pi-subagents 0.69.0 → 0.70.1

package/src/runs/shared/acceptance.js

@@ -0,0 +1,1617 @@
+import { spawn } from "node:child_process";
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { unresolvedChildWatchdogBlockers } from "../../watchdog/child-status.js";
+import { isAgentContract } from "./agent-contract.js";
+import { validateStructuredOutputValue } from "./structured-output.js";
+const LEVEL_RANK = {
+    none: 0,
+    attested: 1,
+    checked: 2,
+    verified: 3,
+};
+const VALID_LEVELS = new Set(["auto", "none", "attested", "checked", "verified"]);
+const VALID_EVIDENCE_KINDS = [
+    "changed-files",
+    "tests-added",
+    "commands-run",
+    "validation-output",
+    "residual-risks",
+    "no-staged-files",
+    "diff-summary",
+    "review-findings",
+    "manual-notes",
+];
+const VALID_EVIDENCE = new Set(VALID_EVIDENCE_KINDS);
+const ACCEPTANCE_EVIDENCE_HELP = `Supported evidence kinds: ${VALID_EVIDENCE_KINDS.join(", ")}. Example: { level: "checked", evidence: ["commands-run", "changed-files"] }.`;
+const ACCEPTANCE_OBJECT_EXAMPLE = "Example: { level: \"checked\", evidence: [\"commands-run\", \"changed-files\"] }.";
+const ACCEPTANCE_CONFIG_KEYS = new Set(["level", "report", "preserveStagedIndex", "criteria", "evidence", "verify", "review", "stopRules", "reason"]);
+const ACCEPTANCE_GATE_KEYS = new Set(["id", "must", "evidence", "severity"]);
+const ACCEPTANCE_VERIFY_KEYS = new Set(["id", "command", "timeoutMs", "cwd", "env", "allowFailure", "output", "schema"]);
+const ACCEPTANCE_REVIEW_KEYS = new Set(["agent", "focus", "required"]);
+const EXPLICIT_REVIEWED_UNAVAILABLE = "is an achieved status, not a requestable acceptance level. For a read-only reviewer call, omit acceptance. To require independent review of a writer result, use acceptance.review.required and orchestrate the reviewer separately.";
+function normalizeLevel(level) {
+    return level ?? "auto";
+}
+function unique(items) {
+    return [...new Set(items)];
+}
+function requiredEvidenceForLevel(level) {
+    switch (level) {
+        case "none":
+            return [];
+        case "attested":
+            return ["manual-notes", "residual-risks"];
+        case "checked":
+            return ["changed-files", "tests-added", "commands-run", "residual-risks", "no-staged-files"];
+        case "verified":
+            return ["changed-files", "tests-added", "commands-run", "validation-output", "residual-risks", "no-staged-files"];
+    }
+}
+function inferLevel(input) {
+    if (input.acceptanceRole === "writer" && (input.async || input.dynamic || input.dynamicGroup)) {
+        const reasons = [input.async ? "async declared writer" : "dynamic declared writer"];
+        if (input.dynamic || input.dynamicGroup)
+            reasons.push("dynamic fanout context");
+        return {
+            level: "checked",
+            reasons,
+            criteria: ["Implement the requested change without widening scope", "Return evidence sufficient for an independent acceptance review"],
+            evidence: requiredEvidenceForLevel("checked"),
+            review: { agent: "reviewer", required: true },
+        };
+    }
+    if (input.acceptanceRole === "writer") {
+        return {
+            level: "checked",
+            reasons: ["declared writer acceptance role"],
+            criteria: ["Implement the requested change without widening scope"],
+            evidence: requiredEvidenceForLevel("checked"),
+        };
+    }
+    if (input.acceptanceRole === "read-only") {
+        return {
+            level: "none",
+            reasons: ["declared read-only acceptance role"],
+            criteria: ["Return concrete findings with file paths and severity when applicable"],
+            evidence: ["review-findings", "residual-risks"],
+        };
+    }
+    return {
+        level: "attested",
+        reasons: ["default lightweight attestation"],
+        criteria: ["Return a concise result and residual risks when applicable"],
+        evidence: ["manual-notes", "residual-risks"],
+    };
+}
+function normalizeAcceptanceValue(input, pathLabel = "acceptance") {
+    if (typeof input !== "string")
+        return { value: input };
+    const trimmed = input.trim();
+    if (!trimmed.startsWith("{") && !trimmed.startsWith("["))
+        return { value: input };
+    let parsed;
+    try {
+        parsed = JSON.parse(trimmed);
+    }
+    catch (error) {
+        return {
+            value: input,
+            error: `${pathLabel} JSON string must encode a valid acceptance object: ${error instanceof Error ? error.message : String(error)}`,
+        };
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+        const kind = parsed === null ? "null" : Array.isArray(parsed) ? "an array" : typeof parsed;
+        return { value: input, error: `${pathLabel} JSON string must encode an object; got ${kind}.` };
+    }
+    return { value: parsed };
+}
+export function normalizeAcceptanceInput(input) {
+    const normalized = normalizeAcceptanceValue(input);
+    if (normalized.error)
+        throw new Error(normalized.error);
+    input = normalized.value;
+    if (input === undefined || input === "auto")
+        return { level: "auto" };
+    if (input === false)
+        return { level: "none", reason: "disabled by deprecated false shorthand" };
+    if (typeof input === "string")
+        return { level: input };
+    return { ...input };
+}
+export function resolveAcceptanceReportMode(input) {
+    const normalized = normalizeAcceptanceValue(input);
+    if (normalized.error)
+        throw new Error(normalized.error);
+    const value = normalized.value;
+    const report = value && typeof value === "object" && !Array.isArray(value) ? value.report : undefined;
+    return value === false || report === "off" ? "off" : report === "on" ? "required" : "optional";
+}
+const GATE_OBJECT_KEYS = new Set(["command", "output", "schema", "timeoutMs"]);
+export const GATE_INPUT_ERROR = "gate must be a non-empty command string or { command, output?: \"json\", schema?, timeoutMs? }.";
+/** Validates the two accepted gate shapes without normalizing them. Shared by preflight and the workflow sandbox mirror. */
+export function parseGateInput(gate) {
+    if (typeof gate === "string") {
+        return gate.trim() ? { ok: true, gate: { command: gate.trim() } } : { ok: false, error: GATE_INPUT_ERROR };
+    }
+    if (!gate || typeof gate !== "object" || Array.isArray(gate))
+        return { ok: false, error: GATE_INPUT_ERROR };
+    const value = gate;
+    for (const key of Object.keys(value)) {
+        if (!GATE_OBJECT_KEYS.has(key))
+            return { ok: false, error: `gate.${key} is not supported.` };
+    }
+    if (typeof value.command !== "string" || !value.command.trim())
+        return { ok: false, error: GATE_INPUT_ERROR };
+    if (value.output !== undefined && value.output !== "json")
+        return { ok: false, error: "gate.output must be \"json\" when present." };
+    if (value.schema !== undefined) {
+        if (value.output !== "json")
+            return { ok: false, error: "gate.schema requires gate.output: \"json\"." };
+        if (!value.schema || typeof value.schema !== "object" || Array.isArray(value.schema))
+            return { ok: false, error: "gate.schema must be a JSON Schema object." };
+    }
+    if (value.timeoutMs !== undefined && (!Number.isInteger(value.timeoutMs) || value.timeoutMs < 1))
+        return { ok: false, error: "gate.timeoutMs must be an integer >= 1." };
+    const parsed = { command: value.command.trim() };
+    if (value.output === "json")
+        parsed.output = "json";
+    // SAFETY: schema was checked above to be a non-array object; timeoutMs to be an integer >= 1.
+    if (value.schema !== undefined)
+        parsed.schema = value.schema;
+    if (value.timeoutMs !== undefined)
+        parsed.timeoutMs = value.timeoutMs;
+    return { ok: true, gate: parsed };
+}
+/** True when an acceptance policy declares at least one `output: "json"` verify command, from either the gate shorthand or an explicit verify list. */
+export function acceptanceHasTypedVerify(acceptance) {
+    if (!acceptance || typeof acceptance !== "object")
+        return false;
+    return Array.isArray(acceptance.verify) && acceptance.verify.some((command) => command && typeof command === "object" && command.output === "json");
+}
+export const TYPED_VERIFY_OUTPUT_SCHEMA_CONFLICT = "a typed verify command (output: \"json\") cannot be combined with outputSchema; the child would have two structured-output sources.";
+export function normalizeGateAcceptance(gate, acceptance) {
+    if (gate === undefined) {
+        if (acceptance === undefined)
+            return { ok: true };
+        const normalized = normalizeAcceptanceValue(acceptance);
+        return normalized.error ? { ok: false, error: normalized.error } : { ok: true, acceptance: normalized.value };
+    }
+    const parsed = parseGateInput(gate);
+    if (!parsed.ok)
+        return { ok: false, error: parsed.error };
+    if (acceptance !== undefined && acceptance !== false)
+        return { ok: false, error: "gate cannot be combined with acceptance; use one gate command or acceptance.verify." + describeGateAcceptanceConflict(gate, acceptance) };
+    return { ok: true, acceptance: { level: "verified", verify: [{ id: "gate", ...parsed.gate }] } };
+}
+export function describeGateAcceptanceConflict(gate, acceptance) {
+    const render = (value) => {
+        let encoded;
+        try {
+            encoded = JSON.stringify(value) ?? String(value);
+        }
+        catch {
+            encoded = String(value);
+        }
+        return encoded.length > 120 ? `${encoded.slice(0, 120)}...` : encoded;
+    };
+    return ` Both fields were present: gate=${render(gate)} acceptance=${render(acceptance)}.`;
+}
+function explicitAcceptanceCanDisable(explicit) {
+    return explicit.level === "none" && typeof explicit.reason === "string" && explicit.reason.trim().length > 0;
+}
+function explicitAcceptanceRequestsPolicy(explicit) {
+    return (explicit.level !== undefined && explicit.level !== "auto") || Object.keys(explicit).some((key) => key !== "level");
+}
+function unsupportedEvidenceKindMessage(pathLabel, item) {
+    const value = typeof item === "string" ? ` "${item}"` : "";
+    return `${pathLabel}${value} is not a supported evidence kind. ${ACCEPTANCE_EVIDENCE_HELP}`;
+}
+export function validateAcceptanceInput(input, pathLabel = "acceptance") {
+    const errors = [];
+    if (input === undefined)
+        return errors;
+    if (input === false)
+        return errors;
+    const normalized = normalizeAcceptanceValue(input, pathLabel);
+    if (normalized.error)
+        return [normalized.error];
+    input = normalized.value;
+    if (typeof input === "string") {
+        if (input === "reviewed")
+            errors.push(`${pathLabel} ${EXPLICIT_REVIEWED_UNAVAILABLE}`);
+        else if (!VALID_LEVELS.has(input))
+            errors.push(`${pathLabel} has invalid level '${input}'.`);
+        else if (input === "none")
+            errors.push(`${pathLabel} level "none" requires a reason; use { level: "none", reason: "..." }.`);
+        else if (input === "verified")
+            errors.push(`${pathLabel} level "verified" requires object form with at least one runtime verify command. Use level "checked" or provide a non-empty acceptance.verify array.`);
+        return errors;
+    }
+    if (!input || typeof input !== "object" || Array.isArray(input)) {
+        errors.push(`${pathLabel} must be a string level, false, or an object. ${ACCEPTANCE_OBJECT_EXAMPLE}`);
+        return errors;
+    }
+    const value = input;
+    for (const key of Object.keys(value)) {
+        if (!ACCEPTANCE_CONFIG_KEYS.has(key))
+            errors.push(`${pathLabel}.${key} is not supported.`);
+    }
+    if (value.level === "reviewed") {
+        errors.push(`${pathLabel}.level ${EXPLICIT_REVIEWED_UNAVAILABLE}`);
+    }
+    else if (value.level !== undefined && (typeof value.level !== "string" || !VALID_LEVELS.has(value.level))) {
+        errors.push(`${pathLabel}.level must be one of auto, none, attested, checked, verified.`);
+    }
+    if (value.report !== undefined && value.report !== "on" && value.report !== "off") {
+        errors.push(`${pathLabel}.report must be on or off.`);
+    }
+    if (value.preserveStagedIndex !== undefined && value.preserveStagedIndex !== true) {
+        errors.push(`${pathLabel}.preserveStagedIndex must be true when provided.`);
+    }
+    if (value.preserveStagedIndex === true && value.level !== "checked" && value.level !== "verified") {
+        errors.push(`${pathLabel}.preserveStagedIndex requires level checked or verified.`);
+    }
+    if (value.level === "none" && (typeof value.reason !== "string" || !value.reason.trim())) {
+        errors.push(`${pathLabel}.reason is required when level is none.`);
+    }
+    if (value.reason !== undefined && typeof value.reason !== "string")
+        errors.push(`${pathLabel}.reason must be a string.`);
+    if (value.criteria !== undefined && !Array.isArray(value.criteria))
+        errors.push(`${pathLabel}.criteria must be an array.`);
+    if (Array.isArray(value.criteria)) {
+        const criterionIds = new Set();
+        for (const [index, criterion] of value.criteria.entries()) {
+            if (typeof criterion === "string")
+                continue;
+            const criterionPath = `${pathLabel}.criteria[${index}]`;
+            if (!criterion || typeof criterion !== "object" || Array.isArray(criterion)) {
+                errors.push(`${criterionPath} must be a string or an object.`);
+                continue;
+            }
+            const gate = criterion;
+            for (const key of Object.keys(gate)) {
+                if (!ACCEPTANCE_GATE_KEYS.has(key))
+                    errors.push(`${criterionPath}.${key} is not supported.`);
+            }
+            if (typeof gate.id !== "string" || !gate.id.trim()) {
+                errors.push(`${criterionPath}.id is required.`);
+            }
+            else {
+                const normalizedId = normalizedToken(gate.id);
+                if (criterionIds.has(normalizedId))
+                    errors.push(`${criterionPath}.id duplicates normalized criterion id '${normalizedId}'.`);
+                criterionIds.add(normalizedId);
+            }
+            if (typeof gate.must !== "string" || !gate.must.trim())
+                errors.push(`${criterionPath}.must is required.`);
+            if (gate.evidence !== undefined && !Array.isArray(gate.evidence))
+                errors.push(`${criterionPath}.evidence must be an array. ${ACCEPTANCE_EVIDENCE_HELP}`);
+            if (Array.isArray(gate.evidence)) {
+                for (const [evidenceIndex, item] of gate.evidence.entries()) {
+                    if (typeof item !== "string" || !VALID_EVIDENCE.has(item)) {
+                        errors.push(unsupportedEvidenceKindMessage(`${criterionPath}.evidence[${evidenceIndex}]`, item));
+                    }
+                }
+            }
+            if (gate.severity !== undefined && gate.severity !== "required" && gate.severity !== "recommended") {
+                errors.push(`${criterionPath}.severity must be required or recommended.`);
+            }
+        }
+    }
+    if (Array.isArray(value.evidence)) {
+        for (const [index, item] of value.evidence.entries()) {
+            if (typeof item !== "string" || !VALID_EVIDENCE.has(item)) {
+                errors.push(unsupportedEvidenceKindMessage(`${pathLabel}.evidence[${index}]`, item));
+            }
+        }
+    }
+    else if (value.evidence !== undefined) {
+        errors.push(`${pathLabel}.evidence must be an array. ${ACCEPTANCE_EVIDENCE_HELP}`);
+    }
+    if (value.level === "verified" && (!Array.isArray(value.verify) || value.verify.length === 0)) {
+        errors.push(`${pathLabel}.verify must contain at least one runtime command when level is verified. Use level "checked" or provide a non-empty acceptance.verify array.`);
+    }
+    else if (value.verify !== undefined && !Array.isArray(value.verify)) {
+        errors.push(`${pathLabel}.verify must be an array.`);
+    }
+    if (Array.isArray(value.verify)) {
+        for (const [index, command] of value.verify.entries()) {
+            if (!command || typeof command !== "object" || Array.isArray(command)) {
+                errors.push(`${pathLabel}.verify[${index}] must be an object.`);
+                continue;
+            }
+            const cmd = command;
+            for (const key of Object.keys(cmd)) {
+                if (!ACCEPTANCE_VERIFY_KEYS.has(key))
+                    errors.push(`${pathLabel}.verify[${index}].${key} is not supported.`);
+            }
+            if (typeof cmd.id !== "string" || !cmd.id.trim())
+                errors.push(`${pathLabel}.verify[${index}].id is required.`);
+            if (typeof cmd.command !== "string" || !cmd.command.trim())
+                errors.push(`${pathLabel}.verify[${index}].command is required.`);
+            if (cmd.timeoutMs !== undefined && (typeof cmd.timeoutMs !== "number" || !Number.isInteger(cmd.timeoutMs) || cmd.timeoutMs < 1)) {
+                errors.push(`${pathLabel}.verify[${index}].timeoutMs must be an integer >= 1.`);
+            }
+            if (cmd.cwd !== undefined && typeof cmd.cwd !== "string")
+                errors.push(`${pathLabel}.verify[${index}].cwd must be a string.`);
+            if (cmd.env !== undefined) {
+                if (!cmd.env || typeof cmd.env !== "object" || Array.isArray(cmd.env)) {
+                    errors.push(`${pathLabel}.verify[${index}].env must be an object.`);
+                }
+                else {
+                    for (const [envKey, envValue] of Object.entries(cmd.env)) {
+                        if (typeof envValue !== "string")
+                            errors.push(`${pathLabel}.verify[${index}].env.${envKey} must be a string.`);
+                    }
+                }
+            }
+            if (cmd.allowFailure !== undefined && typeof cmd.allowFailure !== "boolean") {
+                errors.push(`${pathLabel}.verify[${index}].allowFailure must be a boolean.`);
+            }
+            if (cmd.output !== undefined && cmd.output !== "json")
+                errors.push(`${pathLabel}.verify[${index}].output must be "json" when present.`);
+            if (cmd.schema !== undefined) {
+                if (cmd.output !== "json")
+                    errors.push(`${pathLabel}.verify[${index}].schema requires output: "json".`);
+                if (!cmd.schema || typeof cmd.schema !== "object" || Array.isArray(cmd.schema))
+                    errors.push(`${pathLabel}.verify[${index}].schema must be a JSON Schema object.`);
+            }
+        }
+    }
+    if (value.review !== undefined && value.review !== false) {
+        if (!value.review || typeof value.review !== "object" || Array.isArray(value.review)) {
+            errors.push(`${pathLabel}.review must be false or an object.`);
+        }
+        else {
+            const review = value.review;
+            for (const key of Object.keys(review)) {
+                if (!ACCEPTANCE_REVIEW_KEYS.has(key))
+                    errors.push(`${pathLabel}.review.${key} is not supported.`);
+            }
+            if (review.agent !== undefined && typeof review.agent !== "string")
+                errors.push(`${pathLabel}.review.agent must be a string.`);
+            if (review.focus !== undefined && typeof review.focus !== "string")
+                errors.push(`${pathLabel}.review.focus must be a string.`);
+            if (review.required !== undefined && typeof review.required !== "boolean")
+                errors.push(`${pathLabel}.review.required must be a boolean.`);
+        }
+    }
+    if (value.stopRules !== undefined && !Array.isArray(value.stopRules))
+        errors.push(`${pathLabel}.stopRules must be an array.`);
+    if (Array.isArray(value.stopRules)) {
+        for (const [index, item] of value.stopRules.entries()) {
+            if (typeof item !== "string")
+                errors.push(`${pathLabel}.stopRules[${index}] must be a string.`);
+        }
+    }
+    return errors;
+}
+export function validateExecutionAcceptancePolicy(input) {
+    const errors = validateAcceptanceInput(input.acceptance, "acceptance");
+    for (const [index, task] of (input.tasks ?? []).entries()) {
+        errors.push(...validateAcceptanceInput(task.acceptance, `tasks[${index}].acceptance`));
+    }
+    for (const [stepIndex, step] of (input.chain ?? []).entries()) {
+        errors.push(...validateAcceptanceInput(step.acceptance, `chain[${stepIndex}].acceptance`));
+        if (Array.isArray(step.parallel)) {
+            for (const [taskIndex, task] of step.parallel.entries()) {
+                errors.push(...validateAcceptanceInput(task.acceptance, `chain[${stepIndex}].parallel[${taskIndex}].acceptance`));
+            }
+        }
+        else if (step.parallel) {
+            errors.push(...validateAcceptanceInput(step.parallel.acceptance, `chain[${stepIndex}].parallel.acceptance`));
+        }
+    }
+    return errors;
+}
+export function validateExecutionAcceptance(input) {
+    const errors = validateExecutionAcceptancePolicy(input);
+    errors.push(...validateAcceptanceReportMode(input.acceptance, input.outputSchema, "acceptance"));
+    for (const [index, task] of (input.tasks ?? []).entries()) {
+        errors.push(...validateAcceptanceReportMode(task.acceptance, task.outputSchema, `tasks[${index}].acceptance`));
+    }
+    for (const [stepIndex, step] of (input.chain ?? []).entries()) {
+        errors.push(...validateAcceptanceReportMode(step.acceptance, step.outputSchema, `chain[${stepIndex}].acceptance`));
+        if (Array.isArray(step.parallel)) {
+            for (const [taskIndex, task] of step.parallel.entries()) {
+                errors.push(...validateAcceptanceReportMode(task.acceptance, task.outputSchema, `chain[${stepIndex}].parallel[${taskIndex}].acceptance`));
+            }
+        }
+        else if (step.parallel) {
+            errors.push(...validateAcceptanceReportMode(step.parallel.acceptance, step.parallel.outputSchema, `chain[${stepIndex}].parallel.acceptance`));
+        }
+    }
+    return errors;
+}
+function validateAcceptanceReportMode(acceptance, outputSchema, pathLabel) {
+    const normalized = normalizeAcceptanceValue(acceptance, pathLabel);
+    if (normalized.error)
+        return [];
+    acceptance = normalized.value;
+    if (!acceptance || typeof acceptance !== "object" || Array.isArray(acceptance))
+        return [];
+    if (!("report" in acceptance))
+        return [];
+    return outputSchema === undefined || outputSchema === false ? [`${pathLabel}.report requires outputSchema.`] : [];
+}
+function normalizeCriteria(criteria, evidence) {
+    return (criteria ?? []).map((criterion, index) => {
+        if (typeof criterion === "string") {
+            return { id: `criterion-${index + 1}`, must: criterion, evidence, severity: "required" };
+        }
+        return {
+            id: criterion.id?.trim() || `criterion-${index + 1}`,
+            must: criterion.must ?? "",
+            evidence: criterion.evidence?.filter((item) => VALID_EVIDENCE.has(item)) ?? evidence,
+            severity: criterion.severity ?? "required",
+        };
+    }).filter((criterion) => criterion.must.trim());
+}
+export function resolveEffectiveAcceptance(input) {
+    const explicit = normalizeAcceptanceInput(input.explicit);
+    const explicitLevel = normalizeLevel(explicit.level);
+    if (isAgentContract(input.agentContract)) {
+        const level = explicitAcceptanceCanDisable(explicit) || explicitLevel === "auto"
+            ? "none"
+            : explicitLevel;
+        const evidence = unique(explicit.evidence ?? []);
+        const criteria = normalizeCriteria(explicit.criteria, evidence);
+        return {
+            level,
+            explicit: input.explicit !== undefined,
+            inferredReason: [],
+            criteria,
+            evidence,
+            preserveStagedIndex: explicit.preserveStagedIndex,
+            verify: explicit.verify ?? [],
+            review: explicit.review,
+            stopRules: explicit.stopRules ?? [],
+            reason: explicit.reason,
+        };
+    }
+    const inferred = inferLevel(input);
+    const inferredLevel = inferred.level === "none" && explicitAcceptanceRequestsPolicy(explicit) ? "attested" : inferred.level;
+    const level = explicitAcceptanceCanDisable(explicit)
+        ? "none"
+        : explicitLevel === "auto"
+            ? inferredLevel
+            : (LEVEL_RANK[explicitLevel] >= LEVEL_RANK[inferredLevel] ? explicitLevel : inferredLevel);
+    const evidence = unique([...(level === inferredLevel ? inferred.evidence : requiredEvidenceForLevel(level)), ...(explicit.evidence ?? [])]);
+    const criteria = normalizeCriteria((explicit.criteria?.length ? explicit.criteria : inferred.criteria), evidence);
+    const review = explicit.review !== undefined ? explicit.review : inferred.review;
+    return {
+        level,
+        explicit: input.explicit !== undefined,
+        inferredReason: inferred.reasons,
+        criteria: level === "none" ? [] : criteria,
+        evidence: level === "none" ? [] : evidence,
+        preserveStagedIndex: explicit.preserveStagedIndex,
+        verify: explicit.verify ?? [],
+        review,
+        stopRules: explicit.stopRules ?? [],
+        reason: explicit.reason,
+    };
+}
+function acceptanceRequiresChildReport(acceptance) {
+    return acceptance.criteria.length > 0 || acceptance.evidence.length > 0;
+}
+/** Label a declared review gate the same way in prompts and capability summaries. */
+export function formatReviewGateLabel(review) {
+    const status = review.required === false ? "optional" : "required";
+    return review.agent ? `${status} by ${review.agent}` : status;
+}
+export function formatAcceptancePrompt(acceptance, options = {}) {
+    if (acceptance.level === "none")
+        return "";
+    if (options.reportOptional && !acceptanceRequiresChildReport(acceptance))
+        return "";
+    const lines = [
+        "",
+        "## Acceptance Contract",
+        `Acceptance level: ${acceptance.level}`,
+        "Completion is not accepted from prose alone. End with a structured acceptance report.",
+        "",
+        "Criteria:",
+        ...(acceptance.criteria.length ? acceptance.criteria.map((criterion) => `- ${criterion.id}: ${criterion.must}`) : ["- Return the requested result."]),
+        "",
+        `Required evidence: ${acceptance.evidence.join(", ") || "none"}`,
+    ];
+    if (acceptance.preserveStagedIndex) {
+        lines.push("The host will verify that the staged index is unchanged from launch; report noStagedFiles truthfully even when the preserved index is non-empty.");
+    }
+    if (acceptance.verify.length > 0) {
+        lines.push("", "Runtime verification commands configured by parent:");
+        for (const command of acceptance.verify)
+            lines.push(`- ${command.id}: ${command.command}`);
+    }
+    if (acceptance.review) {
+        lines.push("", `Review gate: ${formatReviewGateLabel(acceptance.review)}.`);
+        if (acceptance.review.focus)
+            lines.push(`Review focus: ${acceptance.review.focus}`);
+    }
+    if (acceptance.stopRules.length > 0) {
+        lines.push("", "Stop rules:", ...acceptance.stopRules.map((rule) => `- ${rule}`));
+    }
+    lines.push("", options.structuredOutput
+        ? "Include an `acceptanceReport` object in your final `structured_output` tool call in this shape:"
+        : "Finish with a fenced JSON block tagged `acceptance-report` in this shape:", "Use empty arrays when no items apply; array fields contain strings unless object entries are shown.", "Empty-string entries (`[\"\"]`) are ignored; use `[]` when nothing applies.", "`criteriaSatisfied[].status` must be exactly one of: satisfied, not-satisfied, not-applicable.", "`commandsRun[].result` must be exactly one of: passed, failed, not-run.", "`manualNotes` and `notes` are optional strings; an empty string means no note and does not satisfy `manual-notes` evidence.", ...(options.structuredOutput ? [] : ["```acceptance-report"]), JSON.stringify({
+        criteriaSatisfied: acceptance.criteria
+            .filter((criterion) => criterion.severity !== "recommended")
+            .map((criterion) => ({ id: criterion.id, status: "satisfied", evidence: "specific proof" })),
+        changedFiles: ["src/file.ts"],
+        testsAddedOrUpdated: ["test/file.test.ts"],
+        commandsRun: [{ command: "command", result: "passed", summary: "short result" }],
+        validationOutput: ["validation output or concise summary"],
+        residualRisks: ["none"],
+        noStagedFiles: true,
+        diffSummary: "short description of the diff",
+        reviewFindings: ["blocker: file.ts:12 - issue found, or no blockers"],
+        manualNotes: "anything else the parent should know",
+    }, null, 2), ...(options.structuredOutput ? [] : ["```"]));
+    return lines.join("\n");
+}
+function extractBalancedJson(text, start) {
+    let depth = 0;
+    let inString = false;
+    let escaped = false;
+    for (let i = start; i < text.length; i++) {
+        const char = text[i];
+        if (inString) {
+            if (escaped)
+                escaped = false;
+            else if (char === "\\")
+                escaped = true;
+            else if (char === "\"")
+                inString = false;
+            continue;
+        }
+        if (char === "\"") {
+            inString = true;
+            continue;
+        }
+        if (char === "{")
+            depth++;
+        if (char === "}") {
+            depth--;
+            if (depth === 0)
+                return text.slice(start, i + 1);
+        }
+    }
+    return undefined;
+}
+const ACCEPTANCE_REPORT_WRAPPERS = new Set(["acceptance", "acceptance-report", "acceptance_report", "acceptanceReport"]);
+const ACCEPTANCE_REPORT_FIELDS = {
+    criteriaSatisfied: "criteriaSatisfied",
+    criteria_satisfied: "criteriaSatisfied",
+    changedFiles: "changedFiles",
+    changed_files: "changedFiles",
+    testsAddedOrUpdated: "testsAddedOrUpdated",
+    tests_added_or_updated: "testsAddedOrUpdated",
+    commandsRun: "commandsRun",
+    commands_run: "commandsRun",
+    validationOutput: "validationOutput",
+    validation_output: "validationOutput",
+    residualRisks: "residualRisks",
+    residual_risks: "residualRisks",
+    noStagedFiles: "noStagedFiles",
+    no_staged_files: "noStagedFiles",
+    diffSummary: "diffSummary",
+    diff_summary: "diffSummary",
+    reviewFindings: "reviewFindings",
+    review_findings: "reviewFindings",
+    manualNotes: "manualNotes",
+    manual_notes: "manualNotes",
+    notes: "notes",
+};
+const CRITERION_REPORT_FIELDS = new Set(["id", "status", "evidence"]);
+const COMMAND_REPORT_FIELDS = new Set(["command", "result", "summary"]);
+function normalizedToken(value) {
+    return value.trim().toLowerCase().replace(/[\s_]+/g, "-").replace(/-+/g, "-");
+}
+function normalizeCriterionStatus(value) {
+    if (typeof value !== "string")
+        return value;
+    const token = normalizedToken(value);
+    if (["satisfied", "met", "complete", "completed", "done", "pass", "passed", "success", "succeeded"].includes(token))
+        return "satisfied";
+    if (["not-satisfied", "not-met", "unmet", "incomplete", "fail", "failed"].includes(token))
+        return "not-satisfied";
+    if (["not-applicable", "n-a", "na", "skip", "skipped"].includes(token))
+        return "not-applicable";
+    return value;
+}
+function normalizeCommandResult(value) {
+    if (typeof value !== "string")
+        return value;
+    const token = normalizedToken(value);
+    if (["passed", "pass", "success", "successful", "succeeded", "ok"].includes(token))
+        return "passed";
+    if (["failed", "fail", "failure", "error"].includes(token))
+        return "failed";
+    if (["not-run", "not-executed", "skip", "skipped"].includes(token))
+        return "not-run";
+    return value;
+}
+function normalizeCriterionReport(value, pathLabel, errors) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const normalized = {};
+    for (const [key, fieldValue] of Object.entries(value)) {
+        if (!CRITERION_REPORT_FIELDS.has(key)) {
+            errors.push(`${pathLabel}.${key}: unsupported acceptance criterion field`);
+            continue;
+        }
+        normalized[key] = key === "id" && typeof fieldValue === "string"
+            ? normalizedToken(fieldValue)
+            : key === "status"
+                ? normalizeCriterionStatus(fieldValue)
+                : fieldValue;
+    }
+    return normalized;
+}
+function normalizeCommandReport(value, pathLabel, errors) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return value;
+    const normalized = {};
+    for (const [key, fieldValue] of Object.entries(value)) {
+        if (!COMMAND_REPORT_FIELDS.has(key)) {
+            errors.push(`${pathLabel}.${key}: unsupported acceptance command field`);
+            continue;
+        }
+        normalized[key] = key === "result" ? normalizeCommandResult(fieldValue) : fieldValue;
+    }
+    return normalized;
+}
+function normalizeAcceptanceReportValue(value, pathLabel = "") {
+    const errors = [];
+    let reportValue = value;
+    let reportPath = pathLabel;
+    if (reportValue && typeof reportValue === "object" && !Array.isArray(reportValue)) {
+        const record = reportValue;
+        const wrapperKeys = Object.keys(record).filter((key) => ACCEPTANCE_REPORT_WRAPPERS.has(key));
+        if (wrapperKeys.length > 0) {
+            const wrapperKey = wrapperKeys[0];
+            if (wrapperKeys.length > 1)
+                errors.push(`${pathLabel || "acceptance-report"}: multiple acceptance report wrappers are ambiguous`);
+            for (const key of Object.keys(record)) {
+                if (key !== wrapperKey)
+                    errors.push(`${pathFor(pathLabel, key)}: unsupported alongside acceptance report wrapper '${wrapperKey}'`);
+            }
+            reportValue = record[wrapperKey];
+            reportPath = pathFor(pathLabel, wrapperKey);
+        }
+    }
+    if (!reportValue || typeof reportValue !== "object" || Array.isArray(reportValue))
+        return { value: reportValue, pathLabel: reportPath, errors };
+    const normalized = {};
+    for (const [key, fieldValue] of Object.entries(reportValue)) {
+        const canonical = ACCEPTANCE_REPORT_FIELDS[key];
+        if (!canonical) {
+            errors.push(`${pathFor(reportPath, key)}: unsupported acceptance report field`);
+            continue;
+        }
+        if (Object.hasOwn(normalized, canonical)) {
+            errors.push(`${pathFor(reportPath, key)}: duplicates normalized field '${canonical}'`);
+            continue;
+        }
+        const fieldPath = pathFor(reportPath, canonical);
+        switch (canonical) {
+            case "criteriaSatisfied": {
+                const items = Array.isArray(fieldValue) ? fieldValue : fieldValue && typeof fieldValue === "object" ? [fieldValue] : fieldValue;
+                normalized[canonical] = Array.isArray(items)
+                    ? items.map((item, index) => normalizeCriterionReport(item, `${fieldPath}[${index}]`, errors))
+                    : items;
+                break;
+            }
+            case "commandsRun": {
+                const items = Array.isArray(fieldValue) ? fieldValue : fieldValue && typeof fieldValue === "object" ? [fieldValue] : fieldValue;
+                normalized[canonical] = Array.isArray(items)
+                    ? items.map((item, index) => normalizeCommandReport(item, `${fieldPath}[${index}]`, errors))
+                    : items;
+                break;
+            }
+            case "changedFiles":
+            case "testsAddedOrUpdated":
+            case "validationOutput":
+            case "residualRisks":
+            case "reviewFindings": {
+                // Tolerate empty-string entries ("[\"\"]"): models write them for "no items"
+                // and a single empty entry must not reject the whole report. Drop them at
+                // parse time; non-string entries are kept so validateStringArrayField still
+                // flags structural garbage.
+                const items = typeof fieldValue === "string" ? [fieldValue] : fieldValue;
+                normalized[canonical] = Array.isArray(items)
+                    ? items.filter((item) => typeof item !== "string" || item.trim().length > 0)
+                    : items;
+                break;
+            }
+            case "noStagedFiles": {
+                const token = typeof fieldValue === "string" ? fieldValue.trim().toLowerCase() : undefined;
+                normalized[canonical] = token === "true" ? true : token === "false" ? false : fieldValue;
+                break;
+            }
+            default:
+                normalized[canonical] = fieldValue;
+        }
+    }
+    return { value: normalized, pathLabel: reportPath, errors };
+}
+function hasGenericAcceptanceReportSignal(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const record = value;
+    return "criteriaSatisfied" in record && [
+        "changedFiles",
+        "testsAddedOrUpdated",
+        "commandsRun",
+        "validationOutput",
+        "residualRisks",
+        "noStagedFiles",
+        "diffSummary",
+        "reviewFindings",
+        "manualNotes",
+    ].some((key) => key in record);
+}
+function parseReportJson(body) {
+    const trimmed = body.trim();
+    try {
+        return JSON.parse(trimmed);
+    }
+    catch (error) {
+        const jsonStart = trimmed.indexOf("{");
+        if (jsonStart > 0) {
+            const json = extractBalancedJson(trimmed, jsonStart);
+            if (json)
+                return JSON.parse(json);
+        }
+        throw error;
+    }
+}
+function fencedBlocks(output, tag) {
+    return [...output.matchAll(new RegExp(`\`\`\`${tag}\\s*\\n([\\s\\S]*?)\`\`\``, "gi"))]
+        .map((match) => match[1]?.trim())
+        .filter((value) => Boolean(value));
+}
+function parseAcceptanceReportBody(body) {
+    return validateAcceptanceReport(parseReportJson(body));
+}
+function parseUnterminatedAcceptanceReportFence(output) {
+    const opener = /```acceptance[-_]report\b[^\n]*\n/gi.exec(output);
+    if (!opener)
+        return {};
+    const bodyStart = opener.index + opener[0].length;
+    if (output.indexOf("```", bodyStart) !== -1)
+        return {};
+    try {
+        const validation = validateAcceptanceReport(JSON.parse(output.slice(bodyStart).trim()));
+        return validation.report
+            ? { report: validation.report }
+            : { error: `Failed to parse acceptance-report: Invalid acceptance-report: ${validation.errors.join("; ")}`, malformed: true };
+    }
+    catch (error) {
+        return { error: `Failed to parse acceptance-report: ${error instanceof Error ? error.message : String(error)}`, malformed: true };
+    }
+}
+function parseGenericJsonAcceptanceReportBody(body) {
+    const parsed = parseReportJson(body);
+    const normalized = normalizeAcceptanceReportValue(parsed);
+    const hasCriteriaMarker = normalized.value !== null
+        && typeof normalized.value === "object"
+        && !Array.isArray(normalized.value)
+        && "criteriaSatisfied" in normalized.value;
+    if (!hasGenericAcceptanceReportSignal(normalized.value) && !(hasCriteriaMarker && normalized.errors.length > 0))
+        return {};
+    const validation = validateAcceptanceReport(parsed);
+    return validation.report
+        ? { report: validation.report }
+        : { error: `Invalid acceptance-report: ${validation.errors.join("; ")}`, malformed: true };
+}
+export const ACCEPTANCE_REPORT_NOT_FOUND = "Structured acceptance report not found.";
+export function parseAcceptanceReport(output) {
+    const explicitFencePresent = /```acceptance[-_]report\b/i.test(output);
+    const fenced = fencedBlocks(output, "acceptance[-_]report");
+    const parseErrors = [];
+    for (const body of fenced) {
+        try {
+            const validation = parseAcceptanceReportBody(body);
+            if (validation.report)
+                return { report: validation.report };
+            parseErrors.push(`Invalid acceptance-report: ${validation.errors.join("; ")}`);
+        }
+        catch (error) {
+            parseErrors.push(error instanceof Error ? error.message : String(error));
+        }
+    }
+    if (parseErrors.length > 0)
+        return { error: `Failed to parse acceptance-report: ${parseErrors.join("; ")}`, malformed: true };
+    if (explicitFencePresent) {
+        const recovered = parseUnterminatedAcceptanceReportFence(output);
+        if (recovered.report || recovered.error)
+            return recovered;
+        return { error: "Failed to parse acceptance-report: Empty or unterminated acceptance-report fence.", malformed: true };
+    }
+    for (const body of fencedBlocks(output, "(?:json|jsonc|json5)")) {
+        try {
+            const parsed = parseGenericJsonAcceptanceReportBody(body);
+            if (parsed.report)
+                return { report: parsed.report };
+            if (parsed.error)
+                return { error: `Failed to parse acceptance-report: ${parsed.error}`, malformed: parsed.malformed };
+        }
+        catch {
+            // Ignore unrelated malformed generic JSON. A recognizable report shape
+            // returns exact validation errors above instead of being mistaken for prose.
+        }
+    }
+    const markerIndex = output.search(/ACCEPTANCE_REPORT\s*:/i);
+    if (markerIndex !== -1) {
+        const jsonStart = output.indexOf("{", markerIndex);
+        if (jsonStart === -1) {
+            return { error: "Failed to parse acceptance-report: Expected a JSON object after ACCEPTANCE_REPORT:.", malformed: true };
+        }
+        const json = extractBalancedJson(output, jsonStart);
+        if (!json) {
+            return { error: "Failed to parse acceptance-report: Unterminated JSON object after ACCEPTANCE_REPORT:.", malformed: true };
+        }
+        try {
+            const parsed = JSON.parse(json);
+            const validation = validateAcceptanceReport(parsed);
+            if (validation.report)
+                return { report: validation.report };
+            return { error: `Failed to parse acceptance-report: Invalid acceptance-report: ${validation.errors.join("; ")}`, malformed: true };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            return { error: `Failed to parse acceptance-report: ${message}`, malformed: true };
+        }
+    }
+    return { error: ACCEPTANCE_REPORT_NOT_FOUND };
+}
+function parseAcceptanceReportSources(output, fileOutput) {
+    const fromText = () => parseAcceptanceReport(output);
+    const fromFile = () => {
+        if (!fileOutput)
+            return { error: ACCEPTANCE_REPORT_NOT_FOUND };
+        const parsed = parseAcceptanceReport(fileOutput.content);
+        return parsed.report || parsed.error === ACCEPTANCE_REPORT_NOT_FOUND
+            ? parsed
+            : {
+                ...parsed,
+                error: `${parsed.error} (in configured output ${fileOutput.path})`,
+                sourcePath: fileOutput.path,
+            };
+    };
+    const [primary, secondary] = fileOutput?.authoritative ? [fromFile, fromText] : [fromText, fromFile];
+    const first = primary();
+    // A malformed report in the primary source is a defect to surface, not a
+    // miss to paper over with the secondary source; only a genuinely absent
+    // report falls through.
+    if (first.report || first.error !== ACCEPTANCE_REPORT_NOT_FOUND)
+        return first;
+    return secondary();
+}
+export function stripAcceptanceReport(output) {
+    const trailingFencePattern = /\n?```(acceptance[-_]report|json|jsonc|json5)\s*\n([\s\S]*?)```\s*/gi;
+    let trailingFence;
+    for (const match of output.matchAll(trailingFencePattern)) {
+        const end = (match.index ?? 0) + match[0].length;
+        if (output.slice(end).trim().length === 0 && match[1] && match[2]) {
+            trailingFence = { index: match.index ?? 0, tag: match[1].toLowerCase(), body: match[2] };
+        }
+    }
+    if (trailingFence) {
+        if (trailingFence.tag === "acceptance-report" || trailingFence.tag === "acceptance_report")
+            return output.slice(0, trailingFence.index).trimEnd();
+        try {
+            if (parseGenericJsonAcceptanceReportBody(trailingFence.body).report)
+                return output.slice(0, trailingFence.index).trimEnd();
+        }
+        catch {
+            // Leave unrelated or malformed generic JSON fences visible.
+        }
+    }
+    return output
+        .replace(/\n?```acceptance[-_]report\s*\n[\s\S]*?```\s*$/i, "")
+        .replace(/\n?ACCEPTANCE_REPORT\s*:\s*\{[\s\S]*\}\s*$/i, "")
+        .trimEnd();
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((item) => typeof item === "string");
+}
+function pathFor(base, segment) {
+    return base ? `${base}.${segment}` : segment;
+}
+function describeValidationValue(value) {
+    if (value === undefined)
+        return "missing";
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return "array";
+    if (typeof value === "object")
+        return "object";
+    if (typeof value === "string") {
+        const short = value.length > 80 ? `${value.slice(0, 77)}...` : value;
+        return JSON.stringify(short);
+    }
+    return `${typeof value} ${String(value)}`;
+}
+function pushTypeError(errors, pathLabel, expected, value) {
+    errors.push(`${pathLabel}: expected ${expected}; got ${describeValidationValue(value)}`);
+}
+function validateStringArrayField(errors, value, pathLabel) {
+    if (!Array.isArray(value)) {
+        pushTypeError(errors, pathLabel, "string[]", value);
+        return;
+    }
+    for (const [index, item] of value.entries()) {
+        if (typeof item !== "string" || !item.trim())
+            pushTypeError(errors, `${pathLabel}[${index}]`, "non-empty string", item);
+    }
+}
+export function validateAcceptanceReport(value, pathLabel = "") {
+    const normalized = normalizeAcceptanceReportValue(value, pathLabel);
+    value = normalized.value;
+    pathLabel = normalized.pathLabel;
+    const errors = normalized.errors;
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        pushTypeError(errors, pathLabel || "acceptance-report", "object", value);
+        return { errors };
+    }
+    const report = value;
+    if (report.criteriaSatisfied !== undefined) {
+        if (!Array.isArray(report.criteriaSatisfied)) {
+            pushTypeError(errors, pathFor(pathLabel, "criteriaSatisfied"), "array", report.criteriaSatisfied);
+        }
+        else {
+            const criterionIds = new Set();
+            for (const [index, item] of report.criteriaSatisfied.entries()) {
+                const itemPath = `${pathFor(pathLabel, "criteriaSatisfied")}[${index}]`;
+                if (!item || typeof item !== "object" || Array.isArray(item)) {
+                    pushTypeError(errors, itemPath, "object", item);
+                    continue;
+                }
+                const criterion = item;
+                if (criterion.id !== undefined && typeof criterion.id !== "string") {
+                    pushTypeError(errors, `${itemPath}.id`, "string", criterion.id);
+                }
+                else if (typeof criterion.id === "string" && criterion.id) {
+                    if (criterionIds.has(criterion.id))
+                        errors.push(`${itemPath}.id: duplicate normalized criterion id '${criterion.id}'`);
+                    criterionIds.add(criterion.id);
+                }
+                if (criterion.status !== "satisfied" && criterion.status !== "not-satisfied" && criterion.status !== "not-applicable") {
+                    pushTypeError(errors, `${itemPath}.status`, "one of \"satisfied\", \"not-satisfied\", \"not-applicable\"", criterion.status);
+                }
+                if (typeof criterion.evidence !== "string" || !criterion.evidence.trim())
+                    pushTypeError(errors, `${itemPath}.evidence`, "non-empty string", criterion.evidence);
+            }
+        }
+    }
+    if (report.changedFiles !== undefined)
+        validateStringArrayField(errors, report.changedFiles, pathFor(pathLabel, "changedFiles"));
+    if (report.testsAddedOrUpdated !== undefined)
+        validateStringArrayField(errors, report.testsAddedOrUpdated, pathFor(pathLabel, "testsAddedOrUpdated"));
+    if (report.commandsRun !== undefined) {
+        if (!Array.isArray(report.commandsRun)) {
+            pushTypeError(errors, pathFor(pathLabel, "commandsRun"), "array", report.commandsRun);
+        }
+        else {
+            for (const [index, item] of report.commandsRun.entries()) {
+                const itemPath = `${pathFor(pathLabel, "commandsRun")}[${index}]`;
+                if (!item || typeof item !== "object" || Array.isArray(item)) {
+                    pushTypeError(errors, itemPath, "object", item);
+                    continue;
+                }
+                const command = item;
+                if (typeof command.command !== "string" || !command.command.trim())
+                    pushTypeError(errors, `${itemPath}.command`, "non-empty string", command.command);
+                if (command.result !== "passed" && command.result !== "failed" && command.result !== "not-run") {
+                    pushTypeError(errors, `${itemPath}.result`, "one of \"passed\", \"failed\", \"not-run\"", command.result);
+                }
+                if (typeof command.summary !== "string" || !command.summary.trim())
+                    pushTypeError(errors, `${itemPath}.summary`, "non-empty string", command.summary);
+            }
+        }
+    }
+    if (report.validationOutput !== undefined)
+        validateStringArrayField(errors, report.validationOutput, pathFor(pathLabel, "validationOutput"));
+    if (report.residualRisks !== undefined)
+        validateStringArrayField(errors, report.residualRisks, pathFor(pathLabel, "residualRisks"));
+    if (report.noStagedFiles !== undefined && typeof report.noStagedFiles !== "boolean")
+        pushTypeError(errors, pathFor(pathLabel, "noStagedFiles"), "boolean", report.noStagedFiles);
+    if (report.diffSummary !== undefined && (typeof report.diffSummary !== "string" || !report.diffSummary.trim()))
+        pushTypeError(errors, pathFor(pathLabel, "diffSummary"), "non-empty string", report.diffSummary);
+    if (report.reviewFindings !== undefined)
+        validateStringArrayField(errors, report.reviewFindings, pathFor(pathLabel, "reviewFindings"));
+    if (report.manualNotes !== undefined && typeof report.manualNotes !== "string")
+        pushTypeError(errors, pathFor(pathLabel, "manualNotes"), "string", report.manualNotes);
+    if (report.notes !== undefined && typeof report.notes !== "string")
+        pushTypeError(errors, pathFor(pathLabel, "notes"), "string", report.notes);
+    if (errors.length > 0)
+        return { errors };
+    const hasReportField = report.criteriaSatisfied !== undefined
+        || report.changedFiles !== undefined
+        || report.testsAddedOrUpdated !== undefined
+        || report.commandsRun !== undefined
+        || report.validationOutput !== undefined
+        || report.residualRisks !== undefined
+        || report.noStagedFiles !== undefined
+        || report.diffSummary !== undefined
+        || report.manualNotes !== undefined
+        || report.notes !== undefined
+        || report.reviewFindings !== undefined;
+    return hasReportField
+        ? { report, errors }
+        : { errors: [`${pathLabel || "acceptance-report"}: expected at least one acceptance report field`] };
+}
+function checkCriteriaSatisfied(criteria, report) {
+    const reports = new Map((report.criteriaSatisfied ?? []).filter((item) => item.id).map((item) => [normalizedToken(item.id), item]));
+    return criteria.filter((criterion) => criterion.severity !== "recommended").map((criterion) => {
+        const item = reports.get(normalizedToken(criterion.id));
+        if (!item)
+            return { id: `criterion:${criterion.id}`, status: "failed", message: `Required criterion '${criterion.id}' was not reported.` };
+        if (item.status !== "satisfied")
+            return { id: `criterion:${criterion.id}`, status: "failed", message: `Required criterion '${criterion.id}' was reported as ${item.status}.` };
+        return { id: `criterion:${criterion.id}`, status: "passed", message: `Required criterion '${criterion.id}' satisfied.` };
+    });
+}
+function reportEvidenceStatus(report, kind) {
+    switch (kind) {
+        case "changed-files":
+            if (!isStringArray(report.changedFiles))
+                return "failed";
+            return report.changedFiles.length === 0 ? "not-applicable" : "passed";
+        case "tests-added":
+            if (!isStringArray(report.testsAddedOrUpdated))
+                return "failed";
+            return report.testsAddedOrUpdated.length === 0 ? "not-applicable" : "passed";
+        case "commands-run": return Array.isArray(report.commandsRun) && report.commandsRun.length > 0 ? "passed" : "failed";
+        case "validation-output": return isStringArray(report.validationOutput) && report.validationOutput.length > 0 ? "passed" : "failed";
+        case "residual-risks": return isStringArray(report.residualRisks) ? "passed" : "failed";
+        case "no-staged-files": return report.noStagedFiles === true ? "passed" : "failed";
+        case "diff-summary": return typeof report.diffSummary === "string" && report.diffSummary.trim().length > 0 ? "passed" : "failed";
+        case "review-findings": return isStringArray(report.reviewFindings) ? "passed" : "failed";
+        case "manual-notes": return Boolean((report.manualNotes ?? report.notes)?.trim()) ? "passed" : "failed";
+    }
+}
+function checkNoStagedFiles(cwd) {
+    const result = spawnSync("git", ["status", "--short"], { cwd, encoding: "utf-8", windowsHide: true });
+    if (result.status !== 0) {
+        return { id: "no-staged-files", status: "not-applicable", message: "git status unavailable; no staged-files check skipped" };
+    }
+    const staged = result.stdout.split(/\r?\n/).filter((line) => line.length >= 2 && line[0] !== " " && line[0] !== "?");
+    return staged.length === 0
+        ? { id: "no-staged-files", status: "passed", message: "No staged files detected." }
+        : { id: "no-staged-files", status: "failed", message: `Staged files present: ${staged.join(", ")}` };
+}
+/** Capture the repository-wide index tree. Throws when Git cannot provide trustworthy evidence. */
+export function captureStagedIndexBaseline(cwd) {
+    const result = spawnSync("git", ["write-tree"], { cwd, encoding: "utf-8", windowsHide: true });
+    const oid = result.stdout.trim();
+    if (result.status !== 0 || !oid) {
+        const detail = result.stderr.trim();
+        throw new Error(`Unable to capture staged index baseline${detail ? `: ${detail}` : "."}`);
+    }
+    return oid;
+}
+function checkStagedIndexUnchanged(cwd, baseline) {
+    try {
+        const terminal = captureStagedIndexBaseline(cwd);
+        return terminal === baseline
+            ? { id: "staged-index-unchanged", status: "passed", message: "Staged index matches the launch baseline." }
+            : { id: "staged-index-unchanged", status: "failed", message: "Staged index changed after launch." };
+    }
+    catch (error) {
+        return { id: "staged-index-unchanged", status: "failed", message: error instanceof Error ? error.message : String(error) };
+    }
+}
+function runStructuralChecks(acceptance, report, cwd) {
+    const checks = [];
+    for (const kind of acceptance.evidence) {
+        if (kind === "no-staged-files" && acceptance.preserveStagedIndex)
+            continue;
+        if (kind === "no-staged-files" && report.noStagedFiles === undefined)
+            continue;
+        const status = reportEvidenceStatus(report, kind);
+        checks.push({
+            id: `evidence:${kind}`,
+            status,
+            message: status === "passed"
+                ? `${kind} evidence present.`
+                : status === "not-applicable"
+                    ? `${kind} evidence explicitly reported as not applicable.`
+                    : `${kind} evidence missing from child report.`,
+        });
+    }
+    if (!acceptance.preserveStagedIndex && acceptance.evidence.includes("no-staged-files"))
+        checks.push(checkNoStagedFiles(cwd));
+    return checks;
+}
+function trimOutput(value) {
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.length > 12_000 ? `${trimmed.slice(0, 12_000)}\n...[truncated]` : trimmed;
+}
+const SENSITIVE_ENV_KEY_PATTERN = /(?:^|_)(?:TOKEN|SECRET|PASSWORD|PASS|AUTH|CREDENTIAL|COOKIE|SESSION|PRIVATE|API_KEY|ACCESS_KEY)(?:_|$)/i;
+function effectiveVerifyEnv(env) {
+    const inherited = Object.fromEntries(Object.entries(process.env).flatMap(([key, value]) => {
+        return typeof value === "string" ? [[key, value]] : [];
+    }));
+    return { ...inherited, ...(env ?? {}) };
+}
+function verifyRedactionEnv(env) {
+    return Object.fromEntries(Object.entries(effectiveVerifyEnv(env)).filter(([key, value]) => {
+        return value.length >= 4 && SENSITIVE_ENV_KEY_PATTERN.test(key);
+    }));
+}
+function redactVerifyEnv(value, env) {
+    let redacted = value;
+    const secrets = [...new Set(Object.values(verifyRedactionEnv(env)).filter(Boolean))].sort((left, right) => right.length - left.length);
+    for (const secret of secrets)
+        redacted = redacted.replaceAll(secret, "[REDACTED]");
+    return redacted;
+}
+function uniqueStrings(items) {
+    return unique(items.map((item) => item?.trim()).filter((item) => Boolean(item)));
+}
+export function aggregateAcceptanceReport(input) {
+    const childReports = input.results.map((result) => result.acceptance?.childReport).filter((report) => Boolean(report));
+    const blockers = input.results.filter((result) => result.exitCode !== 0 || result.acceptance?.status === "rejected");
+    const successfulChildren = input.results.length > 0 && blockers.length === 0;
+    return {
+        criteriaSatisfied: [
+            { id: "criterion-1", status: successfulChildren ? "satisfied" : "not-satisfied", evidence: successfulChildren ? `All ${input.results.length} dynamic child run(s) completed without child or acceptance blockers.` : "Dynamic fanout produced no accepted child evidence." },
+            { id: "criterion-2", status: successfulChildren ? "satisfied" : "not-satisfied", evidence: successfulChildren ? "Collected child acceptance evidence for aggregate review." : "Dynamic fanout produced no aggregate review evidence." },
+            ...input.results.map((result, index) => ({
+                id: `child-${index + 1}`,
+                status: result.exitCode === 0 && result.acceptance?.status !== "rejected" ? "satisfied" : "not-satisfied",
+                evidence: `${result.agent}: acceptance ${result.acceptance?.status ?? "unreported"}${result.error ? ` (${result.error})` : ""}`,
+            })),
+        ],
+        changedFiles: uniqueStrings(childReports.flatMap((report) => report.changedFiles ?? [])),
+        testsAddedOrUpdated: uniqueStrings(childReports.flatMap((report) => report.testsAddedOrUpdated ?? [])),
+        commandsRun: childReports.flatMap((report) => report.commandsRun ?? []),
+        validationOutput: uniqueStrings(childReports.flatMap((report) => report.validationOutput ?? [])),
+        residualRisks: uniqueStrings([
+            ...childReports.flatMap((report) => report.residualRisks ?? []),
+            ...blockers.map((result) => `${result.agent}: ${result.error ?? "child or acceptance gate failed"}`),
+        ]),
+        noStagedFiles: childReports.length > 0 && childReports.every((report) => report.noStagedFiles === true),
+        reviewFindings: uniqueStrings(childReports.flatMap((report) => report.reviewFindings ?? [])),
+        manualNotes: input.notes ?? `Aggregated acceptance evidence from ${input.results.length} dynamic fanout child run(s).`,
+        notes: input.notes,
+    };
+}
+const DEFAULT_VERIFY_TIMEOUT_MS = 120_000;
+function hash(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function readVerifyWorkspaceState(cwd) {
+    const repo = spawnSync("git", ["rev-parse", "--show-toplevel"], { cwd, encoding: "utf-8", windowsHide: true });
+    if (repo.status !== 0 || !repo.stdout.trim())
+        return undefined;
+    const repoRoot = fs.realpathSync(repo.stdout.trim());
+    const head = spawnSync("git", ["rev-parse", "HEAD"], { cwd: repoRoot, encoding: "utf-8", windowsHide: true });
+    const diff = spawnSync("git", ["diff", "--binary", "--full-index", "HEAD", "--"], { cwd: repoRoot, encoding: "utf-8", maxBuffer: 50 * 1024 * 1024, windowsHide: true });
+    if (head.status !== 0 || diff.status !== 0 || !head.stdout.trim())
+        return undefined;
+    return {
+        kind: "git-tracked",
+        repoRoot,
+        cwdRelative: path.relative(repoRoot, fs.realpathSync(cwd)) || ".",
+        head: head.stdout.trim(),
+        diffHash: hash(diff.stdout),
+    };
+}
+function isCachedVerifyResult(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const result = value;
+    return typeof result.id === "string"
+        && typeof result.command === "string"
+        && (typeof result.exitCode === "number" || result.exitCode === null)
+        && (result.status === "passed" || result.status === "failed" || result.status === "timed-out" || result.status === "allowed-failure")
+        && typeof result.durationMs === "number";
+}
+const TYPED_VERIFY_OUTPUT_MAX_BYTES = 12_000;
+/**
+ * A passing `output: "json"` command must print one JSON document on stdout.
+ * The parsed value becomes the run's structured output; anything else turns
+ * the passing run into a failed one so acceptance rejects rather than
+ * silently dropping the verdict. Stdout is already bounded by trimOutput, so a
+ * truncated document is detected by its marker instead of a parse guess.
+ */
+async function applyTypedVerifyOutput(command, run) {
+    if (run.status !== "passed")
+        return;
+    const stdout = run.stdout ?? "";
+    const fail = (message) => {
+        run.status = "failed";
+        run.structuredOutputError = message;
+    };
+    if (!stdout.trim())
+        return fail("output: \"json\" command printed nothing on stdout.");
+    if (stdout.endsWith("...[truncated]"))
+        return fail(`output: "json" stdout exceeded ${TYPED_VERIFY_OUTPUT_MAX_BYTES} characters and was truncated.`);
+    let value;
+    try {
+        value = JSON.parse(stdout);
+    }
+    catch (error) {
+        return fail(`output: "json" stdout is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+    }
+    if (command.schema) {
+        const validation = await validateStructuredOutputValue(command.schema, value);
+        if (validation.status === "invalid")
+            return fail(`output: "json" stdout does not match gate.schema: ${validation.message}`);
+    }
+    run.structuredOutput = value;
+}
+/** The first typed verify result on a ledger, if any command produced one. */
+export function typedVerifyOutput(ledger) {
+    const run = ledger?.verifyRuns?.find((entry) => entry.structuredOutput !== undefined);
+    return run ? { value: run.structuredOutput } : undefined;
+}
+async function runMemoizedVerifyCommand(command, defaultCwd, options = {}) {
+    const cwd = command.cwd ? path.resolve(defaultCwd, command.cwd) : defaultCwd;
+    let workspaceState;
+    try {
+        workspaceState = readVerifyWorkspaceState(cwd);
+    }
+    catch {
+        workspaceState = undefined;
+    }
+    // Typed gates read inputs (a report file, a log) that can change without
+    // the tracked tree changing, so their verdicts are never reused.
+    if (!workspaceState || !options.artifactsDir || !options.runId || command.output === "json") {
+        return runVerifyCommand(command, defaultCwd, options);
+    }
+    const envKeys = Object.keys(command.env ?? {}).sort();
+    const envHash = hash(JSON.stringify(Object.fromEntries(Object.entries(effectiveVerifyEnv(command.env)).sort(([left], [right]) => left.localeCompare(right)))));
+    const timeoutMs = command.timeoutMs ?? DEFAULT_VERIFY_TIMEOUT_MS;
+    const cacheKey = hash(JSON.stringify({
+        version: 1,
+        command: command.command,
+        cwdRelative: workspaceState.cwdRelative,
+        envKeys,
+        envHash,
+        timeoutMs,
+        allowFailure: command.allowFailure === true,
+        head: workspaceState.head,
+        diffHash: workspaceState.diffHash,
+    }));
+    const artifactPath = path.join(options.artifactsDir, "acceptance", "verify", options.runId, `${cacheKey}.json`);
+    try {
+        const cached = JSON.parse(fs.readFileSync(artifactPath, "utf-8"));
+        if (cached.cacheKey === cacheKey && isCachedVerifyResult(cached.result)) {
+            return { ...cached.result, id: command.id, command: command.command, cwd, artifactPath, cacheKey, memoized: true, envKeys, envHash, workspaceState };
+        }
+    }
+    catch {
+        // A cache miss or unreadable artifact must not prevent host verification.
+    }
+    const result = await runVerifyCommand(command, defaultCwd, options);
+    const evidenced = { ...result, artifactPath, cacheKey, memoized: false, envKeys, envHash, workspaceState };
+    try {
+        fs.mkdirSync(path.dirname(artifactPath), { recursive: true });
+        fs.writeFileSync(artifactPath, JSON.stringify({
+            version: 1,
+            cacheKey,
+            command: command.command,
+            cwdRelative: workspaceState.cwdRelative,
+            envKeys,
+            envHash,
+            timeoutMs,
+            allowFailure: command.allowFailure === true,
+            workspaceState,
+            result: evidenced,
+        }, null, 2), "utf-8");
+    }
+    catch (error) {
+        evidenced.artifactError = error instanceof Error ? error.message : String(error);
+        delete evidenced.artifactPath;
+    }
+    return evidenced;
+}
+/**
+ * On Windows with `shell: true`, cmd.exe parses the command line itself and an
+ * unquoted executable path containing spaces (e.g. `C:\Program Files\...\tool.exe`)
+ * is split at the first space, so cmd tries to run `C:\Program` and fails.
+ *
+ * The command line is ambiguous, so only an unquoted absolute drive path with
+ * a space in a directory component is safe to identify as an executable. That
+ * path is quoted; everything after it is preserved as arguments.
+ *
+ * Commands that already start with a quote, single-token commands, and commands
+ * whose first token already ends in an executable extension are returned
+ * unchanged. Non-Windows platforms pass the command through untouched.
+ */
+export function quoteExecutableForShell(command, platform = process.platform) {
+    if (platform !== "win32")
+        return command;
+    const trimmed = command.trimStart();
+    if (trimmed.startsWith("\""))
+        return command;
+    const firstToken = trimmed.match(/^\S+/)?.[0];
+    if (/\.(?:exe|bat|cmd|com|ps1)$/i.test(firstToken ?? ""))
+        return command;
+    const match = trimmed.match(/^([A-Za-z]:\\[^"<>|&*?\r\n]*?\s[^"<>|&*?\r\n]*?\\[^"<>|&*?\r\n]*?\.(?:exe|bat|cmd|com|ps1))(?=\s|$)/i);
+    const executable = match?.[1];
+    if (executable && /\s/.test(executable) && !/[A-Za-z]:\\/.test(executable.slice(3))) {
+        const rest = trimmed.slice(executable.length);
+        const leading = command.slice(0, command.length - trimmed.length);
+        return `${leading}"${executable}"${rest}`;
+    }
+    const extensionlessSpacedFilenameMatch = trimmed.match(/^([A-Za-z]:\\[^"<>|&*?\r\n]*?\s[^"<>|&*?\r\n]*?)(?=\s+--|$)/i);
+    const extensionlessSpacedFilename = extensionlessSpacedFilenameMatch?.[1];
+    if (extensionlessSpacedFilename && /\s/.test(extensionlessSpacedFilename.slice(0, extensionlessSpacedFilename.lastIndexOf("\\"))) && !/[A-Za-z]:\\/.test(extensionlessSpacedFilename.slice(3))) {
+        const rest = trimmed.slice(extensionlessSpacedFilename.length);
+        const leading = command.slice(0, command.length - trimmed.length);
+        return `${leading}"${extensionlessSpacedFilename}"${rest}`;
+    }
+    const extensionlessMatch = trimmed.match(/^([A-Za-z]:\\[^"<>|&*?\r\n]*?\s[^"<>|&*?\r\n]*?\\[^"<>|&*?\s\r\n]+)(?=\s|$)/i);
+    const extensionlessExecutable = extensionlessMatch?.[1];
+    if (extensionlessExecutable && /\s/.test(extensionlessExecutable) && !/[A-Za-z]:\\/.test(extensionlessExecutable.slice(3)) && !/\s/.test(extensionlessExecutable.slice(extensionlessExecutable.lastIndexOf("\\") + 1))) {
+        const rest = trimmed.slice(extensionlessExecutable.length);
+        const leading = command.slice(0, command.length - trimmed.length);
+        return `${leading}"${extensionlessExecutable}"${rest}`;
+    }
+    return command;
+}
+function runVerifyCommand(command, defaultCwd, options = {}) {
+    return new Promise((resolve) => {
+        const startedAt = Date.now();
+        const cwd = command.cwd ? path.resolve(defaultCwd, command.cwd) : defaultCwd;
+        let stdout = "";
+        let stderr = "";
+        let timedOut = false;
+        let settled = false;
+        let hardKill;
+        const child = spawn(quoteExecutableForShell(command.command), {
+            cwd,
+            env: effectiveVerifyEnv(command.env),
+            shell: true,
+            stdio: ["ignore", "pipe", "pipe"],
+            windowsHide: true,
+        });
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timeout);
+            if (hardKill)
+                clearTimeout(hardKill);
+            options.signal?.removeEventListener("abort", abortVerification);
+            resolve({
+                id: command.id,
+                command: command.command,
+                cwd,
+                durationMs: Date.now() - startedAt,
+                ...result,
+            });
+        };
+        const abortVerification = () => {
+            if (settled || timedOut)
+                return;
+            timedOut = true;
+            child.kill("SIGTERM");
+            hardKill = setTimeout(() => {
+                child.kill("SIGKILL");
+                finish({
+                    exitCode: null,
+                    status: "timed-out",
+                    stdout: trimOutput(redactVerifyEnv(stdout, command.env)),
+                    stderr: trimOutput(redactVerifyEnv(stderr || options.abortMessage || "Acceptance verification timed out.", command.env)),
+                });
+            }, 1000);
+            hardKill.unref?.();
+        };
+        const timeout = setTimeout(abortVerification, command.timeoutMs ?? DEFAULT_VERIFY_TIMEOUT_MS);
+        timeout.unref?.();
+        if (options.signal?.aborted)
+            abortVerification();
+        else
+            options.signal?.addEventListener("abort", abortVerification, { once: true });
+        child.stdout.on("data", (chunk) => {
+            stdout += chunk.toString();
+        });
+        child.stderr.on("data", (chunk) => {
+            stderr += chunk.toString();
+        });
+        child.on("close", (exitCode) => {
+            const passed = exitCode === 0 && !timedOut;
+            finish({
+                exitCode,
+                status: timedOut ? "timed-out" : passed ? "passed" : command.allowFailure ? "allowed-failure" : "failed",
+                stdout: trimOutput(redactVerifyEnv(stdout, command.env)),
+                stderr: trimOutput(redactVerifyEnv(stderr || (timedOut ? options.abortMessage ?? "" : ""), command.env)),
+            });
+        });
+        child.on("error", (error) => {
+            finish({
+                exitCode: timedOut ? null : 1,
+                status: timedOut ? "timed-out" : command.allowFailure ? "allowed-failure" : "failed",
+                stderr: timedOut
+                    ? trimOutput(redactVerifyEnv(stderr || options.abortMessage || "Acceptance verification timed out.", command.env))
+                    : redactVerifyEnv(error instanceof Error ? error.message : String(error), command.env),
+            });
+        });
+    });
+}
+export async function evaluateAcceptance(input) {
+    const acceptance = input.acceptance;
+    const initialStatus = acceptance.level === "none" ? "not-required" : "claimed";
+    const ledger = {
+        status: initialStatus,
+        evidenceStatus: initialStatus,
+        explicit: acceptance.explicit,
+        effectiveAcceptance: acceptance,
+        inferredReason: acceptance.inferredReason,
+        criteria: acceptance.criteria,
+        runtimeChecks: [],
+        verifyRuns: [],
+    };
+    if (acceptance.level === "none")
+        return ledger;
+    if (input.watchdog) {
+        const unresolved = unresolvedChildWatchdogBlockers(input.watchdog);
+        ledger.runtimeChecks.push(unresolved.length
+            ? { id: "watchdog-blocker", status: "failed", message: "Unresolved watchdog blocker (details are available in child watchdog status)." }
+            : { id: "watchdog-blocker", status: "passed", message: "No unresolved watchdog blockers." });
+    }
+    const parsed = input.reportError
+        ? { error: input.reportError }
+        : input.report !== undefined
+            ? (() => {
+                const validation = validateAcceptanceReport(input.report);
+                return validation.report
+                    ? { report: validation.report }
+                    : { error: `Failed to parse acceptance-report: Invalid acceptance-report: ${validation.errors.join("; ")}`, malformed: true };
+            })()
+            : parseAcceptanceReportSources(input.output, input.fileOutput);
+    const durableFileOutput = input.fileOutput?.authoritative && input.fileOutput.durable ? input.fileOutput : undefined;
+    if (parsed.malformed && parsed.sourcePath && durableFileOutput) {
+        ledger.recovery = {
+            status: "available-for-review",
+            reason: "acceptance-metadata-rejected",
+            reportPath: parsed.sourcePath,
+            reportHash: hash(durableFileOutput.content),
+        };
+    }
+    const needsReport = acceptanceRequiresChildReport(acceptance);
+    if (parsed.report) {
+        ledger.childReport = parsed.report;
+        ledger.status = "attested";
+        ledger.evidenceStatus = "attested";
+    }
+    else if (!input.reportOptional || needsReport || parsed.error !== ACCEPTANCE_REPORT_NOT_FOUND) {
+        ledger.childReportParseError = parsed.error;
+        ledger.runtimeChecks.push({ id: "attestation", status: "failed", message: parsed.error ?? "Structured acceptance report missing." });
+        if (ledger.recovery) {
+            ledger.status = "rejected";
+            ledger.evidenceStatus = "rejected";
+        }
+        if (!input.reportOptional) {
+            ledger.status = "rejected";
+            ledger.evidenceStatus = "rejected";
+            return ledger;
+        }
+    }
+    else {
+        ledger.childReportParseError = parsed.error;
+    }
+    if (parsed.report && LEVEL_RANK[acceptance.level] >= LEVEL_RANK.checked) {
+        ledger.runtimeChecks = [
+            ...ledger.runtimeChecks,
+            ...checkCriteriaSatisfied(acceptance.criteria, parsed.report),
+            ...runStructuralChecks(acceptance, parsed.report, input.cwd),
+        ];
+        if (!ledger.runtimeChecks.some((check) => check.status === "failed")) {
+            ledger.status = "checked";
+            ledger.evidenceStatus = "checked";
+        }
+    }
+    if (LEVEL_RANK[acceptance.level] >= LEVEL_RANK.verified && (acceptance.level === "verified" || acceptance.verify.length > 0)) {
+        if (acceptance.level === "verified" && acceptance.verify.length === 0) {
+            ledger.runtimeChecks.push({ id: "verification-config", status: "failed", message: "verified acceptance requires runtime verify commands." });
+            ledger.status = "rejected";
+            ledger.evidenceStatus = "rejected";
+        }
+        else {
+            ledger.verifyRuns = [];
+            for (const command of acceptance.verify) {
+                const run = await runMemoizedVerifyCommand(command, input.cwd, {
+                    signal: input.signal,
+                    abortMessage: input.abortMessage,
+                    artifactsDir: input.artifactsDir,
+                    runId: input.runId,
+                });
+                if (command.output === "json")
+                    await applyTypedVerifyOutput(command, run);
+                ledger.verifyRuns.push(run);
+                if (input.signal?.aborted)
+                    break;
+            }
+            if (ledger.verifyRuns.some((run) => run.status === "failed" || run.status === "timed-out")) {
+                ledger.status = "rejected";
+                ledger.evidenceStatus = "rejected";
+            }
+            else if (!ledger.runtimeChecks.some((check) => check.status === "failed")) {
+                ledger.status = "verified";
+                ledger.evidenceStatus = "verified";
+            }
+        }
+    }
+    if (acceptance.preserveStagedIndex) {
+        ledger.runtimeChecks.push(input.stagedIndexBaseline
+            ? checkStagedIndexUnchanged(input.cwd, input.stagedIndexBaseline)
+            : { id: "staged-index-unchanged", status: "failed", message: "Staged index launch baseline is unavailable." });
+    }
+    if (ledger.status === "rejected" || ledger.runtimeChecks.some((check) => check.status === "failed")) {
+        ledger.status = "rejected";
+        ledger.evidenceStatus = "rejected";
+        return ledger;
+    }
+    if (ledger.status === "claimed") {
+        ledger.status = acceptance.level === "verified" ? "verified" : acceptance.level;
+        ledger.evidenceStatus = ledger.status;
+    }
+    if (acceptance.review) {
+        if (input.reviewResult?.status === "reviewed") {
+            ledger.reviewResult = input.reviewResult;
+            ledger.status = "reviewed";
+        }
+        else if (input.reviewResult?.status === "blockers") {
+            ledger.reviewResult = input.reviewResult;
+            ledger.status = "rejected";
+        }
+        else if (acceptance.review.required !== false) {
+            ledger.reviewResult = input.reviewResult ?? {
+                status: "review-required",
+                findings: [{
+                        severity: "non-blocking",
+                        issue: "Independent review has not been supplied.",
+                        rationale: "The run cannot be marked reviewed from child evidence alone.",
+                    }],
+            };
+            ledger.status = "review-required";
+        }
+    }
+    return ledger;
+}
+export function buildSkippedAcceptanceLedger(acceptance, input) {
+    const status = acceptance.level === "none" ? "not-required" : "rejected";
+    return {
+        status,
+        evidenceStatus: status,
+        explicit: acceptance.explicit,
+        effectiveAcceptance: acceptance,
+        inferredReason: acceptance.inferredReason,
+        criteria: acceptance.criteria,
+        runtimeChecks: acceptance.level === "none"
+            ? []
+            : [{ id: input.id, status: "failed", message: input.message }],
+        verifyRuns: [],
+    };
+}
+export function acceptanceFailureMessage(ledger) {
+    if (ledger.status !== "rejected")
+        return undefined;
+    const failedCheck = ledger.runtimeChecks.find((check) => check.status === "failed");
+    if (failedCheck)
+        return `Acceptance rejected: ${failedCheck.message}`;
+    const failedVerify = ledger.verifyRuns.find((run) => run.status === "failed" || run.status === "timed-out");
+    if (failedVerify?.structuredOutputError)
+        return `Acceptance verification '${failedVerify.id}' failed: ${failedVerify.structuredOutputError}`;
+    if (failedVerify)
+        return `Acceptance verification '${failedVerify.id}' ${failedVerify.status}.`;
+    if (ledger.reviewResult?.status === "blockers")
+        return "Acceptance review found blockers.";
+    return "Acceptance rejected.";
+}
+//# sourceMappingURL=acceptance.js.map