@aperant/framework 0.6.5 → 0.6.7

package/dist/types/config.d.ts

@@ -194,18 +194,22 @@ export interface TddConfig {
  * `mode` is the persisted default render mode — `file` writes a local
  * `.excalidraw` JSON, `mcp` dispatches to a live Excalidraw MCP canvas.
  * The skill's `--mode=...` invocation flag overrides this at call time.
+ * Lives in the shared `.aperant/config.json` (team-shared policy).
  *
- * `mcpConsent` is the per-host consent record for MCP mode. Default
- * `null` means no host has been granted consent yet — the skill must
- * prompt and persist on the first MCP-mode invocation. The same host
- * does not re-prompt; a different host invalidates the existing record
- * and re-prompts.
+ * `mcpConsent` is the per-host consent record for MCP mode. Per
+ * FRAMEWORK-AUDIT-001, this field is per-user state and is persisted to
+ * the gitignored `.aperant/config.local.json` — NOT the shared
+ * `config.json`. It surfaces on `DiagramConfig` because callers read the
+ * MERGED config (via `loadMergedProjectConfig`); the optional `?` marks
+ * that the field is absent until the user records a consent decision.
+ * The same host does not re-prompt; a different host invalidates the
+ * existing record and re-prompts.
  */
 export interface DiagramConfig {
     /** Resolved default render mode (overridable per-call by --mode=...) */
     mode: 'file' | 'mcp';
-    /** Per-host MCP consent record; null means not yet asked */
-    mcpConsent: {
+    /** Per-host MCP consent record from config.local.json; absent until first decision */
+    mcpConsent?: {
         host: string;
         decision: 'granted' | 'denied';
         grantedAt: string;

package/dist/types/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAA;AAEnF,wEAAwE;AACxE,MAAM,WAAW,2BAA2B;IAC3C,8EAA8E;IAC9E,KAAK,CAAC,EAAE,iBAAiB,CAAA;IACzB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,4EAA4E;IAC5E,IAAI,CAAC,EAAE,iBAAiB,CAAA;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IACnC,2EAA2E;IAC3E,gBAAgB,EAAE,iBAAiB,CAAA;IACnC,0EAA0E;IAC1E,WAAW,EAAE,iBAAiB,CAAA;IAC9B,yEAAyE;IACzE,WAAW,EAAE,iBAAiB,CAAA;IAC9B;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,2BAA2B,CAAA;CACvC;AAED,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,+GAA+G;IAC/G,kBAAkB,EAAE,OAAO,CAAA;CAC3B;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,IAAI,CAAA;IACZ,OAAO,EAAE,aAAa,CAAA;IACtB,IAAI,EAAE;QACL,GAAG,EAAE,aAAa,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,CAAA;QAC3E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,YAAY,EAAE,gBAAgB,CAAA;KAC9B,CAAA;CACD;AAED,oDAAoD;AACpD,MAAM,WAAW,OAAO;IACvB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,4DAA4D;AAC5D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAA;AAEnF,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,SAAS,CAAA;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC7F,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC9B,2EAA2E;IAC3E,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACtB,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAA;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACzB,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,CAAA;IACvB,uEAAuE;IACvE,2BAA2B,EAAE,MAAM,CAAA;CACnC;AAED,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACxB,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,6DAA6D;IAC7D,6BAA6B,EAAE,MAAM,CAAA;IACrC,kDAAkD;IAClD,oBAAoB,EAAE,OAAO,CAAA;IAC7B,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,CAAA;IAC1B,4FAA4F;IAC5F,KAAK,CAAC,EAAE,SAAS,CAAA;CACjB;AAED,mDAAmD;AACnD,MAAM,MAAM,WAAW,GACpB,SAAS,GACT,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,CAAA;AAEZ,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,WAAW,CAAA;IACzB,QAAQ,EAAE,cAAc,CAAA;IACxB,EAAE,EAAE,QAAQ,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE;QACb,WAAW,EAAE,OAAO,CAAA;QACpB,cAAc,EAAE,MAAM,EAAE,CAAA;QACxB,gBAAgB,EAAE,OAAO,CAAA;QACzB,cAAc,EAAE,MAAM,CAAA;QACtB,MAAM,EAAE,OAAO,CAAA;KACf,CAAA;IACD,WAAW,EAAE;QACZ,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;QACjE,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,CAAA;QAC5B,kBAAkB,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;QAC1D,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;KACvE,CAAA;IACD,QAAQ,EAAE;QACT,WAAW,EAAE,OAAO,CAAA;QACpB,WAAW,EAAE,OAAO,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,eAAe,EAAE;QAChB,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,EAAE,OAAO,CAAA;KACtB,CAAA;IACD,WAAW,CAAC,EAAE;QACb,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,OAAO,CAAA;QACpB,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,CAAA;QAC7D,sBAAsB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAA;KACnD,CAAA;IACD,yEAAyE;IACzE,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,oDAAoD;IACpD,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,gEAAgE;IAChE,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,uEAAuE;IACvE,OAAO,CAAC,EAAE,aAAa,CAAA;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACzB,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,aAAa;IAC7B,wEAAwE;IACxE,IAAI,EAAE,MAAM,GAAG,KAAK,CAAA;IACpB,4DAA4D;IAC5D,UAAU,EAAE;QACX,IAAI,EAAE,MAAM,CAAA;QACZ,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAA;QAC9B,SAAS,EAAE,MAAM,CAAA;KACjB,GAAG,IAAI,CAAA;CACR;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACvC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC/B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,+DAA+D;IAC/D,SAAS,EAAE;QACV,aAAa,CAAC,EAAE,uBAAuB,CAAA;QACvC,KAAK,CAAC,EAAE,uBAAuB,CAAA;QAC/B,YAAY,CAAC,EAAE,uBAAuB,CAAA;QACtC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;KAClC,CAAA;CACD;AAED,MAAM,WAAW,YAAY;IAC5B,GAAG,CAAC,EAAE,eAAe,CAAA;CACrB;AAED,8EAA8E;AAC9E,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAElE,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC9B,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,sBAAsB,CAAA;IAC5C;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC,CAAA;IAC3D;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAA;CAC/C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC7B;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAA;IACrC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC7B"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,0EAA0E;AAC1E,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,YAAY,GAAG,YAAY,GAAG,YAAY,CAAA;AAEnF,wEAAwE;AACxE,MAAM,WAAW,2BAA2B;IAC3C,8EAA8E;IAC9E,KAAK,CAAC,EAAE,iBAAiB,CAAA;IACzB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,iBAAiB,CAAA;IAC5B,4EAA4E;IAC5E,IAAI,CAAC,EAAE,iBAAiB,CAAA;CACxB;AAED,yEAAyE;AACzE,MAAM,WAAW,mBAAmB;IACnC,2EAA2E;IAC3E,gBAAgB,EAAE,iBAAiB,CAAA;IACnC,0EAA0E;IAC1E,WAAW,EAAE,iBAAiB,CAAA;IAC9B,yEAAyE;IACzE,WAAW,EAAE,iBAAiB,CAAA;IAC9B;;;;;;;;;;;;;;;OAeG;IACH,SAAS,CAAC,EAAE,2BAA2B,CAAA;CACvC;AAED,2CAA2C;AAC3C,MAAM,WAAW,gBAAgB;IAChC,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,SAAS,EAAE,OAAO,CAAA;IAClB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,+GAA+G;IAC/G,kBAAkB,EAAE,OAAO,CAAA;CAC3B;AAED,iDAAiD;AACjD,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,IAAI,CAAA;IACZ,OAAO,EAAE,aAAa,CAAA;IACtB,IAAI,EAAE;QACL,GAAG,EAAE,aAAa,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,GAAG,IAAI,GAAG,SAAS,CAAA;QAC3E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;QACtB,YAAY,EAAE,gBAAgB,CAAA;KAC9B,CAAA;CACD;AAED,oDAAoD;AACpD,MAAM,WAAW,OAAO;IACvB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,EAAE,CAAA;CACpB;AAED,4DAA4D;AAC5D,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,aAAa,CAAA;AAEnF,qCAAqC;AACrC,MAAM,WAAW,eAAe;IAC/B,UAAU,EAAE,SAAS,CAAA;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,aAAa,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,SAAS,CAAC;QAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAA;IAC7F,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAED,+CAA+C;AAC/C,MAAM,WAAW,cAAc;IAC9B,2EAA2E;IAC3E,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACtB,+CAA+C;IAC/C,UAAU,EAAE,OAAO,CAAA;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,SAAS;IACzB,6CAA6C;IAC7C,OAAO,EAAE,OAAO,CAAA;IAChB,6EAA6E;IAC7E,eAAe,EAAE,MAAM,CAAA;IACvB,uEAAuE;IACvE,2BAA2B,EAAE,MAAM,CAAA;CACnC;AAED,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACxB,kDAAkD;IAClD,kBAAkB,EAAE,MAAM,CAAA;IAC1B,6DAA6D;IAC7D,6BAA6B,EAAE,MAAM,CAAA;IACrC,kDAAkD;IAClD,oBAAoB,EAAE,OAAO,CAAA;IAC7B,+CAA+C;IAC/C,kBAAkB,EAAE,MAAM,CAAA;IAC1B,4FAA4F;IAC5F,KAAK,CAAC,EAAE,SAAS,CAAA;CACjB;AAED,mDAAmD;AACnD,MAAM,MAAM,WAAW,GACpB,SAAS,GACT,aAAa,GACb,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,CAAA;AAEZ,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,WAAW,CAAA;IACzB,QAAQ,EAAE,cAAc,CAAA;IACxB,EAAE,EAAE,QAAQ,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,YAAY,EAAE;QACb,WAAW,EAAE,OAAO,CAAA;QACpB,cAAc,EAAE,MAAM,EAAE,CAAA;QACxB,gBAAgB,EAAE,OAAO,CAAA;QACzB,cAAc,EAAE,MAAM,CAAA;QACtB,MAAM,EAAE,OAAO,CAAA;KACf,CAAA;IACD,WAAW,EAAE;QACZ,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;QACjE,KAAK,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAA;SAAE,CAAA;QAC5B,kBAAkB,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,CAAA;QAC1D,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAA;SAAE,CAAA;KACvE,CAAA;IACD,QAAQ,EAAE;QACT,WAAW,EAAE,OAAO,CAAA;QACpB,WAAW,EAAE,OAAO,CAAA;QACpB,aAAa,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,eAAe,EAAE;QAChB,OAAO,EAAE,OAAO,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,aAAa,EAAE,OAAO,CAAA;KACtB,CAAA;IACD,WAAW,CAAC,EAAE;QACb,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,OAAO,CAAA;QACpB,YAAY,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,CAAA;QAC7D,sBAAsB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAA;KACnD,CAAA;IACD,yEAAyE;IACzE,aAAa,CAAC,EAAE,mBAAmB,CAAA;IACnC,0EAA0E;IAC1E,MAAM,CAAC,EAAE,YAAY,CAAA;IACrB,oDAAoD;IACpD,SAAS,CAAC,EAAE,cAAc,CAAA;IAC1B,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,aAAa,CAAA;IACxB,gEAAgE;IAChE,GAAG,CAAC,EAAE,SAAS,CAAA;IACf,uEAAuE;IACvE,OAAO,CAAC,EAAE,aAAa,CAAA;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACzB,6DAA6D;IAC7D,QAAQ,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,aAAa;IAC7B,wEAAwE;IACxE,IAAI,EAAE,MAAM,GAAG,KAAK,CAAA;IACpB,sFAAsF;IACtF,UAAU,CAAC,EAAE;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,QAAQ,EAAE,SAAS,GAAG,QAAQ,CAAA;QAC9B,SAAS,EAAE,MAAM,CAAA;KACjB,GAAG,IAAI,CAAA;CACR;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACvC,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAA;IACf,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAA;IACb,iEAAiE;IACjE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC/B;;;;;OAKG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,+DAA+D;IAC/D,SAAS,EAAE;QACV,aAAa,CAAC,EAAE,uBAAuB,CAAA;QACvC,KAAK,CAAC,EAAE,uBAAuB,CAAA;QAC/B,YAAY,CAAC,EAAE,uBAAuB,CAAA;QACtC,QAAQ,CAAC,EAAE,uBAAuB,CAAA;KAClC,CAAA;CACD;AAED,MAAM,WAAW,YAAY;IAC5B,GAAG,CAAC,EAAE,eAAe,CAAA;CACrB;AAED,8EAA8E;AAC9E,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,CAAA;AAElE,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC9B,yDAAyD;IACzD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,sBAAsB,CAAA;IAC5C;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC,CAAA;IAC3D;;;;;;;;;;OAUG;IACH,kBAAkB,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,OAAO,CAAA;CAC/C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC7B;;;;;;;;;;;OAWG;IACH,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,OAAO,CAAA;IACrC;;;;;;OAMG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAC7B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aperant/framework",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "AI coding framework — composable skills for planning, executing, verifying, and reviewing code with any LLM provider. Works as Claude Code commands, Codex tasks, or programmatically.",
   "author": "Mikalsen AI <hello@mikalsen.ai>",
   "type": "module",
@@ -36,6 +36,14 @@
       "types": "./dist/standalone/index.d.ts",
       "import": "./dist/standalone/index.js"
     },
+    "./coordination/event-schema": {
+      "types": "./src/cli/coordination/event-schema.d.ts",
+      "import": "./src/cli/coordination/event-schema.mjs"
+    },
+    "./roadmap/conductor-view": {
+      "types": "./src/cli/roadmap/conductor-view.d.ts",
+      "import": "./src/cli/roadmap/conductor-view.mjs"
+    },
     "./design/scan": {
       "import": "./src/cli/design/scan.mjs"
     },

package/prompts/conductor-status-check.md

@@ -0,0 +1,23 @@
+# Conductor — Tap-on-Shoulder Status Check Template
+
+> NOTE: Phase 1 does not inject this prompt. It is the canonical template that Phase 3's tap-on-shoulder protocol will consume. The `{request_id}` substitution is the only dynamic value.
+
+## Template
+
+```
+Status check (request_id={request_id}):
+
+Reply tagged [status:{request_id}] with:
+1. One-line summary of what you just did.
+2. One-line summary of what you intend to do next.
+3. Anything you are blocked on or need from the user.
+
+Keep your reply under 100 tokens. Do not paste transcripts.
+```
+
+## Guardrails (Phase 3 consumer contract)
+
+- Inject only after a quiescence check ("no pending tool prompt", "no pending permission ask") — see `claude-code/quiescence.ts`.
+- Apply a timeout window (default 60s); ignore ambiguous / untagged replies.
+- The reply is **informational only** — never executed as a command without a separate cross-check (R7).
+- Bound the captured reply to ~100-300 tokens. Never capture transcripts.

package/prompts/conductor-sub-agent.md

@@ -0,0 +1,57 @@
+# Conductor Sub-Agent — Reviewer System Prompt
+
+You are a **conductor sub-agent reviewer**: a single-pass parallel reviewer spawned by the Conductor's sub-agent queue (via the sparring engine) to evaluate a fleet event and recommend whether the Conductor should log an intent.
+
+## Identity
+
+- You run on a **frontier model** (Anthropic Opus 4.7 1M, OpenAI GPT-5.4/5.5 frontier, Google Gemini latest frontier). Cheap-model fallback is forbidden.
+- You have **no project filesystem access**. You do not call Read, Glob, or Grep. You see only the event payload, the prior context the Conductor handed you, and the cross-check tool.
+- You return a structured `findings` blob (severity / title / body / ref) — the same shape the sparring engine's lens reviewers return.
+
+## Your one tool: `crossCheck`
+
+You can demand ground truth via the deterministic cross-check primitive:
+
+- `crossCheckFileClaim(file, sinceRef)` → did `git diff --name-only sinceRef -- file` produce output?
+- `crossCheckPhaseComplete(taskDir)` → is the last commit touching `taskDir` recent?
+- `crossCheckPRClaim(prUrl)` → does `gh pr view prUrl --json state` return a live PR?
+
+If your evaluation depends on an agent's self-reported claim ("I finished the spec", "the PR is open", "I edited file X"), call `crossCheck` before recommending action. **You can be confidently wrong about completion claims because you only see text.** The cross-check is the floor under hallucination.
+
+## What to evaluate
+
+The Conductor hands you:
+
+- The triggering event (e.g. `phase.changed{ to: 'idle' }`, `artifact.ready`, `budget.exceeded`).
+- The enrolled terminal's tier (A / B / C) and current autonomy setting.
+- Relevant prior intents from this terminal in the recent window.
+
+Recommend one of:
+
+1. **No-op** — the event is routine; no intent needed. (severity: `low`, title: `routine event`)
+2. **Suggest** — the Conductor should log an intent suggesting a follow-up action. Include the action and reasoning. (severity: `medium`, title: `<suggested action>`)
+3. **Escalate** — the event signals an error / blocked state / security concern. The Conductor should surface this prominently. (severity: `high`, title: `<concern>`)
+4. **Cross-check failed** — you called `crossCheck` and the claim did not verify. (severity: `high`, title: `cross-check failed: <claim>`)
+
+## Output shape
+
+Return a JSON object with a `findings` array:
+
+```json
+{
+  "findings": [
+    {
+      "severity": "low" | "medium" | "high",
+      "title": "short title",
+      "body": "1-3 sentence reasoning",
+      "ref": "<optional event_id or file path>"
+    }
+  ]
+}
+```
+
+The sparring engine parses this with the same `FindingsBlobSchema` it uses for lens reviewers. One finding per recommendation. Multiple findings are allowed when an event triggers multiple recommendations.
+
+## Style
+
+Be terse. Quote the cross-check evidence verbatim when it disagrees with the agent's claim. Do not author code. Do not propose diffs.

package/prompts/conductor-system.md

@@ -0,0 +1,172 @@
+# Conductor — Master Orchestrator
+
+You orchestrate up to 12 parallel agent terminals. You do not write code.
+You think a lot. You output little. You replace human babysitting.
+
+## Identity
+
+- Frontier model only. No cheap-model fallback.
+- You sit ABOVE terminal agents. They execute. You direct.
+- You never produce diffs. If a sub-agent emits a diff, reject it.
+
+## Voice
+
+Caveman-terse. Drop articles, filler, pleasantries. Fragments OK. No
+"I'll just go ahead and...". State decisions, not deliberation. Reason
+deeply in private. Speak rarely.
+
+Bad: "Sure! I'll now spawn a fresh terminal and run /apt:plan on it..."
+Good: "Spawning T3 for task X."
+
+## Mission
+
+Human gives goal. You take it end-to-end across the agent fleet without
+asking for approval at each step. Default mode: full-auto. Ask only when
+the goal itself is ambiguous, not when execution is.
+
+Example goal: "Take next 12 roadmap phases, execute end-to-end."
+Your job: spawn terminals, plan each, review plans, realign or approve,
+execute, verify, review, ship, pr-review, verify-proof. Report only
+exceptions + final result.
+
+## The pipeline you drive per task
+
+For each task you take responsibility for, drive ALL phases yourself:
+
+1. `/apt:plan <task>` — agent writes spec.md + implementation_plan.json
+2. Wait for `artifact.ready{kind:'plan'}`
+3. `reviewPlan(taskId)` — fetch spec + plan + coverage. Read against:
+   - the task brief you gave
+   - product vision / roadmap goal
+   - known architecture (use `getRoadmap`, `getTaskState`)
+4. Decide:
+   - **Approve** → `sendToTerminal('/apt:execute\r')` to that terminal
+   - **Realign** → `sendToTerminal('[Conductor realignment] <terse note>\r')`.
+     Wait for fresh `artifact.ready`. Re-review. Loop up to 3 attempts.
+     After 3, escalate (respawn or surface to human).
+   - **Reject** → `sendToTerminal('abort\r')`; spawn replacement if task
+     still in scope.
+5. After execute completes (`task-completed` event):
+   - `sendToTerminal('/apt:verify\r')`
+6. After verify completes:
+   - `sendToTerminal('/apt:review\r')`
+7. After review completes:
+   - `sendToTerminal('/apt:ship\r')`
+8. After PR opens:
+   - `sendToTerminal('/apt:pr-review\r')`
+9. After pr-review completes:
+   - `sendToTerminal('/apt:verify-proof\r')`
+10. Mark task done in your internal state. Move to next task.
+
+Run multiple terminals in parallel. Track each by terminal_id.
+
+## Slacker discipline
+
+You are the only thing standing between agents and silent failure. Catch:
+
+- **Idle**: terminal `phase.changed{to:'idle'}` with no fresh artifact
+  for > 5 min after a /apt:* dispatch. Poll: `sendToTerminal('[conductor]
+  status: phase? blocker?\r')`. If still idle after another 5 min,
+  escalate (realign with explicit next step, or respawn).
+- **Slacking**: agent reports completion but artifacts don't exist on
+  disk OR don't match the spec. Use `crossCheck` + `reviewPlan` to verify.
+  Never trust self-reports.
+- **Looping**: same `phase.changed` toggling > 6 times in 10 min. Send
+  `[Conductor realignment] You are looping. State the blocker and stop.\r`
+- **Cost runaway**: a terminal's `budget.exceeded` event arrives. Halt
+  that terminal with `sendToTerminal('exit\r')` after persisting state.
+
+When you nudge, send ONE structured line. Not paragraphs.
+
+## Tools (use, don't narrate)
+
+Read-only:
+- `getRoadmap()` — overlay-aware roadmap. Call when picking next task.
+- `getTaskState(taskId)` — task lifecycle record.
+- `reviewPlan(taskId)` — spec + plan + coverage bundle for self-review.
+- `readEventLog({op?, terminalId?, sinceIso?, limit?})` — event tail.
+- `getEnrolledTerminals()` — enrolled fleet view.
+- `crossCheck({kind, ...})` — deterministic shell verify (file diff,
+  phase commit, PR state). Never trust agent claims without this.
+
+Write (use when needed, no human approval gating):
+- `setEnrollment(terminalId, true, tier)` — enroll a terminal.
+- `spawnTerminal({projectPath, cwd, cliCommand, requestId, reasoning})`
+  — create PTY. For agent runs use `cliCommand: 'claude
+  --dangerously-skip-permissions'` then `sendToTerminal` the slash command.
+- `listTerminals()` — fleet snapshot (cwd, busyState, isCLIMode).
+- `sendToTerminal(terminalId, input, requestId, reasoning)` — tap-on-
+  shoulder. Always one line. Append `\r` to submit. NEVER multi-line essay.
+- `destroyTerminal(terminalId, requestId, reasoning)` — irreversible.
+  Prefer graceful `sendToTerminal('exit\r')`.
+- `emitIntent({...})` — audit envelope for non-tool decisions.
+
+Tool surface depends on host. If `spawnTerminal` is not in your tools,
+you are in observe-only mode — do not promise spawns; describe what you
+WOULD do.
+
+## Tier classification (verify on enrollment)
+
+- **Tier A** — native structured event source (Claude `claude -p
+  --output-format stream-json`). Full autonomy.
+- **Tier B** — APT skill wrapping any CLI (`/apt:plan`, `/apt:execute`,
+  etc.). Full autonomy. THIS IS YOUR PRIMARY TARGET.
+- **Tier C** — bare CLI / raw PTY. Capped to suggest-only regardless of
+  user autonomy setting. Mark intents `tier_capped: true`.
+
+## Cross-check is canonical
+
+Before recording any intent that depends on agent self-report, call
+`crossCheck`:
+- "I finished spec.md" → `crossCheck({kind:'phase', taskDir})`
+- "I edited file X" → `crossCheck({kind:'file', file, sinceRef:'HEAD~1'})`
+- "I opened PR" → `crossCheck({kind:'pr', prUrl})`
+
+Sub-agent reviewers can call cross-check too. When uncertain, demand
+evidence.
+
+## Event log
+
+Canonical envelope at `.aperant/events/YYYY-MM-DD.jsonl`. Schema gate
+enforces required fields per op (see `coordination/event-schema.mjs`).
+
+Locked op set:
+`terminal.enrolled` `terminal.unenrolled` `phase.changed` `awaiting-input`
+`input-rescinded` `artifact.ready` `heartbeat` `budget.exceeded`
+`conductor.intent` `conductor.cross_check` `conductor.realignment`
+
+Reserved meanings:
+- `phase.changed.to` ∈ {busy, idle} ONLY (PTY state). NEVER use for plan
+  completion.
+- `artifact.ready{kind:'plan'}` IS the plan-completion signal. Auto-
+  emitted by `apt-tools commit` when planner runs under a Conductor PTY
+  (`APERANT_TERMINAL_ID` set).
+
+Every action you take appends an audit envelope. The framework writes
+most of them for you when you call its tools.
+
+## Output discipline
+
+User-facing text per turn: one line per terminal you acted on, plus one
+final summary. Examples:
+
+- `T1: plan reviewed, 2 gaps → realignment sent (attempt 1).`
+- `T3: plan approved → /apt:execute dispatched.`
+- `T5: idle 8m, polling.`
+- `Done. 4 tasks shipped, 1 wedged at T7 (handed back to you).`
+
+NOT examples (forbidden):
+- "I'll go ahead and spawn..."
+- "Great question! Let me think through..."
+- Multi-paragraph narration of your reasoning. Reason internally.
+
+The chat thread is a control surface, not a journal.
+
+## First turn
+
+On first turn in a NEW thread (no prior assistant messages), one line:
+
+`Conductor ready. Goal?`
+
+Nothing else. No greeting paragraph. No tool list. The user knows what
+you are.

package/skills/apt-close-task/SKILL.md

@@ -88,6 +88,31 @@ Do NOT wait on the narrator. Its status lands in `.aperant/digests/.last-run.jso
 
 After step 2.5 spawns narrators for the just-closed candidates, the skill ALSO drains `state.pending_narration[]` (entries the passive sweep parked there) — see §4.
 
+## 2.6 Drop user-facing release-note fragment (persona-aware release-notes opt-in)
+
+This step is additive bookkeeping — it must NEVER block the close path or surface a destructive failure. Runs ONLY when `.aperant/config.json` has `changelog.release_notes.enabled === true`. When the toggle is `false` (the default for projects that don't publish user-facing notes), skip the section entirely.
+
+For each entry in the close-merged envelope's `closed[]`:
+
+1. Read the merged PR body via `gh pr view <pr_number> --json body`. Look for a single `Release note:` line (case-insensitive). The line is what `/apt:ship` Section 2.6 auto-drafted (or a manual edit by the author).
+2. Look for a persona tag in the PR body or in commits. Reasonable sources: the `Release note:` line itself if the author included one (e.g. `Release note: [Maya] …`), a `release-note-persona:` trailer in the most recent commit, or the persona name embedded in the auto-drafted line by §2.6.2 of /apt:ship.
+3. Invoke the deterministic drafter:
+
+```bash
+node packages/framework/bin/apt-tools.mjs release-notes draft . \
+  --pr <pr_number> \
+  --note "<release-note-line-text>" \
+  [--persona <persona-name>]
+```
+
+This call is synchronous, sub-100ms, and idempotent per subtask 2 — re-running close-task does not duplicate the fragment.
+
+4. On non-zero exit from `release-notes draft`, append a `pending_release_note[]` row to `.aperant/state.json` so a manual re-run can recover. Do NOT block close-merged on this — it is additive bookkeeping, not core lifecycle. Use `apt-tools state-update . --append-pending-release-note '{"task_id": "<id>", "pr_number": <n>, "reason": "<error>"}'` if such a helper exists, otherwise call `apt-tools state-artifacts . --note '<msg>'` or write a one-line warning to stderr.
+
+Skip the section quietly when:
+- The PR body has no `Release note:` line AND no auto-draft signal (intentional infra-only PR, or the `no-notes` label was applied at ship time).
+- The CLI returns `{status: 'ok', written: false, reason: 'no-change'}` — already idempotent-handled by subtask 2's contract; treat as success.
+
 ## 3. Summary
 
 close-merged emits an envelope with:

package/skills/apt-diagram/SKILL.md

@@ -174,8 +174,38 @@ order: (a) consent gate, (b) renderer dispatch, (c) failure handling.
 
 ### 5a. Consent gate
 
-Read `.aperant/config.json` and look at `diagram.mcpConsent`. The
-shape is:
+Per FRAMEWORK-AUDIT-001, `mcpConsent` is per-user state and lives in
+`.aperant/config.local.json` (gitignored), NOT the shared
+`.aperant/config.json`. The `diagram.mode` field stays in `config.json` as
+team policy. Read the MERGED config (config.json deep-merged with
+config.local.json — local wins on collision) and look at
+`diagram.mcpConsent` via the same in-skill `node -e` pattern Step 2 uses:
+
+```bash
+node -e '
+  const fs = require("fs");
+  const path = require("path");
+  const aperantDir = path.join(process.cwd(), ".aperant");
+  function readJson(p) {
+    try { return JSON.parse(fs.readFileSync(p, "utf-8")); } catch { return null; }
+  }
+  const shared = readJson(path.join(aperantDir, "config.json")) || {};
+  const local = readJson(path.join(aperantDir, "config.local.json")) || {};
+  // Deep-merge — local wins on collision; matches loadMergedProjectConfig semantics.
+  function merge(a, b) {
+    if (a === null || typeof a !== "object" || Array.isArray(a)) return b;
+    if (b === null || typeof b !== "object" || Array.isArray(b)) return b;
+    const out = { ...a };
+    for (const k of Object.keys(b)) out[k] = (k in a) ? merge(a[k], b[k]) : b[k];
+    return out;
+  }
+  const cfg = merge(shared, local);
+  const consent = cfg && cfg.diagram ? cfg.diagram.mcpConsent : null;
+  process.stdout.write(JSON.stringify(consent || null));
+'
+```
+
+The shape is:
 
 ```json
 { "host": "<host string>", "decision": "granted" | "denied", "grantedAt": "<ISO 8601 timestamp>" }
@@ -196,7 +226,7 @@ Decide whether to prompt:
 - If `diagram.mcpConsent.host !== <configured MCP host>` → prompt.
 - If `diagram.mcpConsent.host === <configured MCP host>` AND `diagram.mcpConsent.decision === "denied"` → hard-error immediately with the exact denied text (no re-prompt):
   ```
-  diagram MCP consent denied; re-run with `--mode=file` or change diagram.mcpConsent in .aperant/config.json
+  diagram MCP consent denied; re-run with `--mode=file` or change diagram.mcpConsent in .aperant/config.local.json
   ```
 - Otherwise (host matches AND decision is `"granted"`) → the existing consent applies; proceed to 5b.
 
@@ -206,23 +236,25 @@ When prompting, print a single line naming the host and ask `granted / denied`:
 apt:diagram is about to send diagram data to the Excalidraw MCP server at <host>. Type `granted` to allow, `denied` to refuse.
 ```
 
-Read one line of input. Persist the decision back to
-`.aperant/config.json` with a read-mutate-write JSON pattern:
+Read one line of input. Persist the decision to
+`.aperant/config.local.json` (NOT `config.json` — `mcpConsent` is per-user
+state per FRAMEWORK-AUDIT-001; the local file is gitignored). The
+read-mutate-write JSON pattern targets the local file only:
 
 ```bash
 node -e '
   const fs = require("fs");
   const path = require("path");
-  const cfgPath = path.join(process.cwd(), ".aperant/config.json");
+  const cfgPath = path.join(process.cwd(), ".aperant/config.local.json");
   const decision = process.env.APT_DIAGRAM_DECISION; // "granted" | "denied"
   if (decision !== "granted" && decision !== "denied") {
     process.stderr.write("invalid decision\n");
     process.exit(1);
   }
   const host = process.env.APT_DIAGRAM_HOST;
-  let cfg = { diagram: { mode: "mcp", mcpConsent: null } };
+  let cfg = { diagram: { mcpConsent: null } };
   try { cfg = JSON.parse(fs.readFileSync(cfgPath, "utf-8")); } catch {}
-  cfg.diagram = cfg.diagram || { mode: "mcp", mcpConsent: null };
+  cfg.diagram = cfg.diagram || { mcpConsent: null };
   cfg.diagram.mcpConsent = {
     host,
     decision,
@@ -232,11 +264,15 @@ node -e '
 '
 ```
 
+Note: the write target above is `config.local.json` (gitignored, per-user).
+The shared `config.json` is not touched — `diagram.mode` lives there and
+stays team-shared policy.
+
 If the decision is `"denied"`, exit with EXACTLY this text (verbatim,
 no rewording, no extra punctuation):
 
 ```
-diagram MCP consent denied; re-run with `--mode=file` or change diagram.mcpConsent in .aperant/config.json
+diagram MCP consent denied; re-run with `--mode=file` or change diagram.mcpConsent in .aperant/config.local.json
 ```
 
 If the decision is `"granted"`, proceed to 5b.

package/skills/apt-plan/SKILL.md

@@ -416,6 +416,18 @@ The coverage check ensures every acceptance criterion has at least one subtask w
 node packages/framework/bin/apt-tools.mjs commit "plan: create implementation plan for {task}" --files spec.md implementation_plan.json
 ```
 
+## 8a. Runtime-context adapters
+
+If `APERANT_TERMINAL_ID` is set (you are running under the Aperant
+Conductor — a master-orchestrator agent inside the Aperant app), see
+`adapters/conductor.md` for the plan-review handshake convention
+(`proceed` / `abort` / `[Conductor realignment]` stdin strings) the
+Conductor's drawer uses post-commit. The `artifact.ready{kind:'plan'}`
+signal itself is now emitted automatically by the `apt-tools commit`
+postcondition — no manual emit step required. Native invocations
+(Claude Code, Gemini, OpenCode, Codex with no Conductor context) can
+skip the adapter entirely and proceed to Section 9.
+
 ## 9. Report
 
 Output a summary:

package/skills/apt-plan/adapters/conductor.md

@@ -0,0 +1,98 @@
+# apt-plan adapter — Aperant Conductor
+
+This adapter is **only loaded** when the planner runs under the Aperant
+Conductor (a master-orchestrator agent inside the Aperant desktop / web
+app). Native invocations of `/apt:plan` (from plain Claude Code, Gemini
+CLI, OpenCode, or Codex) IGNORE this file entirely — the framework
+behavior in `SKILL.md` is the source of truth for them.
+
+## When to load this adapter
+
+Detect Conductor context by env var:
+
+```bash
+[ -n "$APERANT_TERMINAL_ID" ]
+```
+
+The Conductor injects `APERANT_TERMINAL_ID` into every PTY it spawns.
+If the var is unset, you are NOT under the Conductor — stop reading.
+
+## What changes under the Conductor
+
+The planner's filesystem outputs (`spec.md`, `implementation_plan.json`)
+are unchanged. The ADDITION is one extra step after Section 8 (Persist
+State) of `SKILL.md`:
+
+### Plan-Ready Signal (framework-owned, no action required)
+
+The `artifact.ready{kind:'plan'}` signal is emitted **automatically** by
+the framework's `apt-tools commit` postcondition. When the planner
+commits `spec.md` + `implementation_plan.json` via the standard:
+
+```bash
+node packages/framework/bin/apt-tools.mjs commit "plan: ..." \
+  --files spec.md implementation_plan.json
+```
+
+…and the process is running under a Conductor PTY (env
+`APERANT_TERMINAL_ID` is set), `apt-tools commit` auto-emits a fully-
+formed `artifact.ready` envelope to `.aperant/events/{today}.jsonl`.
+The envelope carries the `task_id`, plan path, sha256 hash, and the
+auto-stamped `terminal_id`.
+
+This replaces the earlier markdown-discipline emit step. The earlier
+step was correctly skipped on QUICK / SIMPLE classified tasks (Fast
+Path Guarantee, Pocock adoption ID-05) — moving the emit to a
+framework postcondition makes it work uniformly across QUICK, STANDARD,
+DEEP, and COMPLEX without violating the Fast Path Guarantee.
+
+**Planner authors don't need to do anything.** As long as you call
+`apt-tools commit` to land your plan artifacts, the Conductor will
+see `artifact.ready` and the drawer's PlanReadyCard will auto-promote.
+
+If the planner does NOT use `apt-tools commit` (it lands the plan via
+raw `git commit` or `git add`), the auto-emit will not fire. In that
+case the Conductor falls back to filesystem polling of the task dir
+(slightly higher latency, same outcome).
+
+### Plan-review handshake (Step 6 + 7 of Conductor v2)
+
+After emitting `artifact.ready{kind:'plan'}` the planner SHOULD pause at
+an idle prompt and listen for ONE of three Conductor-driven inputs:
+
+- `proceed\r` — the human (via the PlanReadyCard's **Approve** button)
+  approves the plan. Continue to `/apt:execute` as you would in the
+  normal flow.
+- `abort\r` — the human rejected. Abandon this plan; do not start
+  execution. Optionally exit the session cleanly.
+- `[Conductor realignment] <note>\r` — the human pressed **Realign**.
+  Treat the `<note>` as additional planning context: re-open spec.md /
+  implementation_plan.json, address the note's gaps, commit a new
+  revision, and emit a fresh `artifact.ready{kind:'plan'}` (with the
+  same task_id but a NEW request_id — the drawer keys cards on
+  request_id, so re-using it would suppress the new card). The
+  realignment loop can repeat; after attempt_n >= 3 the Conductor may
+  decide to respawn the terminal entirely.
+
+These exact strings are pinned by the Conductor's `ConductorContextHost`
+handlers (`packages/ui/src/sections/conductor/ConductorContextHost.tsx`).
+Native CLI invocations of `/apt:plan` (no `APERANT_TERMINAL_ID`) skip
+this handshake and follow the normal report → `/apt:execute` flow.
+
+## Why this lives in an adapter (not in SKILL.md)
+
+The Aperant Framework is consumed by multiple CLIs (Claude Code, Gemini,
+OpenCode, Codex) and by the Aperant app itself. The vast majority of
+`/apt:plan` invocations come from native CLIs — those should not see
+or execute Conductor-specific machinery. By isolating the Conductor's
+event-emit obligations to this adapter, the public skill stays minimal
+and the framework remains CLI-agnostic. The pattern mirrors
+`appendices/` (reasoning-stance loaders) but with a different semantic:
+**runtime-context loader** — load when the runtime environment matches.
+
+## Adding more adapters
+
+Future runtime contexts (e.g. a hypothetical CI runner, another
+orchestrator) can add `adapters/{context}.md` files using the same
+pattern: detect via env or filesystem signal, document the additional
+obligations, and add a one-line conditional reference in `SKILL.md`.