zelari-code 2.16.5 → 2.18.0

package/dist/cli/main.bundled.js

@@ -3288,10 +3288,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path87) {
-  if (!path87)
+function getElementAtPath(obj, path91) {
+  if (!path91)
     return obj;
-  return path87.reduce((acc, key) => acc?.[key], obj);
+  return path91.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -3619,11 +3619,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path87, issues) {
+function prefixIssues(path91, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path87);
+    iss.path.unshift(path91);
     return iss;
   });
 }
@@ -3841,16 +3841,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path87 = []) => {
+  const processError = (error52, path91 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path87, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path91, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path87, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path87, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else {
-        const fullpath = [...path87, ...issue2.path];
+        const fullpath = [...path91, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -3877,17 +3877,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path87 = []) => {
+  const processError = (error52, path91 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path87, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path91, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path87, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path87, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else {
-        const fullpath = [...path87, ...issue2.path];
+        const fullpath = [...path91, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -3919,8 +3919,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path87 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path87) {
+  const path91 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path91) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -17423,13 +17423,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path87 = ref.slice(1).split("/").filter(Boolean);
-  if (path87.length === 0) {
+  const path91 = ref.slice(1).split("/").filter(Boolean);
+  if (path91.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path87[0] === defsKey) {
-    const key = path87[1];
+  if (path91[0] === defsKey) {
+    const key = path91[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -18777,11 +18777,18 @@ function filterByInclude(entries, include) {
   if (include.length === 0 || include.length === 1 && include[0] === "*") {
     return entries.filter((e) => e.type === "file");
   }
-  const regexes = include.map(globToRegex);
+  const pathRegexes = [];
+  const baseRegexes = [];
+  for (const g of include) {
+    (g.includes("/") || g.includes("**") ? pathRegexes : baseRegexes).push(globToRegex(g));
+  }
   return entries.filter((e) => {
     if (e.type !== "file")
       return false;
-    return regexes.some((re) => re.test(e.name));
+    if (pathRegexes.some((re) => re.test(e.name)))
+      return true;
+    const base2 = e.name.slice(e.name.lastIndexOf("/") + 1);
+    return baseRegexes.some((re) => re.test(base2));
   });
 }
 var REGEX_ESCAPE, DEFAULT_EXCLUDES;
@@ -18828,8 +18835,8 @@ function coerceStringList(value, fallback) {
   }
   return fallback;
 }
-function hasRecursiveGlob(include) {
-  return include.some((g) => g.includes("**"));
+function hasPathAnchoredGlob(include) {
+  return include.some((g) => g.includes("/") || g.includes("**"));
 }
 function scopeWarnings(allEntries, include, matched) {
   const warnings = [];
@@ -18837,15 +18844,17 @@ function scopeWarnings(allEntries, include, matched) {
   if (filesWalked === 0)
     return warnings;
   if (matched === 0) {
-    warnings.push(`SEARCH_EMPTY_SCOPE: include globs matched 0 of ${filesWalked} files walked \u2014 '*' matches only one path segment; use '**/<glob>' for recursive matching. Do not interpret this result as "pattern not found".`);
+    const cause = hasPathAnchoredGlob(include) ? `path-anchored globs (with '/') match the relative path at exactly that level; use '**/<glob>' for recursive matching` : `flat globs ('*.ts') match the basename at any depth, so no file with these names/extensions exists in the walked tree`;
+    warnings.push(`SEARCH_EMPTY_SCOPE: include globs matched 0 of ${filesWalked} files walked \u2014 ${cause}. Do not interpret this result as "pattern not found".`);
     return warnings;
   }
-  if (hasRecursiveGlob(include) || matched >= filesWalked)
+  if (!hasPathAnchoredGlob(include) || matched >= filesWalked)
     return warnings;
-  const recursiveRegexes = compileGlobs(include.map((g) => `**/${g}`));
+  const anchored = include.filter((g) => g.includes("/") || g.includes("**"));
+  const recursiveRegexes = compileGlobs(anchored.map((g) => `**/${g}`));
   const wouldMatch = allEntries.filter((e) => e.type === "file" && matchesAnyCompiled(e.name, recursiveRegexes)).length;
   if (wouldMatch > matched) {
-    warnings.push(`include globs matched ${matched} of ${filesWalked} files walked \u2014 '*' matches only one path segment; a '**/*.ts'-style recursive glob would have matched ${wouldMatch - matched} more file(s) in subdirectories`);
+    warnings.push(`include globs matched ${matched} of ${filesWalked} files walked \u2014 a path-anchored glob ('${anchored[0]}') matches only that exact level; a '**/${anchored[0]}'-style recursive glob would have matched ${wouldMatch - matched} more file(s) in subdirectories`);
   }
   return warnings;
 }
@@ -18912,7 +18921,10 @@ var init_search = __esm({
       /**
        * Glob pattern(s) to INCLUDE when path is a directory.
        * Accepts a string OR string[] (models often emit a bare string).
-       * Default ['*'] = all files. Ignored when path is a file.
+       * A glob without '/' (e.g. '*.ts') matches the file basename at any depth
+       * (grep --include style); a glob with '/' (e.g. 'src/*.ts') matches the
+       * relative path at exactly that level. Default ['*'] = all files.
+       * Ignored when path is a file.
        */
       include: stringOrStringArray.optional().default(["*"]),
       /**
@@ -18925,7 +18937,7 @@ var init_search = __esm({
     });
     grepContentTool = {
       name: "grep_content",
-      description: 'Regex search for content in a file OR recursively in a directory. When path is a directory, include/exclude globs filter which files are searched (default: all files, excluding node_modules/dist/.git/etc.). Glob semantics: "*" matches ONE path segment only ("*.ts" does NOT match "sub/file.ts"); use "**" for recursive matching ("**/*.ts" matches at any depth). include/exclude accept a single glob string (e.g. "*.ts") OR an array of globs. Returns matches with line numbers and context, plus filesWalked/filesInTree counts and a warning when the include globs matched suspiciously few files.',
+      description: `Regex search for content in a file OR recursively in a directory. When path is a directory, include/exclude globs filter which files are searched (default: all files, excluding node_modules/dist/.git/etc.). Glob semantics (grep --include style): a glob without '/' (e.g. "*.md") matches the file basename at ANY depth; a glob with '/' (e.g. "src/*.ts") matches the relative path at exactly that level; "**" is explicit recursion ("**/*.ts" matches at any depth, same as the bare form). include/exclude accept a single glob string (e.g. "*.ts") OR an array of globs. Returns matches with line numbers and context, plus filesWalked/filesInTree counts and a warning when the include globs matched suspiciously few files.`,
       permissions: ["read"],
       sideEffect: "none",
       timeoutMs: 3e4,
@@ -19875,11 +19887,11 @@ var init_tools = __esm({
           if (!ctx.addDocument)
             return "Knowledge vault tool not available.";
           const title = args["title"] || "New Document";
-          const path87 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
+          const path91 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
           const content = args["content"] || "";
           const tags = args["tags"] || [];
           ctx.addDocument({
-            path: path87,
+            path: path91,
             title,
             content,
             format: "markdown",
@@ -19888,7 +19900,7 @@ var init_tools = __esm({
             workspaceId: ctx.workspaceId
           });
           ctx.addActivity("vault", "created document", title);
-          return `Document "${title}" created at "${path87}".`;
+          return `Document "${title}" created at "${path91}".`;
         }
       }
     ];
@@ -23328,7 +23340,7 @@ function extractToolObjects(text) {
   }
   return out;
 }
-var BUILD_LIVENESS_RECOVERY_PROMPT, AgentHarness, DOOM_LOOP_THRESHOLD;
+var TOOL_CALL_TRUNCATED_RECOVERY_MARKER, TOOL_CALL_TRUNCATED_RECOVERY_USER, BUILD_LIVENESS_RECOVERY_PROMPT, AgentHarness, DOOM_LOOP_THRESHOLD;
 var init_AgentHarness = __esm({
   "packages/core/dist/core/AgentHarness.js"() {
     "use strict";
@@ -23340,6 +23352,8 @@ var init_AgentHarness = __esm({
     init_textLoopDetect();
     init_ObserverBus();
     init_textLoopDetect();
+    TOOL_CALL_TRUNCATED_RECOVERY_MARKER = "[harness] Previous tool call was truncated";
+    TOOL_CALL_TRUNCATED_RECOVERY_USER = `${TOOL_CALL_TRUNCATED_RECOVERY_MARKER} by the provider before completion (finish_reason=tool_calls but no complete tool_call arrived). Retry with a shorter payload or split the work into smaller tool calls.`;
     BUILD_LIVENESS_RECOVERY_PROMPT = "[build-liveness] The requested task requires an on-disk implementation, but no successful project mutation has occurred yet. Continue working. Inspect only as needed, then make the required change with an available mutating tool. Do not merely describe a patch or claim completion.";
     AgentHarness = class {
       config;
@@ -23610,10 +23624,10 @@ ${fromRunCache}`,
           }
           const existing = inflight.get(callKey);
           if (existing) {
-            const shared2 = await existing;
+            const shared = await existing;
             return {
               content: `[duplicate call \u2014 result repeated; do not call this tool again with the same arguments]
-${shared2.content}`,
+${shared.content}`,
               isError: false,
               durationMs: 0
             };
@@ -24343,7 +24357,8 @@ ${cached2}`
               if (turnToolResults.length > 0) {
                 finishRef.value = "tool_calls";
               }
-              if (finishRef.value === "tool_calls" && turnToolCalls.length === 0 && turnToolResults.length === 0) {
+              const truncatedToolCall = finishRef.value === "tool_calls" && turnToolCalls.length === 0 && turnToolResults.length === 0;
+              if (truncatedToolCall) {
                 const truncErr = createBrainEvent("error", this.sessionId, {
                   severity: "recoverable",
                   message: "Tool call was truncated (finish_reason=tool_calls but no complete tool_call received). The provider cut the response mid-arguments. Retry with a shorter payload or split the work.",
@@ -24383,6 +24398,15 @@ ${cached2}`
                   content: tr.content
                 });
               }
+              if (truncatedToolCall) {
+                const last = this.config.messages[this.config.messages.length - 1];
+                if (!(last?.role === "user" && typeof last.content === "string" && last.content.includes(TOOL_CALL_TRUNCATED_RECOVERY_MARKER))) {
+                  this.config.messages.push({
+                    role: "user",
+                    content: TOOL_CALL_TRUNCATED_RECOVERY_USER
+                  });
+                }
+              }
               break;
             } else if (delta.kind === "error") {
               finishRef.providerError = true;
@@ -25125,7 +25149,7 @@ var init_appServer = __esm({
           services = factory(root);
           this.workspaceServices.set(root, services);
         }
-        const shared2 = services;
+        const shared = services;
         const server = this;
         const count = this.sessionCounts.get(root) ?? 0;
         this.sessionCounts.set(root, count + 1);
@@ -25133,13 +25157,13 @@ var init_appServer = __esm({
         const session = {
           id: id3,
           workspaceRoot: root,
-          services: shared2,
+          services: shared,
           runTurn(input) {
             const deps = {
               session: { id: id3, workspaceRoot: root },
               services: {
-                ...shared2,
-                completionProofWriter: server.trackProofWriter(shared2.completionProofWriter)
+                ...shared,
+                completionProofWriter: server.trackProofWriter(shared.completionProofWriter)
               }
             };
             return runTurn(input, deps);
@@ -25150,10 +25174,10 @@ var init_appServer = __esm({
             server.sessionCounts.set(root, remaining);
             if (remaining <= 0) {
               server.sessionCounts.delete(root);
-              const shared3 = server.workspaceServices.get(root);
+              const shared2 = server.workspaceServices.get(root);
               server.workspaceServices.delete(root);
               try {
-                shared3?.lspManager?.dispose();
+                shared2?.lspManager?.dispose();
               } catch {
               }
             }
@@ -25317,6 +25341,8 @@ __export(harness_exports, {
   SessionJsonlWriter: () => SessionJsonlWriter,
   TEXT_LOOP_RECOVERY_SYSTEM: () => TEXT_LOOP_RECOVERY_SYSTEM,
   TEXT_LOOP_RECOVERY_USER_PROMPT: () => TEXT_LOOP_RECOVERY_USER_PROMPT,
+  TOOL_CALL_TRUNCATED_RECOVERY_MARKER: () => TOOL_CALL_TRUNCATED_RECOVERY_MARKER,
+  TOOL_CALL_TRUNCATED_RECOVERY_USER: () => TOOL_CALL_TRUNCATED_RECOVERY_USER,
   canonicalTools: () => canonicalTools,
   collapseLoopedAssistantText: () => collapseLoopedAssistantText,
   compareReplayPrefix: () => compareReplayPrefix,
@@ -26138,11 +26164,11 @@ var init_synthesisAudit = __esm({
 import { existsSync as existsSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join4 } from "node:path";
 function loadNfrSpec(zelariRoot) {
-  const path87 = join4(zelariRoot, "nfr-spec.json");
-  if (!existsSync7(path87))
+  const path91 = join4(zelariRoot, "nfr-spec.json");
+  if (!existsSync7(path91))
     return null;
   try {
-    const raw = JSON.parse(readFileSync7(path87, "utf8"));
+    const raw = JSON.parse(readFileSync7(path91, "utf8"));
     if (raw.version !== 1 || !Array.isArray(raw.targets))
       return null;
     return raw;
@@ -28448,9 +28474,9 @@ var init_types5 = __esm({
 import { readFileSync as readFileSync12 } from "node:fs";
 import { join as join10 } from "node:path";
 function readLessonsDeduped(zelariRoot) {
-  const path87 = join10(zelariRoot, LESSONS_FILE);
+  const path91 = join10(zelariRoot, LESSONS_FILE);
   try {
-    const raw = readFileSync12(path87, "utf8");
+    const raw = readFileSync12(path91, "utf8");
     const byId = /* @__PURE__ */ new Map();
     for (const line of raw.split(/\r?\n/)) {
       if (!line.trim())
@@ -28551,8 +28577,8 @@ function keywordsFrom(check2, signature) {
   return [.../* @__PURE__ */ new Set([...fromId, ...words])].slice(0, 12);
 }
 function writeLesson(zelariRoot, lesson) {
-  const path87 = join11(zelariRoot, LESSONS_FILE);
-  appendFileSync(path87, `${JSON.stringify(lesson)}
+  const path91 = join11(zelariRoot, LESSONS_FILE);
+  appendFileSync(path91, `${JSON.stringify(lesson)}
 `, "utf8");
 }
 function findSimilar(lessons, signature) {
@@ -30515,9 +30541,9 @@ function findCycle(nodes) {
     if (color.get(start) !== WHITE)
       continue;
     const stack = [[start, 0]];
-    const path87 = [];
+    const path91 = [];
     color.set(start, GRAY);
-    path87.push(start);
+    path91.push(start);
     while (stack.length > 0) {
       const top = stack[stack.length - 1];
       const [id3, idx] = top;
@@ -30530,17 +30556,17 @@ function findCycle(nodes) {
           continue;
         const c = color.get(dep);
         if (c === GRAY) {
-          const at = path87.indexOf(dep);
-          return [...path87.slice(at), dep];
+          const at = path91.indexOf(dep);
+          return [...path91.slice(at), dep];
         }
         if (c === WHITE) {
           color.set(dep, GRAY);
-          path87.push(dep);
+          path91.push(dep);
           stack.push([dep, 0]);
         }
       } else {
         color.set(id3, BLACK);
-        path87.pop();
+        path91.pop();
         stack.pop();
       }
     }
@@ -31460,8 +31486,8 @@ var init_runner = __esm({
           failed: [...this.tentaclesById.values()].filter((r) => r.status === "error"),
           pending: []
         };
-        const path87 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
-        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path87}`);
+        const path91 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
+        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path91}`);
         return snapshot;
       }
       callLog(msg, data) {
@@ -31553,16 +31579,12 @@ var init_types9 = __esm({
       // once at session start / manifest change. State-only (never model-surface):
       // data = {manifest, manifestHash}. Schema review per ADR-0021.
       "session.harness_manifest",
-      // 2.6.1 (closure plan §6): resume-time harness drift record. State-only:
-      // data = {originalManifestHash, currentManifestHash}. Non-blocking signal.
-      "session.harness_drift",
       "user.message",
       "assistant.message",
       "tool.call",
       "tool.result",
       // 2.x B (crash-safe recovery): dangling call classified. State-only.
       "tool.interrupted",
-      "context.injected",
       "session.compacted",
       "task.created",
       "task.updated",
@@ -31571,7 +31593,6 @@ var init_types9 = __esm({
       // State-only: compaction projects it into CompactionStateSnapshot.
       "task.contract",
       "task.contract_updated",
-      "kraken.task",
       "council.member",
       "mission.phase",
       "mission.replan",
@@ -31592,6 +31613,15 @@ var init_types9 = __esm({
       "resource.reserve_entered",
       // 2.6.1 (closure plan §9): hard-limit overrun telemetry — state-only.
       "resource.overrun",
+      // ADR-0024 v1.1 (amended 2026-08-30): per-node ENVELOPE for kraken-graph
+      // runs — written by the HOST (the sole spine writer) around the executor's
+      // tentacle-run seam. State-only (never model-surface): data = {nodeId,
+      // agent, graphId?, ok?, cancelled?, durationMs?}; node labels, prompts and
+      // turn output stay on the kraken radio JSONL. One pair per attempt.
+      // ADR-0021 schema review: additive state kinds need no SCHEMA_VERSION bump —
+      // older readers skip them via the tolerant replay (schema-mismatch issues).
+      "graph.node_started",
+      "graph.node_ended",
       "note"
     ];
     SessionEventEnvelopeSchema = external_exports.object({
@@ -33917,16 +33947,16 @@ function runRetentionFromEnv() {
     maxTotalBytes: Number.isFinite(parseMb) && parseMb > 0 ? Math.round(parseMb * 1024 * 1024) : DEFAULT_RUN_RETENTION_MAX_MB * 1024 * 1024
   };
 }
-async function dirSize(path87) {
+async function dirSize(path91) {
   let total = 0;
   let entries;
   try {
-    entries = await readdir(path87, { withFileTypes: true });
+    entries = await readdir(path91, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const entry of entries) {
-    const child = join13(path87, entry.name);
+    const child = join13(path91, entry.name);
     if (entry.isDirectory())
       total += await dirSize(child);
     else {
@@ -33953,19 +33983,19 @@ async function enforceRunRetention(runsDir, options = {}) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const path87 = join13(runsDir, entry.name);
+    const path91 = join13(runsDir, entry.name);
     let startedAt = 0;
     let endedAt;
     let completed = false;
     try {
-      const manifest = JSON.parse(await readFile(join13(path87, "manifest.json"), "utf8"));
+      const manifest = JSON.parse(await readFile(join13(path91, "manifest.json"), "utf8"));
       startedAt = manifest.startedAt ?? 0;
       endedAt = manifest.endedAt;
       completed = Boolean(endedAt) && manifest.status !== "running";
     } catch {
       completed = false;
     }
-    infos.push({ name: entry.name, path: path87, startedAt, endedAt, completed, bytes: await dirSize(path87) });
+    infos.push({ name: entry.name, path: path91, startedAt, endedAt, completed, bytes: await dirSize(path91) });
   }
   const remove = async (info) => {
     await rm(info.path, { recursive: true, force: true });
@@ -34737,12 +34767,12 @@ var init_engine = __esm({
        * content digest) and the returned ref carries the event seq when the
        * emitter resolved one.
        */
-      async fsEvidence(observation, path87, sha256, content, extra = {}) {
+      async fsEvidence(observation, path91, sha256, content, extra = {}) {
         const digest = sha256 && content !== void 0 ? sha256(content) : void 0;
-        const seq = await this.emitEvidence({ observation, path: path87, ...extra, ...digest ? { digest } : {} });
+        const seq = await this.emitEvidence({ observation, path: path91, ...extra, ...digest ? { digest } : {} });
         return {
           tier: "fs-observation",
-          ref: path87,
+          ref: path91,
           capturedAt: Date.now(),
           ...digest ? { digest } : {},
           ...seq !== void 0 ? { seq } : {}
@@ -35782,6 +35812,8 @@ __export(dist_exports, {
   TEXT_LOOP_RECOVERY_SYSTEM: () => TEXT_LOOP_RECOVERY_SYSTEM,
   TEXT_LOOP_RECOVERY_USER_PROMPT: () => TEXT_LOOP_RECOVERY_USER_PROMPT,
   TIER_RANK: () => TIER_RANK,
+  TOOL_CALL_TRUNCATED_RECOVERY_MARKER: () => TOOL_CALL_TRUNCATED_RECOVERY_MARKER,
+  TOOL_CALL_TRUNCATED_RECOVERY_USER: () => TOOL_CALL_TRUNCATED_RECOVERY_USER,
   TOOL_DEFINITIONS: () => TOOL_DEFINITIONS,
   TOOL_USE_PROTOCOL_DIRECTIVE: () => TOOL_USE_PROTOCOL_DIRECTIVE,
   TURN_COMPLETION_MODULE: () => TURN_COMPLETION_MODULE,
@@ -37083,6 +37115,15 @@ function mapBrainEventToSpine(ev) {
           ...ev.memberName ? { member: ev.memberName } : {}
         }
       };
+    case "error":
+      if (ev.code === "tool_call_truncated") {
+        return {
+          kind: "user.message",
+          actor: ACTOR_USER,
+          data: { text: TOOL_CALL_TRUNCATED_RECOVERY_USER }
+        };
+      }
+      return null;
     default:
       return null;
   }
@@ -37126,15 +37167,8 @@ async function noteHarnessLifecycle(spine, sessionId2, profileId, budget, baseDi
       resourcePolicy: budget.policy
     });
     if (spine.resumedFromSeq !== void 0 && spine.resumedFromSeq > 0) {
-      const original = await lastHarnessManifestHash(sessionId2, baseDir);
-      if (original === null) {
+      if (await lastHarnessManifestHash(sessionId2, baseDir) === null) {
         spine.harnessManifest(manifest, manifestHash);
-      } else if (original !== manifestHash) {
-        await spine.appendEvent({
-          kind: "session.harness_drift",
-          actor: ACTOR_SYSTEM,
-          data: { originalManifestHash: original, currentManifestHash: manifestHash }
-        });
       }
     } else {
       spine.harnessManifest(manifest, manifestHash);
@@ -37146,6 +37180,7 @@ var MAX_STREAM_BUFFERS, SessionSpineMirror, SpineMirroringWriter;
 var init_sessionSpine = __esm({
   "src/cli/sessionSpine.ts"() {
     "use strict";
+    init_harness();
     init_session();
     init_session();
     init_verification2();
@@ -37892,9 +37927,9 @@ function spillToolOutput(fullText, meta3) {
     const rnd = randomBytes3(3).toString("hex");
     const safeTool = (meta3?.toolName ?? "tool").replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 32);
     const file2 = `${stamp}-${safeTool}-${hash3}-${rnd}.txt`;
-    const path87 = join14(dir, file2);
-    writeFileSync11(path87, fullText, "utf8");
-    return path87;
+    const path91 = join14(dir, file2);
+    writeFileSync11(path91, fullText, "utf8");
+    return path91;
   } catch {
     return null;
   }
@@ -37940,10 +37975,10 @@ function truncateToolResult(text, capOrOpts = TOOL_RESULT_LINE_CAP) {
 ${tail2}`;
   }
   if (doSpill) {
-    const path87 = spillToolOutput(text, { toolName: opts.toolName });
-    if (path87) {
+    const path91 = spillToolOutput(text, { toolName: opts.toolName });
+    if (path91) {
       const spillNote = `
-\u2026 [full output spilled to: ${path87} \u2014 re-read with read_file if you need the complete text] \u2026`;
+\u2026 [full output spilled to: ${path91} \u2014 re-read with read_file if you need the complete text] \u2026`;
       if (preview.includes("] \u2026\n")) {
         preview = preview.replace("] \u2026\n", `] \u2026${spillNote}
 `);
@@ -41056,28 +41091,28 @@ var init_storage = __esm({
     VALID_SCALARS = /^(true|false|null|~)$/i;
     Storage = class {
       /** Read a Markdown file with frontmatter. Throws if not found. */
-      read(path87) {
-        if (!existsSync19(path87)) {
-          throw new Error(`File not found: ${path87}`);
+      read(path91) {
+        if (!existsSync19(path91)) {
+          throw new Error(`File not found: ${path91}`);
         }
-        const md = readFileSync16(path87, "utf8");
+        const md = readFileSync16(path91, "utf8");
         return parseFrontmatter(md);
       }
       /** Read a Markdown file; returns null if not found. */
-      readIfExists(path87) {
-        if (!existsSync19(path87)) return null;
-        return this.read(path87);
+      readIfExists(path91) {
+        if (!existsSync19(path91)) return null;
+        return this.read(path91);
       }
       /**
        * Write a Markdown file atomically (tmp + rename). Creates parent dirs.
        * The meta object is serialized as YAML frontmatter; body as Markdown.
        */
-      write(path87, meta3, body) {
-        mkdirSync10(dirname2(path87), { recursive: true });
-        const tmp = path87 + ".tmp-" + process.pid;
+      write(path91, meta3, body) {
+        mkdirSync10(dirname2(path91), { recursive: true });
+        const tmp = path91 + ".tmp-" + process.pid;
         const md = serializeFrontmatter(meta3, body);
         writeFileSync13(tmp, md, "utf8");
-        renameSync(tmp, path87);
+        renameSync(tmp, path91);
       }
       /** List all .md files in a directory (non-recursive). */
       listMarkdown(dir) {
@@ -41139,8 +41174,8 @@ function nextPlanTaskId(store6) {
   return `t${store6.counter}`;
 }
 function writePlanTaskArtifact(rootDir, task) {
-  const path87 = join18(rootDir, "plan-tasks", `${task.id}.md`);
-  mkdirSync11(dirname3(path87), { recursive: true });
+  const path91 = join18(rootDir, "plan-tasks", `${task.id}.md`);
+  mkdirSync11(dirname3(path91), { recursive: true });
   const meta3 = {
     kind: "task",
     id: task.id,
@@ -41161,7 +41196,7 @@ function writePlanTaskArtifact(rootDir, task) {
     task.notes?.trim() ? task.notes.trim() : "_(no notes)_",
     ""
   ].filter((l) => l !== null).join("\n");
-  new Storage().write(path87, meta3, body);
+  new Storage().write(path91, meta3, body);
 }
 function loadHandle(rootDir) {
   const jsonPath = join18(rootDir, "plan.json");
@@ -42960,6 +42995,7 @@ var init_servers = __esm({
 // src/cli/lsp/manager.ts
 import { spawn as spawn10 } from "node:child_process";
 import { readFileSync as readFileSync18 } from "node:fs";
+import path34 from "node:path";
 function processTransport(child) {
   return {
     send: (data) => {
@@ -42976,12 +43012,22 @@ function processTransport(child) {
   };
 }
 function getSharedLspManager(cwd = process.cwd()) {
-  if (shared && shared.cwd === cwd) return shared.manager;
-  shared?.manager.dispose();
+  const key = path34.resolve(cwd);
+  const existing = sharedByRoot.get(key);
+  if (existing) return existing;
   const manager = new LspManager({ cwd });
-  shared = { cwd, manager };
+  sharedByRoot.set(key, manager);
   return manager;
 }
+function disposeSharedLspManager() {
+  for (const manager of sharedByRoot.values()) {
+    try {
+      manager.dispose();
+    } catch {
+    }
+  }
+  sharedByRoot.clear();
+}
 function normalizeLocations(res) {
   if (!res) return [];
   const arr = Array.isArray(res) ? res : [res];
@@ -43048,7 +43094,7 @@ function normalizeRename(res) {
   if (files.length === 0) return null;
   return { files, totalEdits: total };
 }
-var SYMBOL_KINDS, LspManager, shared;
+var SYMBOL_KINDS, LspManager, sharedByRoot;
 var init_manager = __esm({
   "src/cli/lsp/manager.ts"() {
     "use strict";
@@ -43271,11 +43317,11 @@ var init_manager = __esm({
         this.servers.clear();
       }
     };
-    shared = null;
+    sharedByRoot = /* @__PURE__ */ new Map();
     if (typeof process !== "undefined" && typeof process.once === "function") {
       process.once("exit", () => {
         try {
-          shared?.manager.dispose();
+          disposeSharedLspManager();
         } catch {
         }
       });
@@ -43285,9 +43331,9 @@ var init_manager = __esm({
 
 // src/cli/ast/engine.ts
 import { readFile as readFile2 } from "node:fs/promises";
-import path34 from "node:path";
+import path35 from "node:path";
 function isAstSupported(file2) {
-  return TS_EXTENSIONS.has(path34.extname(file2).toLowerCase());
+  return TS_EXTENSIONS.has(path35.extname(file2).toLowerCase());
 }
 function loadTs() {
   if (!tsPromise) {
@@ -43299,8 +43345,8 @@ function errMessage(err) {
   return err instanceof Error ? err.message : String(err);
 }
 async function parseFileSymbolsDiag(file2, cwd) {
-  const resolvedPath = path34.isAbsolute(file2) ? file2 : path34.join(cwd ?? process.cwd(), file2);
-  const extension = path34.extname(resolvedPath).toLowerCase();
+  const resolvedPath = path35.isAbsolute(file2) ? file2 : path35.join(cwd ?? process.cwd(), file2);
+  const extension = path35.extname(resolvedPath).toLowerCase();
   if (!TS_EXTENSIONS.has(extension)) {
     return {
       status: "unsupported-extension",
@@ -43342,7 +43388,7 @@ async function parseFileSymbolsDiag(file2, cwd) {
   }
   let source2;
   try {
-    source2 = ts.createSourceFile(path34.basename(resolvedPath), text, ts.ScriptTarget.Latest, true);
+    source2 = ts.createSourceFile(path35.basename(resolvedPath), text, ts.ScriptTarget.Latest, true);
   } catch (err) {
     return {
       status: "parse-error",
@@ -43567,11 +43613,11 @@ var init_store2 = __esm({
 // src/cli/semantic/index.ts
 import { promises as fs18, existsSync as existsSync24, readFileSync as readFileSync19 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
-import path35 from "node:path";
+import path36 from "node:path";
 import { createHash as createHash12 } from "node:crypto";
 function getIndexPath(root) {
-  const hash3 = createHash12("sha1").update(path35.resolve(root)).digest("hex").slice(0, 16);
-  return process.env.ZELARI_SEMANTIC_FILE ?? path35.join(homedir7(), ".tmp", "zelari-code", "semantic", `${hash3}.json`);
+  const hash3 = createHash12("sha1").update(path36.resolve(root)).digest("hex").slice(0, 16);
+  return process.env.ZELARI_SEMANTIC_FILE ?? path36.join(homedir7(), ".tmp", "zelari-code", "semantic", `${hash3}.json`);
 }
 async function collectSourceFiles(root, maxFiles = 1500) {
   const out = [];
@@ -43589,11 +43635,11 @@ async function collectSourceFiles(root, maxFiles = 1500) {
         if (entry.isDirectory() && IGNORE_DIRS.has(entry.name)) continue;
         if (entry.isDirectory()) continue;
       }
-      const full = path35.join(dir, entry.name);
+      const full = path36.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (IGNORE_DIRS.has(entry.name)) continue;
         await walk2(full);
-      } else if (SOURCE_EXTENSIONS.has(path35.extname(entry.name).toLowerCase())) {
+      } else if (SOURCE_EXTENSIONS.has(path36.extname(entry.name).toLowerCase())) {
         out.push(full);
       }
     }
@@ -43642,7 +43688,7 @@ async function buildIndex(files, embed, options) {
 }
 async function saveIndex(root, data) {
   const file2 = getIndexPath(root);
-  await fs18.mkdir(path35.dirname(file2), { recursive: true });
+  await fs18.mkdir(path36.dirname(file2), { recursive: true });
   const tmp = `${file2}.tmp-${process.pid}`;
   await fs18.writeFile(tmp, JSON.stringify(data), "utf8");
   await fs18.rename(tmp, file2);
@@ -44524,7 +44570,7 @@ var init_provider = __esm({
 });
 
 // src/cli/semantic/tools.ts
-import path36 from "node:path";
+import path37 from "node:path";
 function createSemanticTool(deps) {
   const buildEmbedFn = deps.buildEmbedFn ?? buildProviderEmbedFn;
   return {
@@ -44551,7 +44597,7 @@ function createSemanticTool(deps) {
       return typedOk({
         count: res.hits.length,
         results: res.hits.map((h) => ({
-          location: `${path36.relative(deps.root, h.file) || h.file}:${h.startLine}-${h.endLine}`,
+          location: `${path37.relative(deps.root, h.file) || h.file}:${h.startLine}-${h.endLine}`,
           score: Number(h.score.toFixed(3)),
           preview: h.text.length > 400 ? `${h.text.slice(0, 400)}\u2026` : h.text
         }))
@@ -44571,7 +44617,7 @@ var init_tools4 = __esm({
 
 // src/cli/browser/driver.ts
 import { createRequire as createRequire2 } from "node:module";
-import path37 from "node:path";
+import path38 from "node:path";
 import { pathToFileURL } from "node:url";
 function asPlaywright(mod) {
   if (!mod || typeof mod !== "object") return null;
@@ -44582,10 +44628,10 @@ function asPlaywright(mod) {
   return null;
 }
 async function loadPlaywright(cwd) {
-  const base2 = cwd && cwd.length > 0 ? path37.resolve(cwd) : void 0;
+  const base2 = cwd && cwd.length > 0 ? path38.resolve(cwd) : void 0;
   if (base2) {
     try {
-      const req = createRequire2(path37.join(base2, "package.json"));
+      const req = createRequire2(path38.join(base2, "package.json"));
       const resolved = req.resolve("playwright");
       const mod = await import(pathToFileURL(resolved).href);
       const pw = asPlaywright(mod);
@@ -44800,7 +44846,7 @@ var init_driver = __esm({
 });
 
 // src/cli/browser/tools.ts
-import path38 from "node:path";
+import path39 from "node:path";
 import os8 from "node:os";
 function createBrowserTool(deps = {}) {
   return {
@@ -44819,7 +44865,7 @@ function createBrowserTool(deps = {}) {
     execute: async (args, ctx) => {
       const a = args;
       const dir = deps.screenshotDir ?? os8.tmpdir();
-      const screenshotPath = a.screenshot === false ? void 0 : path38.join(dir, `zelari-browser-${Date.now()}.png`);
+      const screenshotPath = a.screenshot === false ? void 0 : path39.join(dir, `zelari-browser-${Date.now()}.png`);
       const result = await runBrowserCheck(
         {
           url: a.url,
@@ -44931,21 +44977,21 @@ function normalizeAuth(auth) {
   return "agent";
 }
 function readSecrets() {
-  const path87 = getSshSecretsPath();
-  if (!existsSync25(path87)) return {};
+  const path91 = getSshSecretsPath();
+  if (!existsSync25(path91)) return {};
   try {
-    return JSON.parse(readFileSync20(path87, "utf8"));
+    return JSON.parse(readFileSync20(path91, "utf8"));
   } catch {
     return {};
   }
 }
 function writeSecrets(data) {
-  const path87 = getSshSecretsPath();
-  mkdirSync12(dirname4(path87), { recursive: true });
-  writeFileSync15(path87, `${JSON.stringify(data, null, 2)}
+  const path91 = getSshSecretsPath();
+  mkdirSync12(dirname4(path91), { recursive: true });
+  writeFileSync15(path91, `${JSON.stringify(data, null, 2)}
 `, "utf8");
   try {
-    chmodSync(path87, 384);
+    chmodSync(path91, 384);
   } catch {
   }
 }
@@ -44974,10 +45020,10 @@ function deleteSshPassword(id3) {
   writeSecrets({ passwords });
 }
 function readStore2() {
-  const path87 = getSshTargetsPath();
-  if (!existsSync25(path87)) return [];
+  const path91 = getSshTargetsPath();
+  if (!existsSync25(path91)) return [];
   try {
-    const parsed = JSON.parse(readFileSync20(path87, "utf8"));
+    const parsed = JSON.parse(readFileSync20(path91, "utf8"));
     const list = Array.isArray(parsed.targets) ? parsed.targets : [];
     return list.filter(
       (t) => t && typeof t.id === "string" && typeof t.host === "string" && typeof t.user === "string"
@@ -44992,11 +45038,11 @@ function readStore2() {
   }
 }
 function writeStore2(targets) {
-  const path87 = getSshTargetsPath();
-  mkdirSync12(dirname4(path87), { recursive: true });
+  const path91 = getSshTargetsPath();
+  mkdirSync12(dirname4(path91), { recursive: true });
   const clean = targets.map(({ hasPassword: _hp, ...t }) => t);
   writeFileSync15(
-    path87,
+    path91,
     `${JSON.stringify({ targets: clean }, null, 2)}
 `,
     "utf8"
@@ -45242,11 +45288,11 @@ function formatSshTargetsForPrompt() {
   ];
   for (const t of targets) {
     const tags = t.tags?.length ? ` tags=[${t.tags.join(",")}]` : "";
-    const path87 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
+    const path91 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
     const allow = t.allowedCommands?.length ? ` allowed=${t.allowedCommands.join("|")}` : " allowed=status-only";
     const auth = t.auth === "password" ? " auth=password" : t.auth === "keyPath" ? " auth=key" : " auth=agent";
     lines.push(
-      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path87}${tags}${allow}`
+      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path91}${tags}${allow}`
     );
   }
   return lines.join("\n");
@@ -45373,10 +45419,10 @@ var init_tools6 = __esm({
 
 // src/cli/workspace/worldModel.ts
 import { promises as fs19 } from "node:fs";
-import path39 from "node:path";
+import path40 from "node:path";
 import { spawn as spawn12 } from "node:child_process";
 function worldDir(cwd) {
-  return path39.join(cwd, WORLD_DIR_NAME);
+  return path40.join(cwd, WORLD_DIR_NAME);
 }
 async function ensureWorldDir(cwd) {
   const dir = worldDir(cwd);
@@ -45386,10 +45432,10 @@ async function ensureWorldDir(cwd) {
 async function appendTimeline(cwd, entry) {
   const dir = await ensureWorldDir(cwd);
   const line = JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), ...entry }) + "\n";
-  await fs19.appendFile(path39.join(dir, TIMELINE_FILE), line, "utf8");
+  await fs19.appendFile(path40.join(dir, TIMELINE_FILE), line, "utf8");
 }
 async function readChecks(cwd) {
-  const p3 = path39.join(worldDir(cwd), CHECKS_FILE);
+  const p3 = path40.join(worldDir(cwd), CHECKS_FILE);
   try {
     const raw = await fs19.readFile(p3, "utf8");
     const parsed = JSON.parse(raw);
@@ -45464,8 +45510,8 @@ function runShell(command, cwd, timeoutMs2, signal) {
   });
 }
 async function runBacktest(cwd, signal) {
-  const checksPath = path39.join(worldDir(cwd), CHECKS_FILE);
-  const hypothesisPath = path39.join(worldDir(cwd), HYPOTHESIS_FILE);
+  const checksPath = path40.join(worldDir(cwd), CHECKS_FILE);
+  const hypothesisPath = path40.join(worldDir(cwd), HYPOTHESIS_FILE);
   const checks = await readChecks(cwd);
   if (checks.length === 0) {
     return {
@@ -45534,7 +45580,7 @@ var init_worldModel = __esm({
     "use strict";
     init_zod();
     init_toolTypes();
-    WORLD_DIR_NAME = path39.join(".zelari", "world");
+    WORLD_DIR_NAME = path40.join(".zelari", "world");
     HYPOTHESIS_FILE = "hypothesis.md";
     CHECKS_FILE = "checks.json";
     TIMELINE_FILE = "timeline.jsonl";
@@ -45551,7 +45597,7 @@ var init_worldModel = __esm({
       execute: async (args, ctx) => {
         try {
           const dir = await ensureWorldDir(ctx.cwd);
-          const file2 = path39.join(dir, HYPOTHESIS_FILE);
+          const file2 = path40.join(dir, HYPOTHESIS_FILE);
           if (args.append) {
             const block = `
 
@@ -45590,7 +45636,7 @@ ${args.content}
       execute: async (args, ctx) => {
         try {
           const dir = await ensureWorldDir(ctx.cwd);
-          const file2 = path39.join(dir, CHECKS_FILE);
+          const file2 = path40.join(dir, CHECKS_FILE);
           const body = { checks: args.checks };
           await fs19.writeFile(file2, JSON.stringify(body, null, 2) + "\n", "utf8");
           await appendTimeline(ctx.cwd, { kind: "checks_set", count: args.checks.length });
@@ -45629,8 +45675,8 @@ ${args.content}
                 stdoutPreview: "(dryRun)",
                 mismatch: "dryRun"
               })),
-              hypothesisPath: path39.join(worldDir(ctx.cwd), HYPOTHESIS_FILE),
-              checksPath: path39.join(worldDir(ctx.cwd), CHECKS_FILE)
+              hypothesisPath: path40.join(worldDir(ctx.cwd), HYPOTHESIS_FILE),
+              checksPath: path40.join(worldDir(ctx.cwd), CHECKS_FILE)
             });
           }
           const result = await runBacktest(ctx.cwd, ctx.signal);
@@ -45654,7 +45700,7 @@ ${args.content}
       execute: async (args, ctx) => {
         try {
           const dir = await ensureWorldDir(ctx.cwd);
-          const file2 = path39.join(dir, TIMELINE_FILE);
+          const file2 = path40.join(dir, TIMELINE_FILE);
           await appendTimeline(ctx.cwd, {
             kind: args.kind,
             summary: args.summary,
@@ -46317,12 +46363,12 @@ __export(folderTrust_exports, {
 });
 import { homedir as homedir9 } from "node:os";
 import { existsSync as existsSync26, mkdirSync as mkdirSync13, readFileSync as readFileSync21, writeFileSync as writeFileSync16 } from "node:fs";
-import path40 from "node:path";
+import path41 from "node:path";
 function trustStorePath() {
-  return _overrideStorePath ?? path40.join(homedir9(), ".zelari-code", "trust.json");
+  return _overrideStorePath ?? path41.join(homedir9(), ".zelari-code", "trust.json");
 }
 function normalize4(p3) {
-  const resolved = path40.resolve(p3);
+  const resolved = path41.resolve(p3);
   return process.platform === "win32" ? resolved.toLowerCase() : resolved;
 }
 function readStore3() {
@@ -46338,7 +46384,7 @@ function readStore3() {
 function writeStore3(store6) {
   const p3 = trustStorePath();
   try {
-    mkdirSync13(path40.dirname(p3), { recursive: true });
+    mkdirSync13(path41.dirname(p3), { recursive: true });
     writeFileSync16(p3, JSON.stringify(store6, null, 2), "utf8");
   } catch (err) {
     throw new Error(
@@ -46364,7 +46410,7 @@ function isFolderTrusted(folderPath) {
 }
 function trustFolder(folderPath) {
   const store6 = readStore3();
-  const normalized = path40.resolve(folderPath);
+  const normalized = path41.resolve(folderPath);
   if (!store6.folders.some((f) => normalize4(f.path) === normalize4(normalized))) {
     store6.folders.push({ path: normalized, trustedAt: (/* @__PURE__ */ new Date()).toISOString() });
     writeStore3(store6);
@@ -46548,7 +46594,7 @@ __export(policyEngine_exports, {
 });
 import { readFileSync as readFileSync22 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
-import path41 from "node:path";
+import path42 from "node:path";
 function emptyPolicySet() {
   return { agents: /* @__PURE__ */ new Map(), warnings: [], precedence: policyPrecedenceFromEnv() };
 }
@@ -46793,9 +46839,9 @@ function loadPolicySet(root, opts = {}) {
   const mode = opts.mode ?? "permissive";
   const warnings = [];
   const precedence = policyPrecedenceFromEnv();
-  const project = readPolicyFile(path41.join(root, ".zelari", "policy.json"), warnings, mode);
+  const project = readPolicyFile(path42.join(root, ".zelari", "policy.json"), warnings, mode);
   const global = readPolicyFile(
-    path41.join(opts.homeDir ?? homedir11(), ".zelari", "policy.json"),
+    path42.join(opts.homeDir ?? homedir11(), ".zelari", "policy.json"),
     warnings,
     mode
   );
@@ -47232,7 +47278,7 @@ var init_resourceClaims = __esm({
 // src/cli/toolResultCache.ts
 import { createHash as createHash13 } from "node:crypto";
 import { promises as fs20 } from "node:fs";
-import path42 from "node:path";
+import path43 from "node:path";
 function isToolCacheEnabled() {
   const raw = process.env.ZELARI_TOOL_CACHE;
   return raw !== "0" && raw !== "false" && raw !== "off";
@@ -47317,7 +47363,7 @@ async function statKey(toolName, input, ctx) {
   if (!input || typeof input !== "object") return null;
   const rawPath = input.path;
   if (typeof rawPath !== "string" || rawPath.length === 0) return null;
-  const abs = path42.isAbsolute(rawPath) ? rawPath : path42.join(ctx.cwd, rawPath);
+  const abs = path43.isAbsolute(rawPath) ? rawPath : path43.join(ctx.cwd, rawPath);
   try {
     const st = await fs20.stat(abs);
     return hashKey({
@@ -47459,13 +47505,13 @@ function resolveKrakenSubModel(agent, parentModel, env = process.env, opts = {})
   const kindKey = agent === "explore" ? "ZELARI_KRAKEN_EXPLORE_MODEL" : agent === "verify" ? "ZELARI_KRAKEN_VERIFY_MODEL" : "ZELARI_KRAKEN_GENERAL_MODEL";
   const specific = env[kindKey]?.trim();
   if (specific) return specific;
-  const shared2 = env.ZELARI_KRAKEN_SUB_MODEL?.trim();
-  if (shared2) {
+  const shared = env.ZELARI_KRAKEN_SUB_MODEL?.trim();
+  if (shared) {
     if (agent === "general" && !env.ZELARI_KRAKEN_GENERAL_MODEL) {
-      if (env.ZELARI_KRAKEN_GENERAL_USES_SUB === "1") return shared2;
+      if (env.ZELARI_KRAKEN_GENERAL_USES_SUB === "1") return shared;
       return parentModel;
     }
-    return shared2;
+    return shared;
   }
   if (agent === "verify" && opts.familyCandidates && opts.familyCandidates.length > 0) {
     const picked = pickDifferentFamily(
@@ -47526,7 +47572,7 @@ __export(toolRegistry_exports, {
   wrapWithSandbox: () => wrapWithSandbox
 });
 import { existsSync as existsSync27 } from "node:fs";
-import path43 from "node:path";
+import path44 from "node:path";
 function createBuiltinToolRegistry(options = {}) {
   const root = options.root ?? process.cwd();
   const audit = options.audit ?? new AuditLogger();
@@ -48084,14 +48130,14 @@ function wrapWithDiagnostics(original, root, runner) {
 function claimedSourcePath(token, args, root) {
   const cleaned = token.replace(/^["']|["']$/g, "");
   if (!cleaned || cleaned.startsWith("-")) return null;
-  if (!DIAG_SOURCE_EXTENSIONS.has(path43.extname(cleaned).toLowerCase())) return null;
+  if (!DIAG_SOURCE_EXTENSIONS.has(path44.extname(cleaned).toLowerCase())) return null;
   const bases = [root];
   const cwd = args["cwd"];
   if (typeof cwd === "string" && cwd.length > 0) {
-    bases.unshift(path43.isAbsolute(cwd) ? cwd : path43.resolve(root, cwd));
+    bases.unshift(path44.isAbsolute(cwd) ? cwd : path44.resolve(root, cwd));
   }
   for (const base2 of bases) {
-    const candidate = path43.isAbsolute(cleaned) ? path43.normalize(cleaned) : path43.resolve(base2, cleaned);
+    const candidate = path44.isAbsolute(cleaned) ? path44.normalize(cleaned) : path44.resolve(base2, cleaned);
     try {
       const contained = resolveSandboxedPath(candidate, { root });
       if (existsSync27(contained)) return contained;
@@ -48379,7 +48425,7 @@ var init_toolRegistry = __esm({
 
 // src/cli/metrics.ts
 import { promises as fs21, existsSync as existsSync28, statSync as statSync4, renameSync as renameSync3, appendFileSync as appendFileSync3, mkdirSync as mkdirSync14 } from "node:fs";
-import path44 from "node:path";
+import path45 from "node:path";
 import os9 from "node:os";
 async function readMetrics(file2) {
   let raw = "";
@@ -48428,8 +48474,8 @@ var init_metrics3 = __esm({
       file;
       writeQueue = Promise.resolve();
       constructor(file2) {
-        this.file = file2 ?? process.env.ANATHEMA_METRICS_FILE ?? path44.join(os9.homedir(), ".tmp", "zelari-code", "metrics.jsonl");
-        mkdirSync14(path44.dirname(this.file), { recursive: true });
+        this.file = file2 ?? process.env.ANATHEMA_METRICS_FILE ?? path45.join(os9.homedir(), ".tmp", "zelari-code", "metrics.jsonl");
+        mkdirSync14(path45.dirname(this.file), { recursive: true });
       }
       /** Metrics file path — doctor/summary readers use this. */
       get filePath() {
@@ -48752,7 +48798,7 @@ Current policy: **lead only**.
 
 // src/cli/kraken/verificationAdapters/node.ts
 import { readFile as readFile3, stat as stat2 } from "node:fs/promises";
-import path45 from "node:path";
+import path46 from "node:path";
 async function fileExists(candidate) {
   try {
     return (await stat2(candidate)).isFile();
@@ -48762,7 +48808,7 @@ async function fileExists(candidate) {
 }
 async function readPackageJson(root) {
   try {
-    return JSON.parse(await readFile3(path45.join(root, "package.json"), "utf-8"));
+    return JSON.parse(await readFile3(path46.join(root, "package.json"), "utf-8"));
   } catch {
     return null;
   }
@@ -48776,7 +48822,7 @@ async function resolvePackageManager(root) {
   const fromField = packageManagerFromField(await readPackageJson(root));
   if (fromField) return { pm: fromField, declaredToolchain: true };
   for (const [marker, pm] of PM_LOCKFILES) {
-    if (await fileExists(path45.join(root, marker))) return { pm, declaredToolchain: true };
+    if (await fileExists(path46.join(root, marker))) return { pm, declaredToolchain: true };
   }
   return { pm: "npm", declaredToolchain: false };
 }
@@ -48799,7 +48845,7 @@ var init_node = __esm({
     KNOWN_PACKAGE_MANAGERS = /* @__PURE__ */ new Set(["npm", "pnpm", "yarn", "bun"]);
     nodeAdapter = {
       async detect(root) {
-        if (!await fileExists(path45.join(root, "package.json"))) return 0;
+        if (!await fileExists(path46.join(root, "package.json"))) return 0;
         const { declaredToolchain } = await resolvePackageManager(root);
         return declaredToolchain ? 20 : 10;
       },
@@ -48818,7 +48864,7 @@ var init_node = __esm({
 
 // src/cli/kraken/verificationAdapters/python.ts
 import { readFile as readFile4, stat as stat3 } from "node:fs/promises";
-import path46 from "node:path";
+import path47 from "node:path";
 async function fileExists2(candidate) {
   try {
     return (await stat3(candidate)).isFile();
@@ -48854,7 +48900,7 @@ var init_python = __esm({
       async detect(root) {
         let best = 0;
         for (const [marker, score] of DETECT_MARKERS) {
-          if (score > best && await fileExists2(path46.join(root, marker))) best = score;
+          if (score > best && await fileExists2(path47.join(root, marker))) best = score;
         }
         return best;
       },
@@ -48862,12 +48908,12 @@ var init_python = __esm({
         const present = /* @__PURE__ */ new Map();
         for (const name of SCAN_FILES) {
           try {
-            present.set(name, await readFile4(path46.join(root, name), "utf-8"));
+            present.set(name, await readFile4(path47.join(root, name), "utf-8"));
           } catch {
           }
         }
         const hasToken = (token) => [...present.values()].some((text) => text.includes(token));
-        const pytestEvidenced = hasToken("pytest") || await dirExists(path46.join(root, "tests"));
+        const pytestEvidenced = hasToken("pytest") || await dirExists(path47.join(root, "tests"));
         const mypyReferenced = hasToken("mypy") || present.has("mypy.ini") || present.has(".mypy.ini");
         const pyrightReferenced = hasToken("pyright") || present.has("pyrightconfig.json");
         return {
@@ -48883,7 +48929,7 @@ var init_python = __esm({
 
 // src/cli/kraken/verificationAdapters/rust.ts
 import { stat as stat4 } from "node:fs/promises";
-import path47 from "node:path";
+import path48 from "node:path";
 async function fileExists3(candidate) {
   try {
     return (await stat4(candidate)).isFile();
@@ -48897,7 +48943,7 @@ var init_rust = __esm({
     "use strict";
     rustAdapter = {
       async detect(root) {
-        return await fileExists3(path47.join(root, "Cargo.toml")) ? 10 : 0;
+        return await fileExists3(path48.join(root, "Cargo.toml")) ? 10 : 0;
       },
       async buildPlan(_root) {
         void _root;
@@ -48913,7 +48959,7 @@ var init_rust = __esm({
 
 // src/cli/kraken/verificationAdapters/go.ts
 import { stat as stat5 } from "node:fs/promises";
-import path48 from "node:path";
+import path49 from "node:path";
 async function fileExists4(candidate) {
   try {
     return (await stat5(candidate)).isFile();
@@ -48927,7 +48973,7 @@ var init_go = __esm({
     "use strict";
     goAdapter = {
       async detect(root) {
-        return await fileExists4(path48.join(root, "go.mod")) ? 10 : 0;
+        return await fileExists4(path49.join(root, "go.mod")) ? 10 : 0;
       },
       async buildPlan(_root) {
         return {
@@ -48943,7 +48989,7 @@ var init_go = __esm({
 
 // src/cli/kraken/verificationAdapters/java.ts
 import { stat as stat6 } from "node:fs/promises";
-import path49 from "node:path";
+import path50 from "node:path";
 async function fileExists5(candidate) {
   try {
     return (await stat6(candidate)).isFile();
@@ -48953,13 +48999,13 @@ async function fileExists5(candidate) {
 }
 async function hasGradleMarker(root) {
   for (const [marker] of GRADLE_MARKERS) {
-    if (await fileExists5(path49.join(root, marker))) return true;
+    if (await fileExists5(path50.join(root, marker))) return true;
   }
   return false;
 }
 async function gradleCommand(root, verb, platform = process.platform) {
   const wrapper = platform === "win32" ? "gradlew.bat" : "gradlew";
-  if (await fileExists5(path49.join(root, wrapper))) {
+  if (await fileExists5(path50.join(root, wrapper))) {
     return platform === "win32" ? `gradlew.bat ${verb}` : `./gradlew ${verb}`;
   }
   return `gradle ${verb}`;
@@ -48984,7 +49030,7 @@ var init_java = __esm({
       async detect(root) {
         let best = 0;
         for (const [marker, score] of DETECT_MARKERS2) {
-          if (score > best && await fileExists5(path49.join(root, marker))) best = score;
+          if (score > best && await fileExists5(path50.join(root, marker))) best = score;
         }
         return best;
       },
@@ -48997,7 +49043,7 @@ var init_java = __esm({
             buildCommand: await gradleCommand(root, "build")
           };
         }
-        if (await fileExists5(path49.join(root, "pom.xml"))) {
+        if (await fileExists5(path50.join(root, "pom.xml"))) {
           return {
             typecheckCommand: null,
             // compilation rides the test/package lifecycle
@@ -49106,7 +49152,7 @@ __export(nativeVerification_exports, {
   resolvePackCommandsForRoot: () => resolvePackCommandsForRoot
 });
 import { readFile as readFile5 } from "node:fs/promises";
-import path50 from "node:path";
+import path51 from "node:path";
 function nativePackEnabled(env = process.env) {
   const v = env.ZELARI_VERIFY_PACK?.toLowerCase();
   if (v === "0" || v === "off" || v === "false") return false;
@@ -49149,7 +49195,7 @@ function packTimeoutMs(env = process.env) {
 }
 async function readPackageScripts(cwd = process.cwd()) {
   try {
-    const raw = await readFile5(path50.join(cwd, "package.json"), "utf-8");
+    const raw = await readFile5(path51.join(cwd, "package.json"), "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && typeof parsed.scripts === "object") {
       return parsed.scripts;
@@ -49195,16 +49241,28 @@ var init_nativeVerification = __esm({
 
 // src/cli/kraken/verificationBridge.ts
 import { createHash as createHash14 } from "node:crypto";
-function strictDoneEnabled(surface = "kraken") {
+function strictDoneEnabled(surface = "kraken", env = process.env) {
   if (surface === "mission") {
-    const v2 = process.env.ZELARI_MISSION_STRICT;
+    const v2 = env.ZELARI_MISSION_STRICT;
     if (v2 === "0" || v2 === "false") return false;
     return true;
   }
-  const v = process.env.ZELARI_STRICT_DONE;
+  const v = env.ZELARI_STRICT_DONE;
   if (v === "0" || v === "false") return false;
   return true;
 }
+function strictEnvOverlay(knobs, base2 = process.env) {
+  const overlay = { ...base2 };
+  if (knobs.strictDone !== void 0) {
+    const v = knobs.strictDone ? "1" : "0";
+    overlay.ZELARI_STRICT_DONE = v;
+    overlay.ZELARI_MISSION_STRICT = v;
+  }
+  if (knobs.missionStrict !== void 0) {
+    overlay.ZELARI_MISSION_STRICT = knobs.missionStrict ? "1" : "0";
+  }
+  return overlay;
+}
 function criterionId(check2, index) {
   const slug = check2.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
   return `check-${index + 1}-${slug || "criterion"}`;
@@ -49341,7 +49399,7 @@ async function anchorSelectionEvidence(results, emit, toolTrace) {
 }
 async function evaluateStrictBuildGate(mode, options = {}) {
   const gate = evaluateKrakenCompletionGate(mode);
-  const strictOn = strictDoneEnabled(options.surface ?? "kraken");
+  const strictOn = strictDoneEnabled(options.surface ?? "kraken", options.env);
   const nativeOn = nativePackEnabled(options.env ?? process.env);
   const selectionAvailable = gate.selectionUsed && gate.total > 0;
   const scopeContract = options.taskContract ?? activeContractScope()?.contract;
@@ -49670,7 +49728,7 @@ var init_completionProofAttestation = __esm({
 // src/cli/kraken/completionProofPersist.ts
 import { open, rename, rm as rm2 } from "node:fs/promises";
 import { randomBytes as randomBytes5 } from "node:crypto";
-import path51 from "node:path";
+import path52 from "node:path";
 function isTruthyFlag2(v) {
   const n = v?.trim().toLowerCase();
   return n === "1" || n === "true" || n === "yes" || n === "on";
@@ -49712,8 +49770,8 @@ function isWindowsRenameBlock(err) {
   return code === "EPERM" || code === "ENOTEMPTY" || code === "EEXIST";
 }
 async function writeFileAtomic(target, data) {
-  const dir = path51.dirname(target);
-  const tmp = path51.join(dir, `.${path51.basename(target)}.${randomBytes5(6).toString("hex")}.tmp`);
+  const dir = path52.dirname(target);
+  const tmp = path52.join(dir, `.${path52.basename(target)}.${randomBytes5(6).toString("hex")}.tmp`);
   let fh = null;
   try {
     fh = await open(tmp, "w");
@@ -49759,7 +49817,7 @@ var init_completionProofPersist = __esm({
 
 // src/cli/kraken/completionProof.ts
 import { mkdir as mkdir2 } from "node:fs/promises";
-import path52 from "node:path";
+import path53 from "node:path";
 function verdictOf(evaluation) {
   return evaluation.evaluation?.verdict ?? (evaluation.blocked ? "BLOCKED" : "PASS");
 }
@@ -49904,7 +49962,7 @@ async function writeCompletionProofDetailed(evaluation, options = {}) {
   const mode = options.persistenceMode ?? activeProofPersistenceMode();
   try {
     const baseDir = options.baseDir ?? process.cwd();
-    const dir = path52.join(baseDir, ".zelari");
+    const dir = path53.join(baseDir, ".zelari");
     await mkdir2(dir, { recursive: true });
     const requested = options.attestation ?? {};
     const plan = requested.skipProbes || requested.verificationPlan !== void 0 ? void 0 : await defaultVerificationPlanSnapshot(baseDir);
@@ -49924,8 +49982,8 @@ async function writeCompletionProofDetailed(evaluation, options = {}) {
       baseDir
     );
     const rendered = renderCompletionProof(evaluation, options.meta ?? {}, wrapper.attestation);
-    const markdownPath = path52.join(dir, "completion-proof.md");
-    const jsonPath = path52.join(dir, "completion-proof.json");
+    const markdownPath = path53.join(dir, "completion-proof.md");
+    const jsonPath = path53.join(dir, "completion-proof.json");
     await writeFileAtomic(markdownPath, rendered.markdown);
     await writeFileAtomic(jsonPath, rendered.json);
     return { paths: { markdownPath, jsonPath }, mode, requiredBlockReason: null };
@@ -49951,15 +50009,53 @@ var init_completionProof = __esm({
   }
 });
 
+// src/cli/memory/spineTelemetry.ts
+function spineMemoryEventNote(handle, event) {
+  try {
+    if (event.type === "memory_recall_end" && event.reason === "context-built") {
+      handle.note("context.projection", {
+        subject: "context.projection",
+        ...event.contextChars !== void 0 ? { contextChars: event.contextChars } : {},
+        ...event.returnedCount !== void 0 ? { returnedCount: event.returnedCount } : {},
+        ...event.durationMs !== void 0 ? { durationMs: event.durationMs } : {},
+        ...event.backend !== void 0 ? { backend: event.backend } : {}
+      });
+      return;
+    }
+    handle.note(`memory_${event.type}`, {
+      subject: "memory_event",
+      type: event.type,
+      ...event.durationMs !== void 0 ? { durationMs: event.durationMs } : {},
+      ...event.candidateCount !== void 0 ? { candidateCount: event.candidateCount } : {},
+      ...event.returnedCount !== void 0 ? { returnedCount: event.returnedCount } : {},
+      ...event.backend !== void 0 ? { backend: event.backend } : {},
+      ...event.reason !== void 0 ? { reason: event.reason } : {},
+      ...event.memoryId !== void 0 ? { memoryId: event.memoryId } : {}
+    });
+  } catch {
+  }
+}
+function memorySinkFor(holder) {
+  return (event) => {
+    const handle = holder.current;
+    if (handle) spineMemoryEventNote(handle, event);
+  };
+}
+var init_spineTelemetry = __esm({
+  "src/cli/memory/spineTelemetry.ts"() {
+    "use strict";
+  }
+});
+
 // src/cli/state/fileStateStore.ts
 import { createHash as createHash16, randomUUID as randomUUID4 } from "node:crypto";
 import { promises as fs22 } from "node:fs";
-import * as path53 from "node:path";
+import * as path54 from "node:path";
 function shortId() {
   return randomUUID4().replace(/-/g, "").slice(0, 12);
 }
 async function writeJsonAtomic(filePath, data) {
-  await fs22.mkdir(path53.dirname(filePath), { recursive: true });
+  await fs22.mkdir(path54.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
   await fs22.writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
   await fs22.rename(tmp, filePath);
@@ -50020,11 +50116,11 @@ var init_fileStateStore = __esm({
       indexPath = "";
       async init(projectRoot) {
         this.root = projectRoot;
-        this.stateDir = path53.join(projectRoot, ".zelari", "state");
-        this.commitsDir = path53.join(this.stateDir, "commits");
-        this.artifactsDir = path53.join(this.stateDir, "artifacts");
-        this.headPath = path53.join(this.stateDir, "HEAD.json");
-        this.indexPath = path53.join(this.stateDir, "index.jsonl");
+        this.stateDir = path54.join(projectRoot, ".zelari", "state");
+        this.commitsDir = path54.join(this.stateDir, "commits");
+        this.artifactsDir = path54.join(this.stateDir, "artifacts");
+        this.headPath = path54.join(this.stateDir, "HEAD.json");
+        this.indexPath = path54.join(this.stateDir, "index.jsonl");
         await fs22.mkdir(this.commitsDir, { recursive: true });
         await fs22.mkdir(this.artifactsDir, { recursive: true });
       }
@@ -50037,13 +50133,13 @@ var init_fileStateStore = __esm({
         const discoveries = input.discoveries ?? [];
         const parent = await this.head();
         const id3 = shortId();
-        const artifactRel = path53.join("artifacts", id3);
-        const artifactAbs = path53.join(this.artifactsDir, id3);
+        const artifactRel = path54.join("artifacts", id3);
+        const artifactAbs = path54.join(this.artifactsDir, id3);
         await fs22.mkdir(artifactAbs, { recursive: true });
         const summary = defaultSummary(input, discoveries);
-        await fs22.writeFile(path53.join(artifactAbs, "summary.md"), summary + "\n", "utf8");
-        await writeJsonAtomic(path53.join(artifactAbs, "discoveries.json"), discoveries);
-        await writeJsonAtomic(path53.join(artifactAbs, "verification.json"), input.verification);
+        await fs22.writeFile(path54.join(artifactAbs, "summary.md"), summary + "\n", "utf8");
+        await writeJsonAtomic(path54.join(artifactAbs, "discoveries.json"), discoveries);
+        await writeJsonAtomic(path54.join(artifactAbs, "verification.json"), input.verification);
         const meta3 = {
           id: id3,
           parentId: parent?.id ?? null,
@@ -50055,14 +50151,14 @@ var init_fileStateStore = __esm({
           workspaceCheckpointId: input.workspaceCheckpointId,
           verification: {
             ...input.verification,
-            reportPath: input.verification.reportPath ?? path53.join(".zelari", "state", artifactRel, "verification.json").replace(/\\/g, "/")
+            reportPath: input.verification.reportPath ?? path54.join(".zelari", "state", artifactRel, "verification.json").replace(/\\/g, "/")
           },
           changedPaths: input.changedPaths ?? [],
           stablePromptHash: input.stablePromptHash,
           discoveryCount: discoveries.length,
           artifactDir: artifactRel.replace(/\\/g, "/")
         };
-        await writeJsonAtomic(path53.join(this.commitsDir, `${id3}.json`), meta3);
+        await writeJsonAtomic(path54.join(this.commitsDir, `${id3}.json`), meta3);
         await writeJsonAtomic(this.headPath, { id: id3, updatedAt: meta3.createdAt });
         await fs22.appendFile(this.indexPath, JSON.stringify({ id: id3, createdAt: meta3.createdAt, label: meta3.label }) + "\n", "utf8");
         return stripStored(meta3);
@@ -50073,7 +50169,7 @@ var init_fileStateStore = __esm({
         return this.get(head.id);
       }
       async get(id3) {
-        const stored = await readJsonFile(path53.join(this.commitsDir, `${id3}.json`));
+        const stored = await readJsonFile(path54.join(this.commitsDir, `${id3}.json`));
         return stored ? stripStored(stored) : null;
       }
       async list(limit = 20) {
@@ -50112,9 +50208,9 @@ var init_fileStateStore = __esm({
       async loadDiscoveries(id3) {
         const meta3 = id3 ? await this.get(id3) : await this.head();
         if (!meta3) return [];
-        const stored = await readJsonFile(path53.join(this.commitsDir, `${meta3.id}.json`));
+        const stored = await readJsonFile(path54.join(this.commitsDir, `${meta3.id}.json`));
         if (!stored?.artifactDir) return [];
-        const discPath = path53.join(this.stateDir, stored.artifactDir, "discoveries.json");
+        const discPath = path54.join(this.stateDir, stored.artifactDir, "discoveries.json");
         return await readJsonFile(discPath) ?? [];
       }
       async materializeContext(id3, maxChars = DEFAULT_MATERIALIZE_CHARS) {
@@ -51367,10 +51463,10 @@ var init_mode = __esm({
 
 // src/cli/headless.ts
 import { readFileSync as readFileSync23 } from "node:fs";
-import path54 from "node:path";
+import path55 from "node:path";
 function resolveHeadlessCwd(opts) {
   const raw = typeof opts.cwd === "string" ? opts.cwd.trim() : "";
-  return path54.resolve(raw.length > 0 ? raw : process.cwd());
+  return path55.resolve(raw.length > 0 ? raw : process.cwd());
 }
 function defaultProfileForMode(mode) {
   switch (mode) {
@@ -51401,7 +51497,8 @@ function parseHeadlessFlags(argv) {
   let profile;
   let resumeSessionId;
   let exportSessionPath;
-  let strictDone = false;
+  let strictDone;
+  let missionStrict;
   let krakenGraph;
   let planOnly = process.env.ZELARI_KRAKEN_PLAN_ONLY === "1" || process.env.ZELARI_KRAKEN_PLAN_ONLY === "true";
   let runPlan = process.env.ZELARI_KRAKEN_RUN_PLAN;
@@ -51563,7 +51660,10 @@ function parseHeadlessFlags(argv) {
       strictDone = true;
     } else if (arg === "--no-strict-done") {
       strictDone = false;
-      process.env.ZELARI_MISSION_STRICT = "0";
+    } else if (arg === "--mission-strict") {
+      missionStrict = true;
+    } else if (arg === "--no-mission-strict") {
+      missionStrict = false;
     } else if (arg === "--kraken-graph") {
       krakenGraph = argv[i + 1];
       i++;
@@ -51618,7 +51718,8 @@ function parseHeadlessFlags(argv) {
       ...profile ? { profile } : {},
       ...resumeSessionId ? { resumeSessionId } : {},
       ...exportSessionPath ? { exportSessionPath } : {},
-      ...strictDone ? { strictDone: true } : {},
+      ...strictDone !== void 0 ? { strictDone } : {},
+      ...missionStrict !== void 0 ? { missionStrict } : {},
       ...krakenGraph ? { krakenGraph } : {},
       ...planOnly ? { planOnly: true } : {},
       ...runPlan ? { runPlan } : {},
@@ -52305,7 +52406,7 @@ var init_claudeProvider = __esm({
 // src/cli/memory/legacyImport.ts
 import { createHash as createHash17 } from "node:crypto";
 import { promises as fs23 } from "node:fs";
-import * as path55 from "node:path";
+import * as path56 from "node:path";
 function sourceId(fact, line) {
   return `jsonl:${fact.id ?? createHash17("sha256").update(line).digest("hex")}`;
 }
@@ -52323,7 +52424,7 @@ function timestamp(value) {
 }
 async function importLegacyMemoryLog(backend, service) {
   const result = { found: 0, imported: 0, skipped: 0, corrupt: 0 };
-  const logPath = path55.join(path55.dirname(backend.databasePath), "log.jsonl");
+  const logPath = path56.join(path56.dirname(backend.databasePath), "log.jsonl");
   let raw;
   try {
     raw = await fs23.readFile(logPath, "utf8");
@@ -52506,7 +52607,7 @@ var init_sqliteCodec = __esm({
 // src/cli/memory/sqliteRpc.ts
 import { existsSync as existsSync30 } from "node:fs";
 import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
-import * as path56 from "node:path";
+import * as path57 from "node:path";
 import { Worker } from "node:worker_threads";
 function isBusy(error51) {
   const candidate = error51;
@@ -52515,10 +52616,10 @@ function isBusy(error51) {
   );
 }
 function resolveWorkerUrl() {
-  const here = path56.dirname(fileURLToPath2(import.meta.url));
-  const direct = path56.join(here, "sqliteWorker.mjs");
+  const here = path57.dirname(fileURLToPath2(import.meta.url));
+  const direct = path57.join(here, "sqliteWorker.mjs");
   if (existsSync30(direct)) return pathToFileURL2(direct);
-  return pathToFileURL2(path56.join(here, "memory", "sqliteWorker.mjs"));
+  return pathToFileURL2(path57.join(here, "memory", "sqliteWorker.mjs"));
 }
 var SqliteWorkerRpc;
 var init_sqliteRpc = __esm({
@@ -52807,7 +52908,7 @@ WHERE NOT EXISTS (SELECT 1 FROM memory_fts f WHERE f.node_id = n.id);
 // src/cli/memory/sqliteBackend.ts
 import { createHash as createHash18, randomUUID as randomUUID5 } from "node:crypto";
 import { promises as fs24 } from "node:fs";
-import * as path57 from "node:path";
+import * as path58 from "node:path";
 function boundedLimit(value, fallback = 50) {
   return Math.max(1, Math.min(Math.floor(value ?? fallback), 1e5));
 }
@@ -52869,16 +52970,16 @@ VALUES (${Array.from({ length: 19 }, () => "?").join(",")})`;
         try {
           resolved = await fs24.realpath(projectRoot);
         } catch {
-          resolved = path57.resolve(projectRoot);
+          resolved = path58.resolve(projectRoot);
         }
         if (this.initialized && resolved === this.projectRoot) return;
         if (this.initialized) await this.close();
         const filename = this.options.filename ?? "memory.db";
-        if (path57.basename(filename) !== filename || filename === "." || filename === "..") {
+        if (path58.basename(filename) !== filename || filename === "." || filename === "..") {
           throw new Error("SQLite memory filename must not contain a path.");
         }
-        const zelariDirectory = path57.join(resolved, ".zelari");
-        const directory = path57.join(zelariDirectory, "memory");
+        const zelariDirectory = path58.join(resolved, ".zelari");
+        const directory = path58.join(zelariDirectory, "memory");
         for (const candidate of [zelariDirectory, directory]) {
           let stat7;
           try {
@@ -52897,12 +52998,12 @@ VALUES (${Array.from({ length: 19 }, () => "?").join(",")})`;
           }
         }
         const canonicalDirectory = await fs24.realpath(directory);
-        const relativeDirectory = path57.relative(resolved, canonicalDirectory);
-        if (relativeDirectory.startsWith("..") || path57.isAbsolute(relativeDirectory)) {
+        const relativeDirectory = path58.relative(resolved, canonicalDirectory);
+        if (relativeDirectory.startsWith("..") || path58.isAbsolute(relativeDirectory)) {
           throw new Error("SQLite memory directory resolves outside the active project.");
         }
         this.projectRoot = resolved;
-        this.databasePath = path57.join(canonicalDirectory, filename);
+        this.databasePath = path58.join(canonicalDirectory, filename);
         const opened = await this.rpc.open({
           dbPath: this.databasePath,
           schemaSql: SQLITE_MEMORY_BASE_SCHEMA,
@@ -53435,7 +53536,7 @@ __export(serviceFactory_exports, {
 });
 import { createHash as createHash19 } from "node:crypto";
 import { promises as fs25 } from "node:fs";
-import * as path58 from "node:path";
+import * as path59 from "node:path";
 function isMemoryV2Enabled(env = process.env) {
   if (env.ZELARI_MEMORY === "0") return false;
   if (env.ZELARI_MEMORY_BACKEND === "file" || env.ZELARI_MEMORY_BACKEND === "jsonl") return false;
@@ -53456,7 +53557,7 @@ async function canonicalProjectId(projectRoot) {
   try {
     canonical = await fs25.realpath(projectRoot);
   } catch {
-    canonical = path58.resolve(projectRoot);
+    canonical = path59.resolve(projectRoot);
   }
   canonical = canonical.replace(/\\/g, "/").replace(/\/$/, "");
   if (process.platform === "win32") canonical = canonical.toLocaleLowerCase("en-US");
@@ -54182,8 +54283,8 @@ function readPlan(ctx) {
     } catch {
     }
   }
-  const path87 = workspaceFile(ctx.rootDir, "plan");
-  const doc = ctx.storage.readIfExists(path87);
+  const path91 = workspaceFile(ctx.rootDir, "plan");
+  const doc = ctx.storage.readIfExists(path91);
   if (!doc) return { phases: [], tasks: [], milestones: [] };
   const meta3 = doc.meta;
   return {
@@ -54361,7 +54462,7 @@ function addMilestoneRecord(ctx, summary, input) {
     dueDate: input.dueDate,
     targetVersion: version2
   });
-  const path87 = join31(ctx.rootDir, "milestones", `${id3}.md`);
+  const path91 = join31(ctx.rootDir, "milestones", `${id3}.md`);
   const meta3 = {
     kind: "milestone",
     id: id3,
@@ -54378,7 +54479,7 @@ function addMilestoneRecord(ctx, summary, input) {
     `Target version: ${version2}`,
     ""
   ].join("\n");
-  ctx.storage.write(path87, meta3, body);
+  ctx.storage.write(path91, meta3, body);
   return { id: id3, created: true };
 }
 function readPlanSummary(ctx) {
@@ -54582,7 +54683,7 @@ function addIdeaStub(ctx) {
         const tags = args["tags"] ?? [];
         const category = args["category"] ?? "General";
         const id3 = `${nextAdrId(ctx)}-${slugify3(title)}`;
-        const path87 = workspaceArtifact(ctx.rootDir, "decisions", id3);
+        const path91 = workspaceArtifact(ctx.rootDir, "decisions", id3);
         const meta3 = {
           kind: "adr",
           status: "proposed",
@@ -54608,7 +54709,7 @@ function addIdeaStub(ctx) {
           ...consequences.map((c) => `- ${c}`),
           ""
         ].join("\n");
-        ctx.storage.write(path87, meta3, body);
+        ctx.storage.write(path91, meta3, body);
         return `ADR ${id3} created: "${title}". Status: proposed. Promote to accepted via /update ADR or manual edit.`;
       });
     }
@@ -54690,14 +54791,14 @@ function createDocumentStub(ctx) {
           ctx.storage.write(risksPath, riskMeta, content);
           return `Document "${title}" created at risks.md (workspace root).`;
         }
-        const path87 = workspaceArtifact(ctx.rootDir, "docs", slug);
+        const path91 = workspaceArtifact(ctx.rootDir, "docs", slug);
         const meta3 = {
           kind: "doc",
           id: slug,
           date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
           tags
         };
-        ctx.storage.write(path87, meta3, content);
+        ctx.storage.write(path91, meta3, content);
         return `Document "${title}" created at docs/${slug}.md.`;
       });
     }
@@ -55084,10 +55185,10 @@ function getUserMcpPath() {
 function getProjectMcpPath(projectRoot) {
   return join32(projectRoot, ".zelari", "mcp.json");
 }
-function readFile6(path87) {
-  if (!existsSync37(path87)) return {};
+function readFile6(path91) {
+  if (!existsSync37(path91)) return {};
   try {
-    const parsed = JSON.parse(readFileSync29(path87, "utf8"));
+    const parsed = JSON.parse(readFileSync29(path91, "utf8"));
     const out = {};
     for (const [name, cfg] of Object.entries(parsed.mcpServers ?? {})) {
       if (!cfg || typeof cfg.command !== "string" || !cfg.command.trim()) continue;
@@ -55103,10 +55204,10 @@ function readFile6(path87) {
     return {};
   }
 }
-function writeFile2(path87, servers) {
-  mkdirSync16(dirname9(path87), { recursive: true });
+function writeFile2(path91, servers) {
+  mkdirSync16(dirname9(path91), { recursive: true });
   const body = { mcpServers: servers };
-  writeFileSync18(path87, `${JSON.stringify(body, null, 2)}
+  writeFileSync18(path91, `${JSON.stringify(body, null, 2)}
 `, "utf8");
 }
 function listMcpServers(projectRoot) {
@@ -55139,9 +55240,9 @@ function upsertMcpServer(opts) {
   if (!opts.config.command?.trim()) {
     return { ok: false, error: "command is required" };
   }
-  let path87;
+  let path91;
   if (opts.scope === "user") {
-    path87 = getUserMcpPath();
+    path91 = getUserMcpPath();
   } else {
     const root = opts.projectRoot?.trim();
     if (!root) {
@@ -55150,30 +55251,30 @@ function upsertMcpServer(opts) {
         error: "projectRoot required for project scope (Open Folder first)"
       };
     }
-    path87 = getProjectMcpPath(root);
+    path91 = getProjectMcpPath(root);
   }
-  const current = readFile6(path87);
+  const current = readFile6(path91);
   current[name] = {
     command: opts.config.command.trim(),
     args: opts.config.args,
     env: opts.config.env,
     enabled: opts.config.enabled !== false
   };
-  writeFile2(path87, current);
-  return { ok: true, path: path87 };
+  writeFile2(path91, current);
+  return { ok: true, path: path91 };
 }
 function removeMcpServer(opts) {
-  const path87 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
-  if (!path87) {
+  const path91 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
+  if (!path91) {
     return { ok: false, error: "projectRoot required for project scope" };
   }
-  const current = readFile6(path87);
+  const current = readFile6(path91);
   if (!(opts.name in current)) {
-    return { ok: false, error: `Server "${opts.name}" not found in ${path87}` };
+    return { ok: false, error: `Server "${opts.name}" not found in ${path91}` };
   }
   delete current[opts.name];
-  writeFile2(path87, current);
-  return { ok: true, path: path87 };
+  writeFile2(path91, current);
+  return { ok: true, path: path91 };
 }
 var init_mcpConfigIo = __esm({
   "src/cli/mcp/mcpConfigIo.ts"() {
@@ -55574,10 +55675,10 @@ import { createHash as createHash20 } from "node:crypto";
 import { join as join34 } from "node:path";
 import { readFile as readFile7 } from "node:fs/promises";
 async function readPackageJson3(projectRoot) {
-  const path87 = join34(projectRoot, "package.json");
-  if (!existsSync39(path87)) return null;
+  const path91 = join34(projectRoot, "package.json");
+  if (!existsSync39(path91)) return null;
   try {
-    return JSON.parse(await readFile7(path87, "utf8"));
+    return JSON.parse(await readFile7(path91, "utf8"));
   } catch {
     return null;
   }
@@ -55659,9 +55760,9 @@ async function genBuild(ctx) {
   ].join("\n");
 }
 async function genOpenQuestions(ctx) {
-  const path87 = join34(ctx.rootDir, "risks.md");
-  if (!existsSync39(path87)) return "_No open questions._";
-  const content = readFileSync31(path87, "utf8");
+  const path91 = join34(ctx.rootDir, "risks.md");
+  if (!existsSync39(path91)) return "_No open questions._";
+  const content = readFileSync31(path91, "utf8");
   const lines = content.split("\n");
   const questions = [];
   let currentTitle = "";
@@ -55935,9 +56036,9 @@ function versionKey(value) {
 function firstString2(v) {
   return typeof v === "string" && v.trim().length > 0 ? v : null;
 }
-function readFileSyncSafe(path87) {
+function readFileSyncSafe(path91) {
   try {
-    return readFileSync32(path87, "utf8");
+    return readFileSync32(path91, "utf8");
   } catch {
     return null;
   }
@@ -56400,8 +56501,8 @@ async function runPostCouncilHook(ctx, options) {
           sources: scope.sources
         } : void 0
       });
-      const path87 = writeCouncilCompletion(ctx.rootDir, completion);
-      completionHook = { ran: true, path: path87, completion };
+      const path91 = writeCouncilCompletion(ctx.rootDir, completion);
+      completionHook = { ran: true, path: path91, completion };
     } catch (err) {
       completionHook = {
         ran: true,
@@ -56446,7 +56547,7 @@ import {
   writeFileSync as writeFileSync21,
   mkdirSync as mkdirSync17
 } from "node:fs";
-import path59 from "node:path";
+import path60 from "node:path";
 import os10 from "node:os";
 var FeedbackStore;
 var init_councilFeedback = __esm({
@@ -56457,7 +56558,7 @@ var init_councilFeedback = __esm({
       now;
       entries = [];
       constructor(options = {}) {
-        this.file = options.file ?? (process.env.ANATHEMA_COUNCIL_FEEDBACK_FILE ?? path59.join(os10.homedir(), ".tmp", "zelari-code", "council-feedback.json"));
+        this.file = options.file ?? (process.env.ANATHEMA_COUNCIL_FEEDBACK_FILE ?? path60.join(os10.homedir(), ".tmp", "zelari-code", "council-feedback.json"));
         this.now = options.now ?? Date.now;
         this.load();
       }
@@ -56563,7 +56664,7 @@ var init_councilFeedback = __esm({
         }
       }
       save() {
-        mkdirSync17(path59.dirname(this.file), { recursive: true });
+        mkdirSync17(path60.dirname(this.file), { recursive: true });
         writeFileSync21(
           this.file,
           JSON.stringify({ entries: this.entries }, null, 2),
@@ -56631,7 +56732,7 @@ import { execFile as execFile4 } from "node:child_process";
 import { promisify as promisify3 } from "node:util";
 import { mkdtempSync, rmSync as rmSync2 } from "node:fs";
 import { tmpdir as tmpdir3 } from "node:os";
-import path60 from "node:path";
+import path61 from "node:path";
 import { randomUUID as randomUUID6 } from "node:crypto";
 async function git4(cwd, args, env) {
   const { stdout } = await execFileAsync3("git", ["-C", cwd, ...args], {
@@ -56651,8 +56752,8 @@ async function isGitRepo(cwd) {
   return await gitSafe(cwd, ["rev-parse", "--is-inside-work-tree"]) === "true";
 }
 async function withTempIndex(fn) {
-  const dir = mkdtempSync(path60.join(tmpdir3(), "zelari-ckpt-"));
-  const indexFile = path60.join(dir, "index");
+  const dir = mkdtempSync(path61.join(tmpdir3(), "zelari-ckpt-"));
+  const indexFile = path61.join(dir, "index");
   try {
     return await fn(indexFile);
   } finally {
@@ -56743,7 +56844,7 @@ async function restoreCheckpoint(cwd, id3) {
     const deleted = [];
     for (const rel2 of added) {
       try {
-        rmSync2(path60.join(cwd, rel2), { force: true });
+        rmSync2(path61.join(cwd, rel2), { force: true });
         deleted.push(rel2);
       } catch {
       }
@@ -56847,7 +56948,7 @@ __export(fileBackend_exports, {
 });
 import { randomUUID as randomUUID7 } from "node:crypto";
 import { promises as fs27 } from "node:fs";
-import * as path61 from "node:path";
+import * as path62 from "node:path";
 function tokenize2(text) {
   return text.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((t) => t.length >= 3);
 }
@@ -56861,10 +56962,12 @@ function matchesFilter(metadata2, filter) {
 function isMemoryEnabled(env = process.env) {
   return env.ZELARI_MEMORY !== "0";
 }
-async function getMemoryBackend(projectRoot, env = process.env) {
+async function getMemoryBackend(projectRoot, env = process.env, onEvent) {
   if (!isMemoryEnabled(env)) return new NoopMemoryBackend();
   if (isMemoryV2Enabled(env)) {
-    const service = await getMemoryService(projectRoot, env);
+    const service = await getMemoryService(projectRoot, env, {
+      ...onEvent ? { onEvent } : {}
+    });
     if (service instanceof NoopMemoryService) return new NoopMemoryBackend();
     return new LegacyMemoryBackendAdapter(service);
   }
@@ -56898,8 +57001,8 @@ var init_fileBackend = __esm({
       logPath = "";
       memoryDir = "";
       async init(projectRoot) {
-        this.memoryDir = path61.join(projectRoot, ".zelari", "memory");
-        this.logPath = path61.join(this.memoryDir, "log.jsonl");
+        this.memoryDir = path62.join(projectRoot, ".zelari", "memory");
+        this.logPath = path62.join(this.memoryDir, "log.jsonl");
         await fs27.mkdir(this.memoryDir, { recursive: true });
       }
       async add(content, metadata2 = {}, graph) {
@@ -56972,12 +57075,12 @@ var init_fileBackend = __esm({
 
 // src/cli/traceStore.ts
 import { promises as fs28 } from "node:fs";
-import * as path62 from "node:path";
+import * as path63 from "node:path";
 function traceDir(projectRoot) {
-  return path62.join(projectRoot, ".zelari", "trace");
+  return path63.join(projectRoot, ".zelari", "trace");
 }
 function tracePath(projectRoot, missionId) {
-  return path62.join(traceDir(projectRoot), `${missionId}.json`);
+  return path63.join(traceDir(projectRoot), `${missionId}.json`);
 }
 async function saveTrace(projectRoot, missionId, entries) {
   const dir = traceDir(projectRoot);
@@ -57014,7 +57117,7 @@ __export(zelariMission_exports, {
 });
 import { randomUUID as randomUUID8 } from "node:crypto";
 import { promises as fs29 } from "node:fs";
-import * as path63 from "node:path";
+import * as path64 from "node:path";
 function resolveMaxIterations(env = process.env) {
   const raw = env.ZELARI_MISSION_MAX_ITER;
   const n = raw ? Number.parseInt(raw, 10) : DEFAULT_MAX_ITER;
@@ -57057,10 +57160,10 @@ function isMissionAutoStart(env = process.env) {
   return env.ZELARI_MISSION_AUTO === "1";
 }
 async function writeMissionState(projectRoot, state3) {
-  const dir = path63.join(projectRoot, ".zelari");
+  const dir = path64.join(projectRoot, ".zelari");
   await fs29.mkdir(dir, { recursive: true });
   await fs29.writeFile(
-    path63.join(dir, "mission-state.json"),
+    path64.join(dir, "mission-state.json"),
     JSON.stringify(state3, null, 2) + "\n",
     "utf8"
   );
@@ -57735,7 +57838,7 @@ function safeSocketPath(socketPath) {
   return socketPath.trim();
 }
 function startPermissionBroker(socketPath, handlers, opts) {
-  const path87 = safeSocketPath(socketPath);
+  const path91 = safeSocketPath(socketPath);
   const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
   const sockets = /* @__PURE__ */ new Set();
   const server = createServer2((socket) => {
@@ -57835,10 +57938,10 @@ function startPermissionBroker(socketPath, handlers, opts) {
   return new Promise((resolve9, reject) => {
     const onError = (err) => reject(err);
     server.once("error", onError);
-    server.listen(path87, () => {
+    server.listen(path91, () => {
       server.removeListener("error", onError);
       resolve9({
-        socketPath: path87,
+        socketPath: path91,
         stop: () => new Promise((res) => {
           for (const s of sockets) s.destroy();
           sockets.clear();
@@ -57849,7 +57952,7 @@ function startPermissionBroker(socketPath, handlers, opts) {
             if (done) return;
             done = true;
             if (process.platform !== "win32") {
-              unlink(path87, () => res());
+              unlink(path91, () => res());
             } else {
               res();
             }
@@ -57862,11 +57965,11 @@ function startPermissionBroker(socketPath, handlers, opts) {
   });
 }
 function requestBrokerAsk(socketPath, ask, opts) {
-  const path87 = safeSocketPath(socketPath);
+  const path91 = safeSocketPath(socketPath);
   const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
   const connectTimeoutMs = opts?.connectTimeoutMs ?? PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS;
   return new Promise((resolve9, reject) => {
-    const socket = connect(path87);
+    const socket = connect(path91);
     let buffer = "";
     let settled = false;
     const settle = (fn) => {
@@ -57881,7 +57984,7 @@ function requestBrokerAsk(socketPath, ask, opts) {
       settle(
         () => reject(
           new Error(
-            `permission broker unavailable at "${path87}" (connect timed out after ${connectTimeoutMs}ms)`
+            `permission broker unavailable at "${path91}" (connect timed out after ${connectTimeoutMs}ms)`
           )
         )
       );
@@ -58021,7 +58124,7 @@ var init_brokerHandlers = __esm({
 // src/cli/gitOps.ts
 import { execFile as execFile5 } from "node:child_process";
 import { promisify as promisify4 } from "node:util";
-import path64 from "node:path";
+import path65 from "node:path";
 async function git5(cwd, args) {
   try {
     const { stdout } = await execFileAsync4("git", ["-C", cwd, ...args], {
@@ -58066,7 +58169,7 @@ async function undoWorkingChanges(opts = {}) {
   };
 }
 function defaultProjectRoot() {
-  return path64.resolve(__dirname, "..", "..", "..");
+  return path65.resolve(__dirname, "..", "..", "..");
 }
 var execFileAsync4;
 var init_gitOps = __esm({
@@ -58684,9 +58787,9 @@ __export(graphMemory_exports, {
   toGraphSnapshot: () => toGraphSnapshot
 });
 import { promises as fs32 } from "node:fs";
-import path67 from "node:path";
+import path68 from "node:path";
 function snapshotPath(cwd) {
-  return path67.join(cwd, SNAPSHOT_DIR, SNAPSHOT_FILE);
+  return path68.join(cwd, SNAPSHOT_DIR, SNAPSHOT_FILE);
 }
 function toGraphSnapshot(graph, opts) {
   const unresolved = (opts.unresolvedFindings ?? []).map((u) => ({
@@ -58713,7 +58816,7 @@ async function saveGraphSnapshot(cwd, snapshot) {
   try {
     await fs32.access(cwd);
     const file2 = snapshotPath(cwd);
-    await fs32.mkdir(path67.dirname(file2), { recursive: true });
+    await fs32.mkdir(path68.dirname(file2), { recursive: true });
     await fs32.writeFile(file2, JSON.stringify(snapshot, null, 2) + "\n", "utf8");
   } catch {
   }
@@ -58780,13 +58883,19 @@ var SNAPSHOT_DIR, SNAPSHOT_FILE, MAX_SNAPSHOT_FINDINGS_CHARS;
 var init_graphMemory = __esm({
   "src/cli/kraken/graphMemory.ts"() {
     "use strict";
-    SNAPSHOT_DIR = path67.join(".zelari", "kraken");
+    SNAPSHOT_DIR = path68.join(".zelari", "kraken");
     SNAPSHOT_FILE = "last-graph.json";
     MAX_SNAPSHOT_FINDINGS_CHARS = 400;
   }
 });
 
 // src/cli/kraken/tentacle.ts
+var tentacle_exports = {};
+__export(tentacle_exports, {
+  TASK_TOOL_TIMEOUT_MS: () => TASK_TOOL_TIMEOUT_MS,
+  runSubAgent: () => runSubAgent,
+  runTentacle: () => runTentacle
+});
 var init_tentacle = __esm({
   "src/cli/kraken/tentacle.ts"() {
     "use strict";
@@ -58852,14 +58961,14 @@ var init_transactional = __esm({
 
 // src/cli/kraken/workbench.ts
 import { promises as fs33 } from "node:fs";
-import path68 from "node:path";
+import path69 from "node:path";
 function isWorkbenchEnabled(env = process.env) {
   const v = (env.ZELARI_KRAKEN_WORKBENCH ?? "1").trim().toLowerCase();
   if (v === "0" || v === "false" || v === "no" || v === "off") return false;
   return true;
 }
 function workbenchPath(cwd, graphId) {
-  return path68.join(cwd, ".zelari", "radio", `workbench-${graphId}.md`);
+  return path69.join(cwd, ".zelari", "radio", `workbench-${graphId}.md`);
 }
 function countByStatus2(nodes) {
   const out = { pending: 0, running: 0, done: 0, error: 0, skipped: 0 };
@@ -59022,7 +59131,7 @@ var init_workbench = __esm({
         if (!this.enabled) return null;
         if (!this.dirty && this.lastWrite) return this.lastWrite;
         const out = workbenchPath(this.cwd, this.graphId);
-        await fs33.mkdir(path68.dirname(out), { recursive: true });
+        await fs33.mkdir(path69.dirname(out), { recursive: true });
         const body = this.render();
         const tmp = `${out}.${process.pid}.${Date.now()}.tmp`;
         await fs33.writeFile(tmp, body, "utf8");
@@ -59395,14 +59504,14 @@ var init_spawnRoi = __esm({
 
 // src/cli/kraken/reputationStore.ts
 import { appendFile as appendFile2, mkdir as mkdir3, readFile as readFile8, rename as rename2, writeFile as writeFile3 } from "node:fs/promises";
-import path69 from "node:path";
+import path70 from "node:path";
 function resolveReputationStorePath(cwd = process.cwd(), env = process.env) {
   const override = env[REPUTATION_STORE_ENV]?.trim();
   if (override) return override;
-  return path69.join(cwd, ".zelari", "reputation.jsonl");
+  return path70.join(cwd, ".zelari", "reputation.jsonl");
 }
 async function appendRecord(storePath, record2) {
-  await mkdir3(path69.dirname(storePath), { recursive: true });
+  await mkdir3(path70.dirname(storePath), { recursive: true });
   await appendFile2(storePath, `${JSON.stringify(record2)}
 `, "utf8");
 }
@@ -59802,7 +59911,7 @@ __export(executor_exports, {
   thoroughnessForKind: () => thoroughnessForKind
 });
 import { existsSync as existsSync44 } from "node:fs";
-import path70 from "node:path";
+import path71 from "node:path";
 async function defaultSymbolExtractor(file2) {
   if (!isAstSupported(file2)) return null;
   const r = await parseFileSymbolsDiag(file2);
@@ -59868,7 +59977,7 @@ function isWorldModelGateEnabled(cwd, env = process.env, checksExists = defaultC
 }
 function defaultChecksExists(cwd) {
   try {
-    return existsSync44(path70.join(cwd, ".zelari", "world", "checks.json"));
+    return existsSync44(path71.join(cwd, ".zelari", "world", "checks.json"));
   } catch {
     return false;
   }
@@ -60376,7 +60485,7 @@ var init_executor = __esm({
         try {
           const summary = aggregate(
             records,
-            { repo: path70.basename(this.parentCwd), role: agentForNode(node) },
+            { repo: path71.basename(this.parentCwd), role: agentForNode(node) },
             now
           );
           sample = summary.sample;
@@ -60853,7 +60962,7 @@ ${upstream}` : node.prompt,
           const model = res.ok && res.model && res.model !== "n/a" ? res.model : null;
           const reviewerVerdict = res.ok && this.isReviewerKind(node.kind) && typeof node.result === "string" && node.result.length > 0 ? parseVerifyVerdict(node.result).verdict : null;
           const record2 = reputationRecordFromNodeRun({
-            repo: path70.basename(this.parentCwd),
+            repo: path71.basename(this.parentCwd),
             role: agentForNode(node),
             kind: node.kind,
             ok: res.ok,
@@ -61624,10 +61733,10 @@ var init_prereqChecks = __esm({
 
 // src/cli/plugins/prefs.ts
 import { existsSync as existsSync46, readFileSync as readFileSync36, writeFileSync as writeFileSync22, mkdirSync as mkdirSync18 } from "node:fs";
-import path73 from "node:path";
+import path74 from "node:path";
 import os11 from "node:os";
 function getPluginPrefsPath() {
-  return process.env.ZELARI_PLUGINS_PREFS_FILE ?? path73.join(os11.homedir(), ".tmp", "zelari-code", "plugins.json");
+  return process.env.ZELARI_PLUGINS_PREFS_FILE ?? path74.join(os11.homedir(), ".tmp", "zelari-code", "plugins.json");
 }
 function getPluginPrefs() {
   const file2 = getPluginPrefsPath();
@@ -61648,7 +61757,7 @@ function getPluginPrefs() {
 }
 function writePluginPrefs(prefs) {
   const file2 = getPluginPrefsPath();
-  mkdirSync18(path73.dirname(file2), { recursive: true });
+  mkdirSync18(path74.dirname(file2), { recursive: true });
   writeFileSync22(file2, JSON.stringify(prefs, null, 2), {
     encoding: "utf-8",
     mode: 384
@@ -61685,7 +61794,7 @@ __export(registry_exports, {
   isBinaryOnPath: () => isBinaryOnPath
 });
 import { existsSync as existsSync47 } from "node:fs";
-import path74 from "node:path";
+import path75 from "node:path";
 function detectLocalBin(bin) {
   return (cwd) => {
     try {
@@ -61703,7 +61812,7 @@ function isBinaryOnPath(bin, opts = {}) {
   const platform = opts.platform ?? process.platform;
   const exists = opts.exists ?? existsSync47;
   const pathEnv = opts.pathEnv ?? process.env.PATH ?? "";
-  const pathMod = platform === "win32" ? path74.win32 : path74.posix;
+  const pathMod = platform === "win32" ? path75.win32 : path75.posix;
   const sep4 = platform === "win32" ? ";" : ":";
   const dirs = pathEnv.split(sep4).filter((d) => d.length > 0);
   const candidates = [bin];
@@ -62798,7 +62907,7 @@ var init_policy = __esm({
 
 // src/cli/orchestration/facts.ts
 import { promises as fs41 } from "node:fs";
-import path79 from "node:path";
+import path80 from "node:path";
 async function collectRepoFileCount(root = process.cwd()) {
   try {
     await fs41.readdir(root);
@@ -62818,7 +62927,7 @@ async function collectRepoFileCount(root = process.cwd()) {
       }
       for (const e of entries) {
         if (e.isDirectory()) {
-          if (!SKIP_DIRS.has(e.name)) queue.push(path79.join(dir, e.name));
+          if (!SKIP_DIRS.has(e.name)) queue.push(path80.join(dir, e.name));
         } else if (e.isFile()) {
           count++;
           if (count > MAX_WALK_FILES) return count;
@@ -62914,6 +63023,206 @@ var init_streamScrub = __esm({
   }
 });
 
+// src/cli/harnessState.ts
+import path81 from "node:path";
+function asString3(v) {
+  return typeof v === "string" ? v : "";
+}
+function asNumber2(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function asCallId(v, seq) {
+  return typeof v === "string" && v.length > 0 ? v : `seq:${seq}`;
+}
+function newTurn(index, userText) {
+  return {
+    index,
+    userText: userText.length > 0 ? userText : void 0,
+    toolCalls: 0,
+    toolKinds: [],
+    outcome: "pending",
+    unsettledCallIds: /* @__PURE__ */ new Set(),
+    settledCallIds: /* @__PURE__ */ new Set(),
+    interrupted: 0,
+    assistantMessages: 0
+  };
+}
+function deriveHarnessState(events) {
+  const session = {
+    sessionId: events[events.length - 1]?.sessionId ?? "",
+    status: "pending",
+    lastSeq: 0
+  };
+  const support = { contextProjections: [], memoryEvents: 0, compactions: 0 };
+  let tokensSaved;
+  const acc = [];
+  let current = null;
+  for (const e of events) {
+    session.lastSeq = e.seq;
+    switch (e.kind) {
+      case "session.started":
+        session.startedAt ??= e.ts;
+        break;
+      case "session.ended": {
+        session.endedAt = e.ts;
+        const reason = asString3(e.data.reason);
+        session.status = reason.length > 0 ? reason : "ended";
+        if (current) {
+          current.closedBy = "session-ended";
+          current.endReason = reason;
+          current = null;
+        }
+        break;
+      }
+      case "user.message": {
+        if (current) current.closedBy = "next-turn";
+        current = newTurn(acc.length + 1, asString3(e.data.text));
+        acc.push(current);
+        break;
+      }
+      case "assistant.message": {
+        if (!current) break;
+        current.assistantMessages += 1;
+        const text = asString3(e.data.text);
+        current.assistantChars = (current.assistantChars ?? 0) + text.length;
+        current.assistantText = text;
+        break;
+      }
+      case "tool.call": {
+        if (!current) break;
+        current.toolCalls += 1;
+        const tool = asString3(e.data.tool);
+        if (tool.length > 0 && !current.toolKinds.includes(tool)) current.toolKinds.push(tool);
+        current.unsettledCallIds.add(asCallId(e.data.callId, e.seq));
+        break;
+      }
+      case "tool.result": {
+        if (!current) break;
+        current.settledCallIds.add(asCallId(e.data.callId, e.seq));
+        break;
+      }
+      case "tool.interrupted": {
+        if (current) current.interrupted += 1;
+        break;
+      }
+      case "verification.run": {
+        if (!current) break;
+        current.verification = {
+          strict: e.data.strict === true,
+          verdict: asString3(e.data.verdict) || "unknown"
+        };
+        break;
+      }
+      case "session.compacted": {
+        support.compactions += 1;
+        const saved = asNumber2(e.data.tokensSaved);
+        if (saved !== void 0) tokensSaved = (tokensSaved ?? 0) + saved;
+        break;
+      }
+      case "note": {
+        const subject = asString3(e.data.subject);
+        if (subject === "context.projection") {
+          support.contextProjections.push({
+            contextChars: asNumber2(e.data.contextChars) ?? 0,
+            returnedCount: asNumber2(e.data.returnedCount) ?? 0
+          });
+        } else if (subject === "memory_event") {
+          support.memoryEvents += 1;
+        }
+        break;
+      }
+      default:
+        break;
+    }
+  }
+  const turns = acc.map((t) => finalizeTurn(t));
+  return {
+    session,
+    turns,
+    execution: { turnsTotal: turns.length, contracts: acc.map((t) => contractFor(t)) },
+    support: tokensSaved === void 0 ? support : { ...support, tokensSavedByCompaction: tokensSaved }
+  };
+}
+function finalizeTurn(t) {
+  let outcome;
+  if (t.closedBy === void 0) outcome = "pending";
+  else if (t.closedBy === "session-ended" && t.endReason !== "completed") outcome = "error";
+  else outcome = "completed";
+  return {
+    index: t.index,
+    userText: t.userText,
+    assistantChars: t.assistantMessages > 0 ? t.assistantChars ?? 0 : void 0,
+    assistantText: t.assistantMessages > 0 ? t.assistantText : void 0,
+    toolCalls: t.toolCalls,
+    toolKinds: t.toolKinds,
+    verification: t.verification,
+    outcome
+  };
+}
+function contractFor(t) {
+  const userMessage = true;
+  const assistantReply = t.assistantMessages > 0;
+  const allSettled = [...t.unsettledCallIds].every((id3) => t.settledCallIds.has(id3));
+  const toolsSettled = allSettled && t.interrupted === 0;
+  const blockers = [];
+  if (!assistantReply) blockers.push("assistant-reply-missing");
+  if (!toolsSettled) blockers.push("tools-unsettled");
+  if (t.verification) {
+    if (!t.verification.strict) blockers.push("verification-not-strict");
+    else if (t.verification.verdict !== "PASS") blockers.push(`verification-verdict-${t.verification.verdict}`);
+  } else if (t.closedBy === void 0) {
+    blockers.push("turn-pending");
+  } else if (t.closedBy === "session-ended" && t.endReason !== "completed") {
+    blockers.push(`turn-error-${t.endReason}`);
+  }
+  return {
+    turn: t.index,
+    complete: userMessage && assistantReply && toolsSettled && blockers.length === 0,
+    signals: {
+      userMessage,
+      assistantReply,
+      toolsSettled,
+      verification: t.verification
+    },
+    blockers
+  };
+}
+async function readHarnessState(sessionDir) {
+  const report = await readSessionLog(path81.join(sessionDir, "events.jsonl"));
+  return deriveHarnessState(report.events);
+}
+var init_harnessState = __esm({
+  "src/cli/harnessState.ts"() {
+    "use strict";
+    init_session();
+  }
+});
+
+// src/cli/headless/harnessStateEmit.ts
+import path82 from "node:path";
+async function emitHarnessStateEvent(opts) {
+  if (opts.output !== "json") return;
+  try {
+    const sessionsDir = resolveSessionsDir({ workspaceRoot: opts.workspaceRoot });
+    const state3 = await readHarnessState(path82.join(sessionsDir, opts.spine.sessionId));
+    opts.emitEvent({ type: "harness_state", ...state3 });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    try {
+      process.stderr.write(`[zelari-code --headless] harness_state unavailable: ${msg}
+`);
+    } catch {
+    }
+  }
+}
+var init_harnessStateEmit = __esm({
+  "src/cli/headless/harnessStateEmit.ts"() {
+    "use strict";
+    init_session();
+    init_harnessState();
+  }
+});
+
 // src/cli/headless/policyGate.ts
 import { isAbsolute as isAbsolute5, resolve as resolve7 } from "node:path";
 import { randomUUID as randomUUID9 } from "node:crypto";
@@ -62959,7 +63268,7 @@ async function recordPolicyLoadBlockedOnSpine(block, opts = {}) {
       sessionId: sessionId2,
       ...opts.mode ? { mode: opts.mode } : {},
       ...opts.profile ? { profile: opts.profile } : {},
-      workspace: process.cwd()
+      workspace: opts.workspace ?? process.cwd()
     });
     if (opts.mode === "zelari") {
       spine.missionPhase("dispatch", block.reason);
@@ -63390,13 +63699,13 @@ var init_sessionControl = __esm({
 
 // src/cli/extensions/sandboxedFs.ts
 import { promises as fsp } from "node:fs";
-import path80 from "node:path";
+import path83 from "node:path";
 function errText(prefix, p3, err) {
   const msg = err instanceof Error ? err.message : String(err);
   return `[extension-fs] ${prefix} "${p3}": ${msg}`;
 }
 function bindSandboxedFs(root) {
-  const resolvedRoot = path80.resolve(root);
+  const resolvedRoot = path83.resolve(root);
   return {
     root: resolvedRoot,
     async readFile(relativePath) {
@@ -63412,7 +63721,7 @@ function bindSandboxedFs(root) {
       try {
         const target = resolveSandboxedPath(relativePath, { root: resolvedRoot });
         verifyContainment(target, { root: resolvedRoot });
-        await fsp.mkdir(path80.dirname(target), { recursive: true });
+        await fsp.mkdir(path83.dirname(target), { recursive: true });
         await fsp.writeFile(target, data, "utf8");
         return typedOk({ path: target });
       } catch (err) {
@@ -63597,7 +63906,7 @@ var init_loader = __esm({
 
 // src/cli/headless/runOneTurn.ts
 import { promises as fs42 } from "node:fs";
-import path81 from "node:path";
+import path84 from "node:path";
 function planModeFromOpts(opts) {
   return (opts.phase ?? "build") === "plan";
 }
@@ -63651,11 +63960,14 @@ async function writeProofSafe(gate, meta3, baseDir = process.cwd()) {
     );
   }
 }
-async function runOneTurn(opts, provider, model, providerStream) {
+async function runOneTurn(opts, provider, model, providerStream, extras) {
   const sessionId2 = crypto.randomUUID();
   const cwd = resolveHeadlessCwd(opts);
   const memoryFactory = await Promise.resolve().then(() => (init_serviceFactory(), serviceFactory_exports));
-  const nativeMemory = memoryFactory.isMemoryV2Enabled() ? await memoryFactory.getMemoryService(cwd, process.env) : void 0;
+  const spineHolder = {};
+  const nativeMemory = memoryFactory.isMemoryV2Enabled() ? await memoryFactory.getMemoryService(cwd, process.env, {
+    onEvent: memorySinkFor(spineHolder)
+  }) : void 0;
   const memoryAutoWrite = memoryFactory.isMemoryAutoWriteEnabled();
   const controlQueue = new RuntimeControlQueue();
   const harnessHolder = {};
@@ -63748,7 +64060,11 @@ async function runOneTurn(opts, provider, model, providerStream) {
     },
     ...nativeMemory ? { memoryService: nativeMemory } : {},
     memoryAutoWrite,
-    ...extensionRuntime ? { extensions: extensionRuntime } : {}
+    ...extensionRuntime ? { extensions: extensionRuntime } : {},
+    // t37: serve-harness threads the kernel-owned workspace LspManager here
+    // (TurnExtras). undefined keeps the shared per-root fallback — which is
+    // itself one-manager-per-root since t37, so no cross-workspace thrash.
+    ...extras?.lspProvider ? { lspProvider: extras.lspProvider } : {}
   });
   await registerHeadlessMcp(toolRegistry, opts);
   const spine = await openHeadlessSpine({
@@ -63759,6 +64075,7 @@ async function runOneTurn(opts, provider, model, providerStream) {
     // 2.6.1 (plan §7): deep specs from THIS run’s registry.
     toolSpecs: typeof toolRegistry.fingerprints === "function" ? toolRegistry.fingerprints() : void 0
   });
+  spineHolder.current = spine;
   const seededHistory = await seedHeadlessModelHistory(spine, opts.history);
   emitEvent(sessionStartedEvent(spine));
   if (opts.orchestrationDecision) {
@@ -64067,8 +64384,9 @@ async function runOneTurn(opts, provider, model, providerStream) {
     },
     emit: (input) => spine.appendEvent(input)
   };
+  const strictEnv = strictEnvOverlay(opts);
   if (pass.finalReason === "completed" && pass.exitCode === 0 && isKrakenMode(opts.mode) && (isKrakenSelectionEnabled() || nativePackEnabled()) && !planModeFromOpts(opts)) {
-    const strictGate = await evaluateStrictBuildGate("build", { emit: (input) => spine.appendEvent(input), cwd });
+    const strictGate = await evaluateStrictBuildGate("build", { emit: (input) => spine.appendEvent(input), cwd, env: strictEnv });
     await runAdvisoryVerifierReview(strictGate, verifierReviewDeps).catch(() => void 0);
     const gate = strictGate.gate;
     const verificationPayload = strictGateEventPayload(strictGate);
@@ -64103,7 +64421,7 @@ async function runOneTurn(opts, provider, model, providerStream) {
         successfulWrites: pass.successfulWrites + repair.successfulWrites,
         emittedWrites: pass.emittedWrites + repair.emittedWrites
       };
-      const after = await evaluateStrictBuildGate("build", { emit: (input) => spine.appendEvent(input), cwd });
+      const after = await evaluateStrictBuildGate("build", { emit: (input) => spine.appendEvent(input), cwd, env: strictEnv });
       await runAdvisoryVerifierReview(after, verifierReviewDeps).catch(() => void 0);
       const afterPayload = strictGateEventPayload(after);
       spine.verificationRun(afterPayload);
@@ -64138,13 +64456,14 @@ async function runOneTurn(opts, provider, model, providerStream) {
     await spine.close(closeStatus);
   } catch {
   }
+  await emitHarnessStateEvent({ spine, workspaceRoot: cwd, output: opts.output, emitEvent });
   if (opts.exportSessionPath) {
     try {
       const json3 = await spine.exportJson();
       if (json3) {
         if (opts.exportSessionPath === "-") process.stdout.write(json3 + "\n");
         else {
-          await fs42.mkdir(path81.dirname(opts.exportSessionPath), { recursive: true }).catch(() => void 0);
+          await fs42.mkdir(path84.dirname(opts.exportSessionPath), { recursive: true }).catch(() => void 0);
           await fs42.writeFile(opts.exportSessionPath, json3, "utf8");
         }
       }
@@ -64200,6 +64519,7 @@ var init_runOneTurn = __esm({
     init_selectionPlaybook();
     init_delegationPolicy();
     init_facts();
+    init_spineTelemetry();
     init_headless();
     init_mode();
     init_skills2();
@@ -64213,6 +64533,7 @@ var init_runOneTurn = __esm({
     init_modelContextBuilder();
     init_metrics3();
     init_headlessSpine();
+    init_harnessStateEmit();
     init_runtime2();
     init_controlBridge();
     init_protocol2();
@@ -65118,9 +65439,9 @@ __export(triggerLock_exports, {
   releaseLock: () => releaseLock
 });
 import { promises as fs43 } from "node:fs";
-import * as path82 from "node:path";
+import * as path85 from "node:path";
 function lockPath(projectRoot) {
-  return path82.join(projectRoot, ".zelari", "trigger.lock");
+  return path85.join(projectRoot, ".zelari", "trigger.lock");
 }
 function isPidAlive(pid) {
   try {
@@ -65133,7 +65454,7 @@ function isPidAlive(pid) {
 }
 async function acquireLock(projectRoot, now = () => /* @__PURE__ */ new Date()) {
   const lp = lockPath(projectRoot);
-  const dir = path82.dirname(lp);
+  const dir = path85.dirname(lp);
   await fs43.mkdir(dir, { recursive: true });
   try {
     const raw = await fs43.readFile(lp, "utf8");
@@ -65165,13 +65486,10 @@ var init_triggerLock = __esm({
 
 // src/cli/runHeadless.ts
 import { promises as fs44 } from "node:fs";
-import path83 from "node:path";
+import path86 from "node:path";
 import { randomUUID as randomUUID10 } from "node:crypto";
 async function runHeadless(opts) {
   resetTaskSpawnCount();
-  if (opts.strictDone) {
-    process.env.ZELARI_STRICT_DONE = "1";
-  }
   let crashed = false;
   const handleFatal = (label, err) => {
     if (crashed) return;
@@ -65245,7 +65563,13 @@ ${err.stack}` : "";
       model
     });
   }
-  return dispatchHeadlessTurn(opts, provider, model, providerStream);
+  return dispatchHeadlessTurn(opts, provider, model, providerStream, {
+    // H10-fix3: the gate already ran above on the SAME input (no chdir in
+    // between) — the one-shot marker keeps dispatchHeadlessTurn from
+    // re-running it (duplicate `[policy]` stderr warning + double policy
+    // load). Per-invocation flag only; never process-global.
+    policyGateDone: true
+  });
 }
 async function applyHeadlessPolicyGate(opts) {
   const cwd = resolveHeadlessCwd(opts);
@@ -65257,6 +65581,9 @@ async function applyHeadlessPolicyGate(opts) {
     reportPolicyLoadBlocked(policyLoad.block, opts.output);
     await recordPolicyLoadBlockedOnSpine(policyLoad.block, {
       mode: opts.mode,
+      // H10-fix2: the spine must land in the RESOLVED workspace, not the
+      // process cwd — a sidecar hosts N workspaces without `chdir`.
+      workspace: cwd,
       ...opts.profile ? { profile: opts.profile } : {},
       ...opts.resumeSessionId ? { resumeSessionId: opts.resumeSessionId } : {}
     });
@@ -65276,7 +65603,7 @@ function applyKrakenTurnEnv(opts) {
     }
   }
 }
-async function dispatchHeadlessTurn(opts, provider, model, providerStream) {
+async function dispatchHeadlessTurn(opts, provider, model, providerStream, oneShot, extras) {
   const cwd = resolveHeadlessCwd(opts);
   if (typeof opts.mode === "string") {
     const parsed = parseMode(opts.mode);
@@ -65304,8 +65631,10 @@ async function dispatchHeadlessTurn(opts, provider, model, providerStream) {
     }
   } catch {
   }
-  const policyBlock = await applyHeadlessPolicyGate(opts);
-  if (policyBlock !== void 0) return policyBlock;
+  if (!oneShot?.policyGateDone) {
+    const policyBlock = await applyHeadlessPolicyGate(opts);
+    if (policyBlock !== void 0) return policyBlock;
+  }
   if (opts.orchestrationAuto) {
     const facts = await collectOrchestrationFacts(cwd);
     const verdict = chooseOrchestration(opts.task ?? "", facts);
@@ -65347,12 +65676,12 @@ async function dispatchHeadlessTurn(opts, provider, model, providerStream) {
 `);
   }
   if (mode === "zelari") {
-    return runHeadlessZelari(opts, provider, model, providerStream);
+    return runHeadlessZelari(opts, provider, model, providerStream, extras);
   }
   if (mode === "council" || opts.useCouncil) {
-    return runHeadlessCouncil(opts, provider, model, providerStream);
+    return runHeadlessCouncil(opts, provider, model, providerStream, extras);
   }
-  return runOneTurn(opts, provider, model, providerStream);
+  return runOneTurn(opts, provider, model, providerStream, extras);
 }
 async function runHeadlessKrakenGraph(opts, provider, model) {
   const { isKrakenGraphEnabled: isKrakenGraphEnabled2, KrakenGraphExecutor: KrakenGraphExecutor2 } = await Promise.resolve().then(() => (init_executor(), executor_exports));
@@ -65372,8 +65701,15 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
   const { createKrakenSubAgentContextFactory: createKrakenSubAgentContextFactory2 } = await Promise.resolve().then(() => (init_toolRegistry(), toolRegistry_exports));
   const cwd = resolveHeadlessCwd(opts);
   const sessionId2 = crypto.randomUUID();
+  const spine = await openHeadlessSpine({ sessionId: sessionId2, mode: "kraken", workspace: cwd });
+  if (opts.output === "json") emitEvent(sessionStartedEvent(spine));
+  spine.userMessage(prompt);
   const { getMemoryService: getMemoryService2, isMemoryAutoWriteEnabled: isMemoryAutoWriteEnabled2, isMemoryV2Enabled: isMemoryV2Enabled2 } = await Promise.resolve().then(() => (init_serviceFactory(), serviceFactory_exports));
-  const graphMemory = isMemoryV2Enabled2() ? await getMemoryService2(cwd, process.env) : void 0;
+  const graphMemory = isMemoryV2Enabled2() ? await getMemoryService2(cwd, process.env, {
+    // W2: the spine is already open here — memory events are noted
+    // directly (context.projection / memory_event state-only payloads).
+    onEvent: (event) => spineMemoryEventNote(spine, event)
+  }) : void 0;
   const log = (message) => {
     if (opts.output === "json") {
       emitEvent({ type: "log", message });
@@ -65388,28 +65724,32 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
     abort.abort();
   };
   process.once("SIGINT", onSigint);
+  let exitCode = 0;
   try {
     let preflightGraph;
     if (opts.runPlan && opts.runPlan.trim() !== "") {
-      const planPath = path83.join(cwd, ".zelari", "radio", `plan-${opts.runPlan}.json`);
+      const planPath = path86.join(cwd, ".zelari", "radio", `plan-${opts.runPlan}.json`);
       log(`loading pre-flight plan: ${planPath}`);
       let raw;
       try {
         raw = await fs44.readFile(planPath, "utf8");
       } catch (e) {
         log(`plan file not found: ${planPath} (${e.message})`);
-        return 1;
+        exitCode = 1;
+        return exitCode;
       }
       let planJson;
       try {
         planJson = JSON.parse(raw);
       } catch (e) {
         log(`plan file is malformed JSON: ${e.message}`);
-        return 1;
+        exitCode = 1;
+        return exitCode;
       }
       if (!planJson || !Array.isArray(planJson.nodes)) {
         log(`plan file is malformed: missing "nodes" array`);
-        return 1;
+        exitCode = 1;
+        return exitCode;
       }
       const { createGraph: createGraph2, validateGraph: validateGraph2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
       const validated = createGraph2(planJson.graphId ?? opts.runPlan, planJson.nodes);
@@ -65431,8 +65771,8 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
     log(formatKrakenGraphAscii2(graph));
     if (opts.planOnly) {
       const planId = randomUUID10();
-      const planDir = path83.join(cwd, ".zelari", "radio");
-      const planPath = path83.join(planDir, `plan-${planId}.json`);
+      const planDir = path86.join(cwd, ".zelari", "radio");
+      const planPath = path86.join(planDir, `plan-${planId}.json`);
       await fs44.mkdir(planDir, { recursive: true });
       await fs44.writeFile(
         planPath,
@@ -65451,9 +65791,11 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
         emitEvent({ type: "log", message: `plan_only_id=${planId}` });
         emitEvent({ type: "log", message: `plan_only_path=${planPath}` });
       }
-      return 0;
+      exitCode = 0;
+      return exitCode;
     }
     const audit = new AuditLogger2();
+    const { runTentacle: runTentacle2 } = await Promise.resolve().then(() => (init_tentacle(), tentacle_exports));
     const executor = new KrakenGraphExecutor2({
       taskToolDeps: {
         createSubAgentContext: createKrakenSubAgentContextFactory2({
@@ -65486,7 +65828,11 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
       parentCwd: cwd,
       sessionId: sessionId2,
       goal: prompt,
-      signal: abort.signal
+      signal: abort.signal,
+      // ADR-0024 v1.1: same delegate (`runTentacle`), wrapped so each node
+      // turn leaves a graph.node_started / graph.node_ended envelope pair on
+      // the spine. The executor owns scheduling; the HOST owns the spine.
+      runTentacleFn: (runOpts) => nodeSpineEnvelopeRun(spine, runOpts, () => runTentacle2(runOpts))
     });
     const summary = await executor.execute(graph);
     if (summary.cancelled) log("graph cancelled \u2014 partial results below");
@@ -65508,7 +65854,8 @@ ${formatKrakenGraphDigest2(
       process.stdout.write(`${finalAscii}
 `);
     }
-    return summary.converged ? 0 : 3;
+    exitCode = summary.converged ? 0 : 3;
+    return exitCode;
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
     if (opts.output === "json") {
@@ -65517,17 +65864,56 @@ ${formatKrakenGraphDigest2(
       process.stderr.write(`[zelari-code --headless] kraken graph failed: ${message}
 `);
     }
-    return 2;
+    exitCode = 2;
+    return exitCode;
   } finally {
     process.off("SIGINT", onSigint);
     await graphMemory?.close().catch(() => void 0);
+    try {
+      const closeReason = abort.signal.aborted ? "cancelled" : exitCode === 0 ? "completed" : "error";
+      await spine.close(closeReason);
+    } catch {
+    }
+    await emitHarnessStateEvent({ spine, workspaceRoot: cwd, output: opts.output, emitEvent });
   }
 }
-async function buildCouncilToolRegistry(planMode, opts, memoryService, memoryAutoWrite = false) {
+function nodeSpineEnvelopeRun(spine, runOpts, run) {
+  const startedAt = Date.now();
+  const noteNode = (kind2, extra) => {
+    if (!runOpts.nodeId) return;
+    void spine.appendEvent({
+      kind: kind2,
+      actor: { type: "system" },
+      data: {
+        nodeId: runOpts.nodeId,
+        agent: runOpts.agent,
+        ...runOpts.graphId ? { graphId: runOpts.graphId } : {},
+        ...extra
+      }
+    });
+  };
+  noteNode("graph.node_started");
+  return run().then(
+    (res) => {
+      noteNode("graph.node_ended", {
+        ok: res.ok,
+        ...!res.ok && res.cancelled ? { cancelled: true } : {},
+        durationMs: Date.now() - startedAt
+      });
+      return res;
+    },
+    (err) => {
+      noteNode("graph.node_ended", { ok: false, durationMs: Date.now() - startedAt });
+      throw err;
+    }
+  );
+}
+async function buildCouncilToolRegistry(planMode, opts, memoryService, memoryAutoWrite = false, extras) {
   const cwd = opts ? resolveHeadlessCwd(opts) : process.cwd();
   const { registry: toolRegistry } = createBuiltinToolRegistry({
     root: cwd,
     planMode,
+    ...extras?.lspProvider ? { lspProvider: extras.lspProvider } : {},
     permissionPolicy: {
       read: "allow",
       write: "allow",
@@ -65554,12 +65940,15 @@ async function buildCouncilToolRegistry(planMode, opts, memoryService, memoryAut
   }
   return { toolRegistry, workspaceCtx: realCtx };
 }
-async function runHeadlessCouncil(opts, provider, model, providerStream) {
+async function runHeadlessCouncil(opts, provider, model, providerStream, extras) {
   const { dispatchCouncil: dispatchCouncil2 } = await Promise.resolve().then(() => (init_councilDispatcher(), councilDispatcher_exports));
   const sessionId2 = crypto.randomUUID();
   const cwd = resolveHeadlessCwd(opts);
   const memoryFactory = await Promise.resolve().then(() => (init_serviceFactory(), serviceFactory_exports));
-  const nativeMemory = memoryFactory.isMemoryV2Enabled() ? await memoryFactory.getMemoryService(cwd, process.env) : void 0;
+  const spineHolder = {};
+  const nativeMemory = memoryFactory.isMemoryV2Enabled() ? await memoryFactory.getMemoryService(cwd, process.env, {
+    onEvent: memorySinkFor(spineHolder)
+  }) : void 0;
   const memoryAutoWrite = memoryFactory.isMemoryAutoWriteEnabled();
   const spine = await openHeadlessSpine({
     sessionId: opts.resumeSessionId ?? sessionId2,
@@ -65567,6 +65956,7 @@ async function runHeadlessCouncil(opts, provider, model, providerStream) {
     profile: opts.profile,
     workspace: cwd
   });
+  spineHolder.current = spine;
   const seededHistory = await seedHeadlessModelHistory(spine, opts.history);
   emitEvent(sessionStartedEvent(spine));
   if (opts.orchestrationDecision) {
@@ -65586,7 +65976,8 @@ async function runHeadlessCouncil(opts, provider, model, providerStream) {
     planModeFromOpts(opts) || softGated,
     opts,
     nativeMemory,
-    memoryAutoWrite
+    memoryAutoWrite,
+    extras
   );
   const { FeedbackStore: FeedbackStore2 } = await Promise.resolve().then(() => (init_councilFeedback(), councilFeedback_exports));
   const feedbackStore = new FeedbackStore2();
@@ -65715,13 +66106,14 @@ async function runHeadlessCouncil(opts, provider, model, providerStream) {
     await spine.close(exitCode === 0 ? "completed" : "error");
   } catch {
   }
+  await emitHarnessStateEvent({ spine, workspaceRoot: cwd, output: opts.output, emitEvent });
   if (opts.exportSessionPath) {
     try {
       const json3 = await spine.exportJson();
       if (json3) {
         if (opts.exportSessionPath === "-") process.stdout.write(json3 + "\n");
         else {
-          await fs44.mkdir(path83.dirname(opts.exportSessionPath), { recursive: true }).catch(() => void 0);
+          await fs44.mkdir(path86.dirname(opts.exportSessionPath), { recursive: true }).catch(() => void 0);
           await fs44.writeFile(opts.exportSessionPath, json3, "utf8");
         }
       }
@@ -65754,7 +66146,7 @@ async function runHeadlessCouncil(opts, provider, model, providerStream) {
   await nativeMemory?.close().catch(() => void 0);
   return exitCode;
 }
-async function runHeadlessZelari(opts, provider, model, providerStream) {
+async function runHeadlessZelari(opts, provider, model, providerStream, extras) {
   const projectRoot = resolveHeadlessCwd(opts);
   const sessionId2 = opts.resumeSessionId ?? crypto.randomUUID();
   const spine = await openHeadlessSpine({
@@ -65777,13 +66169,18 @@ async function runHeadlessZelari(opts, provider, model, providerStream) {
     userMessage: opts.task,
     hasPlan: hasWorkspacePlan2(projectRoot)
   });
-  const memory = await getMemoryBackend2(projectRoot);
+  const memory = await getMemoryBackend2(
+    projectRoot,
+    process.env,
+    (event) => spineMemoryEventNote(spine, event)
+  );
   const nativeMissionMemory = memory.service;
   const { toolRegistry, workspaceCtx } = await buildCouncilToolRegistry(
     planModeFromOpts(opts),
     opts,
     nativeMissionMemory,
-    Boolean(nativeMissionMemory) && process.env.ZELARI_MEMORY_AUTO_WRITE !== "0"
+    Boolean(nativeMissionMemory) && process.env.ZELARI_MEMORY_AUTO_WRITE !== "0",
+    extras
   );
   const feedbackStore = new FeedbackStore2();
   const chairmanBudget = envNumber(process.env.ZELARI_MODE_MAX_TOOLS_LUCIFER, {
@@ -66096,6 +66493,8 @@ ${ragContext}` : slicePrompt;
       const missionGate = await evaluateStrictBuildGate("build", {
         emit: (input) => spine.appendEvent(input),
         surface: "mission",
+        // H10-fix1: per-invocation env overlay — never process.env.
+        env: strictEnvOverlay(opts),
         cwd: projectRoot
       });
       const missionVerificationPayload = strictGateEventPayload(missionGate);
@@ -66132,13 +66531,14 @@ ${ragContext}` : slicePrompt;
       else await spine.close(exitCode === 2 ? "error" : "stopped");
     } catch {
     }
+    await emitHarnessStateEvent({ spine, workspaceRoot: projectRoot, output: opts.output, emitEvent });
     if (opts.exportSessionPath) {
       try {
         const json3 = await spine.exportJson();
         if (json3) {
           if (opts.exportSessionPath === "-") process.stdout.write(json3 + "\n");
           else {
-            await fs44.mkdir(path83.dirname(opts.exportSessionPath), { recursive: true }).catch(() => void 0);
+            await fs44.mkdir(path86.dirname(opts.exportSessionPath), { recursive: true }).catch(() => void 0);
             await fs44.writeFile(opts.exportSessionPath, json3, "utf8");
           }
         }
@@ -66157,6 +66557,7 @@ var init_runHeadless = __esm({
     init_toolRegistry();
     init_policy();
     init_facts();
+    init_spineTelemetry();
     init_councilConfig();
     init_headless();
     init_claudeProvider();
@@ -66172,6 +66573,7 @@ var init_runHeadless = __esm({
     init_modelContextBuilder();
     init_metrics3();
     init_headlessSpine();
+    init_harnessStateEmit();
     init_policyGate();
     init_policyLoadMode();
     init_runOneTurn();
@@ -66749,7 +67151,7 @@ function upsertSkill(opts) {
     }
     dir = getProjectSkillsDir(root);
   }
-  const path87 = skillFilePath(dir, name);
+  const path91 = skillFilePath(dir, name);
   const content = serializeSkillMd({
     name,
     description,
@@ -66758,13 +67160,13 @@ function upsertSkill(opts) {
     tools: opts.tools,
     cost: opts.cost
   });
-  const parsed = parseSkillMd(content, path87);
+  const parsed = parseSkillMd(content, path91);
   if (!parsed) {
     return { ok: false, error: "Generated SKILL.md failed validation" };
   }
-  mkdirSync21(dirname13(path87), { recursive: true });
-  writeFileSync24(path87, content, "utf8");
-  return { ok: true, path: path87 };
+  mkdirSync21(dirname13(path91), { recursive: true });
+  writeFileSync24(path91, content, "utf8");
+  return { ok: true, path: path91 };
 }
 function removeSkill(opts) {
   const name = opts.name.trim().toLowerCase();
@@ -66782,8 +67184,8 @@ function removeSkill(opts) {
     dir = getProjectSkillsDir(root);
   }
   const skillDir = join46(dir, name);
-  const path87 = skillFilePath(dir, name);
-  if (!existsSync52(path87) && !existsSync52(skillDir)) {
+  const path91 = skillFilePath(dir, name);
+  if (!existsSync52(path91) && !existsSync52(skillDir)) {
     return { ok: false, error: `Skill "${name}" not found in ${dir}` };
   }
   try {
@@ -66794,7 +67196,7 @@ function removeSkill(opts) {
       error: err instanceof Error ? err.message : String(err)
     };
   }
-  return { ok: true, path: path87 };
+  return { ok: true, path: path91 };
 }
 var NAME_RE, BUILTIN_SKILL_MODULES, builtinsLoaded;
 var init_skillConfigIo = __esm({
@@ -66913,7 +67315,7 @@ var init_jsonApi = __esm({
 });
 
 // src/cli/memory/mcpAdapter.ts
-import * as path84 from "node:path";
+import * as path87 from "node:path";
 var id2, projectId, source, SearchSchema, AddSchema, LinkSchema, RetractSchema, MEMORY_MCP_TOOLS, MemoryMcpAdapter;
 var init_mcpAdapter = __esm({
   "src/cli/memory/mcpAdapter.ts"() {
@@ -67083,8 +67485,8 @@ var init_mcpAdapter = __esm({
         this.takeWrite();
         const externalFile = args.source?.file;
         if (externalFile) {
-          const normalized = path84.normalize(externalFile);
-          if (path84.isAbsolute(normalized) || normalized === ".." || normalized.startsWith(`..${path84.sep}`)) {
+          const normalized = path87.normalize(externalFile);
+          if (path87.isAbsolute(normalized) || normalized === ".." || normalized.startsWith(`..${path87.sep}`)) {
             throw new Error("source.file must be project-relative and cannot escape the project");
           }
         }
@@ -67612,12 +68014,12 @@ function ensureHome() {
   }
 }
 function loadCompanionConfig() {
-  const path87 = getCompanionConfigPath();
-  if (!existsSync53(path87)) {
+  const path91 = getCompanionConfigPath();
+  if (!existsSync53(path91)) {
     return { projects: [] };
   }
   try {
-    const raw = JSON.parse(readFileSync41(path87, "utf8"));
+    const raw = JSON.parse(readFileSync41(path91, "utf8"));
     const projects = Array.isArray(raw.projects) ? raw.projects.filter(
       (p3) => p3 && typeof p3.path === "string" && p3.path.trim() && typeof (p3.id ?? p3.name) === "string"
     ).map((p3) => ({
@@ -67655,16 +68057,16 @@ function loadOrCreateToken(explicit) {
     return { token: explicit.trim(), created: false };
   }
   ensureHome();
-  const path87 = getCompanionTokenPath();
-  if (existsSync53(path87)) {
-    const t = readFileSync41(path87, "utf8").trim();
+  const path91 = getCompanionTokenPath();
+  if (existsSync53(path91)) {
+    const t = readFileSync41(path91, "utf8").trim();
     if (t) return { token: t, created: false };
   }
   const token = randomBytes7(24).toString("base64url");
-  writeFileSync25(path87, token + "\n", "utf8");
+  writeFileSync25(path91, token + "\n", "utf8");
   try {
     const fs45 = __require("node:fs");
-    fs45.chmodSync?.(path87, 384);
+    fs45.chmodSync?.(path91, 384);
   } catch {
   }
   return { token, created: true };
@@ -67689,17 +68091,17 @@ function mergeProjects(cfg, extraPaths) {
     byId.set(p3.id, p3);
   }
   for (const raw of extraPaths) {
-    const path87 = raw.trim();
-    if (!path87) continue;
-    let id3 = slugFromPath(path87);
+    const path91 = raw.trim();
+    if (!path91) continue;
+    let id3 = slugFromPath(path91);
     let n = 2;
-    while (byId.has(id3) && byId.get(id3).path !== path87) {
-      id3 = `${slugFromPath(path87)}-${n++}`;
+    while (byId.has(id3) && byId.get(id3).path !== path91) {
+      id3 = `${slugFromPath(path91)}-${n++}`;
     }
     byId.set(id3, {
       id: id3,
-      name: slugFromPath(path87),
-      path: path87
+      name: slugFromPath(path91),
+      path: path91
     });
   }
   return [...byId.values()];
@@ -67752,6 +68154,7 @@ __export(harnessServer_exports, {
   bindHarnessTurnOptions: () => bindHarnessTurnOptions,
   createCliRunTurn: () => createCliRunTurn,
   createCliWorkspaceServices: () => createCliWorkspaceServices,
+  resolveTurnLspProvider: () => resolveTurnLspProvider,
   runHarnessServer: () => runHarnessServer,
   startHarnessServer: () => startHarnessServer
 });
@@ -67797,6 +68200,10 @@ function bindHarnessTurnOptions(input, workspaceRoot) {
     useCouncil: turnInput.useCouncil === true || mode === "council"
   };
 }
+function resolveTurnLspProvider(services) {
+  const candidate = services?.lspManager;
+  return candidate instanceof LspManager ? candidate : void 0;
+}
 function createCliRunTurn() {
   let streamPromise = null;
   const ensureStream = () => {
@@ -67823,11 +68230,14 @@ function createCliRunTurn() {
   return async (input, deps) => {
     const { provider, model, stream } = await ensureStream();
     const opts = bindHarnessTurnOptions(input, deps.session.workspaceRoot);
+    const lspProvider = resolveTurnLspProvider(deps.services);
     const exitCode = await dispatchHeadlessTurn(
       opts,
       provider,
       model,
-      stream
+      stream,
+      void 0,
+      lspProvider ? { lspProvider } : void 0
     );
     return { exitCode };
   };
@@ -68666,9 +69076,9 @@ async function runCompanionServe(opts = {}) {
       return;
     }
     const url2 = parseUrl(req);
-    const path87 = url2.pathname.replace(/\/+$/, "") || "/";
+    const path91 = url2.pathname.replace(/\/+$/, "") || "/";
     try {
-      if (req.method === "GET" && (path87 === "/health" || path87 === "/v1/health")) {
+      if (req.method === "GET" && (path91 === "/health" || path91 === "/v1/health")) {
         sendJson2(res, 200, {
           ok: true,
           service: "zelari-companion",
@@ -68680,18 +69090,18 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (path87.startsWith("/v1")) {
+      if (path91.startsWith("/v1")) {
         if (!tokenMatches(token, getBearer(req))) {
           sendJson2(res, 401, { ok: false, error: "unauthorized" });
           return;
         }
       }
-      if (req.method === "GET" && path87 === "/v1/config") {
+      if (req.method === "GET" && path91 === "/v1/config") {
         const snap = buildDesktopConfigSnapshot();
         sendJson2(res, 200, { ok: true, ...snap });
         return;
       }
-      if (req.method === "GET" && path87 === "/v1/projects") {
+      if (req.method === "GET" && path91 === "/v1/projects") {
         sendJson2(res, 200, {
           ok: true,
           projects: projects.map((p3) => ({
@@ -68702,7 +69112,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "GET" && path87 === "/v1/runs") {
+      if (req.method === "GET" && path91 === "/v1/runs") {
         sendJson2(res, 200, {
           ok: true,
           active: runs.getActive(),
@@ -68720,7 +69130,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "POST" && path87 === "/v1/runs") {
+      if (req.method === "POST" && path91 === "/v1/runs") {
         const raw = await readBody(req);
         let body = {};
         try {
@@ -68763,11 +69173,12 @@ async function runCompanionServe(opts = {}) {
             createdAt: result.run.createdAt
           },
           eventsUrl: `/v1/runs/${result.run.id}/events`,
-          cancelUrl: `/v1/runs/${result.run.id}/cancel`
+          cancelUrl: `/v1/runs/${result.run.id}/cancel`,
+          steerUrl: `/v1/runs/${result.run.id}/steer`
         });
         return;
       }
-      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path87);
+      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path91);
       if (req.method === "GET" && eventsMatch) {
         const runId = eventsMatch[1];
         const run = runs.getRun(runId);
@@ -68832,7 +69243,7 @@ async function runCompanionServe(opts = {}) {
         }, 500);
         return;
       }
-      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path87);
+      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path91);
       if (req.method === "POST" && cancelMatch) {
         const runId = cancelMatch[1];
         const result = runs.cancel(runId);
@@ -68843,6 +69254,30 @@ async function runCompanionServe(opts = {}) {
         sendJson2(res, 200, { ok: true, cancelled: runId });
         return;
       }
+      const steerMatch = /^\/v1\/runs\/([^/]+)\/steer$/.exec(path91);
+      if (req.method === "POST" && steerMatch) {
+        const runId = steerMatch[1];
+        const raw = await readBody(req);
+        let body = {};
+        try {
+          body = raw ? JSON.parse(raw) : {};
+        } catch {
+          sendJson2(res, 400, { ok: false, error: "invalid JSON body" });
+          return;
+        }
+        const text = typeof body.text === "string" ? body.text.trim() : "";
+        if (!text) {
+          sendJson2(res, 400, { ok: false, error: "text is required" });
+          return;
+        }
+        const result = await runs.steer(runId, text);
+        if (!result.ok) {
+          sendJson2(res, 404, { ok: false, error: result.error });
+          return;
+        }
+        sendJson2(res, 200, { ok: true, steered: runId, result: result.result });
+        return;
+      }
       sendJson2(res, 404, { ok: false, error: "not found" });
     } catch (err) {
       sendJson2(res, 500, {
@@ -68986,11 +69421,11 @@ import { execSync as execSync2 } from "node:child_process";
 import { existsSync as existsSync55, readFileSync as readFileSync42, readlinkSync, statSync as statSync10 } from "node:fs";
 import { createRequire as createRequire3 } from "node:module";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
-import path85 from "node:path";
+import path88 from "node:path";
 function findPackageRoot(start) {
   let dir = start;
   for (let i = 0; i < 6; i += 1) {
-    const candidate = path85.join(dir, "package.json");
+    const candidate = path88.join(dir, "package.json");
     if (existsSync55(candidate)) {
       try {
         const pkg = JSON.parse(readFileSync42(candidate, "utf8"));
@@ -68998,11 +69433,11 @@ function findPackageRoot(start) {
       } catch {
       }
     }
-    const parent = path85.dirname(dir);
+    const parent = path88.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
-  return path85.resolve(__dirname3, "..", "..", "..");
+  return path88.resolve(__dirname3, "..", "..", "..");
 }
 function tryExec(cmd) {
   try {
@@ -69016,7 +69451,7 @@ function tryExec(cmd) {
 }
 function readPackageJson4() {
   try {
-    const pkgPath = path85.join(packageRoot, "package.json");
+    const pkgPath = path88.join(packageRoot, "package.json");
     return JSON.parse(readFileSync42(pkgPath, "utf8"));
   } catch {
     return null;
@@ -69032,7 +69467,7 @@ function checkShim(pkgName) {
   }
   const isWin = process.platform === "win32";
   const shimName = isWin ? "zelari-code.cmd" : "zelari-code";
-  const shimPath = path85.join(prefix, shimName);
+  const shimPath = path88.join(prefix, shimName);
   if (!existsSync55(shimPath)) {
     return FAIL(
       `shim not found at ${shimPath}
@@ -69060,8 +69495,8 @@ function checkShim(pkgName) {
          fix:  npm install -g ${pkgName}@latest --force`
       );
     }
-    const resolved = path85.resolve(path85.dirname(shimPath), target);
-    const expected = path85.join(
+    const resolved = path88.resolve(path88.dirname(shimPath), target);
+    const expected = path88.join(
       prefix,
       "node_modules",
       pkgName,
@@ -69100,7 +69535,7 @@ function checkNode(pkg) {
   return OK(`node ${raw}`);
 }
 function checkBundle() {
-  const bundle = path85.join(packageRoot, "dist", "cli", "main.bundled.js");
+  const bundle = path88.join(packageRoot, "dist", "cli", "main.bundled.js");
   if (!existsSync55(bundle)) {
     return FAIL(
       `dist/cli/main.bundled.js missing at ${bundle}
@@ -69121,7 +69556,7 @@ function checkRuntimeDeps() {
   const missing = [];
   for (const dep of required2) {
     try {
-      const localReq = createRequire3(path85.join(packageRoot, "package.json"));
+      const localReq = createRequire3(path88.join(packageRoot, "package.json"));
       localReq.resolve(dep);
     } catch {
       missing.push(dep);
@@ -69321,7 +69756,7 @@ var init_doctor = __esm({
     init_metrics3();
     init_contextGrowthSummary();
     require3 = createRequire3(import.meta.url);
-    __dirname3 = path85.dirname(fileURLToPath3(import.meta.url));
+    __dirname3 = path88.dirname(fileURLToPath3(import.meta.url));
     packageRoot = findPackageRoot(__dirname3);
     OK = (message) => ({
       ok: true,
@@ -69499,21 +69934,88 @@ var init_fixBudget = __esm({
   }
 });
 
+// src/cli/commands/inspectSession.ts
+var inspectSession_exports = {};
+__export(inspectSession_exports, {
+  renderInspectReport: () => renderInspectReport,
+  runInspectSession: () => runInspectSession
+});
+import path89 from "node:path";
+import { existsSync as existsSync56 } from "node:fs";
+function renderInspectReport(state3) {
+  const lines = [
+    `session ${state3.session.sessionId}  status=${state3.session.status}  turns=${state3.execution.turnsTotal}`
+  ];
+  const contractByTurn = new Map(state3.execution.contracts.map((c) => [c.turn, c]));
+  for (const turn of state3.turns) {
+    const contract = contractByTurn.get(turn.index);
+    const verification = turn.verification ? `${turn.verification.verdict}${turn.verification.strict ? "" : " (non-strict)"}` : "unknown";
+    const blockers = contract?.blockers ?? [];
+    const completion = contract?.complete ? "complete" : blockers.length > 0 ? `incomplete \u2014 ${blockers.length} blockers: ${blockers.join(", ")}` : "incomplete";
+    lines.push(
+      `  turn ${turn.index}  [${turn.outcome}]  verification: ${verification}  contract: ${completion}`
+    );
+  }
+  lines.push("");
+  lines.push("support lens:");
+  const projections = state3.support.contextProjections;
+  const last = projections[projections.length - 1];
+  lines.push(
+    `  context projections: ${projections.length}` + (last ? `  (last: ${last.contextChars} chars \u2192 ${last.returnedCount} items)` : "")
+  );
+  lines.push(`  memory events: ${state3.support.memoryEvents}`);
+  const saved = state3.support.tokensSavedByCompaction;
+  lines.push(
+    `  compactions: ${state3.support.compactions}${saved !== void 0 ? ` (${saved} tokens saved)` : ""}`
+  );
+  return lines.join("\n");
+}
+async function runInspectSession(opts) {
+  const sessionsDir = resolveSessionsDir({ workspaceRoot: opts.cwd ?? process.cwd() });
+  const sessionDir = path89.join(sessionsDir, opts.sessionId);
+  const eventsPath = path89.join(sessionDir, "events.jsonl");
+  if (!existsSync56(sessionDir)) {
+    console.error(`zelari-code inspect: no session directory at ${sessionDir}`);
+    return 1;
+  }
+  if (!existsSync56(eventsPath)) {
+    console.error(`zelari-code inspect: session directory has no events.jsonl at ${eventsPath}`);
+    return 1;
+  }
+  let state3;
+  try {
+    state3 = await readHarnessState(sessionDir);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`zelari-code inspect: cannot read session at ${sessionDir}: ${msg}`);
+    return 1;
+  }
+  console.log(opts.json ? JSON.stringify(state3, null, 2) : renderInspectReport(state3));
+  return 0;
+}
+var init_inspectSession = __esm({
+  "src/cli/commands/inspectSession.ts"() {
+    "use strict";
+    init_session();
+    init_harnessState();
+  }
+});
+
 // src/cli/commands/inspect.ts
 var inspect_exports = {};
 __export(inspect_exports, {
   collectInspectReport: () => collectInspectReport,
   runInspect: () => runInspect
 });
-import path86 from "node:path";
-import { existsSync as existsSync56, readFileSync as readFileSync43, readdirSync as readdirSync12 } from "node:fs";
+import path90 from "node:path";
+import { existsSync as existsSync57, readFileSync as readFileSync43, readdirSync as readdirSync12 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 async function collectInspectReport(cwd = process.cwd()) {
   ensureBuiltinSkillsLoadedSync();
   const snap = listSkillsSnapshot(cwd);
   const mcp = listMcpServers(cwd);
-  const userMcpPath = path86.join(homedir17(), ".zelari-code", "mcp.json");
-  const projectMcpPath = path86.join(cwd, ".zelari", "mcp.json");
+  const userMcpPath = path90.join(homedir17(), ".zelari-code", "mcp.json");
+  const projectMcpPath = path90.join(cwd, ".zelari", "mcp.json");
   const globalHooks = globalHooksDir();
   const projectHooks = projectHooksDir(cwd);
   const projectTrusted = isFolderTrusted(cwd);
@@ -69539,11 +70041,11 @@ async function collectInspectReport(cwd = process.cwd()) {
       folders: listTrustedFolders()
     },
     configSources: [
-      { path: userMcpPath, exists: existsSync56(userMcpPath) },
-      { path: projectMcpPath, exists: existsSync56(projectMcpPath) },
-      { path: path86.join(homedir17(), ".zelari-code", "provider.json"), exists: existsSync56(path86.join(homedir17(), ".zelari-code", "provider.json")) },
-      { path: path86.join(cwd, ".zelari", "AGENTS.md"), exists: existsSync56(path86.join(cwd, ".zelari", "AGENTS.md")) },
-      { path: path86.join(cwd, "AGENTS.md"), exists: existsSync56(path86.join(cwd, "AGENTS.md")) }
+      { path: userMcpPath, exists: existsSync57(userMcpPath) },
+      { path: projectMcpPath, exists: existsSync57(projectMcpPath) },
+      { path: path90.join(homedir17(), ".zelari-code", "provider.json"), exists: existsSync57(path90.join(homedir17(), ".zelari-code", "provider.json")) },
+      { path: path90.join(cwd, ".zelari", "AGENTS.md"), exists: existsSync57(path90.join(cwd, ".zelari", "AGENTS.md")) },
+      { path: path90.join(cwd, "AGENTS.md"), exists: existsSync57(path90.join(cwd, "AGENTS.md")) }
     ],
     skills: {
       total: snap.skills.length,
@@ -69556,7 +70058,7 @@ async function collectInspectReport(cwd = process.cwd()) {
       user: mcp.servers.filter((s) => s.scope === "user").map((s) => ({ name: s.name, enabled: s.enabled !== false })),
       project: mcp.servers.filter((s) => s.scope === "project").map((s) => ({ name: s.name, enabled: s.enabled !== false })),
       projectTrusted,
-      projectConfigExists: existsSync56(projectMcpPath)
+      projectConfigExists: existsSync57(projectMcpPath)
     },
     hooks: {
       global: {
@@ -69583,12 +70085,12 @@ function listJsonFiles(dir) {
 }
 function findAgentsMd(cwd) {
   const candidates = [
-    path86.join(cwd, "AGENTS.md"),
-    path86.join(cwd, ".zelari", "AGENTS.md")
+    path90.join(cwd, "AGENTS.md"),
+    path90.join(cwd, ".zelari", "AGENTS.md")
   ];
   const found = [];
   for (const c of candidates) {
-    if (existsSync56(c)) {
+    if (existsSync57(c)) {
       try {
         const text = readFileSync43(c, "utf8");
         found.push(`${c} (${text.length} bytes)`);
@@ -72709,6 +73211,7 @@ init_completionGate();
 init_verificationBridge();
 init_completionProof();
 init_nativeVerification();
+init_spineTelemetry();
 
 // src/cli/hooks/permissionPicker.ts
 init_toolPermissions();
@@ -72912,8 +73415,14 @@ function useChatTurn(params) {
         try {
           const memoryFactory = await Promise.resolve().then(() => (init_serviceFactory(), serviceFactory_exports));
           if (memoryFactory.isMemoryV2Enabled()) {
+            const tuiSpineHolder = {
+              get current() {
+                return writerRef.current?.spine;
+              }
+            };
             memoryService = await memoryFactory.getMemoryService(process.cwd(), process.env, {
-              onWarning: (warning) => appendSystem(setMessages, warning, Date.now())
+              onWarning: (warning) => appendSystem(setMessages, warning, Date.now()),
+              onEvent: memorySinkFor(tuiSpineHolder)
             });
             memoryAutoWrite = memoryFactory.isMemoryAutoWriteEnabled();
           }
@@ -73880,8 +74389,14 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il membro riprende dop
   try {
     const memoryFactory = await Promise.resolve().then(() => (init_serviceFactory(), serviceFactory_exports));
     if (memoryFactory.isMemoryV2Enabled()) {
+      const councilSpineHolder = {
+        get current() {
+          return writerRef.current?.spine;
+        }
+      };
       councilMemory = await memoryFactory.getMemoryService(process.cwd(), process.env, {
-        onWarning: (warning) => appendSystem(setMessages, warning, Date.now())
+        onWarning: (warning) => appendSystem(setMessages, warning, Date.now()),
+        onEvent: memorySinkFor(councilSpineHolder)
       });
       councilMemoryAutoWrite = memoryFactory.isMemoryAutoWriteEnabled();
       if (!overrides.ragContext) {
@@ -74490,7 +75005,12 @@ async function runZelariMissionInTui(userMessage, deps, emit) {
     userMessage,
     hasPlan: hasWorkspacePlan2(projectRoot)
   });
-  const memory = await getMemoryBackend2(projectRoot);
+  const missionSpineHolder = {
+    get current() {
+      return deps.writerRef.current?.spine;
+    }
+  };
+  const memory = await getMemoryBackend2(projectRoot, process.env, memorySinkFor(missionSpineHolder));
   const chairmanBudget = envNumber(process.env.ZELARI_MODE_MAX_TOOLS_LUCIFER, {
     default: 30,
     min: 1
@@ -75735,11 +76255,11 @@ function handleCacheStats(ctx) {
 init_messageHelpers();
 init_serviceFactory();
 import { promises as fs31 } from "node:fs";
-import * as path66 from "node:path";
+import * as path67 from "node:path";
 
 // src/cli/memory/promotion.ts
 import { promises as fs30 } from "node:fs";
-import * as path65 from "node:path";
+import * as path66 from "node:path";
 var START = "<!-- zelari:memory-promotions:start -->";
 var END = "<!-- zelari:memory-promotions:end -->";
 var DURABLE_KINDS = /* @__PURE__ */ new Set(["fact", "decision", "constraint", "preference", "procedure"]);
@@ -75750,13 +76270,13 @@ function lineFor(node) {
 }
 async function promoteMemoryToAgentsMd(projectRoot, node) {
   if (node.status !== "active") {
-    return { added: false, path: path65.join(projectRoot, "AGENTS.md"), reason: `memory is ${node.status}` };
+    return { added: false, path: path66.join(projectRoot, "AGENTS.md"), reason: `memory is ${node.status}` };
   }
   if (!DURABLE_KINDS.has(node.kind)) {
-    return { added: false, path: path65.join(projectRoot, "AGENTS.md"), reason: `${node.kind} is not a durable instruction kind` };
+    return { added: false, path: path66.join(projectRoot, "AGENTS.md"), reason: `${node.kind} is not a durable instruction kind` };
   }
-  const root = await fs30.realpath(projectRoot).catch(() => path65.resolve(projectRoot));
-  const target = path65.join(root, "AGENTS.md");
+  const root = await fs30.realpath(projectRoot).catch(() => path66.resolve(projectRoot));
+  const target = path66.join(root, "AGENTS.md");
   try {
     const stat7 = await fs30.lstat(target);
     if (stat7.isSymbolicLink() || !stat7.isFile()) throw new Error("AGENTS.md must be a regular project file.");
@@ -75821,22 +76341,22 @@ function sourceLine(source2) {
   return entries.length ? entries.map(([key, value]) => `${key}=${value}`).join(" \xB7 ") : "unknown";
 }
 function isInside(root, target) {
-  const relative6 = path66.relative(root, target);
-  return relative6 === "" || !relative6.startsWith("..") && !path66.isAbsolute(relative6);
+  const relative6 = path67.relative(root, target);
+  return relative6 === "" || !relative6.startsWith("..") && !path67.isAbsolute(relative6);
 }
 async function safeExportPath(cwd, requested) {
-  const lexicalRoot = path66.resolve(cwd);
+  const lexicalRoot = path67.resolve(cwd);
   const root = await fs31.realpath(lexicalRoot).catch(() => lexicalRoot);
-  const fallback = path66.join(root, ".zelari", "memory", `export-${Date.now()}.json`);
-  const target = requested?.trim() ? path66.resolve(root, requested.trim()) : fallback;
+  const fallback = path67.join(root, ".zelari", "memory", `export-${Date.now()}.json`);
+  const target = requested?.trim() ? path67.resolve(root, requested.trim()) : fallback;
   if (!isInside(root, target)) {
     throw new Error("Export path must stay inside the active project.");
   }
-  const parent = path66.dirname(target);
-  const relativeParent = path66.relative(root, parent);
+  const parent = path67.dirname(target);
+  const relativeParent = path67.relative(root, parent);
   let cursor = root;
-  for (const segment of relativeParent.split(path66.sep).filter(Boolean)) {
-    cursor = path66.join(cursor, segment);
+  for (const segment of relativeParent.split(path67.sep).filter(Boolean)) {
+    cursor = path67.join(cursor, segment);
     try {
       const stat7 = await fs31.lstat(cursor);
       if (stat7.isSymbolicLink()) {
@@ -76008,9 +76528,9 @@ ${message}` : message
       }
       case "export": {
         const target = await safeExportPath(ctx.cwd, args.join(" ").trim() || void 0);
-        await fs31.mkdir(path66.dirname(target), { recursive: true });
-        const root = await fs31.realpath(ctx.cwd).catch(() => path66.resolve(ctx.cwd));
-        const realParent = await fs31.realpath(path66.dirname(target));
+        await fs31.mkdir(path67.dirname(target), { recursive: true });
+        const root = await fs31.realpath(ctx.cwd).catch(() => path67.resolve(ctx.cwd));
+        const realParent = await fs31.realpath(path67.dirname(target));
         if (!isInside(root, realParent)) {
           throw new Error("Export path resolves outside the active project.");
         }
@@ -76128,6 +76648,7 @@ init_graphMemory();
 init_executor();
 init_graphStatus();
 init_serviceFactory();
+init_spineTelemetry();
 async function handleKrakenGraph(ctx, prompt) {
   if (!isKrakenGraphEnabled()) {
     appendSystem(
@@ -76141,8 +76662,14 @@ async function handleKrakenGraph(ctx, prompt) {
     return;
   }
   appendSystem(ctx.setMessages, `[kraken] planning graph for: ${prompt.trim()}`);
+  const tuiSpineHolder = {
+    get current() {
+      return ctx.writerRef?.current?.spine ?? void 0;
+    }
+  };
   const memory = isMemoryV2Enabled() ? await getMemoryService(ctx.cwd, process.env, {
-    onWarning: (warning) => appendSystem(ctx.setMessages, warning)
+    onWarning: (warning) => appendSystem(ctx.setMessages, warning),
+    onEvent: memorySinkFor(tuiSpineHolder)
   }) : void 0;
   const audit = new AuditLogger();
   const taskToolDeps = {
@@ -76206,7 +76733,7 @@ import { promises as fs35 } from "node:fs";
 init_zod();
 init_taskTool();
 import { promises as fs34 } from "node:fs";
-import path71 from "node:path";
+import path72 from "node:path";
 import { randomBytes as randomBytes6 } from "node:crypto";
 var CsvFanoutArgsSchema = external_exports.object({
   csv_path: external_exports.string().min(1),
@@ -76300,8 +76827,8 @@ function resolveMaxConcurrency(env = process.env) {
 }
 async function runCsvFanout(args, deps, opts) {
   const start = Date.now();
-  const absCsv = path71.isAbsolute(args.csv_path) ? args.csv_path : path71.join(opts.parentCwd, args.csv_path);
-  const absOut = path71.isAbsolute(args.output_csv_path) ? args.output_csv_path : path71.join(opts.parentCwd, args.output_csv_path);
+  const absCsv = path72.isAbsolute(args.csv_path) ? args.csv_path : path72.join(opts.parentCwd, args.csv_path);
+  const absOut = path72.isAbsolute(args.output_csv_path) ? args.output_csv_path : path72.join(opts.parentCwd, args.output_csv_path);
   const { headers: headers2, rows } = await readCsv(absCsv);
   if (headers2.length === 0) {
     throw new Error(`kraken_csv_fanout: ${absCsv} is empty`);
@@ -76357,7 +76884,7 @@ async function runCsvFanout(args, deps, opts) {
         errored += 1;
         errors.push(`${row[args.id_column] ?? i}: ${res.error}`);
       }
-      await fs34.mkdir(path71.dirname(absOut), { recursive: true });
+      await fs34.mkdir(path72.dirname(absOut), { recursive: true });
       await queueWrite(serializeCsv(outHeaders, outputRecords));
     }
   }
@@ -76552,7 +77079,7 @@ function splitArgs(s) {
 // src/cli/slashHandlers/krakenWorkbench.ts
 init_messageHelpers();
 import { promises as fs36 } from "node:fs";
-import path72 from "node:path";
+import path73 from "node:path";
 
 // src/cli/kraken/workbenchView.ts
 var EMPTY = {
@@ -76669,14 +77196,14 @@ function formatWorkbenchForTerminal(p3) {
 
 // src/cli/slashHandlers/krakenWorkbench.ts
 async function handleKrakenWorkbench(ctx) {
-  const dir = path72.join(ctx.cwd, ".zelari", "radio");
+  const dir = path73.join(ctx.cwd, ".zelari", "radio");
   let latest = null;
   let latestMtime = 0;
   try {
     const files = await fs36.readdir(dir);
     for (const f of files) {
       if (!f.startsWith("workbench-") || !f.endsWith(".md")) continue;
-      const full = path72.join(dir, f);
+      const full = path73.join(dir, f);
       const stat7 = await fs36.stat(full);
       if (stat7.mtimeMs > latestMtime) {
         latestMtime = stat7.mtimeMs;
@@ -76693,10 +77220,10 @@ async function handleKrakenWorkbench(ctx) {
   const parsed = parseWorkbench(content);
   const rendered = formatWorkbenchForTerminal(parsed);
   if (!rendered.trim()) {
-    appendSystem(ctx.setMessages, `[kraken workbench] ${path72.basename(latest)}: (no nodes / no events yet)`);
+    appendSystem(ctx.setMessages, `[kraken workbench] ${path73.basename(latest)}: (no nodes / no events yet)`);
     return;
   }
-  appendSystem(ctx.setMessages, `[kraken workbench] ${path72.basename(latest)}:
+  appendSystem(ctx.setMessages, `[kraken workbench] ${path73.basename(latest)}:
 ${rendered}`);
 }
 
@@ -77003,15 +77530,15 @@ ${result.output.split("\n").slice(-8).join("\n")}` : "";
 // src/cli/slashHandlers/promoteMember.ts
 init_messageHelpers();
 import { promises as fs37 } from "node:fs";
-import path75 from "node:path";
+import path76 from "node:path";
 import os12 from "node:os";
 async function handlePromoteMember(ctx, memberId) {
   try {
     const { promoteMember: promoteMember2 } = await Promise.resolve().then(() => (init_council(), council_exports));
     const { skill, markdown } = promoteMember2(memberId);
-    const skillDir = process.env.ANATHEMA_SKILL_DIR ?? path75.join(os12.homedir(), ".tmp", "zelari-code", "skills");
+    const skillDir = process.env.ANATHEMA_SKILL_DIR ?? path76.join(os12.homedir(), ".tmp", "zelari-code", "skills");
     await fs37.mkdir(skillDir, { recursive: true });
-    const filePath = path75.join(skillDir, `${skill.id}.md`);
+    const filePath = path76.join(skillDir, `${skill.id}.md`);
     await fs37.writeFile(filePath, markdown, "utf8");
     appendSystem(
       ctx.setMessages,
@@ -77029,24 +77556,24 @@ async function handlePromoteMember(ctx, memberId) {
 
 // src/cli/branchManager.ts
 import { promises as fs38, existsSync as existsSync48, readFileSync as readFileSync37, writeFileSync as writeFileSync23, mkdirSync as mkdirSync19, statSync as statSync7, rmSync as rmSync3 } from "node:fs";
-import path76 from "node:path";
+import path77 from "node:path";
 import os13 from "node:os";
 var META_FILENAME = "meta.json";
 var SESSIONS_SUBDIR = "sessions";
 function getBranchesBaseDir() {
-  return process.env.ANATHEMA_BRANCHES_DIR ?? path76.join(os13.homedir(), ".tmp", "zelari-code", "branches");
+  return process.env.ANATHEMA_BRANCHES_DIR ?? path77.join(os13.homedir(), ".tmp", "zelari-code", "branches");
 }
 function getSessionsBaseDir() {
-  return process.env.ANATHEMA_SESSIONS_DIR ?? path76.join(os13.homedir(), ".tmp", "zelari-code", "sessions");
+  return process.env.ANATHEMA_SESSIONS_DIR ?? path77.join(os13.homedir(), ".tmp", "zelari-code", "sessions");
 }
 function branchPathFor(name, baseDir) {
-  return path76.join(baseDir, name);
+  return path77.join(baseDir, name);
 }
 function metaPathFor(name, baseDir) {
-  return path76.join(baseDir, name, META_FILENAME);
+  return path77.join(baseDir, name, META_FILENAME);
 }
 function sessionsPathFor(name, baseDir) {
-  return path76.join(baseDir, name, SESSIONS_SUBDIR);
+  return path77.join(baseDir, name, SESSIONS_SUBDIR);
 }
 function readBranchMeta(name, baseDir) {
   const metaPath = metaPathFor(name, baseDir);
@@ -77071,7 +77598,7 @@ function readBranchMeta(name, baseDir) {
 }
 function writeBranchMeta(name, baseDir, meta3) {
   const metaPath = metaPathFor(name, baseDir);
-  mkdirSync19(path76.dirname(metaPath), { recursive: true });
+  mkdirSync19(path77.dirname(metaPath), { recursive: true });
   writeFileSync23(metaPath, JSON.stringify(meta3, null, 2), "utf-8");
 }
 async function countSessions(name, baseDir) {
@@ -77122,14 +77649,14 @@ async function createBranch(name, fromSessionId, baseDir = getBranchesBaseDir(),
   if (branchExists(name, baseDir)) {
     throw new BranchAlreadyExistsError(name);
   }
-  const sourcePath = path76.join(sessionsBaseDir, `${fromSessionId}.jsonl`);
+  const sourcePath = path77.join(sessionsBaseDir, `${fromSessionId}.jsonl`);
   if (!existsSync48(sourcePath)) {
     throw new SessionNotFoundError(`Source session "${fromSessionId}" not found at ${sourcePath}`);
   }
   const branchPath = branchPathFor(name, baseDir);
   const branchSessionsPath = sessionsPathFor(name, baseDir);
   mkdirSync19(branchSessionsPath, { recursive: true });
-  const destPath = path76.join(branchSessionsPath, `${fromSessionId}.jsonl`);
+  const destPath = path77.join(branchSessionsPath, `${fromSessionId}.jsonl`);
   await fs38.copyFile(sourcePath, destPath);
   const meta3 = {
     name,
@@ -77233,14 +77760,14 @@ async function handleBranchCheckout(ctx, branchName) {
 // src/cli/slashHandlers/workspace.ts
 init_messageHelpers();
 import { promises as fs39 } from "node:fs";
-import path77 from "node:path";
+import path78 from "node:path";
 async function handleWorkspaceShow(ctx, what) {
   try {
-    const zelari = path77.join(process.cwd(), ".zelari");
+    const zelari = path78.join(process.cwd(), ".zelari");
     let content;
     switch (what) {
       case "plan": {
-        const planPath = path77.join(zelari, "plan.md");
+        const planPath = path78.join(zelari, "plan.md");
         try {
           content = await fs39.readFile(planPath, "utf-8");
         } catch {
@@ -77249,7 +77776,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "decisions": {
-        const decisionsDir = path77.join(zelari, "decisions");
+        const decisionsDir = path78.join(zelari, "decisions");
         try {
           const files = (await fs39.readdir(decisionsDir)).filter((f) => f.endsWith(".md")).sort();
           if (files.length === 0) {
@@ -77259,7 +77786,7 @@ async function handleWorkspaceShow(ctx, what) {
 `];
             const { parseFrontmatter: parseFrontmatter2 } = await Promise.resolve().then(() => (init_storage(), storage_exports));
             for (const f of files) {
-              const raw = await fs39.readFile(path77.join(decisionsDir, f), "utf-8");
+              const raw = await fs39.readFile(path78.join(decisionsDir, f), "utf-8");
               const { meta: meta3, body } = parseFrontmatter2(raw);
               const title = meta3.title ?? body.split("\n")[0]?.replace(/^#\s*/, "").trim() ?? f;
               lines.push(`- **${f.replace(/\.md$/, "")}** [${meta3.status ?? "unknown"}] ${title}`);
@@ -77272,7 +77799,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "risks": {
-        const risksPath = path77.join(zelari, "risks.md");
+        const risksPath = path78.join(zelari, "risks.md");
         try {
           content = await fs39.readFile(risksPath, "utf-8");
         } catch {
@@ -77281,7 +77808,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "agents": {
-        const agentsPath = path77.join(process.cwd(), "AGENTS.MD");
+        const agentsPath = path78.join(process.cwd(), "AGENTS.MD");
         try {
           content = await fs39.readFile(agentsPath, "utf-8");
         } catch {
@@ -77290,7 +77817,7 @@ async function handleWorkspaceShow(ctx, what) {
         break;
       }
       case "docs": {
-        const docsDir = path77.join(zelari, "docs");
+        const docsDir = path78.join(zelari, "docs");
         try {
           const files = (await fs39.readdir(docsDir)).filter((f) => f.endsWith(".md")).sort();
           content = files.length ? `# Docs (${files.length})
@@ -77332,7 +77859,7 @@ async function handleWorkspaceReset(ctx, force) {
     return;
   }
   try {
-    const target = path77.join(process.cwd(), ".zelari");
+    const target = path78.join(process.cwd(), ".zelari");
     await fs39.rm(target, { recursive: true, force: true });
     appendSystem(ctx.setMessages, "[workspace] .zelari/ removed");
   } catch (err) {
@@ -77344,7 +77871,7 @@ async function handleWorkspaceReset(ctx, force) {
 init_provider2();
 
 // src/cli/slashHandlers/skills.ts
-import path78 from "node:path";
+import path79 from "node:path";
 import os14 from "node:os";
 
 // src/cli/skillHistory.ts
@@ -77473,7 +78000,7 @@ function handleSkillPicker(ctx, skills, openPicker, fallbackMessage) {
   });
 }
 async function handleSkillStats(ctx, skillId) {
-  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path78.join(os14.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
+  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path79.join(os14.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
   try {
     const records = await readSkillHistory(historyFile);
     const stats = getSkillStats(records, skillId);
@@ -77489,7 +78016,7 @@ async function handleSkillCompare(ctx, ids, fallbackMessage) {
     appendSystem(ctx.setMessages, fallbackMessage ?? "[skill-compare] missing args");
     return;
   }
-  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path78.join(os14.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
+  const historyFile = process.env.ANATHEMA_SKILL_HISTORY_FILE ?? path79.join(os14.homedir(), ".tmp", "zelari-code", "skill-history.jsonl");
   try {
     const formatted = await compareSkillsFromFile(ids[0], ids[1], historyFile);
     appendSystem(ctx.setMessages, formatted);
@@ -77945,7 +78472,10 @@ function useSlashDispatch(params) {
     }
     if (result.kind === "kraken_graph") {
       const sid = (sessionId2 || "default").trim();
-      await handleKrakenGraph({ setMessages, cwd: process.cwd(), sessionId: sid }, result.graphPrompt ?? "");
+      await handleKrakenGraph(
+        { setMessages, cwd: process.cwd(), sessionId: sid, writerRef: params.writerRef },
+        result.graphPrompt ?? ""
+      );
       return;
     }
     if (result.kind === "kraken_fanout") {
@@ -78282,6 +78812,9 @@ function App() {
     sessionId: session.sessionId,
     messages: session.messages,
     setMessages: session.setMessages,
+    // W2: same writer ref passed to useChatTurn — lets /kraken graph project
+    // memory events onto the session spine mirror.
+    writerRef: session.writerRef,
     setInput,
     setBusy,
     setSessionId: session.setSessionId,
@@ -79184,8 +79717,8 @@ function normalizeDraft(raw, sourceUrl, provider, model) {
   let name = String(o.name ?? "").trim().toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64);
   if (!name || !/^[a-z0-9][a-z0-9-]{0,63}$/.test(name)) {
     try {
-      const path87 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
-      name = path87 && /^[a-z0-9]/.test(path87) ? path87 : "imported-skill";
+      const path91 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+      name = path91 && /^[a-z0-9]/.test(path91) ? path91 : "imported-skill";
     } catch {
       name = "imported-skill";
     }
@@ -79520,6 +80053,14 @@ function pickRootComponent() {
     process.exit(1);
   }
   if (argv.includes("--inspect") || argv.includes("inspect")) {
+    const inspectAt = argv.findIndex((a) => a === "inspect" || a === "--inspect");
+    const sessionId2 = inspectAt >= 0 ? argv.slice(inspectAt + 1).find((a) => !a.startsWith("-")) : void 0;
+    if (sessionId2) {
+      const { runInspectSession: runInspectSession2 } = (init_inspectSession(), __toCommonJS(inspectSession_exports));
+      const json4 = argv.includes("--json");
+      void runInspectSession2({ sessionId: sessionId2, json: json4 }).then((code) => process.exit(code));
+      return { kind: "done" };
+    }
     const { runInspect: runInspect2 } = (init_inspect(), __toCommonJS(inspect_exports));
     const json3 = argv.includes("--json");
     void runInspect2({ json: json3 }).then((code) => process.exit(code));