PASS: three distinct states
PASS: mode changes style
PASS: XML escaping
PASS: multiline preserved
PASS: invalid input rejected
PASS: invalid input rejected
PASS: invalid input rejected
PASS: invalid input rejected
PASS: narrative system prompt
PASS: preview user input
PASS: invalid API version rejected
All offline agent tests passed.