zelari-code 2.17.0 → 2.18.0

package/dist/cli/main.bundled.js

@@ -3288,10 +3288,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path90) {
-  if (!path90)
+function getElementAtPath(obj, path91) {
+  if (!path91)
     return obj;
-  return path90.reduce((acc, key) => acc?.[key], obj);
+  return path91.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -3619,11 +3619,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path90, issues) {
+function prefixIssues(path91, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path90);
+    iss.path.unshift(path91);
     return iss;
   });
 }
@@ -3841,16 +3841,16 @@ function flattenError(error51, mapper = (issue2) => issue2.message) {
 }
 function formatError(error51, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error52, path90 = []) => {
+  const processError = (error52, path91 = []) => {
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path90, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path91, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path90, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path90, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else {
-        const fullpath = [...path90, ...issue2.path];
+        const fullpath = [...path91, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -3877,17 +3877,17 @@ function formatError(error51, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error51, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error52, path90 = []) => {
+  const processError = (error52, path91 = []) => {
     var _a3, _b;
     for (const issue2 of error52.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path90, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path91, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path90, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path90, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path91, ...issue2.path]);
       } else {
-        const fullpath = [...path90, ...issue2.path];
+        const fullpath = [...path91, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -3919,8 +3919,8 @@ function treeifyError(error51, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path90 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path90) {
+  const path91 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path91) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -17423,13 +17423,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path90 = ref.slice(1).split("/").filter(Boolean);
-  if (path90.length === 0) {
+  const path91 = ref.slice(1).split("/").filter(Boolean);
+  if (path91.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path90[0] === defsKey) {
-    const key = path90[1];
+  if (path91[0] === defsKey) {
+    const key = path91[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -18777,11 +18777,18 @@ function filterByInclude(entries, include) {
   if (include.length === 0 || include.length === 1 && include[0] === "*") {
     return entries.filter((e) => e.type === "file");
   }
-  const regexes = include.map(globToRegex);
+  const pathRegexes = [];
+  const baseRegexes = [];
+  for (const g of include) {
+    (g.includes("/") || g.includes("**") ? pathRegexes : baseRegexes).push(globToRegex(g));
+  }
   return entries.filter((e) => {
     if (e.type !== "file")
       return false;
-    return regexes.some((re) => re.test(e.name));
+    if (pathRegexes.some((re) => re.test(e.name)))
+      return true;
+    const base2 = e.name.slice(e.name.lastIndexOf("/") + 1);
+    return baseRegexes.some((re) => re.test(base2));
   });
 }
 var REGEX_ESCAPE, DEFAULT_EXCLUDES;
@@ -18828,8 +18835,8 @@ function coerceStringList(value, fallback) {
   }
   return fallback;
 }
-function hasRecursiveGlob(include) {
-  return include.some((g) => g.includes("**"));
+function hasPathAnchoredGlob(include) {
+  return include.some((g) => g.includes("/") || g.includes("**"));
 }
 function scopeWarnings(allEntries, include, matched) {
   const warnings = [];
@@ -18837,15 +18844,17 @@ function scopeWarnings(allEntries, include, matched) {
   if (filesWalked === 0)
     return warnings;
   if (matched === 0) {
-    warnings.push(`SEARCH_EMPTY_SCOPE: include globs matched 0 of ${filesWalked} files walked \u2014 '*' matches only one path segment; use '**/<glob>' for recursive matching. Do not interpret this result as "pattern not found".`);
+    const cause = hasPathAnchoredGlob(include) ? `path-anchored globs (with '/') match the relative path at exactly that level; use '**/<glob>' for recursive matching` : `flat globs ('*.ts') match the basename at any depth, so no file with these names/extensions exists in the walked tree`;
+    warnings.push(`SEARCH_EMPTY_SCOPE: include globs matched 0 of ${filesWalked} files walked \u2014 ${cause}. Do not interpret this result as "pattern not found".`);
     return warnings;
   }
-  if (hasRecursiveGlob(include) || matched >= filesWalked)
+  if (!hasPathAnchoredGlob(include) || matched >= filesWalked)
     return warnings;
-  const recursiveRegexes = compileGlobs(include.map((g) => `**/${g}`));
+  const anchored = include.filter((g) => g.includes("/") || g.includes("**"));
+  const recursiveRegexes = compileGlobs(anchored.map((g) => `**/${g}`));
   const wouldMatch = allEntries.filter((e) => e.type === "file" && matchesAnyCompiled(e.name, recursiveRegexes)).length;
   if (wouldMatch > matched) {
-    warnings.push(`include globs matched ${matched} of ${filesWalked} files walked \u2014 '*' matches only one path segment; a '**/*.ts'-style recursive glob would have matched ${wouldMatch - matched} more file(s) in subdirectories`);
+    warnings.push(`include globs matched ${matched} of ${filesWalked} files walked \u2014 a path-anchored glob ('${anchored[0]}') matches only that exact level; a '**/${anchored[0]}'-style recursive glob would have matched ${wouldMatch - matched} more file(s) in subdirectories`);
   }
   return warnings;
 }
@@ -18912,7 +18921,10 @@ var init_search = __esm({
       /**
        * Glob pattern(s) to INCLUDE when path is a directory.
        * Accepts a string OR string[] (models often emit a bare string).
-       * Default ['*'] = all files. Ignored when path is a file.
+       * A glob without '/' (e.g. '*.ts') matches the file basename at any depth
+       * (grep --include style); a glob with '/' (e.g. 'src/*.ts') matches the
+       * relative path at exactly that level. Default ['*'] = all files.
+       * Ignored when path is a file.
        */
       include: stringOrStringArray.optional().default(["*"]),
       /**
@@ -18925,7 +18937,7 @@ var init_search = __esm({
     });
     grepContentTool = {
       name: "grep_content",
-      description: 'Regex search for content in a file OR recursively in a directory. When path is a directory, include/exclude globs filter which files are searched (default: all files, excluding node_modules/dist/.git/etc.). Glob semantics: "*" matches ONE path segment only ("*.ts" does NOT match "sub/file.ts"); use "**" for recursive matching ("**/*.ts" matches at any depth). include/exclude accept a single glob string (e.g. "*.ts") OR an array of globs. Returns matches with line numbers and context, plus filesWalked/filesInTree counts and a warning when the include globs matched suspiciously few files.',
+      description: `Regex search for content in a file OR recursively in a directory. When path is a directory, include/exclude globs filter which files are searched (default: all files, excluding node_modules/dist/.git/etc.). Glob semantics (grep --include style): a glob without '/' (e.g. "*.md") matches the file basename at ANY depth; a glob with '/' (e.g. "src/*.ts") matches the relative path at exactly that level; "**" is explicit recursion ("**/*.ts" matches at any depth, same as the bare form). include/exclude accept a single glob string (e.g. "*.ts") OR an array of globs. Returns matches with line numbers and context, plus filesWalked/filesInTree counts and a warning when the include globs matched suspiciously few files.`,
       permissions: ["read"],
       sideEffect: "none",
       timeoutMs: 3e4,
@@ -19875,11 +19887,11 @@ var init_tools = __esm({
           if (!ctx.addDocument)
             return "Knowledge vault tool not available.";
           const title = args["title"] || "New Document";
-          const path90 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
+          const path91 = args["path"] || `notes/${title.toLowerCase().replace(/[^a-z0-9]+/g, "-")}`;
           const content = args["content"] || "";
           const tags = args["tags"] || [];
           ctx.addDocument({
-            path: path90,
+            path: path91,
             title,
             content,
             format: "markdown",
@@ -19888,7 +19900,7 @@ var init_tools = __esm({
             workspaceId: ctx.workspaceId
           });
           ctx.addActivity("vault", "created document", title);
-          return `Document "${title}" created at "${path90}".`;
+          return `Document "${title}" created at "${path91}".`;
         }
       }
     ];
@@ -23328,7 +23340,7 @@ function extractToolObjects(text) {
   }
   return out;
 }
-var BUILD_LIVENESS_RECOVERY_PROMPT, AgentHarness, DOOM_LOOP_THRESHOLD;
+var TOOL_CALL_TRUNCATED_RECOVERY_MARKER, TOOL_CALL_TRUNCATED_RECOVERY_USER, BUILD_LIVENESS_RECOVERY_PROMPT, AgentHarness, DOOM_LOOP_THRESHOLD;
 var init_AgentHarness = __esm({
   "packages/core/dist/core/AgentHarness.js"() {
     "use strict";
@@ -23340,6 +23352,8 @@ var init_AgentHarness = __esm({
     init_textLoopDetect();
     init_ObserverBus();
     init_textLoopDetect();
+    TOOL_CALL_TRUNCATED_RECOVERY_MARKER = "[harness] Previous tool call was truncated";
+    TOOL_CALL_TRUNCATED_RECOVERY_USER = `${TOOL_CALL_TRUNCATED_RECOVERY_MARKER} by the provider before completion (finish_reason=tool_calls but no complete tool_call arrived). Retry with a shorter payload or split the work into smaller tool calls.`;
     BUILD_LIVENESS_RECOVERY_PROMPT = "[build-liveness] The requested task requires an on-disk implementation, but no successful project mutation has occurred yet. Continue working. Inspect only as needed, then make the required change with an available mutating tool. Do not merely describe a patch or claim completion.";
     AgentHarness = class {
       config;
@@ -24343,7 +24357,8 @@ ${cached2}`
               if (turnToolResults.length > 0) {
                 finishRef.value = "tool_calls";
               }
-              if (finishRef.value === "tool_calls" && turnToolCalls.length === 0 && turnToolResults.length === 0) {
+              const truncatedToolCall = finishRef.value === "tool_calls" && turnToolCalls.length === 0 && turnToolResults.length === 0;
+              if (truncatedToolCall) {
                 const truncErr = createBrainEvent("error", this.sessionId, {
                   severity: "recoverable",
                   message: "Tool call was truncated (finish_reason=tool_calls but no complete tool_call received). The provider cut the response mid-arguments. Retry with a shorter payload or split the work.",
@@ -24383,6 +24398,15 @@ ${cached2}`
                   content: tr.content
                 });
               }
+              if (truncatedToolCall) {
+                const last = this.config.messages[this.config.messages.length - 1];
+                if (!(last?.role === "user" && typeof last.content === "string" && last.content.includes(TOOL_CALL_TRUNCATED_RECOVERY_MARKER))) {
+                  this.config.messages.push({
+                    role: "user",
+                    content: TOOL_CALL_TRUNCATED_RECOVERY_USER
+                  });
+                }
+              }
               break;
             } else if (delta.kind === "error") {
               finishRef.providerError = true;
@@ -25317,6 +25341,8 @@ __export(harness_exports, {
   SessionJsonlWriter: () => SessionJsonlWriter,
   TEXT_LOOP_RECOVERY_SYSTEM: () => TEXT_LOOP_RECOVERY_SYSTEM,
   TEXT_LOOP_RECOVERY_USER_PROMPT: () => TEXT_LOOP_RECOVERY_USER_PROMPT,
+  TOOL_CALL_TRUNCATED_RECOVERY_MARKER: () => TOOL_CALL_TRUNCATED_RECOVERY_MARKER,
+  TOOL_CALL_TRUNCATED_RECOVERY_USER: () => TOOL_CALL_TRUNCATED_RECOVERY_USER,
   canonicalTools: () => canonicalTools,
   collapseLoopedAssistantText: () => collapseLoopedAssistantText,
   compareReplayPrefix: () => compareReplayPrefix,
@@ -26138,11 +26164,11 @@ var init_synthesisAudit = __esm({
 import { existsSync as existsSync7, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "node:fs";
 import { join as join4 } from "node:path";
 function loadNfrSpec(zelariRoot) {
-  const path90 = join4(zelariRoot, "nfr-spec.json");
-  if (!existsSync7(path90))
+  const path91 = join4(zelariRoot, "nfr-spec.json");
+  if (!existsSync7(path91))
     return null;
   try {
-    const raw = JSON.parse(readFileSync7(path90, "utf8"));
+    const raw = JSON.parse(readFileSync7(path91, "utf8"));
     if (raw.version !== 1 || !Array.isArray(raw.targets))
       return null;
     return raw;
@@ -28448,9 +28474,9 @@ var init_types5 = __esm({
 import { readFileSync as readFileSync12 } from "node:fs";
 import { join as join10 } from "node:path";
 function readLessonsDeduped(zelariRoot) {
-  const path90 = join10(zelariRoot, LESSONS_FILE);
+  const path91 = join10(zelariRoot, LESSONS_FILE);
   try {
-    const raw = readFileSync12(path90, "utf8");
+    const raw = readFileSync12(path91, "utf8");
     const byId = /* @__PURE__ */ new Map();
     for (const line of raw.split(/\r?\n/)) {
       if (!line.trim())
@@ -28551,8 +28577,8 @@ function keywordsFrom(check2, signature) {
   return [.../* @__PURE__ */ new Set([...fromId, ...words])].slice(0, 12);
 }
 function writeLesson(zelariRoot, lesson) {
-  const path90 = join11(zelariRoot, LESSONS_FILE);
-  appendFileSync(path90, `${JSON.stringify(lesson)}
+  const path91 = join11(zelariRoot, LESSONS_FILE);
+  appendFileSync(path91, `${JSON.stringify(lesson)}
 `, "utf8");
 }
 function findSimilar(lessons, signature) {
@@ -30515,9 +30541,9 @@ function findCycle(nodes) {
     if (color.get(start) !== WHITE)
       continue;
     const stack = [[start, 0]];
-    const path90 = [];
+    const path91 = [];
     color.set(start, GRAY);
-    path90.push(start);
+    path91.push(start);
     while (stack.length > 0) {
       const top = stack[stack.length - 1];
       const [id3, idx] = top;
@@ -30530,17 +30556,17 @@ function findCycle(nodes) {
           continue;
         const c = color.get(dep);
         if (c === GRAY) {
-          const at = path90.indexOf(dep);
-          return [...path90.slice(at), dep];
+          const at = path91.indexOf(dep);
+          return [...path91.slice(at), dep];
         }
         if (c === WHITE) {
           color.set(dep, GRAY);
-          path90.push(dep);
+          path91.push(dep);
           stack.push([dep, 0]);
         }
       } else {
         color.set(id3, BLACK);
-        path90.pop();
+        path91.pop();
         stack.pop();
       }
     }
@@ -31460,8 +31486,8 @@ var init_runner = __esm({
           failed: [...this.tentaclesById.values()].filter((r) => r.status === "error"),
           pending: []
         };
-        const path90 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
-        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path90}`);
+        const path91 = await this.host.saveSnapshot(snapshot, ".zelari/kraken/snapshots");
+        this.host.log(`checkpoint: ${label ?? "auto"} \u2192 ${path91}`);
         return snapshot;
       }
       callLog(msg, data) {
@@ -31587,6 +31613,15 @@ var init_types9 = __esm({
       "resource.reserve_entered",
       // 2.6.1 (closure plan §9): hard-limit overrun telemetry — state-only.
       "resource.overrun",
+      // ADR-0024 v1.1 (amended 2026-08-30): per-node ENVELOPE for kraken-graph
+      // runs — written by the HOST (the sole spine writer) around the executor's
+      // tentacle-run seam. State-only (never model-surface): data = {nodeId,
+      // agent, graphId?, ok?, cancelled?, durationMs?}; node labels, prompts and
+      // turn output stay on the kraken radio JSONL. One pair per attempt.
+      // ADR-0021 schema review: additive state kinds need no SCHEMA_VERSION bump —
+      // older readers skip them via the tolerant replay (schema-mismatch issues).
+      "graph.node_started",
+      "graph.node_ended",
       "note"
     ];
     SessionEventEnvelopeSchema = external_exports.object({
@@ -33912,16 +33947,16 @@ function runRetentionFromEnv() {
     maxTotalBytes: Number.isFinite(parseMb) && parseMb > 0 ? Math.round(parseMb * 1024 * 1024) : DEFAULT_RUN_RETENTION_MAX_MB * 1024 * 1024
   };
 }
-async function dirSize(path90) {
+async function dirSize(path91) {
   let total = 0;
   let entries;
   try {
-    entries = await readdir(path90, { withFileTypes: true });
+    entries = await readdir(path91, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const entry of entries) {
-    const child = join13(path90, entry.name);
+    const child = join13(path91, entry.name);
     if (entry.isDirectory())
       total += await dirSize(child);
     else {
@@ -33948,19 +33983,19 @@ async function enforceRunRetention(runsDir, options = {}) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const path90 = join13(runsDir, entry.name);
+    const path91 = join13(runsDir, entry.name);
     let startedAt = 0;
     let endedAt;
     let completed = false;
     try {
-      const manifest = JSON.parse(await readFile(join13(path90, "manifest.json"), "utf8"));
+      const manifest = JSON.parse(await readFile(join13(path91, "manifest.json"), "utf8"));
       startedAt = manifest.startedAt ?? 0;
       endedAt = manifest.endedAt;
       completed = Boolean(endedAt) && manifest.status !== "running";
     } catch {
       completed = false;
     }
-    infos.push({ name: entry.name, path: path90, startedAt, endedAt, completed, bytes: await dirSize(path90) });
+    infos.push({ name: entry.name, path: path91, startedAt, endedAt, completed, bytes: await dirSize(path91) });
   }
   const remove = async (info) => {
     await rm(info.path, { recursive: true, force: true });
@@ -34732,12 +34767,12 @@ var init_engine = __esm({
        * content digest) and the returned ref carries the event seq when the
        * emitter resolved one.
        */
-      async fsEvidence(observation, path90, sha256, content, extra = {}) {
+      async fsEvidence(observation, path91, sha256, content, extra = {}) {
         const digest = sha256 && content !== void 0 ? sha256(content) : void 0;
-        const seq = await this.emitEvidence({ observation, path: path90, ...extra, ...digest ? { digest } : {} });
+        const seq = await this.emitEvidence({ observation, path: path91, ...extra, ...digest ? { digest } : {} });
         return {
           tier: "fs-observation",
-          ref: path90,
+          ref: path91,
           capturedAt: Date.now(),
           ...digest ? { digest } : {},
           ...seq !== void 0 ? { seq } : {}
@@ -35777,6 +35812,8 @@ __export(dist_exports, {
   TEXT_LOOP_RECOVERY_SYSTEM: () => TEXT_LOOP_RECOVERY_SYSTEM,
   TEXT_LOOP_RECOVERY_USER_PROMPT: () => TEXT_LOOP_RECOVERY_USER_PROMPT,
   TIER_RANK: () => TIER_RANK,
+  TOOL_CALL_TRUNCATED_RECOVERY_MARKER: () => TOOL_CALL_TRUNCATED_RECOVERY_MARKER,
+  TOOL_CALL_TRUNCATED_RECOVERY_USER: () => TOOL_CALL_TRUNCATED_RECOVERY_USER,
   TOOL_DEFINITIONS: () => TOOL_DEFINITIONS,
   TOOL_USE_PROTOCOL_DIRECTIVE: () => TOOL_USE_PROTOCOL_DIRECTIVE,
   TURN_COMPLETION_MODULE: () => TURN_COMPLETION_MODULE,
@@ -37078,6 +37115,15 @@ function mapBrainEventToSpine(ev) {
           ...ev.memberName ? { member: ev.memberName } : {}
         }
       };
+    case "error":
+      if (ev.code === "tool_call_truncated") {
+        return {
+          kind: "user.message",
+          actor: ACTOR_USER,
+          data: { text: TOOL_CALL_TRUNCATED_RECOVERY_USER }
+        };
+      }
+      return null;
     default:
       return null;
   }
@@ -37134,6 +37180,7 @@ var MAX_STREAM_BUFFERS, SessionSpineMirror, SpineMirroringWriter;
 var init_sessionSpine = __esm({
   "src/cli/sessionSpine.ts"() {
     "use strict";
+    init_harness();
     init_session();
     init_session();
     init_verification2();
@@ -37880,9 +37927,9 @@ function spillToolOutput(fullText, meta3) {
     const rnd = randomBytes3(3).toString("hex");
     const safeTool = (meta3?.toolName ?? "tool").replace(/[^a-zA-Z0-9._-]+/g, "_").slice(0, 32);
     const file2 = `${stamp}-${safeTool}-${hash3}-${rnd}.txt`;
-    const path90 = join14(dir, file2);
-    writeFileSync11(path90, fullText, "utf8");
-    return path90;
+    const path91 = join14(dir, file2);
+    writeFileSync11(path91, fullText, "utf8");
+    return path91;
   } catch {
     return null;
   }
@@ -37928,10 +37975,10 @@ function truncateToolResult(text, capOrOpts = TOOL_RESULT_LINE_CAP) {
 ${tail2}`;
   }
   if (doSpill) {
-    const path90 = spillToolOutput(text, { toolName: opts.toolName });
-    if (path90) {
+    const path91 = spillToolOutput(text, { toolName: opts.toolName });
+    if (path91) {
       const spillNote = `
-\u2026 [full output spilled to: ${path90} \u2014 re-read with read_file if you need the complete text] \u2026`;
+\u2026 [full output spilled to: ${path91} \u2014 re-read with read_file if you need the complete text] \u2026`;
       if (preview.includes("] \u2026\n")) {
         preview = preview.replace("] \u2026\n", `] \u2026${spillNote}
 `);
@@ -41044,28 +41091,28 @@ var init_storage = __esm({
     VALID_SCALARS = /^(true|false|null|~)$/i;
     Storage = class {
       /** Read a Markdown file with frontmatter. Throws if not found. */
-      read(path90) {
-        if (!existsSync19(path90)) {
-          throw new Error(`File not found: ${path90}`);
+      read(path91) {
+        if (!existsSync19(path91)) {
+          throw new Error(`File not found: ${path91}`);
         }
-        const md = readFileSync16(path90, "utf8");
+        const md = readFileSync16(path91, "utf8");
         return parseFrontmatter(md);
       }
       /** Read a Markdown file; returns null if not found. */
-      readIfExists(path90) {
-        if (!existsSync19(path90)) return null;
-        return this.read(path90);
+      readIfExists(path91) {
+        if (!existsSync19(path91)) return null;
+        return this.read(path91);
       }
       /**
        * Write a Markdown file atomically (tmp + rename). Creates parent dirs.
        * The meta object is serialized as YAML frontmatter; body as Markdown.
        */
-      write(path90, meta3, body) {
-        mkdirSync10(dirname2(path90), { recursive: true });
-        const tmp = path90 + ".tmp-" + process.pid;
+      write(path91, meta3, body) {
+        mkdirSync10(dirname2(path91), { recursive: true });
+        const tmp = path91 + ".tmp-" + process.pid;
         const md = serializeFrontmatter(meta3, body);
         writeFileSync13(tmp, md, "utf8");
-        renameSync(tmp, path90);
+        renameSync(tmp, path91);
       }
       /** List all .md files in a directory (non-recursive). */
       listMarkdown(dir) {
@@ -41127,8 +41174,8 @@ function nextPlanTaskId(store6) {
   return `t${store6.counter}`;
 }
 function writePlanTaskArtifact(rootDir, task) {
-  const path90 = join18(rootDir, "plan-tasks", `${task.id}.md`);
-  mkdirSync11(dirname3(path90), { recursive: true });
+  const path91 = join18(rootDir, "plan-tasks", `${task.id}.md`);
+  mkdirSync11(dirname3(path91), { recursive: true });
   const meta3 = {
     kind: "task",
     id: task.id,
@@ -41149,7 +41196,7 @@ function writePlanTaskArtifact(rootDir, task) {
     task.notes?.trim() ? task.notes.trim() : "_(no notes)_",
     ""
   ].filter((l) => l !== null).join("\n");
-  new Storage().write(path90, meta3, body);
+  new Storage().write(path91, meta3, body);
 }
 function loadHandle(rootDir) {
   const jsonPath = join18(rootDir, "plan.json");
@@ -44930,21 +44977,21 @@ function normalizeAuth(auth) {
   return "agent";
 }
 function readSecrets() {
-  const path90 = getSshSecretsPath();
-  if (!existsSync25(path90)) return {};
+  const path91 = getSshSecretsPath();
+  if (!existsSync25(path91)) return {};
   try {
-    return JSON.parse(readFileSync20(path90, "utf8"));
+    return JSON.parse(readFileSync20(path91, "utf8"));
   } catch {
     return {};
   }
 }
 function writeSecrets(data) {
-  const path90 = getSshSecretsPath();
-  mkdirSync12(dirname4(path90), { recursive: true });
-  writeFileSync15(path90, `${JSON.stringify(data, null, 2)}
+  const path91 = getSshSecretsPath();
+  mkdirSync12(dirname4(path91), { recursive: true });
+  writeFileSync15(path91, `${JSON.stringify(data, null, 2)}
 `, "utf8");
   try {
-    chmodSync(path90, 384);
+    chmodSync(path91, 384);
   } catch {
   }
 }
@@ -44973,10 +45020,10 @@ function deleteSshPassword(id3) {
   writeSecrets({ passwords });
 }
 function readStore2() {
-  const path90 = getSshTargetsPath();
-  if (!existsSync25(path90)) return [];
+  const path91 = getSshTargetsPath();
+  if (!existsSync25(path91)) return [];
   try {
-    const parsed = JSON.parse(readFileSync20(path90, "utf8"));
+    const parsed = JSON.parse(readFileSync20(path91, "utf8"));
     const list = Array.isArray(parsed.targets) ? parsed.targets : [];
     return list.filter(
       (t) => t && typeof t.id === "string" && typeof t.host === "string" && typeof t.user === "string"
@@ -44991,11 +45038,11 @@ function readStore2() {
   }
 }
 function writeStore2(targets) {
-  const path90 = getSshTargetsPath();
-  mkdirSync12(dirname4(path90), { recursive: true });
+  const path91 = getSshTargetsPath();
+  mkdirSync12(dirname4(path91), { recursive: true });
   const clean = targets.map(({ hasPassword: _hp, ...t }) => t);
   writeFileSync15(
-    path90,
+    path91,
     `${JSON.stringify({ targets: clean }, null, 2)}
 `,
     "utf8"
@@ -45241,11 +45288,11 @@ function formatSshTargetsForPrompt() {
   ];
   for (const t of targets) {
     const tags = t.tags?.length ? ` tags=[${t.tags.join(",")}]` : "";
-    const path90 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
+    const path91 = t.defaultRemotePath ? ` remotePath=${t.defaultRemotePath}` : "";
     const allow = t.allowedCommands?.length ? ` allowed=${t.allowedCommands.join("|")}` : " allowed=status-only";
     const auth = t.auth === "password" ? " auth=password" : t.auth === "keyPath" ? " auth=key" : " auth=agent";
     lines.push(
-      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path90}${tags}${allow}`
+      `- id=${t.id} name=${t.name} ${t.user}@${t.host}:${t.port ?? 22}${auth}${path91}${tags}${allow}`
     );
   }
   return lines.join("\n");
@@ -54236,8 +54283,8 @@ function readPlan(ctx) {
     } catch {
     }
   }
-  const path90 = workspaceFile(ctx.rootDir, "plan");
-  const doc = ctx.storage.readIfExists(path90);
+  const path91 = workspaceFile(ctx.rootDir, "plan");
+  const doc = ctx.storage.readIfExists(path91);
   if (!doc) return { phases: [], tasks: [], milestones: [] };
   const meta3 = doc.meta;
   return {
@@ -54415,7 +54462,7 @@ function addMilestoneRecord(ctx, summary, input) {
     dueDate: input.dueDate,
     targetVersion: version2
   });
-  const path90 = join31(ctx.rootDir, "milestones", `${id3}.md`);
+  const path91 = join31(ctx.rootDir, "milestones", `${id3}.md`);
   const meta3 = {
     kind: "milestone",
     id: id3,
@@ -54432,7 +54479,7 @@ function addMilestoneRecord(ctx, summary, input) {
     `Target version: ${version2}`,
     ""
   ].join("\n");
-  ctx.storage.write(path90, meta3, body);
+  ctx.storage.write(path91, meta3, body);
   return { id: id3, created: true };
 }
 function readPlanSummary(ctx) {
@@ -54636,7 +54683,7 @@ function addIdeaStub(ctx) {
         const tags = args["tags"] ?? [];
         const category = args["category"] ?? "General";
         const id3 = `${nextAdrId(ctx)}-${slugify3(title)}`;
-        const path90 = workspaceArtifact(ctx.rootDir, "decisions", id3);
+        const path91 = workspaceArtifact(ctx.rootDir, "decisions", id3);
         const meta3 = {
           kind: "adr",
           status: "proposed",
@@ -54662,7 +54709,7 @@ function addIdeaStub(ctx) {
           ...consequences.map((c) => `- ${c}`),
           ""
         ].join("\n");
-        ctx.storage.write(path90, meta3, body);
+        ctx.storage.write(path91, meta3, body);
         return `ADR ${id3} created: "${title}". Status: proposed. Promote to accepted via /update ADR or manual edit.`;
       });
     }
@@ -54744,14 +54791,14 @@ function createDocumentStub(ctx) {
           ctx.storage.write(risksPath, riskMeta, content);
           return `Document "${title}" created at risks.md (workspace root).`;
         }
-        const path90 = workspaceArtifact(ctx.rootDir, "docs", slug);
+        const path91 = workspaceArtifact(ctx.rootDir, "docs", slug);
         const meta3 = {
           kind: "doc",
           id: slug,
           date: (/* @__PURE__ */ new Date()).toISOString().slice(0, 10),
           tags
         };
-        ctx.storage.write(path90, meta3, content);
+        ctx.storage.write(path91, meta3, content);
         return `Document "${title}" created at docs/${slug}.md.`;
       });
     }
@@ -55138,10 +55185,10 @@ function getUserMcpPath() {
 function getProjectMcpPath(projectRoot) {
   return join32(projectRoot, ".zelari", "mcp.json");
 }
-function readFile6(path90) {
-  if (!existsSync37(path90)) return {};
+function readFile6(path91) {
+  if (!existsSync37(path91)) return {};
   try {
-    const parsed = JSON.parse(readFileSync29(path90, "utf8"));
+    const parsed = JSON.parse(readFileSync29(path91, "utf8"));
     const out = {};
     for (const [name, cfg] of Object.entries(parsed.mcpServers ?? {})) {
       if (!cfg || typeof cfg.command !== "string" || !cfg.command.trim()) continue;
@@ -55157,10 +55204,10 @@ function readFile6(path90) {
     return {};
   }
 }
-function writeFile2(path90, servers) {
-  mkdirSync16(dirname9(path90), { recursive: true });
+function writeFile2(path91, servers) {
+  mkdirSync16(dirname9(path91), { recursive: true });
   const body = { mcpServers: servers };
-  writeFileSync18(path90, `${JSON.stringify(body, null, 2)}
+  writeFileSync18(path91, `${JSON.stringify(body, null, 2)}
 `, "utf8");
 }
 function listMcpServers(projectRoot) {
@@ -55193,9 +55240,9 @@ function upsertMcpServer(opts) {
   if (!opts.config.command?.trim()) {
     return { ok: false, error: "command is required" };
   }
-  let path90;
+  let path91;
   if (opts.scope === "user") {
-    path90 = getUserMcpPath();
+    path91 = getUserMcpPath();
   } else {
     const root = opts.projectRoot?.trim();
     if (!root) {
@@ -55204,30 +55251,30 @@ function upsertMcpServer(opts) {
         error: "projectRoot required for project scope (Open Folder first)"
       };
     }
-    path90 = getProjectMcpPath(root);
+    path91 = getProjectMcpPath(root);
   }
-  const current = readFile6(path90);
+  const current = readFile6(path91);
   current[name] = {
     command: opts.config.command.trim(),
     args: opts.config.args,
     env: opts.config.env,
     enabled: opts.config.enabled !== false
   };
-  writeFile2(path90, current);
-  return { ok: true, path: path90 };
+  writeFile2(path91, current);
+  return { ok: true, path: path91 };
 }
 function removeMcpServer(opts) {
-  const path90 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
-  if (!path90) {
+  const path91 = opts.scope === "user" ? getUserMcpPath() : opts.projectRoot ? getProjectMcpPath(opts.projectRoot) : null;
+  if (!path91) {
     return { ok: false, error: "projectRoot required for project scope" };
   }
-  const current = readFile6(path90);
+  const current = readFile6(path91);
   if (!(opts.name in current)) {
-    return { ok: false, error: `Server "${opts.name}" not found in ${path90}` };
+    return { ok: false, error: `Server "${opts.name}" not found in ${path91}` };
   }
   delete current[opts.name];
-  writeFile2(path90, current);
-  return { ok: true, path: path90 };
+  writeFile2(path91, current);
+  return { ok: true, path: path91 };
 }
 var init_mcpConfigIo = __esm({
   "src/cli/mcp/mcpConfigIo.ts"() {
@@ -55628,10 +55675,10 @@ import { createHash as createHash20 } from "node:crypto";
 import { join as join34 } from "node:path";
 import { readFile as readFile7 } from "node:fs/promises";
 async function readPackageJson3(projectRoot) {
-  const path90 = join34(projectRoot, "package.json");
-  if (!existsSync39(path90)) return null;
+  const path91 = join34(projectRoot, "package.json");
+  if (!existsSync39(path91)) return null;
   try {
-    return JSON.parse(await readFile7(path90, "utf8"));
+    return JSON.parse(await readFile7(path91, "utf8"));
   } catch {
     return null;
   }
@@ -55713,9 +55760,9 @@ async function genBuild(ctx) {
   ].join("\n");
 }
 async function genOpenQuestions(ctx) {
-  const path90 = join34(ctx.rootDir, "risks.md");
-  if (!existsSync39(path90)) return "_No open questions._";
-  const content = readFileSync31(path90, "utf8");
+  const path91 = join34(ctx.rootDir, "risks.md");
+  if (!existsSync39(path91)) return "_No open questions._";
+  const content = readFileSync31(path91, "utf8");
   const lines = content.split("\n");
   const questions = [];
   let currentTitle = "";
@@ -55989,9 +56036,9 @@ function versionKey(value) {
 function firstString2(v) {
   return typeof v === "string" && v.trim().length > 0 ? v : null;
 }
-function readFileSyncSafe(path90) {
+function readFileSyncSafe(path91) {
   try {
-    return readFileSync32(path90, "utf8");
+    return readFileSync32(path91, "utf8");
   } catch {
     return null;
   }
@@ -56454,8 +56501,8 @@ async function runPostCouncilHook(ctx, options) {
           sources: scope.sources
         } : void 0
       });
-      const path90 = writeCouncilCompletion(ctx.rootDir, completion);
-      completionHook = { ran: true, path: path90, completion };
+      const path91 = writeCouncilCompletion(ctx.rootDir, completion);
+      completionHook = { ran: true, path: path91, completion };
     } catch (err) {
       completionHook = {
         ran: true,
@@ -57791,7 +57838,7 @@ function safeSocketPath(socketPath) {
   return socketPath.trim();
 }
 function startPermissionBroker(socketPath, handlers, opts) {
-  const path90 = safeSocketPath(socketPath);
+  const path91 = safeSocketPath(socketPath);
   const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
   const sockets = /* @__PURE__ */ new Set();
   const server = createServer2((socket) => {
@@ -57891,10 +57938,10 @@ function startPermissionBroker(socketPath, handlers, opts) {
   return new Promise((resolve9, reject) => {
     const onError = (err) => reject(err);
     server.once("error", onError);
-    server.listen(path90, () => {
+    server.listen(path91, () => {
       server.removeListener("error", onError);
       resolve9({
-        socketPath: path90,
+        socketPath: path91,
         stop: () => new Promise((res) => {
           for (const s of sockets) s.destroy();
           sockets.clear();
@@ -57905,7 +57952,7 @@ function startPermissionBroker(socketPath, handlers, opts) {
             if (done) return;
             done = true;
             if (process.platform !== "win32") {
-              unlink(path90, () => res());
+              unlink(path91, () => res());
             } else {
               res();
             }
@@ -57918,11 +57965,11 @@ function startPermissionBroker(socketPath, handlers, opts) {
   });
 }
 function requestBrokerAsk(socketPath, ask, opts) {
-  const path90 = safeSocketPath(socketPath);
+  const path91 = safeSocketPath(socketPath);
   const requestTimeoutMs = opts?.requestTimeoutMs ?? PERMISSION_BROKER_DEFAULT_TIMEOUT_MS;
   const connectTimeoutMs = opts?.connectTimeoutMs ?? PERMISSION_BROKER_DEFAULT_CONNECT_TIMEOUT_MS;
   return new Promise((resolve9, reject) => {
-    const socket = connect(path90);
+    const socket = connect(path91);
     let buffer = "";
     let settled = false;
     const settle = (fn) => {
@@ -57937,7 +57984,7 @@ function requestBrokerAsk(socketPath, ask, opts) {
       settle(
         () => reject(
           new Error(
-            `permission broker unavailable at "${path90}" (connect timed out after ${connectTimeoutMs}ms)`
+            `permission broker unavailable at "${path91}" (connect timed out after ${connectTimeoutMs}ms)`
           )
         )
       );
@@ -58843,6 +58890,12 @@ var init_graphMemory = __esm({
 });
 
 // src/cli/kraken/tentacle.ts
+var tentacle_exports = {};
+__export(tentacle_exports, {
+  TASK_TOOL_TIMEOUT_MS: () => TASK_TOOL_TIMEOUT_MS,
+  runSubAgent: () => runSubAgent,
+  runTentacle: () => runTentacle
+});
 var init_tentacle = __esm({
   "src/cli/kraken/tentacle.ts"() {
     "use strict";
@@ -65742,6 +65795,7 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
       return exitCode;
     }
     const audit = new AuditLogger2();
+    const { runTentacle: runTentacle2 } = await Promise.resolve().then(() => (init_tentacle(), tentacle_exports));
     const executor = new KrakenGraphExecutor2({
       taskToolDeps: {
         createSubAgentContext: createKrakenSubAgentContextFactory2({
@@ -65774,7 +65828,11 @@ async function runHeadlessKrakenGraph(opts, provider, model) {
       parentCwd: cwd,
       sessionId: sessionId2,
       goal: prompt,
-      signal: abort.signal
+      signal: abort.signal,
+      // ADR-0024 v1.1: same delegate (`runTentacle`), wrapped so each node
+      // turn leaves a graph.node_started / graph.node_ended envelope pair on
+      // the spine. The executor owns scheduling; the HOST owns the spine.
+      runTentacleFn: (runOpts) => nodeSpineEnvelopeRun(spine, runOpts, () => runTentacle2(runOpts))
     });
     const summary = await executor.execute(graph);
     if (summary.cancelled) log("graph cancelled \u2014 partial results below");
@@ -65819,6 +65877,37 @@ ${formatKrakenGraphDigest2(
     await emitHarnessStateEvent({ spine, workspaceRoot: cwd, output: opts.output, emitEvent });
   }
 }
+function nodeSpineEnvelopeRun(spine, runOpts, run) {
+  const startedAt = Date.now();
+  const noteNode = (kind2, extra) => {
+    if (!runOpts.nodeId) return;
+    void spine.appendEvent({
+      kind: kind2,
+      actor: { type: "system" },
+      data: {
+        nodeId: runOpts.nodeId,
+        agent: runOpts.agent,
+        ...runOpts.graphId ? { graphId: runOpts.graphId } : {},
+        ...extra
+      }
+    });
+  };
+  noteNode("graph.node_started");
+  return run().then(
+    (res) => {
+      noteNode("graph.node_ended", {
+        ok: res.ok,
+        ...!res.ok && res.cancelled ? { cancelled: true } : {},
+        durationMs: Date.now() - startedAt
+      });
+      return res;
+    },
+    (err) => {
+      noteNode("graph.node_ended", { ok: false, durationMs: Date.now() - startedAt });
+      throw err;
+    }
+  );
+}
 async function buildCouncilToolRegistry(planMode, opts, memoryService, memoryAutoWrite = false, extras) {
   const cwd = opts ? resolveHeadlessCwd(opts) : process.cwd();
   const { registry: toolRegistry } = createBuiltinToolRegistry({
@@ -67062,7 +67151,7 @@ function upsertSkill(opts) {
     }
     dir = getProjectSkillsDir(root);
   }
-  const path90 = skillFilePath(dir, name);
+  const path91 = skillFilePath(dir, name);
   const content = serializeSkillMd({
     name,
     description,
@@ -67071,13 +67160,13 @@ function upsertSkill(opts) {
     tools: opts.tools,
     cost: opts.cost
   });
-  const parsed = parseSkillMd(content, path90);
+  const parsed = parseSkillMd(content, path91);
   if (!parsed) {
     return { ok: false, error: "Generated SKILL.md failed validation" };
   }
-  mkdirSync21(dirname13(path90), { recursive: true });
-  writeFileSync24(path90, content, "utf8");
-  return { ok: true, path: path90 };
+  mkdirSync21(dirname13(path91), { recursive: true });
+  writeFileSync24(path91, content, "utf8");
+  return { ok: true, path: path91 };
 }
 function removeSkill(opts) {
   const name = opts.name.trim().toLowerCase();
@@ -67095,8 +67184,8 @@ function removeSkill(opts) {
     dir = getProjectSkillsDir(root);
   }
   const skillDir = join46(dir, name);
-  const path90 = skillFilePath(dir, name);
-  if (!existsSync52(path90) && !existsSync52(skillDir)) {
+  const path91 = skillFilePath(dir, name);
+  if (!existsSync52(path91) && !existsSync52(skillDir)) {
     return { ok: false, error: `Skill "${name}" not found in ${dir}` };
   }
   try {
@@ -67107,7 +67196,7 @@ function removeSkill(opts) {
       error: err instanceof Error ? err.message : String(err)
     };
   }
-  return { ok: true, path: path90 };
+  return { ok: true, path: path91 };
 }
 var NAME_RE, BUILTIN_SKILL_MODULES, builtinsLoaded;
 var init_skillConfigIo = __esm({
@@ -67925,12 +68014,12 @@ function ensureHome() {
   }
 }
 function loadCompanionConfig() {
-  const path90 = getCompanionConfigPath();
-  if (!existsSync53(path90)) {
+  const path91 = getCompanionConfigPath();
+  if (!existsSync53(path91)) {
     return { projects: [] };
   }
   try {
-    const raw = JSON.parse(readFileSync41(path90, "utf8"));
+    const raw = JSON.parse(readFileSync41(path91, "utf8"));
     const projects = Array.isArray(raw.projects) ? raw.projects.filter(
       (p3) => p3 && typeof p3.path === "string" && p3.path.trim() && typeof (p3.id ?? p3.name) === "string"
     ).map((p3) => ({
@@ -67968,16 +68057,16 @@ function loadOrCreateToken(explicit) {
     return { token: explicit.trim(), created: false };
   }
   ensureHome();
-  const path90 = getCompanionTokenPath();
-  if (existsSync53(path90)) {
-    const t = readFileSync41(path90, "utf8").trim();
+  const path91 = getCompanionTokenPath();
+  if (existsSync53(path91)) {
+    const t = readFileSync41(path91, "utf8").trim();
     if (t) return { token: t, created: false };
   }
   const token = randomBytes7(24).toString("base64url");
-  writeFileSync25(path90, token + "\n", "utf8");
+  writeFileSync25(path91, token + "\n", "utf8");
   try {
     const fs45 = __require("node:fs");
-    fs45.chmodSync?.(path90, 384);
+    fs45.chmodSync?.(path91, 384);
   } catch {
   }
   return { token, created: true };
@@ -68002,17 +68091,17 @@ function mergeProjects(cfg, extraPaths) {
     byId.set(p3.id, p3);
   }
   for (const raw of extraPaths) {
-    const path90 = raw.trim();
-    if (!path90) continue;
-    let id3 = slugFromPath(path90);
+    const path91 = raw.trim();
+    if (!path91) continue;
+    let id3 = slugFromPath(path91);
     let n = 2;
-    while (byId.has(id3) && byId.get(id3).path !== path90) {
-      id3 = `${slugFromPath(path90)}-${n++}`;
+    while (byId.has(id3) && byId.get(id3).path !== path91) {
+      id3 = `${slugFromPath(path91)}-${n++}`;
     }
     byId.set(id3, {
       id: id3,
-      name: slugFromPath(path90),
-      path: path90
+      name: slugFromPath(path91),
+      path: path91
     });
   }
   return [...byId.values()];
@@ -68987,9 +69076,9 @@ async function runCompanionServe(opts = {}) {
       return;
     }
     const url2 = parseUrl(req);
-    const path90 = url2.pathname.replace(/\/+$/, "") || "/";
+    const path91 = url2.pathname.replace(/\/+$/, "") || "/";
     try {
-      if (req.method === "GET" && (path90 === "/health" || path90 === "/v1/health")) {
+      if (req.method === "GET" && (path91 === "/health" || path91 === "/v1/health")) {
         sendJson2(res, 200, {
           ok: true,
           service: "zelari-companion",
@@ -69001,18 +69090,18 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (path90.startsWith("/v1")) {
+      if (path91.startsWith("/v1")) {
         if (!tokenMatches(token, getBearer(req))) {
           sendJson2(res, 401, { ok: false, error: "unauthorized" });
           return;
         }
       }
-      if (req.method === "GET" && path90 === "/v1/config") {
+      if (req.method === "GET" && path91 === "/v1/config") {
         const snap = buildDesktopConfigSnapshot();
         sendJson2(res, 200, { ok: true, ...snap });
         return;
       }
-      if (req.method === "GET" && path90 === "/v1/projects") {
+      if (req.method === "GET" && path91 === "/v1/projects") {
         sendJson2(res, 200, {
           ok: true,
           projects: projects.map((p3) => ({
@@ -69023,7 +69112,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "GET" && path90 === "/v1/runs") {
+      if (req.method === "GET" && path91 === "/v1/runs") {
         sendJson2(res, 200, {
           ok: true,
           active: runs.getActive(),
@@ -69041,7 +69130,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      if (req.method === "POST" && path90 === "/v1/runs") {
+      if (req.method === "POST" && path91 === "/v1/runs") {
         const raw = await readBody(req);
         let body = {};
         try {
@@ -69089,7 +69178,7 @@ async function runCompanionServe(opts = {}) {
         });
         return;
       }
-      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path90);
+      const eventsMatch = /^\/v1\/runs\/([^/]+)\/events$/.exec(path91);
       if (req.method === "GET" && eventsMatch) {
         const runId = eventsMatch[1];
         const run = runs.getRun(runId);
@@ -69154,7 +69243,7 @@ async function runCompanionServe(opts = {}) {
         }, 500);
         return;
       }
-      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path90);
+      const cancelMatch = /^\/v1\/runs\/([^/]+)\/cancel$/.exec(path91);
       if (req.method === "POST" && cancelMatch) {
         const runId = cancelMatch[1];
         const result = runs.cancel(runId);
@@ -69165,7 +69254,7 @@ async function runCompanionServe(opts = {}) {
         sendJson2(res, 200, { ok: true, cancelled: runId });
         return;
       }
-      const steerMatch = /^\/v1\/runs\/([^/]+)\/steer$/.exec(path90);
+      const steerMatch = /^\/v1\/runs\/([^/]+)\/steer$/.exec(path91);
       if (req.method === "POST" && steerMatch) {
         const runId = steerMatch[1];
         const raw = await readBody(req);
@@ -69845,21 +69934,88 @@ var init_fixBudget = __esm({
   }
 });
 
+// src/cli/commands/inspectSession.ts
+var inspectSession_exports = {};
+__export(inspectSession_exports, {
+  renderInspectReport: () => renderInspectReport,
+  runInspectSession: () => runInspectSession
+});
+import path89 from "node:path";
+import { existsSync as existsSync56 } from "node:fs";
+function renderInspectReport(state3) {
+  const lines = [
+    `session ${state3.session.sessionId}  status=${state3.session.status}  turns=${state3.execution.turnsTotal}`
+  ];
+  const contractByTurn = new Map(state3.execution.contracts.map((c) => [c.turn, c]));
+  for (const turn of state3.turns) {
+    const contract = contractByTurn.get(turn.index);
+    const verification = turn.verification ? `${turn.verification.verdict}${turn.verification.strict ? "" : " (non-strict)"}` : "unknown";
+    const blockers = contract?.blockers ?? [];
+    const completion = contract?.complete ? "complete" : blockers.length > 0 ? `incomplete \u2014 ${blockers.length} blockers: ${blockers.join(", ")}` : "incomplete";
+    lines.push(
+      `  turn ${turn.index}  [${turn.outcome}]  verification: ${verification}  contract: ${completion}`
+    );
+  }
+  lines.push("");
+  lines.push("support lens:");
+  const projections = state3.support.contextProjections;
+  const last = projections[projections.length - 1];
+  lines.push(
+    `  context projections: ${projections.length}` + (last ? `  (last: ${last.contextChars} chars \u2192 ${last.returnedCount} items)` : "")
+  );
+  lines.push(`  memory events: ${state3.support.memoryEvents}`);
+  const saved = state3.support.tokensSavedByCompaction;
+  lines.push(
+    `  compactions: ${state3.support.compactions}${saved !== void 0 ? ` (${saved} tokens saved)` : ""}`
+  );
+  return lines.join("\n");
+}
+async function runInspectSession(opts) {
+  const sessionsDir = resolveSessionsDir({ workspaceRoot: opts.cwd ?? process.cwd() });
+  const sessionDir = path89.join(sessionsDir, opts.sessionId);
+  const eventsPath = path89.join(sessionDir, "events.jsonl");
+  if (!existsSync56(sessionDir)) {
+    console.error(`zelari-code inspect: no session directory at ${sessionDir}`);
+    return 1;
+  }
+  if (!existsSync56(eventsPath)) {
+    console.error(`zelari-code inspect: session directory has no events.jsonl at ${eventsPath}`);
+    return 1;
+  }
+  let state3;
+  try {
+    state3 = await readHarnessState(sessionDir);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`zelari-code inspect: cannot read session at ${sessionDir}: ${msg}`);
+    return 1;
+  }
+  console.log(opts.json ? JSON.stringify(state3, null, 2) : renderInspectReport(state3));
+  return 0;
+}
+var init_inspectSession = __esm({
+  "src/cli/commands/inspectSession.ts"() {
+    "use strict";
+    init_session();
+    init_harnessState();
+  }
+});
+
 // src/cli/commands/inspect.ts
 var inspect_exports = {};
 __export(inspect_exports, {
   collectInspectReport: () => collectInspectReport,
   runInspect: () => runInspect
 });
-import path89 from "node:path";
-import { existsSync as existsSync56, readFileSync as readFileSync43, readdirSync as readdirSync12 } from "node:fs";
+import path90 from "node:path";
+import { existsSync as existsSync57, readFileSync as readFileSync43, readdirSync as readdirSync12 } from "node:fs";
 import { homedir as homedir17 } from "node:os";
 async function collectInspectReport(cwd = process.cwd()) {
   ensureBuiltinSkillsLoadedSync();
   const snap = listSkillsSnapshot(cwd);
   const mcp = listMcpServers(cwd);
-  const userMcpPath = path89.join(homedir17(), ".zelari-code", "mcp.json");
-  const projectMcpPath = path89.join(cwd, ".zelari", "mcp.json");
+  const userMcpPath = path90.join(homedir17(), ".zelari-code", "mcp.json");
+  const projectMcpPath = path90.join(cwd, ".zelari", "mcp.json");
   const globalHooks = globalHooksDir();
   const projectHooks = projectHooksDir(cwd);
   const projectTrusted = isFolderTrusted(cwd);
@@ -69885,11 +70041,11 @@ async function collectInspectReport(cwd = process.cwd()) {
       folders: listTrustedFolders()
     },
     configSources: [
-      { path: userMcpPath, exists: existsSync56(userMcpPath) },
-      { path: projectMcpPath, exists: existsSync56(projectMcpPath) },
-      { path: path89.join(homedir17(), ".zelari-code", "provider.json"), exists: existsSync56(path89.join(homedir17(), ".zelari-code", "provider.json")) },
-      { path: path89.join(cwd, ".zelari", "AGENTS.md"), exists: existsSync56(path89.join(cwd, ".zelari", "AGENTS.md")) },
-      { path: path89.join(cwd, "AGENTS.md"), exists: existsSync56(path89.join(cwd, "AGENTS.md")) }
+      { path: userMcpPath, exists: existsSync57(userMcpPath) },
+      { path: projectMcpPath, exists: existsSync57(projectMcpPath) },
+      { path: path90.join(homedir17(), ".zelari-code", "provider.json"), exists: existsSync57(path90.join(homedir17(), ".zelari-code", "provider.json")) },
+      { path: path90.join(cwd, ".zelari", "AGENTS.md"), exists: existsSync57(path90.join(cwd, ".zelari", "AGENTS.md")) },
+      { path: path90.join(cwd, "AGENTS.md"), exists: existsSync57(path90.join(cwd, "AGENTS.md")) }
     ],
     skills: {
       total: snap.skills.length,
@@ -69902,7 +70058,7 @@ async function collectInspectReport(cwd = process.cwd()) {
       user: mcp.servers.filter((s) => s.scope === "user").map((s) => ({ name: s.name, enabled: s.enabled !== false })),
       project: mcp.servers.filter((s) => s.scope === "project").map((s) => ({ name: s.name, enabled: s.enabled !== false })),
       projectTrusted,
-      projectConfigExists: existsSync56(projectMcpPath)
+      projectConfigExists: existsSync57(projectMcpPath)
     },
     hooks: {
       global: {
@@ -69929,12 +70085,12 @@ function listJsonFiles(dir) {
 }
 function findAgentsMd(cwd) {
   const candidates = [
-    path89.join(cwd, "AGENTS.md"),
-    path89.join(cwd, ".zelari", "AGENTS.md")
+    path90.join(cwd, "AGENTS.md"),
+    path90.join(cwd, ".zelari", "AGENTS.md")
   ];
   const found = [];
   for (const c of candidates) {
-    if (existsSync56(c)) {
+    if (existsSync57(c)) {
       try {
         const text = readFileSync43(c, "utf8");
         found.push(`${c} (${text.length} bytes)`);
@@ -79561,8 +79717,8 @@ function normalizeDraft(raw, sourceUrl, provider, model) {
   let name = String(o.name ?? "").trim().toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 64);
   if (!name || !/^[a-z0-9][a-z0-9-]{0,63}$/.test(name)) {
     try {
-      const path90 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
-      name = path90 && /^[a-z0-9]/.test(path90) ? path90 : "imported-skill";
+      const path91 = new URL(sourceUrl).pathname.split("/").filter(Boolean).pop()?.replace(/\.[a-z0-9]+$/i, "").toLowerCase().replace(/[^a-z0-9-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 48);
+      name = path91 && /^[a-z0-9]/.test(path91) ? path91 : "imported-skill";
     } catch {
       name = "imported-skill";
     }
@@ -79897,6 +80053,14 @@ function pickRootComponent() {
     process.exit(1);
   }
   if (argv.includes("--inspect") || argv.includes("inspect")) {
+    const inspectAt = argv.findIndex((a) => a === "inspect" || a === "--inspect");
+    const sessionId2 = inspectAt >= 0 ? argv.slice(inspectAt + 1).find((a) => !a.startsWith("-")) : void 0;
+    if (sessionId2) {
+      const { runInspectSession: runInspectSession2 } = (init_inspectSession(), __toCommonJS(inspectSession_exports));
+      const json4 = argv.includes("--json");
+      void runInspectSession2({ sessionId: sessionId2, json: json4 }).then((code) => process.exit(code));
+      return { kind: "done" };
+    }
     const { runInspect: runInspect2 } = (init_inspect(), __toCommonJS(inspect_exports));
     const json3 = argv.includes("--json");
     void runInspect2({ json: json3 }).then((code) => process.exit(code));