tensor-cli 0.1.3-beta-lite → 0.1.5-beta-lite

package/dist/index.js

@@ -69212,7 +69212,7 @@ var textareaInputRef = {
 // src/tools/harness-orchestrator.ts
 import { existsSync } from "fs";
 import { mkdir } from "fs/promises";
-import { dirname } from "path";
+import { dirname as dirname2 } from "path";
 
 // src/constants/google-models-context-window.ts
 var DEFAULT_GOOGLE_CONTEXT_WINDOW = 32760;
@@ -329959,487 +329959,7 @@ var askJev = async (body) => {
 var askJev_default = askJev;
 
 // src/tools/harness-core.ts
-var MAX_JSON_RETRIES = 3;
-var MAX_WRITES_PER_FILE = 10;
-var MAX_VERIFY_CHARS = 4000;
-var CONTEXT_WINDOW_SIZE = 24;
-var DECISION_MAX_TOKENS = 2500;
-var CONTENT_MAX_TOKENS = 1e4;
-var SHELL_TIMEOUT_MS = 60000;
-var MODEL_PROVIDERS = ["GOOGLE", "CENCORI", "VENICE"];
-var MUTATING_TOOLS = new Set([
-  "write",
-  "edit",
-  "append"
-]);
-var VALID_TOOLS = new Set([
-  "read",
-  "write",
-  "edit",
-  "append",
-  "shell"
-]);
-function errorMessage(e2) {
-  if (e2 instanceof Error)
-    return e2.message;
-  if (typeof e2 === "string")
-    return e2;
-  return "unknown error";
-}
-function isRecord2(v) {
-  return typeof v === "object" && v !== null;
-}
-function summarizeZodError(e2) {
-  if (!isRecord2(e2))
-    return "validation error";
-  const err = e2;
-  if (Array.isArray(err.issues)) {
-    return err.issues.map((i2) => `${(i2.path ?? []).join(".") || "<root>"}: ${i2.message}`).join("; ");
-  }
-  return err.message ?? "validation error";
-}
-function extractFirstJsonObject(text) {
-  const start = text.indexOf("{");
-  if (start === -1)
-    return null;
-  let depth = 0;
-  let inString = false;
-  let escaped = false;
-  for (let i2 = start;i2 < text.length; i2++) {
-    const ch = text[i2];
-    if (escaped) {
-      escaped = false;
-      continue;
-    }
-    if (ch === "\\") {
-      escaped = true;
-      continue;
-    }
-    if (ch === '"') {
-      inString = !inString;
-      continue;
-    }
-    if (inString)
-      continue;
-    if (ch === "{") {
-      depth++;
-    } else if (ch === "}") {
-      depth--;
-      if (depth === 0)
-        return text.slice(start, i2 + 1);
-    }
-  }
-  return null;
-}
-function salvagePartialDecision(text) {
-  const grab = (key) => {
-    const re = new RegExp(`"${key}"\\s*:\\s*"((?:\\\\.|[^"\\\\])*)"`);
-    const m = re.exec(text);
-    const captured = m?.[1];
-    if (captured === undefined)
-      return;
-    return captured.replace(/\\"/g, '"').replace(/\\n/g, `
-`).replace(/\\\\/g, "\\");
-  };
-  const tool = grab("tool");
-  const targetFile = grab("targetFile") ?? grab("file") ?? grab("target_file");
-  const cmd = grab("cmd");
-  if (!tool && !targetFile && !cmd)
-    return null;
-  return {
-    tool,
-    targetFile,
-    target: grab("target"),
-    replacement: grab("replacement"),
-    cmd,
-    reasoning: grab("reasoning")
-  };
-}
-function truncateForContext(s2) {
-  if (s2.length <= MAX_VERIFY_CHARS)
-    return s2;
-  const slice = s2.slice(0, MAX_VERIFY_CHARS);
-  const lastNewline = slice.lastIndexOf(`
-`);
-  const cut = lastNewline > MAX_VERIFY_CHARS * 0.5 ? lastNewline : MAX_VERIFY_CHARS;
-  return `${s2.slice(0, cut)}
-...[truncated, ${s2.length - cut} more characters]`;
-}
-function tryUnwrapDecisionJson(text) {
-  const trimmed = text.trim();
-  if (!trimmed.startsWith("{"))
-    return { unwrapped: null, wasWrapper: false };
-  try {
-    const parsed = JSON.parse(trimmed);
-    if (!isRecord2(parsed))
-      return { unwrapped: null, wasWrapper: false };
-    const looksLikeDecision = "tool" in parsed || "targetFile" in parsed;
-    const content = parsed.content;
-    if (looksLikeDecision && typeof content === "string") {
-      return { unwrapped: content, wasWrapper: true };
-    }
-  } catch {}
-  return { unwrapped: null, wasWrapper: false };
-}
-var _CONVERSATIONAL_WORDS = new Set([
-  "hi",
-  "hey",
-  "hello",
-  "yo",
-  "sup",
-  "howdy",
-  "bye",
-  "goodbye",
-  "later",
-  "cya",
-  "thanks",
-  "thank",
-  "thx",
-  "ty",
-  "appreciate",
-  "appreciated",
-  "ok",
-  "okay",
-  "k",
-  "cool",
-  "nice",
-  "great",
-  "perfect",
-  "awesome",
-  "sweet",
-  "alright",
-  "noted",
-  "yes",
-  "yeah",
-  "yep",
-  "yup",
-  "sure",
-  "no",
-  "nope",
-  "nah",
-  "maybe",
-  "lol",
-  "lmao",
-  "haha",
-  "hehe",
-  "please",
-  "pls",
-  "sorry",
-  "np",
-  "worries"
-]);
-async function isConversational(message) {
-  const trimmed = message.trim();
-  try {
-    const res = await askJev_default({
-      state: trimmed,
-      model: "jev-latest",
-      questions: {
-        is_conversational: {
-          type: "noul",
-          instructions: "The user is greeting, chatting, or making small talk, rather than asking an informational question or requesting a task be executed."
-        }
-      }
-    });
-    return (res?.answers?.is_conversational?.noul ?? 0) > 0.5;
-  } catch {
-    return false;
-  }
-}
-
-// src/tools/harness-jev.ts
-function truncate(text, maxChars) {
-  if (!text)
-    return "";
-  return text.length <= maxChars ? text : `${text.slice(0, maxChars)}
-...[truncated]`;
-}
-var MALFORMED_CRITERIA = {
-  xml_tool_call: "Uses an XML/angle-bracket function-call style like <tool_call><function=...><parameter=...> instead of a raw JSON object.",
-  xml_tool_use: 'Uses an XML "<tool_use><tool_name>...</tool_name><file_path>...</file_path></tool_use>" style instead of a raw JSON object.',
-  generic_xml_tag: "Uses some other XML/HTML-like angle-bracket markup instead of a raw JSON object, not matching the tool_call or tool_use patterns.",
-  refusal: "Claims it does not have access to file or shell tools, or otherwise declines to make a tool decision.",
-  empty_or_no_json: "Contains no JSON object at all, or is empty/blank/pure prose with nothing resembling the required schema.",
-  other: "Malformed for some other reason not covered above (e.g. JSON-like but severely corrupted)."
-};
-async function classifyMalformedOutput(rawContent) {
-  try {
-    const res = await askJev_default({
-      state: truncate(rawContent, 2000),
-      model: "jev-latest",
-      questions: {
-        malformed_reason: {
-          type: "choice",
-          instructions: "The response below was supposed to be exactly one raw JSON object matching a fixed schema, and it failed to parse as such. Why did it fail?",
-          criteria: MALFORMED_CRITERIA
-        }
-      }
-    });
-    const reason = res.answers.malformed_reason?.choice ?? "other";
-    return { reason, hint: MALFORMED_CRITERIA[reason] };
-  } catch {
-    return { reason: "other", hint: MALFORMED_CRITERIA.other };
-  }
-}
-var SHELL_RISK_CRITERIA = {
-  auto: "Read-only or locally-reversible: no network access, no effect outside the local git object store or the workspace files already being worked on (e.g. ls, cat, find, grep, git status/log/diff/branch, running existing test/lint/build scripts, git init, creating/switching a local branch, a local-only git commit).",
-  confirm: "Side-effecting and needs human sign-off before running: installing a dependency, merging a branch back into the base branch, or any command with effects reaching outside the local workspace.",
-  blocked: "Destructive, irreversible, or dangerous beyond the current task's scope \u2014 e.g. force-pushing, deleting broad swaths of the filesystem, modifying system-level configuration, or anything risking irreversible data loss or affecting systems outside this workspace."
-};
-async function classifyShellRisk(cmd) {
-  try {
-    const res = await askJev_default({
-      state: cmd,
-      model: "jev-latest",
-      questions: {
-        risk_tier: {
-          type: "choice",
-          instructions: "Classify the risk tier of running this exact shell command in an automated coding agent session.",
-          criteria: SHELL_RISK_CRITERIA
-        }
-      }
-    });
-    const riskTier = res.answers.risk_tier;
-    const tier = riskTier?.choice ?? "confirm";
-    return { tier, confidence: riskTier?.confidence ?? 0 };
-  } catch {
-    return { tier: "confirm", confidence: 0 };
-  }
-}
-
-// src/tools/harness-jev-next-step-prompt.ts
-var DEFAULT_JEV_MODEL = "jev-latest";
-function clip(s2, max) {
-  if (!s2)
-    return "";
-  return s2.length <= max ? s2 : `${s2.slice(0, max)}
-\u2026[truncated]`;
-}
-async function classifyNextStep(input2) {
-  const {
-    taskDescription,
-    repoMap,
-    repoContext = "",
-    progressSummary,
-    recentContextTail,
-    step,
-    maxSteps,
-    isPlanMode,
-    onTaskBranch,
-    jevModel = DEFAULT_JEV_MODEL
-  } = input2;
-  const state = [
-    `TASK:
-${clip(taskDescription, 1200)}`,
-    `STEP: ${step}/${maxSteps}`,
-    `PLAN_MODE: ${isPlanMode}`,
-    `ON_TASK_BRANCH: ${onTaskBranch}`,
-    `PROGRESS:
-${clip(progressSummary, 800) || "(none)"}`,
-    `RECENT_CONTEXT:
-${clip(recentContextTail, 1500) || "(none)"}`,
-    `REPO_MAP (paths):
-${clip(repoMap, 2500) || "(empty)"}`,
-    repoContext ? `REPO_CONTEXT:
-${clip(repoContext, 800)}` : ""
-  ].filter(Boolean).join(`
-
-`);
-  try {
-    const res = await askJev_default({
-      state,
-      model: jevModel,
-      questions: {
-        confirm_gate: {
-          type: "choice",
-          instructions: "Human approval gate for shell. Pick exactly one. " + "denied = a prior shell proposal was followed by [DENIED BY USER]. " + "pending = a requires_confirmation shell was proposed and neither [APPROVED BY USER] nor [DENIED BY USER] appeared yet. " + "clear = neither of the above.",
-          criteria: {
-            clear: "No outstanding confirmation; safe to continue.",
-            pending: "Waiting on user approve/deny for a previous shell command.",
-            denied: "User denied a prior shell command; do not re-propose the same effect."
-          }
-        },
-        is_conversational_only: {
-          type: "choice",
-          instructions: "Is this only a greeting, chat, or question answerable without reading or changing files? " + "If repo context already answers a codebase question with no file I/O needed, choose yes.",
-          criteria: {
-            yes: "No read/write/edit/append/shell needed this turn.",
-            no: "Task needs tools or git lifecycle."
-          }
-        },
-        git_phase: {
-          type: "choice",
-          instructions: "Pick the single next git-lifecycle phase. File work is only allowed in task_work and only when ON_TASK_BRANCH is true. " + "Before ever creating a new task branch, always look for an existing branch that already covers this fix/task. " + 'Matching is by context, not exact string \u2014 a branch named "fix/login-timeout" should be picked up for a request about the login timing out, even if the wording differs. ' + "If a reasonably close match exists, checkout that branch and continue work there instead of spawning a new one. " + "Only create a new branch when nothing existing is a plausible match. " + "done only if merge was approved and succeeded. " + "blocked_on_confirm if confirm_gate is pending or a denied merge/install blocks progress.",
-          criteria: {
-            check_repo: "Unknown if workspace is a git repo \u2014 run rev-parse style check.",
-            init_repo: "Not a git repo yet \u2014 init base branch.",
-            find_branch: "Repo exists but not yet on a task branch \u2014 list local (and remote-tracked) branches and check whether any of them already relates to this task/fix by topic, name, or recent commit context. Do this before deciding to create anything.",
-            checkout_branch: "find_branch located an existing branch that plausibly matches this task \u2014 check it out and resume work there. Treat it as the task branch going forward even if its name does not follow the agent/<slug> convention.",
-            create_branch: "find_branch found no existing branch that reasonably matches this task \u2014 create a new agent/<slug> branch from base.",
-            task_work: "On task branch (or plan-mode reads); do task file/shell work.",
-            commit: "Task file work done; need local commit on task branch.",
-            merge: "Committed; need merge back to base (always needs confirmation).",
-            done: "Merge approved and succeeded; task complete.",
-            blocked_on_confirm: "Must wait or halt due to confirm gate."
-          }
-        },
-        tool: {
-          type: "choice",
-          instructions: "Single next tool. Prefer none when conversational, pending confirm, done, or when only waiting. " + "In plan mode only read or none. " + "New file not in REPO_MAP \u2192 write (no read first). " + "Existing file not yet in context \u2192 read first. " + "Small localized change with contents in context \u2192 edit. " + "Full rewrite \u2192 write. Pure end addition \u2192 append. " + "Install/test/build/git commands \u2192 shell. Never shell to edit file contents.",
-          criteria: {
-            read: "Read an existing file into context.",
-            write: "Create new file or full-file rewrite.",
-            edit: "Small exact substring replace; contents already in context.",
-            append: "Append only to end of existing/new file.",
-            shell: "Run a command (git, test, install, etc.).",
-            none: "No tool this step (done, wait, conversational, or cannot proceed)."
-          }
-        },
-        shell_risk: {
-          type: "choice",
-          instructions: "If tool is not shell, choose n/a. Otherwise classify the *intended* command class from the task (not a literal cmd). " + "AUTO = read-only or local git/test/build. CONFIRM = install or merge to base. BLOCKED = destructive/unsafe (rm -rf, force push, curl|sh, secrets exfil, etc.).",
-          criteria: {
-            auto: "Read-only or locally reversible; no network package install; local git only.",
-            confirm: "Side-effect needing human sign-off (dependency install, merge to base).",
-            blocked: "Must never run; refuse or suggest narrower auto alternative.",
-            "n/a": "Tool is not shell."
-          }
-        },
-        file_in_map: {
-          type: "choice",
-          instructions: "If the next file action targets a path, does that path already appear in REPO_MAP? " + "If tool is shell or none, choose unknown.",
-          criteria: {
-            yes: "Path listed in REPO_MAP.",
-            no: "New path / not in map.",
-            unknown: "Not a file tool or path unclear."
-          }
-        },
-        contents_in_context: {
-          type: "choice",
-          instructions: "For a file mutation, are sufficient current contents already present in RECENT_CONTEXT " + "(e.g. a prior read or [Verified current contents])? If not a file mutation, unknown.",
-          criteria: {
-            yes: "Enough contents already in context to edit safely.",
-            no: "Need read (or write-from-scratch) before mutating.",
-            unknown: "Not applicable."
-          }
-        },
-        need_more_steps: {
-          type: "choice",
-          instructions: "Will finishing the overall task clearly need more turns after this one under the normal budget? " + "Also, if the agent's last message implies it intends to perform more work, choose yes even if it thinks it is done.",
-          criteria: {
-            yes: "More steps needed after this action or agent prose implies intent to continue.",
-            no: "This is likely the last needed action or a terminal wait/done."
-          }
-        },
-        confidence: {
-          type: "score",
-          instructions: "How confident are you in the tool + git_phase combination for this step?",
-          criteria: {
-            "0": "Guessing / contradictory signals.",
-            "50": "Plausible but ambiguous.",
-            "100": "Clear next action."
-          }
-        }
-      }
-    });
-    const a2 = res.answers;
-    const confirmGate = a2.confirm_gate?.choice ?? "clear";
-    let gitPhase = a2.git_phase?.choice ?? "task_work";
-    let tool = a2.tool?.choice ?? "none";
-    let shellRisk = a2.shell_risk?.choice ?? "n/a";
-    const fileInMapChoice = a2.file_in_map?.choice;
-    const contentsChoice = a2.contents_in_context?.choice;
-    const needMore = a2.need_more_steps?.choice === "yes";
-    const conversational = a2.is_conversational_only?.choice === "yes";
-    const conf = typeof a2.confidence?.score === "number" ? a2.confidence.score / 100 : a2.confirm_gate?.confidence ?? 0.5;
-    if (confirmGate === "pending") {
-      gitPhase = "blocked_on_confirm";
-      tool = "none";
-      shellRisk = "n/a";
-    } else if (confirmGate === "denied" && tool === "shell" && shellRisk !== "auto") {
-      tool = "none";
-      gitPhase = "blocked_on_confirm";
-    }
-    if (conversational && confirmGate === "clear") {
-      tool = "none";
-      gitPhase = "done";
-    }
-    if (isPlanMode && tool !== "read" && tool !== "none") {
-      tool = "read";
-    }
-    if (!onTaskBranch && (tool === "write" || tool === "edit" || tool === "append")) {
-      tool = "shell";
-      gitPhase = gitPhase === "task_work" ? "create_branch" : gitPhase;
-      shellRisk = "auto";
-    }
-    if (tool === "shell" && shellRisk === "blocked") {
-      tool = "none";
-    }
-    if (gitPhase === "merge") {
-      tool = "shell";
-      shellRisk = "confirm";
-    }
-    if (gitPhase === "done") {
-      tool = "none";
-    }
-    const requiresConfirmation = tool === "shell" && (shellRisk === "confirm" || gitPhase === "merge");
-    const fileExistsInMap = fileInMapChoice === "yes" ? true : fileInMapChoice === "no" ? false : null;
-    const contentsAlreadyInContext = contentsChoice === "yes" ? true : contentsChoice === "no" ? false : null;
-    const canSkipDecisionLlm = tool === "none" || false;
-    const reasoning = buildShortReasoning({
-      confirmGate,
-      gitPhase,
-      tool,
-      shellRisk,
-      conversational,
-      isPlanMode
-    });
-    return {
-      unavailable: false,
-      tool,
-      gitPhase,
-      confirmGate,
-      shellRisk,
-      requiresConfirmation,
-      needMoreSteps: needMore || confirmGate === "pending",
-      fileExistsInMap,
-      contentsAlreadyInContext,
-      confidence: conf,
-      reasoning,
-      canSkipDecisionLlm
-    };
-  } catch {
-    return {
-      unavailable: true,
-      tool: "none",
-      gitPhase: "task_work",
-      confirmGate: "clear",
-      shellRisk: "n/a",
-      requiresConfirmation: false,
-      needMoreSteps: false,
-      fileExistsInMap: null,
-      contentsAlreadyInContext: null,
-      confidence: 0,
-      reasoning: "Jev unavailable; fall back to user-model router.",
-      canSkipDecisionLlm: false
-    };
-  }
-}
-function buildShortReasoning(p) {
-  if (p.confirmGate === "pending")
-    return "Awaiting user decision on pending command.";
-  if (p.confirmGate === "denied")
-    return "Prior command denied; not re-proposing same effect.";
-  if (p.conversational)
-    return "Conversational only; no tools.";
-  if (p.gitPhase === "done")
-    return "Git merge complete; task done.";
-  if (p.isPlanMode)
-    return `Plan mode: ${p.tool}.`;
-  if (p.tool === "shell")
-    return `Shell (${p.shellRisk}); git phase ${p.gitPhase}.`;
-  return `Next: ${p.tool} (git phase ${p.gitPhase}).`;
-}
+import { dirname } from "path";
 
 // src/tools/harness-processes.ts
 import { spawn } from "child_process";
@@ -330590,7 +330110,7 @@ var URL_RE = /https?:\/\/(?:localhost|127\.0\.0\.1|0\.0\.0\.0|\[::1?\]):\d+[^\s'
 var PORT_RE = /\bport\s*:?\s*(\d{2,5})\b/gi;
 var ALL_RE = /^(?:all|everything|\*|all\s+(?:the\s+)?(?:servers|processes|background(?:\s+processes)?))$/;
 var GENERIC_RE = /^(?:the\s+|that\s+|this\s+|my\s+)?(?:dev\s+|web\s+|local\s+|background\s+)?(?:server|process|watcher|app|service|it)$/;
-var clip2 = (s2, n3) => s2.length > n3 ? `${s2.slice(0, n3 - 1)}\u2026` : s2;
+var clip = (s2, n3) => s2.length > n3 ? `${s2.slice(0, n3 - 1)}\u2026` : s2;
 function fmtDur(ms) {
   const s2 = Math.max(0, Math.floor(ms / 1000));
   if (s2 < 60)
@@ -330602,7 +330122,7 @@ function fmtDur(ms) {
 }
 function deriveLabel(cmd) {
   const words = cmd.split(/\s+/).filter((w) => w && !/^\w+=/.test(w));
-  return clip2(words.slice(0, 3).join(" "), 24);
+  return clip(words.slice(0, 3).join(" "), 24);
 }
 var urlSuffix = (m) => m.urls.size ? ` \xB7 ${[...m.urls].join(", ")}` : "";
 
@@ -330744,7 +330264,7 @@ Use bg_logs with the id to see output, bg_kill to stop one. Never start a duplic
       let s2 = `Background ${m.id} "${m.label}" ${m.status === "failed" ? `crashed (exit ${m.exitCode ?? m.signal})` : `exited (code ${m.exitCode ?? m.signal})`}`;
       if (m.status === "failed") {
         const last = m.buf.split(`
-`).map((l) => l.trim()).filter(Boolean).slice(-2).map((l) => clip2(l, 160));
+`).map((l) => l.trim()).filter(Boolean).slice(-2).map((l) => clip(l, 160));
         if (last.length)
           s2 += `
     ${last.join(`
@@ -330778,7 +330298,7 @@ Use bg_logs with the id to see output, bg_kill to stop one. Never start a duplic
   line(m) {
     const when = m.status === "running" ? `up ${fmtDur(Date.now() - m.startedAt)}` : `exit ${m.exitCode ?? m.signal}, ${fmtDur(Date.now() - (m.endedAt ?? Date.now()))} ago`;
     return `${m.id} "${m.label}" [${m.status}] pid ${m.pid ?? "?"} \xB7 ${when}${urlSuffix(m)}
-    $ ${clip2(m.cmd, 120)}`;
+    $ ${clip(m.cmd, 120)}`;
   }
   find(ref) {
     const all3 = [...this.procs.values()];
@@ -330942,6 +330462,891 @@ Use bg_logs with the id to see output, bg_kill to stop one. Never start a duplic
   }
 }
 
+// src/tools/harness-core.ts
+var MAX_JSON_RETRIES = 3;
+var MAX_WRITES_PER_FILE = 10;
+var MAX_VERIFY_CHARS = 4000;
+var CONTEXT_WINDOW_SIZE = 24;
+var DECISION_MAX_TOKENS = 2500;
+var CONTENT_MAX_TOKENS = 1e4;
+var SHELL_TIMEOUT_MS = 60000;
+var MODEL_PROVIDERS = ["GOOGLE", "CENCORI", "VENICE"];
+var MUTATING_TOOLS = new Set([
+  "write",
+  "edit",
+  "append"
+]);
+var VALID_TOOLS = new Set([
+  "read",
+  "write",
+  "edit",
+  "append",
+  "shell"
+]);
+function errorMessage(e2) {
+  if (e2 instanceof Error)
+    return e2.message;
+  if (typeof e2 === "string")
+    return e2;
+  return "unknown error";
+}
+function isRecord2(v) {
+  return typeof v === "object" && v !== null;
+}
+function summarizeZodError(e2) {
+  if (!isRecord2(e2))
+    return "validation error";
+  const err = e2;
+  if (Array.isArray(err.issues)) {
+    return err.issues.map((i2) => `${(i2.path ?? []).join(".") || "<root>"}: ${i2.message}`).join("; ");
+  }
+  return err.message ?? "validation error";
+}
+function extractFirstJsonObject(text) {
+  const start = text.indexOf("{");
+  if (start === -1)
+    return null;
+  let depth = 0;
+  let inString = false;
+  let escaped = false;
+  for (let i2 = start;i2 < text.length; i2++) {
+    const ch = text[i2];
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (ch === "\\") {
+      escaped = true;
+      continue;
+    }
+    if (ch === '"') {
+      inString = !inString;
+      continue;
+    }
+    if (inString)
+      continue;
+    if (ch === "{") {
+      depth++;
+    } else if (ch === "}") {
+      depth--;
+      if (depth === 0)
+        return text.slice(start, i2 + 1);
+    }
+  }
+  return null;
+}
+function salvagePartialDecision(text) {
+  const grab = (key) => {
+    const re = new RegExp(`"${key}"\\s*:\\s*"((?:\\\\.|[^"\\\\])*)"`);
+    const m = re.exec(text);
+    const captured = m?.[1];
+    if (captured === undefined)
+      return;
+    return captured.replace(/\\"/g, '"').replace(/\\n/g, `
+`).replace(/\\\\/g, "\\");
+  };
+  const tool = grab("tool");
+  const targetFile = grab("targetFile") ?? grab("file") ?? grab("target_file");
+  const cmd = grab("cmd");
+  if (!tool && !targetFile && !cmd)
+    return null;
+  return {
+    tool,
+    targetFile,
+    target: grab("target"),
+    replacement: grab("replacement"),
+    cmd,
+    reasoning: grab("reasoning")
+  };
+}
+function truncateForContext(s2) {
+  if (s2.length <= MAX_VERIFY_CHARS)
+    return s2;
+  const slice = s2.slice(0, MAX_VERIFY_CHARS);
+  const lastNewline = slice.lastIndexOf(`
+`);
+  const cut = lastNewline > MAX_VERIFY_CHARS * 0.5 ? lastNewline : MAX_VERIFY_CHARS;
+  return `${s2.slice(0, cut)}
+...[truncated, ${s2.length - cut} more characters]`;
+}
+function tryUnwrapDecisionJson(text) {
+  const trimmed = text.trim();
+  if (!trimmed.startsWith("{"))
+    return { unwrapped: null, wasWrapper: false };
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (!isRecord2(parsed))
+      return { unwrapped: null, wasWrapper: false };
+    const looksLikeDecision = "tool" in parsed || "targetFile" in parsed;
+    const content = parsed.content;
+    if (looksLikeDecision && typeof content === "string") {
+      return { unwrapped: content, wasWrapper: true };
+    }
+  } catch {}
+  return { unwrapped: null, wasWrapper: false };
+}
+var _CONVERSATIONAL_WORDS = new Set([
+  "hi",
+  "hey",
+  "hello",
+  "yo",
+  "sup",
+  "howdy",
+  "bye",
+  "goodbye",
+  "later",
+  "cya",
+  "thanks",
+  "thank",
+  "thx",
+  "ty",
+  "appreciate",
+  "appreciated",
+  "ok",
+  "okay",
+  "k",
+  "cool",
+  "nice",
+  "great",
+  "perfect",
+  "awesome",
+  "sweet",
+  "alright",
+  "noted",
+  "yes",
+  "yeah",
+  "yep",
+  "yup",
+  "sure",
+  "no",
+  "nope",
+  "nah",
+  "maybe",
+  "lol",
+  "lmao",
+  "haha",
+  "hehe",
+  "please",
+  "pls",
+  "sorry",
+  "np",
+  "worries"
+]);
+async function isConversational(message) {
+  const trimmed = message.trim();
+  try {
+    const res = await askJev_default({
+      state: trimmed,
+      model: "jev-latest",
+      questions: {
+        is_conversational: {
+          type: "noul",
+          instructions: "The user is greeting, chatting, or making small talk, rather than asking an informational question or requesting a task be executed."
+        }
+      }
+    });
+    return (res?.answers?.is_conversational?.noul ?? 0) > 0.5;
+  } catch {
+    return false;
+  }
+}
+var DEBUG_TRACE = Boolean(process.env.BASECODE_DEBUG);
+var CLEAR_LINE = "\r\x1B[2K";
+var WEB_SEARCH_FAILED_RE = /^\[Web search results[^\n]*\n(?:REJECTED|SEARCH FAILED):/;
+var TOOL_OUTPUT_CHAR_CAP = 16000;
+var SHELL_OUTPUT_BYTE_CAP = 256000;
+var RESULT_TAIL_CHARS = 8000;
+var INIT_PER_FILE_CHAR_CAP = 8000;
+var INIT_TOTAL_DUMP_CHAR_CAP = 200000;
+var HEAVY_KEEP_CHARS = 40000;
+var REPO_MAP_CHAR_CAP = 12000;
+var JEV_REPO_MAP_CHAR_CAP = 4000;
+var JEV_TASK_CHAR_CAP = 3000;
+var JEV_TAIL_MSGS = 3;
+var JEV_TAIL_CHARS = 1500;
+var PRIOR_MSG_CHAR_CAP = 2500;
+var SYNTHESIS_OVERVIEW_CHARS = 6000;
+var NOTICE_POLL_MS = 250;
+var VISION_MODEL_ID = "gemini-2.5-flash";
+var VISION_MAX_TOKENS = 1200;
+var VISION_TIMEOUT_MS = 60000;
+var VISION_MAX_IMAGE_BYTES = 8 * 1024 * 1024;
+var VISION_CONCURRENCY = 3;
+var VISION_SYSTEM_PROMPT = "You describe images for a coding agent that cannot see them. " + "Transcribe all visible text, code, error messages and numbers verbatim. " + "Then describe layout, UI elements, colours, diagrams and anything relevant to a software task. " + "Be factual and compact (under 400 words) and do not speculate about intent. " + "Reply with the description only.";
+var DECISION_JSON_START_RE = /\{\s*"(?:tool|reasoning|need_more_steps|requires_confirmation)"\s*:/;
+var DECISION_JSON_PREFIX_RE = /^\{\s*(?:"[a-z_]{0,24}"?\s*:?)?$/;
+var DECISION_JSON_FENCE_TAIL_RE = /```(?:json)?\s*$/i;
+var DECISION_JSON_PARTIAL_FENCE_RE = /(?:`{1,2}|```(?:j(?:s(?:o(?:n)?)?)?)?\s*)$/i;
+var DECISION_JSON_HOLD_CHARS = 40;
+var isDecisionShaped = (v) => isRecord2(v) && (("tool" in v) && (v.tool === null || typeof v.tool === "string") || ("reasoning" in v) && (("need_more_steps" in v) || ("needs_more_steps" in v) || ("requires_confirmation" in v)));
+function jsonObjectEnd(s2, start) {
+  let depth = 0;
+  let inStr = false;
+  let esc2 = false;
+  for (let i2 = start;i2 < s2.length; i2++) {
+    const c2 = s2[i2];
+    if (inStr) {
+      if (esc2)
+        esc2 = false;
+      else if (c2 === "\\")
+        esc2 = true;
+      else if (c2 === '"')
+        inStr = false;
+      continue;
+    }
+    if (c2 === '"')
+      inStr = true;
+    else if (c2 === "{")
+      depth++;
+    else if (c2 === "}") {
+      depth--;
+      if (depth === 0)
+        return i2 + 1;
+    }
+  }
+  return -1;
+}
+function salvageReasoning(partial2) {
+  const raw = /"reasoning"\s*:\s*"((?:[^"\\]|\\.)*)"/.exec(partial2)?.[1];
+  if (raw === undefined)
+    return "";
+  try {
+    return String(JSON.parse(`"${raw}"`)).trim();
+  } catch {
+    return raw.trim();
+  }
+}
+function decisionPackageText(json3) {
+  let parsed;
+  try {
+    parsed = JSON.parse(json3);
+  } catch {
+    return salvageReasoning(json3);
+  }
+  if (!isDecisionShaped(parsed))
+    return json3;
+  return typeof parsed.reasoning === "string" ? parsed.reasoning.trim() : "";
+}
+function decisionJsonHoldFrom(s2) {
+  let hold = s2.length;
+  const open3 = s2.lastIndexOf("{");
+  if (open3 >= 0 && s2.length - open3 <= DECISION_JSON_HOLD_CHARS && DECISION_JSON_PREFIX_RE.test(s2.slice(open3))) {
+    hold = open3;
+  }
+  const fence = DECISION_JSON_PARTIAL_FENCE_RE.exec(s2.slice(0, hold));
+  if (fence && fence.index >= hold - DECISION_JSON_HOLD_CHARS)
+    hold = fence.index;
+  return hold;
+}
+async function* guardDecisionJson(source) {
+  let pending = "";
+  let inPackage = false;
+  let dropCloseFence = false;
+  for await (const chunk of source) {
+    const d2 = chunk.delta;
+    if (!d2)
+      continue;
+    pending += d2;
+    for (;; ) {
+      if (inPackage) {
+        const end = jsonObjectEnd(pending, 0);
+        if (end < 0)
+          break;
+        const text = decisionPackageText(pending.slice(0, end));
+        pending = pending.slice(end);
+        inPackage = false;
+        if (text)
+          yield { delta: text };
+        continue;
+      }
+      if (dropCloseFence) {
+        const t2 = pending.trimStart();
+        if (t2 === "" || /^`{1,2}$/.test(t2))
+          break;
+        dropCloseFence = false;
+        if (t2.startsWith("```"))
+          pending = t2.slice(3);
+      }
+      const hit = DECISION_JSON_START_RE.exec(pending);
+      if (hit) {
+        const head = pending.slice(0, hit.index);
+        const fenced = DECISION_JSON_FENCE_TAIL_RE.test(head);
+        pending = pending.slice(hit.index);
+        inPackage = true;
+        dropCloseFence = fenced;
+        const keep = fenced ? head.replace(DECISION_JSON_FENCE_TAIL_RE, "") : head;
+        if (keep)
+          yield { delta: keep };
+        continue;
+      }
+      const hold = decisionJsonHoldFrom(pending);
+      const out = pending.slice(0, hold);
+      pending = pending.slice(hold);
+      if (out)
+        yield { delta: out };
+      break;
+    }
+  }
+  if (inPackage) {
+    const text = salvageReasoning(pending);
+    if (text)
+      yield { delta: text };
+  } else if (dropCloseFence && /^[\s`]*$/.test(pending)) {} else if (pending) {
+    yield { delta: pending };
+  }
+}
+var BASECODE_POINTER = "BASECODE.md exists at the repo root (architecture, conventions, commands) but is NOT inlined, to save tokens. " + 'Read it once with the "read" tool if the task needs project background; skip it for self-contained tasks.';
+var NO_BASECODE_NOTE = "No BASECODE.md yet (the user can run /init to generate one).";
+var GIT_INTENT = /\b(git|commit|committed|merge|push|pull|rebase|branch|branches|checkout|stash|tag|cherry-?pick|reset|revert|amend)\b/i;
+var NO_INLINE_CONTENT_RULE = {
+  role: "system",
+  content: `OUTPUT REMINDER: "write"/"append": set "content" to "" (the file is generated in a separate step; never inline source). ` + `"edit": "target" and "replacement" are REQUIRED, copied verbatim from file contents shown in context, kept small. ` + `"shell": "cmd" is REQUIRED (the literal command). "web_search": "content" is REQUIRED \u2014 a short, specific query ` + `(3-10 words) with no secrets, local paths or code; other fields null. "reasoning": ONE short sentence. ` + `"bg_start": "cmd" REQUIRED (the literal command), "target" = optional short name; "bg_logs"/"bg_kill": "target" = ` + `process id, name or port ("bg_kill" accepts "all"); "bg_list": nothing else. Never run servers/watchers via "shell". ` + `Your whole JSON must fit in ${DECISION_MAX_TOKENS} tokens or the step is wasted. ` + `For project background read BASECODE.md (not inlined); if none exists, tell the user to run /init.`
+};
+var BG_RULES_MESSAGE = { role: "system", content: BG_TOOL_RULES };
+var MAX_ASKS_PER_TASK = 2;
+var ASK_MAX_QUESTIONS = 4;
+var ASK_MAX_OPTIONS = 4;
+var ASK_MAX_QUESTION_CHARS = 400;
+var ASK_MAX_OPTION_CHARS = 120;
+var PENDING_BLOCKED_TOOLS = new Set([
+  "write",
+  "edit",
+  "append",
+  "shell",
+  "bg_start"
+]);
+var QUESTION_CONTEXT_RE = /^\[(?:USER ANSWER\vert{}QUESTIONS ASKED)\]|^[System] QUESTIONS:/;
+var QUESTION_BLOCK_RE = /\? Questions for you \(\d+\):\n(?: {2}\d+\. .*\n)+\n?/g;
+var clipText = (s2, n3) => s2.length > n3 ? `${s2.slice(0, n3 - 1)}\u2026` : s2;
+function cleanAskOptions(v) {
+  if (!Array.isArray(v))
+    return [];
+  const seen = new Set;
+  const out = [];
+  for (const o2 of v) {
+    if (typeof o2 !== "string")
+      continue;
+    const t2 = o2.replace(/\s+/g, " ").trim().slice(0, ASK_MAX_OPTION_CHARS);
+    const key = t2.toLowerCase();
+    if (!t2 || seen.has(key))
+      continue;
+    seen.add(key);
+    out.push(t2);
+    if (out.length >= ASK_MAX_OPTIONS)
+      break;
+  }
+  return out;
+}
+function parseAskDecision(parsed) {
+  if (!isRecord2(parsed) || parsed.tool !== "ask_user_question")
+    return null;
+  const rawItems = [];
+  if (Array.isArray(parsed.questions))
+    rawItems.push(...parsed.questions);
+  else if (typeof parsed.question === "string") {
+    rawItems.push({ question: parsed.question, options: parsed.options });
+  }
+  const questions = [];
+  const seen = new Set;
+  for (const item of rawItems) {
+    let text = "";
+    let options = [];
+    if (typeof item === "string") {
+      text = item;
+    } else if (isRecord2(item) && typeof item.question === "string") {
+      text = item.question;
+      options = cleanAskOptions(item.options);
+    }
+    text = text.replace(/\s+/g, " ").trim().slice(0, ASK_MAX_QUESTION_CHARS);
+    const key = text.toLowerCase();
+    if (!text || seen.has(key))
+      continue;
+    seen.add(key);
+    questions.push({ question: text, options });
+    if (questions.length >= ASK_MAX_QUESTIONS)
+      break;
+  }
+  return {
+    questions,
+    ignore: parsed.ignore === true,
+    reasoning: typeof parsed.reasoning === "string" ? parsed.reasoning.slice(0, 1000) : ""
+  };
+}
+var QUESTIONS_RULE = {
+  role: "system",
+  content: `ASK TOOL: to ask the user something, return {"tool":"ask_user_question","questions":[{"question":"...","options":["...","..."]}],` + `"reasoning":"...","need_more_steps":true}. 1-${ASK_MAX_QUESTIONS} questions, each self-contained, with 2-${ASK_MAX_OPTIONS} mutually ` + `exclusive options (recommended first) or an empty options array for an open question. A single {"question","options"} pair is also accepted. ` + `All other fields null. The questions are shown to the user as a questionnaire; after asking you MUST stop and wait. ` + `Never ask while questions are pending, never re-ask something already answered (the answers are listed under "USER ANSWERS" in the task), ` + `at most ${MAX_ASKS_PER_TASK} asks per task. To drop the pending questions because the user's message makes them moot, return ` + `{"tool":"ask_user_question","ignore":true,"reasoning":"..."}.`
+};
+var JEV_BYPASS = {
+  unavailable: true,
+  tool: "none",
+  needMoreSteps: false,
+  confidence: 0,
+  reasoning: ""
+};
+var MEMORY_CHAR_CAP = 6000;
+var MEMORY_MAX_NEW_ENTRIES = 3;
+var MEMORY_MAX_ENTRY_CHARS = 250;
+var MEMORY_HEADER = `# BASECODE MEMORY
+Project-specific preferences and fixes learned from past sessions. Newest last.
+`;
+var MEMORY_SIGNAL = /\b(always|never|don'?t|do not|instead|prefer|from now on|remember|actually|wrong|incorrect|not what i|should(?:n'?t)?|stop (?:using|doing)|use \S+ (?:not|instead))\b/i;
+var MEMORY_SECRET_PATTERN = /(?:sk-[A-Za-z0-9_-]{16,}|AKIA[0-9A-Z]{16}|ghp_[A-Za-z0-9]{20,}|api[_-]?key\s*[:=]|password\s*[:=]|secret\s*[:=]|token\s*[:=]|-----BEGIN)/i;
+var MEMORY_LEARNER_PROMPT = `You maintain a small long-term memory file for a coding agent working in one project.
+From the exchange below, extract ONLY durable, reusable lessons:
+- a way the user wants things done (style, tooling, conventions, workflow), or
+- a non-obvious fix / root cause in THIS project that would save time if it came up again.
+
+Rules:
+- Each entry is ONE short imperative sentence (max 200 chars) that makes sense with no other context.
+- Do NOT record one-off task details, lists of files changed, or anything already in EXISTING MEMORY (including paraphrases).
+- Do NOT record secrets, API keys, tokens, or personal data.
+- If the user contradicts an existing entry, put the corrected entry in "add" and the old entry's exact text in "remove".
+- Most exchanges contain nothing worth saving. In that case respond with {"add":[],"remove":[]}.
+
+Respond with ONE raw JSON object and nothing else: {"add": string[], "remove": string[]} DO NOT NOTIFY THE USER WHEN YOU UPDATE THIS FILE`;
+var memNorm = (s2) => s2.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+var memEntryText = (line) => line.replace(/^-\s*(?:\[\d{4}-\d{2}-\d{2}\]\s*)?/, "").trim();
+var CHARS_PER_TOKEN = 3.5;
+var TOKENIZE_EXACT_MAX_CHARS = 1e5;
+var estimateTextTokens = (text) => {
+  if (!text)
+    return 0;
+  return text.length > TOKENIZE_EXACT_MAX_CHARS ? Math.ceil(text.length / CHARS_PER_TOKEN) : countTokens(text);
+};
+var MEDIA_PART_TOKENS = 1000;
+var MESSAGE_OVERHEAD_TOKENS = 4;
+function hasText(part) {
+  return typeof part === "object" && part !== null && typeof part.text === "string";
+}
+function countLines(text) {
+  const len = text.length;
+  if (len === 0)
+    return 0;
+  let n3 = 1;
+  for (let i2 = 0;i2 < len; i2++) {
+    if (text.charCodeAt(i2) === 10)
+      n3++;
+  }
+  if (text.charCodeAt(len - 1) === 10)
+    n3--;
+  return n3 === 0 ? 1 : n3;
+}
+function clipMiddle2(text, max) {
+  if (text.length <= max)
+    return text;
+  const head = Math.floor(max * 0.4);
+  const tail = max - head;
+  return `${text.slice(0, head)}
+\u2026[clipped ${text.length - max} chars]\u2026
+${text.slice(-tail)}`;
+}
+var repoMapMemo = new Map;
+function compactRepoMap(repoMap, cap) {
+  const hit = repoMapMemo.get(cap);
+  if (hit && hit.src === repoMap)
+    return hit.out;
+  let out;
+  try {
+    const paths = flattenRepoMap(repoMap);
+    if (paths.length === 0) {
+      out = repoMap.slice(0, cap);
+    } else {
+      const byDir = new Map;
+      for (const p of paths) {
+        const d2 = dirname(p);
+        const base = d2 === "." ? p : p.slice(d2.length + 1);
+        const list = byDir.get(d2);
+        if (list)
+          list.push(base);
+        else
+          byDir.set(d2, [base]);
+      }
+      const lines = [];
+      let total = 0;
+      let listed = 0;
+      for (const [d2, files] of [...byDir].sort(([a2], [b]) => a2 < b ? -1 : a2 > b ? 1 : 0)) {
+        const line = `${d2 === "." ? "./" : `${d2}/`} ${files.join(" ")}`;
+        if (total + line.length > cap)
+          break;
+        lines.push(line);
+        total += line.length + 1;
+        listed += files.length;
+      }
+      const omitted = paths.length - listed;
+      out = lines.join(`
+`) + (omitted > 0 ? `
+(+${omitted} more files not listed; use find/grep to explore)` : "");
+    }
+  } catch {
+    out = repoMap.slice(0, cap);
+  }
+  repoMapMemo.set(cap, { src: repoMap, out });
+  return out;
+}
+async function readCappedStream(stream4, cap = SHELL_OUTPUT_BYTE_CAP) {
+  if (!stream4)
+    return "";
+  const reader = stream4.getReader();
+  const decoder2 = new TextDecoder;
+  const parts = [];
+  let size = 0;
+  let truncated = false;
+  try {
+    while (size < cap) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      if (!value)
+        continue;
+      size += value.byteLength;
+      parts.push(decoder2.decode(value, { stream: true }));
+    }
+    if (size >= cap)
+      truncated = true;
+  } catch {} finally {
+    try {
+      await reader.cancel();
+    } catch {}
+  }
+  let out = parts.join("");
+  parts.length = 0;
+  if (out.length > cap)
+    out = out.slice(0, cap);
+  return truncated ? `${out}
+\u2026[output truncated at ${cap} bytes]` : out;
+}
+function buildAttachmentPart(provider, mimeType, output2) {
+  const key = provider.toUpperCase();
+  const isText = mimeType.startsWith("text/");
+  if (key === "GOOGLE") {
+    return isText ? { text: output2 } : { inlineData: { mimeType, data: output2 } };
+  }
+  if (key === "ANTHROPIC") {
+    return {
+      type: mimeType.startsWith("image/") ? "image" : "document",
+      source: { type: "base64", media_type: mimeType, data: output2 }
+    };
+  }
+  if (key === "OPENAI" || key === "GROQ" || key === "VENICE") {
+    return isText ? { type: "text", text: output2 } : { type: "image_url", image_url: { url: `data:${mimeType};base64,${output2}` } };
+  }
+  return { type: "text", text: output2 };
+}
+function foldMediaParts(messages) {
+  let hasMedia = false;
+  for (const m of messages) {
+    if (m && Array.isArray(m.mediaParts) && m.mediaParts.length > 0) {
+      hasMedia = true;
+      break;
+    }
+  }
+  if (!hasMedia)
+    return messages;
+  return messages.map((m) => {
+    if (!m || !Array.isArray(m.mediaParts) || m.mediaParts.length === 0)
+      return m;
+    const { mediaParts, ...rest } = m;
+    const text = typeof rest.content === "string" ? rest.content : "";
+    const parts = [...text ? [{ type: "text", text }] : [], ...mediaParts];
+    return { ...rest, content: parts };
+  });
+}
+var TOOL_HISTORY_CAP = 20;
+
+// src/tools/harness-jev.ts
+function truncate(text, maxChars) {
+  if (!text)
+    return "";
+  return text.length <= maxChars ? text : `${text.slice(0, maxChars)}
+...[truncated]`;
+}
+var MALFORMED_CRITERIA = {
+  xml_tool_call: "Uses an XML/angle-bracket function-call style like <tool_call><function=...><parameter=...> instead of a raw JSON object.",
+  xml_tool_use: 'Uses an XML "<tool_use><tool_name>...</tool_name><file_path>...</file_path></tool_use>" style instead of a raw JSON object.',
+  generic_xml_tag: "Uses some other XML/HTML-like angle-bracket markup instead of a raw JSON object, not matching the tool_call or tool_use patterns.",
+  refusal: "Claims it does not have access to file or shell tools, or otherwise declines to make a tool decision.",
+  empty_or_no_json: "Contains no JSON object at all, or is empty/blank/pure prose with nothing resembling the required schema.",
+  other: "Malformed for some other reason not covered above (e.g. JSON-like but severely corrupted)."
+};
+async function classifyMalformedOutput(rawContent) {
+  try {
+    const res = await askJev_default({
+      state: truncate(rawContent, 2000),
+      model: "jev-latest",
+      questions: {
+        malformed_reason: {
+          type: "choice",
+          instructions: "The response below was supposed to be exactly one raw JSON object matching a fixed schema, and it failed to parse as such. Why did it fail?",
+          criteria: MALFORMED_CRITERIA
+        }
+      }
+    });
+    const reason = res.answers.malformed_reason?.choice ?? "other";
+    return { reason, hint: MALFORMED_CRITERIA[reason] };
+  } catch {
+    return { reason: "other", hint: MALFORMED_CRITERIA.other };
+  }
+}
+var SHELL_RISK_CRITERIA = {
+  auto: "Read-only or locally-reversible: no network access, no effect outside the local git object store or the workspace files already being worked on (e.g. ls, cat, find, grep, git status/log/diff/branch, running existing test/lint/build scripts, git init, creating/switching a local branch, a local-only git commit).",
+  confirm: "Side-effecting and needs human sign-off before running: installing a dependency, merging a branch back into the base branch, or any command with effects reaching outside the local workspace.",
+  blocked: "Destructive, irreversible, or dangerous beyond the current task's scope \u2014 e.g. force-pushing, deleting broad swaths of the filesystem, modifying system-level configuration, or anything risking irreversible data loss or affecting systems outside this workspace."
+};
+async function classifyShellRisk(cmd) {
+  try {
+    const res = await askJev_default({
+      state: cmd,
+      model: "jev-latest",
+      questions: {
+        risk_tier: {
+          type: "choice",
+          instructions: "Classify the risk tier of running this exact shell command in an automated coding agent session.",
+          criteria: SHELL_RISK_CRITERIA
+        }
+      }
+    });
+    const riskTier = res.answers.risk_tier;
+    const tier = riskTier?.choice ?? "confirm";
+    return { tier, confidence: riskTier?.confidence ?? 0 };
+  } catch {
+    return { tier: "confirm", confidence: 0 };
+  }
+}
+
+// src/tools/harness-jev-next-step-prompt.ts
+var DEFAULT_JEV_MODEL = "jev-latest";
+function clip2(s2, max) {
+  if (!s2)
+    return "";
+  return s2.length <= max ? s2 : `${s2.slice(0, max)}
+\u2026[truncated]`;
+}
+async function classifyNextStep(input2) {
+  const {
+    taskDescription,
+    repoMap,
+    repoContext = "",
+    progressSummary,
+    recentContextTail,
+    step,
+    maxSteps,
+    isPlanMode,
+    onTaskBranch,
+    jevModel = DEFAULT_JEV_MODEL
+  } = input2;
+  const state = [
+    `TASK:
+${clip2(taskDescription, 1200)}`,
+    `STEP: ${step}/${maxSteps}`,
+    `PLAN_MODE: ${isPlanMode}`,
+    `ON_TASK_BRANCH: ${onTaskBranch}`,
+    `PROGRESS:
+${clip2(progressSummary, 800) || "(none)"}`,
+    `RECENT_CONTEXT:
+${clip2(recentContextTail, 1500) || "(none)"}`,
+    `REPO_MAP (paths):
+${clip2(repoMap, 2500) || "(empty)"}`,
+    repoContext ? `REPO_CONTEXT:
+${clip2(repoContext, 800)}` : ""
+  ].filter(Boolean).join(`
+
+`);
+  try {
+    const res = await askJev_default({
+      state,
+      model: jevModel,
+      questions: {
+        confirm_gate: {
+          type: "choice",
+          instructions: "Human approval gate for shell. Pick exactly one. " + "denied = a prior shell proposal was followed by [DENIED BY USER]. " + "pending = a requires_confirmation shell was proposed and neither [APPROVED BY USER] nor [DENIED BY USER] appeared yet. " + "clear = neither of the above.",
+          criteria: {
+            clear: "No outstanding confirmation; safe to continue.",
+            pending: "Waiting on user approve/deny for a previous shell command.",
+            denied: "User denied a prior shell command; do not re-propose the same effect."
+          }
+        },
+        is_conversational_only: {
+          type: "choice",
+          instructions: "Is this only a greeting, chat, or question answerable without reading or changing files? " + "If repo context already answers a codebase question with no file I/O needed, choose yes.",
+          criteria: {
+            yes: "No read/write/edit/append/shell needed this turn.",
+            no: "Task needs tools or git lifecycle."
+          }
+        },
+        git_phase: {
+          type: "choice",
+          instructions: "Pick the single next git-lifecycle phase. File work is only allowed in task_work and only when ON_TASK_BRANCH is true. " + "Before ever creating a new task branch, always look for an existing branch that already covers this fix/task. " + 'Matching is by context, not exact string \u2014 a branch named "fix/login-timeout" should be picked up for a request about the login timing out, even if the wording differs. ' + "If a reasonably close match exists, checkout that branch and continue work there instead of spawning a new one. " + "Only create a new branch when nothing existing is a plausible match. " + "done only if merge was approved and succeeded. " + "blocked_on_confirm if confirm_gate is pending or a denied merge/install blocks progress.",
+          criteria: {
+            check_repo: "Unknown if workspace is a git repo \u2014 run rev-parse style check.",
+            init_repo: "Not a git repo yet \u2014 init base branch.",
+            find_branch: "Repo exists but not yet on a task branch \u2014 list local (and remote-tracked) branches and check whether any of them already relates to this task/fix by topic, name, or recent commit context. Do this before deciding to create anything.",
+            checkout_branch: "find_branch located an existing branch that plausibly matches this task \u2014 check it out and resume work there. Treat it as the task branch going forward even if its name does not follow the agent/<slug> convention.",
+            create_branch: "find_branch found no existing branch that reasonably matches this task \u2014 create a new agent/<slug> branch from base.",
+            task_work: "On task branch (or plan-mode reads); do task file/shell work.",
+            commit: "Task file work done; need local commit on task branch.",
+            merge: "Committed; need merge back to base (always needs confirmation).",
+            done: "Merge approved and succeeded; task complete.",
+            blocked_on_confirm: "Must wait or halt due to confirm gate."
+          }
+        },
+        tool: {
+          type: "choice",
+          instructions: "Single next tool. Prefer none when conversational, pending confirm, done, or when only waiting. " + "In plan mode only read or none. " + "New file not in REPO_MAP \u2192 write (no read first). " + "Existing file not yet in context \u2192 read first. " + "Small localized change with contents in context \u2192 edit. " + "Full rewrite \u2192 write. Pure end addition \u2192 append. " + "Install/test/build/git commands \u2192 shell. Never shell to edit file contents.",
+          criteria: {
+            read: "Read an existing file into context.",
+            write: "Create new file or full-file rewrite.",
+            edit: "Small exact substring replace; contents already in context.",
+            append: "Append only to end of existing/new file.",
+            shell: "Run a command (git, test, install, etc.).",
+            none: "No tool this step (done, wait, conversational, or cannot proceed)."
+          }
+        },
+        shell_risk: {
+          type: "choice",
+          instructions: "If tool is not shell, choose n/a. Otherwise classify the *intended* command class from the task (not a literal cmd). " + "AUTO = read-only or local git/test/build. CONFIRM = install or merge to base. BLOCKED = destructive/unsafe (rm -rf, force push, curl|sh, secrets exfil, etc.).",
+          criteria: {
+            auto: "Read-only or locally reversible; no network package install; local git only.",
+            confirm: "Side-effect needing human sign-off (dependency install, merge to base).",
+            blocked: "Must never run; refuse or suggest narrower auto alternative.",
+            "n/a": "Tool is not shell."
+          }
+        },
+        file_in_map: {
+          type: "choice",
+          instructions: "If the next file action targets a path, does that path already appear in REPO_MAP? " + "If tool is shell or none, choose unknown.",
+          criteria: {
+            yes: "Path listed in REPO_MAP.",
+            no: "New path / not in map.",
+            unknown: "Not a file tool or path unclear."
+          }
+        },
+        contents_in_context: {
+          type: "choice",
+          instructions: "For a file mutation, are sufficient current contents already present in RECENT_CONTEXT " + "(e.g. a prior read or [Verified current contents])? If not a file mutation, unknown.",
+          criteria: {
+            yes: "Enough contents already in context to edit safely.",
+            no: "Need read (or write-from-scratch) before mutating.",
+            unknown: "Not applicable."
+          }
+        },
+        need_more_steps: {
+          type: "choice",
+          instructions: "Will finishing the overall task clearly need more turns after this one under the normal budget? " + "Also, if the agent's last message implies it intends to perform more work, choose yes even if it thinks it is done.",
+          criteria: {
+            yes: "More steps needed after this action or agent prose implies intent to continue.",
+            no: "This is likely the last needed action or a terminal wait/done."
+          }
+        },
+        confidence: {
+          type: "score",
+          instructions: "How confident are you in the tool + git_phase combination for this step?",
+          criteria: {
+            "0": "Guessing / contradictory signals.",
+            "50": "Plausible but ambiguous.",
+            "100": "Clear next action."
+          }
+        }
+      }
+    });
+    const a2 = res.answers;
+    const confirmGate = a2.confirm_gate?.choice ?? "clear";
+    let gitPhase = a2.git_phase?.choice ?? "task_work";
+    let tool = a2.tool?.choice ?? "none";
+    let shellRisk = a2.shell_risk?.choice ?? "n/a";
+    const fileInMapChoice = a2.file_in_map?.choice;
+    const contentsChoice = a2.contents_in_context?.choice;
+    const needMore = a2.need_more_steps?.choice === "yes";
+    const conversational = a2.is_conversational_only?.choice === "yes";
+    const conf = typeof a2.confidence?.score === "number" ? a2.confidence.score / 100 : a2.confirm_gate?.confidence ?? 0.5;
+    if (confirmGate === "pending") {
+      gitPhase = "blocked_on_confirm";
+      tool = "none";
+      shellRisk = "n/a";
+    } else if (confirmGate === "denied" && tool === "shell" && shellRisk !== "auto") {
+      tool = "none";
+      gitPhase = "blocked_on_confirm";
+    }
+    if (conversational && confirmGate === "clear") {
+      tool = "none";
+      gitPhase = "done";
+    }
+    if (isPlanMode && tool !== "read" && tool !== "none") {
+      tool = "read";
+    }
+    if (!onTaskBranch && (tool === "write" || tool === "edit" || tool === "append")) {
+      tool = "shell";
+      gitPhase = gitPhase === "task_work" ? "create_branch" : gitPhase;
+      shellRisk = "auto";
+    }
+    if (tool === "shell" && shellRisk === "blocked") {
+      tool = "none";
+    }
+    if (gitPhase === "merge") {
+      tool = "shell";
+      shellRisk = "confirm";
+    }
+    if (gitPhase === "done") {
+      tool = "none";
+    }
+    const requiresConfirmation = tool === "shell" && (shellRisk === "confirm" || gitPhase === "merge");
+    const fileExistsInMap = fileInMapChoice === "yes" ? true : fileInMapChoice === "no" ? false : null;
+    const contentsAlreadyInContext = contentsChoice === "yes" ? true : contentsChoice === "no" ? false : null;
+    const canSkipDecisionLlm = tool === "none" || false;
+    const reasoning = buildShortReasoning({
+      confirmGate,
+      gitPhase,
+      tool,
+      shellRisk,
+      conversational,
+      isPlanMode
+    });
+    return {
+      unavailable: false,
+      tool,
+      gitPhase,
+      confirmGate,
+      shellRisk,
+      requiresConfirmation,
+      needMoreSteps: needMore || confirmGate === "pending",
+      fileExistsInMap,
+      contentsAlreadyInContext,
+      confidence: conf,
+      reasoning,
+      canSkipDecisionLlm
+    };
+  } catch {
+    return {
+      unavailable: true,
+      tool: "none",
+      gitPhase: "task_work",
+      confirmGate: "clear",
+      shellRisk: "n/a",
+      requiresConfirmation: false,
+      needMoreSteps: false,
+      fileExistsInMap: null,
+      contentsAlreadyInContext: null,
+      confidence: 0,
+      reasoning: "Jev unavailable; fall back to user-model router.",
+      canSkipDecisionLlm: false
+    };
+  }
+}
+function buildShortReasoning(p) {
+  if (p.confirmGate === "pending")
+    return "Awaiting user decision on pending command.";
+  if (p.confirmGate === "denied")
+    return "Prior command denied; not re-proposing same effect.";
+  if (p.conversational)
+    return "Conversational only; no tools.";
+  if (p.gitPhase === "done")
+    return "Git merge complete; task done.";
+  if (p.isPlanMode)
+    return `Plan mode: ${p.tool}.`;
+  if (p.tool === "shell")
+    return `Shell (${p.shellRisk}); git phase ${p.gitPhase}.`;
+  return `Next: ${p.tool} (git phase ${p.gitPhase}).`;
+}
+
 // src/tools/pipe.ts
 var defaultIsRetryable = (err) => {
   const msg = err instanceof Error ? err.message : String(err);
@@ -340388,269 +340793,223 @@ async function webSearch(query, budget, limit = DEFAULT_LIMIT) {
   }
 }
 
-// src/tools/harness-orchestrator.ts
-var DEBUG_TRACE = Boolean(process.env.BASECODE_DEBUG);
-var CLEAR_LINE = "\r\x1B[2K";
-var WEB_SEARCH_FAILED_RE = /^\[Web search results[^\n]*\n(?:REJECTED|SEARCH FAILED):/;
-var TOOL_OUTPUT_CHAR_CAP = 16000;
-var SHELL_OUTPUT_BYTE_CAP = 256000;
-var RESULT_TAIL_CHARS = 8000;
-var INIT_PER_FILE_CHAR_CAP = 8000;
-var INIT_TOTAL_DUMP_CHAR_CAP = 200000;
-var HEAVY_KEEP_CHARS = 40000;
-var REPO_MAP_CHAR_CAP = 12000;
-var JEV_REPO_MAP_CHAR_CAP = 4000;
-var JEV_TASK_CHAR_CAP = 3000;
-var JEV_TAIL_MSGS = 3;
-var JEV_TAIL_CHARS = 1500;
-var PRIOR_MSG_CHAR_CAP = 2500;
-var SYNTHESIS_OVERVIEW_CHARS = 6000;
-var NOTICE_POLL_MS = 250;
-var VISION_MODEL_ID = "gemini-2.5-flash";
-var VISION_MAX_TOKENS = 1200;
-var VISION_TIMEOUT_MS = 60000;
-var VISION_MAX_IMAGE_BYTES = 8 * 1024 * 1024;
-var VISION_CONCURRENCY = 3;
-var VISION_SYSTEM_PROMPT = "You describe images for a coding agent that cannot see them. " + "Transcribe all visible text, code, error messages and numbers verbatim. " + "Then describe layout, UI elements, colours, diagrams and anything relevant to a software task. " + "Be factual and compact (under 400 words) and do not speculate about intent. " + "Reply with the description only.";
-var DECISION_JSON_START_RE = /\{\s*"(?:tool|reasoning|need_more_steps|requires_confirmation)"\s*:/;
-var DECISION_JSON_PREFIX_RE = /^\{\s*(?:"[a-z_]{0,24}"?\s*:?)?$/;
-var DECISION_JSON_FENCE_TAIL_RE = /```(?:json)?\s*$/i;
-var DECISION_JSON_PARTIAL_FENCE_RE = /(?:`{1,2}|```(?:j(?:s(?:o(?:n)?)?)?)?\s*)$/i;
-var DECISION_JSON_HOLD_CHARS = 40;
-var isDecisionShaped = (v) => isRecord2(v) && (("tool" in v) && (v.tool === null || typeof v.tool === "string") || ("reasoning" in v) && (("need_more_steps" in v) || ("needs_more_steps" in v) || ("requires_confirmation" in v)));
-function jsonObjectEnd(s2, start) {
-  let depth = 0;
-  let inStr = false;
-  let esc2 = false;
-  for (let i2 = start;i2 < s2.length; i2++) {
-    const c2 = s2[i2];
-    if (inStr) {
-      if (esc2)
-        esc2 = false;
-      else if (c2 === "\\")
-        esc2 = true;
-      else if (c2 === '"')
-        inStr = false;
-      continue;
-    }
-    if (c2 === '"')
-      inStr = true;
-    else if (c2 === "{")
-      depth++;
-    else if (c2 === "}") {
-      depth--;
-      if (depth === 0)
-        return i2 + 1;
-    }
-  }
-  return -1;
+// src/tools/harness-verify.ts
+var VERIFY_MAX_REVISIONS = 1;
+var VERIFY_MIN_CHARS = 400;
+var AUTO_FULL_MIN_CHARS = 1500;
+var VERIFY_CONTENT_CHAR_CAP = 24000;
+var VERIFY_SOURCE_CHAR_CAP = 12000;
+var VERIFIER_MAX_TOKENS = 600;
+function formatFindings(findings) {
+  return findings.map((f2, i2) => `${i2 + 1}. ${f2.issue}${f2.evidence ? ` (${f2.evidence})` : ""}`).join(`
+`);
 }
-function salvageReasoning(partial2) {
-  const raw = /"reasoning"\s*:\s*"((?:[^"\\]|\\.)*)"/.exec(partial2)?.[1];
-  if (raw === undefined)
-    return "";
-  try {
-    return String(JSON.parse(`"${raw}"`)).trim();
-  } catch {
-    return raw.trim();
-  }
+var TOOL_TAG_RE = /<tool_call\b|<function=|<parameter=|<tool_use\b|<file_path>/i;
+var ELISION_RE = /^[ \t]*(?:\/\/|#|\/\*|<!--)[ \t]*(?:\.{3}|\u2026)[ \t]*(?:rest|existing|remaining|other|previous|unchanged|same)\b|^[ \t]*(?:\/\/|#|\/\*)[ \t]*(?:rest of|remaining|existing)[ \t]+(?:the[ \t]+)?(?:code|file|implementation|content)\b/im;
+var LOADERS = {
+  ".ts": "ts",
+  ".tsx": "tsx",
+  ".js": "js",
+  ".mjs": "js",
+  ".cjs": "js",
+  ".jsx": "jsx"
+};
+function extOf(file2) {
+  const dot = file2.lastIndexOf(".");
+  return dot > file2.lastIndexOf("/") ? file2.slice(dot).toLowerCase() : "";
 }
-function decisionPackageText(json3) {
-  let parsed;
+function syntaxError(file2, content) {
+  const loader = LOADERS[extOf(file2)];
+  if (!loader)
+    return null;
+  const Transpiler = globalThis.Bun?.Transpiler;
+  if (!Transpiler)
+    return null;
   try {
-    parsed = JSON.parse(json3);
-  } catch {
-    return salvageReasoning(json3);
+    new Transpiler({ loader }).transformSync(content);
+    return null;
+  } catch (e3) {
+    const errs = e3.errors;
+    const msg = Array.isArray(errs) && errs.length > 0 ? errs.slice(0, 3).map((x) => x.message ?? String(x)).join("; ") : e3 instanceof Error ? e3.message : String(e3);
+    return clipText(msg, 300);
   }
-  if (!isDecisionShaped(parsed))
-    return json3;
-  return typeof parsed.reasoning === "string" ? parsed.reasoning.trim() : "";
 }
-function decisionJsonHoldFrom(s2) {
-  let hold = s2.length;
-  const open3 = s2.lastIndexOf("{");
-  if (open3 >= 0 && s2.length - open3 <= DECISION_JSON_HOLD_CHARS && DECISION_JSON_PREFIX_RE.test(s2.slice(open3))) {
-    hold = open3;
+function deterministicChecks(file2, content, mode) {
+  if (content.trim() === "")
+    return [{ issue: "content is empty", hard: true }];
+  const out = [];
+  const ext = extOf(file2);
+  if (TOOL_TAG_RE.test(content)) {
+    out.push({ issue: "content contains leaked tool-call markup", hard: true });
   }
-  const fence = DECISION_JSON_PARTIAL_FENCE_RE.exec(s2.slice(0, hold));
-  if (fence && fence.index >= hold - DECISION_JSON_HOLD_CHARS)
-    hold = fence.index;
-  return hold;
-}
-async function* guardDecisionJson(source) {
-  let pending2 = "";
-  let inPackage = false;
-  let dropCloseFence = false;
-  for await (const chunk of source) {
-    const d2 = chunk.delta;
-    if (!d2)
-      continue;
-    pending2 += d2;
-    for (;; ) {
-      if (inPackage) {
-        const end = jsonObjectEnd(pending2, 0);
-        if (end < 0)
-          break;
-        const text = decisionPackageText(pending2.slice(0, end));
-        pending2 = pending2.slice(end);
-        inPackage = false;
-        if (text)
-          yield { delta: text };
-        continue;
-      }
-      if (dropCloseFence) {
-        const t2 = pending2.trimStart();
-        if (t2 === "" || /^`{1,2}$/.test(t2))
-          break;
-        dropCloseFence = false;
-        if (t2.startsWith("```"))
-          pending2 = t2.slice(3);
-      }
-      const hit = DECISION_JSON_START_RE.exec(pending2);
-      if (hit) {
-        const head = pending2.slice(0, hit.index);
-        const fenced = DECISION_JSON_FENCE_TAIL_RE.test(head);
-        pending2 = pending2.slice(hit.index);
-        inPackage = true;
-        dropCloseFence = fenced;
-        const keep = fenced ? head.replace(DECISION_JSON_FENCE_TAIL_RE, "") : head;
-        if (keep)
-          yield { delta: keep };
-        continue;
+  if (/^```/.test(content.trimStart()) && ext !== ".md" && ext !== ".mdx") {
+    out.push({ issue: "content starts with a markdown code fence", hard: true });
+  }
+  if (mode === "write") {
+    const elision = DOC_EXT.has(ext) ? null : ELISION_RE.exec(content);
+    if (elision) {
+      out.push({
+        issue: "content contains an elision placeholder (e.g. 'rest of file unchanged'); a write must contain the complete file",
+        evidence: clipText(elision[0].trim(), 80)
+      });
+    }
+    if (ext === ".json" && !/(^|\/)(tsconfig|jsconfig)[^/]*\.json$/.test(file2)) {
+      try {
+        JSON.parse(content);
+      } catch (e3) {
+        out.push({
+          issue: "invalid JSON",
+          evidence: clipText(e3 instanceof Error ? e3.message : String(e3), 200),
+          hard: true
+        });
       }
-      const hold = decisionJsonHoldFrom(pending2);
-      const out = pending2.slice(0, hold);
-      pending2 = pending2.slice(hold);
-      if (out)
-        yield { delta: out };
-      break;
     }
-  }
-  if (inPackage) {
-    const text = salvageReasoning(pending2);
-    if (text)
-      yield { delta: text };
-  } else if (dropCloseFence && /^[\s`]*$/.test(pending2)) {} else if (pending2) {
-    yield { delta: pending2 };
-  }
-}
-var BASECODE_POINTER = "BASECODE.md exists at the repo root (architecture, conventions, commands) but is NOT inlined, to save tokens. " + 'Read it once with the "read" tool if the task needs project background; skip it for self-contained tasks.';
-var NO_BASECODE_NOTE = "No BASECODE.md yet (the user can run /init to generate one).";
-var GIT_INTENT = /\b(git|commit|committed|merge|push|pull|rebase|branch|branches|checkout|stash|tag|cherry-?pick|reset|revert|amend)\b/i;
-var NO_INLINE_CONTENT_RULE = {
-  role: "system",
-  content: `OUTPUT REMINDER: "write"/"append": set "content" to "" (the file is generated in a separate step; never inline source). ` + `"edit": "target" and "replacement" are REQUIRED, copied verbatim from file contents shown in context, kept small. ` + `"shell": "cmd" is REQUIRED (the literal command). "web_search": "content" is REQUIRED \u2014 a short, specific query ` + `(3-10 words) with no secrets, local paths or code; other fields null. "reasoning": ONE short sentence. ` + `"bg_start": "cmd" REQUIRED (the literal command), "target" = optional short name; "bg_logs"/"bg_kill": "target" = ` + `process id, name or port ("bg_kill" accepts "all"); "bg_list": nothing else. Never run servers/watchers via "shell". ` + `Your whole JSON must fit in ${DECISION_MAX_TOKENS} tokens or the step is wasted. ` + `For project background read BASECODE.md (not inlined); if none exists, tell the user to run /init.`
-};
-var BG_RULES_MESSAGE = { role: "system", content: BG_TOOL_RULES };
-var MAX_ASKS_PER_TASK = 2;
-var ASK_MAX_QUESTIONS = 4;
-var ASK_MAX_OPTIONS = 4;
-var ASK_MAX_QUESTION_CHARS = 400;
-var ASK_MAX_OPTION_CHARS = 120;
-var PENDING_BLOCKED_TOOLS = new Set(["write", "edit", "append", "shell", "bg_start"]);
-var QUESTION_CONTEXT_RE = /^\[(?:USER ANSWER|QUESTIONS ASKED)\]|^\[System\] QUESTIONS:/;
-var QUESTION_BLOCK_RE = /\? Questions for you \(\d+\):\n(?: {2}\d+\. .*\n)+\n?/g;
-var clipText = (s2, n3) => s2.length > n3 ? `${s2.slice(0, n3 - 1)}\u2026` : s2;
-function cleanAskOptions(v) {
-  if (!Array.isArray(v))
-    return [];
-  const seen = new Set;
-  const out = [];
-  for (const o2 of v) {
-    if (typeof o2 !== "string")
-      continue;
-    const t2 = o2.replace(/\s+/g, " ").trim().slice(0, ASK_MAX_OPTION_CHARS);
-    const key = t2.toLowerCase();
-    if (!t2 || seen.has(key))
-      continue;
-    seen.add(key);
-    out.push(t2);
-    if (out.length >= ASK_MAX_OPTIONS)
-      break;
+    const se = syntaxError(file2, content);
+    if (se)
+      out.push({ issue: "syntax error", evidence: se, hard: true });
   }
   return out;
 }
-function parseAskDecision(parsed) {
-  if (!isRecord2(parsed) || parsed.tool !== "ask_user_question")
-    return null;
-  const rawItems = [];
-  if (Array.isArray(parsed.questions))
-    rawItems.push(...parsed.questions);
-  else if (typeof parsed.question === "string") {
-    rawItems.push({ question: parsed.question, options: parsed.options });
+function parseVerifyMode(v) {
+  const x = (v ?? "").trim().toLowerCase();
+  if (x === "off" || x === "0" || x === "false")
+    return "off";
+  if (x === "checks")
+    return "checks";
+  if (x === "full" || x === "1" || x === "true")
+    return "full";
+  return "auto";
+}
+var DOC_EXT = new Set([".md", ".mdx", ".txt", ".rst"]);
+function chooseVerifyLevel(a2) {
+  if (a2.mode === "checks" || a2.mode === "full")
+    return a2.mode;
+  const shrinks = a2.tool === "write" && a2.currentFile.length >= 400 && a2.content.length < a2.currentFile.length * 0.5;
+  if (shrinks)
+    return "full";
+  if (DOC_EXT.has(extOf(a2.file)))
+    return "checks";
+  const overwrite = a2.tool === "write" && a2.currentFile.trim() !== "";
+  if (overwrite && a2.content.length >= VERIFY_MIN_CHARS)
+    return "full";
+  if (a2.content.length >= AUTO_FULL_MIN_CHARS)
+    return "full";
+  return "checks";
+}
+var VERIFIER_SYSTEM = `You are a strict reviewer. You did NOT write the proposed content below; your only job is to find concrete, checkable problems in it. Do not praise it.
+` + `Check ONLY these:
+` + `1. It does what the TASK and INTENT ask. Missing or contradicted requirements count.
+` + `2. It does not reference imports, functions, files, fields or APIs that appear in neither the SOURCES nor the standard library / well-known packages.
+` + `3. For a whole-file REPLACE: it does not silently drop existing behaviour from CURRENT FILE that the task did not ask to remove.
+` + `4. It is complete: no TODO stubs standing in for required logic, no "rest unchanged" elisions, no truncated ending.
+` + `Do NOT fail for style, naming, formatting or optional improvements. If you cannot tell from the SOURCES, pass.
+` + `Respond with ONLY one JSON object: {"pass": boolean, "failures": [{"issue": string, "evidence": string}]}. ` + `"failures" is empty when pass is true. Each evidence is a short quote or location from the content.`;
+async function modelVerify(a2, content) {
+  const target = a2.mode === "append" ? "the content below will be APPENDED to the end of the file" : a2.currentFile ? "the content below will REPLACE the whole file" : "this is a NEW file";
+  const sources = a2.sources.map((s2, i2) => `[Source ${i2 + 1}]
+${clipText(s2, 5000)}`).join(`
+
+`);
+  const user = `TASK (the user's request):
+${clipText(a2.task, 1500)}
+
+` + `INTENT of this step:
+${clipText(a2.intent, 500)}
+
+` + `TARGET FILE: ${a2.file} (${target})
+
+` + (a2.currentFile ? `CURRENT FILE ON DISK:
+${clipText(a2.currentFile, VERIFY_SOURCE_CHAR_CAP / 2)}
+
+` : "") + (sources ? `SOURCES (files the agent read):
+${sources}
+
+` : "") + `PROPOSED CONTENT:
+${clipText(content, VERIFY_CONTENT_CHAR_CAP)}`;
+  let raw = "";
+  try {
+    raw = await a2.chat([
+      { role: "system", content: VERIFIER_SYSTEM },
+      { role: "user", content: user }
+    ], VERIFIER_MAX_TOKENS);
+  } catch {
+    return { available: false, failures: [] };
   }
-  const questions = [];
-  const seen = new Set;
-  for (const item of rawItems) {
-    let text = "";
-    let options = [];
-    if (typeof item === "string") {
-      text = item;
-    } else if (isRecord2(item) && typeof item.question === "string") {
-      text = item.question;
-      options = cleanAskOptions(item.options);
+  const json3 = extractFirstJsonObject(raw);
+  if (!json3)
+    return { available: false, failures: [] };
+  let parsed;
+  try {
+    parsed = JSON.parse(json3);
+  } catch {
+    return { available: false, failures: [] };
+  }
+  if (!isRecord2(parsed) || typeof parsed.pass !== "boolean") {
+    return { available: false, failures: [] };
+  }
+  if (parsed.pass)
+    return { available: true, failures: [] };
+  const failures = (Array.isArray(parsed.failures) ? parsed.failures : []).filter(isRecord2).map((f2) => ({
+    issue: String(f2.issue ?? "").trim().slice(0, 300),
+    evidence: f2.evidence ? String(f2.evidence).trim().slice(0, 300) : undefined
+  })).filter((f2) => f2.issue !== "").slice(0, 5);
+  return { available: true, failures };
+}
+async function verifyBeforeWrite(a2) {
+  let content = a2.content;
+  let revisions = 0;
+  let verifierCalls = 0;
+  let verifierUnavailable = false;
+  let findings = [];
+  let cleanDraft = null;
+  let cleanDraftFindings = [];
+  const result = (c2, status, f2) => ({
+    content: c2,
+    status,
+    findings: f2,
+    revisions,
+    verifierCalls,
+    verifierUnavailable
+  });
+  for (;; ) {
+    const det = deterministicChecks(a2.file, content, a2.mode);
+    findings = det;
+    if (a2.level === "full" && det.length === 0 && !a2.isCancelled?.()) {
+      verifierCalls++;
+      const v = await modelVerify(a2, content);
+      if (v.available)
+        findings = v.failures;
+      else
+        verifierUnavailable = true;
     }
-    text = text.replace(/\s+/g, " ").trim().slice(0, ASK_MAX_QUESTION_CHARS);
-    const key = text.toLowerCase();
-    if (!text || seen.has(key))
-      continue;
-    seen.add(key);
-    questions.push({ question: text, options });
-    if (questions.length >= ASK_MAX_QUESTIONS)
+    if (!findings.some((f2) => f2.hard)) {
+      cleanDraft = content;
+      cleanDraftFindings = findings;
+    }
+    if (findings.length === 0)
+      return result(content, "verified", []);
+    if (revisions >= VERIFY_MAX_REVISIONS || a2.isCancelled?.())
+      break;
+    revisions++;
+    const first = findings[0];
+    a2.log?.(`Revising ${a2.file}: ${first?.issue ?? "failed check"}${first?.evidence ? ` [${first.evidence}]` : ""}`);
+    let revised = "";
+    try {
+      revised = await a2.revise(content, findings);
+    } catch {}
+    if (revised.trim() === "" || revised === content)
       break;
+    content = revised;
   }
-  return {
-    questions,
-    ignore: parsed.ignore === true,
-    reasoning: typeof parsed.reasoning === "string" ? parsed.reasoning.slice(0, 1000) : ""
-  };
+  if (findings.some((f2) => f2.hard)) {
+    if (cleanDraft !== null)
+      return result(cleanDraft, "unverified", cleanDraftFindings);
+    return result(content, "blocked", findings);
+  }
+  return result(content, "unverified", findings);
 }
-var QUESTIONS_RULE = {
-  role: "system",
-  content: `ASK TOOL: to ask the user something, return {"tool":"ask_user_question","questions":[{"question":"...","options":["...","..."]}],` + `"reasoning":"...","need_more_steps":true}. 1-${ASK_MAX_QUESTIONS} questions, each self-contained, with 2-${ASK_MAX_OPTIONS} mutually ` + `exclusive options (recommended first) or an empty options array for an open question. A single {"question","options"} pair is also accepted. ` + `All other fields null. The questions are shown to the user as a questionnaire; after asking you MUST stop and wait. ` + `Never ask while questions are pending, never re-ask something already answered (the answers are listed under "USER ANSWERS" in the task), ` + `at most ${MAX_ASKS_PER_TASK} asks per task. To drop the pending questions because the user's message makes them moot, return ` + `{"tool":"ask_user_question","ignore":true,"reasoning":"..."}.`
-};
-var JEV_BYPASS = {
-  unavailable: true,
-  tool: "none",
-  needMoreSteps: false,
-  confidence: 0,
-  reasoning: ""
-};
-var MEMORY_CHAR_CAP = 6000;
-var MEMORY_MAX_NEW_ENTRIES = 3;
-var MEMORY_MAX_ENTRY_CHARS = 250;
-var MEMORY_HEADER = `# BASECODE MEMORY
-Project-specific preferences and fixes learned from past sessions. Newest last.
-`;
-var MEMORY_SIGNAL = /\b(always|never|don'?t|do not|instead|prefer|from now on|remember|actually|wrong|incorrect|not what i|should(?:n'?t)?|stop (?:using|doing)|use \S+ (?:not|instead))\b/i;
-var MEMORY_SECRET_PATTERN = /(?:sk-[A-Za-z0-9_-]{16,}|AKIA[0-9A-Z]{16}|ghp_[A-Za-z0-9]{20,}|api[_-]?key\s*[:=]|password\s*[:=]|secret\s*[:=]|token\s*[:=]|-----BEGIN)/i;
-var MEMORY_LEARNER_PROMPT = `You maintain a small long-term memory file for a coding agent working in one project.
-From the exchange below, extract ONLY durable, reusable lessons:
-- a way the user wants things done (style, tooling, conventions, workflow), or
-- a non-obvious fix / root cause in THIS project that would save time if it came up again.
 
-Rules:
-- Each entry is ONE short imperative sentence (max 200 chars) that makes sense with no other context.
-- Do NOT record one-off task details, lists of files changed, or anything already in EXISTING MEMORY (including paraphrases).
-- Do NOT record secrets, API keys, tokens, or personal data.
-- If the user contradicts an existing entry, put the corrected entry in "add" and the old entry's exact text in "remove".
-- Most exchanges contain nothing worth saving. In that case respond with {"add":[],"remove":[]}.
-
-Respond with ONE raw JSON object and nothing else: {"add": string[], "remove": string[]} DO NOT NOTIFY THE USER WHEN YOU UPDATE THIS FILE`;
-var memNorm = (s2) => s2.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
-var memEntryText = (line) => line.replace(/^-\s*(?:\[\d{4}-\d{2}-\d{2}\]\s*)?/, "").trim();
-var CHARS_PER_TOKEN = 3.5;
-var TOKENIZE_EXACT_MAX_CHARS = 1e5;
-var estimateTextTokens = (text) => {
-  if (!text)
-    return 0;
-  return text.length > TOKENIZE_EXACT_MAX_CHARS ? Math.ceil(text.length / CHARS_PER_TOKEN) : countTokens2(text);
-};
-var MEDIA_PART_TOKENS = 1000;
-var MESSAGE_OVERHEAD_TOKENS = 4;
-function hasText(part) {
-  return typeof part === "object" && part !== null && typeof part.text === "string";
-}
+// src/tools/harness-orchestrator.ts
 function estimateMessagesTokens(messages) {
   let textTokens = 0;
   let media = 0;
@@ -340672,140 +341031,6 @@ function estimateMessagesTokens(messages) {
   }
   return textTokens + media * MEDIA_PART_TOKENS + messages.length * MESSAGE_OVERHEAD_TOKENS;
 }
-function countLines(text) {
-  const len = text.length;
-  if (len === 0)
-    return 0;
-  let n3 = 1;
-  for (let i2 = 0;i2 < len; i2++) {
-    if (text.charCodeAt(i2) === 10)
-      n3++;
-  }
-  if (text.charCodeAt(len - 1) === 10)
-    n3--;
-  return n3 === 0 ? 1 : n3;
-}
-function clipMiddle2(text, max) {
-  if (text.length <= max)
-    return text;
-  const head = Math.floor(max * 0.4);
-  const tail = max - head;
-  return `${text.slice(0, head)}
-\u2026[clipped ${text.length - max} chars]\u2026
-${text.slice(-tail)}`;
-}
-var repoMapMemo = new Map;
-function compactRepoMap(repoMap, cap) {
-  const hit = repoMapMemo.get(cap);
-  if (hit && hit.src === repoMap)
-    return hit.out;
-  let out;
-  try {
-    const paths = flattenRepoMap(repoMap);
-    if (paths.length === 0) {
-      out = repoMap.slice(0, cap);
-    } else {
-      const byDir = new Map;
-      for (const p of paths) {
-        const d2 = dirname(p);
-        const base = d2 === "." ? p : p.slice(d2.length + 1);
-        const list = byDir.get(d2);
-        if (list)
-          list.push(base);
-        else
-          byDir.set(d2, [base]);
-      }
-      const lines = [];
-      let total = 0;
-      let listed = 0;
-      for (const [d2, files] of [...byDir].sort(([a2], [b]) => a2 < b ? -1 : a2 > b ? 1 : 0)) {
-        const line = `${d2 === "." ? "./" : `${d2}/`} ${files.join(" ")}`;
-        if (total + line.length > cap)
-          break;
-        lines.push(line);
-        total += line.length + 1;
-        listed += files.length;
-      }
-      const omitted = paths.length - listed;
-      out = lines.join(`
-`) + (omitted > 0 ? `
-(+${omitted} more files not listed; use find/grep to explore)` : "");
-    }
-  } catch {
-    out = repoMap.slice(0, cap);
-  }
-  repoMapMemo.set(cap, { src: repoMap, out });
-  return out;
-}
-async function readCappedStream(stream4, cap = SHELL_OUTPUT_BYTE_CAP) {
-  if (!stream4)
-    return "";
-  const reader = stream4.getReader();
-  const decoder3 = new TextDecoder;
-  const parts = [];
-  let size = 0;
-  let truncated = false;
-  try {
-    while (size < cap) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      if (!value)
-        continue;
-      size += value.byteLength;
-      parts.push(decoder3.decode(value, { stream: true }));
-    }
-    if (size >= cap)
-      truncated = true;
-  } catch {} finally {
-    try {
-      await reader.cancel();
-    } catch {}
-  }
-  let out = parts.join("");
-  parts.length = 0;
-  if (out.length > cap)
-    out = out.slice(0, cap);
-  return truncated ? `${out}
-\u2026[output truncated at ${cap} bytes]` : out;
-}
-function buildAttachmentPart(provider, mimeType, output2) {
-  const key = provider.toUpperCase();
-  const isText = mimeType.startsWith("text/");
-  if (key === "GOOGLE") {
-    return isText ? { text: output2 } : { inlineData: { mimeType, data: output2 } };
-  }
-  if (key === "ANTHROPIC") {
-    return {
-      type: mimeType.startsWith("image/") ? "image" : "document",
-      source: { type: "base64", media_type: mimeType, data: output2 }
-    };
-  }
-  if (key === "OPENAI" || key === "GROQ" || key === "VENICE") {
-    return isText ? { type: "text", text: output2 } : { type: "image_url", image_url: { url: `data:${mimeType};base64,${output2}` } };
-  }
-  return { type: "text", text: output2 };
-}
-function foldMediaParts(messages) {
-  let hasMedia = false;
-  for (const m of messages) {
-    if (m && Array.isArray(m.mediaParts) && m.mediaParts.length > 0) {
-      hasMedia = true;
-      break;
-    }
-  }
-  if (!hasMedia)
-    return messages;
-  return messages.map((m) => {
-    if (!m || !Array.isArray(m.mediaParts) || m.mediaParts.length === 0)
-      return m;
-    const { mediaParts, ...rest } = m;
-    const text = typeof rest.content === "string" ? rest.content : "";
-    const parts = [...text ? [{ type: "text", text }] : [], ...mediaParts];
-    return { ...rest, content: parts };
-  });
-}
-var TOOL_HISTORY_CAP = 20;
 
 class HarnessOrchestrator {
   REPO_MAP = "";
@@ -340831,6 +341056,124 @@ class HarnessOrchestrator {
     this.totalUsedContext = countTokens2(this.buildDecisionPrompt(false));
   }
   filePluginHandler = null;
+  static VERIFY_MODE = parseVerifyMode("full");
+  verifyStats = {
+    checked: 0,
+    full: 0,
+    revised: 0,
+    verifierCalls: 0,
+    unverified: 0,
+    blocked: 0
+  };
+  getVerifyStats() {
+    return { ...this.verifyStats };
+  }
+  async* preWriteGate(ctx, a2) {
+    const mode = HarnessOrchestrator.VERIFY_MODE;
+    if (mode === "off") {
+      return {
+        content: a2.content,
+        status: "verified",
+        findings: [],
+        revisions: 0,
+        verifierCalls: 0,
+        verifierUnavailable: false
+      };
+    }
+    const currentFile = existsSync(a2.filePath) ? await readFileContent(a2.filePath).catch(() => "") : "";
+    const level = chooseVerifyLevel({
+      mode,
+      file: a2.displayPath,
+      tool: a2.tool,
+      content: a2.content,
+      currentFile
+    });
+    const lines = [];
+    const out = yield* this.pump(verifyBeforeWrite({
+      file: a2.displayPath,
+      mode: a2.tool,
+      content: a2.content,
+      task: ctx.userTask,
+      intent: a2.intent,
+      currentFile,
+      sources: level === "full" ? this.verifySources(ctx, a2.displayPath) : [],
+      level,
+      isCancelled: this.isCancelled,
+      log: (l) => lines.push(l),
+      chat: (messages, maxTokens) => this.routedChat(a2.verifierModelId, messages, 0.1, maxTokens).then((r) => r.content),
+      revise: (draft, findings) => this.reviseContent(ctx, a2, draft, findings)
+    }));
+    const s2 = this.verifyStats;
+    s2.checked++;
+    if (level === "full")
+      s2.full++;
+    s2.revised += out.revisions;
+    s2.verifierCalls += out.verifierCalls;
+    if (out.status === "unverified")
+      s2.unverified++;
+    if (out.status === "blocked")
+      s2.blocked++;
+    for (const l of lines)
+      yield { delta: `- ${l}
+` };
+    if (out.status === "unverified") {
+      yield {
+        delta: `- ${a2.displayPath} did not pass every check (${out.findings[0]?.issue ?? "see findings"}); writing it anyway and flagging it
+
+`
+      };
+    }
+    if (DEBUG_TRACE) {
+      yield {
+        delta: `[debug] pre-write gate: ${out.status}, ${out.verifierCalls} verifier call(s), ${out.revisions} revision(s)
+`
+      };
+    }
+    return out;
+  }
+  async reviseContent(ctx, a2, draft, findings) {
+    const res = await this.routedChat(ctx.modelId, [
+      {
+        role: "system",
+        content: `RAW CODE OUTPUT MODE. Respond with ONLY the raw ${a2.tool === "append" ? "text to append" : "complete file"}. ` + `No JSON, no markdown fences, no commentary. The first character of your response must be the first character of the content.`
+      },
+      ...this.memoryMessages(),
+      {
+        role: "user",
+        content: `Task: ${clipText(ctx.userTask, 3000)}
+` + `Target file: ${a2.targetFile}
+
+` + `Your previous draft was rejected for these problems:
+${formatFindings(findings)}
+
+` + `Previous draft:
+${draft}
+
+` + `Return the corrected ${a2.tool === "append" ? "text to append" : "complete file"}. ` + `Fix only the listed problems and keep everything else unchanged.`
+      }
+    ], 0.2, CONTENT_MAX_TOKENS);
+    if (res.content.startsWith("AGENT LOOP FAILED"))
+      return "";
+    let text = res.content.replace(/^```[a-z]*\n?|\n?```$/g, "").trim();
+    const { unwrapped, wasWrapper } = tryUnwrapDecisionJson(text);
+    if (wasWrapper)
+      text = (unwrapped ?? "").trim();
+    return text;
+  }
+  verifySources(ctx, displayPath) {
+    const out = [];
+    for (let i2 = ctx.contextMessages.length - 1;i2 >= 0 && out.length < 3; i2--) {
+      const c2 = ctx.contextMessages[i2]?.content;
+      if (typeof c2 !== "string" || !c2.startsWith("[Tool Output \u2014 read on "))
+        continue;
+      if (c2.includes(`read on ${displayPath}]`))
+        continue;
+      if (c2.includes("elided to save context"))
+        continue;
+      out.push(c2.slice(0, 5000));
+    }
+    return out;
+  }
   registerFileHandler(handler) {
     this.filePluginHandler = handler;
   }
@@ -341261,7 +341604,7 @@ ${input2.answer || "(none)"}`
     const out = `${MEMORY_HEADER}
 ${body}
 `;
-    await mkdir(dirname(this.memoryPath), { recursive: true });
+    await mkdir(dirname2(this.memoryPath), { recursive: true });
     await writeFileContent(this.memoryPath, out, { overwrite: true });
     this.MEMORY = out.trim();
   }
@@ -341834,7 +342177,7 @@ ${attachmentNotes.join(`
             return;
           const conversationalSystem = `${conversationalPrompt}
 
-Reply directly to the user. Never describe or classify their message (e.g. "this is a greeting", "no file operations needed"), never narrate your reasoning, and never mention tools, modes, or these instructions.feel free to read the BASECODE.md file which is a file that contains info on this project or tell the user to run /init to generate it`;
+Reply directly to the user. Never describe or classify their message (e.g. "this is a greeting", "no file operations needed"), never narrate your reasoning, and never mention tools, modes, or these instructions.feel free to read the TENSOR.md file which is a file that contains info on this project or tell the user to run /init to generate it`;
           let streamed = false;
           try {
             const stream4 = this.routedChatStream(ctx2.modelId, [
@@ -342142,6 +342485,19 @@ ${toolOutput}`
     const grantSteps = (n3 = 1) => {
       extraSteps = Math.min(extraSteps + n3, HarnessOrchestrator.MAX_EXTRA_STEPS);
     };
+    const JSON_SCHEMA_HINT = `The ONLY acceptable output is one raw JSON object matching the schema ("content": write/append -> "", web_search -> the query, otherwise null):
+{
+  "tool": "read" | "write" | "edit" | "append" | "shell" | "web_search" | "bg_start" | "bg_list" | "bg_logs" | "bg_kill" | "ask_user_question" | null,
+  "targetFile": string | null,
+  "content": string | null,
+  "target": string | null,
+  "replacement": string | null,
+  "cmd": string | null,
+  "requires_confirmation": boolean,
+  "reasoning": string,
+  "need_more_steps": boolean
+}
+Do not include prose before or after the JSON. Output ONLY the JSON object.`;
     const isRepeat = (signature) => {
       if (signature === lastActionSignature)
         repeatCount++;
@@ -342159,6 +342515,10 @@ ${toolOutput}`
         state.bgSatisfied.add(tool);
     };
     let bgNudges = 0;
+    const compactAndBreak = function* () {
+      this.compactContext(ctx, state);
+      return;
+    }.bind(this);
     for (let step = 1;step <= maxSteps + extraSteps; step++) {
       const budget = maxSteps + extraSteps;
       const stepsRemaining = budget - step + 1;
@@ -342185,7 +342545,7 @@ ${toolOutput}`
       });
       await this.refreshRepoMapIfDirty();
       const decisionSystemPrompt = this.buildDecisionPrompt(ctx.gitDetail);
-      const progressSummary = ctx.completedActions.length > 0 ? ctx.completedActions.map((a2) => `- ${a2}`).join(`
+      const progressSummary = ctx.completedActions.length > 0 ? ctx.completedActions.map((a2) => `- ${a2.slice(0, 160)}`).join(`
 `) : "";
       const jevTail = this.jevTail(ctx, lastAgentProse);
       const jevChoice = bgPending() || !this.isAnswered ? JEV_BYPASS : await this.classify(ctx, {
@@ -342280,32 +342640,21 @@ Please try a different model(retry in 30 seconds) or check with your provider.
 
 `
           };
+          this.compactContext(ctx, state);
           break;
         }
         const { hint } = await classifyMalformedOutput(res.content);
         const toolUseBlockCount = (res.content.match(/<tool_call\b|<tool_use\b/gi) ?? []).length;
         ctx.contextMessages.push({
           role: "user",
-          content: `[System Corrector] Your last response failed to parse as the required JSON \u2014 classified as: ${hint} ` + `YOU DO HAVE TOOLS \u2014 do not claim otherwise. Do NOT use XML tags, angle brackets ("<" / ">"), native ` + `function blocks, or any markup syntax. Never emit "<tool_call>", "<function=", "<parameter=", "<tool_use>", or "<file_path>".` + (toolUseBlockCount > 1 ? ` You also attempted to batch ${toolUseBlockCount} tool calls in one response \u2014 you get exactly ONE tool call per turn.` : "") + ` The ONLY acceptable output is one raw JSON object matching the schema ("content": write/append -> "", web_search -> the query, otherwise null):
-{
-  "tool": "read" | "write" | "edit" | "append" | "shell" | "web_search" | "bg_start" | "bg_list" | "bg_logs" | "bg_kill" | "ask_user_question" | null,
-  "targetFile": string | null,
-  "content": string | null,
-  "target": string | null,
-  "replacement": string | null,
-  "cmd": string | null,
-  "requires_confirmation": boolean,
-  "reasoning": string,
-  "need_more_steps": boolean
-}
-Do not include prose before or after the JSON. Output ONLY the JSON object.` + (jevTool ? ` Remember: "tool" must be exactly "${jevTool}".` : "")
+          content: `[System Corrector] Your last response failed to parse as the required JSON \u2014 classified as: ${hint} ` + `YOU DO HAVE TOOLS \u2014 do not claim otherwise. Do NOT use XML tags, angle brackets ("<" / ">"), native ` + `function blocks, or any markup syntax. Never emit "<tool_call>", "<function=", "<parameter=", "<tool_use>", or "<file_path>".` + (toolUseBlockCount > 1 ? ` You also attempted to batch ${toolUseBlockCount} tool calls in one response \u2014 you get exactly ONE tool call per turn.` : "") + ` ${JSON_SCHEMA_HINT}` + (jevTool ? ` Remember: "tool" must be exactly "${jevTool}".` : "")
         });
         continue;
       }
       const bgParsed = isRecord2(parsed) ? parseBgDecision(parsed) : null;
       if (bgParsed) {
         jsonFailureCount = 0;
-        lastAgentProse = bgParsed.reasoning;
+        lastAgentProse = (bgParsed.reasoning ?? "").slice(0, 1000);
         if (!this.isAnswered && bgParsed.tool === "bg_start") {
           const held = this.recordToolCall(step, {
             tool: bgParsed.tool,
@@ -342321,22 +342670,27 @@ Do not include prose before or after the JSON. Output ONLY the JSON object.` + (
             role: "user",
             content: `[System] QUESTIONS: unanswered questions are pending, so write/edit/append/shell/bg_start are on hold. Wait for the user or return {"tool": null}.`
           });
+          this.compactContext(ctx, state);
           break;
         }
         const r = yield* this.runBgTool(ctx, state, step, bgParsed, isRepeat);
         if (r.ok)
           markBgDone(bgParsed.tool);
-        if (r.stop)
+        if (r.stop) {
+          this.compactContext(ctx, state);
           break;
+        }
         continue;
       }
       const askParsed = parseAskDecision(parsed);
       if (askParsed) {
         jsonFailureCount = 0;
-        lastAgentProse = askParsed.reasoning;
+        lastAgentProse = (askParsed.reasoning ?? "").slice(0, 1000);
         const r = yield* this.runAskTool(ctx, step, askParsed);
-        if (r.stop)
+        if (r.stop) {
+          this.compactContext(ctx, state);
           break;
+        }
         continue;
       }
       let decision;
@@ -342352,6 +342706,7 @@ Do not include prose before or after the JSON. Output ONLY the JSON object.` + (
 I didn't quite get that am having this issue:${issueSummary},please retry in 30 seconds
 `
           };
+          this.compactContext(ctx, state);
           break;
         }
         ctx.contextMessages.push({
@@ -342380,6 +342735,7 @@ I didn't quite get that am having this issue:${issueSummary},please retry in 30
           role: "user",
           content: `[System] QUESTIONS: unanswered questions are pending, so write/edit/append/shell/bg_start are on hold. Wait for the user or return {"tool": null}.`
         });
+        this.compactContext(ctx, state);
         break;
       }
       if (!ctx.isPlanMode && decision.tool === "shell" && decision.cmd && LONG_RUNNING_SHELL_RE.test(decision.cmd)) {
@@ -342395,8 +342751,10 @@ I didn't quite get that am having this issue:${issueSummary},please retry in 30
         const r = yield* this.runBgTool(ctx, state, step, rerouted, isRepeat);
         if (r.ok)
           markBgDone("bg_start");
-        if (r.stop)
+        if (r.stop) {
+          this.compactContext(ctx, state);
           break;
+        }
         continue;
       }
       const call = decision.tool ? this.recordToolCall(step, {
@@ -342415,6 +342773,7 @@ I didn't quite get that am having this issue:${issueSummary},please retry in 30
           role: "user",
           content: `[System] Plan mode only allows "read", "web_search", "bg_list", "bg_logs" and "ask_user_question". Use one of those or return {"tool": null}.`
         });
+        this.compactContext(ctx, state);
         break;
       }
       if ((decision.tool === "write" || decision.tool === "append") && typeof decision.content === "string" && decision.content.length > HarnessOrchestrator.INLINE_CONTENT_CHAR_BUDGET) {
@@ -342423,8 +342782,10 @@ I didn't quite get that am having this issue:${issueSummary},please retry in 30
       try {
         let verifiedContentOverride = null;
         if (!decision.tool) {
-          if (!this.isAnswered)
+          if (!this.isAnswered) {
+            this.compactContext(ctx, state);
             break;
+          }
           if (bgPending() && bgNudges < 2) {
             bgNudges++;
             grantSteps();
@@ -342451,10 +342812,12 @@ I didn't quite get that am having this issue:${issueSummary},please retry in 30
             });
             continue;
           }
+          this.compactContext(ctx, state);
           break;
         }
         if (decision.tool !== "shell" && decision.tool !== "web_search" && !decision.targetFile) {
           this.settleToolCall(call, "skipped", "missing targetFile");
+          this.compactContext(ctx, state);
           break;
         }
         if (decision.tool === "shell" && !decision.cmd) {
@@ -342522,6 +342885,7 @@ I didn't quite get that am having this issue:${issueSummary},please retry in 30
             role: "user",
             content: `[System] Same tool call issued twice in a row. Stopping tool loop.`
           });
+          this.compactContext(ctx, state);
           break;
         }
         if (decision.tool === "shell" && decision.cmd) {
@@ -342645,6 +343009,43 @@ ${truncateForContext(priorFileSnapshot)}
           }
         }
         ctx.updateThinkingWord?.("toolLeveraging");
+        if (HarnessOrchestrator.VERIFY_MODE !== "off" && (decision.tool === "write" || decision.tool === "append") && typeof decision.content === "string" && decision.content.trim() !== "") {
+          const draft = decision.content;
+          const gate = yield* this.preWriteGate(ctx, {
+            tool: decision.tool,
+            targetFile: decision.targetFile,
+            displayPath,
+            filePath,
+            content: draft,
+            intent: decision.reasoning ?? "",
+            verifierModelId: decisionModelId
+          });
+          if (gate.status === "blocked") {
+            this.settleToolCall(call, "refused", `pre-write check failed: ${gate.findings[0]?.issue ?? "invalid content"}`);
+            yield { delta: `- Not written: ${displayPath} failed pre-write checks
+
+` };
+            ctx.contextMessages.push({
+              role: "user",
+              content: `[System] The content for "${decision.targetFile}" failed checks and was NOT written:
+${formatFindings(gate.findings)}
+Fix these and try again, or return {"tool": null}.`
+            });
+            continue;
+          }
+          if (gate.content !== draft) {
+            decision = { ...decision, content: gate.content };
+            verifiedContentOverride = null;
+          }
+          if (gate.status === "unverified") {
+            ctx.contextMessages.push({
+              role: "user",
+              content: `[System] "${decision.targetFile}" is being written but did not pass every check:
+${formatFindings(gate.findings)}
+Tell the user about these in your final answer.`
+            });
+          }
+        }
         const breakOnSemicolons = (text, indent = "   ") => {
           return text.replace(/; ?/g, `;
 ${indent}`);
@@ -342654,9 +343055,10 @@ ${indent}`);
         if (decision.tool === "read") {
           try {
             readRaw = await readFileContent(filePath);
-            const lineCount = countLines(readRaw);
+            const totalLen = readRaw.length;
             const head = readRaw.slice(0, 100).replace(/\s+/g, " ").trim();
-            readPreview = breakOnSemicolons(`${head}${readRaw.length > 100 ? "\u2026" : ""}   (${lineCount > 20 ? lineCount - 5 : lineCount} ${lineCount === 1 ? "line" : "lines+"})
+            const lineCount = countLines(readRaw);
+            readPreview = breakOnSemicolons(`${head}${totalLen > 100 ? "\u2026" : ""}   (${lineCount > 20 ? lineCount - 5 : lineCount} ${lineCount === 1 ? "line" : "lines+"})
 `);
           } catch {
             readPreview = "(unable to preview)";
@@ -342674,7 +343076,7 @@ ${indent}`);
         yield { delta: `${actionLabel}
 ` };
         if (decision.tool === "write" || decision.tool === "append") {
-          const dir = dirname(filePath);
+          const dir = dirname2(filePath);
           if (!knownDirs.has(dir)) {
             try {
               await mkdir(dir, { recursive: true });
@@ -342690,8 +343092,9 @@ ${indent}`);
               toolOutput = "Failed to read file.";
               break;
             }
-            toolOutput = readRaw.length > TOOL_OUTPUT_CHAR_CAP ? `${readRaw.slice(0, TOOL_OUTPUT_CHAR_CAP)}
-\u2026[truncated: file is ${readRaw.length} chars; use shell "sed -n 'START,ENDp' <file>" or "grep -n" to view other ranges]` : readRaw;
+            const totalLen = readRaw.length;
+            toolOutput = totalLen > TOOL_OUTPUT_CHAR_CAP ? `${readRaw.slice(0, TOOL_OUTPUT_CHAR_CAP)}
+\u2026[truncated: file is ${totalLen} chars; use shell "sed -n 'START,ENDp' <file>" or "grep -n" to view other ranges]` : readRaw;
             readRaw = null;
             executedReads.add(readKey);
             break;
@@ -342773,7 +343176,7 @@ ${indent}`);
               toolOutput = `Exit code ${exitCode}
 ${truncateForContext(combined)}`;
               if (exitCode === 0) {
-                ctx.completedActions.push(`Ran: ${cmd}`);
+                ctx.completedActions.push(`Ran: ${cmd.slice(0, 120)}`);
                 if (HarnessOrchestrator.TREE_MUTATING_SHELL.test(cmd))
                   this.markRepoMapDirty();
                 if (HarnessOrchestrator.BRANCH_CREATE_PATTERN.test(cmd)) {
@@ -342832,7 +343235,7 @@ ${toolOutput}`
           });
         }
         toolOutput = "";
-        if (mutationSucceeded && decision.content && decision.content.length > 4000) {
+        if (mutationSucceeded && decision.content) {
           decision = { ...decision, content: "" };
         }
         if (mutationSucceeded) {
@@ -342862,6 +343265,7 @@ ${toolOutput}`
         yield { delta: `
 [Tool loop stopped: unexpected error \u2014 ${errorMessage(e3)}]
 ` };
+        this.compactContext(ctx, state);
         break;
       }
     }
@@ -344089,7 +344493,7 @@ var ModelProvider = ({ children }) => {
     const fetchCurrentSavedActiveAgent = async () => {
       try {
         const fileName = "ACTIVE_AGENT.json";
-        const storagePath = path6.join(os3.homedir(), ".basecode", fileName);
+        const storagePath = path6.join(os3.homedir(), ".tensor", fileName);
         const agent2 = await readFromFile(storagePath);
         setActiveModel(JSON.parse(agent2));
       } catch (_e) {
@@ -344443,7 +344847,7 @@ var Header = () => {
           }, undefined, false, undefined, this),
           /* @__PURE__ */ import_jsx_dev_runtime2.jsxDEV("text", {
             fg: t2.inkFaint,
-            children: "v0.1.3@beta-lite"
+            children: "v0.1.5@beta-lite"
           }, undefined, false, undefined, this)
         ]
       }, undefined, true, undefined, this),
@@ -355432,7 +355836,7 @@ var Message_default = Index;
 // src/components/DiffView/index.tsx
 import { rmSync, statSync as statSync2 } from "fs";
 import { tmpdir } from "os";
-import { dirname as dirname2, join as join3 } from "path";
+import { dirname as dirname3, join as join3 } from "path";
 var COLORS2 = {
   addBg: "#1a2e1a",
   delBg: "#3e1a1a",
@@ -355467,7 +355871,7 @@ var modifiedAt = (path19) => {
     return statSync2(join3(root, path19)).mtimeMs;
   } catch {
     try {
-      return statSync2(join3(root, dirname2(path19))).mtimeMs;
+      return statSync2(join3(root, dirname3(path19))).mtimeMs;
     } catch {
       return 0;
     }