zelari-code 2.3.0 → 2.5.0

package/dist/cli/main.bundled.js

@@ -595,8 +595,8 @@ async function runGrokOAuthFlow(options = {}) {
     );
   } catch {
   }
-  const timeoutMs = options.timeoutMs ?? DEFAULT_OAUTH_TIMEOUT_MS;
-  const effectiveTimeout = Math.min(timeoutMs, deviceAuth.expiresIn * 1e3);
+  const timeoutMs2 = options.timeoutMs ?? DEFAULT_OAUTH_TIMEOUT_MS;
+  const effectiveTimeout = Math.min(timeoutMs2, deviceAuth.expiresIn * 1e3);
   return pollForDeviceToken({
     clientId: clientId2,
     deviceCode: deviceAuth.deviceCode,
@@ -739,7 +739,7 @@ function generateOAuthState() {
 }
 async function waitForLoopbackCallback(options) {
   const host = options.host ?? "127.0.0.1";
-  const timeoutMs = options.timeoutMs ?? 3e5;
+  const timeoutMs2 = options.timeoutMs ?? 3e5;
   const expectedPath = options.path.startsWith("/") ? options.path : `/${options.path}`;
   return new Promise((resolve3, reject) => {
     let settled = false;
@@ -759,12 +759,12 @@ async function waitForLoopbackCallback(options) {
       const ok = Boolean(result.code) && !result.error;
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
       res.end(oauthResultHtml(ok, result.errorDescription ?? result.error));
-      finish(result);
+      finish2(result);
     });
     const timer = setTimeout(() => {
-      finish(void 0, new Error(`Timed out waiting for OAuth callback on http://${host}:${options.port}`));
-    }, timeoutMs);
-    const finish = (value, err) => {
+      finish2(void 0, new Error(`Timed out waiting for OAuth callback on http://${host}:${options.port}`));
+    }, timeoutMs2);
+    const finish2 = (value, err) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
@@ -773,7 +773,7 @@ async function waitForLoopbackCallback(options) {
         else resolve3(value ?? {});
       });
     };
-    server.on("error", (err) => finish(void 0, err));
+    server.on("error", (err) => finish2(void 0, err));
     server.listen(options.port, host);
   });
 }
@@ -971,8 +971,8 @@ async function pollChatgptDeviceAuth(options) {
   const clientId2 = options.clientId || process.env.CHATGPT_OAUTH_CLIENT_ID || DEFAULT_CHATGPT_CLIENT_ID;
   const fetchImpl = options.fetchImpl ?? fetch;
   const sleep = options.sleepImpl ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const timeoutMs = options.timeoutMs ?? 3e5;
-  const deadline = Date.now() + timeoutMs;
+  const timeoutMs2 = options.timeoutMs ?? 3e5;
+  const deadline = Date.now() + timeoutMs2;
   let interval = options.interval ?? 5;
   let authorizationCode;
   let codeVerifier;
@@ -19419,9 +19419,9 @@ function assertHttpUrl(raw) {
   }
   return url2;
 }
-async function fetchWithTimeout(url2, init, outerSignal, timeoutMs) {
+async function fetchWithTimeout(url2, init, outerSignal, timeoutMs2) {
   const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs}ms`)), timeoutMs);
+  const timer = setTimeout(() => ctrl.abort(new Error(`timeout after ${timeoutMs2}ms`)), timeoutMs2);
   const onOuterAbort = () => ctrl.abort(outerSignal?.reason);
   outerSignal?.addEventListener("abort", onOuterAbort, { once: true });
   try {
@@ -23327,8 +23327,8 @@ var init_lifecycleHookRunner = __esm({
       /** Execute a single hook, swallowing every failure into an allow. */
       async runHookSafely(hook, payload) {
         try {
-          const timeoutMs = hook.timeoutMs ?? this.defaultTimeoutMs;
-          const raw = hook.url ? await this.postHttp(hook.url, payload, timeoutMs) : await this.execCommand(hook.command ?? "", payload, timeoutMs, hook.cwd);
+          const timeoutMs2 = hook.timeoutMs ?? this.defaultTimeoutMs;
+          const raw = hook.url ? await this.postHttp(hook.url, payload, timeoutMs2) : await this.execCommand(hook.command ?? "", payload, timeoutMs2, hook.cwd);
           const decision = parseJson(raw);
           if (!decision) {
             this.logger(`hook "${hook.name}" returned invalid JSON (fail-open): ${raw.slice(0, 200)}`);
@@ -23345,7 +23345,7 @@ var init_lifecycleHookRunner = __esm({
         }
       }
       /** Spawn `command`, write JSON payload to stdin, read stdout until close. */
-      execCommand(command, payload, timeoutMs, cwd) {
+      execCommand(command, payload, timeoutMs2, cwd) {
         return new Promise((resolve3, reject) => {
           const child = spawn2(command, {
             shell: true,
@@ -23357,8 +23357,8 @@ var init_lifecycleHookRunner = __esm({
           let stderr = "";
           const timer = setTimeout(() => {
             child.kill("SIGKILL");
-            reject(new Error(`timed out after ${timeoutMs}ms`));
-          }, timeoutMs);
+            reject(new Error(`timed out after ${timeoutMs2}ms`));
+          }, timeoutMs2);
           child.stdout?.on("data", (d) => {
             stdout += d.toString();
           });
@@ -23384,9 +23384,9 @@ var init_lifecycleHookRunner = __esm({
         });
       }
       /** POST JSON payload; resolve with the response body text. */
-      async postHttp(url2, payload, timeoutMs) {
+      async postHttp(url2, payload, timeoutMs2) {
         const ctrl = new AbortController();
-        const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+        const timer = setTimeout(() => ctrl.abort(), timeoutMs2);
         try {
           const res = await fetch(url2, {
             method: "POST",
@@ -27962,7 +27962,7 @@ function deepFreeze(value) {
   return Object.freeze(value);
 }
 async function runInSandbox(opts) {
-  const { bundleCode, sdk, timeoutMs } = opts;
+  const { bundleCode, sdk, timeoutMs: timeoutMs2 } = opts;
   if (!opts.skipFootgunScan) {
     const footguns = scanForFootguns(bundleCode);
     if (footguns.length > 0) {
@@ -27982,7 +27982,7 @@ async function runInSandbox(opts) {
   });
   const start = Date.now();
   const vmOpts = {
-    timeout: Math.max(1, timeoutMs),
+    timeout: Math.max(1, timeoutMs2),
     displayErrors: true,
     breakOnSigint: true
   };
@@ -27992,7 +27992,7 @@ async function runInSandbox(opts) {
   } catch (err) {
     const msg = err && typeof err === "object" && "message" in err ? String(err.message ?? "") : String(err);
     if (/timed out/i.test(msg)) {
-      throw new PlanError("budget_exceeded", `script exceeded ${timeoutMs}ms budget`);
+      throw new PlanError("budget_exceeded", `script exceeded ${timeoutMs2}ms budget`);
     }
     if (opts.signal?.aborted) {
       throw new PlanError("cancelled", "script aborted by host");
@@ -28340,6 +28340,292 @@ var init_types8 = __esm({
   }
 });
 
+// packages/core/dist/session/compactionState.js
+function asPositiveInt(value) {
+  return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : void 0;
+}
+function recordOf(value) {
+  return value && typeof value === "object" && !Array.isArray(value) ? value : void 0;
+}
+function recordsOf(value) {
+  return Array.isArray(value) ? value.map(recordOf).filter((v) => v !== void 0) : [];
+}
+function stringsOf(value) {
+  return Array.isArray(value) ? value.filter((v) => typeof v === "string") : [];
+}
+function addBounded(target, value, maxLength = 260) {
+  const normalized = value.trim().replace(/\\/g, "/");
+  if (normalized && normalized.length <= maxLength)
+    target.add(normalized);
+}
+function collectPaths(value, target, depth = 0) {
+  if (depth > 4 || value === null || value === void 0)
+    return;
+  if (Array.isArray(value)) {
+    for (const item of value)
+      collectPaths(item, target, depth + 1);
+    return;
+  }
+  const record2 = recordOf(value);
+  if (record2) {
+    for (const [key, item] of Object.entries(record2)) {
+      if (typeof item === "string" && ["path", "file", "filepath", "filePath", "file_path", "target", "cwd"].includes(key)) {
+        addBounded(target, item);
+      } else {
+        collectPaths(item, target, depth + 1);
+      }
+    }
+    return;
+  }
+  if (typeof value !== "string")
+    return;
+  const pathLike = /(?:^|[\s"'])((?:[\w.@-]+[\\/])+[\w.@-]+\.[A-Za-z0-9]{1,10})/g;
+  let match;
+  while ((match = pathLike.exec(value)) !== null && target.size < 64) {
+    addBounded(target, match[1]);
+  }
+}
+function evidenceFromResults(results) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const result of results) {
+    for (const raw of recordsOf(result.evidence)) {
+      const seq = asPositiveInt(raw.seq);
+      const tier = typeof raw.tier === "string" ? raw.tier : void 0;
+      const ref = typeof raw.ref === "string" ? raw.ref : void 0;
+      const digest = typeof raw.digest === "string" ? raw.digest : void 0;
+      const capturedAt = typeof raw.capturedAt === "number" && Number.isInteger(raw.capturedAt) ? raw.capturedAt : void 0;
+      if (seq === void 0 && tier === void 0 && ref === void 0 && digest === void 0)
+        continue;
+      const key = [seq ?? "", tier ?? "", ref ?? "", digest ?? ""].join("|");
+      if (seen.has(key))
+        continue;
+      seen.add(key);
+      out.push({
+        ...seq !== void 0 ? { seq } : {},
+        ...tier !== void 0 ? { tier } : {},
+        ...ref !== void 0 ? { ref } : {},
+        ...digest !== void 0 ? { digest } : {},
+        ...capturedAt !== void 0 ? { capturedAt } : {}
+      });
+    }
+  }
+  return out;
+}
+function buildCompactionStateSnapshot(events, toSeq) {
+  const scoped = events.filter((event) => event.seq <= toSeq);
+  const latestVerification = [...scoped].reverse().find((event) => event.kind === "verification.run");
+  const verificationData = latestVerification?.data ?? {};
+  const native = recordOf(verificationData.native);
+  const results = recordsOf(native?.results ?? verificationData.results);
+  const criteriaRaw = recordsOf(native?.criteria ?? verificationData.criteria);
+  const statusById = new Map(results.filter((result) => typeof result.criterionId === "string").map((result) => [String(result.criterionId), String(result.status ?? "unknown")]));
+  const evidenceState = recordOf(verificationData.evidence);
+  const satisfied = stringsOf(evidenceState?.satisfied);
+  const unsatisfiedRaw = recordsOf(evidenceState?.unsatisfied);
+  const activeCriteria = criteriaRaw.filter((criterion) => typeof criterion.id === "string").map((criterion) => ({
+    id: String(criterion.id),
+    required: criterion.required !== false,
+    ...statusById.has(String(criterion.id)) ? { status: statusById.get(String(criterion.id)) } : {}
+  }));
+  if (activeCriteria.length === 0) {
+    const ids = /* @__PURE__ */ new Set([
+      ...results.map((result) => String(result.criterionId ?? "")).filter(Boolean),
+      ...satisfied,
+      ...unsatisfiedRaw.map((issue2) => String(issue2.id ?? "")).filter(Boolean)
+    ]);
+    for (const id of ids) {
+      activeCriteria.push({
+        id,
+        required: true,
+        status: statusById.get(id) ?? (satisfied.includes(id) ? "pass" : "unknown")
+      });
+    }
+  }
+  const unresolvedIssues = unsatisfiedRaw.length > 0 ? unsatisfiedRaw.filter((issue2) => typeof issue2.id === "string").map((issue2) => ({
+    id: String(issue2.id),
+    status: String(issue2.status ?? "unknown"),
+    ...typeof issue2.reason === "string" ? { reason: issue2.reason } : {}
+  })) : results.filter((result) => String(result.status ?? "unknown") !== "pass").map((result) => ({
+    id: String(result.criterionId ?? "unknown"),
+    status: String(result.status ?? "unknown"),
+    ...typeof result.detail === "string" ? { reason: result.detail } : {}
+  }));
+  const affectedFiles = /* @__PURE__ */ new Set();
+  for (const event of scoped.slice(-500)) {
+    if (event.kind === "tool.call" || event.kind === "tool.result" || event.kind === "verification.evidence") {
+      collectPaths(event.data, affectedFiles);
+    }
+  }
+  const userConstraints = /* @__PURE__ */ new Set();
+  for (const event of scoped) {
+    if (event.kind !== "user.message")
+      continue;
+    for (const constraint of stringsOf(event.data.constraints ?? event.data.userConstraints)) {
+      addBounded(userConstraints, constraint, 320);
+    }
+    const messageText = typeof event.data.text === "string" ? event.data.text : "";
+    for (const line of messageText.split(/\r?\n/)) {
+      if (CONSTRAINT_RE.test(line))
+        addBounded(userConstraints, line, 320);
+      if (userConstraints.size >= 12)
+        break;
+    }
+  }
+  const lastMissionPhase = [...scoped].reverse().find((event) => event.kind === "mission.phase");
+  const lastMissionAdvice = [...scoped].reverse().find((event) => event.kind === "mission.progress");
+  const missionState = lastMissionPhase || lastMissionAdvice ? {
+    ...typeof lastMissionPhase?.data.phase === "string" ? { phase: lastMissionPhase.data.phase } : {},
+    ...typeof lastMissionAdvice?.data.recommendation === "string" ? { recommendation: lastMissionAdvice.data.recommendation } : {},
+    ...stringsOf(lastMissionAdvice?.data.blockers).length > 0 ? { blockers: stringsOf(lastMissionAdvice?.data.blockers) } : {}
+  } : void 0;
+  return {
+    version: 1,
+    activeCriteria,
+    unresolvedIssues,
+    ...latestVerification ? {
+      latestVerification: {
+        seq: latestVerification.seq,
+        ...typeof verificationData.verdict === "string" ? { verdict: verificationData.verdict } : {},
+        ...typeof verificationData.summary === "string" ? { summary: verificationData.summary } : {}
+      }
+    } : {},
+    retainedEvidenceRefs: evidenceFromResults(results),
+    affectedFiles: [...affectedFiles].slice(0, 64),
+    userConstraints: [...userConstraints].slice(-12),
+    ...missionState ? { missionState } : {}
+  };
+}
+function formatCompactionStateSnapshot(snapshot) {
+  const lines = ['<compaction-state version="1">'];
+  if (snapshot.activeCriteria.length > 0) {
+    lines.push("activeCriteria: " + JSON.stringify(snapshot.activeCriteria));
+  }
+  if (snapshot.unresolvedIssues.length > 0) {
+    lines.push("unresolvedIssues: " + JSON.stringify(snapshot.unresolvedIssues));
+  }
+  if (snapshot.latestVerification) {
+    lines.push("latestVerification: " + JSON.stringify(snapshot.latestVerification));
+  }
+  if (snapshot.affectedFiles.length > 0) {
+    lines.push("affectedFiles: " + JSON.stringify(snapshot.affectedFiles));
+  }
+  if (snapshot.userConstraints.length > 0) {
+    lines.push("userConstraints: " + JSON.stringify(snapshot.userConstraints));
+  }
+  if (snapshot.missionState) {
+    lines.push("missionState: " + JSON.stringify(snapshot.missionState));
+  }
+  lines.push("</compaction-state>");
+  return lines.join("\n");
+}
+var CONSTRAINT_RE;
+var init_compactionState = __esm({
+  "packages/core/dist/session/compactionState.js"() {
+    "use strict";
+    CONSTRAINT_RE = /\b(must|never|required|only|do not|don't|constraint|vincolo|deve|devono|non\s+deve|senza)\b/i;
+  }
+});
+
+// packages/core/dist/session/compaction.js
+function asPositiveInt2(value) {
+  return typeof value === "number" && Number.isInteger(value) && value > 0 ? value : void 0;
+}
+function checkpointContent(data) {
+  const cp = data.checkpoint;
+  if (cp && typeof cp === "object") {
+    const content = cp.content;
+    if (typeof content === "string")
+      return content;
+  }
+  if (typeof data.summary === "string")
+    return data.summary;
+  return "[session compacted]";
+}
+function checkpointRole(data) {
+  const cp = data.checkpoint;
+  if (cp && typeof cp === "object") {
+    const role = cp.role;
+    if (role === "user" || role === "system")
+      return role;
+  }
+  return "system";
+}
+function strategyOf(data) {
+  return data.strategy === "extractive" || data.strategy === "llm" ? data.strategy : void 0;
+}
+function parseCompactedEvent(event) {
+  if (event.kind !== "session.compacted")
+    return null;
+  const fromSeq = asPositiveInt2(event.data.fromSeq);
+  const toSeq = asPositiveInt2(event.data.toSeq);
+  if (fromSeq === void 0 || toSeq === void 0 || fromSeq > toSeq)
+    return null;
+  if (event.seq <= toSeq)
+    return null;
+  const sourceRaw = event.data.sourceEventSeqs;
+  const sourceEventSeqs = Array.isArray(sourceRaw) ? sourceRaw.filter((n) => typeof n === "number" && Number.isInteger(n) && n > 0) : void 0;
+  return {
+    seq: event.seq,
+    fromSeq,
+    toSeq,
+    role: checkpointRole(event.data),
+    content: checkpointContent(event.data),
+    ...strategyOf(event.data) ? { strategy: strategyOf(event.data) } : {},
+    ...sourceEventSeqs && sourceEventSeqs.length > 0 ? { sourceEventSeqs } : {}
+  };
+}
+function coveringCompactions(events) {
+  const effective = events.map(parseCompactedEvent).filter((c) => c !== null).map((c) => ({
+    ...c,
+    ...c.sourceEventSeqs ? { sourceEventSeqs: [...c.sourceEventSeqs] } : {}
+  })).sort((a, b) => a.seq - b.seq);
+  let changed = true;
+  while (changed) {
+    changed = false;
+    for (let i = 0; i < effective.length; i++) {
+      const earlier = effective[i];
+      let target;
+      for (let j = i + 1; j < effective.length; j++) {
+        const later = effective[j];
+        if (earlier.seq >= later.fromSeq && earlier.seq <= later.toSeq) {
+          target = later;
+        }
+      }
+      if (!target)
+        continue;
+      target.fromSeq = Math.min(target.fromSeq, earlier.fromSeq);
+      target.toSeq = Math.max(target.toSeq, earlier.toSeq);
+      if (earlier.sourceEventSeqs?.length) {
+        target.sourceEventSeqs = [
+          .../* @__PURE__ */ new Set([...target.sourceEventSeqs ?? [], ...earlier.sourceEventSeqs])
+        ];
+      }
+      effective.splice(i, 1);
+      changed = true;
+      break;
+    }
+  }
+  return effective;
+}
+function shadowedSeqSet(coverings) {
+  const set2 = /* @__PURE__ */ new Set();
+  for (const c of coverings) {
+    for (let s = c.fromSeq; s <= c.toSeq; s++)
+      set2.add(s);
+  }
+  return set2;
+}
+function isSeqShadowed(seq, coverings) {
+  return coverings.some((c) => seq >= c.fromSeq && seq <= c.toSeq);
+}
+var init_compaction = __esm({
+  "packages/core/dist/session/compaction.js"() {
+    "use strict";
+    init_compactionState();
+  }
+});
+
 // packages/core/dist/session/modelSurface.js
 function isModelSurfaceEvent(event) {
   return MODEL_SURFACE_KINDS.has(event.kind);
@@ -28348,8 +28634,33 @@ function asString(value) {
   return typeof value === "string" ? value : void 0;
 }
 function deriveMessages(events, options = {}) {
+  const coverings = coveringCompactions(events);
+  const orderedCoverings = [...coverings].sort((a, b) => a.fromSeq - b.fromSeq || a.seq - b.seq);
+  const compactBySeq = new Map(coverings.map((c) => [c.seq, c]));
   const messages = [];
+  let nextCheckpoint = 0;
+  const pushCheckpoint = (compact) => {
+    messages.push({
+      role: compact.role,
+      content: compact.content,
+      seq: compact.seq,
+      compactedFromSeq: compact.fromSeq,
+      compactedToSeq: compact.toSeq,
+      ...compact.sourceEventSeqs ? { sourceEventSeqs: compact.sourceEventSeqs } : {}
+    });
+  };
+  const pushDueCheckpoints = (seq) => {
+    while (nextCheckpoint < orderedCoverings.length && orderedCoverings[nextCheckpoint].fromSeq <= seq) {
+      pushCheckpoint(orderedCoverings[nextCheckpoint]);
+      nextCheckpoint += 1;
+    }
+  };
   for (const e of events) {
+    pushDueCheckpoints(e.seq);
+    if (compactBySeq.has(e.seq))
+      continue;
+    if (isSeqShadowed(e.seq, coverings))
+      continue;
     if (!isModelSurfaceEvent(e))
       continue;
     const d = e.data;
@@ -28394,6 +28705,7 @@ function deriveMessages(events, options = {}) {
         break;
     }
   }
+  pushDueCheckpoints(Number.POSITIVE_INFINITY);
   return messages;
 }
 function pairToolCalls(events) {
@@ -28421,6 +28733,7 @@ var MODEL_SURFACE_KINDS;
 var init_modelSurface = __esm({
   "packages/core/dist/session/modelSurface.js"() {
     "use strict";
+    init_compaction();
     MODEL_SURFACE_KINDS = /* @__PURE__ */ new Set([
       "user.message",
       "assistant.message",
@@ -28438,6 +28751,14 @@ function derivedToAgentMessages(messages) {
     const agent = { role: m.role, content: m.content };
     if (m.toolCallId !== void 0)
       agent.toolCallId = m.toolCallId;
+    if (m.seq !== void 0)
+      agent.seq = m.seq;
+    if (m.compactedFromSeq !== void 0)
+      agent.compactedFromSeq = m.compactedFromSeq;
+    if (m.compactedToSeq !== void 0)
+      agent.compactedToSeq = m.compactedToSeq;
+    if (m.sourceEventSeqs !== void 0)
+      agent.sourceEventSeqs = [...m.sourceEventSeqs];
     out.push(agent);
   }
   return out;
@@ -29081,8 +29402,97 @@ function validateSessionTrace(events, mode = "minimal") {
       message: `session.ended seq ${firstEnded.seq} precedes verification.run seq ${firstVerification.seq}`
     });
   }
+  pushCompactionViolations(events, knownSeq, pairs, violations);
   return violations;
 }
+function pushCompactionViolations(events, knownSeq, pairs, violations) {
+  for (const e of events) {
+    if (e.kind !== "session.compacted")
+      continue;
+    const fromSeq = asSeq(e.data.fromSeq);
+    const toSeq = asSeq(e.data.toSeq);
+    if (fromSeq === void 0 && toSeq === void 0)
+      continue;
+    if (fromSeq === void 0 || toSeq === void 0 || fromSeq > toSeq) {
+      violations.push({
+        code: "COMPACTION_RANGE_INVALID",
+        seq: e.seq,
+        message: `session.compacted seq ${e.seq} has invalid fromSeq/toSeq`
+      });
+      continue;
+    }
+    if (e.seq <= toSeq) {
+      violations.push({
+        code: "COMPACTION_EVENT_INSIDE_RANGE",
+        seq: e.seq,
+        message: `session.compacted seq ${e.seq} must be > toSeq ${toSeq}`
+      });
+    }
+    if (!knownSeq.has(fromSeq) || !knownSeq.has(toSeq)) {
+      violations.push({
+        code: "COMPACTION_BOUNDARY_SEQ_MISSING",
+        seq: e.seq,
+        message: `session.compacted seq ${e.seq} range endpoints must exist in the trace`
+      });
+    }
+    const checkpoint = e.data.checkpoint;
+    if (!checkpoint || typeof checkpoint !== "object" || !["user", "system"].includes(String(checkpoint.role ?? "")) || typeof checkpoint.content !== "string") {
+      violations.push({
+        code: "COMPACTION_CHECKPOINT_INVALID",
+        seq: e.seq,
+        message: `session.compacted seq ${e.seq} must carry a user/system checkpoint with string content`
+      });
+    }
+    const sourceRaw = e.data.sourceEventSeqs;
+    if (Array.isArray(sourceRaw)) {
+      for (const raw of sourceRaw) {
+        const s = asSeq(raw);
+        if (s === void 0) {
+          violations.push({
+            code: "COMPACTION_SOURCE_SEQ_INVALID",
+            seq: e.seq,
+            message: "sourceEventSeqs entries must be positive integers"
+          });
+        } else if (!knownSeq.has(s)) {
+          violations.push({
+            code: "COMPACTION_SOURCE_SEQ_MISSING",
+            seq: e.seq,
+            message: `sourceEventSeqs ${s} is not an event in this trace`
+          });
+        } else if (s < fromSeq || s > toSeq) {
+          violations.push({
+            code: "COMPACTION_SOURCE_SEQ_OUTSIDE_RANGE",
+            seq: e.seq,
+            message: `sourceEventSeqs ${s} is outside ${fromSeq}..${toSeq}`
+          });
+        }
+      }
+    }
+    for (const pair of pairs) {
+      const callSeq = pair.call.seq;
+      const callInside = callSeq >= fromSeq && callSeq <= toSeq;
+      if (!pair.result) {
+        if (callInside) {
+          violations.push({
+            code: "COMPACTION_ACTIVE_TOOL_CALL",
+            seq: e.seq,
+            message: `tool.call seq ${callSeq} is compacted before a result or interruption`
+          });
+        }
+        continue;
+      }
+      const resultSeq = pair.result.seq;
+      const resultInside = resultSeq >= fromSeq && resultSeq <= toSeq;
+      if (callInside !== resultInside) {
+        violations.push({
+          code: "COMPACTION_TOOL_PAIR_SPLIT",
+          seq: e.seq,
+          message: `tool pair ${callSeq}/${resultSeq} is split by range ${fromSeq}..${toSeq}`
+        });
+      }
+    }
+  }
+}
 var init_invariants = __esm({
   "packages/core/dist/session/invariants.js"() {
     "use strict";
@@ -29096,6 +29506,7 @@ var init_session = __esm({
     "use strict";
     init_types8();
     init_modelSurface();
+    init_compaction();
     init_agentAdapter();
     init_writer();
     init_replay();
@@ -29237,7 +29648,7 @@ var init_nodeProviders = __esm({
       async exec(command, options = {}) {
         const started = Date.now();
         const cwd = this.workspace.resolve(options.cwd ?? ".");
-        const timeoutMs = options.timeoutMs ?? this.defaults.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
+        const timeoutMs2 = options.timeoutMs ?? this.defaults.timeoutMs ?? DEFAULT_TIMEOUT_MS2;
         const maxChars = options.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
         const isWindows = process.platform === "win32";
         const file2 = isWindows ? "cmd.exe" : "/bin/sh";
@@ -29260,7 +29671,7 @@ var init_nodeProviders = __esm({
           const timer = setTimeout(() => {
             timedOut = true;
             killTree(child);
-          }, timeoutMs);
+          }, timeoutMs2);
           child.stdout?.on("data", (d) => {
             stdout = append(stdout, d.toString("utf-8"));
           });
@@ -30198,9 +30609,9 @@ var init_sessionEvidence = __esm({
 
 // packages/core/dist/verification/criteriaPack.v1.js
 function codingCriteriaPack(options = {}) {
-  const timeoutMs = options.commandTimeoutMs ?? 6e5;
+  const timeoutMs2 = options.commandTimeoutMs ?? 6e5;
   const withDefault = (o, d) => o === void 0 ? d : o;
-  const command = (command2) => command2 ? { kind: "command", command: command2, timeoutMs } : void 0;
+  const command = (command2) => command2 ? { kind: "command", command: command2, timeoutMs: timeoutMs2 } : void 0;
   const criteria = [
     {
       id: "correctness.error-signals",
@@ -30764,6 +31175,7 @@ __export(dist_exports, {
   applyRetryIfMissing: () => applyRetryIfMissing,
   auditDegradedBanner: () => auditDegradedBanner,
   auditSynthesisTiers: () => auditSynthesisTiers,
+  buildCompactionStateSnapshot: () => buildCompactionStateSnapshot,
   buildCouncilCompletion: () => buildCouncilCompletion,
   buildCustomParameters: () => buildCustomParameters,
   buildDeliveryFixPrompt: () => buildDeliveryFixPrompt,
@@ -30802,6 +31214,7 @@ __export(dist_exports, {
   councilTierFromSize: () => councilTierFromSize,
   countByStatus: () => countByStatus,
   countEmittedWriteTools: () => countEmittedWriteTools,
+  coveringCompactions: () => coveringCompactions,
   createBrainEvent: () => createBrainEvent,
   createDefaultSystemPromptConfig: () => createDefaultSystemPromptConfig,
   createExecutionContext: () => createExecutionContext,
@@ -30834,6 +31247,7 @@ __export(dist_exports, {
   findSkillsByIds: () => findSkillsByIds,
   findSkillsByTag: () => findSkillsByTag,
   forkSession: () => forkSession,
+  formatCompactionStateSnapshot: () => formatCompactionStateSnapshot,
   formatLessonsForContext: () => formatLessonsForContext,
   getAgent: () => getAgent,
   getAllTools: () => getAllTools,
@@ -30881,6 +31295,7 @@ __export(dist_exports, {
   isGeneratedPath: () => isGeneratedPath,
   isModelSurfaceEvent: () => isModelSurfaceEvent,
   isReviewerKind: () => isReviewerKind,
+  isSeqShadowed: () => isSeqShadowed,
   isSettled: () => isSettled,
   isStatusTheaterUnit: () => isStatusTheaterUnit,
   isValidTool: () => isValidTool,
@@ -30903,6 +31318,7 @@ __export(dist_exports, {
   normalizeToolName: () => normalizeToolName,
   pairToolCalls: () => pairToolCalls,
   parseClarificationRequest: () => parseClarificationRequest,
+  parseCompactedEvent: () => parseCompactedEvent,
   parseEvidenceTier: () => parseEvidenceTier,
   parseMinimaxStyleToolCalls: () => parseMinimaxStyleToolCalls,
   parseNameOnlyDiff: () => parseNameOnlyDiff,
@@ -30959,6 +31375,7 @@ __export(dist_exports, {
   selectParallelWave: () => selectParallelWave,
   setWorkspaceStubs: () => setWorkspaceStubs,
   sha256Hex: () => sha256Hex,
+  shadowedSeqSet: () => shadowedSeqSet,
   shouldRetryMember: () => shouldRetryMember,
   sideEffectForTool: () => sideEffectForTool,
   slugify: () => slugify2,
@@ -31302,12 +31719,46 @@ function mapBrainEventToSpine(ev) {
           durationMs: ev.durationMs
         }
       };
-    case "session_compacted":
-      return {
-        kind: "session.compacted",
-        actor: ACTOR_SYSTEM,
-        data: { summary: ev.summary ?? "" }
-      };
+    case "session_compacted": {
+      const compact = ev;
+      const data = { summary: compact.summary ?? "" };
+      if (typeof compact.messagesRemoved === "number") data.messagesRemoved = compact.messagesRemoved;
+      if (typeof compact.fromSeq === "number" && typeof compact.toSeq === "number") {
+        data.fromSeq = compact.fromSeq;
+        data.toSeq = compact.toSeq;
+      }
+      if (compact.checkpoint && typeof compact.checkpoint === "object") data.checkpoint = compact.checkpoint;
+      if (compact.strategy === "extractive" || compact.strategy === "llm") data.strategy = compact.strategy;
+      if (Array.isArray(compact.sourceEventSeqs)) data.sourceEventSeqs = compact.sourceEventSeqs;
+      if (Array.isArray(compact.retainedCriterionIds)) {
+        data.retainedCriterionIds = compact.retainedCriterionIds;
+      }
+      if (Array.isArray(compact.retainedEvidenceRefs)) {
+        data.retainedEvidenceRefs = compact.retainedEvidenceRefs;
+      }
+      if (compact.retainedState && typeof compact.retainedState === "object") {
+        data.retainedState = compact.retainedState;
+      }
+      if (compact.stateSnapshot && typeof compact.stateSnapshot === "object") data.stateSnapshot = compact.stateSnapshot;
+      if (typeof compact.sourceRequestFingerprint === "string") {
+        data.sourceRequestFingerprint = compact.sourceRequestFingerprint;
+      }
+      if (typeof compact.headerFingerprint === "string") data.headerFingerprint = compact.headerFingerprint;
+      if (typeof compact.sourceEstimatedTokens === "number") {
+        data.sourceEstimatedTokens = compact.sourceEstimatedTokens;
+      }
+      if (typeof compact.cacheReuseExpected === "boolean") data.cacheReuseExpected = compact.cacheReuseExpected;
+      if (typeof compact.inputTokens === "number") data.inputTokens = compact.inputTokens;
+      if (typeof compact.outputTokens === "number") data.outputTokens = compact.outputTokens;
+      if (typeof compact.savedTokens === "number") data.savedTokens = compact.savedTokens;
+      if (typeof compact.recompactionRate === "number") data.recompactionRate = compact.recompactionRate;
+      if (compact.summaryStrategy === "extractive" || compact.summaryStrategy === "llm") {
+        data.summaryStrategy = compact.summaryStrategy;
+      }
+      if (typeof compact.provider === "string") data.provider = compact.provider;
+      if (typeof compact.model === "string") data.model = compact.model;
+      return { kind: "session.compacted", actor: ACTOR_SYSTEM, data };
+    }
     case "agent_start":
       return {
         kind: "note",
@@ -31421,6 +31872,16 @@ var init_sessionSpine = __esm({
         if (!report || report.events.length === 0) return null;
         return deriveMessages(report.events);
       }
+      /** Deterministic operational state retained beside a compact checkpoint. */
+      async compactionStateSnapshot(toSeq) {
+        if (this.status !== "active" && this.status !== "closed") return null;
+        await this.flush();
+        const report = await readSessionLog(
+          path21.join(this.sessionsDir, this.sessionId, "events.jsonl")
+        ).catch(() => null);
+        if (!report || report.events.length === 0) return null;
+        return buildCompactionStateSnapshot(report.events, toSeq);
+      }
       /**
        * E2.1 (ADR-0023 × ADR-0021): last recognizable strict verification record
        * in this session's log — the completion verdict is reconstructible from
@@ -31567,6 +32028,7 @@ var init_sessionSpine = __esm({
       }
       async flush() {
         await this.inner.flush?.();
+        await this.spine?.flush();
       }
       async close() {
         await this.inner.close();
@@ -31867,6 +32329,21 @@ async function readMetrics(file2) {
   }
   return out;
 }
+function recordCompactionMetrics(sessionId2, provider, model, metrics) {
+  getMetricsLogger().record({
+    kind: "compaction",
+    sessionId: sessionId2,
+    provider,
+    model,
+    compactionCount: metrics.count,
+    compactionInputTokens: metrics.inputTokens,
+    compactionOutputTokens: metrics.outputTokens,
+    compactionSavedTokens: metrics.savedTokens,
+    compactionRecompactionRate: metrics.recompactionRate,
+    compactionSummaryStrategy: metrics.summaryStrategy,
+    compactionRestoreFailures: metrics.restoreFailures
+  });
+}
 function getMetricsLogger() {
   if (!_singleton) {
     _singleton = new MetricsLogger();
@@ -33281,7 +33758,7 @@ var init_registry2 = __esm({
         if (!parsed.success) {
           return typedErr(`Invalid input: ${parsed.error.message}`);
         }
-        const timeoutMs = options.timeoutMs ?? tool.timeoutMs ?? 3e4;
+        const timeoutMs2 = options.timeoutMs ?? tool.timeoutMs ?? 3e4;
         const parentSignal = options.signal;
         const controller = new AbortController();
         let timer;
@@ -33331,8 +33808,8 @@ var init_registry2 = __esm({
               timer = setTimeout(() => {
                 if (!controller.signal.aborted)
                   controller.abort();
-                reject(new Error(`Tool "${name}" timed out after ${timeoutMs}ms`));
-              }, timeoutMs);
+                reject(new Error(`Tool "${name}" timed out after ${timeoutMs2}ms`));
+              }, timeoutMs2);
             })
           ]);
           if (result.ok) {
@@ -33678,11 +34155,11 @@ async function runDiagnosticsForFile(file2, options = {}) {
   const provider = providerForFile(file2, options.providers);
   if (!provider) return [];
   const cwd = options.cwd ?? process.cwd();
-  const timeoutMs = options.timeoutMs ?? 5e3;
+  const timeoutMs2 = options.timeoutMs ?? 5e3;
   const runner = options.runner ?? defaultRunner;
   try {
     const bin = options.runner ? provider.bin : resolveBin(provider.bin, cwd);
-    const result = await runner(bin, provider.args(file2), { cwd, timeoutMs });
+    const result = await runner(bin, provider.args(file2), { cwd, timeoutMs: timeoutMs2 });
     return provider.parse(result.stdout, file2);
   } catch {
     return [];
@@ -35184,7 +35661,7 @@ function renderVerdict(verdict, candidateCount) {
   return lines.join("\n");
 }
 function createKrakenSelectTool(deps) {
-  const timeoutMs = deps.timeoutMs ?? 12e4;
+  const timeoutMs2 = deps.timeoutMs ?? 12e4;
   return {
     name: "kraken_select",
     description: "Compare the candidate research reports spawned this turn (task purpose=candidate) and select the hypothesis best supported by OBSERVED EVIDENCE. A dedicated verifier call (default: the current model) judges grounded vs unsupported claims; degraded observations are never treated as proof of absence. Returns the selected candidate, a rationale, and requiredChecks the implementation must pass. Call it ONCE per turn, after candidate tentacles finished and BEFORE implementing. If it reports needs_more_evidence, either spawn ONE more differentiated candidate or proceed with your own judgment.",
@@ -35241,7 +35718,7 @@ function createKrakenSelectTool(deps) {
                 model: id.model,
                 provider: id.provider,
                 tools: [],
-                signal: AbortSignal.timeout(timeoutMs)
+                signal: AbortSignal.timeout(timeoutMs2)
               });
               judgingUsage = usage;
               if (raw.trim().length === 0) throw new Error("empty verifier response");
@@ -38792,7 +39269,7 @@ exec node "$(dirname "$0")/askpass.cjs"
   }
   return sh;
 }
-function runSsh(target, remoteCommand, timeoutMs = 6e4) {
+function runSsh(target, remoteCommand, timeoutMs2 = 6e4) {
   return new Promise((resolve3) => {
     if (target.auth === "password" && !getSshPassword(target.id)) {
       resolve3({
@@ -38832,7 +39309,7 @@ function runSsh(target, remoteCommand, timeoutMs = 6e4) {
         stdout,
         stderr: stderr + "\n[ssh] timeout"
       });
-    }, timeoutMs);
+    }, timeoutMs2);
     child.on("error", (err) => {
       clearTimeout(timer);
       resolve3({
@@ -39061,7 +39538,7 @@ async function readChecks(cwd) {
     return [];
   }
 }
-function runShell(command, cwd, timeoutMs, signal) {
+function runShell(command, cwd, timeoutMs2, signal) {
   return new Promise((resolve3) => {
     const isWin = process.platform === "win32";
     const child = spawn10(isWin ? "cmd.exe" : "/bin/sh", isWin ? ["/c", command] : ["-c", command], {
@@ -39073,7 +39550,7 @@ function runShell(command, cwd, timeoutMs, signal) {
     let stdout = "";
     let stderr = "";
     let settled = false;
-    const finish = (exitCode) => {
+    const finish2 = (exitCode) => {
       if (settled) return;
       settled = true;
       resolve3({ exitCode, stdout, stderr });
@@ -39083,8 +39560,8 @@ function runShell(command, cwd, timeoutMs, signal) {
         child.kill("SIGTERM");
       } catch {
       }
-      finish(124);
-    }, timeoutMs);
+      finish2(124);
+    }, timeoutMs2);
     if (signal) {
       if (signal.aborted) {
         try {
@@ -39092,7 +39569,7 @@ function runShell(command, cwd, timeoutMs, signal) {
         } catch {
         }
         clearTimeout(timer);
-        finish(130);
+        finish2(130);
         return;
       }
       signal.addEventListener(
@@ -39103,7 +39580,7 @@ function runShell(command, cwd, timeoutMs, signal) {
           } catch {
           }
           clearTimeout(timer);
-          finish(130);
+          finish2(130);
         },
         { once: true }
       );
@@ -39118,11 +39595,11 @@ function runShell(command, cwd, timeoutMs, signal) {
     });
     child.on("error", () => {
       clearTimeout(timer);
-      finish(1);
+      finish2(1);
     });
     child.on("close", (code) => {
       clearTimeout(timer);
-      finish(code ?? 1);
+      finish2(code ?? 1);
     });
   });
 }
@@ -39144,9 +39621,9 @@ async function runBacktest(cwd, signal) {
   const results = [];
   for (const c of checks) {
     const expectExit = c.expectExit ?? 0;
-    const timeoutMs = c.timeoutMs ?? 12e4;
+    const timeoutMs2 = c.timeoutMs ?? 12e4;
     const start = Date.now();
-    const { exitCode, stdout, stderr } = await runShell(c.command, cwd, timeoutMs, signal);
+    const { exitCode, stdout, stderr } = await runShell(c.command, cwd, timeoutMs2, signal);
     const combined = `${stdout}${stderr}`;
     const preview = combined.slice(0, 400);
     let ok = exitCode === expectExit;
@@ -39858,8 +40335,9 @@ function createBuiltinToolRegistry(options = {}) {
   if (hooks) registry4.setLifecycleHooks(hooks);
   const readOnly = options.readOnly === true || options.planMode === true || profile === "explore";
   const verifyMode = profile === "verify";
-  const allowMutators = !readOnly && !verifyMode;
-  const allowBash = allowMutators || verifyMode;
+  const gauntletParent = options.gauntletParent === true;
+  const allowMutators = !readOnly && !verifyMode && !gauntletParent;
+  const allowBash = (allowMutators || verifyMode) && !gauntletParent;
   const permPolicy = options.permissionPolicy ?? defaultPermissionPolicy();
   const withPerm = (t) => wrapWithPermissions(t, permPolicy, options.onPermissionAsk);
   registry4.register(withPerm(safeReadFile));
@@ -39892,21 +40370,21 @@ function createBuiltinToolRegistry(options = {}) {
   if (allowBash) {
     registry4.register(withPerm(safeBash));
   }
-  const askUserTool = options.readOnly === true || profile === "explore" || profile === "verify" ? null : createAskUserTool(options.onAskUser);
+  const askUserTool = options.readOnly === true || profile === "explore" || profile === "verify" || gauntletParent ? null : createAskUserTool(options.onAskUser);
   if (askUserTool) {
     registry4.register(withPerm(askUserTool));
   }
-  const enableSkill = options.enableSkill !== false && options.readOnly !== true && profile !== "explore" && profile !== "verify";
+  const enableSkill = options.enableSkill !== false && options.readOnly !== true && !gauntletParent && profile !== "explore" && profile !== "verify";
   const skillTool = enableSkill ? withPerm(createSkillTool({ cwd: root })) : null;
   if (skillTool) {
     registry4.register(skillTool);
   }
-  const enableTodos = options.enableTodos !== false && options.readOnly !== true && profile === "full";
+  const enableTodos = options.enableTodos !== false && options.readOnly !== true && !gauntletParent && profile === "full";
   const todoWrite = enableTodos ? withPerm(createTodoWriteTool()) : null;
   const todoRead = enableTodos ? withPerm(createTodoReadTool()) : null;
   if (todoWrite) registry4.register(todoWrite);
   if (todoRead) registry4.register(todoRead);
-  const enablePlanTasks = options.enablePlanTasks !== false && options.readOnly !== true && (profile === "full" || options.planMode === true) && profile !== "explore" && profile !== "verify" && profile !== "general";
+  const enablePlanTasks = options.enablePlanTasks !== false && options.readOnly !== true && !gauntletParent && (profile === "full" || options.planMode === true) && profile !== "explore" && profile !== "verify" && profile !== "general";
   const planTaskToolsWrapped = (enablePlanTasks ? createPlanTaskTools({ projectRoot: root, onTaskEvent: options.onTaskEvent }) : []).map((t) => withPerm(t));
   for (const t of planTaskToolsWrapped) {
     registry4.register(t);
@@ -39957,7 +40435,7 @@ function createBuiltinToolRegistry(options = {}) {
       permissions: semanticTool.permissions ?? []
     });
   }
-  if (!readOnly && process.env.ZELARI_BROWSER !== "0") {
+  if (!readOnly && !gauntletParent && process.env.ZELARI_BROWSER !== "0") {
     const browserTool = createBrowserTool();
     registry4.register(browserTool);
     tools.push({
@@ -39966,7 +40444,7 @@ function createBuiltinToolRegistry(options = {}) {
       permissions: browserTool.permissions ?? []
     });
   }
-  if (!readOnly && process.env.ZELARI_SSH !== "0") {
+  if (!readOnly && !gauntletParent && process.env.ZELARI_SSH !== "0") {
     for (const t of createSshTools()) {
       registry4.register(t);
       tools.push({
@@ -39976,7 +40454,7 @@ function createBuiltinToolRegistry(options = {}) {
       });
     }
   }
-  if (!readOnly) {
+  if (!readOnly && !gauntletParent) {
     for (const t of createWorldModelTools()) {
       const safe = wrapWithAudit(t, audit, sessionId2);
       registry4.register(safe);
@@ -40202,10 +40680,10 @@ function wrapWithDiagnostics(original, root, runner) {
       const filePath = value && typeof value === "object" && typeof value.path === "string" ? value.path : void 0;
       if (!filePath) return result;
       try {
-        const timeoutMs = Number(process.env.ZELARI_DIAGNOSTICS_TIMEOUT_MS) || 5e3;
+        const timeoutMs2 = Number(process.env.ZELARI_DIAGNOSTICS_TIMEOUT_MS) || 5e3;
         const diags = await runDiagnosticsForFile(filePath, {
           cwd: root,
-          timeoutMs,
+          timeoutMs: timeoutMs2,
           ...runner ? { runner } : {}
         });
         const formatted = formatDiagnostics(diags, { relativeTo: root });
@@ -40353,711 +40831,171 @@ var init_toolRegistry = __esm({
   }
 });
 
-// src/cli/phase.ts
-var phase_exports = {};
-__export(phase_exports, {
-  PHASES: () => PHASES,
-  PLAN_ALLOWED_WRITE_TOOLS: () => PLAN_ALLOWED_WRITE_TOOLS,
-  PLAN_BLOCKED_TOOLS: () => PLAN_BLOCKED_TOOLS,
-  describePhase: () => describePhase,
-  nextPhase: () => nextPhase,
-  parsePhase: () => parsePhase
-});
-function parsePhase(input) {
-  const v = input.trim().toLowerCase();
-  return PHASES.includes(v) ? v : null;
+// src/cli/state/fileStateStore.ts
+import { createHash as createHash11, randomUUID as randomUUID2 } from "node:crypto";
+import { promises as fs21 } from "node:fs";
+import * as path41 from "node:path";
+function shortId() {
+  return randomUUID2().replace(/-/g, "").slice(0, 12);
 }
-function nextPhase(current) {
-  return current === "plan" ? "build" : "plan";
+async function writeJsonAtomic(filePath, data) {
+  await fs21.mkdir(path41.dirname(filePath), { recursive: true });
+  const tmp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+  await fs21.writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
+  await fs21.rename(tmp, filePath);
 }
-function describePhase(phase2) {
-  switch (phase2) {
-    case "plan":
-      return "plan \u2014 explore & design only (no project writes; plan files allowed)";
-    default:
-      return "build \u2014 implement with full tools";
+async function readJsonFile(filePath) {
+  try {
+    const raw = await fs21.readFile(filePath, "utf8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
   }
 }
-var PHASES, PLAN_ALLOWED_WRITE_TOOLS, PLAN_BLOCKED_TOOLS;
-var init_phase = __esm({
-  "src/cli/phase.ts"() {
-    "use strict";
-    PHASES = ["plan", "build"];
-    PLAN_ALLOWED_WRITE_TOOLS = /* @__PURE__ */ new Set([
-      // Workspace plan/docs — intentional plan-mode outputs
-      "createPlan",
-      "createTask",
-      "updateTask",
-      "createMilestone",
-      "createDocument",
-      "createDecision",
-      "linkDocuments"
-      // Soft writes that only touch .zelari / plan paths are still gated in
-      // toolRegistry by path when needed; write_file/edit_file stay DENIED.
-    ]);
-    PLAN_BLOCKED_TOOLS = /* @__PURE__ */ new Set([
-      "write_file",
-      "edit_file",
-      "apply_diff",
-      "bash"
-    ]);
-  }
-});
-
-// src/cli/mode.ts
-function nextMode(current) {
-  const i = MODES.indexOf(current);
-  return MODES[(i + 1) % MODES.length] ?? "kraken";
+function defaultSummary(input, discoveries) {
+  if (input.summary?.trim()) return input.summary.trim();
+  const lines = [
+    `# ${input.label}`,
+    "",
+    `- mode: ${input.mode}`,
+    input.layer ? `- layer: ${input.layer}` : null,
+    `- verification: ran=${input.verification.ran} ok=${input.verification.ok}`,
+    "",
+    "## Discoveries",
+    ...discoveries.map((d) => `- [${d.kind}] ${d.summary}`)
+  ].filter((x) => x !== null);
+  return lines.join("\n");
 }
-function parseMode(input) {
-  const v = input.trim().toLowerCase();
-  if (MODES.includes(v)) return v;
-  return MODE_ALIASES[v] ?? null;
+function stripStored(s) {
+  const { artifactDir: _a3, ...meta3 } = s;
+  return meta3;
 }
-function describeMode(mode) {
-  switch (mode) {
-    case "council":
-      return "council \u2014 multi-member plan/design (Caronte\u2026Lucifero; build needs ZELARI_COUNCIL_CAN_BUILD=1)";
-    case "zelari":
-      return "zelari \u2014 mission: plan@council \u2192 build@kraken (legacy: ZELARI_BUILD_VIA_AGENT=0)";
-    default:
-      return "kraken \u2014 super-agent lead (spawns explore/general/verify tentacles; default implementer)";
-  }
+function isStateEnabled(env = process.env) {
+  return env.ZELARI_STATE !== "0";
 }
-var MODES, MODE_ALIASES;
-var init_mode = __esm({
-  "src/cli/mode.ts"() {
-    "use strict";
-    MODES = ["kraken", "council", "zelari"];
-    MODE_ALIASES = {
-      agent: "kraken",
-      single: "kraken"
-    };
-  }
-});
-
-// src/cli/headless.ts
-import { readFileSync as readFileSync22 } from "node:fs";
-function defaultProfileForMode(mode) {
-  switch (mode) {
-    case "council":
-      return "council/v1";
-    case "zelari":
-      return "mission/v1";
-    default:
-      return "kraken/v1";
+async function getStateStore(projectRoot, env = process.env) {
+  if (!isStateEnabled(env)) return new NoopDurableStateStore();
+  const store6 = new FileDurableStateStore();
+  try {
+    await store6.init(projectRoot);
+    return store6;
+  } catch {
+    return new NoopDurableStateStore();
   }
 }
-function parseHeadlessFlags(argv) {
-  if (!argv.includes("--headless")) {
-    return { options: null };
-  }
-  let task;
-  let output = "json";
-  let mode = "kraken";
-  let phase2 = "build";
-  let modeExplicit = false;
-  let councilFlag = false;
-  let provider;
-  let model;
-  let history2;
-  let todos2;
-  let once = false;
-  let profile;
-  let resumeSessionId;
-  let exportSessionPath;
-  let strictDone = false;
-  let krakenGraph;
-  let planOnly = process.env.ZELARI_KRAKEN_PLAN_ONLY === "1" || process.env.ZELARI_KRAKEN_PLAN_ONLY === "true";
-  let runPlan = process.env.ZELARI_KRAKEN_RUN_PLAN;
-  for (let i = 0; i < argv.length; i++) {
-    const arg = argv[i];
-    if (arg === "--headless") continue;
-    if (arg === "--output") {
-      const next = argv[i + 1];
-      if (next === "json" || next === "plain") {
-        output = next;
-        i++;
-      } else {
-        return {
-          options: null,
-          error: `--output requires 'json' or 'plain', got '${next ?? "(missing)"}'`
-        };
+function hashStablePrompt(stable) {
+  return createHash11("sha256").update(stable, "utf8").digest("hex").slice(0, 16);
+}
+var DEFAULT_MATERIALIZE_CHARS, FileDurableStateStore, NoopDurableStateStore;
+var init_fileStateStore = __esm({
+  "src/cli/state/fileStateStore.ts"() {
+    "use strict";
+    DEFAULT_MATERIALIZE_CHARS = 4e3;
+    FileDurableStateStore = class {
+      root = "";
+      stateDir = "";
+      commitsDir = "";
+      artifactsDir = "";
+      headPath = "";
+      indexPath = "";
+      async init(projectRoot) {
+        this.root = projectRoot;
+        this.stateDir = path41.join(projectRoot, ".zelari", "state");
+        this.commitsDir = path41.join(this.stateDir, "commits");
+        this.artifactsDir = path41.join(this.stateDir, "artifacts");
+        this.headPath = path41.join(this.stateDir, "HEAD.json");
+        this.indexPath = path41.join(this.stateDir, "index.jsonl");
+        await fs21.mkdir(this.commitsDir, { recursive: true });
+        await fs21.mkdir(this.artifactsDir, { recursive: true });
       }
-    } else if (arg === "--task") {
-      task = argv[i + 1];
-      i++;
-    } else if (arg === "--task-file") {
-      const next = argv[i + 1];
-      if (next) {
-        try {
-          const fromFile = readFileSync22(next, "utf-8");
-          if (fromFile.trim()) task = fromFile;
-        } catch {
+      async commit(input) {
+        if (!input.force && input.verification.ran && !input.verification.ok) {
+          throw new Error(
+            "DurableStateStore.commit refused: verification ran and failed (pass force:true for soft commit)"
+          );
         }
-      }
-      i++;
-    } else if (arg === "--council") {
-      councilFlag = true;
-    } else if (arg === "--mode") {
-      const next = argv[i + 1];
-      const parsed = next ? parseMode(next) : null;
-      if (!parsed) {
-        return {
-          options: null,
-          error: `--mode requires 'kraken', 'council', or 'zelari' (agent=alias), got '${next ?? "(missing)"}'`
+        const discoveries = input.discoveries ?? [];
+        const parent = await this.head();
+        const id = shortId();
+        const artifactRel = path41.join("artifacts", id);
+        const artifactAbs = path41.join(this.artifactsDir, id);
+        await fs21.mkdir(artifactAbs, { recursive: true });
+        const summary = defaultSummary(input, discoveries);
+        await fs21.writeFile(path41.join(artifactAbs, "summary.md"), summary + "\n", "utf8");
+        await writeJsonAtomic(path41.join(artifactAbs, "discoveries.json"), discoveries);
+        await writeJsonAtomic(path41.join(artifactAbs, "verification.json"), input.verification);
+        const meta3 = {
+          id,
+          parentId: parent?.id ?? null,
+          createdAt: Date.now(),
+          sessionId: input.sessionId,
+          mode: input.mode,
+          layer: input.layer,
+          label: input.label,
+          workspaceCheckpointId: input.workspaceCheckpointId,
+          verification: {
+            ...input.verification,
+            reportPath: input.verification.reportPath ?? path41.join(".zelari", "state", artifactRel, "verification.json").replace(/\\/g, "/")
+          },
+          changedPaths: input.changedPaths ?? [],
+          stablePromptHash: input.stablePromptHash,
+          discoveryCount: discoveries.length,
+          artifactDir: artifactRel.replace(/\\/g, "/")
         };
+        await writeJsonAtomic(path41.join(this.commitsDir, `${id}.json`), meta3);
+        await writeJsonAtomic(this.headPath, { id, updatedAt: meta3.createdAt });
+        await fs21.appendFile(this.indexPath, JSON.stringify({ id, createdAt: meta3.createdAt, label: meta3.label }) + "\n", "utf8");
+        return stripStored(meta3);
       }
-      mode = parsed;
-      modeExplicit = true;
-      i++;
-    } else if (arg === "--phase") {
-      const next = argv[i + 1];
-      const parsed = next ? parsePhase(next) : null;
-      if (!parsed) {
-        return {
-          options: null,
-          error: `--phase requires 'plan' or 'build', got '${next ?? "(missing)"}'`
-        };
+      async head() {
+        const head = await readJsonFile(this.headPath);
+        if (!head?.id) return null;
+        return this.get(head.id);
       }
-      phase2 = parsed;
-      i++;
-    } else if (arg === "--provider") {
-      provider = argv[i + 1];
-      i++;
-    } else if (arg === "--model") {
-      model = argv[i + 1];
-      i++;
-    } else if (arg === "--history" || arg === "--history-file") {
-      const next = argv[i + 1];
-      if (next) {
-        let raw = null;
-        if (arg === "--history-file") {
-          try {
-            raw = readFileSync22(next, "utf-8");
-          } catch {
-            raw = null;
-          }
-        } else {
-          raw = next;
+      async get(id) {
+        const stored = await readJsonFile(path41.join(this.commitsDir, `${id}.json`));
+        return stored ? stripStored(stored) : null;
+      }
+      async list(limit = 20) {
+        let raw;
+        try {
+          raw = await fs21.readFile(this.indexPath, "utf8");
+        } catch {
+          return [];
         }
-        if (raw) {
+        const ids = [];
+        for (const line of raw.split("\n")) {
+          const t = line.trim();
+          if (!t) continue;
           try {
-            const parsedHist = JSON.parse(raw);
-            if (Array.isArray(parsedHist)) {
-              history2 = parsedHist.filter(
-                (m) => !!m && typeof m === "object" && typeof m.role === "string"
-              ).map((m) => {
-                const role = String(m.role);
-                const raw2 = m.content;
-                const content = typeof raw2 === "string" ? raw2 : raw2 == null ? "" : typeof raw2 === "object" ? JSON.stringify(raw2) : String(raw2);
-                const msg = {
-                  role,
-                  content
-                };
-                if (typeof m.toolCallId === "string") {
-                  msg.toolCallId = m.toolCallId;
-                }
-                return msg;
-              }).filter(
-                (m) => m.role === "user" || m.role === "assistant" || m.role === "tool" || m.role === "system"
-              );
-            }
+            const row = JSON.parse(t);
+            if (row.id) ids.push(row.id);
           } catch {
           }
         }
-        i++;
+        const slice = ids.slice(-Math.max(1, limit)).reverse();
+        const out = [];
+        for (const id of slice) {
+          const m = await this.get(id);
+          if (m) out.push(m);
+        }
+        return out;
       }
-    } else if (arg === "--todos") {
-      const next = argv[i + 1];
-      if (next) {
-        try {
-          const parsed = JSON.parse(next);
-          if (Array.isArray(parsed)) {
-            todos2 = parsed.filter(
-              (t) => !!t && typeof t === "object" && typeof t.content === "string"
-            ).map((t) => ({
-              id: typeof t.id === "string" ? t.id : void 0,
-              content: String(t.content).slice(0, 500),
-              status: t.status
-            }));
-          }
-        } catch {
+      async setHead(id) {
+        const meta3 = await this.get(id);
+        if (!meta3) {
+          throw new Error(`DurableStateStore.setHead: unknown commit ${id}`);
         }
-        i++;
+        await writeJsonAtomic(this.headPath, { id, updatedAt: Date.now() });
+        return meta3;
       }
-    } else if (arg === "--once") {
-      once = true;
-    } else if (arg === "--profile") {
-      const next = argv[i + 1];
-      if (!next || next.startsWith("--")) {
-        return { options: null, error: `--profile requires a profile id (e.g. kraken/v1), got '${next ?? "(missing)"}'` };
-      }
-      try {
-        resolveProfile(next);
-      } catch (err) {
-        return {
-          options: null,
-          error: err instanceof Error ? err.message : String(err)
-        };
-      }
-      profile = next;
-      i++;
-    } else if (arg === "--resume") {
-      const next = argv[i + 1];
-      if (!next || next.startsWith("--")) {
-        return { options: null, error: `--resume requires a session id, got '${next ?? "(missing)"}'` };
-      }
-      resumeSessionId = next;
-      i++;
-    } else if (arg === "--export-session") {
-      const next = argv[i + 1];
-      if (!next || next.startsWith("--")) {
-        return { options: null, error: `--export-session requires a path (or - for stdout), got '${next ?? "(missing)"}'` };
-      }
-      exportSessionPath = next;
-      i++;
-    } else if (arg === "--strict-done") {
-      strictDone = true;
-    } else if (arg === "--no-strict-done") {
-      strictDone = false;
-      process.env.ZELARI_MISSION_STRICT = "0";
-    } else if (arg === "--kraken-graph") {
-      krakenGraph = argv[i + 1];
-      i++;
-    } else if (arg === "--kraken-graph-file") {
-      const next = argv[i + 1];
-      if (next) {
-        try {
-          const fromFile = readFileSync22(next, "utf-8");
-          if (fromFile.trim()) krakenGraph = fromFile;
-        } catch {
-        }
-      }
-      i++;
-    } else if (arg === "--plan-only") {
-      planOnly = true;
-    } else if (arg === "--run-plan") {
-      runPlan = argv[i + 1];
-      i++;
-    }
-  }
-  if (councilFlag && !modeExplicit) {
-    mode = "council";
-  } else if (councilFlag && modeExplicit && mode !== "council") {
-    return {
-      options: null,
-      error: `--council conflicts with --mode ${mode}`
-    };
-  }
-  if (task && krakenGraph) {
-    return { options: null, error: "--task and --kraken-graph are mutually exclusive" };
-  }
-  if ((!task || task.trim().length === 0) && (!krakenGraph || krakenGraph.trim().length === 0)) {
-    return { options: null, error: "--headless requires --task <prompt> or --kraken-graph <goal>" };
-  }
-  return {
-    options: {
-      task: task ?? "",
-      output,
-      mode,
-      phase: phase2,
-      useCouncil: mode === "council",
-      provider,
-      model,
-      ...history2 && history2.length > 0 ? { history: history2 } : {},
-      ...todos2 && todos2.length > 0 ? { todos: todos2 } : {},
-      ...once ? { once: true } : {},
-      ...profile ? { profile } : {},
-      ...resumeSessionId ? { resumeSessionId } : {},
-      ...exportSessionPath ? { exportSessionPath } : {},
-      ...strictDone ? { strictDone: true } : {},
-      ...krakenGraph ? { krakenGraph } : {},
-      ...planOnly ? { planOnly: true } : {},
-      ...runPlan ? { runPlan } : {}
-    }
-  };
-}
-async function resolveHeadlessKey(providerId) {
-  const spec = PROVIDERS.find((p3) => p3.id === providerId);
-  if (!spec) {
-    return { error: `unknown provider: '${providerId}'` };
-  }
-  const resolved = await resolveApiKeyWithMeta(providerId);
-  if (!resolved || !resolved.apiKey) {
-    return {
-      error: `no API key for provider '${providerId}'.
-Set the env var ${spec.envVar} or save a key via /login.`
-    };
-  }
-  const { resolveBaseUrl: resolveBaseUrl2 } = await Promise.resolve().then(() => (init_openai_compatible(), openai_compatible_exports));
-  return {
-    apiKey: resolved.apiKey,
-    baseUrl: resolveBaseUrl2(providerId)
-  };
-}
-function resolveHeadlessProvider(opts) {
-  const provider = opts.provider ?? getActiveProvider().id;
-  const model = opts.model ?? getModelForProvider(provider);
-  return { provider, model };
-}
-function emitEvent(event) {
-  process.stdout.write(JSON.stringify(event) + "\n");
-}
-var init_headless = __esm({
-  "src/cli/headless.ts"() {
-    "use strict";
-    init_keyStore();
-    init_providerConfig();
-    init_openai_compatible();
-    init_phase();
-    init_mode();
-    init_runtime2();
-  }
-});
-
-// src/cli/headlessSpine.ts
-var headlessSpine_exports = {};
-__export(headlessSpine_exports, {
-  derivedModelSeed: () => derivedModelSeed,
-  exportSessionById: () => exportSessionById,
-  missionStateFromSpine: () => missionStateFromSpine,
-  openHeadlessSpine: () => openHeadlessSpine,
-  resolveHeadlessProfileId: () => resolveHeadlessProfileId,
-  seedHeadlessModelHistory: () => seedHeadlessModelHistory,
-  sessionStartedEvent: () => sessionStartedEvent
-});
-function sessionStartedEvent(handle) {
-  return {
-    type: "session_started",
-    sessionId: handle.sessionId,
-    spine: handle.spine.status
-  };
-}
-function resolveHeadlessProfileId(mode, explicit) {
-  if (explicit) return resolveProfile(explicit).id;
-  return defaultProfileForMode(mode ?? "kraken");
-}
-async function openHeadlessSpine(opts) {
-  const profileId = resolveHeadlessProfileId(opts.mode, opts.profile);
-  let profileTools = [];
-  try {
-    profileTools = resolveProfile(profileId).tools;
-  } catch {
-    profileTools = [];
-  }
-  const extra = {
-    profile: profileId,
-    workspace: opts.workspace ?? process.cwd(),
-    toolManifestHash: profileTools.length > 0 ? toolManifestHash(profileTools) : void 0
-  };
-  const mirrorOpts = {
-    baseDir: opts.baseDir,
-    quiet: opts.quiet,
-    extraStarted: extra
-  };
-  const spine = await SessionSpineMirror.adopt(opts.sessionId, mirrorOpts);
-  if (spine.status === "active") {
-    spine.note("headless.profile", { profile: profileId, mode: opts.mode ?? "kraken" });
-  }
-  return {
-    sessionId: opts.sessionId,
-    profileId,
-    spine,
-    observe(ev) {
-      if (ev && typeof ev === "object" && "type" in ev) {
-        spine.mirrorBrainEvent(ev);
-      }
-    },
-    userMessage(text) {
-      spine.userMessage(text);
-    },
-    verificationRun(payload) {
-      spine.verificationRun(payload);
-    },
-    appendEvent(input) {
-      return spine.appendEvent(input);
-    },
-    lastVerificationRun() {
-      return spine.lastVerificationRun();
-    },
-    missionPhase(phase2, note) {
-      spine.missionPhase(phase2, note);
-    },
-    missionProgress(advice) {
-      spine.missionProgress(advice);
-    },
-    note(text, data) {
-      spine.note(text, data);
-    },
-    async close(reason = "host-exit") {
-      await spine.close(reason);
-    },
-    async interrupt(note) {
-      if (note) spine.note("headless.interrupt", { note });
-      await spine.release();
-    },
-    async exportJson() {
-      try {
-        const store6 = new SessionStore(resolveSessionsDir({ baseDir: opts.baseDir }));
-        if (!await store6.exists(opts.sessionId)) return null;
-        return await exportSessionJson(store6, opts.sessionId);
-      } catch {
-        return null;
-      }
-    }
-  };
-}
-async function exportSessionById(sessionId2, baseDir) {
-  try {
-    const store6 = SessionStore.withDefaults(baseDir ? { baseDir } : {});
-    if (!await store6.exists(sessionId2)) {
-      return { ok: false, error: `session not found: ${sessionId2}` };
-    }
-    return { ok: true, json: await exportSessionJson(store6, sessionId2) };
-  } catch (err) {
-    return { ok: false, error: err instanceof Error ? err.message : String(err) };
-  }
-}
-async function missionStateFromSpine(sessionId2, baseDir) {
-  try {
-    const store6 = SessionStore.withDefaults(baseDir ? { baseDir } : {});
-    if (!await store6.exists(sessionId2)) return null;
-    const projection = await store6.projection(sessionId2);
-    return deriveMissionState(projection);
-  } catch {
-    return null;
-  }
-}
-async function seedHeadlessModelHistory(handle, legacy) {
-  const mirror = handle.spine;
-  const legacySeed = filterLegacySeed(legacy);
-  if (mirror.status !== "active") {
-    return { history: legacySeed, importedCount: 0, source: "legacy-fallback" };
-  }
-  const existing = await mirror.derivedPriorTurns();
-  if (existing && existing.length > 0) {
-    return { history: derivedModelSeed(existing), importedCount: 0, source: "spine" };
-  }
-  if (legacySeed.length === 0) {
-    return { history: [], importedCount: 0, source: "spine" };
-  }
-  for (const m of legacySeed) {
-    if (m.role === "user") {
-      mirror.userMessage(m.content);
-    } else {
-      mirror.assistantMessage(m.content, { imported: "legacy-history" });
-    }
-  }
-  await mirror.flush();
-  const derived = await mirror.derivedPriorTurns() ?? [];
-  return {
-    history: derivedModelSeed(derived),
-    importedCount: legacySeed.length,
-    source: "spine-import"
-  };
-}
-function filterLegacySeed(legacy) {
-  return (legacy ?? []).filter((m) => m.role === "user" || m.role === "assistant").map(
-    (m) => m.role === "assistant" && m.content ? {
-      role: "assistant",
-      content: cleanAgentContent(m.content, {
-        stripQuestion: false,
-        stripThink: false
-      })
-    } : { role: m.role, content: m.content ?? "" }
-  ).filter((m) => (m.content ?? "").trim().length > 0);
-}
-function derivedModelSeed(derived) {
-  return derivedToAgentMessages(derived).map(
-    (m) => m.role === "system" ? { role: "user", content: m.content } : m
-  ).map(
-    (m) => m.role === "assistant" && m.content ? {
-      role: "assistant",
-      content: cleanAgentContent(m.content, {
-        stripQuestion: false,
-        stripThink: false
-      })
-    } : m
-  ).filter((m) => m.role === "user" || m.role === "assistant").filter((m) => (m.content ?? "").trim().length > 0);
-}
-var init_headlessSpine = __esm({
-  "src/cli/headlessSpine.ts"() {
-    "use strict";
-    init_dist();
-    init_session();
-    init_mission2();
-    init_runtime2();
-    init_sessionSpine();
-    init_headless();
-  }
-});
-
-// src/cli/state/fileStateStore.ts
-import { createHash as createHash11, randomUUID as randomUUID2 } from "node:crypto";
-import { promises as fs21 } from "node:fs";
-import * as path41 from "node:path";
-function shortId() {
-  return randomUUID2().replace(/-/g, "").slice(0, 12);
-}
-async function writeJsonAtomic(filePath, data) {
-  await fs21.mkdir(path41.dirname(filePath), { recursive: true });
-  const tmp = `${filePath}.${process.pid}.${Date.now()}.tmp`;
-  await fs21.writeFile(tmp, JSON.stringify(data, null, 2) + "\n", "utf8");
-  await fs21.rename(tmp, filePath);
-}
-async function readJsonFile(filePath) {
-  try {
-    const raw = await fs21.readFile(filePath, "utf8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-function defaultSummary(input, discoveries) {
-  if (input.summary?.trim()) return input.summary.trim();
-  const lines = [
-    `# ${input.label}`,
-    "",
-    `- mode: ${input.mode}`,
-    input.layer ? `- layer: ${input.layer}` : null,
-    `- verification: ran=${input.verification.ran} ok=${input.verification.ok}`,
-    "",
-    "## Discoveries",
-    ...discoveries.map((d) => `- [${d.kind}] ${d.summary}`)
-  ].filter((x) => x !== null);
-  return lines.join("\n");
-}
-function stripStored(s) {
-  const { artifactDir: _a3, ...meta3 } = s;
-  return meta3;
-}
-function isStateEnabled(env = process.env) {
-  return env.ZELARI_STATE !== "0";
-}
-async function getStateStore(projectRoot, env = process.env) {
-  if (!isStateEnabled(env)) return new NoopDurableStateStore();
-  const store6 = new FileDurableStateStore();
-  try {
-    await store6.init(projectRoot);
-    return store6;
-  } catch {
-    return new NoopDurableStateStore();
-  }
-}
-function hashStablePrompt(stable) {
-  return createHash11("sha256").update(stable, "utf8").digest("hex").slice(0, 16);
-}
-var DEFAULT_MATERIALIZE_CHARS, FileDurableStateStore, NoopDurableStateStore;
-var init_fileStateStore = __esm({
-  "src/cli/state/fileStateStore.ts"() {
-    "use strict";
-    DEFAULT_MATERIALIZE_CHARS = 4e3;
-    FileDurableStateStore = class {
-      root = "";
-      stateDir = "";
-      commitsDir = "";
-      artifactsDir = "";
-      headPath = "";
-      indexPath = "";
-      async init(projectRoot) {
-        this.root = projectRoot;
-        this.stateDir = path41.join(projectRoot, ".zelari", "state");
-        this.commitsDir = path41.join(this.stateDir, "commits");
-        this.artifactsDir = path41.join(this.stateDir, "artifacts");
-        this.headPath = path41.join(this.stateDir, "HEAD.json");
-        this.indexPath = path41.join(this.stateDir, "index.jsonl");
-        await fs21.mkdir(this.commitsDir, { recursive: true });
-        await fs21.mkdir(this.artifactsDir, { recursive: true });
-      }
-      async commit(input) {
-        if (!input.force && input.verification.ran && !input.verification.ok) {
-          throw new Error(
-            "DurableStateStore.commit refused: verification ran and failed (pass force:true for soft commit)"
-          );
-        }
-        const discoveries = input.discoveries ?? [];
-        const parent = await this.head();
-        const id = shortId();
-        const artifactRel = path41.join("artifacts", id);
-        const artifactAbs = path41.join(this.artifactsDir, id);
-        await fs21.mkdir(artifactAbs, { recursive: true });
-        const summary = defaultSummary(input, discoveries);
-        await fs21.writeFile(path41.join(artifactAbs, "summary.md"), summary + "\n", "utf8");
-        await writeJsonAtomic(path41.join(artifactAbs, "discoveries.json"), discoveries);
-        await writeJsonAtomic(path41.join(artifactAbs, "verification.json"), input.verification);
-        const meta3 = {
-          id,
-          parentId: parent?.id ?? null,
-          createdAt: Date.now(),
-          sessionId: input.sessionId,
-          mode: input.mode,
-          layer: input.layer,
-          label: input.label,
-          workspaceCheckpointId: input.workspaceCheckpointId,
-          verification: {
-            ...input.verification,
-            reportPath: input.verification.reportPath ?? path41.join(".zelari", "state", artifactRel, "verification.json").replace(/\\/g, "/")
-          },
-          changedPaths: input.changedPaths ?? [],
-          stablePromptHash: input.stablePromptHash,
-          discoveryCount: discoveries.length,
-          artifactDir: artifactRel.replace(/\\/g, "/")
-        };
-        await writeJsonAtomic(path41.join(this.commitsDir, `${id}.json`), meta3);
-        await writeJsonAtomic(this.headPath, { id, updatedAt: meta3.createdAt });
-        await fs21.appendFile(this.indexPath, JSON.stringify({ id, createdAt: meta3.createdAt, label: meta3.label }) + "\n", "utf8");
-        return stripStored(meta3);
-      }
-      async head() {
-        const head = await readJsonFile(this.headPath);
-        if (!head?.id) return null;
-        return this.get(head.id);
-      }
-      async get(id) {
-        const stored = await readJsonFile(path41.join(this.commitsDir, `${id}.json`));
-        return stored ? stripStored(stored) : null;
-      }
-      async list(limit = 20) {
-        let raw;
-        try {
-          raw = await fs21.readFile(this.indexPath, "utf8");
-        } catch {
-          return [];
-        }
-        const ids = [];
-        for (const line of raw.split("\n")) {
-          const t = line.trim();
-          if (!t) continue;
-          try {
-            const row = JSON.parse(t);
-            if (row.id) ids.push(row.id);
-          } catch {
-          }
-        }
-        const slice = ids.slice(-Math.max(1, limit)).reverse();
-        const out = [];
-        for (const id of slice) {
-          const m = await this.get(id);
-          if (m) out.push(m);
-        }
-        return out;
-      }
-      async setHead(id) {
-        const meta3 = await this.get(id);
-        if (!meta3) {
-          throw new Error(`DurableStateStore.setHead: unknown commit ${id}`);
-        }
-        await writeJsonAtomic(this.headPath, { id, updatedAt: Date.now() });
-        return meta3;
-      }
-      async loadDiscoveries(id) {
-        const meta3 = id ? await this.get(id) : await this.head();
-        if (!meta3) return [];
-        const stored = await readJsonFile(path41.join(this.commitsDir, `${meta3.id}.json`));
-        if (!stored?.artifactDir) return [];
-        const discPath = path41.join(this.stateDir, stored.artifactDir, "discoveries.json");
-        return await readJsonFile(discPath) ?? [];
+      async loadDiscoveries(id) {
+        const meta3 = id ? await this.get(id) : await this.head();
+        if (!meta3) return [];
+        const stored = await readJsonFile(path41.join(this.commitsDir, `${meta3.id}.json`));
+        if (!stored?.artifactDir) return [];
+        const discPath = path41.join(this.stateDir, stored.artifactDir, "discoveries.json");
+        return await readJsonFile(discPath) ?? [];
       }
       async materializeContext(id, maxChars = DEFAULT_MATERIALIZE_CHARS) {
         const meta3 = id ? await this.get(id) : await this.head();
@@ -41227,25 +41165,37 @@ function extractiveHistorySummary(dropped, opts) {
   if (dropped.length === 0) return "No prior turns.";
   const userGoals = [];
   const assistantNotes = [];
+  const userConstraints = [];
+  const unresolved = [];
+  const verification = [];
+  const decisions = [];
   const tools = /* @__PURE__ */ new Map();
   const files = /* @__PURE__ */ new Set();
   let toolResults = 0;
   for (const m of dropped) {
     if (m.role === "user" && m.content.trim()) {
-      userGoals.push(oneLine(m.content, 220));
+      const goal = oneLine(m.content, 220);
+      userGoals.push(goal);
+      if (/\b(must|never|required|only|do not|constraint|vincolo|deve|senza)\b/i.test(goal)) userConstraints.push(goal);
     } else if (m.role === "assistant") {
       if (m.content.trim()) {
-        assistantNotes.push(oneLine(m.content, 180));
+        const note = oneLine(m.content, 220);
+        assistantNotes.push(note);
+        if (/\b(fail|failed|error|unresolved|remaining|todo|blocked|gap|errore|fallit|irrisolt|manca)\b/i.test(note)) unresolved.push(note);
+        if (/\b(test|typecheck|build|verify|verification|passed|failed|green|red)\b/i.test(note)) verification.push(note);
+        if (/\b(decid|decision|chosen|choose|scelt|adopt|implement)\b/i.test(note)) decisions.push(note);
       }
       if (m.toolCalls) {
         for (const tc of m.toolCalls) {
           tools.set(tc.name, (tools.get(tc.name) ?? 0) + 1);
-          collectPaths(tc.args, files);
+          collectPaths2(tc.args, files);
         }
       }
     } else if (m.role === "tool") {
       toolResults += 1;
       collectPathsFromText(m.content, files);
+      if (/\b(fail|failed|error|exception|blocked|errore|fallit)\b/i.test(m.content)) unresolved.push(oneLine(m.content, 220));
+      if (/\b(test|typecheck|build|verify|passed|failed|success)\b/i.test(m.content)) verification.push(oneLine(m.content, 220));
     }
   }
   const parts = [
@@ -41256,6 +41206,22 @@ function extractiveHistorySummary(dropped, opts) {
     parts.push("## User goals / requests");
     for (const g of userGoals.slice(-6)) parts.push(`- ${g}`);
   }
+  if (userConstraints.length) {
+    parts.push("## User constraints (preserve exactly)");
+    for (const item of [...new Set(userConstraints)].slice(-8)) parts.push(`- ${item}`);
+  }
+  if (unresolved.length) {
+    parts.push("## Unresolved failures / pending repair");
+    for (const item of [...new Set(unresolved)].slice(-8)) parts.push(`- ${item}`);
+  }
+  if (verification.length) {
+    parts.push("## Latest verification state");
+    for (const item of [...new Set(verification)].slice(-6)) parts.push(`- ${item}`);
+  }
+  if (decisions.length) {
+    parts.push("## Recent active decisions");
+    for (const item of [...new Set(decisions)].slice(-6)) parts.push(`- ${item}`);
+  }
   if (assistantNotes.length) {
     parts.push("## Assistant conclusions (truncated)");
     for (const a of assistantNotes.slice(-5)) parts.push(`- ${a}`);
@@ -41282,7 +41248,7 @@ function oneLine(s, max) {
   if (t.length <= max) return t;
   return `${t.slice(0, max - 1)}\u2026`;
 }
-function collectPaths(args, out) {
+function collectPaths2(args, out) {
   if (!args || typeof args !== "object") return;
   const obj = args;
   for (const key of ["path", "file", "filepath", "filePath", "target", "cwd"]) {
@@ -41401,6 +41367,36 @@ Be concise.
 });
 
 // src/cli/hooks/historyCompaction.ts
+function compactedRangeFromDropped(dropped) {
+  if (dropped.length === 0) return void 0;
+  const seqs = [];
+  const sources = [];
+  for (const m of dropped) {
+    const hasCompactRange = typeof m.compactedFromSeq === "number" && Number.isInteger(m.compactedFromSeq) && m.compactedFromSeq > 0 && typeof m.compactedToSeq === "number" && Number.isInteger(m.compactedToSeq) && m.compactedToSeq >= m.compactedFromSeq;
+    if (hasCompactRange) {
+      seqs.push(m.compactedFromSeq, m.compactedToSeq);
+      sources.push(...m.sourceEventSeqs ?? []);
+      if (typeof m.seq === "number" && Number.isInteger(m.seq) && m.seq > 0) {
+        seqs.push(m.seq);
+        sources.push(m.seq);
+      }
+      continue;
+    }
+    if (typeof m.seq !== "number" || !Number.isInteger(m.seq) || m.seq < 1) return void 0;
+    seqs.push(m.seq);
+    sources.push(m.seq);
+  }
+  return {
+    fromSeq: Math.min(...seqs),
+    toSeq: Math.max(...seqs),
+    sourceEventSeqs: [...new Set(sources)]
+  };
+}
+function withDroppedRange(result, dropped, strategy) {
+  const range = compactedRangeFromDropped(dropped);
+  if (!range) return { ...result, strategy };
+  return { ...result, ...range, strategy };
+}
 function resolveMaxMessages(opts) {
   const envTurns = envNumber(process.env.ZELARI_HISTORY_TURNS, { default: 6, min: 0 });
   let turns = opts?.maxMessages ? Math.ceil(opts.maxMessages / 4) : envTurns;
@@ -41474,16 +41470,25 @@ function pruneToolResultsDetailed(messages, opts) {
 function compactHistory(messages, opts) {
   return compactHistoryDetailed(messages, opts).messages;
 }
-function buildCheckpointMessage(summaryText) {
+function buildCheckpointMessage(summaryText, range) {
   return {
     role: "user",
-    content: CHECKPOINT_WRAPPER_PREFIX + "\n\n<compacted-summary>\n" + summaryText + "\n</compacted-summary>"
+    content: CHECKPOINT_WRAPPER_PREFIX + "\n\n<compacted-summary>\n" + summaryText + "\n</compacted-summary>",
+    ...range ? {
+      compactedFromSeq: range.fromSeq,
+      compactedToSeq: range.toSeq,
+      sourceEventSeqs: [...range.sourceEventSeqs]
+    } : {}
   };
 }
 function compactHistoryDetailed(messages, opts) {
   const maxMessages = resolveMaxMessages(opts);
   if (maxMessages === 0) {
-    return { messages: [], compacted: true, messagesRemoved: messages.length, summary: "" };
+    return withDroppedRange(
+      { messages: [], compacted: true, messagesRemoved: messages.length, summary: "" },
+      messages,
+      "extractive"
+    );
   }
   if (messages.length <= maxMessages * 2 && !opts?.force) {
     return {
@@ -41504,19 +41509,25 @@ function compactHistoryDetailed(messages, opts) {
     };
   }
   const droppedMsgs = messages.slice(0, cut);
+  const droppedRange = compactedRangeFromDropped(droppedMsgs);
   const pruned = pruneToolResultsDetailed(messages.slice(cut));
   const kept = pruned.messages;
   const summaryText = extractiveHistorySummary(droppedMsgs);
   const summary = buildCheckpointMessage(
-    summaryText || `${COMPACT_MARKER} ${cut} earlier message(s) dropped.`
+    summaryText || `${COMPACT_MARKER} ${cut} earlier message(s) dropped.`,
+    droppedRange
+  );
+  return withDroppedRange(
+    {
+      messages: [summary, ...kept],
+      compacted: true,
+      messagesRemoved: cut,
+      summary: summary.content,
+      prunedToolResults: pruned.stats.pruned
+    },
+    droppedMsgs,
+    "extractive"
   );
-  return {
-    messages: [summary, ...kept],
-    compacted: true,
-    messagesRemoved: cut,
-    summary: summary.content,
-    prunedToolResults: pruned.stats.pruned
-  };
 }
 async function compactHistoryAsync(messages, opts) {
   const base = compactHistoryDetailed(messages, opts);
@@ -41552,16 +41563,21 @@ async function compactHistoryAsync(messages, opts) {
   }
   const pruned = pruneToolResultsDetailed(messages.slice(cut));
   const kept = pruned.messages;
-  const summary = buildCheckpointMessage(summaryText);
-  return {
-    messages: [summary, ...kept],
-    compacted: true,
-    messagesRemoved: cut,
-    summary: summaryText,
-    prunedToolResults: pruned.stats.pruned,
-    cacheReuseExpected,
-    replayExactPrefix
-  };
+  const summary = buildCheckpointMessage(summaryText, compactedRangeFromDropped(droppedMsgs));
+  const usedLlm = summaryText !== extractive && summaryText.trim().length > 40;
+  return withDroppedRange(
+    {
+      messages: [summary, ...kept],
+      compacted: true,
+      messagesRemoved: cut,
+      summary: summaryText,
+      prunedToolResults: pruned.stats.pruned,
+      cacheReuseExpected,
+      replayExactPrefix
+    },
+    droppedMsgs,
+    usedLlm ? "llm" : "extractive"
+  );
 }
 function roughTokens(msgs) {
   let n = 0;
@@ -41845,6 +41861,553 @@ var init_phaseState = __esm({
   }
 });
 
+// src/cli/phase.ts
+var phase_exports = {};
+__export(phase_exports, {
+  PHASES: () => PHASES,
+  PLAN_ALLOWED_WRITE_TOOLS: () => PLAN_ALLOWED_WRITE_TOOLS,
+  PLAN_BLOCKED_TOOLS: () => PLAN_BLOCKED_TOOLS,
+  describePhase: () => describePhase,
+  nextPhase: () => nextPhase,
+  parsePhase: () => parsePhase
+});
+function parsePhase(input) {
+  const v = input.trim().toLowerCase();
+  return PHASES.includes(v) ? v : null;
+}
+function nextPhase(current) {
+  return current === "plan" ? "build" : "plan";
+}
+function describePhase(phase2) {
+  switch (phase2) {
+    case "plan":
+      return "plan \u2014 explore & design only (no project writes; plan files allowed)";
+    default:
+      return "build \u2014 implement with full tools";
+  }
+}
+var PHASES, PLAN_ALLOWED_WRITE_TOOLS, PLAN_BLOCKED_TOOLS;
+var init_phase = __esm({
+  "src/cli/phase.ts"() {
+    "use strict";
+    PHASES = ["plan", "build"];
+    PLAN_ALLOWED_WRITE_TOOLS = /* @__PURE__ */ new Set([
+      // Workspace plan/docs — intentional plan-mode outputs
+      "createPlan",
+      "createTask",
+      "updateTask",
+      "createMilestone",
+      "createDocument",
+      "createDecision",
+      "linkDocuments"
+      // Soft writes that only touch .zelari / plan paths are still gated in
+      // toolRegistry by path when needed; write_file/edit_file stay DENIED.
+    ]);
+    PLAN_BLOCKED_TOOLS = /* @__PURE__ */ new Set([
+      "write_file",
+      "edit_file",
+      "apply_diff",
+      "bash"
+    ]);
+  }
+});
+
+// src/cli/mode.ts
+function nextMode(current) {
+  const i = MODES.indexOf(current);
+  return MODES[(i + 1) % MODES.length] ?? "kraken";
+}
+function parseMode(input) {
+  const v = input.trim().toLowerCase();
+  if (MODES.includes(v)) return v;
+  return MODE_ALIASES[v] ?? null;
+}
+function describeMode(mode) {
+  switch (mode) {
+    case "council":
+      return "council \u2014 multi-member plan/design (Caronte\u2026Lucifero; build needs ZELARI_COUNCIL_CAN_BUILD=1)";
+    case "zelari":
+      return "zelari \u2014 mission: plan@council \u2192 build@kraken (legacy: ZELARI_BUILD_VIA_AGENT=0)";
+    default:
+      return "kraken \u2014 super-agent lead (spawns explore/general/verify tentacles; default implementer)";
+  }
+}
+var MODES, MODE_ALIASES;
+var init_mode = __esm({
+  "src/cli/mode.ts"() {
+    "use strict";
+    MODES = ["kraken", "council", "zelari"];
+    MODE_ALIASES = {
+      agent: "kraken",
+      single: "kraken"
+    };
+  }
+});
+
+// src/cli/headless.ts
+import { readFileSync as readFileSync22 } from "node:fs";
+function defaultProfileForMode(mode) {
+  switch (mode) {
+    case "council":
+      return "council/v1";
+    case "zelari":
+      return "mission/v1";
+    default:
+      return "kraken/v1";
+  }
+}
+function parseHeadlessFlags(argv) {
+  if (!argv.includes("--headless")) {
+    return { options: null };
+  }
+  let task;
+  let output = "json";
+  let mode = "kraken";
+  let phase2 = "build";
+  let modeExplicit = false;
+  let councilFlag = false;
+  let provider;
+  let model;
+  let history2;
+  let todos2;
+  let once = false;
+  let profile;
+  let resumeSessionId;
+  let exportSessionPath;
+  let strictDone = false;
+  let krakenGraph;
+  let planOnly = process.env.ZELARI_KRAKEN_PLAN_ONLY === "1" || process.env.ZELARI_KRAKEN_PLAN_ONLY === "true";
+  let runPlan = process.env.ZELARI_KRAKEN_RUN_PLAN;
+  let gauntlet = process.env.ZELARI_GAUNTLET === "1" || process.env.ZELARI_GAUNTLET === "true";
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--headless") continue;
+    if (arg === "--output") {
+      const next = argv[i + 1];
+      if (next === "json" || next === "plain") {
+        output = next;
+        i++;
+      } else {
+        return {
+          options: null,
+          error: `--output requires 'json' or 'plain', got '${next ?? "(missing)"}'`
+        };
+      }
+    } else if (arg === "--task") {
+      task = argv[i + 1];
+      i++;
+    } else if (arg === "--task-file") {
+      const next = argv[i + 1];
+      if (next) {
+        try {
+          const fromFile = readFileSync22(next, "utf-8");
+          if (fromFile.trim()) task = fromFile;
+        } catch {
+        }
+      }
+      i++;
+    } else if (arg === "--council") {
+      councilFlag = true;
+    } else if (arg === "--mode") {
+      const next = argv[i + 1];
+      const parsed = next ? parseMode(next) : null;
+      if (!parsed) {
+        return {
+          options: null,
+          error: `--mode requires 'kraken', 'council', or 'zelari' (agent=alias), got '${next ?? "(missing)"}'`
+        };
+      }
+      mode = parsed;
+      modeExplicit = true;
+      i++;
+    } else if (arg === "--phase") {
+      const next = argv[i + 1];
+      const parsed = next ? parsePhase(next) : null;
+      if (!parsed) {
+        return {
+          options: null,
+          error: `--phase requires 'plan' or 'build', got '${next ?? "(missing)"}'`
+        };
+      }
+      phase2 = parsed;
+      i++;
+    } else if (arg === "--provider") {
+      provider = argv[i + 1];
+      i++;
+    } else if (arg === "--model") {
+      model = argv[i + 1];
+      i++;
+    } else if (arg === "--history" || arg === "--history-file") {
+      const next = argv[i + 1];
+      if (next) {
+        let raw = null;
+        if (arg === "--history-file") {
+          try {
+            raw = readFileSync22(next, "utf-8");
+          } catch {
+            raw = null;
+          }
+        } else {
+          raw = next;
+        }
+        if (raw) {
+          try {
+            const parsedHist = JSON.parse(raw);
+            if (Array.isArray(parsedHist)) {
+              history2 = parsedHist.filter(
+                (m) => !!m && typeof m === "object" && typeof m.role === "string"
+              ).map((m) => {
+                const role = String(m.role);
+                const raw2 = m.content;
+                const content = typeof raw2 === "string" ? raw2 : raw2 == null ? "" : typeof raw2 === "object" ? JSON.stringify(raw2) : String(raw2);
+                const msg = {
+                  role,
+                  content
+                };
+                if (typeof m.toolCallId === "string") {
+                  msg.toolCallId = m.toolCallId;
+                }
+                return msg;
+              }).filter(
+                (m) => m.role === "user" || m.role === "assistant" || m.role === "tool" || m.role === "system"
+              );
+            }
+          } catch {
+          }
+        }
+        i++;
+      }
+    } else if (arg === "--todos") {
+      const next = argv[i + 1];
+      if (next) {
+        try {
+          const parsed = JSON.parse(next);
+          if (Array.isArray(parsed)) {
+            todos2 = parsed.filter(
+              (t) => !!t && typeof t === "object" && typeof t.content === "string"
+            ).map((t) => ({
+              id: typeof t.id === "string" ? t.id : void 0,
+              content: String(t.content).slice(0, 500),
+              status: t.status
+            }));
+          }
+        } catch {
+        }
+        i++;
+      }
+    } else if (arg === "--once") {
+      once = true;
+    } else if (arg === "--profile") {
+      const next = argv[i + 1];
+      if (!next || next.startsWith("--")) {
+        return { options: null, error: `--profile requires a profile id (e.g. kraken/v1), got '${next ?? "(missing)"}'` };
+      }
+      try {
+        resolveProfile(next);
+      } catch (err) {
+        return {
+          options: null,
+          error: err instanceof Error ? err.message : String(err)
+        };
+      }
+      profile = next;
+      i++;
+    } else if (arg === "--resume") {
+      const next = argv[i + 1];
+      if (!next || next.startsWith("--")) {
+        return { options: null, error: `--resume requires a session id, got '${next ?? "(missing)"}'` };
+      }
+      resumeSessionId = next;
+      i++;
+    } else if (arg === "--export-session") {
+      const next = argv[i + 1];
+      if (!next || next.startsWith("--")) {
+        return { options: null, error: `--export-session requires a path (or - for stdout), got '${next ?? "(missing)"}'` };
+      }
+      exportSessionPath = next;
+      i++;
+    } else if (arg === "--strict-done") {
+      strictDone = true;
+    } else if (arg === "--no-strict-done") {
+      strictDone = false;
+      process.env.ZELARI_MISSION_STRICT = "0";
+    } else if (arg === "--kraken-graph") {
+      krakenGraph = argv[i + 1];
+      i++;
+    } else if (arg === "--kraken-graph-file") {
+      const next = argv[i + 1];
+      if (next) {
+        try {
+          const fromFile = readFileSync22(next, "utf-8");
+          if (fromFile.trim()) krakenGraph = fromFile;
+        } catch {
+        }
+      }
+      i++;
+    } else if (arg === "--plan-only") {
+      planOnly = true;
+    } else if (arg === "--run-plan") {
+      runPlan = argv[i + 1];
+      i++;
+    } else if (arg === "--gauntlet") {
+      gauntlet = true;
+    } else if (arg === "--no-gauntlet") {
+      gauntlet = false;
+    }
+  }
+  if (councilFlag && !modeExplicit) {
+    mode = "council";
+  } else if (councilFlag && modeExplicit && mode !== "council") {
+    return {
+      options: null,
+      error: `--council conflicts with --mode ${mode}`
+    };
+  }
+  if (task && krakenGraph) {
+    return { options: null, error: "--task and --kraken-graph are mutually exclusive" };
+  }
+  if ((!task || task.trim().length === 0) && (!krakenGraph || krakenGraph.trim().length === 0)) {
+    return { options: null, error: "--headless requires --task <prompt> or --kraken-graph <goal>" };
+  }
+  return {
+    options: {
+      task: task ?? "",
+      output,
+      mode,
+      phase: phase2,
+      useCouncil: mode === "council",
+      provider,
+      model,
+      ...history2 && history2.length > 0 ? { history: history2 } : {},
+      ...todos2 && todos2.length > 0 ? { todos: todos2 } : {},
+      ...once ? { once: true } : {},
+      ...profile ? { profile } : {},
+      ...resumeSessionId ? { resumeSessionId } : {},
+      ...exportSessionPath ? { exportSessionPath } : {},
+      ...strictDone ? { strictDone: true } : {},
+      ...krakenGraph ? { krakenGraph } : {},
+      ...planOnly ? { planOnly: true } : {},
+      ...runPlan ? { runPlan } : {},
+      ...gauntlet ? { gauntlet: true } : {}
+    }
+  };
+}
+async function resolveHeadlessKey(providerId) {
+  const spec = PROVIDERS.find((p3) => p3.id === providerId);
+  if (!spec) {
+    return { error: `unknown provider: '${providerId}'` };
+  }
+  const resolved = await resolveApiKeyWithMeta(providerId);
+  if (!resolved || !resolved.apiKey) {
+    return {
+      error: `no API key for provider '${providerId}'.
+Set the env var ${spec.envVar} or save a key via /login.`
+    };
+  }
+  const { resolveBaseUrl: resolveBaseUrl2 } = await Promise.resolve().then(() => (init_openai_compatible(), openai_compatible_exports));
+  return {
+    apiKey: resolved.apiKey,
+    baseUrl: resolveBaseUrl2(providerId)
+  };
+}
+function resolveHeadlessProvider(opts) {
+  const provider = opts.provider ?? getActiveProvider().id;
+  const model = opts.model ?? getModelForProvider(provider);
+  return { provider, model };
+}
+function emitEvent(event) {
+  process.stdout.write(JSON.stringify(event) + "\n");
+}
+var init_headless = __esm({
+  "src/cli/headless.ts"() {
+    "use strict";
+    init_keyStore();
+    init_providerConfig();
+    init_openai_compatible();
+    init_phase();
+    init_mode();
+    init_runtime2();
+  }
+});
+
+// src/cli/headlessSpine.ts
+var headlessSpine_exports = {};
+__export(headlessSpine_exports, {
+  derivedModelSeed: () => derivedModelSeed,
+  exportSessionById: () => exportSessionById,
+  missionStateFromSpine: () => missionStateFromSpine,
+  openHeadlessSpine: () => openHeadlessSpine,
+  resolveHeadlessProfileId: () => resolveHeadlessProfileId,
+  seedHeadlessModelHistory: () => seedHeadlessModelHistory,
+  sessionStartedEvent: () => sessionStartedEvent
+});
+function sessionStartedEvent(handle) {
+  return {
+    type: "session_started",
+    sessionId: handle.sessionId,
+    spine: handle.spine.status
+  };
+}
+function resolveHeadlessProfileId(mode, explicit) {
+  if (explicit) return resolveProfile(explicit).id;
+  return defaultProfileForMode(mode ?? "kraken");
+}
+async function openHeadlessSpine(opts) {
+  const profileId = resolveHeadlessProfileId(opts.mode, opts.profile);
+  let profileTools = [];
+  try {
+    profileTools = resolveProfile(profileId).tools;
+  } catch {
+    profileTools = [];
+  }
+  const extra = {
+    profile: profileId,
+    workspace: opts.workspace ?? process.cwd(),
+    toolManifestHash: profileTools.length > 0 ? toolManifestHash(profileTools) : void 0
+  };
+  const mirrorOpts = {
+    baseDir: opts.baseDir,
+    quiet: opts.quiet,
+    extraStarted: extra
+  };
+  const spine = await SessionSpineMirror.adopt(opts.sessionId, mirrorOpts);
+  if (spine.status === "active") {
+    spine.note("headless.profile", { profile: profileId, mode: opts.mode ?? "kraken" });
+  }
+  return {
+    sessionId: opts.sessionId,
+    profileId,
+    spine,
+    observe(ev) {
+      if (ev && typeof ev === "object" && "type" in ev) {
+        spine.mirrorBrainEvent(ev);
+      }
+    },
+    userMessage(text) {
+      spine.userMessage(text);
+    },
+    verificationRun(payload) {
+      spine.verificationRun(payload);
+    },
+    appendEvent(input) {
+      return spine.appendEvent(input);
+    },
+    lastVerificationRun() {
+      return spine.lastVerificationRun();
+    },
+    missionPhase(phase2, note) {
+      spine.missionPhase(phase2, note);
+    },
+    missionProgress(advice) {
+      spine.missionProgress(advice);
+    },
+    note(text, data) {
+      spine.note(text, data);
+    },
+    async close(reason = "host-exit") {
+      await spine.close(reason);
+    },
+    async interrupt(note) {
+      if (note) spine.note("headless.interrupt", { note });
+      await spine.release();
+    },
+    async exportJson() {
+      try {
+        const store6 = new SessionStore(resolveSessionsDir({ baseDir: opts.baseDir }));
+        if (!await store6.exists(opts.sessionId)) return null;
+        return await exportSessionJson(store6, opts.sessionId);
+      } catch {
+        return null;
+      }
+    }
+  };
+}
+async function exportSessionById(sessionId2, baseDir) {
+  try {
+    const store6 = SessionStore.withDefaults(baseDir ? { baseDir } : {});
+    if (!await store6.exists(sessionId2)) {
+      return { ok: false, error: `session not found: ${sessionId2}` };
+    }
+    return { ok: true, json: await exportSessionJson(store6, sessionId2) };
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+}
+async function missionStateFromSpine(sessionId2, baseDir) {
+  try {
+    const store6 = SessionStore.withDefaults(baseDir ? { baseDir } : {});
+    if (!await store6.exists(sessionId2)) return null;
+    const projection = await store6.projection(sessionId2);
+    return deriveMissionState(projection);
+  } catch {
+    return null;
+  }
+}
+async function seedHeadlessModelHistory(handle, legacy) {
+  const mirror = handle.spine;
+  const legacySeed = filterLegacySeed(legacy);
+  if (mirror.status !== "active") {
+    return { history: legacySeed, importedCount: 0, source: "legacy-fallback" };
+  }
+  const existing = await mirror.derivedPriorTurns();
+  if (existing && existing.length > 0) {
+    return { history: derivedModelSeed(existing), importedCount: 0, source: "spine" };
+  }
+  if (legacySeed.length === 0) {
+    return { history: [], importedCount: 0, source: "spine" };
+  }
+  for (const m of legacySeed) {
+    if (m.role === "user") {
+      mirror.userMessage(m.content);
+    } else {
+      mirror.assistantMessage(m.content, { imported: "legacy-history" });
+    }
+  }
+  await mirror.flush();
+  const derived = await mirror.derivedPriorTurns() ?? [];
+  return {
+    history: derivedModelSeed(derived),
+    importedCount: legacySeed.length,
+    source: "spine-import"
+  };
+}
+function filterLegacySeed(legacy) {
+  return (legacy ?? []).filter((m) => m.role === "user" || m.role === "assistant").map(
+    (m) => m.role === "assistant" && m.content ? {
+      role: "assistant",
+      content: cleanAgentContent(m.content, {
+        stripQuestion: false,
+        stripThink: false
+      })
+    } : { role: m.role, content: m.content ?? "" }
+  ).filter((m) => (m.content ?? "").trim().length > 0);
+}
+function derivedModelSeed(derived) {
+  return derivedToAgentMessages(derived).map(
+    (m) => m.role === "system" ? { ...m, role: "user" } : m
+  ).map(
+    (m) => m.role === "assistant" && m.content ? {
+      ...m,
+      content: cleanAgentContent(m.content, {
+        stripQuestion: false,
+        stripThink: false
+      }),
+      ...m.seq !== void 0 ? { seq: m.seq } : {}
+    } : m
+  ).filter((m) => m.role === "user" || m.role === "assistant").filter((m) => (m.content ?? "").trim().length > 0);
+}
+var init_headlessSpine = __esm({
+  "src/cli/headlessSpine.ts"() {
+    "use strict";
+    init_dist();
+    init_session();
+    init_mission2();
+    init_runtime2();
+    init_sessionSpine();
+    init_headless();
+  }
+});
+
 // src/cli/provider/localCli/claudeStreamJson.ts
 function textBlock(text) {
   return { type: "text", text };
@@ -41985,10 +42548,10 @@ __export(claudeProvider_exports, {
   createLocalCliProvider: () => createLocalCliProvider
 });
 import { spawn as spawn11 } from "node:child_process";
-function waitForExit(child, timeoutMs = 2e3) {
+function waitForExit(child, timeoutMs2 = 2e3) {
   return new Promise((resolve3) => {
     if (child.exitCode != null) return resolve3(child.exitCode);
-    const timer = setTimeout(() => resolve3(child.exitCode ?? null), timeoutMs);
+    const timer = setTimeout(() => resolve3(child.exitCode ?? null), timeoutMs2);
     timer.unref?.();
     child.once("exit", (code) => {
       clearTimeout(timer);
@@ -43559,10 +44122,10 @@ function distTagForVersion(version2) {
 function registryUrlForTag(tag = distTagForVersion(getCurrentVersion())) {
   return `https://registry.npmjs.org/zelari-code/${tag}`;
 }
-async function fetchLatestVersion(fetcher = fetch, registryUrl = REGISTRY_URL, timeoutMs = 5e3) {
+async function fetchLatestVersion(fetcher = fetch, registryUrl = REGISTRY_URL, timeoutMs2 = 5e3) {
   try {
     const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    const timer = setTimeout(() => controller.abort(), timeoutMs2);
     const response = await fetcher(registryUrl, { signal: controller.signal });
     clearTimeout(timer);
     if (!response.ok) {
@@ -43732,11 +44295,11 @@ var init_mcpClient = __esm({
        * Call a tool. Returns the concatenated text content; non-text content
        * items are summarized by type. Throws when the server flags isError.
        */
-      async callTool(name, args, timeoutMs = DEFAULT_REQUEST_TIMEOUT_MS) {
+      async callTool(name, args, timeoutMs2 = DEFAULT_REQUEST_TIMEOUT_MS) {
         const res = await this.request(
           "tools/call",
           { name, arguments: args },
-          timeoutMs
+          timeoutMs2
         );
         const text = (res.content ?? []).map(
           (c) => c.type === "text" && typeof c.text === "string" ? c.text : `[${c.type ?? "unknown"} content]`
@@ -43753,7 +44316,7 @@ var init_mcpClient = __esm({
         this.child = null;
       }
       // ── JSON-RPC plumbing ────────────────────────────────────────────────
-      request(method, params, timeoutMs = DEFAULT_REQUEST_TIMEOUT_MS) {
+      request(method, params, timeoutMs2 = DEFAULT_REQUEST_TIMEOUT_MS) {
         const child = this.child;
         if (!child)
           return Promise.reject(new Error(`[mcp:${this.serverName}] not started`));
@@ -43764,10 +44327,10 @@ var init_mcpClient = __esm({
             this.pending.delete(id);
             reject(
               new Error(
-                `[mcp:${this.serverName}] ${method} timed out after ${timeoutMs}ms`
+                `[mcp:${this.serverName}] ${method} timed out after ${timeoutMs2}ms`
               )
             );
-          }, timeoutMs);
+          }, timeoutMs2);
           this.pending.set(id, { resolve: resolve3, reject, timer });
           child.stdin.write(payload + "\n", (err) => {
             if (err) {
@@ -44841,7 +45404,7 @@ function pickSmokeScript(scripts) {
   }
   return null;
 }
-async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS3) {
+async function runProjectSmoke(projectRoot, timeoutMs2 = DEFAULT_TIMEOUT_MS3) {
   if (process.env["ZELARI_SMOKE"] === "0") {
     return { ran: false, reason: "ZELARI_SMOKE=0 (disabled)" };
   }
@@ -44874,7 +45437,7 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS3) {
     let stdout = "";
     let stderr = "";
     let settled = false;
-    const finish = (result) => {
+    const finish2 = (result) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
@@ -44882,15 +45445,15 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS3) {
     };
     const timer = setTimeout(() => {
       child.kill("SIGTERM");
-      finish({
+      finish2({
         ran: true,
         ok: false,
         script,
         exitCode: -1,
         output: stdout + stderr,
-        reason: `smoke timeout after ${timeoutMs}ms`
+        reason: `smoke timeout after ${timeoutMs2}ms`
       });
-    }, timeoutMs);
+    }, timeoutMs2);
     child.stdout?.on("data", (chunk) => {
       stdout += chunk.toString("utf8");
     });
@@ -44898,7 +45461,7 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS3) {
       stderr += chunk.toString("utf8");
     });
     child.on("error", (err) => {
-      finish({
+      finish2({
         ran: true,
         ok: false,
         script,
@@ -44910,7 +45473,7 @@ async function runProjectSmoke(projectRoot, timeoutMs = DEFAULT_TIMEOUT_MS3) {
     child.on("close", (code) => {
       const exitCode = code ?? -1;
       const ok = exitCode === 0;
-      finish({
+      finish2({
         ran: true,
         ok,
         script,
@@ -46519,7 +47082,7 @@ function startPermissionBroker(socketPath, handlers, opts) {
           const closeAll = server.closeAllConnections;
           if (typeof closeAll === "function") closeAll.call(server);
           let done = false;
-          const finish = () => {
+          const finish2 = () => {
             if (done) return;
             done = true;
             if (process.platform !== "win32") {
@@ -46528,8 +47091,8 @@ function startPermissionBroker(socketPath, handlers, opts) {
               res();
             }
           };
-          server.close(() => finish());
-          setTimeout(finish, 1e3).unref?.();
+          server.close(() => finish2());
+          setTimeout(finish2, 1e3).unref?.();
         })
       });
     });
@@ -46966,13 +47529,13 @@ async function createDefaultLlmClient(opts) {
   const llm = await resolveLlm(opts);
   return {
     async complete({ system, user }) {
-      const timeoutMs = resolvePlannerTimeoutMs();
+      const timeoutMs2 = resolvePlannerTimeoutMs();
       const controller = new AbortController();
       let timedOut = false;
-      const t = timeoutMs > 0 ? setTimeout(() => {
+      const t = timeoutMs2 > 0 ? setTimeout(() => {
         timedOut = true;
         controller.abort();
-      }, timeoutMs) : void 0;
+      }, timeoutMs2) : void 0;
       try {
         const url2 = `${llm.baseUrl.replace(/\/$/, "")}/chat/completions`;
         let res;
@@ -46998,7 +47561,7 @@ async function createDefaultLlmClient(opts) {
         } catch (err) {
           if (timedOut) {
             throw new PlannerTransportError(
-              `Planner request timed out after ${Math.round(timeoutMs / 1e3)}s (no response). Raise ZELARI_KRAKEN_PLANNER_TIMEOUT_MS, or set ZELARI_KRAKEN_PLANNER_MODEL to a faster non-reasoning model.`
+              `Planner request timed out after ${Math.round(timeoutMs2 / 1e3)}s (no response). Raise ZELARI_KRAKEN_PLANNER_TIMEOUT_MS, or set ZELARI_KRAKEN_PLANNER_MODEL to a faster non-reasoning model.`
             );
           }
           throw new PlannerTransportError(
@@ -49381,10 +49944,10 @@ async function validateApiKey(providerId, apiKey, options = {}) {
     return { ok: true, skipped: true, reason: "no_base_url" };
   }
   const probeUrl = options.probeUrl ?? `${spec.baseUrl.replace(/\/+$/, "")}/models`;
-  const timeoutMs = options.timeoutMs ?? 5e3;
+  const timeoutMs2 = options.timeoutMs ?? 5e3;
   const fetchImpl = options.fetchImpl ?? fetch;
   const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  const timer = setTimeout(() => controller.abort(), timeoutMs2);
   try {
     const response = await fetchImpl(probeUrl, {
       method: "GET",
@@ -49413,7 +49976,7 @@ async function validateApiKey(providerId, apiKey, options = {}) {
     return {
       ok: false,
       reason: isAbort ? "network" : "network",
-      detail: isAbort ? `timeout after ${timeoutMs}ms` : msg,
+      detail: isAbort ? `timeout after ${timeoutMs2}ms` : msg,
       durationMs
     };
   } finally {
@@ -50182,6 +50745,864 @@ var init_atMentions = __esm({
   }
 });
 
+// src/cli/gauntlet/policy.ts
+var policy_exports = {};
+__export(policy_exports, {
+  DEFAULT_MAX_PARALLEL: () => DEFAULT_MAX_PARALLEL2,
+  DEFAULT_MAX_PIECES: () => DEFAULT_MAX_PIECES,
+  DEFAULT_MAX_ROUNDS: () => DEFAULT_MAX_ROUNDS,
+  DEFAULT_WALL_MS: () => DEFAULT_WALL_MS,
+  GAUNTLET_PARENT_BLOCKED_TOOLS: () => GAUNTLET_PARENT_BLOCKED_TOOLS,
+  isGauntletFlagOn: () => isGauntletFlagOn,
+  resolveGauntletCaps: () => resolveGauntletCaps,
+  shouldRunGauntletHostLoop: () => shouldRunGauntletHostLoop
+});
+function envInt(raw, fallback, min, max) {
+  if (raw === void 0 || raw === "") return fallback;
+  const n = Number.parseInt(raw, 10);
+  if (!Number.isFinite(n)) return fallback;
+  return Math.min(max, Math.max(min, n));
+}
+function isGauntletFlagOn(explicit, env = process.env) {
+  if (explicit === true) return true;
+  if (explicit === false) return false;
+  const raw = env.ZELARI_GAUNTLET;
+  if (!raw) return false;
+  return raw === "1" || raw.toLowerCase() === "true";
+}
+function resolveGauntletCaps(env = process.env) {
+  const wallRaw = env.ZELARI_GAUNTLET_WALL_MS;
+  let wallClockMs = DEFAULT_WALL_MS;
+  if (wallRaw !== void 0 && wallRaw !== "") {
+    const n = Number.parseInt(wallRaw, 10);
+    if (Number.isFinite(n) && n >= 0) wallClockMs = n;
+  }
+  return {
+    maxPieces: envInt(env.ZELARI_GAUNTLET_MAX_PIECES, DEFAULT_MAX_PIECES, 1, 16),
+    maxRounds: envInt(env.ZELARI_GAUNTLET_MAX_ROUNDS, DEFAULT_MAX_ROUNDS, 1, 8),
+    maxParallel: envInt(env.ZELARI_GAUNTLET_MAX_PARALLEL, DEFAULT_MAX_PARALLEL2, 1, 4),
+    wallClockMs
+  };
+}
+function shouldRunGauntletHostLoop(opts) {
+  if (!isGauntletFlagOn(opts.gauntlet)) return false;
+  if (opts.krakenGraph) return false;
+  if (opts.useCouncil || opts.mode === "council" || opts.mode === "zelari") return false;
+  const phase2 = opts.phase ?? "build";
+  return phase2 !== "plan";
+}
+var DEFAULT_MAX_PIECES, DEFAULT_MAX_ROUNDS, DEFAULT_MAX_PARALLEL2, DEFAULT_WALL_MS, GAUNTLET_PARENT_BLOCKED_TOOLS;
+var init_policy = __esm({
+  "src/cli/gauntlet/policy.ts"() {
+    "use strict";
+    DEFAULT_MAX_PIECES = 6;
+    DEFAULT_MAX_ROUNDS = 3;
+    DEFAULT_MAX_PARALLEL2 = 2;
+    DEFAULT_WALL_MS = 45 * 60 * 1e3;
+    GAUNTLET_PARENT_BLOCKED_TOOLS = [
+      "write_file",
+      "edit_file",
+      "apply_diff",
+      "bash"
+    ];
+  }
+});
+
+// src/cli/gauntlet/complete.ts
+function timeoutMs(env = process.env) {
+  const raw = env.ZELARI_GAUNTLET_DECOMPOSE_TIMEOUT_MS;
+  if (raw === void 0 || raw === "") return DEFAULT_TIMEOUT_MS4;
+  const n = Number.parseInt(raw, 10);
+  return Number.isFinite(n) && n >= 0 ? n : DEFAULT_TIMEOUT_MS4;
+}
+async function gauntletComplete(args, opts) {
+  const provider = opts.provider;
+  const meta3 = await resolveApiKeyWithMeta(provider);
+  if (!meta3?.apiKey) {
+    throw new Error(`No API key for provider '${provider}'`);
+  }
+  const baseUrl = resolveBaseUrl(provider);
+  if (!baseUrl) {
+    throw new Error(`No base URL for provider '${provider}'`);
+  }
+  const model = process.env.ZELARI_KRAKEN_PLANNER_MODEL?.trim() || opts.model || getModelForProvider(provider) || getProviderConfig().modelByProvider[provider] || "";
+  if (!model) throw new Error(`No model for provider '${provider}'`);
+  const ms = timeoutMs();
+  const controller = new AbortController();
+  const onParentAbort = () => controller.abort();
+  opts.signal?.addEventListener("abort", onParentAbort, { once: true });
+  let timedOut = false;
+  const timer = ms > 0 ? setTimeout(() => {
+    timedOut = true;
+    controller.abort();
+  }, ms) : void 0;
+  try {
+    const url2 = `${baseUrl.replace(/\/$/, "")}/chat/completions`;
+    const res = await fetch(url2, {
+      method: "POST",
+      signal: controller.signal,
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${meta3.apiKey}`
+      },
+      body: JSON.stringify({
+        model,
+        temperature: 0.2,
+        max_tokens: DEFAULT_MAX_TOKENS,
+        stream: false,
+        messages: [
+          { role: "system", content: args.system },
+          { role: "user", content: args.user }
+        ]
+      })
+    });
+    if (!res.ok) {
+      const errBody = await res.text().catch(() => "");
+      throw new Error(`decompose HTTP ${res.status}${errBody ? `: ${errBody.slice(0, 160)}` : ""}`);
+    }
+    const json2 = await res.json();
+    const msg = json2.choices?.[0]?.message;
+    const text = msg?.content?.trim() || msg?.reasoning_content?.trim() || "";
+    if (!text) throw new Error("decompose: empty model response");
+    return text;
+  } catch (err) {
+    if (timedOut) {
+      throw new Error(
+        `decompose timed out after ${Math.round(ms / 1e3)}s \u2014 using a single piece. Raise ZELARI_GAUNTLET_DECOMPOSE_TIMEOUT_MS or set ZELARI_KRAKEN_PLANNER_MODEL to a fast model.`
+      );
+    }
+    throw err instanceof Error ? err : new Error(String(err));
+  } finally {
+    if (timer) clearTimeout(timer);
+    opts.signal?.removeEventListener("abort", onParentAbort);
+  }
+}
+var DEFAULT_TIMEOUT_MS4, DEFAULT_MAX_TOKENS;
+var init_complete = __esm({
+  "src/cli/gauntlet/complete.ts"() {
+    "use strict";
+    init_providerConfig();
+    init_keyStore();
+    init_openai_compatible();
+    DEFAULT_TIMEOUT_MS4 = 6e4;
+    DEFAULT_MAX_TOKENS = 2048;
+  }
+});
+
+// src/cli/gauntlet/decompose.ts
+function fallbackPieces(goal) {
+  const prompt = goal.trim() || "Complete the user Goal.";
+  return [
+    {
+      id: "g1",
+      label: labelFromGoal(prompt),
+      prompt,
+      acceptance: []
+    }
+  ];
+}
+function labelFromGoal(goal) {
+  const line = goal.trim().split(/\r?\n/, 1)[0] ?? "Goal";
+  return line.slice(0, MAX_LABEL) || "Goal";
+}
+function parsePiecesJson(raw, maxPieces) {
+  if (!raw || typeof raw !== "object") return null;
+  const rec = raw;
+  const list = rec.pieces ?? rec.nodes;
+  if (!Array.isArray(list) || list.length === 0) return null;
+  const out = [];
+  for (let i = 0; i < list.length && out.length < maxPieces; i++) {
+    const item = list[i];
+    if (!item || typeof item !== "object") continue;
+    const row = item;
+    const prompt = typeof row.prompt === "string" ? row.prompt.trim() : typeof row.goal === "string" ? row.goal.trim() : "";
+    if (!prompt) continue;
+    const id = typeof row.id === "string" && row.id.trim() ? row.id.trim().slice(0, 32) : `g${out.length + 1}`;
+    const label = typeof row.label === "string" && row.label.trim() ? row.label.trim().slice(0, MAX_LABEL) : labelFromGoal(prompt);
+    const acceptance = Array.isArray(row.acceptance) ? row.acceptance.filter((a) => typeof a === "string" && a.trim().length > 0).map((a) => a.trim()).slice(0, MAX_ACCEPTANCE) : [];
+    const scope = Array.isArray(row.scope) ? row.scope.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => s.trim()).slice(0, 16) : void 0;
+    const bar = Array.isArray(row.bar) ? row.bar.filter((s) => typeof s === "string" && s.trim().length > 0).map((s) => s.trim()).slice(0, 4) : void 0;
+    out.push({
+      id: uniqueId2(id, out),
+      label,
+      prompt: prompt.slice(0, MAX_PROMPT),
+      acceptance,
+      ...scope && scope.length > 0 ? { scope } : {},
+      ...bar && bar.length > 0 ? { bar } : {}
+    });
+  }
+  return out.length > 0 ? out : null;
+}
+function formatHistoryNote(messages, maxMessages = 4, each = 400) {
+  const slice = messages.filter((m) => m.role === "user" || m.role === "assistant").slice(-maxMessages);
+  if (slice.length === 0) return "";
+  return slice.map((m) => {
+    const body = m.content.replace(/\s+/g, " ").trim().slice(0, each);
+    return `${m.role}: ${body}`;
+  }).join("\n");
+}
+function buildDecomposeUser(opts) {
+  const parts = [
+    `Max pieces: ${opts.maxPieces}`,
+    "",
+    "## Goal",
+    opts.goal.trim() || "(empty)"
+  ];
+  if (opts.historyNote?.trim()) {
+    parts.push("", "## Prior turns (context only \u2014 the Goal above is authoritative)", opts.historyNote.trim());
+  }
+  if (opts.workspace?.trim()) {
+    parts.push("", "## Workspace", opts.workspace.trim());
+  }
+  return parts.join("\n");
+}
+function piecesFromModelText(text, maxPieces) {
+  try {
+    const json2 = extractJsonObject(text, { requireKey: "pieces" });
+    return parsePiecesJson(json2, maxPieces);
+  } catch {
+    return null;
+  }
+}
+async function decomposeGoal(opts) {
+  const fallback = fallbackPieces(opts.goal);
+  if (!opts.complete) return { pieces: fallback, source: "fallback" };
+  try {
+    const text = await opts.complete({
+      system: GAUNTLET_DECOMPOSE_SYSTEM,
+      user: buildDecomposeUser(opts)
+    });
+    const parsed = piecesFromModelText(text, opts.maxPieces);
+    if (parsed && parsed.length > 0) return { pieces: parsed, source: "llm" };
+    return { pieces: fallback, source: "fallback", error: "decompose JSON unusable" };
+  } catch (err) {
+    return {
+      pieces: fallback,
+      source: "fallback",
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
+function uniqueId2(id, existing) {
+  if (!existing.some((p3) => p3.id === id)) return id;
+  let n = 2;
+  while (existing.some((p3) => p3.id === `${id}-${n}`)) n += 1;
+  return `${id}-${n}`;
+}
+var MAX_LABEL, MAX_PROMPT, MAX_ACCEPTANCE, GAUNTLET_DECOMPOSE_SYSTEM;
+var init_decompose = __esm({
+  "src/cli/gauntlet/decompose.ts"() {
+    "use strict";
+    init_planner();
+    MAX_LABEL = 80;
+    MAX_PROMPT = 8e3;
+    MAX_ACCEPTANCE = 8;
+    GAUNTLET_DECOMPOSE_SYSTEM = [
+      "Decompose the user Goal into independently shippable Gauntlet pieces.",
+      "Return ONLY JSON (no markdown, no prose):",
+      '{ "pieces": [ { "id": string, "label": string, "prompt": string, "scope"?: string[], "acceptance"?: string[], "bar"?: string[] } ] }',
+      "Rules:",
+      "- 1 to N pieces (N is given in the user message). Prefer fewer. One piece is valid when the goal is atomic.",
+      '- "prompt" is self-contained: the builder will not see this conversation.',
+      '- "scope" is a path allowlist so disjoint pieces can run in parallel. Omit if unsure (forces sequential).',
+      '- "acceptance" is checkable (file, command, observable). Never subjective ("elegant").',
+      '- "bar" (optional) is on-disk reference path(s) the critic compares against blindly (gold file, screenshot, test).',
+      "- Use paths from the workspace listing. Do not invent a tree.",
+      "- Decompose the USER GOAL literally. Do not enlarge it into a different project."
+    ].join("\n");
+  }
+});
+
+// src/cli/gauntlet/events.ts
+function gauntletProgressEvent(sessionId2, progress) {
+  return {
+    type: "gauntlet_progress",
+    sessionId: sessionId2,
+    ts: Date.now(),
+    progress
+  };
+}
+function formatGauntletSummary(results, opts) {
+  if (results.length === 0) {
+    if (opts?.timedOut) return "Gauntlet stopped: wall clock. No pieces finished.";
+    if (opts?.cancelled) return "Gauntlet cancelled. No pieces finished.";
+    return "Gauntlet: no pieces ran.";
+  }
+  const head = opts?.timedOut ? "Gauntlet stopped: wall clock." : opts?.cancelled ? "Gauntlet cancelled." : "Gauntlet finished.";
+  const lines = [head, ""];
+  for (const r of results) {
+    const gap = r.gap ? ` \u2014 ${r.gap}` : "";
+    const win = r.winner ? ` [A/B ${r.winner}]` : "";
+    lines.push(`- ${r.label} (${r.id}): ${r.verdict} after ${r.rounds} round(s)${win}${gap}`);
+  }
+  return lines.join("\n");
+}
+var init_events3 = __esm({
+  "src/cli/gauntlet/events.ts"() {
+    "use strict";
+  }
+});
+
+// src/cli/gauntlet/blind.ts
+function assignBlindLabels(items, rand = Math.random) {
+  if (rand() < 0.5) {
+    return { A: items[0], B: items[1], firstLabel: "A" };
+  }
+  return { A: items[1], B: items[0], firstLabel: "B" };
+}
+function qualityBarSection(bars, rand = Math.random) {
+  if (!bars || bars.length === 0) return "";
+  if (bars.length === 1) {
+    return [
+      "## Quality bar (blind)",
+      "Inspect this reference on disk. PASS only if the work in Scope meets or beats it.",
+      "Do not assume the new files are better \u2014 compare concretely.",
+      `- ${bars[0]}`
+    ].join("\n");
+  }
+  const pair = assignBlindLabels([bars[0], bars[1]], rand);
+  return [
+    "## Blind A/B",
+    "Two unlabeled artifacts on disk. Compare them against the piece acceptance.",
+    'Do not assume which is newer or which you are "supposed" to prefer.',
+    `A: ${pair.A}`,
+    `B: ${pair.B}`,
+    "Also emit: WINNER: A | B | TIE"
+  ].join("\n");
+}
+function parseBlindWinner(text) {
+  const m = WINNER_RE.exec(text);
+  if (!m) return void 0;
+  const v = m[1].toUpperCase();
+  if (v === "A" || v === "B" || v === "TIE") return v;
+  return void 0;
+}
+var WINNER_RE;
+var init_blind = __esm({
+  "src/cli/gauntlet/blind.ts"() {
+    "use strict";
+    WINNER_RE = /\bWINNER:\s*(A|B|TIE)\b/i;
+  }
+});
+
+// src/cli/gauntlet/verdict.ts
+function parseGauntletVerdict(text, opts = {}) {
+  const evidence = (opts.toolTraceCount ?? 0) > 0;
+  if (opts.builderFailed) {
+    return {
+      kind: "GAP",
+      gap: (opts.builderError ?? "builder failed").trim() || "builder failed",
+      evidence
+    };
+  }
+  const raw = (text ?? "").trim();
+  if (!raw) {
+    return { kind: "BLOCKED", gap: "critic produced no output", evidence };
+  }
+  const explicit = VERDICT_RE.exec(raw);
+  let kind = explicit ? explicit[1].toUpperCase() : void 0;
+  const reports = [...raw.matchAll(REPORT_STATUS_RE)].map((m) => m[1].toLowerCase());
+  const anyFail = reports.includes("fail");
+  const anyUnknown = reports.includes("unknown");
+  const anyPass = reports.includes("pass");
+  if (!kind) {
+    if (anyFail) kind = "GAP";
+    else if (anyPass && !anyUnknown) kind = "PASS";
+    else if (anyUnknown && !anyPass) kind = "BLOCKED";
+    else kind = "BLOCKED";
+  }
+  const gapMatch = GAP_RE.exec(raw);
+  let gap = gapMatch ? gapMatch[1].trim() : void 0;
+  if (kind === "GAP" && !gap) {
+    gap = anyFail ? "a verify-report check failed" : "critic named a gap without a GAP: line";
+  }
+  if (kind === "PASS" && !evidence) {
+    return {
+      kind: "GAP",
+      gap: "unknown \u2260 pass: critic declared PASS without tool evidence",
+      evidence: false
+    };
+  }
+  if (kind === "PASS" && anyFail) {
+    return {
+      kind: "GAP",
+      gap: gap ?? "verify-report contains a fail",
+      evidence
+    };
+  }
+  return { kind, ...gap ? { gap } : {}, evidence };
+}
+var VERDICT_RE, GAP_RE, REPORT_STATUS_RE;
+var init_verdict2 = __esm({
+  "src/cli/gauntlet/verdict.ts"() {
+    "use strict";
+    VERDICT_RE = /\bVERDICT:\s*(PASS|GAP|BLOCKED)\b/i;
+    GAP_RE = /\bGAP:\s*(.+)/i;
+    REPORT_STATUS_RE = /^status:\s*(pass|fail|unknown)\b/gim;
+  }
+});
+
+// src/cli/gauntlet/prompts.ts
+function builderUserPrompt(piece, gap, briefing) {
+  const parts = [
+    `You are the BUILDER for one Gauntlet piece. Implement it on disk.`,
+    `Do not spawn sub-agents. Stay inside Scope if provided.`
+  ];
+  if (briefing?.trim()) {
+    parts.push("", "## Workspace briefing (do not treat as already-done work)", briefing.trim());
+  }
+  parts.push("", `## Piece: ${piece.label}`, piece.prompt.trim());
+  if (piece.scope && piece.scope.length > 0) {
+    parts.push("", "## Scope", ...piece.scope.map((s) => `- ${s}`));
+  }
+  if (piece.acceptance.length > 0) {
+    parts.push("", "## Acceptance", ...piece.acceptance.map((a) => `- ${a}`));
+  }
+  if (gap && gap.trim()) {
+    parts.push(
+      "",
+      "## Previous critic GAP (fix ONLY this)",
+      gap.trim(),
+      "Do not widen scope. Re-check the acceptance after the fix."
+    );
+  }
+  parts.push("", "Return: files touched, what changed, residual risks.");
+  return parts.join("\n");
+}
+function criticUserPrompt(piece, round, rand) {
+  const parts = [
+    `Round ${round}. Inspect the current tree against this piece.`,
+    "Do not edit files. Do not take the builder's word \u2014 open files / run checks.",
+    "",
+    `## Piece: ${piece.label}`,
+    piece.prompt.trim()
+  ];
+  if (piece.scope && piece.scope.length > 0) {
+    parts.push("", "## Scope", ...piece.scope.map((s) => `- ${s}`));
+  }
+  if (piece.acceptance.length > 0) {
+    parts.push("", "## Acceptance (check each)", ...piece.acceptance.map((a) => `- ${a}`));
+  } else {
+    parts.push(
+      "",
+      "## Acceptance",
+      "- The piece prompt is satisfied by files on disk.",
+      "- Relevant typecheck/tests pass when the project has them."
+    );
+  }
+  const bar = qualityBarSection(piece.bar, rand);
+  if (bar) parts.push("", bar);
+  return parts.join("\n");
+}
+var GAUNTLET_CRITIC_SYSTEM;
+var init_prompts = __esm({
+  "src/cli/gauntlet/prompts.ts"() {
+    "use strict";
+    init_blind();
+    GAUNTLET_CRITIC_SYSTEM = [
+      "You are a ruthless VERIFY critic in a Gauntlet Loop.",
+      "Inspect the REAL files and commands on disk. Do not trust a builder self-report.",
+      "You have no builder transcript \u2014 only the Goal, Scope, Acceptance, and the tree.",
+      "OBSERVATION INTEGRITY: unknown \u2260 pass. EMPTY/degraded tools are not evidence.",
+      "Name at most ONE biggest remaining gap. Do not write a laundry list.",
+      "You may read files and run test/build commands via bash. Prefer targeted checks.",
+      "",
+      "End with BOTH:",
+      "1. One <verify-report> block per acceptance criterion:",
+      "<verify-report>",
+      "check: <criterion text as given>",
+      "status: pass | fail | unknown",
+      "note: <one line of evidence (command or file + outcome)>",
+      "</verify-report>",
+      "2. A trailer on its own lines:",
+      "VERDICT: PASS | GAP | BLOCKED",
+      "GAP: <single biggest remaining gap; omit on PASS>",
+      "3. If a Blind A/B section is present, also emit WINNER: A | B | TIE"
+    ].join("\n");
+  }
+});
+
+// src/cli/gauntlet/schedule.ts
+function piecesCanRunInParallel(a, b) {
+  return disjointScopeSets(a.scope, b.scope);
+}
+function scheduleWaves(pieces, maxParallel) {
+  const cap3 = Math.max(1, maxParallel);
+  const remaining = [...pieces];
+  const waves = [];
+  while (remaining.length > 0) {
+    const wave = [];
+    const leftover = [];
+    for (const p3 of remaining) {
+      if (wave.length >= cap3) {
+        leftover.push(p3);
+        continue;
+      }
+      if (wave.length === 0 || wave.every((w) => piecesCanRunInParallel(w, p3))) {
+        wave.push(p3);
+      } else {
+        leftover.push(p3);
+      }
+    }
+    waves.push(wave);
+    remaining.splice(0, remaining.length, ...leftover);
+  }
+  return waves;
+}
+var init_schedule = __esm({
+  "src/cli/gauntlet/schedule.ts"() {
+    "use strict";
+    init_dist();
+  }
+});
+
+// src/cli/gauntlet/loop.ts
+async function runGauntletLoop(args) {
+  const { caps, deps } = args;
+  const pieces = args.pieces.slice(0, caps.maxPieces);
+  const started = (deps.now ?? Date.now)();
+  const results = [];
+  const emitProgress = (partial2) => {
+    const progress = {
+      ...partial2,
+      elapsedMs: (deps.now ?? Date.now)() - started
+    };
+    deps.emit(gauntletProgressEvent(deps.sessionId, progress));
+    deps.note?.("gauntlet.progress", progress);
+  };
+  const wall = caps.wallClockMs === void 0 ? DEFAULT_WALL_MS : caps.wallClockMs;
+  const expired = () => wall > 0 && (deps.now ?? Date.now)() - started >= wall;
+  const aborted2 = () => Boolean(deps.signal?.aborted);
+  const stop = () => aborted2() || expired();
+  const indexOf = (piece) => pieces.findIndex((p3) => p3.id === piece.id);
+  const runOnePiece = async (piece) => {
+    let last = {
+      kind: "BLOCKED",
+      gap: "no round ran",
+      evidence: false
+    };
+    let gap;
+    let winner;
+    let rounds = 0;
+    const i = Math.max(0, indexOf(piece));
+    for (let round = 1; round <= caps.maxRounds; round++) {
+      if (stop()) break;
+      rounds = round;
+      const phase2 = gap ? "repairing" : "building";
+      emitProgress({
+        phase: phase2,
+        pieceId: piece.id,
+        pieceLabel: piece.label,
+        pieceIndex: i,
+        pieceCount: pieces.length,
+        round,
+        maxRounds: caps.maxRounds
+      });
+      const built = await deps.runBuilder({
+        piece,
+        prompt: builderUserPrompt(piece, gap, deps.briefing),
+        round
+      });
+      if (stop()) break;
+      emitProgress({
+        phase: "critiquing",
+        pieceId: piece.id,
+        pieceLabel: piece.label,
+        pieceIndex: i,
+        pieceCount: pieces.length,
+        round,
+        maxRounds: caps.maxRounds
+      });
+      const criticized = await deps.runCritic({
+        piece,
+        prompt: criticUserPrompt(piece, round),
+        systemPrompt: GAUNTLET_CRITIC_SYSTEM,
+        round
+      });
+      last = parseGauntletVerdict(criticized.result, {
+        toolTraceCount: criticized.toolTraceCount ?? 0,
+        builderFailed: !built.ok,
+        builderError: built.error
+      });
+      winner = parseBlindWinner(criticized.result) ?? winner;
+      emitProgress({
+        phase: last.kind === "PASS" ? "settled" : last.kind === "BLOCKED" ? "blocked" : "repairing",
+        pieceId: piece.id,
+        pieceLabel: piece.label,
+        pieceIndex: i,
+        pieceCount: pieces.length,
+        round,
+        maxRounds: caps.maxRounds,
+        verdict: last.kind,
+        gap: last.gap,
+        winner
+      });
+      if (last.kind === "PASS" || last.kind === "BLOCKED") break;
+      gap = last.gap;
+    }
+    return {
+      id: piece.id,
+      label: piece.label,
+      verdict: last,
+      rounds,
+      ...winner ? { winner } : {}
+    };
+  };
+  for (const wave of scheduleWaves(pieces, caps.maxParallel)) {
+    if (stop()) return finish(results, { cancelled: aborted2(), timedOut: expired() });
+    if (wave.length === 1) {
+      results.push(await runOnePiece(wave[0]));
+    } else {
+      const waveResults = await Promise.all(wave.map((p3) => runOnePiece(p3)));
+      results.push(...waveResults);
+    }
+    if (stop()) return finish(results, { cancelled: aborted2(), timedOut: expired() });
+  }
+  return finish(results, { cancelled: aborted2(), timedOut: expired() });
+}
+function finish(results, flags) {
+  const cancelled = flags.timedOut ? false : flags.cancelled;
+  const timedOut = flags.timedOut;
+  const settled = !cancelled && !timedOut && results.length > 0 && results.every((r) => r.verdict.kind === "PASS");
+  return {
+    settled,
+    cancelled,
+    timedOut,
+    pieces: results,
+    summary: formatGauntletSummary(
+      results.map((r) => ({
+        id: r.id,
+        label: r.label,
+        verdict: r.verdict.kind,
+        rounds: r.rounds,
+        gap: r.verdict.gap,
+        winner: r.winner
+      })),
+      { timedOut, cancelled }
+    )
+  };
+}
+var init_loop = __esm({
+  "src/cli/gauntlet/loop.ts"() {
+    "use strict";
+    init_blind();
+    init_policy();
+    init_verdict2();
+    init_prompts();
+    init_schedule();
+    init_events3();
+  }
+});
+
+// src/cli/gauntlet/run.ts
+var run_exports = {};
+__export(run_exports, {
+  runHeadlessGauntlet: () => runHeadlessGauntlet
+});
+async function runHeadlessGauntlet(opts, provider, model) {
+  const sessionId2 = opts.resumeSessionId ?? crypto.randomUUID();
+  const spine = await openHeadlessSpine({
+    sessionId: sessionId2,
+    mode: opts.mode,
+    profile: opts.profile,
+    workspace: process.cwd()
+  });
+  emitEvent(sessionStartedEvent(spine));
+  const seeded = await seedHeadlessModelHistory(spine, opts.history);
+  if (opts.task) spine.userMessage(opts.task);
+  spine.note("gauntlet.start", { goal: opts.task.slice(0, 200) });
+  const abort = new AbortController();
+  const onSigint = () => {
+    emitEvent({ type: "log", message: "[gauntlet] SIGINT \u2014 cancelling" });
+    abort.abort();
+  };
+  process.once("SIGINT", onSigint);
+  const wallMs = resolveGauntletCaps().wallClockMs ?? 0;
+  const wallTimer = wallMs > 0 ? setTimeout(() => {
+    emitEvent({ type: "log", message: "[gauntlet] wall clock \u2014 aborting tentacles" });
+    abort.abort();
+  }, wallMs) : void 0;
+  const cwd = process.cwd();
+  const audit = new AuditLogger();
+  const createSubAgentContext = createKrakenSubAgentContextFactory({
+    root: cwd,
+    audit,
+    sessionId: sessionId2,
+    provider,
+    model
+  });
+  const deps = {
+    createSubAgentContext,
+    allowWorktree: false,
+    harnessFactory: (config2) => {
+      const harness = new AgentHarness(config2);
+      return {
+        async *run() {
+          for await (const ev of harness.run()) {
+            if (ev.type === "thinking_delta" || ev.type === "tool_execution_start" || ev.type === "tool_execution_end") {
+              emitEvent(ev);
+              spine.observe(ev);
+            }
+            yield ev;
+          }
+        },
+        cancel: () => harness.cancel()
+      };
+    }
+  };
+  const emit = (event) => {
+    if (opts.output === "json") emitEvent(event);
+    else if (typeof event.message === "string") {
+      process.stderr.write(`${event.message}
+`);
+    }
+  };
+  emitEvent({ type: "agent_start", model, provider, role: "gauntlet" });
+  emit({ type: "log", message: "[gauntlet] host loop \u2014 builder/critic rounds, parent cannot write" });
+  const caps = resolveGauntletCaps();
+  const workspace = buildWorkspaceSummary(cwd, { maxChars: 2500 });
+  const historyNote = formatHistoryNote(seeded.history);
+  emitEvent(
+    gauntletProgressEvent(sessionId2, {
+      phase: "decomposing",
+      pieceId: "",
+      pieceLabel: "Goal",
+      pieceIndex: 0,
+      pieceCount: 1,
+      round: 0,
+      maxRounds: caps.maxRounds,
+      elapsedMs: 0
+    })
+  );
+  try {
+    const decomposed = await decomposeGoal({
+      goal: opts.task,
+      maxPieces: caps.maxPieces,
+      workspace,
+      historyNote,
+      complete: (req) => gauntletComplete(req, { provider, model, signal: abort.signal })
+    });
+    spine.note("gauntlet.decompose", {
+      source: decomposed.source,
+      count: decomposed.pieces.length,
+      ...decomposed.error ? { error: decomposed.error.slice(0, 240) } : {}
+    });
+    emit({
+      type: "log",
+      message: `[gauntlet] ${decomposed.pieces.length} piece(s) from ${decomposed.source}${decomposed.error ? ` (${decomposed.error.slice(0, 80)})` : ""}`
+    });
+    const result = await runGauntletLoop({
+      pieces: decomposed.pieces,
+      caps,
+      deps: {
+        sessionId: sessionId2,
+        signal: abort.signal,
+        emit,
+        briefing: workspace.slice(0, 1200),
+        note: (text, data) => spine.note(text, data),
+        runBuilder: async ({ piece, prompt, round }) => {
+          emit({
+            type: "log",
+            message: `[gauntlet] ${piece.id} round ${round}/${caps.maxRounds} builder`
+          });
+          const tent = await runTentacle({
+            deps,
+            agent: "general",
+            thoroughness: "medium",
+            parentCwd: cwd,
+            sessionId: sessionId2,
+            signal: abort.signal,
+            args: {
+              description: `gauntlet-builder ${piece.id} r${round}`,
+              prompt,
+              ...piece.scope ? { scope: piece.scope } : {},
+              ...piece.acceptance.length > 0 ? { acceptance: piece.acceptance } : {}
+            }
+          });
+          if (!tent.ok) return { ok: false, result: "", error: tent.error };
+          return {
+            ok: true,
+            result: tent.result,
+            toolTraceCount: tent.toolTrace?.length ?? 0
+          };
+        },
+        runCritic: async ({ piece, prompt, systemPrompt, round }) => {
+          emit({
+            type: "log",
+            message: `[gauntlet] ${piece.id} round ${round}/${caps.maxRounds} critic`
+          });
+          const tent = await runTentacle({
+            deps,
+            agent: "verify",
+            thoroughness: "medium",
+            parentCwd: cwd,
+            sessionId: sessionId2,
+            signal: abort.signal,
+            systemPromptOverride: systemPrompt,
+            args: {
+              description: `gauntlet-critic ${piece.id} r${round}`,
+              prompt,
+              ...piece.scope ? { scope: piece.scope } : {},
+              ...piece.acceptance.length > 0 ? { acceptance: piece.acceptance } : {}
+            }
+          });
+          if (!tent.ok) {
+            return { ok: false, result: tent.error, error: tent.error, toolTraceCount: 0 };
+          }
+          return {
+            ok: true,
+            result: tent.result,
+            toolTraceCount: tent.toolTrace?.length ?? 0
+          };
+        }
+      }
+    });
+    emitEvent({ type: "message_start", role: "assistant" });
+    emitEvent({ type: "message_delta", delta: result.summary });
+    emitEvent({ type: "message_end", totalLength: result.summary.length });
+    emitEvent({
+      type: "agent_end",
+      reason: result.cancelled || result.timedOut ? "cancelled" : result.settled ? "completed" : "error"
+    });
+    if (result.timedOut) {
+      emit({ type: "log", message: `[gauntlet] wall clock (${Math.round(wallMs / 6e4)}m)` });
+      await spine.interrupt("gauntlet-wall-clock");
+      return 1;
+    }
+    if (result.cancelled) {
+      await spine.interrupt("gauntlet-cancelled");
+      return 1;
+    }
+    await spine.close(result.settled ? "gauntlet-pass" : "gauntlet-incomplete");
+    return result.settled ? 0 : 3;
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    emitEvent({ type: "error", severity: "fatal", message: msg, code: "gauntlet" });
+    await spine.interrupt(`gauntlet-error: ${msg}`).catch(() => void 0);
+    return 2;
+  } finally {
+    if (wallTimer) clearTimeout(wallTimer);
+    process.removeListener("SIGINT", onSigint);
+  }
+}
+var init_run = __esm({
+  "src/cli/gauntlet/run.ts"() {
+    "use strict";
+    init_harness();
+    init_headless();
+    init_headlessSpine();
+    init_auditLogger();
+    init_toolRegistry();
+    init_taskTool();
+    init_complete();
+    init_decompose();
+    init_events3();
+    init_loop();
+    init_policy();
+    init_workspaceSummary();
+  }
+});
+
 // src/cli/triggerLock.ts
 var triggerLock_exports = {};
 __export(triggerLock_exports, {
@@ -50956,7 +52377,7 @@ function startPermissionMcpServer(opts) {
     }
     return { error: { code: -32601, message: `method not found: ${method}` } };
   }
-  async function callApprove(args, timeoutMs) {
+  async function callApprove(args, timeoutMs2) {
     const toolName = typeof args.tool_name === "string" ? args.tool_name : "";
     if (!toolName) {
       return { error: { code: -32602, message: "approve requires a string tool_name" } };
@@ -50975,7 +52396,7 @@ function startPermissionMcpServer(opts) {
           toolUseId: typeof args.tool_use_id === "string" ? args.tool_use_id : void 0,
           suggestions
         },
-        { requestTimeoutMs: timeoutMs }
+        { requestTimeoutMs: timeoutMs2 }
       );
       const result = res.behavior === "allow" ? {
         behavior: "allow",
@@ -50995,7 +52416,7 @@ function startPermissionMcpServer(opts) {
       );
     }
   }
-  async function callAskUser(args, timeoutMs) {
+  async function callAskUser(args, timeoutMs2) {
     const question = typeof args.question === "string" ? args.question : "";
     if (!question) {
       return { error: { code: -32602, message: "ask_user requires a string question" } };
@@ -51013,7 +52434,7 @@ function startPermissionMcpServer(opts) {
           choices,
           context
         },
-        { requestTimeoutMs: timeoutMs }
+        { requestTimeoutMs: timeoutMs2 }
       );
       const text = res.behavior === "allow" && typeof res.answer === "string" ? res.answer : res.message ?? "No answer was given \u2014 use your best judgment.";
       return textResult(text);
@@ -55861,8 +57282,8 @@ async function readPackageScripts(cwd = process.cwd()) {
     return {};
   }
 }
-function buildNativeCriteria(commands, timeoutMs) {
-  const pack = codingCriteriaPack({ ...commands, commandTimeoutMs: timeoutMs });
+function buildNativeCriteria(commands, timeoutMs2) {
+  const pack = codingCriteriaPack({ ...commands, commandTimeoutMs: timeoutMs2 });
   return pack.criteria.filter(
     (c) => !(c.required && (!c.check || c.check.kind === "none"))
   );
@@ -56127,9 +57548,6 @@ function strictGateEventPayload(evaluation) {
   };
 }
 
-// src/cli/hooks/useChatTurn.ts
-init_headlessSpine();
-
 // src/cli/hooks/permissionPicker.ts
 init_toolPermissions();
 
@@ -56164,7 +57582,7 @@ ${detail}
     let settled = false;
     const askTimeoutMs = askUserTimeoutMs();
     let cancelAskTimeout = () => void 0;
-    const finish = (ok, note) => {
+    const finish2 = (ok, note) => {
       if (settled) return;
       settled = true;
       cancelAskTimeout();
@@ -56173,7 +57591,7 @@ ${detail}
       resolve3(ok);
     };
     cancelAskTimeout = armPickerTimeout(
-      () => finish(
+      () => finish2(
         false,
         `[permission] ask for "${req.toolName}" timed out after ${Math.round(
           askTimeoutMs / 1e3
@@ -56202,12 +57620,12 @@ ${detail}
       onAnswer: (value) => {
         const v = value.trim().toLowerCase();
         if (v === "deny" || v.startsWith("deny")) {
-          finish(false);
+          finish2(false);
           return;
         }
         if (v === "always-tool" || v.includes("always") && v.includes("tool")) {
           grantSessionTool(req.toolName);
-          finish(
+          finish2(
             true,
             `[permission] Granted "${req.toolName}" for this session (tool).`
           );
@@ -56216,19 +57634,19 @@ ${detail}
         if (v === "always-cat" || v.includes("always") && !v.includes("tool")) {
           for (const c of cats) grantSessionCategory(c);
           grantSessionTool(req.toolName);
-          finish(
+          finish2(
             true,
             `[permission] Granted ${catLabel} (+ ${req.toolName}) for this session.`
           );
           return;
         }
         if (v === "allow" || v.startsWith("allow") || v === "yes" || v === "y" || v === "1") {
-          finish(true);
+          finish2(true);
           return;
         }
-        finish(false);
+        finish2(false);
       },
-      onCancel: () => finish(false)
+      onCancel: () => finish2(false)
     });
   });
 }
@@ -56278,6 +57696,15 @@ init_envNumber();
 init_historyCompaction();
 init_observationStore();
 init_capabilities();
+function mergeCompactRange(into, r) {
+  if (r.fromSeq !== void 0 && r.toSeq !== void 0) {
+    into.fromSeq = into.fromSeq === void 0 ? r.fromSeq : Math.min(into.fromSeq, r.fromSeq);
+    into.toSeq = into.toSeq === void 0 ? r.toSeq : Math.max(into.toSeq, r.toSeq);
+    if (r.sourceEventSeqs) into.sourceSeqs.push(...r.sourceEventSeqs);
+  }
+  if (r.strategy === "llm") into.strategy = "llm";
+  else if (r.strategy && !into.strategy) into.strategy = r.strategy;
+}
 function estimateTokens(text) {
   if (!text) return 0;
   return Math.max(1, Math.ceil(text.length / 4));
@@ -56321,21 +57748,23 @@ async function applyBudgetPolicyAsync(history2, phase2, opts) {
   const warnings = [];
   let { historyTurns, maxToolLoopIterations } = phaseKnobs(phase2);
   const envelope = opts?.requestSnapshot ?? null;
-  const replayBase = envelope ? {
-    provider: envelope.snapshot.provider,
-    model: envelope.snapshot.model,
-    systemMessages: envelope.snapshot.systemMessages,
-    tools: envelope.snapshot.tools
+  const surface = envelope?.snapshot ?? opts?.requestSurface ?? null;
+  const replayBase = surface ? {
+    provider: surface.provider,
+    model: surface.model,
+    systemMessages: surface.systemMessages,
+    tools: surface.tools
   } : opts?.providerStream ? { provider: "local", model: opts?.model ?? "unknown", systemMessages: [], tools: [] } : null;
-  const headerTokens = envelope ? estimateSystemTokensLite(envelope.snapshot.systemMessages) + estimateToolSchemaTokensLite(envelope.snapshot.tools) : 0;
+  const headerTokens = surface ? estimateSystemTokensLite(surface.systemMessages) + estimateToolSchemaTokensLite(surface.tools) : 0;
   const convTokensOf = (h) => estimateConversationTokensLite(h);
   let hist = history2;
-  let estimated = envelope ? headerTokens + convTokensOf(hist) + RESERVED_OUTPUT_TOKENS : estimateHistoryTokens(hist) + sessionExtra;
+  let estimated = surface ? headerTokens + convTokensOf(hist) + RESERVED_OUTPUT_TOKENS : estimateHistoryTokens(hist) + sessionExtra;
   let occupancy = Math.min(1, estimated / contextLimit);
   let compactSummary = "";
   let messagesRemoved = 0;
   let cacheReuseExpected;
   let prunedTotal = 0;
+  const compactRange = { sourceSeqs: [] };
   if (occupancy >= compact.warnAt && occupancy < compact.compactAt) {
     warnings.push(
       `[budget] context ~${Math.round(occupancy * 100)}% full (${estimated}/${contextLimit} tok full-request est.) \u2014 consider /compact or shorter replies.`
@@ -56346,7 +57775,7 @@ async function applyBudgetPolicyAsync(history2, phase2, opts) {
     if (pruned.stats.pruned > 0) {
       hist = pruned.messages;
       prunedTotal += pruned.stats.pruned;
-      estimated = envelope ? headerTokens + convTokensOf(hist) + RESERVED_OUTPUT_TOKENS : estimateHistoryTokens(hist) + sessionExtra;
+      estimated = surface ? headerTokens + convTokensOf(hist) + RESERVED_OUTPUT_TOKENS : estimateHistoryTokens(hist) + sessionExtra;
       occupancy = Math.min(1, estimated / contextLimit);
       warnings.push(
         `[budget] pruned ${pruned.stats.pruned} oversized tool result(s) \u2192 ${Math.round(occupancy * 100)}% (${estimated} tok).`
@@ -56358,11 +57787,12 @@ async function applyBudgetPolicyAsync(history2, phase2, opts) {
     if (r.compacted) {
       messagesRemoved += r.messagesRemoved;
       if (r.summary) compactSummary = r.summary;
+      mergeCompactRange(compactRange, r);
       if (r.cacheReuseExpected !== void 0) {
         cacheReuseExpected = r.cacheReuseExpected;
       }
     }
-    estimated = envelope ? headerTokens + convTokensOf(hist) + RESERVED_OUTPUT_TOKENS : estimateHistoryTokens(hist) + sessionExtra;
+    estimated = surface ? headerTokens + convTokensOf(hist) + RESERVED_OUTPUT_TOKENS : estimateHistoryTokens(hist) + sessionExtra;
     occupancy = Math.min(1, estimated / contextLimit);
     warnings.push(
       `[budget] ${label} \u2014 kept ~${forcedTurns} turns (${estimated} tok est.` + (r.messagesRemoved ? `, removed ${r.messagesRemoved} msgs` : "") + (r.cacheReuseExpected === false ? ", cache reuse NOT expected (model override)" : "") + ")."
@@ -56418,12 +57848,18 @@ async function applyBudgetPolicyAsync(history2, phase2, opts) {
     warnings,
     maxToolLoopIterations,
     historyTurns,
-    estimatedHistoryTokens: envelope ? convTokensOf(hist) : estimated,
+    estimatedHistoryTokens: surface ? convTokensOf(hist) : estimated,
     contextLimit,
     occupancy,
     compactSummary: compactSummary || void 0,
     messagesRemoved: messagesRemoved || void 0,
-    ...envelope ? { contextPressureTokens: estimated } : {},
+    ...compactRange.fromSeq !== void 0 && compactRange.toSeq !== void 0 ? {
+      compactedFromSeq: compactRange.fromSeq,
+      compactedToSeq: compactRange.toSeq,
+      compactSourceSeqs: compactRange.sourceSeqs,
+      compactStrategy: compactRange.strategy
+    } : {},
+    ...surface ? { contextPressureTokens: estimated } : {},
     ...cacheReuseExpected !== void 0 ? { cacheReuseExpected } : {},
     ...cacheMetricsLine ? { cacheMetricsLine } : {}
   };
@@ -56458,6 +57894,231 @@ function estimateConversationTokensLite(messages) {
   return n;
 }
 
+// src/cli/budget/requestMeter.ts
+init_harness();
+function estimateTokensLocal(text) {
+  if (!text) return 0;
+  return Math.max(1, Math.ceil(text.length / 4));
+}
+var MESSAGE_OVERHEAD_TOKENS = 4;
+function estimateMessageTokens(m) {
+  let n = MESSAGE_OVERHEAD_TOKENS + estimateTokensLocal(m.content ?? "");
+  if (m.toolCalls) {
+    for (const tc of m.toolCalls) {
+      n += estimateTokensLocal(tc.name) + estimateTokensLocal(tc.id);
+      n += estimateTokensLocal(JSON.stringify(tc.args ?? {}));
+    }
+  }
+  if (m.reasoningContent) n += estimateTokensLocal(m.reasoningContent);
+  if (m.toolCallId) n += estimateTokensLocal(m.toolCallId);
+  return n;
+}
+function estimateToolSchemaTokens(tools) {
+  let n = 0;
+  for (const t of tools) {
+    n += estimateTokensLocal(t.name) + estimateTokensLocal(t.description ?? "");
+    n += estimateTokensLocal(JSON.stringify(t.parameters ?? {}));
+  }
+  return n + tools.length * MESSAGE_OVERHEAD_TOKENS;
+}
+function estimateSystemTokens(systemMessages) {
+  let n = 0;
+  for (const m of systemMessages) n += estimateMessageTokens(m);
+  return n;
+}
+function estimateConversationTokens(conversation) {
+  let n = 0;
+  for (const m of conversation) n += estimateMessageTokens(m);
+  return n;
+}
+function createFingerprintOnly(input) {
+  return sha256Hex(
+    stableStringify({
+      provider: input.provider,
+      model: input.model,
+      systemMessages: input.systemMessages,
+      tools: canonicalTools(input.tools)
+    })
+  );
+}
+function measureRequest(input) {
+  const estimatedHeaderTokens = estimateSystemTokens(input.systemMessages) + estimateToolSchemaTokens(input.tools);
+  const currentConversationTokens = estimateConversationTokens(input.conversation);
+  let headerAnchored = false;
+  let headerTokens = estimatedHeaderTokens;
+  const anchorUsage = input.anchor?.usage;
+  const anchorSnapshot = input.anchor?.snapshot;
+  if (anchorUsage && anchorSnapshot) {
+    const currentHeaderFp = createFingerprintOnly({
+      provider: anchorSnapshot.provider,
+      model: anchorSnapshot.model,
+      systemMessages: input.systemMessages,
+      tools: input.tools
+    });
+    if (currentHeaderFp === anchorSnapshot.headerFingerprint) {
+      const anchorConv = estimateConversationTokens(anchorSnapshot.conversation);
+      const headerFromUsage = Math.max(0, anchorUsage.promptTokens - anchorConv);
+      if (headerFromUsage > 0) {
+        headerTokens = headerFromUsage;
+        headerAnchored = true;
+      }
+    }
+  }
+  const estimatedPromptTokens = headerTokens + currentConversationTokens;
+  const reservedOutput = input.reservedOutputTokens ?? 0;
+  const contextPressureTokens = estimatedPromptTokens + reservedOutput;
+  return {
+    estimatedPromptTokens,
+    estimatedHeaderTokens,
+    headerAnchored,
+    contextPressureTokens,
+    occupancy: Math.min(1, contextPressureTokens / input.contextLimit),
+    purpose: input.purpose ?? "conversation"
+  };
+}
+
+// src/cli/budget/persistCompact.ts
+init_dist();
+init_session();
+init_headlessSpine();
+function compactEventPayload(budget, stateSnapshot, telemetry) {
+  const summary = budget.compactSummary ?? "";
+  const first = budget.history[0];
+  const narrative = first?.role === "user" && first.content.includes("<compacted-summary>") ? first.content : summary;
+  const checkpointContent2 = stateSnapshot ? formatCompactionStateSnapshot(stateSnapshot) + "\n\n" + narrative : narrative;
+  const ranged = budget.compactedFromSeq !== void 0 && budget.compactedToSeq !== void 0;
+  return {
+    summary,
+    messagesRemoved: budget.messagesRemoved ?? 0,
+    ...telemetry ? { ...telemetry } : {},
+    ...ranged ? {
+      fromSeq: budget.compactedFromSeq,
+      toSeq: budget.compactedToSeq,
+      checkpoint: { role: "user", content: checkpointContent2 },
+      ...budget.compactStrategy ? { strategy: budget.compactStrategy } : {},
+      ...budget.compactSourceSeqs && budget.compactSourceSeqs.length > 0 ? { sourceEventSeqs: budget.compactSourceSeqs } : {},
+      ...stateSnapshot ? {
+        retainedCriterionIds: stateSnapshot.activeCriteria.filter((criterion) => criterion.required).map((criterion) => criterion.id),
+        retainedEvidenceRefs: stateSnapshot.retainedEvidenceRefs,
+        retainedState: {
+          unresolvedIssueIds: stateSnapshot.unresolvedIssues.map((issue2) => issue2.id),
+          affectedFiles: stateSnapshot.affectedFiles,
+          ...stateSnapshot.missionState?.phase ? { missionStateRef: "phase:" + stateSnapshot.missionState.phase } : {}
+        },
+        stateSnapshot
+      } : {}
+    } : {}
+  };
+}
+
+// src/cli/budget/modelContextBuilder.ts
+init_headlessSpine();
+function messageWasRecompacted(message, history2) {
+  if (message.compactedFromSeq === void 0) return false;
+  return !history2.some((candidate) => candidate.seq !== void 0 && candidate.seq === message.seq);
+}
+async function sessionHistory(session) {
+  if (!session || session.status !== "active") return null;
+  const derived = await session.derivedPriorTurns();
+  if (!derived || derived.length === 0) return null;
+  return derivedModelSeed(derived);
+}
+async function buildModelContext(input) {
+  const derived = await sessionHistory(input.session);
+  const source = derived ? "session" : "fallback";
+  const sourceHistory = derived ?? [...input.fallbackHistory];
+  const inputTokens = estimateHistoryTokens(sourceHistory);
+  const requestSurface = input.systemMessages || input.tools ? {
+    provider: input.provider ?? "local",
+    model: input.model ?? "unknown",
+    systemMessages: input.systemMessages ?? [],
+    tools: input.tools ?? []
+  } : null;
+  let budget = await applyBudgetPolicyAsync(sourceHistory, input.phase, {
+    model: input.model,
+    sessionTokens: input.sessionTokens,
+    sessionId: input.sessionId,
+    signal: input.signal,
+    requestSnapshot: input.requestSnapshot,
+    requestSurface,
+    providerStream: input.providerStream
+  });
+  let history2 = budget.history;
+  let compactionPayload;
+  let durableCompaction = false;
+  let reconstructedFromSession = false;
+  let compactionMetrics;
+  if ((budget.messagesRemoved ?? 0) > 0) {
+    const ranged = budget.compactedFromSeq !== void 0 && budget.compactedToSeq !== void 0;
+    const stateSnapshot = ranged && input.session?.compactionStateSnapshot ? await input.session.compactionStateSnapshot(budget.compactedToSeq) : null;
+    const outputTokens = estimateHistoryTokens(budget.history);
+    const telemetry = {
+      inputTokens,
+      outputTokens,
+      savedTokens: Math.max(0, inputTokens - outputTokens),
+      recompactionRate: sourceHistory.some(
+        (message) => messageWasRecompacted(message, budget.history)
+      ) ? 1 : 0,
+      summaryStrategy: budget.compactStrategy ?? "extractive",
+      ...budget.compactStrategy === "llm" && input.provider ? { provider: input.provider } : {},
+      ...budget.compactStrategy === "llm" && input.model ? { model: input.model } : {}
+    };
+    compactionPayload = compactEventPayload(budget, stateSnapshot, telemetry);
+    if (input.persistCompaction) {
+      await input.persistCompaction(compactionPayload, budget);
+      await input.session?.flush?.();
+      if (ranged && input.session?.status === "active") {
+        const replayed = await sessionHistory(input.session);
+        if (replayed) {
+          history2 = replayed;
+          durableCompaction = true;
+          reconstructedFromSession = true;
+        }
+      }
+    }
+    compactionMetrics = {
+      count: 1,
+      ...telemetry,
+      restoreFailures: ranged && input.persistCompaction && !reconstructedFromSession ? 1 : 0
+    };
+    input.onCompactionMetric?.(compactionMetrics);
+  }
+  if (requestSurface) {
+    const measured = measureRequest({
+      systemMessages: requestSurface.systemMessages,
+      tools: requestSurface.tools,
+      conversation: history2,
+      anchor: input.requestSnapshot,
+      contextLimit: budget.contextLimit,
+      reservedOutputTokens: 8192
+    });
+    budget = {
+      ...budget,
+      history: history2,
+      estimatedHistoryTokens: estimateHistoryTokens(history2),
+      occupancy: measured.occupancy,
+      contextPressureTokens: measured.contextPressureTokens
+    };
+  } else {
+    const estimated = estimateHistoryTokens(history2);
+    budget = {
+      ...budget,
+      history: history2,
+      estimatedHistoryTokens: estimated,
+      occupancy: Math.min(1, estimated / budget.contextLimit)
+    };
+  }
+  return {
+    history: history2,
+    budget,
+    source,
+    ...compactionPayload ? { compactionPayload } : {},
+    ...compactionMetrics ? { compactionMetrics } : {},
+    durableCompaction,
+    reconstructedFromSession
+  };
+}
+
 // src/cli/hooks/useChatTurn.ts
 init_requestSnapshotStore();
 function useChatTurn(params) {
@@ -56493,19 +58154,7 @@ function useChatTurn(params) {
       try {
         const anchored = maybeAnchorShortAnswer(userText);
         const effectiveUserText = anchored ?? userText;
-        let historyForModel;
-        {
-          const mirror = writerRef.current?.spine ?? null;
-          let spineSeed = null;
-          if (mirror && mirror.status === "active") {
-            const derived = await mirror.derivedPriorTurns();
-            if (derived && derived.length > 0) {
-              spineSeed = derivedModelSeed(derived);
-            }
-          }
-          historyForModel = spineSeed ?? getHistory();
-        }
-        writerRef.current?.spine?.userMessage(effectiveUserText);
+        let historyForModel = getHistory();
         const localCli = (process.env.ZELARI_LOCAL_CLI ?? "").trim();
         let localCliProvider = null;
         if (localCli) {
@@ -56547,7 +58196,7 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il turno continua dopo
           let settled = false;
           const askTimeoutMs = askUserTimeoutMs();
           let cancelAskTimeout = () => void 0;
-          const finish = (value) => {
+          const finish2 = (value) => {
             if (settled) return;
             settled = true;
             cancelAskTimeout();
@@ -56563,7 +58212,7 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il turno continua dopo
                 )}s \u2014 proseguo con assunzione documentata (ZELARI_ASK_USER_TIMEOUT_MS).`,
                 Date.now()
               );
-              finish(null);
+              finish2(null);
             },
             askTimeoutMs
           );
@@ -56571,8 +58220,8 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il turno continua dopo
             kind: "clarification",
             title: req.question,
             items: choices.map((c) => ({ value: c, label: c })),
-            onAnswer: (value) => finish(value),
-            onCancel: () => finish(null)
+            onAnswer: (value) => finish2(value),
+            onCancel: () => finish2(null)
           });
         }) : void 0;
         const onPermissionAsk = setPicker2 ? createPermissionAskHandler({
@@ -56634,33 +58283,42 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il turno continua dopo
           });
         }
         const cwd = process.cwd();
-        const budget = await applyBudgetPolicyAsync(historyForModel, getPhase(), {
+        const requestSnapshot = getRequestSnapshotWithUsage(sessionId2);
+        const modelContext = await buildModelContext({
+          fallbackHistory: historyForModel,
+          session: writerRef.current?.spine ?? null,
+          phase: workPhase,
           model: getActiveModel(),
+          provider: envConfig?.providerId ?? (localCli || "local"),
           sessionId: sessionId2,
-          // v1.36.0: envelope for full-request metering + cache-aware
-          // compaction replay (last warm prefix + provider usage anchor).
-          requestSnapshot: getRequestSnapshotWithUsage(sessionId2),
-          providerStream
+          requestSnapshot,
+          providerStream,
+          onCompactionMetric: (metrics2) => recordCompactionMetrics(
+            sessionId2,
+            envConfig?.providerId ?? (localCli || "local"),
+            getActiveModel(),
+            metrics2
+          ),
+          persistCompaction: async (payload, compactBudget) => {
+            const compactionEvent = createBrainEvent("session_compacted", sessionId2, {
+              ...payload,
+              ...requestSnapshot ? {
+                sourceRequestFingerprint: requestSnapshot.snapshot.requestFingerprint,
+                headerFingerprint: requestSnapshot.snapshot.headerFingerprint
+              } : {},
+              ...compactBudget.contextPressureTokens !== void 0 ? { sourceEstimatedTokens: compactBudget.contextPressureTokens } : {},
+              ...compactBudget.cacheReuseExpected !== void 0 ? { cacheReuseExpected: compactBudget.cacheReuseExpected } : {}
+            });
+            await writerRef.current?.append(compactionEvent);
+          }
         });
-        setHistory(budget.history);
-        for (const w of budget.warnings) {
-          appendSystem(setMessages, w, Date.now());
-        }
-        if ((budget.messagesRemoved ?? 0) > 0) {
-          const envelope = getRequestSnapshotWithUsage(sessionId2);
-          const compactionEvent = createBrainEvent("session_compacted", sessionId2, {
-            summary: budget.compactSummary ?? "",
-            messagesRemoved: budget.messagesRemoved ?? 0,
-            ...envelope ? {
-              sourceRequestFingerprint: envelope.snapshot.requestFingerprint,
-              headerFingerprint: envelope.snapshot.headerFingerprint
-            } : {},
-            ...budget.contextPressureTokens !== void 0 ? { sourceEstimatedTokens: budget.contextPressureTokens } : {},
-            ...budget.cacheReuseExpected !== void 0 ? { cacheReuseExpected: budget.cacheReuseExpected } : {}
-          });
-          void writerRef.current?.append(compactionEvent);
+        const budget = modelContext.budget;
+        historyForModel = modelContext.history;
+        setHistory(historyForModel);
+        for (const warning of budget.warnings) {
+          appendSystem(setMessages, warning, Date.now());
         }
-        historyForModel = budget.history;
+        writerRef.current?.spine?.userMessage(effectiveUserText);
         historySeedLen = historyForModel.length;
         let composedWorkspace = "";
         let composedInstructions = "";
@@ -57299,33 +58957,33 @@ async function dispatchCouncilPromptImpl(text, deps, overrides = {}) {
     return { completionOk: false, ran: false };
   }
   setBusy(true);
-  let councilHistory = getHistory();
-  {
-    const mirror = writerRef.current?.spine ?? null;
-    if (mirror && mirror.status === "active") {
-      const derived = await mirror.derivedPriorTurns();
-      if (derived && derived.length > 0) {
-        councilHistory = derivedModelSeed(derived);
-      }
+  const anchored = maybeAnchorShortAnswer(text);
+  const effectiveText = anchored ?? text;
+  const councilContext = await buildModelContext({
+    fallbackHistory: getHistory(),
+    session: writerRef.current?.spine ?? null,
+    phase: getPhase(),
+    model: envConfig.model,
+    provider: envConfig.providerId,
+    sessionId: sessionId2,
+    onCompactionMetric: (metrics) => recordCompactionMetrics(
+      sessionId2,
+      envConfig.providerId,
+      envConfig.model,
+      metrics
+    ),
+    persistCompaction: async (payload) => {
+      await writerRef.current?.append(
+        createBrainEvent("session_compacted", sessionId2, payload)
+      );
     }
-  }
-  const councilBudget = await applyBudgetPolicyAsync(councilHistory, getPhase(), {
-    model: envConfig.model
   });
-  setHistory(councilBudget.history);
-  for (const w of councilBudget.warnings) {
-    appendSystem(setMessages, w, Date.now());
+  const councilBudget = councilContext.budget;
+  setHistory(councilContext.history);
+  for (const warning of councilBudget.warnings) {
+    appendSystem(setMessages, warning, Date.now());
   }
-  if ((councilBudget.messagesRemoved ?? 0) > 0) {
-    void writerRef.current?.append(
-      createBrainEvent("session_compacted", sessionId2, {
-        summary: councilBudget.compactSummary ?? "",
-        messagesRemoved: councilBudget.messagesRemoved ?? 0
-      })
-    );
-  }
-  const anchored = maybeAnchorShortAnswer(text);
-  const effectiveText = anchored ?? text;
+  writerRef.current?.spine?.userMessage(effectiveText);
   appendSystem(
     setMessages,
     `[phase] ${describePhase(getPhase())}`,
@@ -57361,7 +59019,7 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il membro riprende dop
     let settled = false;
     const askTimeoutMs = askUserTimeoutMs();
     let cancelAskTimeout = () => void 0;
-    const finish = (value) => {
+    const finish2 = (value) => {
       if (settled) return;
       settled = true;
       cancelAskTimeout();
@@ -57377,7 +59035,7 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il membro riprende dop
           )}s \u2014 il membro prosegue con assunzione documentata (ZELARI_ASK_USER_TIMEOUT_MS).`,
           Date.now()
         );
-        finish(null);
+        finish2(null);
       },
       askTimeoutMs
     );
@@ -57385,8 +59043,8 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il membro riprende dop
       kind: "clarification",
       title: req.question,
       items: choices.map((c) => ({ value: c, label: c })),
-      onAnswer: (value) => finish(value),
-      onCancel: () => finish(null)
+      onAnswer: (value) => finish2(value),
+      onCancel: () => finish2(null)
     });
   }) : void 0;
   let phaseRunMode = overrides.runMode ?? (workPhase === "plan" ? "design-phase" : "implementation");
@@ -57530,7 +59188,7 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il membro riprende dop
           Date.now()
         );
         let settled = false;
-        const finish = (value) => {
+        const finish2 = (value) => {
           if (settled) return;
           settled = true;
           setPicker2(null);
@@ -57540,8 +59198,8 @@ _(${req.context})_` : "") + "\n\u2192 scegli dalla lista (il membro riprende dop
           kind: "clarification",
           title: req.question,
           items: choices.map((c) => ({ value: c, label: c })),
-          onAnswer: (value) => finish(value),
-          onCancel: () => finish(null)
+          onAnswer: (value) => finish2(value),
+          onCancel: () => finish2(null)
         });
       }) : void 0
     })) {
@@ -58146,7 +59804,7 @@ function usePermissionBroker(opts) {
       }
       let settled = false;
       let cancelWaitTimeout;
-      const finish = (value) => {
+      const finish2 = (value) => {
         if (settled) return;
         settled = true;
         cancelWaitTimeout?.();
@@ -58162,7 +59820,7 @@ function usePermissionBroker(opts) {
           )}s \u2014 richiesta annullata.`,
           Date.now()
         );
-        finish(null);
+        finish2(null);
       }, waitTimeoutMs);
       appendSystem(
         setMessages,
@@ -58174,8 +59832,8 @@ function usePermissionBroker(opts) {
         kind: "clarification",
         title: req.question,
         items: choices.map((c) => ({ value: c, label: c })),
-        onAnswer: (value) => finish(value),
-        onCancel: () => finish(null)
+        onAnswer: (value) => finish2(value),
+        onCancel: () => finish2(null)
       });
     });
     void startPermissionBroker(socketPath, {
@@ -62280,7 +63938,7 @@ function verifierReviewEnabled(selection = loadVerifierModelSelection(), env = p
   if (v === "1" || v === "true" || v === "on") return true;
   return selection.mode === "fixed";
 }
-function makeVerifierCallModel(loadStream, identity, timeoutMs = 12e4) {
+function makeVerifierCallModel(loadStream, identity, timeoutMs2 = 12e4) {
   return async ({ system, user }) => {
     const stream = await loadStream(identity.provider, identity.model);
     if (!stream) {
@@ -62294,7 +63952,7 @@ function makeVerifierCallModel(loadStream, identity, timeoutMs = 12e4) {
       model: identity.model,
       provider: identity.provider,
       tools: [],
-      signal: AbortSignal.timeout(timeoutMs)
+      signal: AbortSignal.timeout(timeoutMs2)
     });
     return { text, provider: identity.provider, model: identity.model };
   };
@@ -62339,6 +63997,7 @@ async function runAdvisoryVerifierReview(evaluation, deps = {}) {
 }
 
 // src/cli/runHeadless.ts
+init_metrics2();
 init_headlessSpine();
 async function runHeadless(opts) {
   resetTaskSpawnCount();
@@ -62451,6 +64110,18 @@ ${err.stack}` : "";
   if (opts.krakenGraph) {
     return runHeadlessKrakenGraph(opts, provider, model);
   }
+  const { shouldRunGauntletHostLoop: shouldRunGauntletHostLoop2 } = await Promise.resolve().then(() => (init_policy(), policy_exports));
+  if (shouldRunGauntletHostLoop2(opts)) {
+    const { runHeadlessGauntlet: runHeadlessGauntlet2 } = await Promise.resolve().then(() => (init_run(), run_exports));
+    return runHeadlessGauntlet2(opts, provider, model);
+  }
+  if (opts.gauntlet) {
+    const why = opts.krakenGraph ? "kraken-graph owns dispatch" : (opts.phase ?? "build") === "plan" ? "PLAN is already write-stripped; host loop is BUILD-only" : "mode is not kraken-build";
+    const line = `[gauntlet] flag set but host loop skipped (${why})`;
+    if (opts.output === "json") emitEvent({ type: "log", message: line });
+    else process.stderr.write(`[zelari-code --headless] ${line}
+`);
+  }
   if (mode === "zelari") {
     return runHeadlessZelari(opts, provider, model, providerStream);
   }
@@ -62662,11 +64333,11 @@ async function runHeadlessSingle(opts, provider, model, providerStream) {
   });
   const seededHistory = await seedHeadlessModelHistory(spine, opts.history);
   emitEvent(sessionStartedEvent(spine));
-  if (opts.task) spine.userMessage(opts.task);
   resetKrakenCandidates();
   resetKrakenTurnMetrics();
   const { registry: toolRegistry } = createBuiltinToolRegistry({
     planMode: planModeFromOpts(opts),
+    gauntletParent: Boolean(opts.gauntlet) && !planModeFromOpts(opts),
     // Fase 1 (ADR-0020): anchor tentacles to the provider/model THIS run
     // resolved (--provider/--model opts or Desktop's selector), mirroring
     // what the kraken-graph path already does for its executor.
@@ -62811,14 +64482,38 @@ async function runHeadlessSingle(opts, provider, model, providerStream) {
       }
     ];
   }
-  const historySeed = seededHistory.history;
+  const modelContext = await buildModelContext({
+    fallbackHistory: seededHistory.history,
+    session: spine.spine,
+    phase: opts.phase ?? "build",
+    model,
+    provider,
+    systemMessages,
+    tools,
+    sessionId: spine.sessionId,
+    providerStream,
+    onCompactionMetric: (metrics) => recordCompactionMetrics(spine.sessionId, provider, model, metrics),
+    persistCompaction: async (payload) => {
+      await spine.appendEvent({
+        kind: "session.compacted",
+        actor: { type: "system" },
+        data: { ...payload }
+      });
+    }
+  });
+  const historySeed = modelContext.history;
+  for (const warning of modelContext.budget.warnings) {
+    if (opts.output === "json") emitEvent({ type: "log", message: warning });
+    else process.stderr.write("[zelari-code --headless] " + warning + "\n");
+  }
   const effectiveTask = buildAgentUserWithHistory(opts.task, historySeed);
+  if (opts.task) spine.userMessage(effectiveTask);
   const maxToolLoop = (() => {
     const n = envNumber(process.env.ZELARI_MAX_TOOL_LOOP_ITERATIONS, {
       default: 30,
       min: 1
     });
-    return n;
+    return Math.min(n, modelContext.budget.maxToolLoopIterations);
   })();
   async function runSinglePass(messages, passSessionId) {
     const harness = new AgentHarness({
@@ -63119,7 +64814,6 @@ async function runHeadlessCouncil(opts, provider, model, providerStream) {
   });
   const seededHistory = await seedHeadlessModelHistory(spine, opts.history);
   emitEvent(sessionStartedEvent(spine));
-  if (opts.task) spine.userMessage(opts.task);
   const { shouldAllowCouncilBuild: shouldAllowCouncilBuild2 } = await Promise.resolve().then(() => (init_buildPolicy(), buildPolicy_exports));
   let councilRunMode = planModeFromOpts(opts) ? "design-phase" : "implementation";
   let softGated = false;
@@ -63136,8 +64830,36 @@ async function runHeadlessCouncil(opts, provider, model, providerStream) {
   );
   const { FeedbackStore: FeedbackStore2 } = await Promise.resolve().then(() => (init_councilFeedback(), councilFeedback_exports));
   const feedbackStore = new FeedbackStore2();
-  const historySeed = seededHistory.history;
+  const contextTools = toolRegistry.toOpenAITools().map((tool) => ({
+    name: tool.function.name,
+    description: tool.function.description,
+    parameters: tool.function.parameters
+  }));
+  const councilContext = await buildModelContext({
+    fallbackHistory: seededHistory.history,
+    session: spine.spine,
+    phase: councilRunMode === "design-phase" ? "plan" : "build",
+    model,
+    provider,
+    tools: contextTools,
+    sessionId: spine.sessionId,
+    providerStream,
+    onCompactionMetric: (metrics) => recordCompactionMetrics(spine.sessionId, provider, model, metrics),
+    persistCompaction: async (payload) => {
+      await spine.appendEvent({
+        kind: "session.compacted",
+        actor: { type: "system" },
+        data: { ...payload }
+      });
+    }
+  });
+  const historySeed = councilContext.history;
+  for (const warning of councilContext.budget.warnings) {
+    if (opts.output === "json") emitEvent({ type: "log", message: warning });
+    else process.stderr.write("[zelari-code --headless] " + warning + "\n");
+  }
   const effectiveTask = buildCouncilTaskWithHistory(opts.task, historySeed);
+  if (opts.task) spine.userMessage(effectiveTask);
   let exitCode = 0;
   const scrub = createStreamScrubber2();
   let lastAssistantText = "";
@@ -63247,7 +64969,6 @@ async function runHeadlessZelari(opts, provider, model, providerStream) {
   });
   const seededHistory = await seedHeadlessModelHistory(spine, opts.history);
   emitEvent(sessionStartedEvent(spine));
-  if (opts.task) spine.userMessage(opts.task);
   spine.missionPhase("design", "mission-start");
   const { buildMissionBrief: buildMissionBrief2 } = await Promise.resolve().then(() => (init_council(), council_exports));
   const { hasWorkspacePlan: hasWorkspacePlan2 } = await Promise.resolve().then(() => (init_planDetect(), planDetect_exports));
@@ -63279,8 +65000,33 @@ async function runHeadlessZelari(opts, provider, model, providerStream) {
       process.stderr.write(message + "\n");
     }
   };
-  const historySeed = seededHistory.history;
+  const contextTools = toolRegistry.toOpenAITools().map((tool) => ({
+    name: tool.function.name,
+    description: tool.function.description,
+    parameters: tool.function.parameters
+  }));
+  const missionContext = await buildModelContext({
+    fallbackHistory: seededHistory.history,
+    session: spine.spine,
+    phase: opts.phase ?? "build",
+    model,
+    provider,
+    tools: contextTools,
+    sessionId: spine.sessionId,
+    providerStream,
+    onCompactionMetric: (metrics) => recordCompactionMetrics(spine.sessionId, provider, model, metrics),
+    persistCompaction: async (payload) => {
+      await spine.appendEvent({
+        kind: "session.compacted",
+        actor: { type: "system" },
+        data: { ...payload }
+      });
+    }
+  });
+  const historySeed = missionContext.history;
+  for (const warning of missionContext.budget.warnings) emit(warning);
   const missionTask = buildCouncilTaskWithHistory(opts.task, historySeed);
+  if (opts.task) spine.userMessage(missionTask);
   emit(`[zelari] mission brief
 ${JSON.stringify({ deliverable: brief.deliverableThisMission, mvp: brief.sliceMvp?.title }, null, 0)}`);
   if (buildViaAgent) {