zob-harness 0.15.4 → 0.16.0

package/.pi/capabilities/zob-public-runtime-capabilities.json

@@ -125,7 +125,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Primary parent-owned TODO transition path; child no_ship is review evidence, not delivery success/failure by itself."
+      "noShipNotes": "Primary parent-owned TODO transition path; child no_ship is review evidence, not delivery success/failure by itself. Transitions bind the strict canonical todo_id (or dual agreed todo_id+todo_path; reference_mismatch/invalid_todo_id are fail-closed and never retarget a failed todo_id through todo_path). Terminal accept/complete transitions require mandatory CAS/revision agreement, while normal transitions may use optional observe-first CAS; mutation_id is replay-idempotent and conflicting state fails closed. Claim attempts are tracked separately, so a recovered/re-delegated attempt is distinct from the original."
     },
     {
       "name": "complete_goal_todo",
@@ -221,7 +221,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Records oracle validation metadata for a returned delegated TODO claim; auto-accept requires exact claim_hash, PASS, recommended_action=accept_claim, no_ship=false, acceptable confidence, and no blocking issues."
+      "noShipNotes": "Records oracle validation metadata for a returned delegated TODO claim; auto-accept requires exact claim_hash, PASS, recommended_action=accept_claim, no_ship=false, acceptable confidence, and no blocking issues. Validation is attempt-separated and CAS/revision-gated: the validated claim_hash must match the exact returned attempt (a recovered/re-delegated attempt has a distinct claim_hash) and any mismatch or stale/ambiguous state fails closed."
     },
     {
       "name": "accept_goal_todo_claim",
@@ -261,6 +261,27 @@
       ],
       "noShipNotes": "Delegated TODO claim metadata only."
     },
+    {
+      "name": "recover_goal_todo_delegation",
+      "family": "goal",
+      "modes": [
+        "explore",
+        "plan",
+        "implement",
+        "oracle",
+        "factory",
+        "orchestrator"
+      ],
+      "skillRefs": [
+        ".pi/skills/zob-goal-todo-tree/SKILL.md",
+        ".pi/skills/zob-delegation-routing/SKILL.md",
+        ".pi/skills/zob-oracle/SKILL.md"
+      ],
+      "docRefs": [
+        ".pi/extensions/zob-harness/src/AGENTS.md"
+      ],
+      "noShipNotes": "Parent-owned recovery of a stuck delegated Goal TODO lane only; goal TODO metadata repair, not a source edit and not a completion. Requires a strict canonical todo_id (never path text -> invalid_todo_id) or dual agreed todo_id+todo_path (reference_mismatch on disagreement; a failed todo_id is never retargeted through todo_path). Allowed only for recoverable delegated lanes (failed/rejected/orphan) when no active child/run owns the leaf; active/running delegated work is blocked with split-before-parallel guidance and must not be double-delegated. Terminal recovery is CAS/revision-gated and fail-closed on stale/unknown state; observe-only inspection is permitted but never auto-corrects or shadows a blocked lane. mutation_id is replay-idempotent (returns the existing result) and a conflicting mutation_id against changed state is a CAS conflict, not a silent overwrite. The prior child's liveness is treated as unknown; recovery never auto-redelegates the same leaf and never completes the parent TODO or bypasses oracle/no_ship/evidence gates. Durable records stay hash-only/body-free (claim_hash/output_hash and artifact refs only); legacy unbound/stale events/claims/proposals remain readable but fail-closed until explicitly revalidated/recovered with no silent upgrade."
+    },
     {
       "name": "import_factory_todos",
       "family": "goal",
@@ -398,7 +419,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Proposal only; oracle record still required for completion evidence."
+      "noShipNotes": "Proposal only; oracle record still required for completion evidence. Completion is a terminal transition and is CAS/revision-gated with mandatory agreement; observe-only is not accepted for completion and stale/ambiguous state fails closed."
     },
     {
       "name": "record_goal_oracle",
@@ -418,7 +439,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Records oracle verdict metadata only."
+      "noShipNotes": "Records oracle verdict metadata only. Oracle records are terminal and CAS/revision-gated: the recorded claim_hash must match the exact validated attempt and stale/ambiguous state fails closed; observe-only is not accepted for an oracle record."
     },
     {
       "name": "update_goal",
@@ -719,7 +740,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Agent-initiated visible ZPeer ask; local_socket only, room-scoped with optional explicit roomId, mode defaults async, opt-in requireResponse tracks msgId-correlated replies with bounded timeout/reinjection metadata, normal/urgent/force are rate/loop guarded, force requires a hashed reason and role/topology guards, raw bodies transient and durable records hash-only."
+      "noShipNotes": "Agent-initiated visible ZPeer ask; local_socket only, room-scoped with optional explicit roomId, mode defaults async and waiting is delivery-only, opt-in requireResponse tracks msgId-correlated replies with bounded timeout/reinjection metadata, normal short-task responses are auto-captured only from an exact custom-message msgId, goal-bound responses wait for terminal goal state, ambiguous inbounds fail closed, normal/urgent/force are rate/loop guarded, force requires a hashed reason and role/topology guards, raw bodies transient and durable records hash-only."
     },
     {
       "name": "zpeer_reply",
@@ -739,7 +760,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Explicit msgId-bound ZPeer reply path for active inbound messages; local_socket only, requires exact active msgId, wrong/expired/already-answered msgIds are blocked, raw reply body is transient and durable metadata stores outputHash/status only."
+      "noShipNotes": "Explicit msgId-bound ZPeer reply path for active inbound messages and fail-closed fallback when automatic binding is ambiguous; local_socket only, requires exact active msgId, wrong/expired/already-answered msgIds are blocked, raw reply body is transient and durable metadata stores outputHash/status only."
     },
     {
       "name": "zob_goal_room_send",

package/.pi/extensions/zob-harness/index.ts

@@ -4,6 +4,7 @@ import zobHarnessRuntime from "./src/runtime/zobHarness.js";
 
 export { renderHarnessWidget } from "./src/runtime/widget.js";
 export { createHarnessRuntimeState, inferModeFromUserIntent } from "./src/runtime/state.js";
+export { FILE_TOOL_RELIABILITY_PROMPT } from "./src/runtime/events.js";
 
 export type {
   AdaptiveDelegationGovernorState,
@@ -27,12 +28,20 @@ export type { ChronicleState } from "./src/domains/telemetry/chronicle.js";
 
 export type {
   ChildStopCondition,
+  OutputGateIssue,
+  OutputGateIssueClassification,
+  OutputGateIssueCode,
   RuleAppliesTo,
   RuleEnforcementLevel,
   RuleOracleRequirement,
   RulePack,
   RuleResolution,
   RuleResolverInput,
+  ToolFailureAttempt,
+  ToolFailureClass,
+  ToolFailureReasonCode,
+  ToolFailureReplayFixture,
+  ToolFailureReplaySummary,
 } from "./src/types.js";
 
 export { pathMatches } from "./src/core/utils/paths.js";
@@ -41,6 +50,44 @@ export { parseGoalState, validateGoalState, validateStrictGoalSpecAnchor, parseB
 export type { StrictGoalSpecAnchor, StrictGoalSpecAnchorKind } from "./src/domains/goal/goal.js";
 export { DEFAULT_GOAL_ACTIVATION_MODE, clearRuntimeGoalContinuationState, clearRuntimeGoalContinuationStateFor, formatGoalActivationMode, formatRuntimeGoalSummary, hasPendingUndeliveredZpeerInbound, queueRuntimeGoalContinuation, restoreRuntimeGoalFromBranch, resumeRuntimeGoal, runtimeGoalStatusLine } from "./src/runtime/goal-runtime.js";
 export type { GoalActivationMode, RuntimeGoal, RuntimeGoalStatus, RuntimeGoalOracleStatus, RuntimeGoalOracleVerdict } from "./src/runtime/goal-runtime.js";
+export {
+  buildRuntimeGoalCompletionProposal,
+  buildRuntimeGoalOracleBinding,
+  evaluateRuntimeGoalCompletionProposalFreshness,
+  evaluateRuntimeGoalOracleFreshness,
+  formatRuntimeGoalCompletionProposal,
+  formatRuntimeGoalOracleBinding,
+  hashRuntimeGoalCompletionProposal,
+  hashRuntimeGoalCompletionProposalArray,
+  hashRuntimeGoalOracleDecision,
+  hashRuntimeGoalOracleEvidence,
+  isRuntimeGoalCompletionProposalV2,
+  isRuntimeGoalOracleBindingV2,
+  normalizeRuntimeGoalCompletionProposal,
+  normalizeRuntimeGoalOracleState,
+  publicRuntimeGoal,
+  runtimeGoalCompletionProposalPublicDetails,
+  runtimeGoalOraclePublicDetails,
+} from "./src/runtime/goal-runtime/state.js";
+export type {
+  BuildRuntimeGoalCompletionProposalInput,
+  BuildRuntimeGoalOracleBindingInput,
+  EvaluateRuntimeGoalCompletionProposalFreshnessInput,
+  EvaluateRuntimeGoalOracleFreshnessInput,
+  RuntimeGoalCompletionProposalFreshness,
+  RuntimeGoalCompletionProposalFreshnessCode,
+  RuntimeGoalCompletionProposalFreshnessStatus,
+  RuntimeGoalCompletionProposalLegacy,
+  RuntimeGoalCompletionProposalMalformed,
+  RuntimeGoalCompletionProposalSafeReproposeAction,
+  RuntimeGoalCompletionProposalV2,
+  RuntimeGoalEntry,
+  RuntimeGoalOracleBindingV2,
+  RuntimeGoalOracleFreshness,
+  RuntimeGoalOracleFreshnessCode,
+  RuntimeGoalOracleFreshnessStatus,
+  RuntimeGoalRevisionDiagnostic,
+} from "./src/runtime/goal-runtime/state.js";
 export { extractModeIntent, looksLikeCompletePlanResponse, stripModeIntentMarkup, validateModeIntent } from "./src/runtime/mode-intent.js";
 export type { ZobModeIntent, ZobModeIntentConfidence, ZobModeIntentRisk, ZobModeIntentValidation } from "./src/runtime/mode-intent.js";
 export { capturePlanArtifact, extractPlanTitle, listCapturedPlanEntries, shouldCapturePlanResponse, updateCapturedPlanEntry } from "./src/runtime/plan-capture.js";
@@ -91,7 +138,139 @@ export {
   summarizeGoalTodos,
   validateGoalTodoGraph,
 } from "./src/domains/goal/goal-todos.js";
-export type { GoalRoomTodoReducerAction, GoalRoomTodoReducerDecision, GoalTodoClaimRef, GoalTodoClaimValidationRef, GoalTodoCompletionDiagnostics, GoalTodoNode, GoalTodoOwner, GoalTodoPolicy, GoalTodoPriority, GoalTodoState, GoalTodoStatus, GoalTodoSummary, ResolveGoalTodoAction, TodoClaimValidationResult, TodoSplitRequest, TodoSplitRequestAction, TodoSplitRiskLevel } from "./src/domains/goal/goal-todos.js";
+export { GoalTodoTransitionError, assertCurrentGoalTodoClaimSettlementBinding, assertCurrentGoalTodoClaimValidationBinding, authorizeGoalTodoTransition, finalizeGoalTodoDelegationAttempt, isCanonicalGoalTodoClaimBinding, markGoalTodoDelegationFailed, recoverGoalTodoDelegation, updateGoalTodo } from "./src/domains/goal/goal-todos/operations.js";
+export type { FinalizeGoalTodoDelegationAttemptInput, GoalTodoClaimBindingExpectation, GoalTodoTransitionAuthorization, RecoverGoalTodoDelegationInput } from "./src/domains/goal/goal-todos/operations.js";
+export { assessDelegationAttemptLiveness } from "./src/runtime/delegation-monitor.js";
+export {
+  CANONICAL_GOAL_TODO_ID_PATTERN,
+  VISIBLE_GOAL_TODO_PATH_PATTERN,
+  GoalTodoReferenceResolutionError,
+  adaptLegacyGoalTodoReference,
+  goalTodoReferenceDiagnostic,
+  resolveCanonicalGoalTodoReference,
+  resolveCanonicalGoalTodoReferences,
+  throwGoalTodoReferenceResolution,
+} from "./src/domains/goal/goal-todos/reference.js";
+export type {
+  GoalTodoCanonicalReferenceInput,
+  GoalTodoReferenceBatchResolution,
+  GoalTodoReferenceCandidate,
+  GoalTodoReferenceCode,
+  GoalTodoReferenceDiagnostic,
+  GoalTodoReferenceError,
+  GoalTodoReferenceField,
+  GoalTodoReferenceResolution,
+  GoalTodoReferenceRetryPolicy,
+  GoalTodoReferenceSafeNextAction,
+} from "./src/domains/goal/goal-todo-types.js";
+export type { GoalRoomTodoReducerAction, GoalRoomTodoReducerDecision, GoalTodoClaimRef, GoalTodoClaimValidationRef, GoalTodoCompletionDiagnostics, GoalTodoEvent, GoalTodoNode, GoalTodoOwner, GoalTodoPolicy, GoalTodoPriority, GoalTodoState, GoalTodoStatus, GoalTodoSummary, ResolveGoalTodoAction, TodoClaimValidationResult, TodoSplitRequest, TodoSplitRequestAction, TodoSplitRiskLevel } from "./src/domains/goal/goal-todos.js";
+export {
+  GOAL_TODO_STATUSES,
+  GOAL_TODO_TRANSITION_ACTIONS,
+  GOAL_TODO_TRANSITION_TABLE,
+  decideGoalTodoTransition,
+  getGoalTodoTransitionRule,
+  listGoalTodoTransitionRules,
+} from "./src/domains/goal/goal-todos/transition-engine.js";
+export { GOAL_MUTATION_PHASE_CODES } from "./src/domains/goal/goal-todo-types.js";
+export type {
+  GoalMutationAppliedExecution,
+  GoalMutationAppliedOutcome,
+  GoalMutationApplyFailureMode,
+  GoalMutationApplyResult,
+  GoalMutationCanonicalRequest,
+  GoalMutationCasInput,
+  GoalMutationCasOutcome,
+  GoalMutationConflictOutcome,
+  GoalMutationCurrentRevisions,
+  GoalMutationExecutionDiagnostic,
+  GoalMutationExecutionInput,
+  GoalMutationExecutionOutcome,
+  GoalMutationFailedExecution,
+  GoalMutationFailureCode,
+  GoalMutationGuard,
+  GoalMutationObservation,
+  GoalMutationObservedExecution,
+  GoalMutationPhase,
+  GoalMutationPreparation,
+  GoalMutationPreparationInput,
+  GoalMutationPreparationPhase,
+  GoalMutationProtocolRecord,
+  GoalMutationPublicGuard,
+  GoalMutationReceipt,
+  GoalMutationReceiptDiagnostic,
+  GoalMutationReceiptDiagnosticCode,
+  GoalMutationReceiptInput,
+  GoalMutationReceiptState,
+  GoalMutationRejectedOutcome,
+  GoalMutationReplayedExecution,
+  GoalMutationReplayedOutcome,
+  GoalMutationSideEffectRef,
+  GoalMutationSideEffectState,
+  GoalMutationStaleOutcome,
+  GoalTodoClaimResolutionBinding,
+  GoalTodoClaimValidationPolicy,
+  GoalTodoDelegationAttempt,
+  GoalTodoDelegationAttemptFailureKind,
+  GoalTodoDelegationAttemptReasonCode,
+  GoalTodoDelegationAttemptStatus,
+  GoalTodoDelegationLiveness,
+  GoalTodoDelegationLivenessAssessmentStatus,
+  GoalTodoDelegationLivenessProof,
+  GoalTodoDelegationLivenessProofCode,
+  GoalTodoDelegationLivenessProofSource,
+  GoalTodoDelegationRecovery,
+  GoalTodoLegacyEvent,
+  GoalTodoPatchClearField,
+  GoalTodoRevisionDiagnostic,
+  GoalTodoRevisionDiagnosticCode,
+  GoalTodoRevisionEvent,
+  GoalTodoTransitionAction,
+  GoalTodoTransitionCode,
+  GoalTodoTransitionContext,
+  GoalTodoTransitionDecision,
+  GoalTodoTransitionDiagnostic,
+  GoalTodoTransitionGuard,
+  GoalTodoTransitionInput,
+  GoalTodoTransitionOperationContext,
+  GoalTodoTransitionRetryPolicy,
+  GoalTodoTransitionRule,
+  GoalTodoTransitionRuleDiagnostic,
+  GoalTodoTransitionTable,
+} from "./src/domains/goal/goal-todo-types.js";
+export {
+  GOAL_MUTATION_ID_PATTERN,
+  GOAL_MUTATION_PREPARATION_ENTRY_TYPE,
+  GOAL_MUTATION_PREPARATION_SCHEMA,
+  GOAL_MUTATION_RECEIPT_ENTRY_TYPE,
+  GOAL_MUTATION_RECEIPT_SCHEMA,
+  blockGoalMutationReceiptState,
+  canonicalGoalMutationJson,
+  cloneGoalMutationReceipt,
+  cloneGoalMutationReceiptState,
+  createGoalMutationPreparation,
+  createGoalMutationReceipt,
+  createGoalMutationReceiptState,
+  evaluateGoalMutationCas,
+  finalizeGoalMutationReceiptRestore,
+  hashGoalMutationRequest,
+  indexGoalMutationPreparation,
+  indexGoalMutationReceipt,
+  indexGoalMutationReceiptEntry,
+  isCanonicalGoalMutationId,
+  isCanonicalGoalMutationRequestHash,
+  markGoalMutationInDoubt,
+  normalizeGoalMutationPreparation,
+  normalizeGoalMutationReceipt,
+  restoreGoalMutationReceiptsFromBranch,
+} from "./src/domains/goal/mutation-cas.js";
+export { GoalDelegationRecoveryGuardSchema, GoalMutationGuardProperties, GoalMutationGuardSchema, GoalTodoCanonicalReferenceProperties, GoalTodoCanonicalReferenceSchema, GoalTodoClaimHashSchema, parseOptionalGoalMutationGuard, parseRequiredGoalDelegationRecoveryGuard } from "./src/runtime/goal-runtime/schemas.js";
+export { GOAL_MUTATION_TOOL_NAMES, isGoalMutationToolName } from "./src/runtime/goal-runtime/mutation-tools.js";
+export type { GoalMutationToolName } from "./src/runtime/goal-runtime/mutation-tools.js";
+export { buildGoalMutationCanonicalRequest, executeGoalMutationCas } from "./src/runtime/goal-runtime/mutation-cas.js";
+export type { GoalMutationCanonicalRequestInput, GoalMutationCanonicalRequestResult } from "./src/runtime/goal-runtime/mutation-cas.js";
+export { GOAL_HANDOFF_EFFECT_FLAGS, buildGoalHandoffCanonicalPayload, executeGoalHandoffCas } from "./src/runtime/goal-runtime/handoff.js";
+export type { GoalHandoffCanonicalPayload, GoalHandoffCasExecution, GoalHandoffCasExecutionInput, GoalHandoffCasPreflight } from "./src/runtime/goal-runtime/handoff.js";
 export { importChainRunTodos, importFactoryRunTodos, importOrchestrationRunTodos } from "./src/domains/goal/goal-todo-imports.js";
 export type { GoalTodoImportResult } from "./src/domains/goal/goal-todo-imports.js";
 export { appendGoalRoomMessage, buildGoalRoomMessage, goalRoomBodyFreeViolations, isGoalRoomMessage, listGoalRoomMessages, validateGoalRoomMessageInput, validateGoalRoomMessageRecord } from "./src/domains/goal/goal-room.js";
@@ -461,17 +640,54 @@ export {
 } from "./src/domains/governance/safety.js";
 
 export {
+  OUTPUT_GATE_ISSUE_CODES,
   listOutputContracts,
   getOutputContractDefinitions,
+  getOutputContractFinalMarker,
   inferOutputContract,
   validateOutputContractId,
   validateOutputContract,
+  validateOutputContractIssues,
   validateChildOutput,
+  validateChildOutputIssues,
   applyChildGates,
 } from "./src/domains/delegation/output-contracts.js";
 
+export { createChildSessionPath } from "./src/domains/delegation/child-runner.js";
+
 export { buildChildEnv } from "./src/domains/governance/safety.js";
 
+export {
+  DEFAULT_CONTENT_READ_BUDGET_BYTES,
+  FILE_TOOL_PREFLIGHT_FIELDS,
+  FILE_TOOL_PREFLIGHT_REASON_CODES,
+  FILE_TOOL_PREFLIGHT_RETRY_POLICIES,
+  FILE_TOOL_PREFLIGHT_SAFE_NEXT_ACTIONS,
+  FILE_TOOL_PREFLIGHT_TOOLS,
+  FILE_TOOL_PREFLIGHT_VERDICTS,
+  createFileToolPreflightRuntimeState,
+  fileToolPreflightBodyLikeFieldViolations,
+  persistFileToolPreflightDecision,
+  preflightFileToolCall,
+  validateFileToolPreflightDecision,
+  validateFileToolPreflightLedgerEntry,
+} from "./src/domains/governance/file-tool-preflight.js";
+export type {
+  FileToolPreflightCall,
+  FileToolPreflightDecision,
+  FileToolPreflightField,
+  FileToolPreflightIo,
+  FileToolPreflightLedgerEntry,
+  FileToolPreflightPolicy,
+  FileToolPreflightReasonCode,
+  FileToolPreflightRecordResult,
+  FileToolPreflightRetryPolicy,
+  FileToolPreflightRuntimeState,
+  FileToolPreflightSafeNextAction,
+  FileToolPreflightTool,
+  FileToolPreflightVerdict,
+} from "./src/domains/governance/file-tool-preflight.js";
+
 export {
   validateSandboxWritePlanInputs,
   runSandboxWritePlan,
@@ -507,6 +723,18 @@ export {
   writeChronicleSnapshot,
 } from "./src/domains/telemetry/chronicle.js";
 
+export {
+  TOOL_FAILURE_CLASSES,
+  TOOL_FAILURE_REASON_CODES,
+  TOOL_FAILURE_TAXONOMY_REVISION,
+  replayToolFailureAttempts,
+  replayToolFailureFixtures,
+  fileToolPreflightFingerprint,
+  toolFailureBodyLikeFieldViolations,
+  toolFailureIncidentKey,
+  validateToolFailureReplayFixture,
+} from "./src/domains/telemetry/tool-failures.js";
+
 export { buildCapabilityIndex, buildReuseScoutReport, writeCapabilityIndex, writeReuseScoutReport } from "./src/domains/delegation/capabilities.js";
 
 export { buildAutonomousRuntimeDryRun, buildAutonomousRuntimeDryRunFinalReport, buildAutonomousRuntimeDryRunValidation, validateAutonomousReadOnlySmokeRunArtifacts, validateAutonomousRuntimeDryRunArtifacts, writeAutonomousReadOnlySmokeRunReport, writeAutonomousRuntimeDryRunReport } from "./src/domains/autonomy/autonomous-runtime.js";

package/.pi/extensions/zob-harness/src/core/utils/formatting.ts

@@ -1,6 +1,31 @@
 import type { ChildResult } from "../../types.js";
 
-function blockedFeedback(toolName: string, reason: string, attempted: string): string {
+export interface BlockedFeedbackDiagnostics {
+  executionPerformed: false;
+  currentMode: string;
+  reasonCode: string;
+  retryPolicy: string;
+  safeNextAction: string;
+}
+
+export interface FileToolPreflightFeedbackDiagnostics {
+  executionPerformed: false;
+  toolName: string;
+  reasonCode: string;
+  field: string;
+  pathHash: string;
+  inputHash: string;
+  snapshotHash: string;
+  fingerprintHash: string;
+  retryPolicy: string;
+  safeNextActions: readonly string[];
+  telemetryRecorded: boolean;
+  deduplicated: boolean;
+  attemptCount: number;
+  unchangedRetryCount: number;
+}
+
+function blockedFeedback(toolName: string, reason: string, attempted: string, diagnostics?: BlockedFeedbackDiagnostics): string {
   return [
     `ZOB damage-control blocked ${toolName}: ${reason}`,
     "",
@@ -10,6 +35,37 @@ function blockedFeedback(toolName: string, reason: string, attempted: string): s
     "- If this was non-destructive reconnaissance, skip it or ask the user for the specific value.",
     "- If this was destructive, stop and ask for explicit approval with exact command, risk, and rollback plan.",
     "- Do not retry the same blocked call.",
+    ...(diagnostics ? [
+      "",
+      "Structured diagnostics:",
+      `execution_performed=${diagnostics.executionPerformed}`,
+      `current_mode=${diagnostics.currentMode}`,
+      `reason_code=${diagnostics.reasonCode}`,
+      `retry_policy=${diagnostics.retryPolicy}`,
+      `safe_next_action=${diagnostics.safeNextAction}`,
+    ] : []),
+  ].join("\n");
+}
+
+function fileToolPreflightFeedback(diagnostics: FileToolPreflightFeedbackDiagnostics): string {
+  return [
+    `ZOB file-tool preflight blocked ${diagnostics.toolName}: ${diagnostics.reasonCode}`,
+    "",
+    "Structured diagnostics (body-free):",
+    `execution_performed=${diagnostics.executionPerformed}`,
+    `reason_code=${diagnostics.reasonCode}`,
+    `field=${diagnostics.field}`,
+    `path_hash=${diagnostics.pathHash}`,
+    `input_hash=${diagnostics.inputHash}`,
+    `snapshot_hash=${diagnostics.snapshotHash}`,
+    `fingerprint_hash=${diagnostics.fingerprintHash}`,
+    `retry_policy=${diagnostics.retryPolicy}`,
+    `safe_next_actions=${diagnostics.safeNextActions.join(",")}`,
+    `telemetry_recorded=${diagnostics.telemetryRecorded}`,
+    `deduplicated=${diagnostics.deduplicated}`,
+    `attempt_count=${diagnostics.attemptCount}`,
+    `unchanged_retry_count=${diagnostics.unchangedRetryCount}`,
+    "No native tool execution occurred. Correct the cited field or follow the safe action; no input was changed or retried automatically.",
   ].join("\n");
 }
 
@@ -31,4 +87,4 @@ function formatChildResultText(result: ChildResult): string {
   return messages.length > 0 ? messages.join("\n\n") : "(no output)";
 }
 
-export { blockedFeedback, capOutput, formatChildResultText };
+export { blockedFeedback, capOutput, fileToolPreflightFeedback, formatChildResultText };

package/.pi/extensions/zob-harness/src/domains/delegation/child-runner.ts

@@ -1,4 +1,5 @@
 import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync } from "node:fs";
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
@@ -39,7 +40,7 @@ function providerFromModelPattern(model: string | undefined): string | undefined
 }
 
 function resolveCodexFastModeExtension(ctx: ExtensionContext, model: string | undefined): string | undefined {
-  const provider = ctx.model?.provider ?? providerFromModelPattern(model);
+  const provider = providerFromModelPattern(model) ?? ctx.model?.provider;
   const usesCodexProvider = provider === "openai-codex" || provider === "codex-auto" || provider?.startsWith("codex-") === true;
   if (!usesCodexProvider) return undefined;
   const extensionPath = join(getAgentDir(), "extensions", "codex-fast-mode.ts");
@@ -48,6 +49,17 @@ function resolveCodexFastModeExtension(ctx: ExtensionContext, model: string | un
 
 const CHILD_THINKING_LEVELS = new Set<string>(["low", "medium", "high", "xhigh"]);
 
+function createChildSessionPath(
+  agentSessionDir: string,
+  agentName: string,
+  options: { now?: number; pid?: number; uniqueSuffix?: string } = {},
+): string {
+  const now = options.now ?? Date.now();
+  const pid = options.pid ?? process.pid;
+  const uniqueSuffix = options.uniqueSuffix ?? randomUUID();
+  return join(agentSessionDir, `${now}-${pid}-${safeFileStem(agentName)}-${safeFileStem(uniqueSuffix)}.jsonl`);
+}
+
 function validateChildThinkingOverride(thinking: string | undefined, fieldName = "thinking"): string[] {
   if (thinking === undefined) return [];
   return CHILD_THINKING_LEVELS.has(thinking) ? [] : [`${fieldName} must be one of low, medium, high, xhigh`];
@@ -93,7 +105,7 @@ function createSupervisedReadonlyDispatcher(ctx: ExtensionContext, signal: Abort
     if (isFailed(childResult)) {
       const gateErrorHash = childResult.gateErrors && childResult.gateErrors.length > 0 ? sha256(childResult.gateErrors.join("\n")) : undefined;
       const runtimeErrorHash = childResult.errorMessage ? sha256(childResult.errorMessage) : undefined;
-      return { status: "failed", outputHash, output: childResult.output, error: gateErrorHash ?? runtimeErrorHash ?? `child_failed:${childResult.exitCode}`, dispatcher: "live_child_pi", mocked: false, sessionPath: childResult.sessionPath, outputContractValidated: childResult.gatePassed !== undefined, gatePassed: childResult.gatePassed };
+      return { status: "failed", outputHash, output: childResult.output, error: runtimeErrorHash ?? gateErrorHash ?? `child_failed:${childResult.exitCode}`, dispatcher: "live_child_pi", mocked: false, sessionPath: childResult.sessionPath, outputContractValidated: childResult.gatePassed !== undefined, gatePassed: childResult.gatePassed };
     }
 
     return { status: "completed", outputHash, output: childResult.output, dispatcher: "live_child_pi", mocked: false, sessionPath: childResult.sessionPath, outputContractValidated: childResult.gatePassed !== undefined, gatePassed: childResult.gatePassed };
@@ -140,7 +152,7 @@ async function runChildAgent(
   const tmp = await mkdtemp(join(tmpdir(), "zob-agent-"));
   const agentSessionDir = join(ctx.cwd, ".pi", "agent-sessions");
   mkdirSync(agentSessionDir, { recursive: true });
-  const sessionPath = join(agentSessionDir, `${Date.now()}-${process.pid}-${safeFileStem(agent.name)}.jsonl`);
+  const sessionPath = createChildSessionPath(agentSessionDir, agent.name);
   result.sessionPath = sessionPath;
   emitUpdate?.(result);
 
@@ -271,4 +283,4 @@ async function mapWithConcurrency<T, R>(items: T[], limit: number, fn: (item: T,
   return results;
 }
 
-export { createSupervisedReadonlyDispatcher, isFailed, mapWithConcurrency, runChildAgent, validateChildThinkingOverride };
+export { createChildSessionPath, createSupervisedReadonlyDispatcher, isFailed, mapWithConcurrency, runChildAgent, validateChildThinkingOverride };