omnius 1.0.692 → 1.0.694

package/dist/index.js

@@ -112363,10 +112363,10 @@ var init_parser = __esm({
        * the separator character will only be read on index > 0 (see
        * readIPv4Addr for an example)
        */
-      readSeparator(sep17, index, inner) {
+      readSeparator(sep16, index, inner) {
         return this.readAtomically(() => {
           if (index > 0) {
-            if (this.readGivenChar(sep17) === void 0) {
+            if (this.readGivenChar(sep16) === void 0) {
               return void 0;
             }
           }
@@ -212996,7 +212996,7 @@ var require_snapshot_recorder = __commonJS({
   "../node_modules/undici/lib/mock/snapshot-recorder.js"(exports, module) {
     "use strict";
     var { writeFile: writeFile31, readFile: readFile30, mkdir: mkdir29 } = __require("node:fs/promises");
-    var { dirname: dirname87, resolve: resolve103 } = __require("node:path");
+    var { dirname: dirname88, resolve: resolve103 } = __require("node:path");
     var { setTimeout: setTimeout3, clearTimeout: clearTimeout3 } = __require("node:timers");
     var { InvalidArgumentError, UndiciError } = require_errors2();
     var { hashId, isUrlExcludedFactory, normalizeHeaders, createHeaderFilters } = require_snapshot_utils();
@@ -213227,7 +213227,7 @@ var require_snapshot_recorder = __commonJS({
           throw new InvalidArgumentError("Snapshot path is required");
         }
         const resolvedPath = resolve103(path16);
-        await mkdir29(dirname87(resolvedPath), { recursive: true });
+        await mkdir29(dirname88(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash2, snapshot]) => ({
           hash: hash2,
           snapshot
@@ -326889,15 +326889,15 @@ var init_ls = __esm({
 });
 
 // ../node_modules/@helia/unixfs/dist/src/commands/mkdir.js
-async function mkdir8(parentCid, dirname87, blockstore, options2 = {}) {
-  if (dirname87.includes("/")) {
+async function mkdir8(parentCid, dirname88, blockstore, options2 = {}) {
+  if (dirname88.includes("/")) {
     throw new InvalidParametersError4("Path must not have slashes");
   }
   const entry = await exporter2(parentCid, blockstore, options2);
   if (entry.type !== "directory") {
     throw new NotADirectoryError(`${parentCid.toString()} was not a UnixFS directory`);
   }
-  log16("creating %s", dirname87);
+  log16("creating %s", dirname88);
   const metadata = new UnixFS({
     type: "directory",
     mode: options2.mode,
@@ -326913,9 +326913,9 @@ async function mkdir8(parentCid, dirname87, blockstore, options2 = {}) {
   await blockstore.put(emptyDirCid, buf);
   const [directory, pblink] = await Promise.all([
     cidToDirectory(parentCid, blockstore, options2),
-    cidToPBLink(emptyDirCid, dirname87, blockstore, options2)
+    cidToPBLink(emptyDirCid, dirname88, blockstore, options2)
   ]);
-  log16("adding empty dir called %s to %c", dirname87, parentCid);
+  log16("adding empty dir called %s to %c", dirname88, parentCid);
   const result = await addLink(directory, pblink, blockstore, {
     ...options2,
     allowOverwriting: options2.force
@@ -327414,8 +327414,8 @@ var init_unixfs2 = __esm({
       async *ls(cid, options2 = {}) {
         yield* ls(cid, this.components.blockstore, options2);
       }
-      async mkdir(cid, dirname87, options2 = {}) {
-        return mkdir8(cid, dirname87, this.components.blockstore, options2);
+      async mkdir(cid, dirname88, options2 = {}) {
+        return mkdir8(cid, dirname88, this.components.blockstore, options2);
       }
       async rm(cid, path16, options2 = {}) {
         return rm6(cid, path16, this.components.blockstore, options2);
@@ -330860,7 +330860,7 @@ var require_pattern = __commonJS({
       const absolute = [];
       const relative31 = [];
       for (const pattern of patterns) {
-        if (isAbsolute26(pattern)) {
+        if (isAbsolute27(pattern)) {
           absolute.push(pattern);
         } else {
           relative31.push(pattern);
@@ -330869,10 +330869,10 @@ var require_pattern = __commonJS({
       return [absolute, relative31];
     }
     exports.partitionAbsoluteAndRelative = partitionAbsoluteAndRelative;
-    function isAbsolute26(pattern) {
+    function isAbsolute27(pattern) {
       return path16.isAbsolute(pattern);
     }
-    exports.isAbsolute = isAbsolute26;
+    exports.isAbsolute = isAbsolute27;
   }
 });
 
@@ -361391,7 +361391,7 @@ var require_util9 = __commonJS({
         }
         path16 = url.path;
       }
-      var isAbsolute26 = exports.isAbsolute(path16);
+      var isAbsolute27 = exports.isAbsolute(path16);
       var parts = path16.split(/\/+/);
       for (var part, up = 0, i2 = parts.length - 1; i2 >= 0; i2--) {
         part = parts[i2];
@@ -361411,7 +361411,7 @@ var require_util9 = __commonJS({
       }
       path16 = parts.join("/");
       if (path16 === "") {
-        path16 = isAbsolute26 ? "/" : ".";
+        path16 = isAbsolute27 ? "/" : ".";
       }
       if (url) {
         url.path = path16;
@@ -411606,11 +411606,11 @@ ${lanes.join("\n")}
             if (i2 < rootLength) {
               return void 0;
             }
-            const sep17 = directory.lastIndexOf(directorySeparator, i2 - 1);
-            if (sep17 === -1) {
+            const sep16 = directory.lastIndexOf(directorySeparator, i2 - 1);
+            if (sep16 === -1) {
               return void 0;
             }
-            return directory.substr(0, Math.max(sep17, rootLength));
+            return directory.substr(0, Math.max(sep16, rootLength));
           }
         }
       }
@@ -576978,7 +576978,7 @@ var require_path_browserify = __commonJS({
       }
       return res;
     }
-    function _format(sep17, pathObject) {
+    function _format(sep16, pathObject) {
       var dir = pathObject.dir || pathObject.root;
       var base3 = pathObject.base || (pathObject.name || "") + (pathObject.ext || "");
       if (!dir) {
@@ -576987,7 +576987,7 @@ var require_path_browserify = __commonJS({
       if (dir === pathObject.root) {
         return dir + base3;
       }
-      return dir + sep17 + base3;
+      return dir + sep16 + base3;
     }
     var posix = {
       // path.resolve([from ...], to)
@@ -577026,15 +577026,15 @@ var require_path_browserify = __commonJS({
       normalize: function normalize6(path16) {
         assertPath(path16);
         if (path16.length === 0) return ".";
-        var isAbsolute26 = path16.charCodeAt(0) === 47;
+        var isAbsolute27 = path16.charCodeAt(0) === 47;
         var trailingSeparator = path16.charCodeAt(path16.length - 1) === 47;
-        path16 = normalizeStringPosix(path16, !isAbsolute26);
-        if (path16.length === 0 && !isAbsolute26) path16 = ".";
+        path16 = normalizeStringPosix(path16, !isAbsolute27);
+        if (path16.length === 0 && !isAbsolute27) path16 = ".";
         if (path16.length > 0 && trailingSeparator) path16 += "/";
-        if (isAbsolute26) return "/" + path16;
+        if (isAbsolute27) return "/" + path16;
         return path16;
       },
-      isAbsolute: function isAbsolute26(path16) {
+      isAbsolute: function isAbsolute27(path16) {
         assertPath(path16);
         return path16.length > 0 && path16.charCodeAt(0) === 47;
       },
@@ -577125,7 +577125,7 @@ var require_path_browserify = __commonJS({
       _makeLong: function _makeLong(path16) {
         return path16;
       },
-      dirname: function dirname87(path16) {
+      dirname: function dirname88(path16) {
         assertPath(path16);
         if (path16.length === 0) return ".";
         var code8 = path16.charCodeAt(0);
@@ -577248,9 +577248,9 @@ var require_path_browserify = __commonJS({
         var ret = { root: "", dir: "", base: "", ext: "", name: "" };
         if (path16.length === 0) return ret;
         var code8 = path16.charCodeAt(0);
-        var isAbsolute26 = code8 === 47;
+        var isAbsolute27 = code8 === 47;
         var start2;
-        if (isAbsolute26) {
+        if (isAbsolute27) {
           ret.root = "/";
           start2 = 1;
         } else {
@@ -577286,11 +577286,11 @@ var require_path_browserify = __commonJS({
         preDotState === 0 || // The (right-most) trimmed path component is exactly '..'
         preDotState === 1 && startDot === end - 1 && startDot === startPart + 1) {
           if (end !== -1) {
-            if (startPart === 0 && isAbsolute26) ret.base = ret.name = path16.slice(1, end);
+            if (startPart === 0 && isAbsolute27) ret.base = ret.name = path16.slice(1, end);
             else ret.base = ret.name = path16.slice(startPart, end);
           }
         } else {
-          if (startPart === 0 && isAbsolute26) {
+          if (startPart === 0 && isAbsolute27) {
             ret.name = path16.slice(1, startDot);
             ret.base = path16.slice(1, end);
           } else {
@@ -577300,7 +577300,7 @@ var require_path_browserify = __commonJS({
           ret.ext = path16.slice(startDot, end);
         }
         if (startPart > 0) ret.dir = path16.slice(0, startPart - 1);
-        else if (isAbsolute26) ret.dir = "/";
+        else if (isAbsolute27) ret.dir = "/";
         return ret;
       },
       sep: "/",
@@ -617600,10 +617600,10 @@ var init_transport5 = __esm({
             if (done)
               break;
             buf += decoder.decode(value2, { stream: true });
-            let sep17;
-            while ((sep17 = buf.indexOf("\n\n")) !== -1) {
-              const event = buf.slice(0, sep17);
-              buf = buf.slice(sep17 + 2);
+            let sep16;
+            while ((sep16 = buf.indexOf("\n\n")) !== -1) {
+              const event = buf.slice(0, sep16);
+              buf = buf.slice(sep16 + 2);
               const dataLines = [];
               for (const line of event.split("\n")) {
                 if (line.startsWith("data:"))
@@ -633037,7 +633037,7 @@ function integrationClosureCompletionBlockers(closure) {
       blockers.push(`${claim.label}: hardware claim lacks delivery-path evidence.`);
     }
   }
-  return unique2(blockers, 8);
+  return unique2([...blockers, ...closure.frontier.survivingBlockers], 8);
 }
 function buildIntegrationClosure(input) {
   const ledger = input.ledger ?? void 0;
@@ -633069,7 +633069,6 @@ function buildIntegrationClosure(input) {
   });
   const pathReasons = /* @__PURE__ */ new Map();
   const requiredPaths = discovery?.requiredArtifactPaths ?? [];
-  const candidatePaths = discovery?.candidatePaths ?? [];
   const addPath = (rawPath, reason) => {
     const path16 = pathKey(rawPath);
     if (!path16)
@@ -633099,12 +633098,30 @@ function buildIntegrationClosure(input) {
   for (const path16 of requiredPaths) {
     addPath(path16, discovery?.pathReasons?.[path16] || "explicit task artifact");
   }
-  for (const path16 of candidatePaths) {
-    addPath(path16, discovery?.pathReasons?.[path16] || "bounded workspace lead");
-  }
   for (const path16 of input.modifiedPaths ?? []) {
     addPath(path16, "modified during this run");
   }
+  const unresolvedTodos = [...input.unresolvedTodos ?? []];
+  for (const todo of unresolvedTodos) {
+    const todoId = nodeId("requirement", `todo:${todo.id}`);
+    addNode({
+      id: todoId,
+      kind: "requirement",
+      label: `[${todo.status}] ${clean3(todo.label, 300)}`,
+      state: todo.status === "blocked" ? "blocked" : "open",
+      provenance: "controller"
+    });
+    addEdge({
+      id: edgeId(requirementId, "requires", todoId),
+      from: requirementId,
+      to: todoId,
+      relation: "requires",
+      state: todo.status === "blocked" ? "blocked" : "open",
+      provenance: "controller",
+      reason: `authoritative todo ${todo.id} remains ${todo.status}`
+    });
+  }
+  const activeFailures = [...input.activeFailures ?? []];
   const evidence = (ledger?.evidence ?? []).slice(-MAX_EVIDENCE);
   for (const item of evidence) {
     const evidenceId = nodeId("evidence", item.id);
@@ -633280,11 +633297,14 @@ function buildIntegrationClosure(input) {
   const unresolved = ledger?.unresolved ?? [];
   const discoveryBlocksCompletion = discovery?.requiresEvidence === true;
   const proofGaps = unique2([
+    ...unresolvedTodos.map((todo) => `todo ${todo.id} remains ${todo.status}: ${clean3(todo.label, 220)}`),
     ...(discoveryBlocksCompletion ? discovery?.openDeltas ?? [] : []).map((delta) => `${delta.path}: ${delta.reason}`),
     ...unresolved.map((item) => item.text),
     ...claims.filter((claim) => claim.status !== "supported").filter(claimRequiresClosure).map((claim) => `${claim.id}: ${claim.requiredCheck}`)
   ], MAX_GAPS);
   const blockers = unique2([
+    ...activeFailures.map((failure2) => `${failure2.id}: ${clean3(failure2.label, 240)}`),
+    ...unresolvedTodos.filter((todo) => todo.status === "blocked").map((todo) => `todo ${todo.id} is blocked: ${clean3(todo.label, 220)}`),
     ...discoveryBlocksCompletion ? discovery?.survivingBlockers ?? [] : [],
     ...discoveryBlocksCompletion ? discovery?.unresolvedQuestions ?? [] : [],
     ...claims.filter((claim) => claim.status === "blocked" || claim.status === "contradicted").map((claim) => `${claim.id}: ${claim.text}`)
@@ -633308,6 +633328,7 @@ function buildIntegrationClosure(input) {
     });
   }
   const nextEvidence = unique2([
+    ...unresolvedTodos.map((todo) => `Resolve todo ${todo.id}: ${clean3(todo.label, 220)}`),
     ...claims.filter((claim) => claim.status !== "supported").filter(claimRequiresClosure).map((claim) => claim.requiredCheck),
     ...(discoveryBlocksCompletion ? discovery?.openDeltas ?? [] : []).map((delta) => `Inspect ${delta.path} from authoritative source: ${delta.reason}`)
   ], 6);
@@ -652367,12 +652388,12 @@ function numericRequestOption(request, camelName, snakeName, fallback) {
 }
 function classify(message2) {
   const content = contentText(message2.content);
-  if (message2.role === "user" || /\[CURRENT USER GOAL\]|\[ACTIVE USER STEERING\]/.test(content))
-    return "authorityTokens";
   if (/\[ADMITTED_FILE_READ|<recovered-file|\[VERIFIED[_ ]RUNTIME[_ ]FILE[_ ]READ\]|\[SHELL TRANSCRIPT\]|\[FILE CONTEXT\]/.test(content))
     return "evidenceTokens";
-  if (/\[CONTROLLER STATE v1\]|\[RECENT ACTION GROUND TRUTH\]|<task-state|\[ACTIVE CONTEXT FRAME\]|\[CONTEXT FRAME|\[RUN EVIDENCE\]/.test(content))
+  if (/\[CANONICAL CONTEXT PROJECTION|\[OPERATIONAL WORK GRAPH|\[CONTROLLER STATE v1\]|\[RECENT ACTION GROUND TRUTH\]|<task-state|\[ACTIVE CONTEXT FRAME\]|\[CONTEXT FRAME|\[RUN EVIDENCE\]/.test(content))
     return "taskAndWorkingSetTokens";
+  if (message2.role === "user" || /\[CURRENT USER GOAL\]|\[ACTIVE USER STEERING\]/.test(content))
+    return "authorityTokens";
   return message2.role === "system" ? "stableSystemTokens" : "historyTokens";
 }
 function compileOutboundRequestBudget(input) {
@@ -652667,18 +652688,18 @@ function analyzeContextWindowDumpRequest(request) {
   };
 }
 function contextSourceForMessage(role, text3) {
+  if (/\[CANONICAL CONTEXT PROJECTION|\[OPERATIONAL WORK GRAPH|\[CONTROLLER STATE v1\]|\[RECENT ACTION GROUND TRUTH\]/.test(text3)) {
+    return "current_controller_state";
+  }
+  if (/\[ACTIVE CONTEXT FRAME\]|Evidence already gathered this run/.test(text3)) {
+    return "active_evidence";
+  }
   if (/\[ACTIVE USER STEERING\]/.test(text3)) {
     return "active_user_steering";
   }
   if (/\[ACTIVE USER INTENT\]|\[CURRENT USER GOAL\]/.test(text3)) {
     return "current_user_intent";
   }
-  if (/\[CONTROLLER STATE v1\]|\[RECENT ACTION GROUND TRUTH\]/.test(text3)) {
-    return "current_controller_state";
-  }
-  if (/\[ACTIVE CONTEXT FRAME\]|Evidence already gathered this run/.test(text3)) {
-    return "active_evidence";
-  }
   if (role === "tool")
     return "tool_result";
   if (role === "system")
@@ -653495,8 +653516,8 @@ var init_adversaryStream = __esm({
           return;
         try {
           const { writeFileSync: writeFileSync125, mkdirSync: mkdirSync142, existsSync: existsSync208 } = __require("node:fs");
-          const { dirname: dirname87 } = __require("node:path");
-          const dir = dirname87(this.persistPath);
+          const { dirname: dirname88 } = __require("node:path");
+          const dir = dirname88(this.persistPath);
           if (!existsSync208(dir))
             mkdirSync142(dir, { recursive: true });
           writeFileSync125(this.persistPath, JSON.stringify({ ledger: this.ledger }, null, 2));
@@ -659866,9 +659887,9 @@ var init_prompt_cache = __esm({
 });
 
 // packages/orchestrator/dist/git-progress.js
-import { existsSync as existsSync120, readFileSync as readFileSync96, statSync as statSync46 } from "node:fs";
+import { existsSync as existsSync120, readFileSync as readFileSync96, realpathSync, statSync as statSync46 } from "node:fs";
 import { createHash as createHash62 } from "node:crypto";
-import { relative as relative20, resolve as resolve67, sep as sep11 } from "node:path";
+import { dirname as dirname52, isAbsolute as isAbsolute21, relative as relative20, resolve as resolve67 } from "node:path";
 function isRunnerOwnedGitPath(path16) {
   const normalized4 = normalizeGitPath(path16);
   return RUNNER_OWNED_PREFIXES.some((prefix) => normalized4.startsWith(prefix));
@@ -659968,16 +659989,28 @@ function statusMap(entries2) {
 function pathsFromStatus(entries2) {
   return normalizePathList(entries2.map((entry) => entry.path));
 }
+function pathWithin(root, candidate) {
+  const rel = relative20(resolve67(root), resolve67(candidate));
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) && !isAbsolute21(rel);
+}
 function normalizeMutatedPath(repoRoot, path16) {
-  const normalized4 = normalizeGitPath(path16);
-  if (!normalized4)
+  const raw = path16.trim();
+  if (!raw)
     return "";
-  const absolute = resolve67(repoRoot, normalized4);
-  let rel = relative20(repoRoot, absolute);
-  if (!rel || rel.startsWith("..") || rel === "." || rel.includes(`..${sep11}`)) {
-    rel = normalized4;
+  const absolute = isAbsolute21(raw) ? resolve67(raw) : resolve67(repoRoot, raw);
+  if (!pathWithin(repoRoot, absolute))
+    return "";
+  return normalizeGitPath(relative20(repoRoot, absolute));
+}
+function nearestExistingPath(path16) {
+  let current = resolve67(path16);
+  while (!existsSync120(current)) {
+    const parent = dirname52(current);
+    if (parent === current)
+      return null;
+    current = parent;
   }
-  return normalizeGitPath(rel);
+  return current;
 }
 function pathInScope(path16, ownedFiles) {
   if (ownedFiles.length === 0)
@@ -660064,6 +660097,7 @@ async function detectGitProgressBaseline(input) {
       touchedBaselineDirtyPaths: [],
       outsideOwnedScopePaths: [],
       sessionId: input.sessionId,
+      baselineProvenance: input.baselineProvenance ?? "launch",
       checkpoints: [
         {
           id: `baseline-${input.sessionId}`,
@@ -660092,14 +660126,85 @@ async function detectGitProgressBaseline(input) {
       touchedBaselineDirtyPaths: [],
       outsideOwnedScopePaths: [],
       sessionId: input.sessionId,
+      baselineProvenance: input.baselineProvenance ?? "launch",
       checkpoints: [],
       error: err instanceof Error ? err.message : String(err)
     };
   }
 }
+async function detectGitProgressBaselineFromPaths(input) {
+  const workspaceRoot = resolve67(input.cwd || process.cwd());
+  let canonicalWorkspaceRoot = workspaceRoot;
+  try {
+    canonicalWorkspaceRoot = realpathSync(workspaceRoot);
+  } catch {
+    return null;
+  }
+  const repoRoots = /* @__PURE__ */ new Set();
+  for (const rawPath of input.paths) {
+    const trimmed = rawPath.trim();
+    if (!trimmed)
+      continue;
+    const target = isAbsolute21(trimmed) ? resolve67(trimmed) : resolve67(workspaceRoot, trimmed);
+    if (!pathWithin(workspaceRoot, target))
+      return null;
+    const existingPath = nearestExistingPath(target);
+    if (!existingPath)
+      return null;
+    let canonicalExistingPath;
+    try {
+      canonicalExistingPath = realpathSync(existingPath);
+    } catch {
+      return null;
+    }
+    if (!pathWithin(canonicalWorkspaceRoot, canonicalExistingPath))
+      return null;
+    const canonicalDirectory = statSync46(canonicalExistingPath).isDirectory() ? canonicalExistingPath : dirname52(canonicalExistingPath);
+    try {
+      const repoRoot = resolve67((await execFileText4("git", ["rev-parse", "--show-toplevel"], {
+        cwd: canonicalDirectory,
+        timeout: 5e3
+      })).trim());
+      let canonicalRepoRoot;
+      try {
+        canonicalRepoRoot = realpathSync(repoRoot);
+      } catch {
+        return null;
+      }
+      if (!pathWithin(canonicalWorkspaceRoot, canonicalRepoRoot))
+        return null;
+      repoRoots.add(canonicalRepoRoot);
+    } catch {
+      return null;
+    }
+  }
+  if (repoRoots.size !== 1)
+    return null;
+  return detectGitProgressBaseline({
+    cwd: [...repoRoots][0],
+    sessionId: input.sessionId,
+    baselineProvenance: input.baselineProvenance ?? "path_preflight"
+  });
+}
 async function refreshGitProgressState(state5, input) {
-  if (!state5 || !state5.enabled || !state5.available || !state5.repoRoot)
+  if (!state5)
     return state5;
+  if (!state5.enabled || !state5.available || !state5.repoRoot) {
+    if (!input.cwd || (input.mutatedPaths?.length ?? 0) === 0)
+      return state5;
+    const discovered = await detectGitProgressBaselineFromPaths({
+      cwd: input.cwd,
+      sessionId: state5.sessionId,
+      paths: input.mutatedPaths ?? [],
+      baselineProvenance: "late_unknown"
+    });
+    if (!discovered?.enabled || !discovered.available)
+      return state5;
+    return refreshGitProgressState(discovered, {
+      ...input,
+      mutatedPaths: []
+    });
+  }
   const repoRoot = state5.repoRoot;
   try {
     const [statusRaw, diffStatRaw, nameStatusRaw, branchRaw, headRaw] = await Promise.all([
@@ -660202,6 +660307,7 @@ function renderGitProgressContextBlock(state5) {
     "<git-state>",
     "[GIT TRACKING — runtime-owned observe-only state]",
     `repo_root=${state5.repoRoot}`,
+    `baseline_provenance=${state5.baselineProvenance ?? "launch"}`,
     `branch=${state5.branch ?? "(detached/unknown)"} head=${state5.head?.slice(0, 12) ?? "(none)"}`,
     `baseline_user_dirty=${state5.baselineDirtyPaths.length} baseline_user_untracked=${state5.baselineUntrackedPaths.length}`,
     `current_dirty=${state5.currentDirtyPaths.length} current_untracked=${state5.currentUntrackedPaths.length}`,
@@ -660245,6 +660351,7 @@ function summarizeGitProgressForTrajectory(state5) {
     repoRoot: state5.repoRoot,
     branch: state5.branch,
     head: state5.head,
+    baselineProvenance: state5.baselineProvenance,
     baselineDirtyCount: state5.baselineDirtyPaths.length,
     baselineUntrackedCount: state5.baselineUntrackedPaths.length,
     currentDirtyCount: state5.currentDirtyPaths.length,
@@ -660505,7 +660612,7 @@ __export(postActionVerifier_exports, {
   verifyShellOutcome: () => verifyShellOutcome
 });
 import { existsSync as existsSync122, readFileSync as readFileSync98, readdirSync as readdirSync40, statSync as statSync48 } from "node:fs";
-import { isAbsolute as isAbsolute21, join as join134, resolve as resolve68 } from "node:path";
+import { isAbsolute as isAbsolute22, join as join134, resolve as resolve68 } from "node:path";
 function classifyShellIntent(cmd) {
   const stripped = cmd.replace(/^cd\s+\S+\s*&&\s*/, "").trim();
   const tokens3 = stripped.split(/\s+/).filter(Boolean);
@@ -660588,7 +660695,7 @@ function isProjectTarget(value2, workspaceRoot) {
   const path16 = unquotePath(value2);
   if (!path16 || path16 === "/dev/null" || isEphemeralTarget(path16))
     return false;
-  if (!isAbsolute21(path16))
+  if (!isAbsolute22(path16))
     return true;
   const absolute = resolve68(path16);
   const root = resolve68(workspaceRoot);
@@ -662595,6 +662702,15 @@ function classifyThinkOutcome(raw) {
   }
   return null;
 }
+function logicalRequestVariantId(logicalRequestId, variant) {
+  return `ollama:${variant}:${_createHash("sha256").update(`${logicalRequestId}\0${variant}`).digest("hex").slice(0, 24)}`;
+}
+function withLogicalRequestVariant(request, variant) {
+  return request.logicalRequestId ? {
+    ...request,
+    logicalRequestId: logicalRequestVariantId(request.logicalRequestId, variant)
+  } : request;
+}
 var PRESERVE_MODEL_VISIBLE_HISTORY, TOOL_SUBSETS, TOOL_AUTO_DEMOTE_TURNS, LEGACY_ACTION_REASON_KEYS, CLAIM_TASK_STOPWORDS, TASK_COMPLETE_CLOSEOUT_DESCRIPTION, SYSTEM_PROMPT_COMMON, SYSTEM_PROMPT, SYSTEM_PROMPT_MEDIUM, SYSTEM_PROMPT_SMALL, VISUAL_TOOLS, AUDIO_TOOLS, SOCIAL_TOOLS, SPATIAL_TOOLS, CODE_TOOLS, AgenticRunner, BROKER_QUEUE_DEADLINE_ERROR, InferenceHttpError, OllamaAgenticBackend;
 var init_agenticRunner = __esm({
   "packages/orchestrator/dist/agenticRunner.js"() {
@@ -663724,7 +663840,7 @@ ${loadPrompt("agentic/system-small.md")}`;
       }
       _recordFailureRecoveryOnWorkboard(toolName, args, result, diagnosis, count) {
         if (!diagnosis.createRecoveryCard && count < 2)
-          return;
+          return null;
         const dir = this._workboardDir();
         const runId = this.currentArtifactRunId();
         const actor = this.options.subAgent ? "sub-agent" : "agent";
@@ -663768,6 +663884,10 @@ ${loadPrompt("agentic/system-small.md")}`;
               });
             }
           }
+          const persistedBoard = readActiveWorkboardSnapshot(dir, runId);
+          if (!persistedBoard?.cards.some((card) => card.id === cardInput.id)) {
+            return null;
+          }
           const command = typeof args["command"] === "string" ? args["command"].slice(0, 200) : void 0;
           const ref = typeof args["path"] === "string" ? args["path"].slice(0, 200) : void 0;
           const raw = (result.error || result.output || result.llmContent || "").toString().slice(0, 1200);
@@ -663792,7 +663912,9 @@ ${loadPrompt("agentic/system-small.md")}`;
             }
           });
           this._workboard = readActiveWorkboardSnapshot(dir, runId) ?? board;
+          return cardInput.id ?? null;
         } catch {
+          return null;
         }
       }
       _todoWorkboardCardId(todoId) {
@@ -663892,7 +664014,7 @@ ${loadPrompt("agentic/system-small.md")}`;
               schema: WORKBOARD_EVIDENCE_PREDICATE_SCHEMA,
               id: `todo:${todo.id}:artifact:${index}`,
               label: `observed task artifact: ${artifact}`,
-              ref: artifact
+              path: artifact
             });
           }
         }
@@ -663930,7 +664052,7 @@ ${loadPrompt("agentic/system-small.md")}`;
       _mirrorTodosToWorkboard(todos) {
         const normalized4 = this._normalizeTodosForPrompt(todos);
         const index = this._todoTreeIndex(normalized4);
-        const activeLeaves = this._todoLeaves(normalized4, index).filter((todo) => todo.status !== "completed").slice(0, 20);
+        const activeLeaves = this._todoLeaves(normalized4, index).filter((todo) => todo.status !== "completed");
         const cards = [];
         for (const todo of activeLeaves) {
           const incoming = this._todoWorkboardCardInput(todo, this._todoPath(todo, index));
@@ -664479,65 +664601,35 @@ ${parts.join("\n")}
         ].filter((path16) => path16 && path16 !== ".");
         if (targets.length === 0)
           return null;
-        const terms2 = targets.flatMap((path16) => {
-          const normalized4 = path16.toLowerCase();
-          const base3 = normalized4.split("/").pop() ?? "";
-          const stem = base3.replace(/\.[^.]+$/, "");
-          return [normalized4, base3, stem].filter((term) => term.length >= 3);
-        });
-        if (terms2.length === 0)
+        const activeCards = snapshot.cards.filter((card) => card.id.startsWith("todo-") && !card.supersededBy && card.status !== "completed" && card.status !== "verified");
+        const exact = activeCards.filter((card) => {
+          const owned = new Set((card.ownedFiles ?? []).map((path16) => this._normalizeEvidencePath(path16)).filter(Boolean));
+          return targets.some((path16) => owned.has(path16));
+        });
+        if (exact.length === 1)
+          return exact[0];
+        if (exact.length > 1)
           return null;
-        const statusRank3 = (card) => {
-          if (card.status === "in_progress")
-            return 4;
-          if (card.status === "needs_changes")
-            return 3;
-          if (card.status === "open")
-            return 2;
-          if (card.status === "blocked")
-            return 1;
-          return 0;
-        };
-        let best = null;
-        for (const card of snapshot.cards) {
-          if (!card.id.startsWith("todo-"))
-            continue;
-          if (card.supersededBy)
-            continue;
-          if (card.status === "completed" || card.status === "verified")
-            continue;
-          const text3 = [
-            card.id,
-            card.title,
-            card.description,
-            ...card.evidenceRequirements
-          ].join(" ").toLowerCase();
-          let score = statusRank3(card);
-          for (const term of terms2) {
-            if (!text3.includes(term))
-              continue;
-            const fullPathHit = targets.some((path16) => path16.toLowerCase() === term);
-            score += fullPathHit ? 10 : term.includes("/") ? 8 : 4;
-          }
-          if (score <= statusRank3(card))
-            continue;
-          if (!best || score > best.score)
-            best = { card, score };
-        }
-        return best?.card ?? null;
+        const unscopedActive = activeCards.filter((card) => card.status === "in_progress" && (card.ownedFiles?.length ?? 0) === 0);
+        return unscopedActive.length === 1 ? unscopedActive[0] : null;
       }
       _workboardTodoCardForVerifier(snapshot, args, receipt2) {
         const command = String(args["command"] ?? args["cmd"] ?? "").trim();
         if (!command)
           return null;
-        return snapshot.cards.find((card) => {
+        const candidates = snapshot.cards.filter((card) => {
           if (!card.id.startsWith("todo-") || card.supersededBy)
             return false;
           if (card.status === "completed" || card.status === "verified")
             return false;
           const verifier = card.verifierCommand || card.evidenceRequirements.find((item) => item.startsWith("verifyCommand:"))?.replace(/^verifyCommand:\s*/, "") || "";
           return verifier.length > 0 && commandReliablySatisfiesVerifyCommand(command, verifier, receipt2);
-        }) ?? null;
+        });
+        if (candidates.length <= 1)
+          return candidates[0] ?? null;
+        const observed = new Set((receipt2?.observedPaths ?? []).map((path16) => this._normalizeEvidencePath(path16)).filter(Boolean));
+        const targetBound = candidates.filter((card) => (card.ownedFiles ?? []).map((path16) => this._normalizeEvidencePath(path16)).filter(Boolean).some((path16) => observed.has(path16)));
+        return targetBound.length === 1 ? targetBound[0] : null;
       }
       _workboardTargetCardId(snapshot, toolName, args, result, meta = {}) {
         const byId = new Map(snapshot.cards.map((card) => [card.id, card]));
@@ -665700,7 +665792,10 @@ ${read3.content}`;
         request[PRESERVE_MODEL_VISIBLE_HISTORY] = !this._legacyModelVisibleCompactionAllowed();
         const preBudget = this._outboundRequestBudget(request);
         this._lastMemoryCompilationPlanAudit = null;
-        if (this._memoryCompilationMode() !== "active" || !preBudget.compactionEligible)
+        const rawDiscoveryChars = request.messages.reduce((total, message2) => message2.role === "tool" && typeof message2.content === "string" ? total + message2.content.length : total, 0);
+        const rawDiscoveryLimit = Math.max(16e3, Number.parseInt(process.env["OMNIUS_RAW_DISCOVERY_COMPACTION_CHARS"] || "48000", 10) || 48e3);
+        const rawDiscoveryPressure = rawDiscoveryChars > rawDiscoveryLimit;
+        if (this._memoryCompilationMode() !== "active" || !preBudget.compactionEligible && !rawDiscoveryPressure)
           return;
         const messages2 = request.messages;
         const projections = this._requestCompilationCandidates({
@@ -666998,7 +667093,63 @@ ${read3.content}`;
               break;
             this._canonicalAcceptedReceipts.delete(oldest);
           }
+          this._persistCanonicalAcceptedReceipts();
+        } catch {
+        }
+      }
+      _canonicalAcceptedReceiptIndexPath() {
+        return _pathJoin(this.omniusStateDir(), "canonical-receipts", `${this.currentArtifactRunId()}.json`);
+      }
+      _persistCanonicalAcceptedReceipts() {
+        if (!this.writesUserTaskArtifacts())
+          return;
+        try {
+          const path16 = this._canonicalAcceptedReceiptIndexPath();
+          _fsMkdirSync(_pathJoin(this.omniusStateDir(), "canonical-receipts"), {
+            recursive: true
+          });
+          _fsWriteFileSync(path16, `${JSON.stringify({
+            schema: "omnius.canonical-tool-receipts.v1",
+            runId: this.currentArtifactRunId(),
+            taskEpoch: this._taskEpoch,
+            receipts: [...this._canonicalAcceptedReceipts.entries()].map(([transactionId2, receipt2]) => ({ transactionId: transactionId2, ...receipt2 }))
+          }, null, 2)}
+`, "utf8");
+        } catch {
+        }
+      }
+      _hydrateCanonicalAcceptedReceipts() {
+        if (!this._resumeInterrupted || !this.writesUserTaskArtifacts())
+          return;
+        try {
+          const parsed = JSON.parse(_fsReadFileSync(this._canonicalAcceptedReceiptIndexPath(), "utf8"));
+          if (parsed["schema"] !== "omnius.canonical-tool-receipts.v1" || parsed["runId"] !== this.currentArtifactRunId() || parsed["taskEpoch"] !== this._taskEpoch || !Array.isArray(parsed["receipts"])) {
+            return;
+          }
+          for (const raw of parsed["receipts"].slice(-128)) {
+            if (!raw || typeof raw !== "object")
+              continue;
+            const record = raw;
+            const transactionId2 = String(record["transactionId"] ?? "").trim();
+            const toolName = String(record["toolName"] ?? "").trim();
+            const artifactLocator = String(record["artifactLocator"] ?? "").trim();
+            const evidenceId = String(record["evidenceId"] ?? "").trim();
+            const summary = String(record["summary"] ?? "").trim();
+            const turn = Number(record["turn"]);
+            if (!transactionId2 || !toolName || !artifactLocator || !evidenceId || !summary || !Number.isFinite(turn)) {
+              continue;
+            }
+            this._artifactStore().getManifest(artifactLocator);
+            this._canonicalAcceptedReceipts.set(transactionId2, {
+              toolName,
+              artifactLocator,
+              evidenceId,
+              summary,
+              turn: Math.max(0, Math.floor(turn))
+            });
+          }
         } catch {
+          this._canonicalAcceptedReceipts.clear();
         }
       }
       _artifactStore() {
@@ -667307,10 +667458,21 @@ ${read3.content}`;
       _refreshIntegrationClosure() {
         const goal = this._taskState.originalGoal || this._taskState.goal || this._completionLedger?.goal || "unspecified";
         const modifiedPaths = [...this._taskState.modifiedFiles.keys()].map((path16) => this._normalizeEvidencePath(path16)).filter((path16) => path16 && !path16.startsWith(".omnius/"));
+        const todos = this._normalizeTodosForPrompt(this.readSessionTodos() ?? []);
+        const todoIndex = this._todoTreeIndex(todos);
+        const unresolvedTodos = this._todoLeaves(todos, todoIndex).filter((todo) => todo.status !== "completed").map((todo) => ({
+          id: todo.id,
+          label: todo.content,
+          status: todo.status
+        }));
+        const board = this._workboard ? this._refreshWorkboardSnapshot(this._workboard) : readActiveWorkboardSnapshot(this._workboardDir(), this.currentArtifactRunId());
+        const activeFailures = (board?.cards ?? []).filter((card) => card.id.startsWith("failure-") && !card.supersededBy && card.status !== "completed" && card.status !== "verified").map((card) => ({ id: card.id, label: card.title }));
         const closure = buildIntegrationClosure({
           goal,
           ledger: this._completionLedger,
           modifiedPaths,
+          unresolvedTodos,
+          activeFailures,
           contractIds: this._referenceContractSelections.map((contract) => contract.id),
           codeGraph: getCodeGraphDBIfReady(this.authoritativeWorkingDirectory())
         });
@@ -668597,18 +668759,38 @@ Pick the SMALLEST concrete deliverable from the spec — typically the project e
           this._gitProgress = null;
         }
       }
+      async _observeGitProgressBeforeTool(input) {
+        if (!this._gitProgress || this._gitProgress.enabled && this._gitProgress.available || input.targetPaths.length === 0 || process.env["OMNIUS_DISABLE_GIT_PROGRESS"] === "1") {
+          return;
+        }
+        try {
+          const discovered = await detectGitProgressBaselineFromPaths({
+            cwd: this.authoritativeWorkingDirectory(),
+            sessionId: this._sessionId,
+            paths: input.targetPaths,
+            baselineProvenance: "path_preflight"
+          });
+          if (!discovered?.enabled || !discovered.available)
+            return;
+          this._gitProgress = discovered;
+          this._persistGitProgressState();
+          this._emitGitProgressStatus(`nested repository baseline captured before ${input.toolName}`);
+        } catch {
+        }
+      }
       async _observeGitProgressAfterTool(input) {
         if (!this._gitProgress || process.env["OMNIUS_DISABLE_GIT_PROGRESS"] === "1")
           return;
         try {
           const contract = this._activeMutationContract();
           const next = await refreshGitProgressState(this._gitProgress, {
+            cwd: this.authoritativeWorkingDirectory(),
             turn: input.turn,
             actor: this.options.subAgent ? "sub_agent" : "main",
             owner: contract?.ownerAgentId,
             toolName: input.toolName,
-            mutatedPaths: input.mutationPaths,
-            ownedFiles: contract ? [...contract.ownedFiles, ...contract.ownedDirs] : void 0,
+            mutatedPaths: input.mutationPaths.map((path16) => _pathResolve(this.authoritativeWorkingDirectory(), path16)),
+            ownedFiles: contract ? [...contract.ownedFiles, ...contract.ownedDirs].map((path16) => _pathResolve(this.authoritativeWorkingDirectory(), path16)) : void 0,
             verifierCommand: contract?.verifierCommand,
             verifierFreshAfterChange: false
           });
@@ -669575,15 +669757,19 @@ ${extras.join("\n")}`;
         return null;
       }
       _extractToolTargetPaths(toolName, args, result) {
-        const fromResult = Array.isArray(result?.mutatedFiles) ? result.mutatedFiles.filter((p3) => typeof p3 === "string" && p3.trim().length > 0) : [];
-        if (fromResult.length > 0)
-          return [...new Set(fromResult)];
-        if (toolName === "batch_edit" && Array.isArray(args?.["edits"])) {
-          const paths = args["edits"].map((edit) => edit && typeof edit === "object" ? edit["path"] : null).filter((p3) => typeof p3 === "string" && p3.trim().length > 0);
-          return [...new Set(paths)];
+        const paths = [];
+        const fromResult = Array.isArray(result?.mutatedFiles) ? result.mutatedFiles.filter((p2) => typeof p2 === "string" && p2.trim().length > 0) : [];
+        paths.push(...fromResult);
+        paths.push(...(result?.executionReceipt?.observedPaths ?? []).filter((path16) => typeof path16 === "string" && path16.trim().length > 0), ...(result?.executionReceipt?.artifactHashes ?? []).map((artifact) => artifact.path).filter((path16) => typeof path16 === "string" && path16.trim().length > 0));
+        if (fromResult.length === 0) {
+          if (toolName === "batch_edit" && Array.isArray(args?.["edits"])) {
+            paths.push(...args["edits"].map((edit) => edit && typeof edit === "object" ? edit["path"] : null).filter((p3) => typeof p3 === "string" && p3.trim().length > 0));
+          }
+          const p2 = args?.["path"] ?? args?.["file_path"] ?? args?.["file"] ?? args?.["filename"] ?? args?.["filepath"] ?? args?.["filePath"] ?? args?.["input"] ?? args?.["target"];
+          if (typeof p2 === "string" && p2.trim().length > 0)
+            paths.push(p2.trim());
         }
-        const p2 = args?.["path"] ?? args?.["file_path"] ?? args?.["file"] ?? args?.["filename"] ?? args?.["filepath"] ?? args?.["filePath"] ?? args?.["input"] ?? args?.["target"];
-        return typeof p2 === "string" && p2.trim().length > 0 ? [p2.trim()] : [];
+        return [...new Set(paths.map((path16) => path16.trim()).filter(Boolean))].sort();
       }
       _isRealProjectMutation(toolName, result) {
         if (!result || result.success === false)
@@ -671895,6 +672081,41 @@ ${contentPreview}
         }
         return targetPaths.length > 0 ? "project" : "external";
       }
+      _expireRecentFailureDurably(failure2, turn) {
+        const expiredAt = (/* @__PURE__ */ new Date()).toISOString();
+        try {
+          const dir = this._workboardDir();
+          const runId = this.currentArtifactRunId();
+          const board = readActiveWorkboardSnapshot(dir, runId);
+          const card = failure2.workboardCardId ? board?.cards.find((candidate) => candidate.id === failure2.workboardCardId) : void 0;
+          if (card && !card.supersededBy && card.status !== "completed" && card.status !== "verified") {
+            this._workboard = updateWorkboardCard(dir, {
+              runId,
+              cardId: card.id,
+              actor: "runner",
+              updates: { supersededBy: `failure-expired:turn-${turn}` },
+              decisionReason: "The bounded recent-failure window expired without fresh recurrence. Retire this recovery obligation without claiming verification."
+            });
+          }
+          if (this._failureStore) {
+            for (const stored of this._failureStore.listByFingerprint(failure2.patternKey)) {
+              const context2 = stored.context ?? {};
+              if (stored.resolved || stored.sessionId !== this._sessionId || context2["taskEpoch"] !== (failure2.taskEpoch ?? this._taskEpoch) || context2["targetKey"] !== (failure2.targetKey ?? "unscoped")) {
+                continue;
+              }
+              this._failureStore.markResolved(stored.id, expiredAt);
+            }
+          }
+        } catch (error) {
+          this.emit({
+            type: "status",
+            visibility: "telemetry",
+            content: `failure_lifecycle_expiry_reconciliation_failed: ${error instanceof Error ? error.message : String(error)}`.slice(0, 320),
+            turn,
+            timestamp: expiredAt
+          });
+        }
+      }
       _activeRecentFailures(turn) {
         let expired = 0;
         const active = this._recentFailures.filter((failure2) => {
@@ -671902,6 +672123,7 @@ ${contentPreview}
             return false;
           if (turn - failure2.turn > 10) {
             failure2.status = "expired";
+            this._expireRecentFailureDurably(failure2, turn);
             expired++;
             return false;
           }
@@ -671949,7 +672171,7 @@ ${contentPreview}
           try {
             const targetPaths = [...new Set(failures.flatMap((failure2) => failure2.targetPaths).map((path16) => this._normalizeEvidencePath(path16)).filter(Boolean))].sort();
             const board = readActiveWorkboardSnapshot(workingDir, runId);
-            const cardIds = [...new Set(failures.map((failure2) => failure2.workboardCardId).filter((cardId) => board?.cards.some((card) => card.id === cardId && !card.supersededBy && card.status !== "verified")))];
+            const cardIds = [...new Set(failures.map((failure2) => failure2.workboardCardId).filter((cardId) => typeof cardId === "string" && Boolean(board?.cards.some((card) => card.id === cardId && !card.supersededBy && card.status !== "verified"))))];
             const failureIds = this._failureStore ? [...new Set(failures.flatMap((failure2) => this._failureStore.listByFingerprint(failure2.patternKey).filter((stored) => {
               const context2 = stored.context ?? {};
               return !stored.resolved && stored.sessionId === this._sessionId && stored.taskId === this._sessionId && context2["taskEpoch"] === this._taskEpoch && context2["targetKey"] === targetKey && context2["workboardCardId"] === failure2.workboardCardId;
@@ -671984,7 +672206,14 @@ ${contentPreview}
               resolved++;
             }
             this._workboard = readActiveWorkboardSnapshot(workingDir, runId) ?? board;
-          } catch {
+          } catch (error) {
+            this.emit({
+              type: "status",
+              visibility: "telemetry",
+              content: `failure_lifecycle_resolution_deferred: ${error instanceof Error ? error.message : String(error)}`.slice(0, 320),
+              turn: input.turn,
+              timestamp: (/* @__PURE__ */ new Date()).toISOString()
+            });
           }
         }
         return resolved;
@@ -677269,6 +677498,7 @@ Respond with the assessment and take the selected evidence-backed action.`;
           contextWindowSize: this.options.contextWindowSize ?? 0,
           verbose: false
         });
+        this._hydrateCanonicalAcceptedReceipts();
         await this._initializeGitProgressBaseline();
         this._restoredTodoVerificationNote = null;
         try {
@@ -681593,6 +681823,12 @@ ${cachedResult}`,
                         try {
                           tc.arguments = finalArgs;
                           const normalizedDispatchName = resolvedTool?.name ?? tc.name;
+                          const gitPreflightPaths = this._isProjectEditTool(normalizedDispatchName) ? this._extractToolTargetPaths(normalizedDispatchName, tc.arguments) : normalizedDispatchName === "shell" && shellMutationAttempt ? shellMutationAttempt.extraction.paths : [];
+                          await this._observeGitProgressBeforeTool({
+                            turn,
+                            toolName: normalizedDispatchName,
+                            targetPaths: gitPreflightPaths
+                          });
                           let branchEvidenceResult = null;
                           if (normalizedDispatchName === "file_read" && this._fileReadMode(tc.arguments) !== "extract") {
                             const exactReadFingerprint = this._buildToolFingerprint("file_read", tc.arguments);
@@ -681798,6 +682034,25 @@ intent=${_verifierResult.intentBucket}; scope=${_verifierResult.effectScope ?? "
                   }
                 }
               }
+              if (!result.success && tc.name === "shell" && /\[PERMISSION_ERROR\]/.test(result.error ?? "") && tool) {
+                this.emit({
+                  type: "sudo_request",
+                  content: `Command requires elevated privileges: ${tc.arguments.command?.slice(0, 100) ?? ""}`,
+                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
+                });
+                const pw2 = await this.waitForSudoPassword(12e4);
+                if (pw2) {
+                  try {
+                    result = await tool.execute(tc.arguments);
+                  } catch (err) {
+                    result = {
+                      success: false,
+                      output: "",
+                      error: err instanceof Error ? err.message : String(err)
+                    };
+                  }
+                }
+              }
               if (!fileReadSafetyChecked) {
                 result = await this._guardMaterializedFileReadResult({
                   callId: tc.id,
@@ -682402,6 +682657,7 @@ ${diagnostic}`;
                   }
                 }
               }
+              let failureWorkboardCardId = null;
               if (!result.success && (result.error || result.output || result.llmContent)) {
                 const errorText = (result.error || result.output || result.llmContent || "").toString();
                 const diagnosis = this._diagnoseToolFailure(tc.name, tc.arguments, result);
@@ -682421,11 +682677,10 @@ ${diagnostic}`;
                 };
                 this._errorPatterns.set(sig, learnedPattern);
                 this._taskRelevantErrorPatterns.set(sig, learnedPattern);
-                this._recordFailureRecoveryOnWorkboard(tc.name, tc.arguments, result, diagnosis, count);
+                failureWorkboardCardId = this._recordFailureRecoveryOnWorkboard(tc.name, tc.arguments, result, diagnosis, count);
                 if (this._failureStore) {
                   try {
                     const failureTargets = this._extractToolTargetPaths(tc.name, tc.arguments, result).map((path16) => this._normalizeEvidencePath(path16)).filter(Boolean).sort();
-                    const failureCard = this._failureRecoveryCardInput(diagnosis, failureTargets, count);
                     this._failureStore.insert({
                       taskId: this._sessionId,
                       sessionId: this._sessionId,
@@ -682440,7 +682695,7 @@ ${diagnostic}`;
                         taskEpoch: this._taskEpoch,
                         targetPaths: failureTargets,
                         targetKey: failureTargets.join("|") || "unscoped",
-                        workboardCardId: failureCard.id,
+                        ...failureWorkboardCardId ? { workboardCardId: failureWorkboardCardId } : {},
                         diagnosis: {
                           kind: diagnosis.kind,
                           severity: diagnosis.severity,
@@ -682858,7 +683113,7 @@ ${diagnostic}`;
                 this._recentFailures.push({
                   tool: tc.name,
                   patternKey: failureDiagnosis.patternKey,
-                  workboardCardId: this._failureRecoveryCardInput(failureDiagnosis, failureTargets).id,
+                  ...failureWorkboardCardId ? { workboardCardId: failureWorkboardCardId } : {},
                   fingerprint: toolFingerprint,
                   args: tc.arguments,
                   error: (result.error ?? "").slice(0, 600),
@@ -682951,25 +683206,6 @@ ${diagnostic}`;
                   });
                 }
               }
-              if (!result.success && tc.name === "shell" && /\[PERMISSION_ERROR\]/.test(result.error ?? "")) {
-                this.emit({
-                  type: "sudo_request",
-                  content: `Command requires elevated privileges: ${tc.arguments.command?.slice(0, 100) ?? ""}`,
-                  timestamp: (/* @__PURE__ */ new Date()).toISOString()
-                });
-                const pw2 = await this.waitForSudoPassword(12e4);
-                if (pw2) {
-                  try {
-                    result = await tool.execute(tc.arguments);
-                  } catch (err) {
-                    result = {
-                      success: false,
-                      output: "",
-                      error: err instanceof Error ? err.message : String(err)
-                    };
-                  }
-                }
-              }
               if (tc.name === "explore_tools" && result.success && result.output.startsWith("UNLOCK_TOOL:")) {
                 const unlockName = result.output.slice("UNLOCK_TOOL:".length).trim();
                 const existingTool = this.tools.get(unlockName);
@@ -692377,7 +692613,8 @@ arguments=` : ""}` + (chunk.toolCallArgs ?? "");
           const shouldRetryThinkGuard = outcome !== null && effectiveThink === true && (justSuppressed || outcome === "empty_after_strip" || outcome === "unclosed_think");
           if (shouldProbeNativeOnEmpty) {
             try {
-              const _native = await this.nativeOllamaChatCompletion(request, {
+              const nativeRecoveryRequest = withLogicalRequestVariant(request, "native-empty-recovery");
+              const _native = await this.nativeOllamaChatCompletion(nativeRecoveryRequest, {
                 // Keep recovery on the pool endpoint that already admitted and
                 // warmed this request. Falling back to the broker/base URL can
                 // cold-load a second copy of a large model while the admitted
@@ -692420,13 +692657,8 @@ arguments=` : ""}` + (chunk.toolCallArgs ?? "");
               retryBody["num_ctx"] = reqNumCtx;
             }
             try {
-              const retryOpts = {
-                method: "POST",
-                headers: this.authHeaders(request),
-                body: JSON.stringify(retryBody)
-              };
-              if (combinedAbortSignal)
-                retryOpts.signal = combinedAbortSignal;
+              const openAiRetryRequest = withLogicalRequestVariant(request, "openai-empty-retry");
+              const retryOpts = this.brokerRequestOptions(openAiRetryRequest, retryBody, combinedAbortSignal);
               const retryResp = await fetch(this.providerRequestUrl(requestBaseUrl, "chat"), retryOpts);
               if (retryResp.ok) {
                 const retryData = await retryResp.json();
@@ -694629,7 +694861,7 @@ var init_runEvents = __esm({
 // packages/orchestrator/dist/adjudication.js
 import { createHash as createHash66, randomUUID as randomUUID29 } from "node:crypto";
 import { mkdir as mkdir26, readFile as readFile28, rename as rename7, writeFile as writeFile29 } from "node:fs/promises";
-import { dirname as dirname52, join as join136, resolve as resolve69 } from "node:path";
+import { dirname as dirname53, join as join136, resolve as resolve69 } from "node:path";
 import { z as z20 } from "zod";
 function timestamp(now2) {
   return now2().toISOString();
@@ -695221,7 +695453,7 @@ async function mapConcurrent(rows, limit2, worker2) {
   return results;
 }
 async function writeJsonAtomic(path16, value2) {
-  await mkdir26(dirname52(path16), { recursive: true });
+  await mkdir26(dirname53(path16), { recursive: true });
   const temporary = `${path16}.${process.pid}.${randomUUID29()}.tmp`;
   await writeFile29(temporary, `${JSON.stringify(value2, null, 2)}
 `, "utf8");
@@ -695621,7 +695853,7 @@ async function verifyAdjudicationReplay(receiptPath) {
   } catch {
     return { valid: false, issues: ["receipt_unreadable"], receipt: null };
   }
-  const directory = dirname52(receiptPath);
+  const directory = dirname53(receiptPath);
   const readJson6 = async (name10) => {
     try {
       const value2 = JSON.parse(await readFile28(join136(directory, name10), "utf8"));
@@ -697358,7 +697590,7 @@ var init_config_loader = __esm({
 // packages/orchestrator/dist/memory/stability-tracker.js
 import { createHash as createHash68 } from "node:crypto";
 import { existsSync as existsSync125, mkdirSync as mkdirSync74, readFileSync as readFileSync100, writeFileSync as writeFileSync66 } from "node:fs";
-import { dirname as dirname53, join as join138 } from "node:path";
+import { dirname as dirname54, join as join138 } from "node:path";
 function stabilityFilePath(repoRoot) {
   return join138(repoRoot, ".omnius", "memory", "stability.json");
 }
@@ -697375,7 +697607,7 @@ function loadStabilityIndex(repoRoot) {
 }
 function saveStabilityIndex(repoRoot, index) {
   const path16 = stabilityFilePath(repoRoot);
-  mkdirSync74(dirname53(path16), { recursive: true });
+  mkdirSync74(dirname54(path16), { recursive: true });
   writeFileSync66(path16, JSON.stringify(index, null, 2), "utf-8");
 }
 function updateMemoryStability(items, options2 = {}) {
@@ -700670,7 +700902,7 @@ var init_missionSystem = __esm({
 // packages/orchestrator/dist/context-references.js
 import { readFileSync as readFileSync105, readdirSync as readdirSync42, statSync as statSync50 } from "node:fs";
 import { homedir as homedir39 } from "node:os";
-import { join as join144, resolve as resolve70, relative as relative21, sep as sep12, extname as extname18 } from "node:path";
+import { join as join144, resolve as resolve70, relative as relative21, sep as sep11, extname as extname18 } from "node:path";
 function estimateTokens8(text3) {
   return Math.ceil(text3.length / CHARS_PER_TOKEN);
 }
@@ -700703,12 +700935,12 @@ function removeReferenceTokens(message2, refs) {
   return text3.trim();
 }
 function resolvePath4(cwd4, target, allowedRoot) {
-  const isAbsolute26 = target.startsWith("/") || target.startsWith("~");
-  const expanded = isAbsolute26 ? target.replace(/^~/, homedir39()) : join144(cwd4, target);
+  const isAbsolute27 = target.startsWith("/") || target.startsWith("~");
+  const expanded = isAbsolute27 ? target.replace(/^~/, homedir39()) : join144(cwd4, target);
   const resolved = resolve70(expanded);
   if (allowedRoot) {
     const allowed = resolve70(allowedRoot);
-    if (!resolved.startsWith(allowed + sep12) && resolved !== allowed) {
+    if (!resolved.startsWith(allowed + sep11) && resolved !== allowed) {
       throw new Error("path is outside the allowed workspace");
     }
   }
@@ -700724,7 +700956,7 @@ function ensureReferencePathAllowed(filePath) {
   }
   for (const dir of SENSITIVE_HOME_DIRS) {
     const blockedDir = resolve70(join144(home3, dir));
-    if (filePath.startsWith(blockedDir + sep12) || filePath === blockedDir) {
+    if (filePath.startsWith(blockedDir + sep11) || filePath === blockedDir) {
       throw new Error("path is a sensitive credential or internal path and cannot be attached");
     }
   }
@@ -702821,6 +703053,7 @@ __export(dist_exports3, {
   detectExitCodeMisread: () => detectExitCodeMisread,
   detectExplorationIntent: () => detectExplorationIntent,
   detectGitProgressBaseline: () => detectGitProgressBaseline,
+  detectGitProgressBaselineFromPaths: () => detectGitProgressBaselineFromPaths,
   detectPressure: () => detectPressure,
   detectTaskType: () => detectTaskType,
   deterministicAdjudicationAssignments: () => deterministicAdjudicationAssignments,
@@ -703420,10 +703653,10 @@ var init_adjudication_constituent = __esm({
 
 // packages/cli/src/discovery.ts
 import { existsSync as existsSync128, readFileSync as readFileSync106 } from "node:fs";
-import { dirname as dirname54, resolve as resolve71 } from "node:path";
+import { dirname as dirname55, resolve as resolve71 } from "node:path";
 import { fileURLToPath as fileURLToPath21 } from "node:url";
 function discoveryCandidates() {
-  const here = dirname54(fileURLToPath21(import.meta.url));
+  const here = dirname55(fileURLToPath21(import.meta.url));
   const configured = process.env["OMNIUS_DOCS_ROOT"]?.trim();
   if (configured) {
     return [configured.endsWith(".json") ? resolve71(configured) : resolve71(configured, "DISCOVERY.json")];
@@ -703761,7 +703994,7 @@ __export(init_exports, {
   initCommand: () => initCommand
 });
 import { existsSync as existsSync129, lstatSync as lstatSync3, readFileSync as readFileSync107, renameSync as renameSync25, writeFileSync as writeFileSync71 } from "node:fs";
-import { dirname as dirname55, resolve as resolve72 } from "node:path";
+import { dirname as dirname56, resolve as resolve72 } from "node:path";
 import { randomUUID as randomUUID30 } from "node:crypto";
 function mergeManagedBlock(current, start2, end, block) {
   const starts = current.split(start2).length - 1;
@@ -703790,7 +704023,7 @@ function planFile(path16, start2, end, block) {
   return { path: path16, current, next, changed: current !== next };
 }
 function atomicWrite2(path16, content) {
-  const temporary = resolve72(dirname55(path16), `.${randomUUID30()}.omnius-tmp`);
+  const temporary = resolve72(dirname56(path16), `.${randomUUID30()}.omnius-tmp`);
   writeFileSync71(temporary, content, { encoding: "utf8", mode: 384 });
   renameSync25(temporary, path16);
 }
@@ -704200,7 +704433,7 @@ import { join as join147 } from "node:path";
 import { homedir as homedir41 } from "node:os";
 import { createServer as createNetServer } from "node:net";
 import { fileURLToPath as fileURLToPath22 } from "node:url";
-import { dirname as dirname56 } from "node:path";
+import { dirname as dirname57 } from "node:path";
 function getDaemonPort() {
   const env2 = process.env["OMNIUS_HOST"];
   if (env2) {
@@ -704325,7 +704558,7 @@ async function isDaemonRunning(port2) {
 }
 function getLocalCliVersion() {
   try {
-    const here = dirname56(fileURLToPath22(import.meta.url));
+    const here = dirname57(fileURLToPath22(import.meta.url));
     for (const rel of ["../package.json", "../../package.json", "./package.json", "../../../package.json"]) {
       const p2 = join147(here, rel);
       if (existsSync131(p2)) {
@@ -704802,7 +705035,7 @@ function commandForEntrypoint(path16, nodeExe) {
 async function resolveDaemonCommand(nodeExe, preferredEntrypoint) {
   const candidates = [];
   if (preferredEntrypoint) candidates.push(preferredEntrypoint);
-  const thisDir = dirname56(fileURLToPath22(import.meta.url));
+  const thisDir = dirname57(fileURLToPath22(import.meta.url));
   candidates.push(join147(thisDir, "index.js"));
   if (process.argv[1]) candidates.push(process.argv[1]);
   try {
@@ -705144,7 +705377,7 @@ import {
   mkdirSync as mkdirSync82,
   openSync as openSync9,
   readFileSync as readFileSync110,
-  realpathSync,
+  realpathSync as realpathSync2,
   renameSync as renameSync28,
   unlinkSync as unlinkSync32,
   writeFileSync as writeFileSync74,
@@ -705152,7 +705385,7 @@ import {
 } from "node:fs";
 import { createRequire as createRequire5 } from "node:module";
 import { homedir as homedir42, tmpdir as tmpdir24 } from "node:os";
-import { basename as basename29, dirname as dirname57, join as join148 } from "node:path";
+import { basename as basename29, dirname as dirname58, join as join148 } from "node:path";
 import { fileURLToPath as fileURLToPath23 } from "node:url";
 function trayUpdatePresentation(currentVersion, latestVersion, state5 = null) {
   if (state5?.status === "running") {
@@ -705363,7 +705596,7 @@ function verifyTrayHelper() {
       `Optional dependency systray2@${TRAY_HELPER_VERSION} is not installed; reinstall Omnius with optional dependencies enabled`
     );
   }
-  const packageHelper = join148(dirname57(packageJson), "traybin", binName);
+  const packageHelper = join148(dirname58(packageJson), "traybin", binName);
   const cwdHelper = join148(process.cwd(), "traybin", binName);
   const selectedHelper = existsSync132(cwdHelper) ? cwdHelper : packageHelper;
   if (!existsSync132(selectedHelper)) throw new Error(`Native tray helper is missing: ${selectedHelper}`);
@@ -705377,7 +705610,7 @@ function verifyTrayHelper() {
 function assetPath(kind) {
   const state5 = kind === "online" ? "online" : kind === "offline" ? "offline" : "checking";
   const extension3 = process.platform === "win32" ? "ico" : "png";
-  const path16 = join148(dirname57(fileURLToPath23(import.meta.url)), "..", "assets", "tray", `omnius-${state5}.${extension3}`);
+  const path16 = join148(dirname58(fileURLToPath23(import.meta.url)), "..", "assets", "tray", `omnius-${state5}.${extension3}`);
   if (!existsSync132(path16)) throw new Error(`Tray icon asset is missing: ${path16}`);
   return path16;
 }
@@ -705482,7 +705715,7 @@ function commandForEntrypoint2(path16) {
 }
 function resolveTrayLaunchCommand() {
   const candidates = [
-    join148(dirname57(fileURLToPath23(import.meta.url)), "index.js"),
+    join148(dirname58(fileURLToPath23(import.meta.url)), "index.js"),
     process.argv[1]
   ];
   try {
@@ -705511,7 +705744,7 @@ function installedOmniusLaunchCommand() {
       timeout: 2e3
     });
     const first2 = result.stdout?.split(/\r?\n/).map((line) => line.trim()).find(Boolean);
-    return first2 && existsSync132(first2) ? commandForEntrypoint2(realpathSync(first2)) : null;
+    return first2 && existsSync132(first2) ? commandForEntrypoint2(realpathSync2(first2)) : null;
   } catch {
     return null;
   }
@@ -705523,8 +705756,8 @@ function registrationIconPath(launch) {
   const extension3 = process.platform === "win32" ? "ico" : "png";
   const entrypoints = [...launch.args, launch.command].filter((candidate) => existsSync132(candidate));
   for (const entrypoint of entrypoints) {
-    const real = realpathSync(entrypoint);
-    for (const packageRoot of [dirname57(real), join148(dirname57(real), "..")]) {
+    const real = realpathSync2(entrypoint);
+    for (const packageRoot of [dirname58(real), join148(dirname58(real), "..")]) {
       const candidate = join148(packageRoot, "assets", "tray", `omnius-online.${extension3}`);
       if (existsSync132(candidate)) return candidate;
     }
@@ -705587,7 +705820,7 @@ function writeTrayAutostart(endpoint) {
   const launch = resolveTrayRegistrationCommand();
   if (!launch) throw new Error("Could not resolve the installed Omnius CLI entrypoint");
   const paths = resolveTrayPaths();
-  mkdirSync82(dirname57(paths.autostartFile), { recursive: true });
+  mkdirSync82(dirname58(paths.autostartFile), { recursive: true });
   writeFileSync74(
     paths.autostartFile,
     buildAutostartContent(process.platform, launch, endpoint, registrationIconPath(launch)),
@@ -707421,7 +707654,7 @@ __export(py_embed_exports, {
 });
 import { spawnSync as spawnSync10 } from "node:child_process";
 import { existsSync as existsSync135, mkdirSync as mkdirSync85, readFileSync as readFileSync113, writeFileSync as writeFileSync76 } from "node:fs";
-import { dirname as dirname58, join as join151 } from "node:path";
+import { dirname as dirname59, join as join151 } from "node:path";
 import { homedir as homedir43 } from "node:os";
 import { fileURLToPath as fileURLToPath25 } from "node:url";
 function managedAsrRuntimeRoot() {
@@ -708216,7 +708449,7 @@ var MODULE_DIR, MANAGED_ASR_ROOT, MANAGED_ASR_MODEL_ROOT, WHISPER_MODEL_IDS2, NE
 var init_py_embed = __esm({
   "packages/cli/src/api/py-embed.ts"() {
     init_dist5();
-    MODULE_DIR = dirname58(fileURLToPath25(import.meta.url));
+    MODULE_DIR = dirname59(fileURLToPath25(import.meta.url));
     MANAGED_ASR_ROOT = join151(homedir43(), ".omnius", "runtimes", "asr");
     MANAGED_ASR_MODEL_ROOT = join151(homedir43(), ".omnius", "models", "asr");
     WHISPER_MODEL_IDS2 = /* @__PURE__ */ new Set(["tiny", "base", "small", "medium", "large-v3"]);
@@ -708610,7 +708843,7 @@ import {
   writeFileSync as writeFileSync78,
   readdirSync as readdirSync44
 } from "node:fs";
-import { join as join153, dirname as dirname59 } from "node:path";
+import { join as join153, dirname as dirname60 } from "node:path";
 import { homedir as homedir45 } from "node:os";
 import { fileURLToPath as fileURLToPath26 } from "node:url";
 import { EventEmitter as EventEmitter6 } from "node:events";
@@ -708906,7 +709139,7 @@ async function findMicCaptureCommand() {
   return null;
 }
 async function findTranscribeFileScript() {
-  const thisDir = dirname59(fileURLToPath26(import.meta.url));
+  const thisDir = dirname60(fileURLToPath26(import.meta.url));
   const candidates = [
     join153(thisDir, "../../../../packages/execution/scripts/transcribe-file.py"),
     join153(thisDir, "../../../packages/execution/scripts/transcribe-file.py"),
@@ -709003,7 +709236,7 @@ async function transcribeFileViaWhisper(filePath, model) {
   });
 }
 async function findLiveAsrScript(scriptName) {
-  const thisDir = dirname59(fileURLToPath26(import.meta.url));
+  const thisDir = dirname60(fileURLToPath26(import.meta.url));
   const candidates = [
     join153(thisDir, "../../../../packages/execution/scripts", scriptName),
     join153(thisDir, "../../../packages/execution/scripts", scriptName),
@@ -709820,7 +710053,7 @@ ${text3}`.slice(-2e3);
           const req3 = createRequire12(import.meta.url);
           const loaded = req3("transcribe-cli");
           try {
-            transcribeCliPackageDirs.add(dirname59(req3.resolve("transcribe-cli/package.json")));
+            transcribeCliPackageDirs.add(dirname60(req3.resolve("transcribe-cli/package.json")));
           } catch {
           }
           return loaded;
@@ -709930,7 +710163,7 @@ ${text3}`.slice(-2e3);
             let tcUpToDate = false;
             try {
               const tcPkgPath = join153(
-                dirname59(__require.resolve?.("transcribe-cli/package.json") || ""),
+                dirname60(__require.resolve?.("transcribe-cli/package.json") || ""),
                 "package.json"
               );
               if (existsSync137(tcPkgPath)) {
@@ -715184,7 +715417,7 @@ import {
   writeFileSync as writeFileSync80
 } from "node:fs";
 import { homedir as homedir47 } from "node:os";
-import { dirname as dirname60, join as join156 } from "node:path";
+import { dirname as dirname61, join as join156 } from "node:path";
 function safeSegment3(value2) {
   return value2.replace(/[^a-zA-Z0-9_.-]/g, "_").slice(0, 180) || "session";
 }
@@ -715198,7 +715431,7 @@ function acknowledgementPath(sessionId) {
   return join156(controlDir(), `${safeSegment3(sessionId)}.ack.json`);
 }
 function atomicWrite3(path16, value2) {
-  mkdirSync90(dirname60(path16), { recursive: true });
+  mkdirSync90(dirname61(path16), { recursive: true });
   const tmp = `${path16}.tmp.${process.pid}.${randomUUID33()}`;
   writeFileSync80(tmp, `${JSON.stringify(value2, null, 2)}
 `, "utf8");
@@ -721353,11 +721586,11 @@ function wrapToWidth(text3, width) {
 }
 function wrapListItems(items, width) {
   if (items.length === 0) return [];
-  const sep17 = " · ";
+  const sep16 = " · ";
   const lines = [];
   let current = "";
   for (const item of items) {
-    const candidate = current === "" ? item : current + sep17 + item;
+    const candidate = current === "" ? item : current + sep16 + item;
     if (visibleLength(candidate) <= width) {
       current = candidate;
     } else {
@@ -723046,7 +723279,7 @@ var init_internal_output = __esm({
 // packages/cli/src/tui/terminal-links.ts
 import { existsSync as existsSync142 } from "node:fs";
 import { homedir as homedir48 } from "node:os";
-import { isAbsolute as isAbsolute22, resolve as resolve74 } from "node:path";
+import { isAbsolute as isAbsolute23, resolve as resolve74 } from "node:path";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 function hyperlinksEnabled(options2 = {}) {
   return options2.force ?? (process.stdout.isTTY ?? false);
@@ -723075,11 +723308,11 @@ function stripLineCoordinates(filePath) {
 }
 function existingFileHref(filePath, cwd4) {
   const expanded = expandHome2(filePath);
-  const direct = isAbsolute22(expanded) ? expanded : resolve74(cwd4, expanded);
+  const direct = isAbsolute23(expanded) ? expanded : resolve74(cwd4, expanded);
   if (existsSync142(direct)) return pathToFileURL2(direct).href;
   const withoutCoordinates = stripLineCoordinates(expanded);
   if (withoutCoordinates === expanded) return null;
-  const target = isAbsolute22(withoutCoordinates) ? withoutCoordinates : resolve74(cwd4, withoutCoordinates);
+  const target = isAbsolute23(withoutCoordinates) ? withoutCoordinates : resolve74(cwd4, withoutCoordinates);
   return existsSync142(target) ? pathToFileURL2(target).href : null;
 }
 function httpHref(target) {
@@ -723982,13 +724215,13 @@ function stripTrustTierWrapperForTui(text3, maxWrapperChars = 400) {
   ).replace(/^---[ \t]*(?:\n)?/, "").replace(/(?:\n)?---[ \t]*$/, "");
 }
 function wrapFooterItems(items, width) {
-  const sep17 = " · ";
+  const sep16 = " · ";
   const lines = [];
   let current = "";
   for (const item of items) {
     const clean7 = item.replace(/\s+/g, " ").trim();
     if (!clean7) continue;
-    const candidate = current ? `${current}${sep17}${clean7}` : clean7;
+    const candidate = current ? `${current}${sep16}${clean7}` : clean7;
     if (visibleLen(candidate) <= width) {
       current = candidate;
       continue;
@@ -729516,7 +729749,7 @@ var init_types3 = __esm({
 // packages/cli/src/tui/p2p/secret-vault.ts
 import { createCipheriv as createCipheriv3, createDecipheriv as createDecipheriv3, randomBytes as randomBytes28, scryptSync as scryptSync2, createHash as createHash74 } from "node:crypto";
 import { readFileSync as readFileSync122, writeFileSync as writeFileSync83, existsSync as existsSync146, mkdirSync as mkdirSync93 } from "node:fs";
-import { dirname as dirname61 } from "node:path";
+import { dirname as dirname62 } from "node:path";
 var PLACEHOLDER_PREFIX, PLACEHOLDER_SUFFIX, CIPHER_ALGO, SALT_LEN, IV_LEN, KEY_LEN, SecretVault;
 var init_secret_vault = __esm({
   "packages/cli/src/tui/p2p/secret-vault.ts"() {
@@ -729722,7 +729955,7 @@ var init_secret_vault = __esm({
         const encrypted = Buffer.concat([cipher.update(data, "utf8"), cipher.final()]);
         const tag = cipher.getAuthTag();
         const blob = Buffer.concat([salt, iv, tag, encrypted]);
-        const dir = dirname61(this.storePath);
+        const dir = dirname62(this.storePath);
         if (!existsSync146(dir)) mkdirSync93(dir, { recursive: true });
         writeFileSync83(this.storePath, blob, { mode: 384 });
       }
@@ -731401,7 +731634,7 @@ __export(omnius_directory_exports, {
   writeTaskHandoff: () => writeTaskHandoff2
 });
 import { appendFileSync as appendFileSync16, cpSync as cpSync2, existsSync as existsSync148, mkdirSync as mkdirSync95, readFileSync as readFileSync124, writeFileSync as writeFileSync85, readdirSync as readdirSync48, statSync as statSync58, unlinkSync as unlinkSync37, openSync as openSync13, closeSync as closeSync13, renameSync as renameSync30, watch as fsWatch3 } from "node:fs";
-import { join as join162, relative as relative23, basename as basename32, dirname as dirname62, resolve as resolve77 } from "node:path";
+import { join as join162, relative as relative23, basename as basename32, dirname as dirname63, resolve as resolve77 } from "node:path";
 import { homedir as homedir50 } from "node:os";
 import { createHash as createHash77 } from "node:crypto";
 function isGitRoot(dir) {
@@ -731466,7 +731699,7 @@ function ensureOmniusIgnored(repoRoot) {
   if (!gitRoot) return;
   const gitignorePath = findNearestExistingGitignore(repoRoot, gitRoot);
   if (!gitignorePath) return;
-  const gitignoreDir = dirname62(gitignorePath);
+  const gitignoreDir = dirname63(gitignorePath);
   const relDir = relative23(gitignoreDir || ".", repoRoot).replace(/\\/g, "/");
   const ignorePattern = relDir && relDir !== "." ? `${relDir}/.omnius/` : ".omnius/";
   const content = readFileSync124(gitignorePath, "utf-8");
@@ -732098,7 +732331,7 @@ function pruneContextLedger(ledgerPath2) {
     const lines = readFileSync124(ledgerPath2, "utf-8").split(/\r?\n/).filter((line) => line.trim().length > 0);
     if (lines.length <= MAX_CONTEXT_LEDGER_LINES) return;
     const kept = lines.slice(-MAX_CONTEXT_LEDGER_LINES);
-    const archiveDir = join162(dirname62(ledgerPath2), "archive");
+    const archiveDir = join162(dirname63(ledgerPath2), "archive");
     mkdirSync95(archiveDir, { recursive: true });
     const archivePath = join162(
       archiveDir,
@@ -733760,7 +733993,7 @@ var init_render2 = __esm({
 
 // packages/prompts/dist/promptLoader.js
 import { readFileSync as readFileSync127, existsSync as existsSync151 } from "node:fs";
-import { join as join164, dirname as dirname63 } from "node:path";
+import { join as join164, dirname as dirname64 } from "node:path";
 import { fileURLToPath as fileURLToPath27 } from "node:url";
 function resolvePromptsDir(baseDir, promptPath = "code.md") {
   const devPath2 = join164(baseDir, "..", "templates");
@@ -733790,7 +734023,7 @@ var init_promptLoader2 = __esm({
   "packages/prompts/dist/promptLoader.js"() {
     "use strict";
     __filename4 = fileURLToPath27(import.meta.url);
-    __dirname5 = dirname63(__filename4);
+    __dirname5 = dirname64(__filename4);
     PROMPTS_DIR2 = resolvePromptsDir(__dirname5);
     cache6 = /* @__PURE__ */ new Map();
   }
@@ -733904,7 +734137,7 @@ var init_task_templates = __esm({
 });
 
 // packages/prompts/dist/index.js
-import { join as join165, dirname as dirname64 } from "node:path";
+import { join as join165, dirname as dirname65 } from "node:path";
 import { fileURLToPath as fileURLToPath28 } from "node:url";
 var _dir, _packageRoot;
 var init_dist9 = __esm({
@@ -733914,7 +734147,7 @@ var init_dist9 = __esm({
     init_render2();
     init_task_templates();
     init_render2();
-    _dir = dirname64(fileURLToPath28(import.meta.url));
+    _dir = dirname65(fileURLToPath28(import.meta.url));
     _packageRoot = join165(_dir, "..");
   }
 });
@@ -735307,7 +735540,7 @@ var init_braille_spinner = __esm({
 
 // packages/cli/src/tui/project-context.ts
 import { existsSync as existsSync153, readFileSync as readFileSync129, readdirSync as readdirSync49, mkdirSync as mkdirSync97, statSync as statSync60, writeFileSync as writeFileSync87 } from "node:fs";
-import { dirname as dirname65, join as join167, basename as basename34, resolve as resolve79 } from "node:path";
+import { dirname as dirname66, join as join167, basename as basename34, resolve as resolve79 } from "node:path";
 import { homedir as homedir53 } from "node:os";
 function projectContextUrlSpanAt(text3, index) {
   PROJECT_CONTEXT_URL_RE.lastIndex = 0;
@@ -735381,7 +735614,7 @@ function findGitDir(repoRoot) {
       }
       return gitPath;
     }
-    const parent = dirname65(dir);
+    const parent = dirname66(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -737161,7 +737394,7 @@ __export(status_bar_exports, {
   stripSubAgentPrefix: () => stripSubAgentPrefix,
   unlockFooterRedraws: () => unlockFooterRedraws
 });
-import { basename as basename35, dirname as dirname66 } from "node:path";
+import { basename as basename35, dirname as dirname67 } from "node:path";
 import { readFile as readFileAsync } from "node:fs/promises";
 function headerButtonGlyphFg() {
   const a2 = tuiAccent();
@@ -741576,7 +741809,7 @@ ${CONTENT_BG_SEQ}`);
         if (limit2 <= 6) return value2.slice(-limit2);
         const marker = "...";
         const leaf = basename35(value2);
-        const parentLeaf = basename35(dirname66(value2));
+        const parentLeaf = basename35(dirname67(value2));
         const suffix = parentLeaf && parentLeaf !== "." && parentLeaf !== leaf ? `${parentLeaf}/${leaf}` : leaf;
         if (suffix.length + marker.length + 1 <= limit2) {
           return `${marker}/${suffix}`;
@@ -743715,7 +743948,7 @@ __export(personaplex_exports, {
   stopPersonaPlex: () => stopPersonaPlex
 });
 import { existsSync as existsSync154, writeFileSync as writeFileSync88, readFileSync as readFileSync130, mkdirSync as mkdirSync98, copyFileSync as copyFileSync5, readdirSync as readdirSync50, statSync as statSync61 } from "node:fs";
-import { join as join168, dirname as dirname67 } from "node:path";
+import { join as join168, dirname as dirname68 } from "node:path";
 import { homedir as homedir54 } from "node:os";
 import { spawn as spawn42 } from "node:child_process";
 import { fileURLToPath as fileURLToPath29 } from "node:url";
@@ -744525,7 +744758,7 @@ function getShippedVoicesDir() {
     // repo root
   ];
   try {
-    const modDir = dirname67(fileURLToPath29(import.meta.url));
+    const modDir = dirname68(fileURLToPath29(import.meta.url));
     candidates.push(join168(modDir, "..", "voices", "personaplex"));
     candidates.push(join168(modDir, "..", "..", "..", "voices", "personaplex"));
     candidates.push(join168(modDir, "..", "..", "..", "..", "voices", "personaplex"));
@@ -752298,7 +752531,7 @@ import {
   renameSync as renameSync31,
   unlinkSync as unlinkSync40
 } from "node:fs";
-import { dirname as dirname68, join as join174 } from "node:path";
+import { dirname as dirname69, join as join174 } from "node:path";
 import { homedir as homedir57 } from "node:os";
 import { randomBytes as randomBytes31 } from "node:crypto";
 function configHome() {
@@ -752314,7 +752547,7 @@ function bootstrapApiKeyFile() {
   return fromEnv || join174(configHome(), "api.key");
 }
 function ensureDirFor(file) {
-  const dir = dirname68(file);
+  const dir = dirname69(file);
   if (!existsSync162(dir)) mkdirSync100(dir, { recursive: true });
 }
 function atomicWritePrivateFile(file, content) {
@@ -755489,7 +755722,7 @@ import {
   statSync as statSync65,
   writeFileSync as writeFileSync93
 } from "node:fs";
-import { dirname as dirname69, join as join178, resolve as resolve82 } from "node:path";
+import { dirname as dirname70, join as join178, resolve as resolve82 } from "node:path";
 import { platform as platform11 } from "node:os";
 import { spawn as spawn44, spawnSync as spawnSync11 } from "node:child_process";
 import { fileURLToPath as fileURLToPath30 } from "node:url";
@@ -755627,7 +755860,7 @@ async function runCommand(command, args, options2 = {}) {
   });
 }
 function packageAssetPath(...segments) {
-  const moduleDir = dirname69(fileURLToPath30(import.meta.url));
+  const moduleDir = dirname70(fileURLToPath30(import.meta.url));
   const candidates = [
     join178(moduleDir, "..", "assets", ...segments),
     join178(moduleDir, "..", "..", "assets", ...segments)
@@ -755999,7 +756232,7 @@ function writeProfileMap(value2) {
   if (Buffer.byteLength(serialized) > PROFILE_MAP_MAX_BYTES) {
     throw new Error("Voicebox profile map exceeded its bounded storage limit");
   }
-  mkdirSync103(dirname69(profileMapPath()), { recursive: true });
+  mkdirSync103(dirname70(profileMapPath()), { recursive: true });
   const temporary = `${profileMapPath()}.tmp-${process.pid}-${Date.now()}`;
   writeFileSync93(temporary, serialized, { mode: 384 });
   renameSync32(temporary, profileMapPath());
@@ -756388,7 +756621,7 @@ import {
   copyFileSync as copyFileSync6,
   rmSync as rmSync17
 } from "node:fs";
-import { basename as basename37, join as join179, dirname as dirname70, resolve as resolve83 } from "node:path";
+import { basename as basename37, join as join179, dirname as dirname71, resolve as resolve83 } from "node:path";
 import { homedir as homedir59, tmpdir as tmpdir26, platform as platform12 } from "node:os";
 import {
   spawn as nodeSpawn
@@ -756494,7 +756727,7 @@ function luxttsInferScript2() {
   return join179(voiceDir2(), "luxtts-infer.py");
 }
 function resolveBundledVoiceAsset(relativePath2) {
-  const moduleDir = dirname70(fileURLToPath31(import.meta.url));
+  const moduleDir = dirname71(fileURLToPath31(import.meta.url));
   const candidates = [
     // npm bundle: publish/dist/index.js -> publish/assets
     join179(moduleDir, "..", "assets", relativePath2),
@@ -756594,7 +756827,7 @@ function consolidateVoiceDirs2() {
     const c9 = join179(dir, ".omnius", "voice");
     if (existsSync167(c9) && c9 !== globalVoice) candidates.add(c9);
     prev = dir;
-    dir = dirname70(dir);
+    dir = dirname71(dir);
   }
   for (const root of COMMON_PROJECT_ROOTS) {
     const rootDir3 = join179(homedir59(), root);
@@ -756787,21 +757020,21 @@ function insertTagAfterOpeningClause(text3, tag) {
   return `<${tag}> ${text3}`;
 }
 function writeDetectTorchScript(targetPath) {
-  const moduleDir = dirname70(fileURLToPath31(import.meta.url));
+  const moduleDir = dirname71(fileURLToPath31(import.meta.url));
   const canonicalDetector = [
     resolveBundledVoiceAsset("voice/detect-torch.py"),
     join179(moduleDir, "..", "..", "..", "..", "scripts", "detect-torch.py")
   ].find((candidate) => Boolean(candidate && existsSync167(candidate)));
   if (canonicalDetector) {
     try {
-      mkdirSync104(dirname70(targetPath), { recursive: true });
+      mkdirSync104(dirname71(targetPath), { recursive: true });
       writeFileSync94(targetPath, readFileSync139(canonicalDetector), { mode: 493 });
       return;
     } catch {
     }
   }
   try {
-    mkdirSync104(dirname70(targetPath), { recursive: true });
+    mkdirSync104(dirname71(targetPath), { recursive: true });
   } catch {
   }
   const script = `#!/usr/bin/env python3
@@ -761178,7 +761411,7 @@ import {
   appendFileSync as appendFileSync18,
   writeSync as writeSync5
 } from "node:fs";
-import { basename as basename38, dirname as dirname71, relative as relative25, join as join180 } from "node:path";
+import { basename as basename38, dirname as dirname72, relative as relative25, join as join180 } from "node:path";
 function omniusPinnedDependencyVersion(name10) {
   const spec2 = OMNIUS_PINNED_DEPENDENCY_SPECS[name10];
   if (!spec2) return null;
@@ -775093,7 +775326,7 @@ async function collectSponsorMediaStream(args) {
   }
   const safeName3 = basename38(artifact.filename).replace(/[^\w.-]/g, "_") || `artifact${defaultExtensionForMime(artifact.mime)}`;
   const outputPath3 = join180(args.outputRoot, safeName3);
-  mkdirSync105(dirname71(outputPath3), { recursive: true });
+  mkdirSync105(dirname72(outputPath3), { recursive: true });
   writeFileSync95(outputPath3, bytes3);
   return { ok: true, path: outputPath3, metadata };
 }
@@ -775594,14 +775827,14 @@ async function handlePeerEndpoint(peerId, authKey, ctx3, local, advertisedModels
     if (models.length > 0) {
       try {
         const { writeFileSync: writeFileSync125, mkdirSync: mkdirSync142 } = await import("node:fs");
-        const { join: join225, dirname: dirname87 } = await import("node:path");
+        const { join: join225, dirname: dirname88 } = await import("node:path");
         const cachePath2 = join225(
           ctx3.repoRoot || process.cwd(),
           ".omnius",
           "nexus",
           "peer-models-cache.json"
         );
-        mkdirSync142(dirname87(cachePath2), { recursive: true });
+        mkdirSync142(dirname88(cachePath2), { recursive: true });
         writeFileSync125(
           cachePath2,
           JSON.stringify(
@@ -775677,14 +775910,14 @@ async function handlePeerEndpoint(peerId, authKey, ctx3, local, advertisedModels
       );
       try {
         const { writeFileSync: writeFileSync125, mkdirSync: mkdirSync142 } = await import("node:fs");
-        const { join: join225, dirname: dirname87 } = await import("node:path");
+        const { join: join225, dirname: dirname88 } = await import("node:path");
         const cachePath2 = join225(
           ctx3.repoRoot || process.cwd(),
           ".omnius",
           "nexus",
           "peer-models-cache.json"
         );
-        mkdirSync142(dirname87(cachePath2), { recursive: true });
+        mkdirSync142(dirname88(cachePath2), { recursive: true });
         writeFileSync125(
           cachePath2,
           JSON.stringify(
@@ -776770,10 +777003,10 @@ async function handleUpdate(subcommand, ctx3) {
   try {
     const { createRequire: createRequire12 } = await import("node:module");
     const { fileURLToPath: fileURLToPath38 } = await import("node:url");
-    const { dirname: dirname87, join: join225 } = await import("node:path");
+    const { dirname: dirname88, join: join225 } = await import("node:path");
     const { existsSync: existsSync208 } = await import("node:fs");
     const req3 = createRequire12(import.meta.url);
-    const thisDir = dirname87(fileURLToPath38(import.meta.url));
+    const thisDir = dirname88(fileURLToPath38(import.meta.url));
     const candidates = [
       join225(thisDir, "..", "package.json"),
       join225(thisDir, "..", "..", "package.json"),
@@ -784243,7 +784476,7 @@ Call task_complete with the JSON array when done.`,
 
 // packages/cli/src/tui/promptLoader.ts
 import { readFileSync as readFileSync147, existsSync as existsSync176 } from "node:fs";
-import { join as join188, dirname as dirname73 } from "node:path";
+import { join as join188, dirname as dirname74 } from "node:path";
 import { fileURLToPath as fileURLToPath32 } from "node:url";
 function loadPrompt3(promptPath, vars) {
   let content = cache7.get(promptPath);
@@ -784262,7 +784495,7 @@ var __filename5, __dirname6, devPath, publishedPath, PROMPTS_DIR3, cache7;
 var init_promptLoader3 = __esm({
   "packages/cli/src/tui/promptLoader.ts"() {
     __filename5 = fileURLToPath32(import.meta.url);
-    __dirname6 = dirname73(__filename5);
+    __dirname6 = dirname74(__filename5);
     devPath = join188(__dirname6, "..", "..", "prompts");
     publishedPath = join188(__dirname6, "..", "prompts");
     PROMPTS_DIR3 = existsSync176(devPath) ? devPath : publishedPath;
@@ -789439,7 +789672,7 @@ import {
   unlinkSync as unlinkSync45,
   writeFileSync as writeFileSync104
 } from "node:fs";
-import { dirname as dirname74, join as join193 } from "node:path";
+import { dirname as dirname75, join as join193 } from "node:path";
 import { randomBytes as randomBytes33 } from "node:crypto";
 function finiteNonNegativeInteger(value2, name10) {
   if (!Number.isSafeInteger(value2) || value2 < 0) {
@@ -789531,7 +789764,7 @@ var init_telegram_poll_health = __esm({
       }
       write(state5) {
         if (!isPollHealth(state5)) throw new TypeError("Invalid Telegram poll health");
-        mkdirSync115(dirname74(this.filePath), { recursive: true });
+        mkdirSync115(dirname75(this.filePath), { recursive: true });
         const temporaryPath = `${this.filePath}.${process.pid}.${randomBytes33(8).toString("hex")}.tmp`;
         let fd;
         try {
@@ -789543,7 +789776,7 @@ var init_telegram_poll_health = __esm({
           fd = void 0;
           renameSync36(temporaryPath, this.filePath);
           try {
-            const directoryFd = openSync15(dirname74(this.filePath), "r");
+            const directoryFd = openSync15(dirname75(this.filePath), "r");
             try {
               fsyncSync4(directoryFd);
             } finally {
@@ -789762,7 +789995,7 @@ var init_telegram_input_ownership = __esm({
 // packages/cli/src/tui/telegram-update-spool.ts
 import Database from "better-sqlite3";
 import { mkdirSync as mkdirSync116 } from "node:fs";
-import { dirname as dirname75 } from "node:path";
+import { dirname as dirname76 } from "node:path";
 function safeInteger2(value2, name10) {
   if (!Number.isSafeInteger(value2) || value2 < 0) {
     throw new TelegramUpdateEnvelopeError(
@@ -789948,7 +790181,7 @@ var init_telegram_update_spool = __esm({
     TelegramUpdateSpool = class {
       constructor(dbPath) {
         this.dbPath = dbPath;
-        mkdirSync116(dirname75(dbPath), { recursive: true });
+        mkdirSync116(dirname76(dbPath), { recursive: true });
         this.db = new Database(dbPath);
         this.db.pragma("journal_mode = WAL");
         this.db.pragma("synchronous = FULL");
@@ -791407,7 +791640,7 @@ import {
   unlinkSync as unlinkSync46,
   writeFileSync as writeFileSync105
 } from "node:fs";
-import { dirname as dirname76, join as join194, resolve as resolve89 } from "node:path";
+import { dirname as dirname77, join as join194, resolve as resolve89 } from "node:path";
 function clip3(text3, limit2) {
   const compact6 = text3.replace(/\s+/g, " ").trim();
   return compact6.length <= limit2 ? compact6 : `${compact6.slice(0, Math.max(0, limit2 - 3)).trimEnd()}...`;
@@ -791538,7 +791771,7 @@ function loadTelegramOutputPatternMemory(scope) {
 }
 function saveTelegramOutputPatternMemory(scope, memory) {
   const paths = telegramOutputPatternMemoryPaths(scope);
-  mkdirSync117(dirname76(paths.json), { recursive: true });
+  mkdirSync117(dirname77(paths.json), { recursive: true });
   const temporaryPath = `${paths.json}.${process.pid}.${randomBytes34(6).toString("hex")}.tmp`;
   try {
     writeFileSync105(temporaryPath, `${JSON.stringify(memory, null, 2)}
@@ -791557,7 +791790,7 @@ function saveTelegramOutputPatternMemory(scope, memory) {
 }
 function appendEvent(scope, event) {
   const paths = telegramOutputPatternMemoryPaths(scope);
-  mkdirSync117(dirname76(paths.events), { recursive: true });
+  mkdirSync117(dirname77(paths.events), { recursive: true });
   appendFileSync22(
     paths.events,
     `${JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...event })}
@@ -792538,13 +792771,13 @@ import {
 } from "node:fs";
 import {
   basename as basename47,
-  dirname as dirname77,
+  dirname as dirname78,
   extname as extname24,
-  isAbsolute as isAbsolute23,
+  isAbsolute as isAbsolute24,
   join as join196,
   relative as relative26,
   resolve as resolve90,
-  sep as sep13
+  sep as sep12
 } from "node:path";
 function optionalHttpsReceiptUrl(value2, label) {
   if (value2 === void 0) return void 0;
@@ -792578,11 +792811,11 @@ function ledgerPath(root) {
   return join196(resolve90(root), LEDGER_FILE2);
 }
 function signingKeyPath(root) {
-  return join196(dirname77(resolve90(root)), KEY_FILE);
+  return join196(dirname78(resolve90(root)), KEY_FILE);
 }
 function readSigningKey(root) {
   const path16 = signingKeyPath(root);
-  mkdirSync118(dirname77(path16), { recursive: true });
+  mkdirSync118(dirname78(path16), { recursive: true });
   if (!existsSync182(path16)) {
     writeFileSync106(path16, randomBytes36(32), { mode: 384, flag: "wx" });
   }
@@ -792684,7 +792917,7 @@ function assertLogicalPath(root, logicalPath2) {
   const rootAbs = resolve90(root);
   const abs = resolve90(rootAbs, logicalPath2);
   const rel = relative26(rootAbs, abs);
-  if (!logicalPath2.trim() || rel === "" || rel.startsWith("..") || resolve90(abs) === rootAbs || !abs.startsWith(rootAbs.endsWith(sep13) ? rootAbs : rootAbs + sep13)) {
+  if (!logicalPath2.trim() || rel === "" || rel.startsWith("..") || resolve90(abs) === rootAbs || !abs.startsWith(rootAbs.endsWith(sep12) ? rootAbs : rootAbs + sep12)) {
     throw new Error("Artifact path escapes the Telegram creative workspace");
   }
   if (basename47(abs).startsWith(".omnius-")) {
@@ -792861,7 +793094,7 @@ function registerTelegramArtifactCapability(args) {
 }
 function getTelegramArtifactCapability(root, capabilityOrArtifactId) {
   const ledger = readLedger(root);
-  const lookupPath = isAbsolute23(capabilityOrArtifactId) ? relative26(resolve90(root), resolve90(capabilityOrArtifactId)).replace(
+  const lookupPath = isAbsolute24(capabilityOrArtifactId) ? relative26(resolve90(root), resolve90(capabilityOrArtifactId)).replace(
     /\\/g,
     "/"
   ) : capabilityOrArtifactId.replace(/\\/g, "/");
@@ -793086,14 +793319,14 @@ import {
   mkdirSync as mkdirSync119,
   readdirSync as readdirSync63,
   readFileSync as readFileSync154,
-  realpathSync as realpathSync2,
+  realpathSync as realpathSync3,
   renameSync as renameSync39,
   rmSync as rmSync22,
   statSync as statSync70,
   unlinkSync as unlinkSync48,
   writeFileSync as writeFileSync107
 } from "node:fs";
-import { basename as basename48, dirname as dirname78, join as join197, relative as relative27, resolve as resolve91, sep as sep14 } from "node:path";
+import { basename as basename48, dirname as dirname79, join as join197, relative as relative27, resolve as resolve91, sep as sep13 } from "node:path";
 function positiveSafeInteger(value2, fallback, label) {
   const resolved = value2 ?? fallback;
   if (!Number.isSafeInteger(resolved) || resolved < 1) {
@@ -793112,7 +793345,7 @@ function runKey(runId) {
 }
 function isInside(root, candidate) {
   const rel = relative27(root, candidate);
-  return rel === "" || !rel.startsWith(`..${sep14}`) && rel !== "..";
+  return rel === "" || !rel.startsWith(`..${sep13}`) && rel !== "..";
 }
 function atomicWriteJson2(path16, value2) {
   const staged = `${path16}.${randomBytes37(8).toString("hex")}.tmp`;
@@ -793144,17 +793377,17 @@ function readReceipt(root) {
   }
 }
 function assertDeletableRun(runsRoot, candidate) {
-  const canonicalRuns = realpathSync2(runsRoot);
+  const canonicalRuns = realpathSync3(runsRoot);
   const lexical = resolve91(candidate);
-  if (!isInside(canonicalRuns, lexical) || dirname78(lexical) !== canonicalRuns) {
+  if (!isInside(canonicalRuns, lexical) || dirname79(lexical) !== canonicalRuns) {
     throw new Error("Refusing to clean an artifact path outside the run root");
   }
   const info = lstatSync5(lexical);
   if (info.isSymbolicLink() || !info.isDirectory()) {
     throw new Error("Refusing to clean a non-directory or symbolic-link run path");
   }
-  const canonicalCandidate = realpathSync2(lexical);
-  if (dirname78(canonicalCandidate) !== canonicalRuns) {
+  const canonicalCandidate = realpathSync3(lexical);
+  if (dirname79(canonicalCandidate) !== canonicalRuns) {
     throw new Error("Refusing to clean a run directory that resolves outside its parent");
   }
 }
@@ -793281,7 +793514,7 @@ function usageWalk(root, current) {
       throw new Error("Symbolic links are not allowed in Telegram artifact runs");
     }
     if (info.isDirectory()) {
-      const canonical3 = realpathSync2(path16);
+      const canonical3 = realpathSync3(path16);
       if (!isInside(root, canonical3)) {
         throw new Error("Artifact run directory resolves outside its root");
       }
@@ -793302,7 +793535,7 @@ function telegramArtifactRunUsage(root) {
   const resolved = resolve91(root);
   const receipt2 = readReceipt(resolved);
   if (!receipt2) throw new Error("Telegram artifact run receipt is missing or invalid");
-  return usageWalk(realpathSync2(resolved), resolved);
+  return usageWalk(realpathSync3(resolved), resolved);
 }
 function assertTelegramArtifactRunQuota(root, additionalBytes = 0, additionalArtifacts = 0) {
   if (!Number.isSafeInteger(additionalBytes) || additionalBytes < 0) {
@@ -793351,7 +793584,7 @@ import {
   existsSync as existsSync184,
   lstatSync as lstatSync6,
   mkdirSync as mkdirSync120,
-  realpathSync as realpathSync3,
+  realpathSync as realpathSync4,
   renameSync as renameSync40,
   readFileSync as readFileSync155,
   rmSync as rmSync23,
@@ -793363,13 +793596,13 @@ import {
 import { mkdir as mkdir28 } from "node:fs/promises";
 import {
   basename as basename49,
-  dirname as dirname79,
+  dirname as dirname80,
   extname as extname25,
-  isAbsolute as isAbsolute24,
+  isAbsolute as isAbsolute25,
   join as join198,
   relative as relative28,
   resolve as resolve92,
-  sep as sep15
+  sep as sep14
 } from "node:path";
 function telegramCreativeWorkspaceRoot(repoRoot, chatId) {
   const raw = chatId === void 0 ? "unknown" : String(chatId);
@@ -793746,7 +793979,7 @@ function scopedTool(base3, root, mode, onCreatedArtifact) {
             guarded.path.rel
           );
           if (!materialized.ok) return denied2(materialized.error);
-          mkdirSync120(dirname79(guarded.path.abs), { recursive: true });
+          mkdirSync120(dirname80(guarded.path.abs), { recursive: true });
           writeFileSync108(guarded.path.abs, readFileSync155(materialized.path));
           materialized.cleanup?.();
           restoredEditPath = guarded.path.abs;
@@ -794028,12 +794261,12 @@ function scopedArtifactTool(base3, root, kind, onCreatedArtifact) {
 }
 function ensureScopedOutputParent(root, outputPath3) {
   const rootAbs = resolve92(root);
-  const parent = dirname79(resolve92(outputPath3));
+  const parent = dirname80(resolve92(outputPath3));
   if (!isInside2(rootAbs, parent)) {
     throw new Error("Output parent escapes the scoped creative workspace.");
   }
   let cursor = rootAbs;
-  for (const segment of relative28(rootAbs, parent).split(sep15).filter(Boolean)) {
+  for (const segment of relative28(rootAbs, parent).split(sep14).filter(Boolean)) {
     cursor = join198(cursor, segment);
     if (existsSync184(cursor)) {
       const info = lstatSync6(cursor);
@@ -794128,7 +794361,7 @@ function guardPath(root, rawPath) {
     };
   }
   const rel = relative28(rootAbs, abs) || ".";
-  if (rel.startsWith("..") || isAbsolute24(rel)) {
+  if (rel.startsWith("..") || isAbsolute25(rel)) {
     return {
       ok: false,
       error: `Path escapes the public creative workspace. Use a relative path under ${rootAbs}.`
@@ -794146,7 +794379,7 @@ function guardPath(root, rawPath) {
 function isInside2(root, path16) {
   const rootAbs = resolve92(root);
   const pathAbs = resolve92(path16);
-  return pathAbs === rootAbs || pathAbs.startsWith(rootAbs.endsWith(sep15) ? rootAbs : rootAbs + sep15);
+  return pathAbs === rootAbs || pathAbs.startsWith(rootAbs.endsWith(sep14) ? rootAbs : rootAbs + sep14);
 }
 function looksLikeLocalPath(value2) {
   return value2.startsWith("/") || value2.startsWith("./") || value2.startsWith("../");
@@ -794447,7 +794680,7 @@ function safeScopedRegularFile(root, path16) {
         error: "Scoped artifacts must be regular files, not links or directories."
       };
     }
-    const canonical3 = realpathSync3(path16);
+    const canonical3 = realpathSync4(path16);
     if (!isInside2(lexicalRoot, canonical3)) {
       return {
         ok: false,
@@ -794886,7 +795119,7 @@ var init_telegram_creative_tools = __esm({
             stage: "setup",
             message: "Preparing scoped TTS audio file"
           });
-          await mkdir28(dirname79(guarded.path.abs), { recursive: true });
+          await mkdir28(dirname80(guarded.path.abs), { recursive: true });
           const tts = new TtsGenerateTool();
           this.emitProgress(start2, {
             stage: "load",
@@ -801054,11 +801287,11 @@ import {
 } from "node:fs";
 import {
   join as join203,
-  dirname as dirname80,
+  dirname as dirname81,
   resolve as resolve94,
   basename as basename51,
   relative as relative29,
-  isAbsolute as isAbsolute25,
+  isAbsolute as isAbsolute26,
   extname as extname27
 } from "node:path";
 import { homedir as homedir62 } from "node:os";
@@ -801529,6 +801762,9 @@ function telegramStreamFailureAllowsUnaryFallback(err) {
     text3
   );
 }
+function telegramUnaryCompatibilityLogicalRequestId(streamLogicalRequestId) {
+  return `telegram:unary-compat:${createHash91("sha256").update(streamLogicalRequestId).digest("hex").slice(0, 24)}`;
+}
 function telegramRouterErrorText(err) {
   return err instanceof Error ? err.message : String(err);
 }
@@ -803558,7 +803794,7 @@ function telegramCachedMediaIsVideo(entry) {
 }
 function isPathInside3(root, path16) {
   const rel = relative29(resolve94(root), resolve94(path16));
-  return rel === "" || Boolean(rel) && !rel.startsWith("..") && !isAbsolute25(rel);
+  return rel === "" || Boolean(rel) && !rel.startsWith("..") && !isAbsolute26(rel);
 }
 function extractTelegramMentionedActors(message2, text3) {
   const actors = /* @__PURE__ */ new Map();
@@ -804792,7 +805028,7 @@ Telegram link integrity contract:
     TELEGRAM_PRIVATE_COALESCE_MS = 350;
     TELEGRAM_SESSION_MAX_HOLD_MS = 5e3;
     TELEGRAM_PEER_BOT_COALESCE_MS = 3500;
-    TELEGRAM_PEER_BOT_MAX_HOLD_MS = 12e3;
+    TELEGRAM_PEER_BOT_MAX_HOLD_MS = 6e4;
     TELEGRAM_ADMIN_LIVE_PANEL_PAGES = [
       "response",
       "tasks",
@@ -807328,7 +807564,7 @@ ${context2}` : context2;
       appendTelegramIntakeJournal(sessionKey, entry) {
         const write2 = async () => {
           const path16 = this.telegramIntakePath(sessionKey);
-          await mkdirAsync(dirname80(path16), { recursive: true });
+          await mkdirAsync(dirname81(path16), { recursive: true });
           await appendFileAsync(path16, `${JSON.stringify(entry)}
 `, "utf8");
         };
@@ -810902,7 +811138,14 @@ ${JSON.stringify(modelFollowupProposals, null, 2)}`,
               ],
               tools: [],
               temperature: 0.2,
-              maxTokens: 300,
+              // The contract permits up to 700 characters of message text plus
+              // evidence IDs and decision metadata. A 300-token ceiling can end
+              // at `finish=length` before a complete JSON object exists.
+              maxTokens: 1024,
+              // Ollama's OpenAI-compatible renderer can spend the full token
+              // budget in hidden reasoning even with think:false. Native chat
+              // enforces direct-answer mode and avoids an empty-stream fallback.
+              preferNativeOllamaChat: this.agentConfig.backendType === "ollama",
               timeoutMs: Math.min(
                 Math.max(this.agentConfig.timeoutMs ?? 3e4, 5e3),
                 2e4
@@ -811266,7 +811509,7 @@ ${JSON.stringify(modelFollowupProposals, null, 2)}`,
         if (existing) {
           if (existing.mode === "ambient" || mode !== "ambient")
             existing.mode = mode;
-          if (useOverride || !existing.text || existing.text === "[non-text Telegram message]" || _TelegramBridge.isSyntheticMemoryText(existing.text)) {
+          if (msg.sourceUpdateType === "edited_message" || useOverride || !existing.text || existing.text === "[non-text Telegram message]" || _TelegramBridge.isSyntheticMemoryText(existing.text)) {
             existing.text = text3;
           }
           existing.speaker = existing.speaker || telegramSpeakerLabel(msg);
@@ -811541,7 +811784,7 @@ ${JSON.stringify(modelFollowupProposals, null, 2)}`,
           return false;
         });
         if (matchingEntry) return { ok: true, path: matchingEntry.localPath };
-        const creativeCandidate = isAbsolute25(raw) ? resolve94(raw) : resolve94(creativeRoot, raw);
+        const creativeCandidate = isAbsolute26(raw) ? resolve94(raw) : resolve94(creativeRoot, raw);
         if (isPathInside3(creativeRoot, creativeCandidate)) {
           const materialized = materializeTelegramCreativeArtifactForSend(
             creativeRoot,
@@ -811680,7 +811923,7 @@ ${JSON.stringify(modelFollowupProposals, null, 2)}`,
         const repoRoot = this.repoRoot || ".";
         const creativeRoot = telegramCreativeWorkspaceRoot(repoRoot, chatId);
         const raw = String(rawValue || fallbackName).trim() || fallbackName;
-        const outputPath3 = isAbsolute25(raw) ? resolve94(raw) : resolve94(creativeRoot, raw);
+        const outputPath3 = isAbsolute26(raw) ? resolve94(raw) : resolve94(creativeRoot, raw);
         if (!isPathInside3(creativeRoot, outputPath3)) {
           return {
             ok: false,
@@ -813591,7 +813834,15 @@ ${this.quoteTelegramContextBlock(msg.text, 1200)}`
                     id2,
                     `stream protocol did not return a usable contract; using one unary compatibility request: ${streamErr instanceof Error ? streamErr.message : String(streamErr)}`
                   );
-                  result = await backend.chatCompletion(requestWithCtx);
+                  const unaryCompatibilityRequest = {
+                    ...requestWithCtx,
+                    logicalRequestId: telegramUnaryCompatibilityLogicalRequestId(
+                      logicalRequestId
+                    )
+                  };
+                  result = await backend.chatCompletion(
+                    unaryCompatibilityRequest
+                  );
                   this.updateTelegramInferenceFinal(id2, result);
                   this.tuiWrite(
                     () => renderTelegramSubAgentEvent(
@@ -816062,7 +816313,7 @@ ${TELEGRAM_PUBLIC_ORCHESTRATOR_CONTRACT}`
         }
         try {
           this.telegramUpdateSpool = new TelegramUpdateSpool(
-            join203(dirname80(healthPath), `bot-${botUserId}.updates.sqlite`)
+            join203(dirname81(healthPath), `bot-${botUserId}.updates.sqlite`)
           );
           const snapshot = this.telegramUpdateSpool.snapshot();
           if (this.telegramDurableIntakeConfig.authoritative) {
@@ -817803,6 +818054,18 @@ ${signals || summary || "Canonical runner status reported completed."}`
           await this.handleTelegramInterruptionSlash(msg, slashInvocation);
           return;
         }
+        if (msg.sourceUpdateType === "edited_message") {
+          const inputId2 = this.telegramInputIdForMessage(msg);
+          const existingIntake = this.telegramIntakeRecords.get(inputId2);
+          if (existingIntake) {
+            this.recordTelegramUserMessage(msg, "ambient", void 0, {
+              cognition: false
+            });
+            await this.consolidateTelegramEditedIntake(msg, existingIntake);
+            releaseIngress();
+            return;
+          }
+        }
         const outputPatternMatch = this.consumeTelegramDurableOutputPattern(msg);
         if (outputPatternMatch.ignored && outputPatternMatch.pattern) {
           this.recordTelegramUserMessage(msg, "ambient", void 0, {
@@ -825424,7 +825687,7 @@ ${knownList}` : "Private-user telegram_send_file target must be this DM or a kno
         const base3 = scopedRoot ? resolve94(scopedRoot) : resolve94(repoRoot);
         const trimmed = rawPath.trim().replace(/^["']|["']$/g, "");
         if (scopedRoot) {
-          const logicalPath2 = isAbsolute25(trimmed) ? resolve94(trimmed) : resolve94(base3, trimmed);
+          const logicalPath2 = isAbsolute26(trimmed) ? resolve94(trimmed) : resolve94(base3, trimmed);
           if (!isPathInside3(base3, logicalPath2)) {
             return {
               ok: false,
@@ -825438,7 +825701,7 @@ ${knownList}` : "Private-user telegram_send_file target must be this DM or a kno
           if (!materialized.ok) return materialized;
           return { ...materialized, logicalPath: logicalPath2 };
         }
-        const abs = isAbsolute25(trimmed) ? resolve94(trimmed) : resolve94(base3, trimmed);
+        const abs = isAbsolute26(trimmed) ? resolve94(trimmed) : resolve94(base3, trimmed);
         if (!existsSync189(abs))
           return { ok: false, error: `File does not exist: ${trimmed}` };
         if (!statSync72(abs).isFile())
@@ -830452,7 +830715,7 @@ var init_clipboard_media = __esm({
 
 // packages/cli/src/tui/interactive.ts
 import { cwd } from "node:process";
-import { resolve as resolve96, join as join206, dirname as dirname81, extname as extname28, relative as relative30, sep as sep16 } from "node:path";
+import { resolve as resolve96, join as join206, dirname as dirname82, extname as extname28, relative as relative30, sep as sep15 } from "node:path";
 import { createRequire as createRequire9 } from "node:module";
 import { fileURLToPath as fileURLToPath33 } from "node:url";
 import { createHash as createHash92 } from "node:crypto";
@@ -830513,7 +830776,7 @@ function formatTimeAgo2(date) {
 function getVersion3() {
   try {
     const require5 = createRequire9(import.meta.url);
-    const thisDir = dirname81(fileURLToPath33(import.meta.url));
+    const thisDir = dirname82(fileURLToPath33(import.meta.url));
     const candidates = [
       join206(thisDir, "..", "package.json"),
       join206(thisDir, "..", "..", "package.json"),
@@ -836954,9 +837217,9 @@ This is an independent background session started from /background.`
         const kind = partial.slice(0, colonIndex);
         const value2 = partial.slice(colonIndex + 1);
         if ((kind === "file" || kind === "folder") && value2) {
-          const isAbsolute26 = value2.startsWith("/");
-          const searchDir = isAbsolute26 ? value2.lastIndexOf("/") > 0 ? value2.slice(0, value2.lastIndexOf("/") + 1) : "/" : repoRoot;
-          const partialName = isAbsolute26 ? value2.slice(value2.lastIndexOf("/") + 1) : value2.includes("/") ? value2.slice(value2.lastIndexOf("/") + 1) : value2;
+          const isAbsolute27 = value2.startsWith("/");
+          const searchDir = isAbsolute27 ? value2.lastIndexOf("/") > 0 ? value2.slice(0, value2.lastIndexOf("/") + 1) : "/" : repoRoot;
+          const partialName = isAbsolute27 ? value2.slice(value2.lastIndexOf("/") + 1) : value2.includes("/") ? value2.slice(value2.lastIndexOf("/") + 1) : value2;
           let entries2;
           try {
             entries2 = readdirSync66(searchDir);
@@ -836970,7 +837233,7 @@ This is an independent background session started from /background.`
             try {
               const st = statSync74(full);
               const suffix = st.isDirectory() ? "/" : "";
-              const display = isAbsolute26 ? full : full.startsWith(repoRoot + sep16) ? full.slice(repoRoot.length + 1) : full;
+              const display = isAbsolute27 ? full : full.startsWith(repoRoot + sep15) ? full.slice(repoRoot.length + 1) : full;
               completions.push(display + suffix);
             } catch {
             }
@@ -843497,7 +843760,7 @@ var init_project_preferences = __esm({
 import { spawn as spawn46 } from "node:child_process";
 import { existsSync as existsSync195, mkdirSync as mkdirSync130, readFileSync as readFileSync166, statSync as statSync76, writeFileSync as writeFileSync117 } from "node:fs";
 import { homedir as homedir67 } from "node:os";
-import { dirname as dirname82, join as join210 } from "node:path";
+import { dirname as dirname83, join as join210 } from "node:path";
 import { fileURLToPath as fileURLToPath34 } from "node:url";
 import { createHash as createHash94 } from "node:crypto";
 function home() {
@@ -843891,7 +844154,7 @@ var MODULE_DIR2, RUNTIME_VERSION5, MODEL, PRETRAINED, MODEL_REPOSITORY, MODEL_RE
 var init_vision_embedding_runtime = __esm({
   "packages/cli/src/api/vision-embedding-runtime.ts"() {
     init_dist5();
-    MODULE_DIR2 = dirname82(fileURLToPath34(import.meta.url));
+    MODULE_DIR2 = dirname83(fileURLToPath34(import.meta.url));
     RUNTIME_VERSION5 = 4;
     MODEL = "ViT-B-32";
     PRETRAINED = "laion2b_s34b_b79k";
@@ -844489,7 +844752,7 @@ var init_audit_log = __esm({
 // packages/cli/src/api/disk-task-output.ts
 import { open as open6 } from "node:fs/promises";
 import { existsSync as existsSync198, mkdirSync as mkdirSync133, statSync as statSync77 } from "node:fs";
-import { dirname as dirname83 } from "node:path";
+import { dirname as dirname84 } from "node:path";
 import * as fsConstants2 from "node:constants";
 var O_NOFOLLOW2, O_APPEND2, O_CREAT2, O_WRONLY2, OPEN_FLAGS_WRITE, OPEN_MODE, DiskTaskOutput;
 var init_disk_task_output = __esm({
@@ -844507,7 +844770,7 @@ var init_disk_task_output = __esm({
       fileSize = 0;
       constructor(outputPath3) {
         this.path = outputPath3;
-        mkdirSync133(dirname83(outputPath3), { recursive: true });
+        mkdirSync133(dirname84(outputPath3), { recursive: true });
       }
       /** Queue content for async append. Non-blocking. */
       append(chunk) {
@@ -868336,7 +868599,7 @@ var init_chat_followup = __esm({
 // packages/cli/src/docker.ts
 import { execSync as execSync37, spawn as spawn49 } from "node:child_process";
 import { existsSync as existsSync206, mkdirSync as mkdirSync139, writeFileSync as writeFileSync122 } from "node:fs";
-import { join as join220, resolve as resolve101, dirname as dirname84 } from "node:path";
+import { join as join220, resolve as resolve101, dirname as dirname85 } from "node:path";
 import { homedir as homedir72 } from "node:os";
 import { fileURLToPath as fileURLToPath35 } from "node:url";
 function getDockerDir() {
@@ -868347,7 +868610,7 @@ function getDockerDir() {
   } catch {
   }
   try {
-    const thisDir = dirname84(fileURLToPath35(import.meta.url));
+    const thisDir = dirname85(fileURLToPath35(import.meta.url));
     return join220(thisDir, "..", "..", "..", "docker");
   } catch {
   }
@@ -868891,7 +869154,7 @@ import * as http5 from "node:http";
 import * as https3 from "node:https";
 import { createRequire as createRequire10 } from "node:module";
 import { fileURLToPath as fileURLToPath36 } from "node:url";
-import { dirname as dirname85, join as join222, resolve as resolve102 } from "node:path";
+import { dirname as dirname86, join as join222, resolve as resolve102 } from "node:path";
 import { homedir as homedir73 } from "node:os";
 import { spawn as spawn50, execSync as execSync38 } from "node:child_process";
 import {
@@ -868920,7 +869183,7 @@ function memoryDbPaths3(baseDir = process.cwd()) {
 }
 function readServerPackageIdentity() {
   try {
-    const thisDir = dirname85(fileURLToPath36(import.meta.url));
+    const thisDir = dirname86(fileURLToPath36(import.meta.url));
     const candidates = [
       join222(thisDir, "..", "package.json"),
       join222(thisDir, "..", "..", "package.json"),
@@ -873373,7 +873636,7 @@ async function handleV1Update(req3, res, requestId) {
     );
     const fs14 = require4("node:fs");
     const nodeBin = process.execPath;
-    const nodeDir = dirname85(nodeBin);
+    const nodeDir = dirname86(nodeBin);
     const { execSync: es } = require4("node:child_process");
     const isWin2 = process.platform === "win32";
     let npmBin = "";
@@ -873388,7 +873651,7 @@ async function handleV1Update(req3, res, requestId) {
     const dir = join222(homedir73(), ".omnius");
     fs14.mkdirSync(dir, { recursive: true });
     const logFd = fs14.openSync(logPath3, "w");
-    const npmPrefix = dirname85(nodeDir);
+    const npmPrefix = dirname86(nodeDir);
     let globalBinDir = "";
     try {
       if (isWin2) {
@@ -881848,7 +882111,7 @@ init_typed_node_events();
 init_dist5();
 import { parseArgs as nodeParseArgs2 } from "node:util";
 import { fileURLToPath as fileURLToPath37 } from "node:url";
-import { dirname as dirname86, join as join224 } from "node:path";
+import { dirname as dirname87, join as join224 } from "node:path";
 import { createRequire as createRequire11 } from "node:module";
 
 // packages/cli/src/cli.ts
@@ -882017,7 +882280,7 @@ init_output();
 function getVersion5() {
   try {
     const require5 = createRequire11(import.meta.url);
-    const pkgPath = join224(dirname86(fileURLToPath37(import.meta.url)), "..", "package.json");
+    const pkgPath = join224(dirname87(fileURLToPath37(import.meta.url)), "..", "package.json");
     const pkg = require5(pkgPath);
     return pkg.version;
   } catch {