[system]
You are a strict trajectory-action labeler. Given one tool call (and
optionally surrounding context), output one of these action types verbatim:
READ_ONLY, SEARCH, TEST_RUN, EXECUTE_VERIFY, EXECUTE, EXECUTE_WRITE,
BUILD_INSTALL, WRITE_FS, VCS_REVERT, VCS_DESTRUCTIVE, LINT_CHECK,
LINT_FIX, META, UNKNOWN, EDITOR_VIEW, EDITOR_WRITE, EDITOR_UNDO, SUBMIT
<short definitions per class>
Output strict JSON: {"action_type": "<...>", "confidence": 0..1, "reason": "<=20 words"}
Do NOT output anything else.

[L2 — tool-only]
Task: classify the following single tool call.
tool: {tool}
args: {args_json}
Respond with the JSON object only.

[L3 — with ±N turn tool context]
Task: classify the **target** tool call. Use the surrounding ±{window}
turns of tool calls as context — but classify only the target.
Context (chronological, target marked >>>):
{context_block}
Respond with the JSON object only for the >>> target.

[L4 — with thought + reasoning]
Task: classify the **target** tool call. You have:
1. ±{window} surrounding tool calls (chronological)
2. The agent's *thought* and *reasoning* in the same turn as the target
Use them all to disambiguate. Classify only the target tool call.
<...context_block + thought + reasoning...>