zob-harness 0.15.4 → 0.17.0

package/.pi/capabilities/zob-public-runtime-capabilities.json

@@ -125,7 +125,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Primary parent-owned TODO transition path; child no_ship is review evidence, not delivery success/failure by itself."
+      "noShipNotes": "Primary parent-owned TODO transition path; child no_ship is review evidence, not delivery success/failure by itself. Transitions bind the strict canonical todo_id (or dual agreed todo_id+todo_path; reference_mismatch/invalid_todo_id are fail-closed and never retarget a failed todo_id through todo_path). Terminal accept/complete transitions require mandatory CAS/revision agreement, while normal transitions may use optional observe-first CAS; mutation_id is replay-idempotent and conflicting state fails closed. Claim attempts are tracked separately, so a recovered/re-delegated attempt is distinct from the original."
     },
     {
       "name": "complete_goal_todo",
@@ -221,7 +221,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Records oracle validation metadata for a returned delegated TODO claim; auto-accept requires exact claim_hash, PASS, recommended_action=accept_claim, no_ship=false, acceptable confidence, and no blocking issues."
+      "noShipNotes": "Records oracle validation metadata for a returned delegated TODO claim; auto-accept requires exact claim_hash, PASS, recommended_action=accept_claim, no_ship=false, acceptable confidence, and no blocking issues. Validation is attempt-separated and CAS/revision-gated: the validated claim_hash must match the exact returned attempt (a recovered/re-delegated attempt has a distinct claim_hash) and any mismatch or stale/ambiguous state fails closed."
     },
     {
       "name": "accept_goal_todo_claim",
@@ -261,6 +261,27 @@
       ],
       "noShipNotes": "Delegated TODO claim metadata only."
     },
+    {
+      "name": "recover_goal_todo_delegation",
+      "family": "goal",
+      "modes": [
+        "explore",
+        "plan",
+        "implement",
+        "oracle",
+        "factory",
+        "orchestrator"
+      ],
+      "skillRefs": [
+        ".pi/skills/zob-goal-todo-tree/SKILL.md",
+        ".pi/skills/zob-delegation-routing/SKILL.md",
+        ".pi/skills/zob-oracle/SKILL.md"
+      ],
+      "docRefs": [
+        ".pi/extensions/zob-harness/src/AGENTS.md"
+      ],
+      "noShipNotes": "Parent-owned recovery of a stuck delegated Goal TODO lane only; goal TODO metadata repair, not a source edit and not a completion. Requires a strict canonical todo_id (never path text -> invalid_todo_id) or dual agreed todo_id+todo_path (reference_mismatch on disagreement; a failed todo_id is never retargeted through todo_path). Allowed only for recoverable delegated lanes (failed/rejected/orphan) when no active child/run owns the leaf; active/running delegated work is blocked with split-before-parallel guidance and must not be double-delegated. Terminal recovery is CAS/revision-gated and fail-closed on stale/unknown state; observe-only inspection is permitted but never auto-corrects or shadows a blocked lane. mutation_id is replay-idempotent (returns the existing result) and a conflicting mutation_id against changed state is a CAS conflict, not a silent overwrite. The prior child's liveness is treated as unknown; recovery never auto-redelegates the same leaf and never completes the parent TODO or bypasses oracle/no_ship/evidence gates. Durable records stay hash-only/body-free (claim_hash/output_hash and artifact refs only); legacy unbound/stale events/claims/proposals remain readable but fail-closed until explicitly revalidated/recovered with no silent upgrade."
+    },
     {
       "name": "import_factory_todos",
       "family": "goal",
@@ -398,7 +419,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Proposal only; oracle record still required for completion evidence."
+      "noShipNotes": "Proposal only; oracle record still required for completion evidence. Completion is a terminal transition and is CAS/revision-gated with mandatory agreement; observe-only is not accepted for completion and stale/ambiguous state fails closed."
     },
     {
       "name": "record_goal_oracle",
@@ -418,7 +439,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Records oracle verdict metadata only."
+      "noShipNotes": "Records oracle verdict metadata only. Oracle records are terminal and CAS/revision-gated: the recorded claim_hash must match the exact validated attempt and stale/ambiguous state fails closed; observe-only is not accepted for an oracle record."
     },
     {
       "name": "update_goal",
@@ -719,7 +740,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Agent-initiated visible ZPeer ask; local_socket only, room-scoped with optional explicit roomId, mode defaults async, opt-in requireResponse tracks msgId-correlated replies with bounded timeout/reinjection metadata, normal/urgent/force are rate/loop guarded, force requires a hashed reason and role/topology guards, raw bodies transient and durable records hash-only."
+      "noShipNotes": "Agent-initiated visible ZPeer ask; local_socket only, room-scoped with optional explicit roomId, mode defaults async and waiting is delivery-only, opt-in requireResponse tracks msgId-correlated replies with bounded timeout/reinjection metadata, normal short-task responses are auto-captured only from an exact custom-message msgId, goal-bound responses wait for terminal goal state, ambiguous inbounds fail closed, normal/urgent/force are rate/loop guarded, force requires a hashed reason and role/topology guards, raw bodies transient and durable records hash-only."
     },
     {
       "name": "zpeer_reply",
@@ -739,7 +760,7 @@
       "docRefs": [
         ".pi/extensions/zob-harness/src/AGENTS.md"
       ],
-      "noShipNotes": "Explicit msgId-bound ZPeer reply path for active inbound messages; local_socket only, requires exact active msgId, wrong/expired/already-answered msgIds are blocked, raw reply body is transient and durable metadata stores outputHash/status only."
+      "noShipNotes": "Explicit msgId-bound ZPeer reply path for active inbound messages and fail-closed fallback when automatic binding is ambiguous; local_socket only, requires exact active msgId, wrong/expired/already-answered msgIds are blocked, raw reply body is transient and durable metadata stores outputHash/status only."
     },
     {
       "name": "zob_goal_room_send",
@@ -1108,6 +1129,46 @@
       ],
       "noShipNotes": "Readiness check only."
     },
+    {
+      "name": "zob_read_full",
+      "family": "files",
+      "modes": [
+        "explore",
+        "plan",
+        "implement",
+        "oracle",
+        "factory",
+        "orchestrator"
+      ],
+      "skillRefs": [
+        ".pi/skills/zob-file-read/SKILL.md"
+      ],
+      "docRefs": [
+        ".pi/extensions/zob-harness/src/AGENTS.md",
+        "README.md"
+      ],
+      "noShipNotes": "Whole-file read only; returns content iff path passes secret/generated-path safety, the file is a readable utf8 regular file under the hard byte ceiling, and (when the context window is known) estimated tokens fit the context headroom (allowedTokens = min(availableTokens*(1-safetyMargin/100), contextWindow*0.5)); otherwise blocks with pagination guidance and no content. Never reads .env/~/.ssh/~/.aws/*.pem/*.key (including via symlinks, blocked as symlink_resolves_to_zero_access after realpath canonicalization), node_modules, dist, build, .pi/sessions, .pi/agent-sessions; v1 utf8 only (non-utf8 -> binary_not_supported); telemetry is body-free (details carry hashes/counts only, bodyStored:false); does not bypass the file-tool preflight or other safety gates."
+    },
+    {
+      "name": "zob_receive_full",
+      "family": "files",
+      "modes": [
+        "explore",
+        "plan",
+        "implement",
+        "oracle",
+        "factory",
+        "orchestrator"
+      ],
+      "skillRefs": [
+        ".pi/skills/zob-file-read/SKILL.md"
+      ],
+      "docRefs": [
+        ".pi/extensions/zob-harness/src/AGENTS.md",
+        "README.md"
+      ],
+      "noShipNotes": "Long-response receive only; returns content iff exactly one source is provided (path or run_id) and the resolved target passes the shared file-tool preflight path/secret safety (lexical zero-access + realpath symlink check inherited from zob_read_full's runFullRead), is a readable utf8 regular file under the hard byte ceiling, and (when the context window is known) estimated tokens fit the context headroom (allowedTokens = min(availableTokens*(1-safetyMargin/100), contextWindow*0.5)); otherwise blocks with recovery guidance and no content. run_id resolves ONLY to a run's persisted report artifact under reports/factory-runs|orchestrations|chains/<runId>/ (default final-report.md, or a named single-basename artifact) — raw child output bodies are NOT persisted (body-free harness) and cannot be retrieved; run_id and artifact are validated path-safe (alphanumeric/.//- only, no slashes or ..) before any resolution, refusing run_id_unsafe/artifact_unsafe/run_not_found/artifact_not_found. max_bytes tightens the 2MB ceiling only (cannot enlarge). Telemetry is body-free (details carry hashes/counts/source metadata only, bodyStored:false); does not bypass the file-tool preflight or other safety gates."
+    },
     {
       "name": "zob_context_validate_scope",
       "family": "context",

package/.pi/extensions/zob-harness/index.ts

@@ -4,6 +4,7 @@ import zobHarnessRuntime from "./src/runtime/zobHarness.js";
 
 export { renderHarnessWidget } from "./src/runtime/widget.js";
 export { createHarnessRuntimeState, inferModeFromUserIntent } from "./src/runtime/state.js";
+export { FILE_TOOL_RELIABILITY_PROMPT } from "./src/runtime/events.js";
 
 export type {
   AdaptiveDelegationGovernorState,
@@ -27,12 +28,20 @@ export type { ChronicleState } from "./src/domains/telemetry/chronicle.js";
 
 export type {
   ChildStopCondition,
+  OutputGateIssue,
+  OutputGateIssueClassification,
+  OutputGateIssueCode,
   RuleAppliesTo,
   RuleEnforcementLevel,
   RuleOracleRequirement,
   RulePack,
   RuleResolution,
   RuleResolverInput,
+  ToolFailureAttempt,
+  ToolFailureClass,
+  ToolFailureReasonCode,
+  ToolFailureReplayFixture,
+  ToolFailureReplaySummary,
 } from "./src/types.js";
 
 export { pathMatches } from "./src/core/utils/paths.js";
@@ -41,6 +50,44 @@ export { parseGoalState, validateGoalState, validateStrictGoalSpecAnchor, parseB
 export type { StrictGoalSpecAnchor, StrictGoalSpecAnchorKind } from "./src/domains/goal/goal.js";
 export { DEFAULT_GOAL_ACTIVATION_MODE, clearRuntimeGoalContinuationState, clearRuntimeGoalContinuationStateFor, formatGoalActivationMode, formatRuntimeGoalSummary, hasPendingUndeliveredZpeerInbound, queueRuntimeGoalContinuation, restoreRuntimeGoalFromBranch, resumeRuntimeGoal, runtimeGoalStatusLine } from "./src/runtime/goal-runtime.js";
 export type { GoalActivationMode, RuntimeGoal, RuntimeGoalStatus, RuntimeGoalOracleStatus, RuntimeGoalOracleVerdict } from "./src/runtime/goal-runtime.js";
+export {
+  buildRuntimeGoalCompletionProposal,
+  buildRuntimeGoalOracleBinding,
+  evaluateRuntimeGoalCompletionProposalFreshness,
+  evaluateRuntimeGoalOracleFreshness,
+  formatRuntimeGoalCompletionProposal,
+  formatRuntimeGoalOracleBinding,
+  hashRuntimeGoalCompletionProposal,
+  hashRuntimeGoalCompletionProposalArray,
+  hashRuntimeGoalOracleDecision,
+  hashRuntimeGoalOracleEvidence,
+  isRuntimeGoalCompletionProposalV2,
+  isRuntimeGoalOracleBindingV2,
+  normalizeRuntimeGoalCompletionProposal,
+  normalizeRuntimeGoalOracleState,
+  publicRuntimeGoal,
+  runtimeGoalCompletionProposalPublicDetails,
+  runtimeGoalOraclePublicDetails,
+} from "./src/runtime/goal-runtime/state.js";
+export type {
+  BuildRuntimeGoalCompletionProposalInput,
+  BuildRuntimeGoalOracleBindingInput,
+  EvaluateRuntimeGoalCompletionProposalFreshnessInput,
+  EvaluateRuntimeGoalOracleFreshnessInput,
+  RuntimeGoalCompletionProposalFreshness,
+  RuntimeGoalCompletionProposalFreshnessCode,
+  RuntimeGoalCompletionProposalFreshnessStatus,
+  RuntimeGoalCompletionProposalLegacy,
+  RuntimeGoalCompletionProposalMalformed,
+  RuntimeGoalCompletionProposalSafeReproposeAction,
+  RuntimeGoalCompletionProposalV2,
+  RuntimeGoalEntry,
+  RuntimeGoalOracleBindingV2,
+  RuntimeGoalOracleFreshness,
+  RuntimeGoalOracleFreshnessCode,
+  RuntimeGoalOracleFreshnessStatus,
+  RuntimeGoalRevisionDiagnostic,
+} from "./src/runtime/goal-runtime/state.js";
 export { extractModeIntent, looksLikeCompletePlanResponse, stripModeIntentMarkup, validateModeIntent } from "./src/runtime/mode-intent.js";
 export type { ZobModeIntent, ZobModeIntentConfidence, ZobModeIntentRisk, ZobModeIntentValidation } from "./src/runtime/mode-intent.js";
 export { capturePlanArtifact, extractPlanTitle, listCapturedPlanEntries, shouldCapturePlanResponse, updateCapturedPlanEntry } from "./src/runtime/plan-capture.js";
@@ -91,7 +138,139 @@ export {
   summarizeGoalTodos,
   validateGoalTodoGraph,
 } from "./src/domains/goal/goal-todos.js";
-export type { GoalRoomTodoReducerAction, GoalRoomTodoReducerDecision, GoalTodoClaimRef, GoalTodoClaimValidationRef, GoalTodoCompletionDiagnostics, GoalTodoNode, GoalTodoOwner, GoalTodoPolicy, GoalTodoPriority, GoalTodoState, GoalTodoStatus, GoalTodoSummary, ResolveGoalTodoAction, TodoClaimValidationResult, TodoSplitRequest, TodoSplitRequestAction, TodoSplitRiskLevel } from "./src/domains/goal/goal-todos.js";
+export { GoalTodoTransitionError, assertCurrentGoalTodoClaimSettlementBinding, assertCurrentGoalTodoClaimValidationBinding, authorizeGoalTodoTransition, finalizeGoalTodoDelegationAttempt, isCanonicalGoalTodoClaimBinding, markGoalTodoDelegationFailed, recoverGoalTodoDelegation, updateGoalTodo } from "./src/domains/goal/goal-todos/operations.js";
+export type { FinalizeGoalTodoDelegationAttemptInput, GoalTodoClaimBindingExpectation, GoalTodoTransitionAuthorization, RecoverGoalTodoDelegationInput } from "./src/domains/goal/goal-todos/operations.js";
+export { assessDelegationAttemptLiveness } from "./src/runtime/delegation-monitor.js";
+export {
+  CANONICAL_GOAL_TODO_ID_PATTERN,
+  VISIBLE_GOAL_TODO_PATH_PATTERN,
+  GoalTodoReferenceResolutionError,
+  adaptLegacyGoalTodoReference,
+  goalTodoReferenceDiagnostic,
+  resolveCanonicalGoalTodoReference,
+  resolveCanonicalGoalTodoReferences,
+  throwGoalTodoReferenceResolution,
+} from "./src/domains/goal/goal-todos/reference.js";
+export type {
+  GoalTodoCanonicalReferenceInput,
+  GoalTodoReferenceBatchResolution,
+  GoalTodoReferenceCandidate,
+  GoalTodoReferenceCode,
+  GoalTodoReferenceDiagnostic,
+  GoalTodoReferenceError,
+  GoalTodoReferenceField,
+  GoalTodoReferenceResolution,
+  GoalTodoReferenceRetryPolicy,
+  GoalTodoReferenceSafeNextAction,
+} from "./src/domains/goal/goal-todo-types.js";
+export type { GoalRoomTodoReducerAction, GoalRoomTodoReducerDecision, GoalTodoClaimRef, GoalTodoClaimValidationRef, GoalTodoCompletionDiagnostics, GoalTodoEvent, GoalTodoNode, GoalTodoOwner, GoalTodoPolicy, GoalTodoPriority, GoalTodoState, GoalTodoStatus, GoalTodoSummary, ResolveGoalTodoAction, TodoClaimValidationResult, TodoSplitRequest, TodoSplitRequestAction, TodoSplitRiskLevel } from "./src/domains/goal/goal-todos.js";
+export {
+  GOAL_TODO_STATUSES,
+  GOAL_TODO_TRANSITION_ACTIONS,
+  GOAL_TODO_TRANSITION_TABLE,
+  decideGoalTodoTransition,
+  getGoalTodoTransitionRule,
+  listGoalTodoTransitionRules,
+} from "./src/domains/goal/goal-todos/transition-engine.js";
+export { GOAL_MUTATION_PHASE_CODES } from "./src/domains/goal/goal-todo-types.js";
+export type {
+  GoalMutationAppliedExecution,
+  GoalMutationAppliedOutcome,
+  GoalMutationApplyFailureMode,
+  GoalMutationApplyResult,
+  GoalMutationCanonicalRequest,
+  GoalMutationCasInput,
+  GoalMutationCasOutcome,
+  GoalMutationConflictOutcome,
+  GoalMutationCurrentRevisions,
+  GoalMutationExecutionDiagnostic,
+  GoalMutationExecutionInput,
+  GoalMutationExecutionOutcome,
+  GoalMutationFailedExecution,
+  GoalMutationFailureCode,
+  GoalMutationGuard,
+  GoalMutationObservation,
+  GoalMutationObservedExecution,
+  GoalMutationPhase,
+  GoalMutationPreparation,
+  GoalMutationPreparationInput,
+  GoalMutationPreparationPhase,
+  GoalMutationProtocolRecord,
+  GoalMutationPublicGuard,
+  GoalMutationReceipt,
+  GoalMutationReceiptDiagnostic,
+  GoalMutationReceiptDiagnosticCode,
+  GoalMutationReceiptInput,
+  GoalMutationReceiptState,
+  GoalMutationRejectedOutcome,
+  GoalMutationReplayedExecution,
+  GoalMutationReplayedOutcome,
+  GoalMutationSideEffectRef,
+  GoalMutationSideEffectState,
+  GoalMutationStaleOutcome,
+  GoalTodoClaimResolutionBinding,
+  GoalTodoClaimValidationPolicy,
+  GoalTodoDelegationAttempt,
+  GoalTodoDelegationAttemptFailureKind,
+  GoalTodoDelegationAttemptReasonCode,
+  GoalTodoDelegationAttemptStatus,
+  GoalTodoDelegationLiveness,
+  GoalTodoDelegationLivenessAssessmentStatus,
+  GoalTodoDelegationLivenessProof,
+  GoalTodoDelegationLivenessProofCode,
+  GoalTodoDelegationLivenessProofSource,
+  GoalTodoDelegationRecovery,
+  GoalTodoLegacyEvent,
+  GoalTodoPatchClearField,
+  GoalTodoRevisionDiagnostic,
+  GoalTodoRevisionDiagnosticCode,
+  GoalTodoRevisionEvent,
+  GoalTodoTransitionAction,
+  GoalTodoTransitionCode,
+  GoalTodoTransitionContext,
+  GoalTodoTransitionDecision,
+  GoalTodoTransitionDiagnostic,
+  GoalTodoTransitionGuard,
+  GoalTodoTransitionInput,
+  GoalTodoTransitionOperationContext,
+  GoalTodoTransitionRetryPolicy,
+  GoalTodoTransitionRule,
+  GoalTodoTransitionRuleDiagnostic,
+  GoalTodoTransitionTable,
+} from "./src/domains/goal/goal-todo-types.js";
+export {
+  GOAL_MUTATION_ID_PATTERN,
+  GOAL_MUTATION_PREPARATION_ENTRY_TYPE,
+  GOAL_MUTATION_PREPARATION_SCHEMA,
+  GOAL_MUTATION_RECEIPT_ENTRY_TYPE,
+  GOAL_MUTATION_RECEIPT_SCHEMA,
+  blockGoalMutationReceiptState,
+  canonicalGoalMutationJson,
+  cloneGoalMutationReceipt,
+  cloneGoalMutationReceiptState,
+  createGoalMutationPreparation,
+  createGoalMutationReceipt,
+  createGoalMutationReceiptState,
+  evaluateGoalMutationCas,
+  finalizeGoalMutationReceiptRestore,
+  hashGoalMutationRequest,
+  indexGoalMutationPreparation,
+  indexGoalMutationReceipt,
+  indexGoalMutationReceiptEntry,
+  isCanonicalGoalMutationId,
+  isCanonicalGoalMutationRequestHash,
+  markGoalMutationInDoubt,
+  normalizeGoalMutationPreparation,
+  normalizeGoalMutationReceipt,
+  restoreGoalMutationReceiptsFromBranch,
+} from "./src/domains/goal/mutation-cas.js";
+export { GoalDelegationRecoveryGuardSchema, GoalMutationGuardProperties, GoalMutationGuardSchema, GoalTodoCanonicalReferenceProperties, GoalTodoCanonicalReferenceSchema, GoalTodoClaimHashSchema, parseOptionalGoalMutationGuard, parseRequiredGoalDelegationRecoveryGuard } from "./src/runtime/goal-runtime/schemas.js";
+export { GOAL_MUTATION_TOOL_NAMES, isGoalMutationToolName } from "./src/runtime/goal-runtime/mutation-tools.js";
+export type { GoalMutationToolName } from "./src/runtime/goal-runtime/mutation-tools.js";
+export { buildGoalMutationCanonicalRequest, executeGoalMutationCas } from "./src/runtime/goal-runtime/mutation-cas.js";
+export type { GoalMutationCanonicalRequestInput, GoalMutationCanonicalRequestResult } from "./src/runtime/goal-runtime/mutation-cas.js";
+export { GOAL_HANDOFF_EFFECT_FLAGS, buildGoalHandoffCanonicalPayload, executeGoalHandoffCas } from "./src/runtime/goal-runtime/handoff.js";
+export type { GoalHandoffCanonicalPayload, GoalHandoffCasExecution, GoalHandoffCasExecutionInput, GoalHandoffCasPreflight } from "./src/runtime/goal-runtime/handoff.js";
 export { importChainRunTodos, importFactoryRunTodos, importOrchestrationRunTodos } from "./src/domains/goal/goal-todo-imports.js";
 export type { GoalTodoImportResult } from "./src/domains/goal/goal-todo-imports.js";
 export { appendGoalRoomMessage, buildGoalRoomMessage, goalRoomBodyFreeViolations, isGoalRoomMessage, listGoalRoomMessages, validateGoalRoomMessageInput, validateGoalRoomMessageRecord } from "./src/domains/goal/goal-room.js";
@@ -461,17 +640,100 @@ export {
 } from "./src/domains/governance/safety.js";
 
 export {
+  OUTPUT_GATE_ISSUE_CODES,
   listOutputContracts,
   getOutputContractDefinitions,
+  getOutputContractFinalMarker,
   inferOutputContract,
   validateOutputContractId,
   validateOutputContract,
+  validateOutputContractIssues,
   validateChildOutput,
+  validateChildOutputIssues,
   applyChildGates,
 } from "./src/domains/delegation/output-contracts.js";
 
+export { createChildSessionPath } from "./src/domains/delegation/child-runner.js";
+
 export { buildChildEnv } from "./src/domains/governance/safety.js";
 
+export {
+  DEFAULT_CONTENT_READ_BUDGET_BYTES,
+  FILE_TOOL_PREFLIGHT_FIELDS,
+  FILE_TOOL_PREFLIGHT_REASON_CODES,
+  FILE_TOOL_PREFLIGHT_RETRY_POLICIES,
+  FILE_TOOL_PREFLIGHT_SAFE_NEXT_ACTIONS,
+  FILE_TOOL_PREFLIGHT_TOOLS,
+  FILE_TOOL_PREFLIGHT_VERDICTS,
+  createFileToolPreflightRuntimeState,
+  fileToolPreflightBodyLikeFieldViolations,
+  persistFileToolPreflightDecision,
+  preflightFileToolCall,
+  validateFileToolPreflightDecision,
+  validateFileToolPreflightLedgerEntry,
+} from "./src/domains/governance/file-tool-preflight.js";
+export type {
+  FileToolPreflightCall,
+  FileToolPreflightDecision,
+  FileToolPreflightField,
+  FileToolPreflightIo,
+  FileToolPreflightLedgerEntry,
+  FileToolPreflightPolicy,
+  FileToolPreflightReasonCode,
+  FileToolPreflightRecordResult,
+  FileToolPreflightRetryPolicy,
+  FileToolPreflightRuntimeState,
+  FileToolPreflightSafeNextAction,
+  FileToolPreflightTool,
+  FileToolPreflightVerdict,
+} from "./src/domains/governance/file-tool-preflight.js";
+
+export {
+  FULL_READ_DEFAULT_IO,
+  FULL_READ_DEFAULT_POLICY,
+  FULL_READ_SCHEMA,
+  classifyPathForbiddenGenerated,
+  classifyPathSecret,
+  evaluateFullRead,
+  fullReadBodyFreeViolations,
+  runFullRead,
+} from "./src/domains/files/full-read.js";
+export type {
+  FullReadContextUsage,
+  FullReadDecision,
+  FullReadDetails,
+  FullReadEncoding,
+  FullReadEvaluation,
+  FullReadFacts,
+  FullReadIo,
+  FullReadPolicy,
+  FullReadReasonCode,
+  FullReadRunInput,
+  FullReadRunResult,
+  FullReadStat,
+} from "./src/domains/files/full-read.js";
+
+export {
+  DEFAULT_RUN_ARTIFACT,
+  RESPONSE_RECEIVE_SCHEMA,
+  RUN_ARTIFACT_DIRS,
+  isPathSafeArtifactName,
+  isPathSafeRunId,
+  receiveFullResponse,
+  resolveRunArtifact,
+  responseReceiveBodyFreeViolations,
+  runDirRelative,
+} from "./src/domains/files/response-receive.js";
+export type {
+  ResponseReceiveDetails,
+  ResponseReceiveInput,
+  ResponseReceiveReasonCode,
+  ResponseReceiveResult,
+  ResponseReceiveRunType,
+  ResponseReceiveSource,
+  RunArtifactResolution,
+} from "./src/domains/files/response-receive.js";
+
 export {
   validateSandboxWritePlanInputs,
   runSandboxWritePlan,
@@ -507,6 +769,18 @@ export {
   writeChronicleSnapshot,
 } from "./src/domains/telemetry/chronicle.js";
 
+export {
+  TOOL_FAILURE_CLASSES,
+  TOOL_FAILURE_REASON_CODES,
+  TOOL_FAILURE_TAXONOMY_REVISION,
+  replayToolFailureAttempts,
+  replayToolFailureFixtures,
+  fileToolPreflightFingerprint,
+  toolFailureBodyLikeFieldViolations,
+  toolFailureIncidentKey,
+  validateToolFailureReplayFixture,
+} from "./src/domains/telemetry/tool-failures.js";
+
 export { buildCapabilityIndex, buildReuseScoutReport, writeCapabilityIndex, writeReuseScoutReport } from "./src/domains/delegation/capabilities.js";
 
 export { buildAutonomousRuntimeDryRun, buildAutonomousRuntimeDryRunFinalReport, buildAutonomousRuntimeDryRunValidation, validateAutonomousReadOnlySmokeRunArtifacts, validateAutonomousRuntimeDryRunArtifacts, writeAutonomousReadOnlySmokeRunReport, writeAutonomousRuntimeDryRunReport } from "./src/domains/autonomy/autonomous-runtime.js";

package/.pi/extensions/zob-harness/src/core/constants.ts

@@ -59,6 +59,7 @@ export const ZOB_DELEGATION_READ_TOOLS = ["zob_delegation_catalog", "get_delegat
 export const ZOB_MISSION_CONTROL_READ_TOOLS = ["zob_coms_readiness", "zob_mission_control_snapshot"] as const;
 export const ZOB_MISSION_CONTROL_PROPOSAL_TOOLS = ["zob_mission_control_propose_command"] as const;
 export const ZOB_CONTEXT_READ_TOOLS = ["zob_context_search", "zob_context_readiness", "zob_context_validate_scope"] as const;
+export const ZOB_FILES_READ_TOOLS = ["zob_read_full", "zob_receive_full"] as const;
 export const ZOB_CONTEXT_PROPOSAL_TOOLS = ["zob_context_writeback_proposal"] as const;
 export const ZOB_COMPUTE_READ_TOOLS = ["zob_compute_preview", "zob_compute_resolve_profile", "zob_compute_plan_workflow", "zob_compute_validate_profile"] as const;
 export const ZOB_COMPUTE_REPORT_TOOLS = ["zob_compute_write_profile_reports"] as const;
@@ -70,12 +71,12 @@ export const ZOB_AUTONOMOUS_READ_TOOLS = ["zob_autonomous_validate_run", "zob_au
 export const ZOB_AUTONOMOUS_FACTORY_TOOLS = ["zob_autonomous_dry_run", "zob_autonomous_readonly_smoke"] as const;
 
 export const MODE_TOOLS: Record<ModeName, string[]> = {
-  explore: ["read", "grep", "find", "ls", "bash", "delegate_agent", "delegate_task", "zob_coms_list", "zob_coms_get", "zob_coms_await", "zpeer_ask", "zpeer_reply", "zob_goal_room_list", "zob_workspace_claims_list", "zob_worker_pool_status", "zob_merge_queue_list", ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS],
-  plan: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
-  implement: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
-  oracle: ["read", "grep", "find", "ls", "bash", "delegate_agent", "delegate_task", "zob_coms_list", "zob_coms_get", "zob_coms_await", "zpeer_ask", "zpeer_reply", "zob_goal_room_list", "zob_workspace_claims_list", "zob_worker_pool_status", "zob_merge_queue_list", ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS],
-  orchestrator: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS],
-  factory: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "factory_run", "factory_quarantine_review", "factory_quarantine_activate", "factory_quarantine_verify_activation", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_AUTONOMOUS_FACTORY_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
+  explore: ["read", "grep", "find", "ls", "bash", "delegate_agent", "delegate_task", "zob_coms_list", "zob_coms_get", "zob_coms_await", "zpeer_ask", "zpeer_reply", "zob_goal_room_list", "zob_workspace_claims_list", "zob_worker_pool_status", "zob_merge_queue_list", ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_FILES_READ_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS],
+  plan: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_FILES_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
+  implement: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_FILES_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
+  oracle: ["read", "grep", "find", "ls", "bash", "delegate_agent", "delegate_task", "zob_coms_list", "zob_coms_get", "zob_coms_await", "zpeer_ask", "zpeer_reply", "zob_goal_room_list", "zob_workspace_claims_list", "zob_worker_pool_status", "zob_merge_queue_list", ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_FILES_READ_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS],
+  orchestrator: ["read", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_FILES_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS],
+  factory: ["read", "bash", "edit", "write", "grep", "find", "ls", "delegate_agent", "delegate_task", "orchestrate_run", "factory_run", "factory_quarantine_review", "factory_quarantine_activate", "factory_quarantine_verify_activation", "chain_run", ...ZOB_PLAN_LAUNCH_TOOLS, ...ZOB_RUNTIME_GOAL_TOOLS, ...ZOB_DELEGATION_READ_TOOLS, ...ZOB_ZCOMMIT_TOOLS, ...ZOB_ZAGENT_TOOLS, ...ZOB_AUTONOMOUS_READ_TOOLS, ...ZOB_AUTONOMOUS_FACTORY_TOOLS, ...ZOB_COMS_TOOLS, ...ZOB_GOAL_ROOM_TOOLS, ...ZOB_GOVERNED_REQUEST_TOOLS, ...ZOB_WORKSPACE_CLAIM_TOOLS, ...ZOB_WORKER_POOL_TOOLS, ...ZOB_MERGE_QUEUE_TOOLS, ...ZOB_WORKLIST_TOOLS, ...ZOB_MISSION_CONTROL_READ_TOOLS, ...ZOB_MISSION_CONTROL_PROPOSAL_TOOLS, ...ZOB_CONTEXT_READ_TOOLS, ...ZOB_FILES_READ_TOOLS, ...ZOB_CONTEXT_PROPOSAL_TOOLS, ...ZOB_COMPUTE_READ_TOOLS, ...ZOB_COMPUTE_REPORT_TOOLS, ...ZOB_PROJECT_DNA_READ_TOOLS, ...ZOB_PROJECT_DNA_PROPOSAL_TOOLS],
   // Vanilla is handled specially by applyMode: all currently available Pi tools are enabled.
   vanilla: [],
 };

package/.pi/extensions/zob-harness/src/core/utils/formatting.ts

@@ -1,6 +1,31 @@
 import type { ChildResult } from "../../types.js";
 
-function blockedFeedback(toolName: string, reason: string, attempted: string): string {
+export interface BlockedFeedbackDiagnostics {
+  executionPerformed: false;
+  currentMode: string;
+  reasonCode: string;
+  retryPolicy: string;
+  safeNextAction: string;
+}
+
+export interface FileToolPreflightFeedbackDiagnostics {
+  executionPerformed: false;
+  toolName: string;
+  reasonCode: string;
+  field: string;
+  pathHash: string;
+  inputHash: string;
+  snapshotHash: string;
+  fingerprintHash: string;
+  retryPolicy: string;
+  safeNextActions: readonly string[];
+  telemetryRecorded: boolean;
+  deduplicated: boolean;
+  attemptCount: number;
+  unchangedRetryCount: number;
+}
+
+function blockedFeedback(toolName: string, reason: string, attempted: string, diagnostics?: BlockedFeedbackDiagnostics): string {
   return [
     `ZOB damage-control blocked ${toolName}: ${reason}`,
     "",
@@ -10,6 +35,37 @@ function blockedFeedback(toolName: string, reason: string, attempted: string): s
     "- If this was non-destructive reconnaissance, skip it or ask the user for the specific value.",
     "- If this was destructive, stop and ask for explicit approval with exact command, risk, and rollback plan.",
     "- Do not retry the same blocked call.",
+    ...(diagnostics ? [
+      "",
+      "Structured diagnostics:",
+      `execution_performed=${diagnostics.executionPerformed}`,
+      `current_mode=${diagnostics.currentMode}`,
+      `reason_code=${diagnostics.reasonCode}`,
+      `retry_policy=${diagnostics.retryPolicy}`,
+      `safe_next_action=${diagnostics.safeNextAction}`,
+    ] : []),
+  ].join("\n");
+}
+
+function fileToolPreflightFeedback(diagnostics: FileToolPreflightFeedbackDiagnostics): string {
+  return [
+    `ZOB file-tool preflight blocked ${diagnostics.toolName}: ${diagnostics.reasonCode}`,
+    "",
+    "Structured diagnostics (body-free):",
+    `execution_performed=${diagnostics.executionPerformed}`,
+    `reason_code=${diagnostics.reasonCode}`,
+    `field=${diagnostics.field}`,
+    `path_hash=${diagnostics.pathHash}`,
+    `input_hash=${diagnostics.inputHash}`,
+    `snapshot_hash=${diagnostics.snapshotHash}`,
+    `fingerprint_hash=${diagnostics.fingerprintHash}`,
+    `retry_policy=${diagnostics.retryPolicy}`,
+    `safe_next_actions=${diagnostics.safeNextActions.join(",")}`,
+    `telemetry_recorded=${diagnostics.telemetryRecorded}`,
+    `deduplicated=${diagnostics.deduplicated}`,
+    `attempt_count=${diagnostics.attemptCount}`,
+    `unchanged_retry_count=${diagnostics.unchangedRetryCount}`,
+    "No native tool execution occurred. Correct the cited field or follow the safe action; no input was changed or retried automatically.",
   ].join("\n");
 }
 
@@ -31,4 +87,4 @@ function formatChildResultText(result: ChildResult): string {
   return messages.length > 0 ? messages.join("\n\n") : "(no output)";
 }
 
-export { blockedFeedback, capOutput, formatChildResultText };
+export { blockedFeedback, capOutput, fileToolPreflightFeedback, formatChildResultText };

package/.pi/extensions/zob-harness/src/domains/delegation/child-runner.ts

@@ -1,4 +1,5 @@
 import { spawn } from "node:child_process";
+import { randomUUID } from "node:crypto";
 import { existsSync, mkdirSync } from "node:fs";
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
@@ -39,7 +40,7 @@ function providerFromModelPattern(model: string | undefined): string | undefined
 }
 
 function resolveCodexFastModeExtension(ctx: ExtensionContext, model: string | undefined): string | undefined {
-  const provider = ctx.model?.provider ?? providerFromModelPattern(model);
+  const provider = providerFromModelPattern(model) ?? ctx.model?.provider;
   const usesCodexProvider = provider === "openai-codex" || provider === "codex-auto" || provider?.startsWith("codex-") === true;
   if (!usesCodexProvider) return undefined;
   const extensionPath = join(getAgentDir(), "extensions", "codex-fast-mode.ts");
@@ -48,6 +49,17 @@ function resolveCodexFastModeExtension(ctx: ExtensionContext, model: string | un
 
 const CHILD_THINKING_LEVELS = new Set<string>(["low", "medium", "high", "xhigh"]);
 
+function createChildSessionPath(
+  agentSessionDir: string,
+  agentName: string,
+  options: { now?: number; pid?: number; uniqueSuffix?: string } = {},
+): string {
+  const now = options.now ?? Date.now();
+  const pid = options.pid ?? process.pid;
+  const uniqueSuffix = options.uniqueSuffix ?? randomUUID();
+  return join(agentSessionDir, `${now}-${pid}-${safeFileStem(agentName)}-${safeFileStem(uniqueSuffix)}.jsonl`);
+}
+
 function validateChildThinkingOverride(thinking: string | undefined, fieldName = "thinking"): string[] {
   if (thinking === undefined) return [];
   return CHILD_THINKING_LEVELS.has(thinking) ? [] : [`${fieldName} must be one of low, medium, high, xhigh`];
@@ -93,7 +105,7 @@ function createSupervisedReadonlyDispatcher(ctx: ExtensionContext, signal: Abort
     if (isFailed(childResult)) {
       const gateErrorHash = childResult.gateErrors && childResult.gateErrors.length > 0 ? sha256(childResult.gateErrors.join("\n")) : undefined;
       const runtimeErrorHash = childResult.errorMessage ? sha256(childResult.errorMessage) : undefined;
-      return { status: "failed", outputHash, output: childResult.output, error: gateErrorHash ?? runtimeErrorHash ?? `child_failed:${childResult.exitCode}`, dispatcher: "live_child_pi", mocked: false, sessionPath: childResult.sessionPath, outputContractValidated: childResult.gatePassed !== undefined, gatePassed: childResult.gatePassed };
+      return { status: "failed", outputHash, output: childResult.output, error: runtimeErrorHash ?? gateErrorHash ?? `child_failed:${childResult.exitCode}`, dispatcher: "live_child_pi", mocked: false, sessionPath: childResult.sessionPath, outputContractValidated: childResult.gatePassed !== undefined, gatePassed: childResult.gatePassed };
     }
 
     return { status: "completed", outputHash, output: childResult.output, dispatcher: "live_child_pi", mocked: false, sessionPath: childResult.sessionPath, outputContractValidated: childResult.gatePassed !== undefined, gatePassed: childResult.gatePassed };
@@ -140,7 +152,7 @@ async function runChildAgent(
   const tmp = await mkdtemp(join(tmpdir(), "zob-agent-"));
   const agentSessionDir = join(ctx.cwd, ".pi", "agent-sessions");
   mkdirSync(agentSessionDir, { recursive: true });
-  const sessionPath = join(agentSessionDir, `${Date.now()}-${process.pid}-${safeFileStem(agent.name)}.jsonl`);
+  const sessionPath = createChildSessionPath(agentSessionDir, agent.name);
   result.sessionPath = sessionPath;
   emitUpdate?.(result);
 
@@ -271,4 +283,4 @@ async function mapWithConcurrency<T, R>(items: T[], limit: number, fn: (item: T,
   return results;
 }
 
-export { createSupervisedReadonlyDispatcher, isFailed, mapWithConcurrency, runChildAgent, validateChildThinkingOverride };
+export { createChildSessionPath, createSupervisedReadonlyDispatcher, isFailed, mapWithConcurrency, runChildAgent, validateChildThinkingOverride };