compileFixLoopPreflightBlock(tc.name, tc.arguments ?? {}, turn, shellLikelyMutatesFilesystem) : null;
@@ -603228,7 +603382,9 @@ ${cachedResult}`,
                   tc.arguments = this._normalizeToolArgsForExecution(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
                   tc.arguments = this._autoDeriveDelegationMutationScope(resolvedTool?.name ?? tc.name, tc.arguments ?? {}, turn);
                   tc.arguments = await this._enrichDelegationToolArgs(resolvedTool?.name ?? tc.name, tc.arguments ?? {}, messages2, turn);
-                  validationError = this._validateFileWriteOverwriteContract(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
+                  validationError = this._partialBranchExplorationMutationBlock(resolvedTool?.name ?? tc.name, tc.arguments ?? {}, turn);
+                  if (!validationError)
+                    validationError = this._validateFileWriteOverwriteContract(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
                 }
                 if (!validationError) {
                   validationError = this._validateFreshExpectedHashesForEdit(resolvedTool?.name ?? tc.name, tc.arguments ?? {});
@@ -603367,7 +603523,9 @@ ${cachedResult}`,
                                 exactFileReadObservations.set(exactReadKey, currentRead);
                                 const canonicalPayload = this._canonicalReadEvidencePayload(currentRead.canonicalPath, currentRead.contentHash);
                                 if (canonicalPayload) {
-                                  const rehydrated = this._rehydrateResolvedReadEvidence({
+                                  const evidence = this._evidenceLedger.get(currentRead.canonicalPath);
+                                  const fullSource = evidence?.fidelity === "full" && evidence.content === canonicalPayload;
+                                  const delivered = fullSource ? canonicalPayload : this._rehydrateResolvedReadEvidence({
                                     fingerprint: exactReadKey,
                                     canonicalPath: currentRead.canonicalPath,
                                     contentHash: currentRead.contentHash,
@@ -603376,8 +603534,8 @@ ${cachedResult}`,
                                   });
                                   branchEvidenceResult = {
                                     success: true,
-                                    output: rehydrated,
-                                    llmContent: rehydrated,
+                                    output: delivered,
+                                    llmContent: delivered,
                                     beforeHash: currentRead.contentHash,
                                     runtimeAuthored: true,
                                     noop: true,
@@ -603390,44 +603548,19 @@ ${cachedResult}`,
                                   this.emit({
                                     type: "status",
                                     toolName: normalizedDispatchName,
-                                    content: `Exact unchanged file_read rehydrated: ${currentRead.path} sha256=${currentRead.contentHash.slice(0, 12)} fingerprint_state=resolved_from_cache`,
+                                    content: fullSource ? `Exact unchanged file_read served as canonical full source: ${currentRead.path} sha256=${currentRead.contentHash.slice(0, 12)}` : `Exact unchanged file_read reused complete branch evidence: ${currentRead.path} sha256=${currentRead.contentHash.slice(0, 12)}`,
                                     turn,
                                     timestamp: (/* @__PURE__ */ new Date()).toISOString()
                                   });
                                 } else {
-                                  if (this._deterministicNarrowReadFallbacks.has(exactReadKey)) {
-                                    const fallbackBlocked = [
-                                      "[REPEATED_NARROW_READ_REJECTED]",
-                                      `path=${currentRead.path}`,
-                                      "No canonical payload was produced by the allowed narrow reread. Change scope with a new range or symbol query; do not repeat identical arguments."
-                                    ].join("\n");
-                                    branchEvidenceResult = {
-                                      success: true,
-                                      output: fallbackBlocked,
-                                      llmContent: fallbackBlocked,
-                                      beforeHash: currentRead.contentHash,
-                                      runtimeAuthored: true,
-                                      noop: true
-                                    };
-                                  } else {
-                                    this._deterministicNarrowReadFallbacks.add(exactReadKey);
-                                    const previousOffset = tc.arguments["offset"];
-                                    const previousLimit = tc.arguments["limit"];
-                                    Object.assign(finalArgs, {
-                                      offset: typeof previousOffset === "number" && Number.isFinite(previousOffset) ? Math.max(1, Math.floor(previousOffset)) : 1,
-                                      limit: typeof previousLimit === "number" && Number.isFinite(previousLimit) ? Math.max(1, Math.min(160, Math.floor(previousLimit))) : 160
-                                    });
-                                    tc.arguments = finalArgs;
-                                    this._deterministicNarrowReadFallbacks.add(this._buildToolFingerprint("file_read", tc.arguments));
-                                    exactFileReadObservations.delete(exactReadKey);
-                                    this.emit({
-                                      type: "status",
-                                      toolName: normalizedDispatchName,
-                                      content: `Exact read cache lacked canonical payload; allowing one deterministic narrow reread: ${currentRead.path} offset=${tc.arguments["offset"]} limit=${tc.arguments["limit"]}`,
-                                      turn,
-                                      timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                                    });
-                                  }
+                                  exactFileReadObservations.delete(exactReadKey);
+                                  this.emit({
+                                    type: "status",
+                                    toolName: normalizedDispatchName,
+                                    content: `Exact read cache lacks model-visible source; executing requested read: ${currentRead.path}`,
+                                    turn,
+                                    timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                                  });
                                 }
                               } else {
                                 exactFileReadObservations.delete(exactReadKey);
@@ -603697,7 +603830,7 @@ ${cachedResult}`,
                       fileVersion: this._worldFacts.files.get(p2)?.writeCount ?? 0,
                       mtimeMs: this._statMtimeMsForToolPath(p2),
                       turn,
-                      fidelity: result.runtimeAuthored === true && result.output.startsWith("[BRANCH-EXTRACT") ? "extract" : void 0
+                      fidelity: result.runtimeAuthored === true && result.output.startsWith("[BRANCH-EXTRACT") ? "extract" : this._fileReadMode(tc.arguments) === "full" && this._mustHonorExplicitFullFileRead(Buffer.byteLength(result.output, "utf8"), result.output.split("\n").length, this._branchRoutingContextWindow()) ? "full" : void 0
                     });
                     if (result.runtimeAuthored !== true && this._fileReadMode(tc.arguments) !== "extract" && typeof result.beforeHash === "string") {
                       this._inlineReadArtifacts.set(tc.id, {
@@ -603717,10 +603850,6 @@ ${cachedResult}`,
                         this._inlineReadArtifacts.delete(oldest);
                       }
                     }
-                    exactReadEvidenceEpochs.set(toolFingerprint, {
-                      taskEpoch: this._taskEpoch,
-                      mutationEpoch: fileMutationEpoch
-                    });
                     this._registerReadCoverage("file_read", tc.arguments, toolFingerprint);
                   }
                   if (this._fileSummaryStore && result.success && result.output && result.output.length > 100) {
@@ -604643,7 +604772,7 @@ ${bookkeepingGuidance}`;
 
 ${bookkeepingGuidance}` : bookkeepingGuidance;
               }
-              if (!result.success && (this.options.modelTier === "small" || this.options.modelTier === "medium")) {
+              if (!result.success && this.options.modelTier === "small") {
                 const recovery = this.buildRecoveryGuidance(tc.name, result.error ?? "", tc.arguments);
                 if (recovery)
                   output += "\n\n" + recovery;
@@ -605094,7 +605223,7 @@ ${delegateDir}` : delegateDir;
                   sameToolFailStreak = 1;
                 }
                 const consecutiveSameTool = Math.max(sameToolFailStreak, this._taskState.failedApproaches.slice(-2).filter((f2) => f2.startsWith(`${tc.name}(`)).length);
-                if (sameToolFailStreak >= 5 && (this.options.modelTier === "small" || this.options.modelTier === "medium")) {
+                if (sameToolFailStreak >= 5 && this.options.modelTier === "small") {
                   this.enqueueRuntimeGuidance(`[BRANCH — evaluate alternatives before acting]
 Tool "${tc.name}" has failed ${sameToolFailStreak} times. STOP and enumerate:
 Option A: refresh the exact evidence or correct the current tool arguments
@@ -605104,7 +605233,7 @@ Pick the BEST option and explain why, then execute it. Do NOT retry ${tc.name} w
                   sameToolFailStreak = 0;
                   sameToolFailName = null;
                 }
-                if (consecutiveSameTool >= 2 && (this.options.modelTier === "small" || this.options.modelTier === "medium")) {
+                if (consecutiveSameTool >= 2 && this.options.modelTier === "small") {
                   this.enqueueRuntimeGuidance(`[PIVOT REQUIRED] You have failed ${consecutiveSameTool + 1} times in a row with ${tc.name}. Your current approach is not working. You MUST try something fundamentally different:
 - If file_edit/file_patch keeps failing: re-read the implicated current range, then correct the exact text/range/hash or inspect git diff
 - If shell keeps failing: try a different command or check prerequisites
@@ -605151,7 +605280,7 @@ Do NOT retry ${tc.name} with similar arguments and do NOT use file_write to esca
                   } catch {
                   }
                 }
-                if (isModify && (turnTier === "small" || turnTier === "medium")) {
+                if (isModify && turnTier === "small") {
                   const modCount = this._taskState.modifiedFiles.size;
                   if (modCount >= 2 && modCount % 2 === 0) {
                     this.enqueueRuntimeGuidance(`[Test reminder] You've modified ${modCount} files. Run relevant tests NOW to verify: shell(command="npm test") or the project's test command. Fix any failures before continuing.`);
@@ -607452,6 +607581,17 @@ ${marker}` : marker);
         if (toolName === "file_read") {
           const path17 = this.extractPrimaryToolPath(args);
           const evidencePath = path17 ? this._normalizeEvidencePath(path17) : "";
+          const explicitBoundedFullRead = this._fileReadMode(args ?? {}) === "full" && this._mustHonorExplicitFullFileRead(Buffer.byteLength(displayOutput, "utf8"), this.countTextLines(displayOutput), this._branchRoutingContextWindow());
+          if (explicitBoundedFullRead) {
+            return [
+              "[ADMITTED_FILE_READ v1]",
+              `path=${path17 || "unknown"}`,
+              "delivery=explicit_full_source",
+              "The requested bounded full source is present below. It may be reread after a filesystem change or when a new range is needed.",
+              "",
+              output
+            ].join("\n");
+          }
           const admitted = [...this._inlineReadArtifacts.values()].find((artifact) => artifact.path === evidencePath && output.includes(`sha256=${artifact.contentHash}`));
           if (admitted) {
             return [
@@ -607459,7 +607599,7 @@ ${marker}` : marker);
               `path=${admitted.path}`,
               `sha256=${admitted.contentHash}`,
               "delivery=full_body_once",
-              'The full selected source body below is canonical for this turn. To replace it with compact verified anchors, call file_read again with mode="extract" and purpose="the exact fact needed". Do not use shell/cat as a read workaround.',
+              'The full selected source body below is canonical for this turn. To replace it with compact verified anchors, call file_read again with mode="extract" and purpose="the exact fact needed".',
               "",
               output
             ].join("\n");
@@ -607491,7 +607631,7 @@ ${marker}` : marker);
         ].filter(Boolean).join("\n"));
       }
       shouldBypassDiscoveryCompaction(output) {
-        return output.includes("[IMAGE_BASE64:") || output.includes("[ADMITTED_FILE_READ") || /^\[BRANCH-EXTRACT(?:\s+v\d+)?\]/m.test(output) || output.includes("[REPEAT GATE - cached evidence not re-sent]") || output.includes("[REPEATED_READ_REJECTED]") || output.includes("[REPEATED_NARROW_READ_REJECTED]") || output.includes("[CACHED READ — content unchanged") || output.includes("[REHYDRATED FROM CACHE") || output.includes("[Tool output truncated") || output.includes(TRIAGE_ENVELOPE_MARKER);
+        return output.includes("[IMAGE_BASE64:") || output.includes("[ADMITTED_FILE_READ") || /^\[BRANCH-EXTRACT(?:\s+v\d+)?\]/m.test(output) || output.includes("[REPEAT GATE - cached evidence not re-sent]") || output.includes("[CACHED READ — content unchanged") || output.includes("[REHYDRATED FROM CACHE") || output.includes("[Tool output truncated") || output.includes(TRIAGE_ENVELOPE_MARKER);
       }
       countTextLines(text2) {
         if (!text2)
@@ -607927,6 +608067,8 @@ ${marker}` : marker);
       _validateFileWriteOverwriteContract(toolName, args) {
         if (toolName !== "file_write")
           return null;
+        if (!this._enforcesStrictActionBoundaries())
+          return null;
         if (process.env["OMNIUS_ALLOW_UNVERIFIED_FILE_WRITE_OVERWRITE"] === "1") {
           return null;
         }
@@ -607943,7 +608085,7 @@ ${marker}` : marker);
         });
         if (active) {
           const tier = this.options.modelTier ?? "large";
-          if (tier !== "small" && tier !== "medium")
+          if (tier !== "small")
             return null;
           return [
             `[EDIT REPAIR LOCK] A recent narrow edit to ${active.path} failed because the model-visible target diverged from disk (${active.errorKind}; latest_file_hash=${active.latestFileHash || "unknown"}).`,
@@ -607989,7 +608131,40 @@ ${marker}` : marker);
         }
         return null;
       }
+      /**
+       * Partial branch coverage is useful evidence, never mutation authority and
+       * never a tool admission gate.  The parent model may decide that its current
+       * evidence is sufficient, request more branch work, or perform a narrow edit
+       * validated by the normal file hash contract.  Blocking here caused file_edit
+       * calls to be mislabeled as stale hashes and stranded real exploration.
+       */
+      _partialBranchExplorationMutationBlock(toolName, args, turn) {
+        const delegatedMutation = (toolName === "sub_agent" || toolName === "agent") && (args["mutation_role"] === "mutation_worker" || args["subagent_type"] === "fixer");
+        if (!this._isProjectEditTool(toolName) && !delegatedMutation)
+          return null;
+        const targetPaths = this._isProjectEditTool(toolName) ? this._extractToolTargetPaths(toolName, args) : [
+          ...Array.isArray(args["owned_files"]) ? args["owned_files"] : [],
+          ...Array.isArray(args["relevant_files"]) ? args["relevant_files"] : []
+        ].filter((value2) => typeof value2 === "string");
+        for (const target of targetPaths) {
+          const normalizedTarget = this._normalizeEvidencePath(target);
+          const partial = [...this._branchEvidenceByPath.entries()].find(([path17, node2]) => node2.taskEpoch === this._taskEpoch && !node2.contractComplete && this._pathsOverlapForVerifier(normalizedTarget, path17));
+          if (!partial)
+            continue;
+          const [path16, node] = partial;
+          this.emit({
+            type: "status",
+            content: `branch_discovery_partial_advisory: ${toolName} is proceeding with ${path16}; unresolved=${node.unresolvedRequirementIds.join(",") || "unknown"}; coverage is visible evidence, not an admission block`,
+            turn,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
+          return null;
+        }
+        return null;
+      }
       _validateFreshExpectedHashesForEdit(toolName, args) {
+        if (!this._enforcesStrictActionBoundaries())
+          return null;
         if (process.env["OMNIUS_ALLOW_UNVERIFIED_OLD_STRING_EDIT"] === "1") {
           return null;
         }
@@ -608150,6 +608325,8 @@ ${marker}` : marker);
         ].join("\n");
       }
       editReversalPreflightBlock(toolName, args, turn) {
+        if (!this._enforcesStrictActionBoundaries())
+          return null;
         if (process.env["OMNIUS_ALLOW_BLIND_EDIT_REVERSAL"] === "1")
           return null;
         const replacements = this.extractReplacementEdits(toolName, args);
@@ -608345,6 +608522,10 @@ ${marker}` : marker);
           return this.wrapToolOutputForModel(toolName, `Error: ${result.error || "unknown error"}
 ${errOutput}`);
         }
+        const explicitBoundedFullRead = toolName === "file_read" && this._fileReadMode(args) === "full" && this._mustHonorExplicitFullFileRead(Buffer.byteLength(modelContent, "utf8"), modelContent.split("\n").length, this._branchRoutingContextWindow());
+        if (explicitBoundedFullRead) {
+          return this.wrapToolOutputForModel(toolName, modelContent);
+        }
         if (modelContent.length <= maxLen) {
           return this.wrapToolOutputForModel(toolName, modelContent);
         }
@@ -608806,7 +608987,50 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
        *
        * Returns true if it rewrote `tc` (the caller must let it EXECUTE, not noop it).
        */
+      _takePendingCompileDelegation(messages2, turn) {
+        const cardId = this._pendingCompileDelegationCardId;
+        if (!cardId || !this._enforcesStrictActionBoundaries() || this.options.subAgent || !this.tools.has("sub_agent")) {
+          return null;
+        }
+        const state = this._compileFixLoop;
+        const card = state?.cards.find((candidate) => candidate.id === cardId && (candidate.status === "open" || candidate.status === "assigned" || candidate.status === "needs_changes"));
+        if (!card) {
+          this._pendingCompileDelegationCardId = null;
+          return null;
+        }
+        this._pendingCompileDelegationCardId = null;
+        card.status = "assigned";
+        card.assignedTurn = turn;
+        this._mirrorCompileFixCardAssigned(card, turn);
+        const contract = buildMutationWorkerContractForCard(card);
+        const prompt = buildCuratedFixerPrompt({
+          card,
+          sourceExcerpt: this._compileFixSourceExcerpt(card.diagnostic.file, card.diagnostic.line),
+          declarationExcerpt: card.declarationFiles.length > 0 ? this._compileFixSourceExcerpt(card.declarationFiles[0], void 0) : void 0
+        });
+        const parentTok = estimateMessagesTokens2(messages2);
+        this.emit({
+          type: "status",
+          content: `[FAN-OUT] compile verifier produced ${card.id}; orchestrator is launching one isolated fixer (main ~${parentTok.toLocaleString()} tok -> curated worker frame: ${card.ownedFiles.join(", ") || "diagnostic target"}).`,
+          turn,
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        });
+        return {
+          id: `auto-compile-${card.id}-${turn}`,
+          name: "sub_agent",
+          arguments: {
+            subagent_type: "fixer",
+            description: `fix ${card.id}`,
+            prompt,
+            relevant_files: card.ownedFiles,
+            exit_criterion: "diagnostic fingerprint disappeared after verifier rerun",
+            ...contract
+          }
+        };
+      }
       _maybeAutoDelegate(tc, directive, messages2, turn) {
+        if (!this._enforcesStrictActionBoundaries())
+          return false;
         if (directive.requiredNextAction !== "delegate_isolated_fix")
           return false;
         if (tc.name === "sub_agent" || tc.name === "agent")
@@ -608904,11 +609128,20 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
       _retireStaleEvidenceInPlace(messages2, currentTurn) {
         if (process.env["OMNIUS_DISABLE_EVIDENCE_RETIREMENT"] === "1")
           return;
+        const tier = this.options.modelTier ?? "large";
+        const forceRetirement = process.env["OMNIUS_FORCE_EVIDENCE_RETIREMENT"] === "1";
+        const residentTokens = estimateMessagesTokens2(messages2);
+        const pressureThreshold = Math.floor(this.contextLimits().compactionThreshold * 0.9);
+        if (tier !== "small" && !forceRetirement && residentTokens < pressureThreshold) {
+          return;
+        }
         const keepRecent = Math.max(0, Number(process.env["OMNIUS_EVIDENCE_KEEP_TURNS"] ?? 2));
         const minChars = Math.max(512, Number(process.env["OMNIUS_EVIDENCE_MIN_CHARS"] ?? 2e3));
         const staleBefore = currentTurn - keepRecent;
         if (staleBefore <= 0)
           return;
+        const liveToolCallIds = new Set(this._recentToolOutcomes.slice(-4).map((outcome) => outcome.toolCallId).filter((id2) => Boolean(id2)));
+        const unresolvedBranchPaths = [...this._branchEvidenceByPath.entries()].filter(([, node]) => node.taskEpoch === this._taskEpoch && !node.contractComplete).map(([path16]) => this._normalizeEvidencePath(path16)).filter(Boolean);
         let turnCount = 0;
         let retired = 0;
         let reclaimed = 0;
@@ -608922,9 +609155,20 @@ Actions: (1) list_directory on the parent directory to see what's there, (2) Che
           const content = typeof msg.content === "string" ? msg.content : "";
           if (!content)
             continue;
+          if (msg.role === "tool" && liveToolCallIds.has(msg.tool_call_id ?? "")) {
+            continue;
+          }
           if (content.startsWith("[RETIRED EVIDENCE") || content.startsWith("[Todo context archived") || content.startsWith("[Tool result cleared")) {
             continue;
           }
+          if (isRecoveryCriticalRuntimeOutcome(content))
+            continue;
+          if (unresolvedBranchPaths.some((path16) => content.includes(path16)))
+            continue;
+          const fileContextPath = /\[FILE CONTEXT\s*\|\s*([^|\n]+)/.exec(content)?.[1]?.trim();
+          if (fileContextPath && !this._evidenceLedger.hasFresh(this._normalizeEvidencePath(fileContextPath))) {
+            continue;
+          }
           const rm4 = { role: msg.role, content };
           if (!isRetirableEvidence(rm4, minChars))
             continue;
@@ -609463,6 +609707,23 @@ Describe what you see and integrate this into your current approach.` : "[User s
         if (!force && estimatedTokens < limits.compactionThreshold) {
           return messages2;
         }
+        if (!force) {
+          const partialBranchActive = [...this._branchEvidenceByPath.values()].some((node) => node.taskEpoch === this._taskEpoch && !node.contractComplete);
+          const decision2 = decideCompaction({
+            pressureRatio: estimatedTokens / Math.max(1, limits.compactionThreshold),
+            lastSubtaskResolved: this._recentToolOutcomes.at(-1)?.succeeded === true,
+            midDerivation: partialBranchActive,
+            convergenceStalled: this._compileFixLoop?.verifierStasisBlocked === true
+          });
+          if (!decision2.compact) {
+            this.emit({
+              type: "status",
+              content: `[semantic-compaction] held: ${decision2.reason}`,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
+            return messages2;
+          }
+        }
         if (force && messages2.length < 5)
           return messages2;
         let keepRecent = limits.keepRecent;
@@ -609637,13 +609898,42 @@ Describe what you see and integrate this into your current approach.` : "[User s
         const postChars = combinedSummary.length + recent.reduce((s2, m2) => s2 + _estimateMsgChars(m2), 0) + head.reduce((s2, m2) => s2 + _estimateMsgChars(m2), 0);
         const postTokens = Math.ceil(postChars / 4);
         const savedTokens = preTokens - postTokens;
+        const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+        const removedMessages = messages2.slice(headEndIdx, recentStart).map((message2, offset) => {
+          const content = typeof message2.content === "string" ? message2.content : JSON.stringify(message2.content);
+          const isLegacy = this._isLegacyControlMessage(message2);
+          const isPriorSummary = message2.role === "system" && typeof message2.content === "string" && message2.content.startsWith("[Context compacted");
+          return {
+            index: headEndIdx + offset,
+            role: message2.role,
+            content,
+            chars: content.length,
+            reason: isLegacy ? "legacy_control_retired" : isPriorSummary ? "prior_summary_folded" : "history_summarized",
+            ...message2.tool_call_id ? { toolCallId: message2.tool_call_id } : {}
+          };
+        });
+        const compactionAudit = {
+          id: `cmp-${this.currentArtifactRunId()}-${Date.now().toString(36)}`,
+          runId: this.currentArtifactRunId(),
+          sessionId: this._sessionId,
+          timestamp,
+          strategy,
+          manual: force,
+          beforeTokens: preTokens,
+          afterTokens: postTokens,
+          savedTokens,
+          retainedMessages: head.length + recent.length + 1,
+          removedMessages,
+          summary: combinedSummary
+        };
         this.emit({
           type: "compaction",
-          content: `Compacted ${middle.length} messages${strategyLabel}${forceLabel}${previousSummary ? " (progressive)" : ""} | ~${preTokens.toLocaleString()} → ~${postTokens.toLocaleString()} tokens (saved ~${savedTokens.toLocaleString()})`,
-          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          content: `Compacted ${removedMessages.length} messages${strategyLabel}${forceLabel}${previousSummary ? " (progressive)" : ""} | ~${preTokens.toLocaleString()} → ~${postTokens.toLocaleString()} tokens (saved ~${savedTokens.toLocaleString()})`,
+          timestamp,
+          compaction: compactionAudit
         });
         const tier = this.options.modelTier ?? "large";
-        if (tier === "small" || tier === "medium") {
+        if (tier === "small") {
           this._taskState.nextAction = this.inferNextAction(recent);
         }
         const manifestText = (() => {
@@ -609745,14 +610035,14 @@ ${postCompactRestore.join("\n")}`);
         const goalReminder = this._taskState.goal ? `
 
 **YOUR ACTIVE TASK:** ${this._taskState.goal}` : "";
-        const nextActionDirective = (tier === "small" || tier === "medium") && this._taskState.nextAction ? `
+        const nextActionDirective = tier === "small" && this._taskState.nextAction ? `
 
 **DO THIS NEXT:** ${this._taskState.nextAction}` : "";
         const toolCallingReminder = tier === "small" ? `
 
 **IMPORTANT:** You MUST invoke tools through the function calling interface. Do NOT write tool names as text, markdown, or code blocks — that does nothing. Call tools using the structured tool/function API.` : "";
         const readFilesList = Array.from(this._fileRegistry.entries()).filter(([, e2]) => e2.accessCount > 0).map(([p2]) => p2).slice(0, 10);
-        const fileFreshnessReminder = (tier === "small" || tier === "medium") && readFilesList.length > 0 ? `
+        const fileFreshnessReminder = tier === "small" && readFilesList.length > 0 ? `
 
 **PREVIOUSLY OBSERVED FILES:** ${readFilesList.join(", ")}. Treat restored or summarized text as orientation, not guaranteed current bytes. Before editing, make a narrow live read when the body is elided/truncated, the file may have changed, a hash or edit anchor is stale, or exact current text is otherwise required. Avoid only redundant reads when the latest complete authoritative content is still visible and unchanged.` : "";
         const ephemeralSkillPackReminder = this._ephemeralSkillPackContext ? `
@@ -609820,6 +610110,21 @@ ${telegramPersonaHead}` : stripped
         const fileRecoveryBudget = Math.floor((this._branchRoutingContextWindow() || 32768) * 0.15);
         const maxRecoverFiles = tier === "small" ? 3 : tier === "medium" ? 4 : 5;
         const recoveredFiles = [];
+        const alreadyVisiblePaths = /* @__PURE__ */ new Set();
+        for (const message2 of result) {
+          if (typeof message2.content !== "string")
+            continue;
+          const content = message2.content;
+          const matches = [
+            ...content.matchAll(/(?:^|\n)path=([^\n]+)/g),
+            ...content.matchAll(/<recovered-(?:branch-evidence|file-reference|file) path="([^"]+)"/g)
+          ];
+          for (const match of matches) {
+            const path16 = String(match[1] ?? "").trim();
+            if (path16)
+              alreadyVisiblePaths.add(this._normalizeEvidencePath(path16));
+          }
+        }
         if (this._fileRegistry.size > 0) {
           const entries = Array.from(this._fileRegistry.entries()).sort((a2, b) => {
             if (a2[1].modified && !b[1].modified)
@@ -609830,18 +610135,36 @@ ${telegramPersonaHead}` : stripped
           }).slice(0, maxRecoverFiles);
           let recoveredTokens = 0;
           for (const [filePath, entry] of entries) {
+            const canonicalPath = this._normalizeEvidencePath(filePath);
+            if (alreadyVisiblePaths.has(canonicalPath))
+              continue;
             try {
               const { readFileSync: readFileSync144 } = await import("node:fs");
               const absolutePath = this._absoluteToolPath(filePath);
               const content = readFileSync144(absolutePath, "utf8");
               const tokenEst = Math.ceil(content.length / 4);
-              const canonicalPath = this._normalizeEvidencePath(filePath);
               const branchNode = this._branchEvidenceByPath.get(canonicalPath);
               const currentMtime = this._statMtimeMsForToolPath(filePath) ?? 0;
+              const smallCompleteSource = this._mustHonorExplicitFullFileRead(Buffer.byteLength(content, "utf8"), content.split("\n").length, this._branchRoutingContextWindow());
+              if (smallCompleteSource) {
+                const sourceTokens = Math.ceil(content.length / 4);
+                if (recoveredTokens + sourceTokens > fileRecoveryBudget)
+                  continue;
+                result.push({
+                  role: "system",
+                  content: `<recovered-file path="${filePath}" status="${entry.modified ? "modified" : "read"}" sha256="${_createHash("sha256").update(content).digest("hex")}" truncated="false">
+${content}
+</recovered-file>`
+                });
+                alreadyVisiblePaths.add(canonicalPath);
+                recoveredFiles.push(filePath);
+                recoveredTokens += sourceTokens;
+                continue;
+              }
               if (branchNode && // Pre-epoch in-memory nodes are same-run compatibility records;
               // retain their verified curated evidence during compaction rather
               // than falling back to a raw-file recovery reference.
-              (branchNode.taskEpoch === void 0 || branchNode.taskEpoch === this._taskEpoch) && branchNode.mtimeMs === currentMtime) {
+              (branchNode.taskEpoch === void 0 || branchNode.taskEpoch === this._taskEpoch) && branchNode.mtimeMs === currentMtime && branchNode.contractComplete) {
                 const nodeTokens = Math.ceil(branchNode.output.length / 4);
                 if (recoveredTokens + nodeTokens > fileRecoveryBudget)
                   continue;
@@ -609853,6 +610176,18 @@ ${branchNode.output}
                 });
                 recoveredFiles.push(filePath);
                 recoveredTokens += nodeTokens;
+                alreadyVisiblePaths.add(canonicalPath);
+                continue;
+              }
+              if (branchNode && !branchNode.contractComplete) {
+                const partialReference = `<recovered-file-reference path="${filePath}" status="partial-extract" sha256="${branchNode.contentHash}">A prior isolated extraction was partial; it is advisory only. Request full source or a new targeted range if this file is now needed.</recovered-file-reference>`;
+                const referenceTokens = Math.ceil(partialReference.length / 4);
+                if (recoveredTokens + referenceTokens > fileRecoveryBudget)
+                  continue;
+                result.push({ role: "system", content: partialReference });
+                alreadyVisiblePaths.add(canonicalPath);
+                recoveredFiles.push(filePath);
+                recoveredTokens += referenceTokens;
                 continue;
               }
               const recoveryDecision = assessBranchRead({
@@ -609869,6 +610204,7 @@ ${branchNode.output}
                 const referenceTokens = Math.ceil(reference.length / 4);
                 if (recoveredTokens + referenceTokens <= fileRecoveryBudget) {
                   result.push({ role: "system", content: reference });
+                  alreadyVisiblePaths.add(canonicalPath);
                   recoveredFiles.push(filePath);
                   recoveredTokens += referenceTokens;
                 }
@@ -609990,6 +610326,23 @@ ${content.slice(0, 8e3)}${truncated ? "\n[truncated recovery; use a narrow live
             });
           }
         }
+        const pinnedSymbols = [
+          ...[...this._branchEvidenceByPath.entries()].filter(([, node]) => node.taskEpoch === this._taskEpoch && !node.contractComplete).map(([path16]) => this._normalizeEvidencePath(path16)).filter(Boolean),
+          ...this._recentToolOutcomes.slice(-2).map((outcome) => outcome.path).filter((path16) => Boolean(path16))
+        ];
+        const activeSteering = this._renderActiveSteeringSlot();
+        const validation = validateCompaction(result.map((message2) => typeof message2.content === "string" ? message2.content : JSON.stringify(message2.content)).join("\n"), {
+          symbols: pinnedSymbols,
+          ...activeSteering ? { openBugs: ["[ACTIVE USER STEERING]"] } : {}
+        });
+        if (!validation.valid) {
+          this.emit({
+            type: "status",
+            content: `[semantic-compaction] rollback: ${validation.reason}`,
+            timestamp: (/* @__PURE__ */ new Date()).toISOString()
+          });
+          return messages2;
+        }
         if (result.length < 2)
           return messages2;
         return result;
@@ -610222,7 +610575,7 @@ ${trimmedNew}`;
         ];
         const tier = this.options.modelTier ?? "large";
         const directive = this._focusSupervisor?.snapshot().directive;
-        if (directive && tier !== "large") {
+        if (directive && tier === "small") {
           const expiresTurn = Math.max(turn + 1, directive.createdTurn + 6);
           lines.push(`active_directive=next_action:${directive.requiredNextAction}; evidence:${directive.reason.replace(/\s+/g, " ").slice(0, 260)}; expires_turn:${expiresTurn}; exit_when:action_evidence_or_verified_mutation_or_user_redirect`);
         }
@@ -610234,7 +610587,7 @@ ${trimmedNew}`;
           const resultState = outcome ? outcome.succeeded ? "tool_result=success" : "tool_result=failure" : "tool_result=not_recorded";
           const hash = evidence?.contentHash ?? "unknown";
           const bytes = fact && typeof fact.size === "number" ? String(fact.size) : "unknown";
-          const nextAction = verifierRequired ? "run_declared_verifier" : outcome?.succeeded ? "verify_or_complete_distinct_leaf" : "inspect_external_blocker_or_change_scope";
+          const nextAction = tier === "small" ? verifierRequired ? "run_declared_verifier" : outcome?.succeeded ? "verify_or_complete_distinct_leaf" : "inspect_external_blocker_or_change_scope" : "model_select_from_current_evidence";
           const doNot = action === "created" ? "do_not_create_again" : action === "modified" ? "do_not_full_rewrite_without_fresh_read" : "do_not_recreate_without_authoritative_target";
           lines.push(`${action} path=${entry.path} hash=${hash} bytes=${bytes} ${resultState} stateVersion=${outcome?.stateVersion ?? this._adversaryStateVersion} turn=${outcome?.turn ?? turn} next_valid_action=${nextAction} ${doNot}`);
         }
@@ -612241,8 +612594,8 @@ ${description}`
               });
             }
           }
-          const delay4 = isGpuSlotUnavailable ? baseDelayMs : Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
-          const effectiveDelay = delay4;
+          const delay5 = isGpuSlotUnavailable ? baseDelayMs : Math.min(baseDelayMs * Math.pow(2, attempt - 1), maxDelayMs);
+          const effectiveDelay = delay5;
           const attemptLabel = maxRetries === Infinity ? `${attempt}` : `${attempt}/${maxRetries}`;
           if (isGpuSlotUnavailable) {
             this.emit({
@@ -624294,8 +624647,8 @@ function normalizeLiveCameraRotation(value2) {
     if (n2 === 0 || n2 === 90 || n2 === 180 || n2 === 270) return n2;
   }
   const raw = String(value2).trim().toLowerCase();
-  const numeric = Number(raw.replace(/deg(?:rees)?$/i, ""));
-  if (Number.isFinite(numeric)) return normalizeLiveCameraRotation(numeric);
+  const numeric2 = Number(raw.replace(/deg(?:rees)?$/i, ""));
+  if (Number.isFinite(numeric2)) return normalizeLiveCameraRotation(numeric2);
   if (["none", "off", "upright", "normal", "0"].includes(raw)) return 0;
   if (["cw", "clockwise", "right", "rotate-cw", "rotate_cw", "90"].includes(raw)) return 90;
   if (["180", "upside-down", "upside_down", "flip", "inverted"].includes(raw)) return 180;
@@ -627783,8 +628136,8 @@ function finiteRecord(value2) {
   return result;
 }
 function sampleTime(value2) {
-  const numeric = finiteNumber(value2);
-  if (numeric !== null) return numeric < 1e11 ? numeric * 1e3 : numeric;
+  const numeric2 = finiteNumber(value2);
+  if (numeric2 !== null) return numeric2 < 1e11 ? numeric2 * 1e3 : numeric2;
   if (typeof value2 !== "string") return null;
   const parsed = Date.parse(value2);
   return Number.isFinite(parsed) ? parsed : null;
@@ -643845,10 +644198,139 @@ var init_profiles = __esm({
   }
 });
 
+// packages/cli/src/tui/ollama-gpu-policy.ts
+import { execFile as execFile9 } from "node:child_process";
+import { promisify as promisify6 } from "node:util";
+function numeric(value2) {
+  const parsed = Number.parseFloat((value2 ?? "").trim());
+  return Number.isFinite(parsed) ? parsed : null;
+}
+function parseNvidiaGpuCsv(stdout) {
+  const result = [];
+  for (const rawLine of stdout.split(/\r?\n/)) {
+    const line = rawLine.trim();
+    if (!line) continue;
+    const [rawIndex, rawUuid, rawName, rawMemory, rawCapability] = line.split(",").map((value2) => value2.trim());
+    const index = numeric(rawIndex);
+    const memoryTotalMiB = numeric(rawMemory);
+    const computeCapability = numeric(rawCapability);
+    const uuid = rawUuid ?? "";
+    if (index === null || memoryTotalMiB === null || computeCapability === null || !uuid || !CUDA_IDENTIFIER.test(uuid)) {
+      continue;
+    }
+    result.push({
+      index,
+      uuid,
+      name: rawName ?? "NVIDIA GPU",
+      memoryTotalMiB,
+      computeCapability
+    });
+  }
+  return result;
+}
+function satisfiesOllamaGpuMinimum(gpu) {
+  return gpu.memoryTotalMiB >= MIN_OLLAMA_GPU_VRAM_MIB && gpu.computeCapability >= MIN_OLLAMA_GPU_COMPUTE_CAPABILITY;
+}
+function isA100ClassAccelerator(name10) {
+  return /\b(?:A100|H100|H200|B100|B200|GB200)\b/i.test(name10);
+}
+function describeGpu(gpu) {
+  return `${gpu.name} (${gpu.uuid}; ${Math.round(gpu.memoryTotalMiB / 1024)} GiB; compute ${gpu.computeCapability})`;
+}
+function selectApprovedOllamaGpu(gpus, configuredUuid = process.env[OMNIUS_OLLAMA_GPU_UUID_ENV]) {
+  const requestedUuid = configuredUuid?.trim();
+  if (requestedUuid) {
+    const requested = gpus.find((gpu) => gpu.uuid === requestedUuid);
+    if (!requested) {
+      return {
+        ok: false,
+        reason: `${OMNIUS_OLLAMA_GPU_UUID_ENV}=${requestedUuid} was not found in the current NVIDIA inventory. Refusing to launch Ollama on an inferred device.`
+      };
+    }
+    if (!satisfiesOllamaGpuMinimum(requested)) {
+      return {
+        ok: false,
+        reason: `Configured GPU ${describeGpu(requested)} does not meet the required ${MIN_OLLAMA_GPU_VRAM_MIB / 1024} GiB VRAM and compute capability ${MIN_OLLAMA_GPU_COMPUTE_CAPABILITY}. Refusing to launch Ollama.`
+      };
+    }
+    return {
+      ok: true,
+      approval: {
+        gpu: requested,
+        source: "configured_uuid",
+        cudaVisibleDevices: requested.uuid
+      }
+    };
+  }
+  const automatic = gpus.filter(
+    (gpu) => satisfiesOllamaGpuMinimum(gpu) && isA100ClassAccelerator(gpu.name)
+  ).sort(
+    (left, right) => right.memoryTotalMiB - left.memoryTotalMiB || right.computeCapability - left.computeCapability || left.index - right.index
+  )[0];
+  if (automatic) {
+    return {
+      ok: true,
+      approval: {
+        gpu: automatic,
+        source: "a100_class_auto",
+        cudaVisibleDevices: automatic.uuid
+      }
+    };
+  }
+  const discovered = gpus.length ? gpus.map(describeGpu).join("; ") : "no queryable NVIDIA GPUs";
+  return {
+    ok: false,
+    reason: `No approved GPU is available (${discovered}). Set ${OMNIUS_OLLAMA_GPU_UUID_ENV} to the UUID of a designated GPU meeting ${MIN_OLLAMA_GPU_VRAM_MIB / 1024} GiB VRAM and compute capability ${MIN_OLLAMA_GPU_COMPUTE_CAPABILITY}, or make an A100-class accelerator visible.`
+  };
+}
+async function defaultNvidiaSmiRunner(command, args) {
+  const { stdout } = await execFileAsync5(command, args, {
+    timeout: 5e3,
+    windowsHide: true
+  });
+  return { stdout };
+}
+async function resolveApprovedOllamaGpu(options2 = {}) {
+  try {
+    const runner = options2.runner ?? defaultNvidiaSmiRunner;
+    const { stdout } = await runner("nvidia-smi", [
+      "--query-gpu=index,uuid,name,memory.total,compute_cap",
+      "--format=csv,noheader,nounits"
+    ]);
+    return selectApprovedOllamaGpu(
+      parseNvidiaGpuCsv(stdout),
+      options2.configuredUuid
+    );
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    return {
+      ok: false,
+      reason: `Could not verify NVIDIA GPU placement with nvidia-smi (${detail}). Refusing to launch Ollama.`
+    };
+  }
+}
+function withApprovedOllamaGpu(env2, approval) {
+  return {
+    ...env2,
+    CUDA_VISIBLE_DEVICES: approval.cudaVisibleDevices
+  };
+}
+var execFileAsync5, OMNIUS_OLLAMA_GPU_UUID_ENV, MIN_OLLAMA_GPU_VRAM_MIB, MIN_OLLAMA_GPU_COMPUTE_CAPABILITY, CUDA_IDENTIFIER;
+var init_ollama_gpu_policy = __esm({
+  "packages/cli/src/tui/ollama-gpu-policy.ts"() {
+    execFileAsync5 = promisify6(execFile9);
+    OMNIUS_OLLAMA_GPU_UUID_ENV = "OMNIUS_OLLAMA_GPU_UUID";
+    MIN_OLLAMA_GPU_VRAM_MIB = 16 * 1024;
+    MIN_OLLAMA_GPU_COMPUTE_CAPABILITY = 7;
+    CUDA_IDENTIFIER = /^[A-Za-z0-9._:-]+$/;
+  }
+});
+
 // packages/cli/src/tui/omnius-directory.ts
 var omnius_directory_exports = {};
 __export(omnius_directory_exports, {
   OMNIUS_DIR: () => OMNIUS_DIR,
+  appendCompactionAudit: () => appendCompactionAudit,
   buildContextRestorePrompt: () => buildContextRestorePrompt,
   buildContextRestoreSnapshot: () => buildContextRestoreSnapshot,
   buildHandoffPrompt: () => buildHandoffPrompt,
@@ -644009,7 +644491,7 @@ function watchForOmniusGitignore(repoRoot) {
 function scheduleOmniusGitignoreRescans(repoRoot) {
   const key = resolve62(repoRoot);
   if (gitignoreRetryTimers.has(key)) return;
-  const timers = [25, 100, 250, 500, 1e3].map((delay4) => {
+  const timers = [25, 100, 250, 500, 1e3].map((delay5) => {
     const timer = setTimeout(() => {
       try {
         ensureOmniusIgnored(repoRoot);
@@ -644021,7 +644503,7 @@ function scheduleOmniusGitignoreRescans(repoRoot) {
         if (idx >= 0) list.splice(idx, 1);
         if (list.length === 0) gitignoreRetryTimers.delete(key);
       }
-    }, delay4);
+    }, delay5);
     timer.unref?.();
     return timer;
   });
@@ -644553,6 +645035,32 @@ function pruneContextLedger(ledgerPath) {
   } catch {
   }
 }
+function appendCompactionAudit(repoRoot, record) {
+  try {
+    const contextDir = join136(repoRoot, OMNIUS_DIR, "context");
+    mkdirSync76(contextDir, { recursive: true });
+    const ledgerPath = join136(contextDir, COMPACTION_AUDIT_FILE);
+    appendFileSync14(ledgerPath, JSON.stringify(record) + "\n", "utf-8");
+    const st = statSync51(ledgerPath);
+    if (st.size > 64 * 1024 * 1024) {
+      const lines = readFileSync102(ledgerPath, "utf-8").split(/\r?\n/).filter((line) => line.trim());
+      if (lines.length > 100) {
+        const archiveDir = join136(contextDir, "archive");
+        mkdirSync76(archiveDir, { recursive: true });
+        const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+        writeFileSync64(
+          join136(archiveDir, `compactions.${stamp}.jsonl`),
+          lines.slice(0, -100).join("\n") + "\n",
+          "utf-8"
+        );
+        writeFileSync64(ledgerPath, lines.slice(-100).join("\n") + "\n", "utf-8");
+      }
+    }
+    return ledgerPath;
+  } catch {
+    return null;
+  }
+}
 function saveSessionContext(repoRoot, entry) {
   const contextDir = join136(repoRoot, OMNIUS_DIR, "context");
   mkdirSync76(contextDir, { recursive: true });
@@ -645509,7 +646017,7 @@ function deleteUsageRecord(kind, value2, repoRoot) {
     remove(join136(repoRoot, OMNIUS_DIR, USAGE_HISTORY_FILE));
   }
 }
-var OMNIUS_DIR, LEGACY_DIRS, SUBDIRS, gitignoreWatchers, gitignoreRetryTimers, CONTEXT_FILES, PENDING_TASK_FILE, HANDOFF_FILE, CONTEXT_SAVE_FILE, CONTEXT_LEDGER_FILE, MAX_CONTEXT_ENTRIES, MAX_SESSION_DIARY_ENTRIES, MAX_SESSION_DIARY_DETAILED_ENTRIES, MAX_CONTEXT_LEDGER_LINES, MAX_CONTEXT_LEDGER_BYTES, SAME_TASK_REPLACE_WINDOW_MS, LOCK_TIMEOUT_MS, LOCK_RETRY_MS, LOCK_RETRY_MAX, MODEL_CONTEXT_NOISE_LINE_RE, DEFAULT_RESTORED_SESSION_HISTORY_MAX_LINES, DEICTIC_CONTINUATION_TERMS, SESSIONS_DIR, SESSIONS_INDEX, TUI_STATE_SUFFIX, AUTHORED_SESSION_LINE, VISUAL_CHROME_LINE, SKIP_DIRS3, HOME_SKIP_DIRS, USAGE_HISTORY_FILE, MAX_HISTORY_RECORDS;
+var OMNIUS_DIR, LEGACY_DIRS, SUBDIRS, gitignoreWatchers, gitignoreRetryTimers, CONTEXT_FILES, PENDING_TASK_FILE, HANDOFF_FILE, CONTEXT_SAVE_FILE, CONTEXT_LEDGER_FILE, COMPACTION_AUDIT_FILE, MAX_CONTEXT_ENTRIES, MAX_SESSION_DIARY_ENTRIES, MAX_SESSION_DIARY_DETAILED_ENTRIES, MAX_CONTEXT_LEDGER_LINES, MAX_CONTEXT_LEDGER_BYTES, SAME_TASK_REPLACE_WINDOW_MS, LOCK_TIMEOUT_MS, LOCK_RETRY_MS, LOCK_RETRY_MAX, MODEL_CONTEXT_NOISE_LINE_RE, DEFAULT_RESTORED_SESSION_HISTORY_MAX_LINES, DEICTIC_CONTINUATION_TERMS, SESSIONS_DIR, SESSIONS_INDEX, TUI_STATE_SUFFIX, AUTHORED_SESSION_LINE, VISUAL_CHROME_LINE, SKIP_DIRS3, HOME_SKIP_DIRS, USAGE_HISTORY_FILE, MAX_HISTORY_RECORDS;
 var init_omnius_directory = __esm({
   "packages/cli/src/tui/omnius-directory.ts"() {
     init_dist5();
@@ -645533,6 +646041,7 @@ var init_omnius_directory = __esm({
     HANDOFF_FILE = "task-handoff.json";
     CONTEXT_SAVE_FILE = "session-context.json";
     CONTEXT_LEDGER_FILE = "session-context.events.jsonl";
+    COMPACTION_AUDIT_FILE = "compactions.jsonl";
     MAX_CONTEXT_ENTRIES = 200;
     MAX_SESSION_DIARY_ENTRIES = 80;
     MAX_SESSION_DIARY_DETAILED_ENTRIES = 50;
@@ -648871,8 +649380,8 @@ var init_project_context = __esm({
 });
 
 // packages/cli/src/tui/disk-monitor.ts
-import { execFile as execFile9 } from "node:child_process";
-import { promisify as promisify6 } from "node:util";
+import { execFile as execFile10 } from "node:child_process";
+import { promisify as promisify7 } from "node:util";
 function unavailableDiskMetrics(path16 = process.cwd()) {
   return {
     path: path16,
@@ -648886,7 +649395,7 @@ function unavailableDiskMetrics(path16 = process.cwd()) {
 async function collectDiskMetrics(path16 = process.cwd()) {
   if (process.platform === "win32") return unavailableDiskMetrics(path16);
   try {
-    const { stdout } = await execFileAsync5("df", ["-Pk", path16], {
+    const { stdout } = await execFileAsync6("df", ["-Pk", path16], {
       encoding: "utf8",
       timeout: 3e3,
       maxBuffer: 128 * 1024
@@ -648916,10 +649425,10 @@ async function collectDiskMetrics(path16 = process.cwd()) {
     return unavailableDiskMetrics(path16);
   }
 }
-var execFileAsync5;
+var execFileAsync6;
 var init_disk_monitor = __esm({
   "packages/cli/src/tui/disk-monitor.ts"() {
-    execFileAsync5 = promisify6(execFile9);
+    execFileAsync6 = promisify7(execFile10);
   }
 });
 
@@ -652628,7 +653137,7 @@ var init_status_bar = __esm({
             const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
             const lineContent = `${prefix}${inputWrap.lines[i2]}`;
             buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-            buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+            buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
             buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
           }
           buf += this.buildEnhanceSegment(
@@ -653893,6 +654402,10 @@ ${CONTENT_BG_SEQ}`);
         );
         return `\x1B[38;2;${r2};${g};${b}m`;
       }
+      /** Keep the rail before the `+` prompt static while stream frames animate. */
+      inputLeftRailSeq() {
+        return BOX_FG;
+      }
       /** Box top border with an optional ┬ carving out the enhance segment. */
       buildInputBoxTop(w) {
         if (!this.enhanceSegEnabled(w)) {
@@ -654406,7 +654919,7 @@ ${CONTENT_BG_SEQ}`);
           const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
           const lineContent = `${prefix}${inputWrap.lines[i2]}`;
           buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-          buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+          buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
           buf += `${PANEL_BG_SEQ}\x1B[K`;
           buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
         }
@@ -654425,7 +654938,7 @@ ${CONTENT_BG_SEQ}`);
             const fg2 = isHighlighted ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
             const slash = isHighlighted ? `\x1B[38;5;245m` : `\x1B[38;5;${TEXT_DIM}m`;
             const marker = isHighlighted ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
+            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
             buf += `${bg} ${marker}${slash}/${fg2}${cmd}`;
             buf += `${PANEL_BG_SEQ}\x1B[K`;
             buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
@@ -654480,7 +654993,7 @@ ${CONTENT_BG_SEQ}`);
           const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
           const lineContent = `${prefix}${inputWrap.lines[i2]}`;
           buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-          buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+          buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
           buf += `${PANEL_BG_SEQ}\x1B[K`;
           buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
         }
@@ -654503,7 +655016,7 @@ ${CONTENT_BG_SEQ}`);
             const isHl = si === this._suggestIndex;
             const fg2 = isHl ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
             const marker = isHl ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
+            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
             buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
           }
           buf += `\x1B[${pos.bufferRow};1H${PANEL_BG_SEQ}\x1B[2K${this.buildInputBoxBottom(w)}`;
@@ -654570,7 +655083,7 @@ ${CONTENT_BG_SEQ}`);
             const row2 = pos.inputStartRow + 1 + i2;
             const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
             const lineContent = `${prefix}${inputWrap.lines[i2]}`;
-            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
+            buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
           }
           buf += this.buildEnhanceSegment(
             w,
@@ -654585,7 +655098,7 @@ ${CONTENT_BG_SEQ}`);
               const bg = isHl ? `\x1B[48;5;235m` : PANEL_BG_SEQ;
               const fg2 = isHl ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
               const marker = isHl ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
+              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
               buf += `${bg} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
               buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}`;
             }
@@ -654613,7 +655126,7 @@ ${CONTENT_BG_SEQ}`);
             const prefix = i2 === 0 ? this.promptText : " ".repeat(this.promptWidth);
             const lineContent = `${prefix}${inputWrap.lines[i2]}`;
             buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K`;
-            buf += `${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
+            buf += `${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}${lineContent}`;
             buf += `${PANEL_BG_SEQ}\x1B[K`;
             buf += `\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
           }
@@ -654630,7 +655143,7 @@ ${CONTENT_BG_SEQ}`);
               const bg = isHl ? `\x1B[48;5;235m` : PANEL_BG_SEQ;
               const fg2 = isHl ? `\x1B[1;38;5;${TEXT_PRIMARY}m` : `\x1B[38;5;${TEXT_PRIMARY}m`;
               const marker = isHl ? `\x1B[38;5;${TEXT_PRIMARY}m› ` : "  ";
-              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.borderVSeq(1)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
+              buf += `\x1B[${row2};1H${PANEL_BG_SEQ}\x1B[2K${this.inputLeftRailSeq()}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
               buf += `${bg} ${marker}\x1B[38;5;${TEXT_DIM}m/${fg2}${cmd}`;
               buf += `${PANEL_BG_SEQ}\x1B[K\x1B[${row2};${w}H${this.borderVSeq(w)}${BOX_V3}${RESET4}${PANEL_BG_SEQ}`;
             }
@@ -656814,7 +657327,7 @@ __export(setup_exports, {
 });
 import * as readline from "node:readline";
 import { spawn as spawn34, exec as exec5 } from "node:child_process";
-import { promisify as promisify7 } from "node:util";
+import { promisify as promisify8 } from "node:util";
 import { existsSync as existsSync132, writeFileSync as writeFileSync68, readFileSync as readFileSync109, appendFileSync as appendFileSync15, mkdirSync as mkdirSync80, chmodSync as chmodSync3 } from "node:fs";
 import { delimiter as pathDelimiter, join as join143 } from "node:path";
 import { freemem as freemem8, homedir as homedir48, platform as platform6, totalmem as totalmem9 } from "node:os";
@@ -657646,6 +658159,30 @@ async function installOllamaWindows() {
     return false;
   }
 }
+async function startApprovedOllamaServe() {
+  const admission = await resolveApprovedOllamaGpu();
+  if (!admission.ok) {
+    process.stdout.write(
+      `  ${c3.red("✖")} Ollama launch blocked by GPU safety policy: ${admission.reason}
+`
+    );
+    return false;
+  }
+  try {
+    const child = spawn34("ollama", ["serve"], {
+      stdio: "ignore",
+      detached: true,
+      env: withApprovedOllamaGpu(process.env, admission.approval)
+    });
+    child.unref();
+    return true;
+  } catch (error) {
+    const detail = error instanceof Error ? error.message : String(error);
+    process.stdout.write(`  ${c3.cyan("⚠")} Could not start ollama serve: ${detail}
+`);
+    return false;
+  }
+}
 async function ensureOllamaRunning(backendUrl2, rl) {
   const ollamaInstalled = hasCmd("ollama");
   if (!ollamaInstalled) {
@@ -657674,13 +658211,8 @@ async function ensureOllamaRunning(backendUrl2, rl) {
   }
   process.stdout.write(`  ${c3.cyan("●")} Starting ollama serve...
 `);
-  try {
-    const child = spawn34("ollama", ["serve"], { stdio: "ignore", detached: true });
-    child.unref();
-  } catch {
-    process.stdout.write(`  ${c3.cyan("⚠")} Could not start ollama serve.
-
-`);
+  if (!await startApprovedOllamaServe()) {
+    process.stdout.write("\n");
     return false;
   }
   for (let i2 = 0; i2 < 5; i2++) {
@@ -657698,7 +658230,7 @@ async function ensureOllamaRunning(backendUrl2, rl) {
     } catch {
     }
   }
-  process.stdout.write(`  ${c3.cyan("⚠")} Ollama started but not responding. Try ${c3.bold("ollama serve")} manually.
+  process.stdout.write(`  ${c3.cyan("⚠")} Ollama started on the approved GPU but is not responding yet.
 
 `);
   return false;
@@ -658367,9 +658899,7 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
         process.stdout.write(`
   ${c3.cyan("●")} Ollama is installed but not running. Starting automatically...
 `);
-        try {
-          const child = spawn34("ollama", ["serve"], { stdio: "ignore", detached: true });
-          child.unref();
+        if (await startApprovedOllamaServe()) {
           await new Promise((resolve82) => setTimeout(resolve82, 3e3));
           try {
             models = await fetchOllamaModels(config.backendUrl);
@@ -658381,8 +658911,8 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
 
 `);
           }
-        } catch {
-          process.stdout.write(`  ${c3.cyan("⚠")} Could not start Ollama. Try running ${c3.bold("ollama serve")} manually.
+        } else {
+          process.stdout.write(`  ${c3.cyan("⚠")} Ollama was not started. Configure an approved GPU or a custom endpoint.
 
 `);
         }
@@ -658395,9 +658925,7 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
             process.stdout.write(`
   ${c3.cyan("●")} Starting ollama serve...
 `);
-            try {
-              const child = spawn34("ollama", ["serve"], { stdio: "ignore", detached: true });
-              child.unref();
+            if (await startApprovedOllamaServe()) {
               await new Promise((resolve82) => setTimeout(resolve82, 3e3));
               try {
                 models = await fetchOllamaModels(config.backendUrl);
@@ -658405,12 +658933,12 @@ ${c3.cyan(OMNIUS_FIRST_RUN_BANNER)}
 
 `);
               } catch {
-                process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed but not responding yet. Try ${c3.bold("ollama serve")} manually.
+                process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed but not responding yet.
 
 `);
               }
-            } catch {
-              process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed. Start it with: ${c3.bold("ollama serve")}
+            } else {
+              process.stdout.write(`  ${c3.cyan("⚠")} Ollama installed but was not started without an approved GPU.
 
 `);
             }
@@ -659685,7 +660213,8 @@ var init_setup = __esm({
     init_dist6();
     init_tui_select();
     init_listen();
-    execAsync2 = promisify7(exec5);
+    init_ollama_gpu_policy();
+    execAsync2 = promisify8(exec5);
     OMNIUS_FIRST_RUN_BANNER = [
       " ░▒▓██████▓▒░░▒▓██████████████▓▒░░▒▓███████▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░░▒▓███████▓▒░ ",
       "░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░▒▓█▓▒░░▒▓█▓▒░▒▓█▓▒░        ",
@@ -664354,10 +664883,12 @@ __export(daemon_exports, {
   ensureDaemonVersion: () => ensureDaemonVersion,
   forceKillDaemon: () => forceKillDaemon,
   getDaemonPid: () => getDaemonPid,
+  getDaemonReportedIdentity: () => getDaemonReportedIdentity,
   getDaemonReportedVersion: () => getDaemonReportedVersion,
   getDaemonStatus: () => getDaemonStatus,
   getLocalCliVersion: () => getLocalCliVersion,
   isDaemonRunning: () => isDaemonRunning,
+  recoverDaemonVersionBoundedly: () => recoverDaemonVersionBoundedly,
   releaseDaemonEndpointClaim: () => releaseDaemonEndpointClaim,
   releaseDaemonEndpointForCurrentProcess: () => releaseDaemonEndpointForCurrentProcess,
   restartDaemon: () => restartDaemon,
@@ -664365,7 +664896,7 @@ __export(daemon_exports, {
   stopDaemon: () => stopDaemon
 });
 import { spawn as spawn35 } from "node:child_process";
-import { existsSync as existsSync140, readFileSync as readFileSync114, writeFileSync as writeFileSync70, mkdirSync as mkdirSync82, unlinkSync as unlinkSync27, openSync as openSync5, closeSync as closeSync5, writeSync as writeSync2, statSync as statSync57 } from "node:fs";
+import { existsSync as existsSync140, readFileSync as readFileSync114, writeFileSync as writeFileSync70, mkdirSync as mkdirSync82, unlinkSync as unlinkSync27, openSync as openSync5, closeSync as closeSync5, writeSync as writeSync2, statSync as statSync57, renameSync as renameSync13 } from "node:fs";
 import { join as join149 } from "node:path";
 import { homedir as homedir51 } from "node:os";
 import { fileURLToPath as fileURLToPath20 } from "node:url";
@@ -664504,17 +665035,26 @@ function getLocalCliVersion() {
   }
   return "0.0.0";
 }
-async function getDaemonReportedVersion(port) {
+async function getDaemonReportedIdentity(port) {
   const p2 = port ?? getDaemonPort();
   try {
     const resp = await fetch(`http://127.0.0.1:${p2}/health`, { signal: AbortSignal.timeout(2e3) });
     if (!resp.ok) return null;
     const data = await resp.json();
-    return data.version ?? null;
+    const version5 = data.boot_version ?? data.version;
+    if (!version5) return null;
+    return {
+      version: version5,
+      bootVersion: data.boot_version ?? version5,
+      bootPackageHash: data.boot_package_hash ?? null
+    };
   } catch {
     return null;
   }
 }
+async function getDaemonReportedVersion(port) {
+  return (await getDaemonReportedIdentity(port))?.bootVersion ?? null;
+}
 async function waitForDaemonReady(port, expectedVersion, attempts = 24) {
   let observedVersion = null;
   for (let attempt = 0; attempt < attempts; attempt++) {
@@ -664527,22 +665067,165 @@ async function waitForDaemonReady(port, expectedVersion, attempts = 24) {
   }
   return { ok: false, observedVersion };
 }
-async function restartDaemon(port, expectedVersion) {
-  const p2 = port ?? getDaemonPort();
+function delay4(ms) {
+  return new Promise((resolve82) => setTimeout(resolve82, ms));
+}
+async function runUserSystemctl(args, timeout2 = 2e4) {
   try {
     const { spawnSync: spawnSync9 } = await import("node:child_process");
-    const enabled2 = spawnSync9("systemctl", ["--user", "is-enabled", "omnius-daemon.service"], {
+    const result = spawnSync9("systemctl", ["--user", ...args], {
       stdio: "ignore",
-      timeout: 5e3
+      timeout: timeout2
+    });
+    return { available: !result.error, ok: result.status === 0 };
+  } catch {
+    return { available: false, ok: false };
+  }
+}
+async function hasManagedDaemonService() {
+  const enabled2 = await runUserSystemctl(["is-enabled", "omnius-daemon.service"], 5e3);
+  if (enabled2.ok) return true;
+  const active = await runUserSystemctl(["is-active", "omnius-daemon.service"], 5e3);
+  return active.ok;
+}
+function systemdQuote(value2) {
+  return /[\s"\\]/.test(value2) ? `"${value2.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"` : value2;
+}
+async function repairManagedDaemonUnit(port) {
+  if (process.platform !== "linux") return false;
+  const command = await resolveDaemonCommand(process.execPath);
+  if (!command) return false;
+  try {
+    const configHome2 = process.env["XDG_CONFIG_HOME"] || join149(homedir51(), ".config");
+    const unitDir = join149(configHome2, "systemd", "user");
+    const unitPath = join149(unitDir, "omnius-daemon.service");
+    const logDir = join149(OMNIUS_DIR2);
+    mkdirSync82(unitDir, { recursive: true });
+    mkdirSync82(logDir, { recursive: true });
+    const execStart = [command.command, ...command.args].map(systemdQuote).join(" ");
+    const unit = [
+      "[Unit]",
+      `Description=Omnius API Daemon (port ${port})`,
+      "After=network-online.target",
+      "Wants=network-online.target",
+      "StartLimitIntervalSec=30",
+      "StartLimitBurst=10",
+      "",
+      "[Service]",
+      "Type=simple",
+      "Environment=OMNIUS_DAEMON=1",
+      `Environment=OMNIUS_PORT=${port}`,
+      "Environment=NODE_ENV=production",
+      `ExecStart=${execStart}`,
+      "Restart=always",
+      "RestartSec=3",
+      `StandardOutput=append:${join149(logDir, "daemon.log")}`,
+      `StandardError=append:${join149(logDir, "daemon.err.log")}`,
+      "",
+      "[Install]",
+      "WantedBy=default.target",
+      ""
+    ].join("\n");
+    const tmp = `${unitPath}.tmp.${process.pid}.${Date.now()}`;
+    writeFileSync70(tmp, unit, { encoding: "utf8", mode: 384 });
+    renameSync13(tmp, unitPath);
+    return (await runUserSystemctl(["daemon-reload"], 1e4)).ok;
+  } catch {
+    return false;
+  }
+}
+async function portHolderPids(port) {
+  try {
+    const { spawnSync: spawnSync9 } = await import("node:child_process");
+    const lsof = spawnSync9("lsof", ["-ti", `:${port}`], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: 3e3
     });
-    if (enabled2.status === 0) {
-      spawnSync9("systemctl", ["--user", "restart", "omnius-daemon.service"], { stdio: "ignore", timeout: 2e4 });
-      return (await waitForDaemonReady(p2, expectedVersion)).ok;
+    let output = lsof.stdout ?? "";
+    if (!output.trim()) {
+      const fuser = spawnSync9("fuser", [`${port}/tcp`], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: 3e3
+      });
+      output = `${fuser.stdout ?? ""}
+${fuser.stderr ?? ""}`;
+      if (lsof.error && fuser.error) return null;
     }
+    return output.split(/[\s\n]+/).map((value2) => parseInt(value2, 10)).filter((pid) => Number.isInteger(pid) && pid > 0 && pid !== process.pid);
+  } catch {
+    return null;
+  }
+}
+function processCommandLine(pid) {
+  try {
+    return readFileSync114(`/proc/${pid}/cmdline`, "utf8").replace(/\0/g, " ");
   } catch {
+    return "";
   }
-  await forceKillDaemon(p2);
-  const pid = await startDaemon();
+}
+function isOwnedOmniusDaemon(pid, daemonPid) {
+  if (pid === daemonPid) return true;
+  if (listProcessLeases({ includeInactive: false }).some((lease) => lease.pid === pid && lease.ownerKind === "daemon")) {
+    return true;
+  }
+  const command = processCommandLine(pid);
+  return /(?:^|[\\/\s])omnius(?:[\\/\s]|$)|omnius-daemon|[\\/]dist[\\/]index\.js\b|launcher\.cjs\b/i.test(command);
+}
+async function ownedDaemonPids(port) {
+  const daemonPid = getDaemonPid();
+  const candidates = /* @__PURE__ */ new Set();
+  if (daemonPid) candidates.add(daemonPid);
+  const holders = await portHolderPids(port);
+  for (const pid of holders ?? []) candidates.add(pid);
+  return [...candidates].filter((pid) => processIsAlive(pid) && isOwnedOmniusDaemon(pid, daemonPid));
+}
+async function waitForDaemonStopped(port, attempts = DAEMON_GRACEFUL_STOP_ATTEMPTS) {
+  for (let attempt = 0; attempt < attempts; attempt++) {
+    const healthy = await isDaemonRunning(port);
+    const holders = await portHolderPids(port);
+    if (!healthy && (holders === null || holders.length === 0)) return true;
+    await delay4(500);
+  }
+  return false;
+}
+async function gracefullyStopOwnedDaemon(port) {
+  const pids = await ownedDaemonPids(port);
+  for (const pid of pids) {
+    try {
+      process.kill(pid, "SIGTERM");
+    } catch {
+    }
+  }
+  if (await waitForDaemonStopped(port)) return true;
+  const survivors = await ownedDaemonPids(port);
+  for (const pid of survivors) {
+    try {
+      process.kill(pid, "SIGKILL");
+    } catch {
+    }
+  }
+  return waitForDaemonStopped(port, 10);
+}
+async function restartDaemon(port, expectedVersion) {
+  const p2 = port ?? getDaemonPort();
+  const managed = await hasManagedDaemonService();
+  if (managed) {
+    const restarted = await runUserSystemctl(["restart", "omnius-daemon.service"]);
+    if (restarted.ok && (await waitForDaemonReady(p2, expectedVersion)).ok) return true;
+    const repaired = await repairManagedDaemonUnit(p2);
+    if (repaired) {
+      await runUserSystemctl(["stop", "omnius-daemon.service"]);
+      await waitForDaemonStopped(p2);
+      const started = await runUserSystemctl(["start", "omnius-daemon.service"]);
+      if (started.ok && (await waitForDaemonReady(p2, expectedVersion)).ok) return true;
+    }
+    await runUserSystemctl(["stop", "omnius-daemon.service"]);
+    if (!await waitForDaemonStopped(p2)) return false;
+  }
+  if (await isDaemonRunning(p2) && !await gracefullyStopOwnedDaemon(p2)) return false;
+  const pid = await startDaemon(p2);
   if (!pid) return false;
   return (await waitForDaemonReady(p2, expectedVersion)).ok;
 }
@@ -664579,6 +665262,8 @@ function commandForEntrypoint(path16, nodeExe) {
 }
 async function resolveDaemonCommand(nodeExe) {
   const candidates = [];
+  const thisDir = dirname47(fileURLToPath20(import.meta.url));
+  candidates.push(join149(thisDir, "index.js"));
   if (process.argv[1]) candidates.push(process.argv[1]);
   try {
     const { spawnSync: spawnSync9 } = await import("node:child_process");
@@ -664590,8 +665275,6 @@ async function resolveDaemonCommand(nodeExe) {
     if (first2) candidates.push(first2);
   } catch {
   }
-  const thisDir = dirname47(fileURLToPath20(import.meta.url));
-  candidates.push(join149(thisDir, "index.js"));
   const seen = /* @__PURE__ */ new Set();
   for (const candidate of candidates) {
     if (!candidate || seen.has(candidate)) continue;
@@ -664601,9 +665284,9 @@ async function resolveDaemonCommand(nodeExe) {
   }
   return null;
 }
-async function startDaemon() {
+async function startDaemon(port = getDaemonPort()) {
   mkdirSync82(OMNIUS_DIR2, { recursive: true });
-  const daemonPort = getDaemonPort();
+  const daemonPort = port;
   const endpointClaim = claimDaemonEndpoint(daemonPort);
   if (!endpointClaim) return null;
   const nodeExe = process.execPath;
@@ -664627,6 +665310,7 @@ async function startDaemon() {
         ...processLeaseEnv(leaseId, ownerId, process.cwd()),
         OMNIUS_DAEMON: "1",
         // signal to serve.ts that it's running as daemon
+        OMNIUS_PORT: String(daemonPort),
         OMNIUS_DAEMON_LOCK_TOKEN: endpointClaim.token,
         OMNIUS_DAEMON_LOCK_PORT: String(daemonPort),
         OMNIUS_PROCESS_OWNER_KIND: "daemon",
@@ -664746,15 +665430,47 @@ async function forceKillDaemon(port) {
   }
   return killed;
 }
+async function recoverDaemonVersionBoundedly(expectedVersion, observe, recover, maxAttempts = DAEMON_VERSION_RECOVERY_ATTEMPTS) {
+  let observedVersion = await observe();
+  if (expectedVersion === "0.0.0" || observedVersion === expectedVersion) {
+    return { ok: true, observedVersion, attempts: 0 };
+  }
+  const boundedAttempts = Math.max(1, Math.min(3, Math.floor(maxAttempts)));
+  for (let attempt = 1; attempt <= boundedAttempts; attempt++) {
+    await recover();
+    observedVersion = await observe();
+    if (observedVersion === expectedVersion) {
+      return { ok: true, observedVersion, attempts: attempt };
+    }
+  }
+  return { ok: false, observedVersion, attempts: boundedAttempts };
+}
 async function ensureDaemonVersion(expectedVersion = getLocalCliVersion(), port = getDaemonPort()) {
-  const finish = (ok3, action, observedVersion) => ({ ok: ok3, action, expectedVersion, observedVersion, port });
+  const finish = (ok3, action, observedVersion, recoveryAttempts = 0, requiresPrivilegedMigration = false) => ({
+    ok: ok3,
+    action,
+    expectedVersion,
+    observedVersion,
+    port,
+    recoveryAttempts,
+    requiresPrivilegedMigration
+  });
   if (await isDaemonRunning(port)) {
     if (process.env["OMNIUS_NO_VERSION_GUARD"] !== "1") {
       const running = await getDaemonReportedVersion(port);
       if (expectedVersion !== "0.0.0" && running !== expectedVersion) {
-        const ok3 = await restartDaemon(port, expectedVersion);
-        const observedVersion = await getDaemonReportedVersion(port);
-        return finish(ok3 && observedVersion === expectedVersion, ok3 ? "restarted" : "failed", observedVersion);
+        const recovery = await recoverDaemonVersionBoundedly(
+          expectedVersion,
+          () => getDaemonReportedVersion(port),
+          () => restartDaemon(port, expectedVersion)
+        );
+        return finish(
+          recovery.ok,
+          recovery.ok ? "restarted" : "failed",
+          recovery.observedVersion,
+          recovery.attempts,
+          !recovery.ok && process.platform === "linux"
+        );
       }
     }
     return finish(true, "unchanged", await getDaemonReportedVersion(port));
@@ -664770,7 +665486,7 @@ async function ensureDaemonVersion(expectedVersion = getLocalCliVersion(), port
     } catch {
     }
   }
-  const pid = await startDaemon();
+  const pid = await startDaemon(port);
   if (!pid) {
     for (let i2 = 0; i2 < 20; i2++) {
       await new Promise((r2) => setTimeout(r2, 500));
@@ -664817,7 +665533,7 @@ async function getDaemonStatus() {
   }
   return { running, pid, port, uptime: uptime2, pidFile: PID_FILE2 };
 }
-var OMNIUS_DIR2, PID_FILE2, DEFAULT_PORT2, LOCK_INITIALIZATION_GRACE_MS;
+var OMNIUS_DIR2, PID_FILE2, DEFAULT_PORT2, LOCK_INITIALIZATION_GRACE_MS, DAEMON_VERSION_RECOVERY_ATTEMPTS, DAEMON_GRACEFUL_STOP_ATTEMPTS;
 var init_daemon = __esm({
   "packages/cli/src/daemon.ts"() {
     init_dist5();
@@ -664825,6 +665541,8 @@ var init_daemon = __esm({
     PID_FILE2 = join149(OMNIUS_DIR2, "daemon.pid");
     DEFAULT_PORT2 = 11435;
     LOCK_INITIALIZATION_GRACE_MS = 5e3;
+    DAEMON_VERSION_RECOVERY_ATTEMPTS = 2;
+    DAEMON_GRACEFUL_STOP_ATTEMPTS = 20;
   }
 });
 
@@ -672665,52 +673383,83 @@ async function acquireSudoCredentials(ctx3, reason) {
     });
   });
 }
+async function runSudoScriptChecked(ctx3, script) {
+  const { spawn: spawn40 } = await import("node:child_process");
+  const full = `set -e; ${script}`;
+  await withTransientTerminalPrivilegePrompt(
+    ctx3,
+    "Running elevated system changes.",
+    () => new Promise((resolve82, reject) => {
+      const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
+      const hasInteractiveTty = Boolean(
+        process.stdin.isTTY && process.stdout.isTTY
+      );
+      const cmd = isRoot ? "bash" : "sudo";
+      const args = isRoot ? ["-lc", full] : hasInteractiveTty ? ["bash", "-lc", full] : ["-n", "bash", "-lc", full];
+      const child = spawn40(cmd, args, {
+        stdio: hasInteractiveTty ? "inherit" : ["ignore", "pipe", "pipe"],
+        env: { ...process.env, DEBIAN_FRONTEND: "noninteractive" }
+      });
+      let stdout = "";
+      let stderr = "";
+      child.stdout?.on("data", (data) => {
+        stdout += data.toString();
+      });
+      child.stderr?.on("data", (data) => {
+        stderr += data.toString();
+      });
+      onChildExit(child, (code8) => {
+        if (code8 === 0) {
+          resolve82();
+          return;
+        }
+        reject(
+          new Error(
+            (stderr || stdout || `elevated command exited with ${code8}`).trim().slice(0, 500)
+          )
+        );
+      });
+      onChildError(child, (err) => reject(err));
+    })
+  );
+}
 async function runSudoScript(ctx3, script) {
   try {
-    const { spawn: spawn40 } = await import("node:child_process");
-    const full = `set -e; ${script}`;
-    await withTransientTerminalPrivilegePrompt(
-      ctx3,
-      "Running elevated system changes.",
-      () => new Promise((resolve82, reject) => {
-        const isRoot = typeof process.getuid === "function" && process.getuid() === 0;
-        const hasInteractiveTty = Boolean(
-          process.stdin.isTTY && process.stdout.isTTY
-        );
-        const cmd = isRoot ? "bash" : "sudo";
-        const args = isRoot ? ["-lc", full] : hasInteractiveTty ? ["bash", "-lc", full] : ["-n", "bash", "-lc", full];
-        const child = spawn40(cmd, args, {
-          stdio: hasInteractiveTty ? "inherit" : ["ignore", "pipe", "pipe"],
-          env: { ...process.env, DEBIAN_FRONTEND: "noninteractive" }
-        });
-        let stdout = "";
-        let stderr = "";
-        child.stdout?.on("data", (data) => {
-          stdout += data.toString();
-        });
-        child.stderr?.on("data", (data) => {
-          stderr += data.toString();
-        });
-        onChildExit(child, (code8) => {
-          if (code8 === 0) {
-            resolve82();
-            return;
-          }
-          reject(
-            new Error(
-              (stderr || stdout || `elevated command exited with ${code8}`).trim().slice(0, 500)
-            )
-          );
-        });
-        onChildError(child, (err) => reject(err));
-      })
-    );
+    await runSudoScriptChecked(ctx3, script);
   } catch (err) {
     renderWarning(
       `Elevated command failed: ${err instanceof Error ? err.message : String(err)}`
     );
   }
 }
+async function migrateAttestedPrivilegedDaemonOwner(ctx3, port) {
+  if (process.platform !== "linux" || !Number.isInteger(port) || port <= 0) {
+    return false;
+  }
+  const script = [
+    "set -euo pipefail",
+    `port=${port}`,
+    "found=0",
+    "for pid in $( { lsof -nP -t -iTCP:${port} -sTCP:LISTEN 2>/dev/null || true; fuser ${port}/tcp 2>/dev/null || true; } | tr ' ' '\\n' | sort -un); do",
+    "  [ -r /proc/$pid/cmdline ] || continue",
+    "  cmd=$(tr '\\000' ' ' </proc/$pid/cmdline)",
+    '  case "$cmd" in *omnius*serve*--daemon*) ;; *) continue ;; esac',
+    "  unit=$(sed -nE 's#.*(/[^:]*\\.service).*#\\1#p' /proc/$pid/cgroup | head -n1 | sed 's#.*/##')",
+    '  [ "$unit" = power-monitor.service ] || continue',
+    '  echo "Migrating attested Omnius daemon owner: $unit (pid $pid)"',
+    '  systemctl restart "$unit"',
+    "  found=1",
+    "  break",
+    "done",
+    '[ "$found" = 1 ]'
+  ].join("\n");
+  try {
+    await runSudoScriptChecked(ctx3, script);
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function ensureVoiceDeps(ctx3) {
   try {
     const mod3 = await Promise.resolve().then(() => (init_py_embed(), py_embed_exports));
@@ -686539,6 +687288,15 @@ async function handleParallel(arg, ctx3) {
     );
     return;
   }
+  const gpuAdmission = await resolveApprovedOllamaGpu();
+  if (!gpuAdmission.ok) {
+    renderError(`Ollama restart blocked by GPU safety policy: ${gpuAdmission.reason}`);
+    return;
+  }
+  const approvedGpuEnv = withApprovedOllamaGpu(
+    process.env,
+    gpuAdmission.approval
+  );
   let isSystemd = false;
   try {
     const out = (await execFileText5(
@@ -686557,6 +687315,7 @@ async function handleParallel(arg, ctx3) {
       const overrideFile = `${overrideDir}/parallel.conf`;
       const overrideContent = `[Service]
 Environment="OLLAMA_NUM_PARALLEL=${n2}"
+Environment="CUDA_VISIBLE_DEVICES=${gpuAdmission.approval.cudaVisibleDevices}"
 `;
       const { runElevatedCommand: runElev } = await Promise.resolve().then(() => (init_setup(), setup_exports));
       await runElev(`mkdir -p ${overrideDir}`, { timeoutMs: 3e4 });
@@ -686592,7 +687351,7 @@ ${escapedContent}EOF'`, {
       renderInfo(
         `Manual steps:
   sudo mkdir -p /etc/systemd/system/ollama.service.d
-  echo '[Service]\\nEnvironment="OLLAMA_NUM_PARALLEL=${n2}"' | sudo tee /etc/systemd/system/ollama.service.d/parallel.conf
+  printf '[Service]\\nEnvironment="OLLAMA_NUM_PARALLEL=${n2}"\\nEnvironment="CUDA_VISIBLE_DEVICES=${gpuAdmission.approval.cudaVisibleDevices}"\\n' | sudo tee /etc/systemd/system/ollama.service.d/parallel.conf
   sudo systemctl daemon-reload && sudo systemctl restart ollama`
       );
     }
@@ -686615,13 +687374,14 @@ ${escapedContent}EOF'`, {
       }
       await new Promise((r2) => setTimeout(r2, 1e3));
       process.env.OLLAMA_NUM_PARALLEL = String(n2);
+      process.env.CUDA_VISIBLE_DEVICES = gpuAdmission.approval.cudaVisibleDevices;
       const { spawn: spawn40 } = await import("node:child_process");
       const leaseId = newProcessLeaseId("model-service");
       const child = spawn40("ollama", ["serve"], {
         stdio: "ignore",
         detached: true,
         env: {
-          ...process.env,
+          ...approvedGpuEnv,
           ...processLeaseEnv(leaseId, "ollama", process.cwd()),
           OMNIUS_PROCESS_OWNER_KIND: "model_service",
           OMNIUS_PROCESS_LIFECYCLE: "model",
@@ -688416,20 +689176,35 @@ async function handleUpdate(subcommand, ctx3) {
   installOverlay.setStatus("Gracefully upgrading shared daemon...");
   const { ensureDaemonVersion: ensureDaemonVersion2, getLocalCliVersion: getLocalCliVersion2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
   const expectedDaemonVersion = getLocalCliVersion2();
-  const daemonUpgrade = await ensureDaemonVersion2(expectedDaemonVersion);
+  let daemonUpgrade = await ensureDaemonVersion2(expectedDaemonVersion);
+  if (!daemonUpgrade.ok && daemonUpgrade.requiresPrivilegedMigration) {
+    installOverlay.stop("Migrating the verified privileged daemon owner...");
+    await new Promise((r2) => setTimeout(r2, 300));
+    installOverlay.dismiss();
+    const migrated = await migrateAttestedPrivilegedDaemonOwner(
+      ctx3,
+      daemonUpgrade.port
+    );
+    if (migrated) {
+      const migrationOverlay = startInstallOverlay(targetVersion);
+      Object.assign(installOverlay, migrationOverlay);
+      installOverlay.setPhase("Daemon");
+      installOverlay.setStatus("Verifying the migrated daemon...");
+      daemonUpgrade = await ensureDaemonVersion2(expectedDaemonVersion);
+    }
+  }
   if (!daemonUpgrade.ok) {
     installOverlay.stop("Update installed, but daemon upgrade was not verified");
     await new Promise((r2) => setTimeout(r2, 1200));
     installOverlay.dismiss();
     renderError(
-      `Updated CLI to ${expectedDaemonVersion}, but the shared daemon still reports ${daemonUpgrade.observedVersion ?? "unavailable"}. The TUI will remain open; retry /update after resolving the daemon service.`
+      `Updated CLI to ${expectedDaemonVersion}, but the shared daemon still reports ${daemonUpgrade.observedVersion ?? "unavailable"} after ${daemonUpgrade.recoveryAttempts} verified recovery round(s). A privileged owner was ${daemonUpgrade.requiresPrivilegedMigration ? "not safely migratable" : "not detected"}; no arbitrary port holder was terminated.`
     );
     return;
   }
   installOverlay.setStatus(
     daemonUpgrade.action === "restarted" ? `Daemon upgraded to ${expectedDaemonVersion}` : `Daemon verified at ${expectedDaemonVersion}`
   );
-  registry2.killAll();
   ctx3.contextSave?.();
   const hadActiveTask = ctx3.savePendingTaskState?.() ?? false;
   const resumeFlag = hadActiveTask ? "1" : "update-only";
@@ -688439,7 +689214,7 @@ async function handleUpdate(subcommand, ctx3) {
   await new Promise((r2) => setTimeout(r2, 200));
   ctx3.contextSave?.();
   if (ctx3.hasActiveTask?.()) ctx3.abortActiveTask?.();
-  ctx3.killEphemeral?.();
+  ctx3.killEphemeral?.({ preserveInfrastructure: true });
   process.exit(120);
 }
 async function switchModel(query, ctx3, local = false) {
@@ -688929,6 +689704,7 @@ var OMNIUS_PINNED_DEPENDENCY_SPECS, NEXUS_DIRECTORY_ORIGIN, NEXUS_SPONSORS_URL,
 var init_commands = __esm({
   "packages/cli/src/tui/commands.ts"() {
     init_model_picker();
+    init_ollama_gpu_policy();
     init_render();
     init_session_summary();
     init_generative_progress();
@@ -689487,7 +690263,7 @@ import {
   readFileSync as readFileSync121,
   readdirSync as readdirSync50,
   writeFileSync as writeFileSync76,
-  renameSync as renameSync14,
+  renameSync as renameSync15,
   mkdirSync as mkdirSync88,
   unlinkSync as unlinkSync31,
   appendFileSync as appendFileSync17
@@ -689511,7 +690287,7 @@ function persistSession(s2) {
     const final2 = sessionPath(s2.id);
     const tmp = `${final2}.tmp.${process.pid}.${Date.now()}`;
     writeFileSync76(tmp, JSON.stringify(s2, null, 2), "utf-8");
-    renameSync14(tmp, final2);
+    renameSync15(tmp, final2);
   } catch {
   }
 }
@@ -689521,7 +690297,7 @@ function persistInFlight(j) {
     const final2 = inFlightPath(j.sessionId);
     const tmp = `${final2}.tmp.${process.pid}.${Date.now()}`;
     writeFileSync76(tmp, JSON.stringify(j, null, 2), "utf-8");
-    renameSync14(tmp, final2);
+    renameSync15(tmp, final2);
   } catch {
   }
 }
@@ -696046,7 +696822,7 @@ import {
 } from "node:fs";
 import { join as join165, basename as basename39 } from "node:path";
 import { exec as exec6 } from "node:child_process";
-import { promisify as promisify8 } from "node:util";
+import { promisify as promisify9 } from "node:util";
 function buildDMNGatherPrompt(recentTaskSummaries, dueReminders, attentionItems, memoryTopics, capabilities, competence, reflectionBuffer, projectOpportunities = []) {
   const competenceReport = competence.length > 0 ? competence.map((c9) => {
     const rate = c9.attempts > 0 ? Math.round(c9.successes / c9.attempts * 100) : 0;
@@ -696170,7 +696946,7 @@ var init_dmn_engine = __esm({
     init_render();
     init_promptLoader3();
     init_tool_adapter();
-    execAsync3 = promisify8(exec6);
+    execAsync3 = promisify9(exec6);
     DMNEngine = class {
       constructor(config, repoRoot) {
         this.config = config;
@@ -709937,8 +710713,8 @@ ${mediaContext}` : ""
         }
       }
       telegramChatIdFromArtifact(artifact) {
-        const numeric = Number(artifact.chatId);
-        return Number.isFinite(numeric) && String(Math.trunc(numeric)) === artifact.chatId ? Math.trunc(numeric) : artifact.chatId;
+        const numeric2 = Number(artifact.chatId);
+        return Number.isFinite(numeric2) && String(Math.trunc(numeric2)) === artifact.chatId ? Math.trunc(numeric2) : artifact.chatId;
       }
       async maybeSendTelegramReflectionFollowup(sessionKey, artifact, reason = "reflection") {
         if (!this.agentConfig)
@@ -723591,7 +724367,7 @@ __export(projects_exports, {
   setCurrentProject: () => setCurrentProject,
   unregisterProject: () => unregisterProject
 });
-import { readFileSync as readFileSync132, writeFileSync as writeFileSync86, mkdirSync as mkdirSync99, existsSync as existsSync161, statSync as statSync63, renameSync as renameSync15 } from "node:fs";
+import { readFileSync as readFileSync132, writeFileSync as writeFileSync86, mkdirSync as mkdirSync99, existsSync as existsSync161, statSync as statSync63, renameSync as renameSync16 } from "node:fs";
 import { homedir as homedir58 } from "node:os";
 import { basename as basename43, join as join171, resolve as resolve74 } from "node:path";
 import { randomUUID as randomUUID19 } from "node:crypto";
@@ -723610,7 +724386,7 @@ function writeAll(file) {
   mkdirSync99(OMNIUS_DIR3, { recursive: true });
   const tmp = `${PROJECTS_FILE}.${randomUUID19().slice(0, 8)}.tmp`;
   writeFileSync86(tmp, JSON.stringify(file, null, 2), "utf8");
-  renameSync15(tmp, PROJECTS_FILE);
+  renameSync16(tmp, PROJECTS_FILE);
 }
 function listProjects() {
   const { projects } = readAll2();
@@ -724585,7 +725361,7 @@ var init_access_policy = __esm({
 
 // packages/cli/src/api/project-preferences.ts
 import { createHash as createHash50 } from "node:crypto";
-import { existsSync as existsSync162, mkdirSync as mkdirSync100, readFileSync as readFileSync133, renameSync as renameSync16, writeFileSync as writeFileSync87, unlinkSync as unlinkSync37 } from "node:fs";
+import { existsSync as existsSync162, mkdirSync as mkdirSync100, readFileSync as readFileSync133, renameSync as renameSync17, writeFileSync as writeFileSync87, unlinkSync as unlinkSync37 } from "node:fs";
 import { homedir as homedir59 } from "node:os";
 import { join as join172, resolve as resolve75 } from "node:path";
 import { randomUUID as randomUUID20 } from "node:crypto";
@@ -724639,7 +725415,7 @@ function writeProjectPreferences(root, partial) {
   const tmp = `${file}.${randomUUID20().slice(0, 8)}.tmp`;
   writeFileSync87(tmp, JSON.stringify(merged, null, 2), "utf8");
   try {
-    renameSync16(tmp, file);
+    renameSync17(tmp, file);
   } catch (err) {
     try {
       writeFileSync87(file, JSON.stringify(merged, null, 2), "utf8");
@@ -725689,7 +726465,7 @@ var init_direct_tool_registry = __esm({
 });
 
 // packages/cli/src/api/external-tool-registry.ts
-import { existsSync as existsSync166, mkdirSync as mkdirSync104, readFileSync as readFileSync135, writeFileSync as writeFileSync88, renameSync as renameSync17 } from "node:fs";
+import { existsSync as existsSync166, mkdirSync as mkdirSync104, readFileSync as readFileSync135, writeFileSync as writeFileSync88, renameSync as renameSync18 } from "node:fs";
 import { join as join175 } from "node:path";
 function externalToolStorePath(workingDir) {
   return join175(workingDir, ".omnius", "external-tools.json");
@@ -725713,7 +726489,7 @@ function persist3(workingDir, tools) {
   const file = { version: STORE_VERSION, tools };
   const tmp = `${path16}.tmp`;
   writeFileSync88(tmp, JSON.stringify(file, null, 2), { mode: 384 });
-  renameSync17(tmp, path16);
+  renameSync18(tmp, path16);
 }
 function validateManifest2(input, existing) {
   if (!input || typeof input !== "object") {
@@ -744331,6 +745107,7 @@ var init_embedding_workers = __esm({
 var serve_exports = {};
 __export(serve_exports, {
   apiServeCommand: () => apiServeCommand,
+  readServerPackageIdentity: () => readServerPackageIdentity,
   startApiServer: () => startApiServer
 });
 import * as http5 from "node:http";
@@ -744348,15 +745125,14 @@ import {
   readdirSync as readdirSync59,
   existsSync as existsSync173,
   watch as fsWatch5,
-  renameSync as renameSync18,
+  renameSync as renameSync19,
   unlinkSync as unlinkSync38,
   statSync as statSync68,
   openSync as openSync8,
   readSync as readSync4,
   closeSync as closeSync8
 } from "node:fs";
-import { randomBytes as randomBytes29, randomUUID as randomUUID21, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
-import { createHash as createHash52 } from "node:crypto";
+import { createHash as createHash52, randomBytes as randomBytes29, randomUUID as randomUUID21, timingSafeEqual as timingSafeEqual2 } from "node:crypto";
 function memoryDbPaths3(baseDir = process.cwd()) {
   const dir = join183(baseDir, ".omnius");
   return {
@@ -744365,7 +745141,7 @@ function memoryDbPaths3(baseDir = process.cwd()) {
     knowledge: join183(dir, "knowledge.db")
   };
 }
-function getVersion3() {
+function readServerPackageIdentity() {
   try {
     const thisDir = dirname56(fileURLToPath23(import.meta.url));
     const candidates = [
@@ -744376,9 +745152,14 @@ function getVersion3() {
     for (const pkgPath of candidates) {
       try {
         if (!existsSync173(pkgPath)) continue;
-        const pkg = JSON.parse(readFileSync140(pkgPath, "utf8"));
+        const raw = readFileSync140(pkgPath, "utf8");
+        const pkg = JSON.parse(raw);
         if (pkg.name === "omnius" || pkg.name === "@omnius/cli" || pkg.name === "@omnius/monorepo") {
-          return pkg.version ?? "0.0.0";
+          return {
+            version: pkg.version ?? "0.0.0",
+            packagePath: pkgPath,
+            packageHash: createHash52("sha256").update(raw).digest("hex")
+          };
         }
       } catch {
         continue;
@@ -744386,7 +745167,10 @@ function getVersion3() {
     }
   } catch {
   }
-  return "0.0.0";
+  return { version: "0.0.0", packagePath: null, packageHash: null };
+}
+function getVersion3() {
+  return SERVER_BOOT_IDENTITY.version;
 }
 function normalizeLocalhostForDaemon(url) {
   if (process.env["OMNIUS_KEEP_LOCALHOST"] === "1") return url;
@@ -745967,7 +746751,7 @@ function atomicJobWrite(dir, id2, job) {
   const tmpPath = `${finalPath}.tmp.${process.pid}.${Date.now()}`;
   try {
     writeFileSync92(tmpPath, JSON.stringify(job, null, 2), "utf-8");
-    renameSync18(tmpPath, finalPath);
+    renameSync19(tmpPath, finalPath);
   } catch {
     try {
       writeFileSync92(finalPath, JSON.stringify(job, null, 2), "utf-8");
@@ -746192,7 +746976,12 @@ function handleHealth(res) {
   jsonResponse(res, 200, {
     status: "ok",
     uptime_s: Math.floor((Date.now() - startedAt) / 1e3),
-    version: version5
+    version: version5,
+    // `version` is retained for old clients. These explicit boot fields let
+    // an updater prove that the process, rather than only its install path,
+    // changed after an npm swap.
+    boot_version: SERVER_BOOT_IDENTITY.version,
+    boot_package_hash: SERVER_BOOT_IDENTITY.packageHash
   });
 }
 async function handleHealthReady(res, ollamaUrl) {
@@ -746225,6 +747014,8 @@ function handleVersion(res) {
   const version5 = getVersion3();
   jsonResponse(res, 200, {
     version: version5,
+    boot_version: SERVER_BOOT_IDENTITY.version,
+    boot_package_hash: SERVER_BOOT_IDENTITY.packageHash,
     node: process.version,
     platform: process.platform
   });
@@ -747768,7 +748559,7 @@ function writeUpdateState(state) {
     const finalPath = updateStateFile();
     const tmpPath = `${finalPath}.tmp.${process.pid}`;
     writeFileSync92(tmpPath, JSON.stringify(state, null, 2), "utf-8");
-    renameSync18(tmpPath, finalPath);
+    renameSync19(tmpPath, finalPath);
   } catch {
   }
 }
@@ -753754,27 +754545,11 @@ function startApiServer(options2 = {}) {
   omnius API server v${version5}
 `);
     if (process.env["OMNIUS_DAEMON"] === "1" && process.env["OMNIUS_NO_VERSION_GUARD"] !== "1") {
-      const readDiskVersion = () => {
-        try {
-          const here = dirname56(fileURLToPath23(import.meta.url));
-          for (const rel of ["../package.json", "../../package.json", "../../../package.json", "../../../../package.json"]) {
-            const p2 = join183(here, rel);
-            if (existsSync173(p2)) {
-              const pkg = JSON.parse(readFileSync140(p2, "utf8"));
-              if (pkg.name === "omnius" || pkg.name === "@omnius/cli" || pkg.name === "@omnius/monorepo") {
-                return pkg.version ?? null;
-              }
-            }
-          }
-        } catch {
-        }
-        return null;
-      };
-      const bootVersion = readDiskVersion() ?? version5;
+      const bootIdentity = SERVER_BOOT_IDENTITY;
       const versionWatch = setInterval(() => {
-        const disk = readDiskVersion();
-        if (disk && disk !== bootVersion) {
-          log22(`  [daemon] version changed on disk ${bootVersion} -> ${disk}; restarting for the new version…
+        const disk = readServerPackageIdentity();
+        if (disk.version !== bootIdentity.version || disk.packageHash && disk.packageHash !== bootIdentity.packageHash) {
+          log22(`  [daemon] package identity changed on disk ${bootIdentity.version} -> ${disk.version}; restarting for the new version…
 `);
           try {
             server2.close(() => process.exit(0));
@@ -754656,7 +755431,7 @@ function setTimerEnabled(name10, enabled2) {
     return false;
   }
 }
-var require4, NEXUS_DIRECTORY_ORIGIN2, NEXUS_SPONSORS_URL2, endpointRegistry, modelRouteMap, endpointUsage, _lastEndpointDiagnostics, BACKEND_TIMEOUT_DEFAULT_MS, BACKEND_TIMEOUT_MAX_MS, MODEL_LIST_TIMEOUT_DEFAULT_MS, metrics, startedAt, FILE_MIME_BY_EXT, realtimeOllamaFallbackCache, runningProcesses, LOCAL_UI_SESSION_COOKIE, LOCAL_UI_SESSION_TOKEN, perKeyUsage, CRON_MARKER2;
+var require4, NEXUS_DIRECTORY_ORIGIN2, NEXUS_SPONSORS_URL2, SERVER_BOOT_IDENTITY, endpointRegistry, modelRouteMap, endpointUsage, _lastEndpointDiagnostics, BACKEND_TIMEOUT_DEFAULT_MS, BACKEND_TIMEOUT_MAX_MS, MODEL_LIST_TIMEOUT_DEFAULT_MS, metrics, startedAt, FILE_MIME_BY_EXT, realtimeOllamaFallbackCache, runningProcesses, LOCAL_UI_SESSION_COOKIE, LOCAL_UI_SESSION_TOKEN, perKeyUsage, CRON_MARKER2;
 var init_serve = __esm({
   "packages/cli/src/api/serve.ts"() {
     init_config();
@@ -754693,6 +755468,7 @@ var init_serve = __esm({
     require4 = createRequire8(import.meta.url);
     NEXUS_DIRECTORY_ORIGIN2 = (process.env["OMNIUS_NEXUS_DIRECTORY_ORIGIN"] || process.env["OMNIUS_NEXUS_SIGNALING_SERVER"] || "https://openagents.nexus").replace(/\/+$/, "");
     NEXUS_SPONSORS_URL2 = `${NEXUS_DIRECTORY_ORIGIN2}/api/v1/sponsors`;
+    SERVER_BOOT_IDENTITY = readServerPackageIdentity();
     endpointRegistry = [];
     modelRouteMap = /* @__PURE__ */ new Map();
     endpointUsage = /* @__PURE__ */ new Map();
@@ -755120,9 +755896,9 @@ ${incompleteList}${more}
             const checkScript = scripts["typecheck"] ? "typecheck" : scripts["build"] ? "build" : null;
             if (checkScript) {
               const { exec: exec7 } = await import("node:child_process");
-              const { promisify: promisify9 } = await import("node:util");
+              const { promisify: promisify10 } = await import("node:util");
               try {
-                await promisify9(exec7)(`npm run ${checkScript} --silent 2>&1`, {
+                await promisify10(exec7)(`npm run ${checkScript} --silent 2>&1`, {
                   cwd: cwd4,
                   timeout: 12e4,
                   encoding: "utf-8",
@@ -755853,6 +756629,57 @@ function appendSubAgentNoteBox(statusBar, agentId, event, title, metrics2, conte
     spec
   );
 }
+function prepareCompactionAudit(event) {
+  const record = event.compaction;
+  if (!record) {
+    return {
+      display: event.content ?? "Context compacted (legacy event without an audit payload).",
+      ledger: {
+        schemaVersion: 1,
+        timestamp: event.timestamp,
+        legacy: true,
+        summary: event.content ?? "",
+        removedMessages: []
+      }
+    };
+  }
+  const redactor = getSecretRedactor();
+  const removedMessages = record.removedMessages.map((message2) => ({
+    ...message2,
+    content: redactor.redactText(message2.content)
+  }));
+  const summary = redactor.redactText(record.summary);
+  const lines = [
+    "[COMPACTION AUDIT]",
+    `id=${record.id}`,
+    `reason=context budget; strategy=${record.strategy}${record.manual ? "; manual" : ""}`,
+    `tokens=~${record.beforeTokens.toLocaleString()} → ~${record.afterTokens.toLocaleString()} (saved ~${record.savedTokens.toLocaleString()})`,
+    `removed=${removedMessages.length}; retained=${record.retainedMessages}`,
+    "ledger=.omnius/context/compactions.jsonl",
+    "",
+    "Summary retained for the model:",
+    summary || "(none)",
+    "",
+    `Exact removed model-visible messages (${removedMessages.length}):`
+  ];
+  for (const message2 of removedMessages) {
+    lines.push(
+      `--- removed[${message2.index}] role=${message2.role} chars=${message2.chars} reason=${message2.reason}${message2.toolCallId ? ` tool_call_id=${message2.toolCallId}` : ""} ---`,
+      message2.content || "(empty)"
+    );
+  }
+  return {
+    display: lines.join("\n"),
+    ledger: {
+      schemaVersion: 1,
+      ...record,
+      summary,
+      removedMessages,
+      recordedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      source: "interactive-tui"
+    }
+  };
+}
 function writeSubAgentEventForView(statusBar, agentId, event, verbose = false) {
   const previewLine = formatSubAgentEventForView(event);
   statusBar.updateAgentViewEvent(agentId, event, previewLine ?? event.type);
@@ -758605,11 +759432,18 @@ ${entry.fullContent}`
         statusBar?.updateTrajectoryCheckpoint(event.trajectory ?? null);
         break;
       case "compaction":
+        const compactionAudit = prepareCompactionAudit(event);
+        appendCompactionAudit(process.cwd(), compactionAudit.ledger);
         if (isNeovimActive()) {
-          writeToNeovimOutput("\x1B[33m⚠ Context compacted\x1B[0m\r\n");
+          writeToNeovimOutput("\x1B[33m⚠ Context compacted — audit: .omnius/context/compactions.jsonl\x1B[0m\r\n");
         } else {
           contentWrite(
-            () => renderWarning(`Context compacted: ${event.content}`)
+            () => renderToolResult(
+              "context_compaction",
+              true,
+              compactionAudit.display,
+              { verbose: config.verbose }
+            )
           );
         }
         if (onCompaction) onCompaction();
@@ -762073,11 +762907,11 @@ The user pasted a clipboard image saved at ${relPath}. Use the OCR, vision analy
         };
       }
     },
-    killEphemeral() {
+    killEphemeral(options2) {
       if (_shellToolRef) _shellToolRef.killAll();
       killAllFullSubAgents();
       taskManager.stopAll();
-      registry2.killAll();
+      if (!options2?.preserveInfrastructure) registry2.killAll();
       if (_replToolRef) {
         try {
           _replToolRef.dispose();