Extract containsStructuralAuditReceipt into @codebuff/common/util/audit-receipt and rewire both the general-agent handleSteps completion gate and spawn-agent-utils buildRuntimeAgentReceipt gate to the shared helper so the two receipt checks cannot drift; cover the helper with a unit test.

- general-agent prompt now routes ripgrep-style search through code-searcher (code_search is a registered runtime tool but intentionally not granted to general-agent) and names the required params.searchQueries.

- add a code-searcher searchQueries recovery hint in validateAgentInput so an empty spawn gets an actionable message instead of a bare schema error.

- add general-agent audit-loop tests covering the receipt-present break and the retry-exhaustion break.

- fix the base2 reviewer-spawn coverage-evidence wording from 'below' to 'above' to match where the list is rendered.

All changes pass typecheck and the affected test suites.

Align two base2 reviewer-spawn e2e prompts to include a code-intent keyword so proactive query_index fires as the first yield. Update the rewrite-symbol client-rejection assertion to match the branch's deterministic-rejection semantics (rejection preserves read authorization). Add a base2 test pinning which prompts trigger proactive query_index vs skip to git_status.

… cap

Track the shallowest depth each object was visited at (WeakMap instead of WeakSet) so a shared receipt first reached beyond MAX_TRAVERSAL_DEPTH via a deep path is still found through a later shorter path; equal-or-deeper revisits and cycles are still skipped. Adds a regression test.

Fold a stray top-level prompt/params/handoff sibling into a single-agent spawn_agents array when unambiguous (multi-agent and unexpected-sibling cases still fail closed); add a corrected-shape example to the spawn_agents validation hint; emit a concrete copyable code-searcher spawn recovery for ungranted code_search/find_files_matching_content instead of the generic not-granted line (message-only, still fail-closed); and reinforce the base2 spawn guidance with the correct spawn_agents shape. Adds focused tests.

Reproduces the real-world failure where the whole agents value is a JSON string with a stray prompt pair floating as a sibling array element; asserts it fails closed with corrected-shape guidance.

Add a debug log on the single-agent mis-braced spawn_agents auto-repair path, recording only the folded sibling key names and toolCallId so prompt/params/handoff values are never leaked. Thread an optional logger through parseRawToolCall and detectMisbracedSpawnPayload from executeToolCall to enable it.

Add a processStream integration test asserting the folded repair reaches the spawn handler: the repaired payload emits a spawn_agents tool_call and produces no error event.

The two git-committer block messages in tool-executor now describe the validation/reviewer gate re-arming on every edit and clearing automatically, framing the block as expected ordering rather than a failure so agents wait one gate cycle instead of retrying in a loop.

gitDisciplineSection carries matching wait-and-commit guidance, and the run-agent-step-tools and quality-prompt-snapshot tests pin the new wording so the behavior-changing messages stay covered.

Export isTestCoverageReviewerFinding and mirror it inline in handleSteps so pure coverage blockers spawn test-writer only; mixed or code findings stay on repair-editor. Covered by unit, parity, and base2 integration tests.

Expand gateAwareness for re-arm ownership, targeted validation != gate, commit recovery, and pending-set authority. Align base2/base-deep tool-choice and validation bullets; document control-plane and request-flow gate boundaries. Move deep Phase 6 Final Review before Phase 7 Lessons, polish typos, and assert specialistRouting in snapshots.