Five verified fixes to the Pi and Claude ACP agent adapters (each with a unit
test), found via a multi-agent review:
- claude: tool-permission handler no longer auto-resolves on a 2s timer (was
  fail-open: ran the guest's tool without host consent); host is authoritative.
- claude: partial tool input attributed by streaming content-block index, not
  Map insertion order.
- claude: a dead query reader marks the session closed so the next prompt()
  fails fast instead of hanging to the ACP timeout.
- pi: live session subscription is torn down on replace + conn.closed;
  editSnapshots cleared per turn + on cancel.
- pi + claude: failed session/update writes are logged to stderr instead of
  silently swallowed (emit chain kept alive).

Tests: registry/agent/{claude,pi}/tests/adapter.test.mjs. No auto-resolve on
timeout remains in any adapter.