@astrosheep/keiyaku 2.9.4 → 2.9.5

package/build/agents/call-terms.js

@@ -15,6 +15,7 @@ export function buildCallTerms(snapshot, prompt, cwd, options) {
         prompt,
         sessionContinuationPromptPrefix,
         idleTimeoutMs: options.idleTimeoutMs ?? runtimeConfig.subagent.execIdleTimeoutMs,
+        executionTimeoutMs: options.executionTimeoutMs ?? runtimeConfig.subagent.execMaxDurationMs,
         maxCaptureChars: registration.maxCaptureChars(runtimeConfig),
         signal: options.signal,
         ...(options.initialTurn !== undefined ? { initialTurn: options.initialTurn } : {}),

package/build/agents/harness/execution-handle.js

@@ -167,5 +167,6 @@ export function createProjectionDriver(input) {
             })();
             await gracefulAbort;
         },
+        ...(input.probe ? { probe: input.probe } : {}),
     };
 }

package/build/agents/harness/outcome.js

@@ -64,7 +64,15 @@ export function failFromFailEvent(shared, state, failEvent) {
         exitCode: failEvent.exitCode ?? null,
     }, state.finalMessageCandidate, failEvent.diagnostics ?? diagnostics);
 }
-export function classifyFailure(shared, state, error, idleTimedOut) {
+export function classifyFailure(shared, state, error, idleTimedOut, transportFailure, policyBudgetExceeded = false) {
+    if (policyBudgetExceeded) {
+        return failWithError(shared, state, {
+            code: "SUBAGENT_POLICY_BUDGET",
+            message: `${shared.terms.provider} execution policy budget expired`,
+            timeoutMs: shared.terms.executionTimeoutMs,
+            exitCode: null,
+        }, state.finalMessageCandidate);
+    }
     if (shared.dismissed || shared.externallyAborted) {
         return mintOutcome({
             status: "dismissed",
@@ -75,6 +83,18 @@ export function classifyFailure(shared, state, error, idleTimedOut) {
             warnings: [...state.warnings],
         });
     }
+    if (transportFailure) {
+        const message = transportFailure instanceof Error ? transportFailure.message : `${shared.terms.provider} session transport probe failed`;
+        const timeoutMs = isProviderTerminalError(transportFailure) && transportFailure.fact.kind === "failed"
+            ? transportFailure.fact.timeoutMs
+            : shared.terms.idleTimeoutMs;
+        return failWithError(shared, state, {
+            code: "SUBAGENT_TRANSPORT_ERROR",
+            message,
+            timeoutMs,
+            exitCode: null,
+        }, state.finalMessageCandidate);
+    }
     if (idleTimedOut) {
         return failWithError(shared, state, {
             code: "SUBAGENT_TIMEOUT",

package/build/agents/harness/projection.js

@@ -5,6 +5,7 @@ import { overflowMarkerFromDropped, prepareAgentEventForPersistence, } from "./e
 import { classifyFailure, classifySettlementFailure, completeOutcome, createOutcomeState, failFromFailEvent, failWithError, processEvent, renderOutcomeCapturedText, } from "./outcome.js";
 import { startLiveProjection } from "./router.js";
 import { createAbortError } from "./runtime.js";
+const POLICY_BUDGET_CLEANUP_GRACE_MS = 5_000;
 export function call(terms, options) {
     return createProjection(terms, undefined, options);
 }
@@ -154,7 +155,21 @@ function requestControlledGracefulAbort(shared, reason) {
     shared.gracefulAbort.catch(() => undefined);
     return shared.gracefulAbort;
 }
-function deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, observerEnabled) {
+function requestPolicyBudgetCleanup(shared, reason) {
+    const graceful = requestControlledGracefulAbort(shared, reason);
+    const force = () => {
+        void shared.live?.abort("force").catch(() => undefined);
+    };
+    const cleanupTimeout = setTimeout(force, POLICY_BUDGET_CLEANUP_GRACE_MS);
+    cleanupTimeout.unref?.();
+    void graceful.then(() => clearTimeout(cleanupTimeout), () => {
+        clearTimeout(cleanupTimeout);
+        force();
+    });
+}
+function deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, knownActiveTools, observerEnabled) {
+    if (shared.terminal)
+        return;
     const prepared = prepareAgentEventForPersistence(event);
     if (observerEnabled.value && shared.observer) {
         try {
@@ -173,24 +188,63 @@ function deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, obse
         }
     }
     shared.publicEvents.push(event);
+    if (event.type === "activity") {
+        if (event.phase === "started")
+            knownActiveTools.add(event.id);
+        if (event.phase === "completed")
+            knownActiveTools.delete(event.id);
+    }
     refreshIdleTimeout();
     processEvent(state, event);
 }
 async function settleProjection(shared) {
     const state = createOutcomeState(shared.terms.maxCaptureChars);
     let idleTimedOut = false;
+    let transportFailure;
+    let policyBudgetExceeded = false;
+    const knownActiveTools = new Set();
     let abortRequested = false;
     const observerEnabled = { value: shared.observer !== undefined };
     let idleTimeout;
+    let executionTimeout;
+    let liveDriver;
+    let probeInFlight;
+    let resolvePolicyBudget;
+    const policyBudget = new Promise((resolve) => {
+        resolvePolicyBudget = resolve;
+    });
     const refreshIdleTimeout = () => {
+        if (shared.terminal)
+            return;
         if (idleTimeout)
             clearTimeout(idleTimeout);
         idleTimeout = setTimeout(() => {
+            if (knownActiveTools.size > 0) {
+                if (!liveDriver?.probe || probeInFlight)
+                    return;
+                probeInFlight = liveDriver.probe()
+                    .then(() => refreshIdleTimeout())
+                    .catch((error) => {
+                    transportFailure = error;
+                    return requestControlledGracefulAbort(shared, error);
+                })
+                    .finally(() => {
+                    probeInFlight = undefined;
+                });
+                probeInFlight.catch(() => undefined);
+                return;
+            }
             idleTimedOut = true;
             requestControlledGracefulAbort(shared, createAbortError(`${shared.terms.provider} exec idle timed out`));
         }, shared.terms.idleTimeoutMs);
         idleTimeout.unref?.();
     };
+    executionTimeout = setTimeout(() => {
+        policyBudgetExceeded = true;
+        requestPolicyBudgetCleanup(shared, createAbortError(`${shared.terms.provider} execution policy budget expired`));
+        resolvePolicyBudget();
+    }, shared.terms.executionTimeoutMs);
+    executionTimeout.unref?.();
     refreshIdleTimeout();
     const requestLiveAbort = () => {
         if (shared.explicitlyAborted)
@@ -201,90 +255,108 @@ async function settleProjection(shared) {
         requestControlledGracefulAbort(shared, shared.lifecycleAbort.signal.reason);
     };
     shared.lifecycleAbort.signal.addEventListener("abort", requestLiveAbort, { once: true });
-    try {
-        const live = await startLiveProjection(shared.terms, shared.lifecycleAbort.signal, shared.reviveTerms, refreshIdleTimeout, shared.observer);
-        shared.onLive(live);
-        resolveForceWaiters(shared, live);
-        if (shared.lifecycleAbort.signal.aborted) {
-            requestLiveAbort();
-        }
+    const providerSettlement = (async () => {
         try {
-            for await (const event of live.events) {
-                deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, observerEnabled);
+            const live = await startLiveProjection(shared.terms, shared.lifecycleAbort.signal, shared.reviveTerms, refreshIdleTimeout, shared.observer);
+            liveDriver = live;
+            shared.onLive(live);
+            resolveForceWaiters(shared, live);
+            if (shared.lifecycleAbort.signal.aborted) {
+                requestLiveAbort();
             }
-        }
-        catch (error) {
-            if (error instanceof Error && error.code === "PROJECTION_STATE_ERROR") {
-                const event = live.mintEvent({
-                    type: "fail",
-                    code: "PROJECTION_STATE_ERROR",
-                    message: error.message,
-                });
-                if (event)
-                    deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, observerEnabled);
+            try {
+                for await (const event of live.events) {
+                    deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, knownActiveTools, observerEnabled);
+                }
             }
-            else {
-                const event = live.mintEvent({
-                    type: "diagnostic",
-                    text: `pump error: ${String(error)}`,
-                });
-                if (event)
-                    deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, observerEnabled);
+            catch (error) {
+                if (error instanceof Error && error.code === "PROJECTION_STATE_ERROR") {
+                    const event = live.mintEvent({
+                        type: "fail",
+                        code: "PROJECTION_STATE_ERROR",
+                        message: error.message,
+                    });
+                    if (event)
+                        deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, knownActiveTools, observerEnabled);
+                }
+                else {
+                    const event = live.mintEvent({
+                        type: "diagnostic",
+                        text: `pump error: ${String(error)}`,
+                    });
+                    if (event)
+                        deliverDriverEvent(shared, state, live, event, refreshIdleTimeout, knownActiveTools, observerEnabled);
+                }
             }
+            const completionResult = await live.completion.then((value) => ({ ok: true, value }), (error) => ({ ok: false, error }));
+            const completionOutcome = completionResult.ok ? completionResult.value : undefined;
+            // Outcome classification is the terminal publication boundary. A
+            // controlled abort may let the provider run settle before its graceful
+            // cleanup promise does, so prove that shared settlement before publishing
+            // dismissed, failed-for-another-reason, or completed truth.
+            const gracefulResult = shared.gracefulAbort
+                ? await shared.gracefulAbort.then(() => ({ ok: true }), (error) => ({ ok: false, error }))
+                : undefined;
+            if (gracefulResult && !gracefulResult.ok && !transportFailure) {
+                return classifySettlementFailure(shared, state, gracefulResult.error);
+            }
+            if (policyBudgetExceeded || transportFailure) {
+                return classifyFailure(shared, state, completionResult.ok ? undefined : completionResult.error, idleTimedOut, transportFailure, policyBudgetExceeded);
+            }
+            if (state.failEvent) {
+                return failFromFailEvent(shared, state, state.failEvent);
+            }
+            if (!completionResult.ok) {
+                return classifyFailure(shared, state, completionResult.error, idleTimedOut, transportFailure, policyBudgetExceeded);
+            }
+            if (shared.lifecycleAbort.signal.aborted) {
+                return classifyFailure(shared, state, shared.lifecycleAbort.signal.reason, idleTimedOut, transportFailure, policyBudgetExceeded);
+            }
+            if (!state.doneEvent && !completionOutcome) {
+                return failWithError(shared, state, {
+                    code: "SUBAGENT_EXEC_ERROR",
+                    message: `${shared.terms.provider} exec ended before completion`,
+                    timeoutMs: null,
+                    exitCode: null,
+                }, state.finalMessageCandidate);
+            }
+            const finalMessage = state.doneEvent?.finalMessage ??
+                completionOutcome?.finalMessage ??
+                state.finalMessageCandidate ??
+                renderOutcomeCapturedText(state.outputBuffer).trim();
+            const session = state.doneEvent?.session ?? completionOutcome?.session;
+            if (!session) {
+                return failWithError(shared, state, {
+                    code: "SUBAGENT_EXEC_ERROR",
+                    message: `${shared.terms.provider} exec ended without a session handle`,
+                    timeoutMs: null,
+                    exitCode: null,
+                }, finalMessage);
+            }
+            return completeOutcome(shared, state, finalMessage, session);
         }
-        const completionResult = await live.completion.then((value) => ({ ok: true, value }), (error) => ({ ok: false, error }));
-        const completionOutcome = completionResult.ok ? completionResult.value : undefined;
-        // Outcome classification is the terminal publication boundary. A
-        // controlled abort may let the provider run settle before its graceful
-        // cleanup promise does, so prove that shared settlement before publishing
-        // dismissed, failed-for-another-reason, or completed truth.
-        const gracefulResult = shared.gracefulAbort
-            ? await shared.gracefulAbort.then(() => ({ ok: true }), (error) => ({ ok: false, error }))
-            : undefined;
-        if (gracefulResult && !gracefulResult.ok) {
-            return classifySettlementFailure(shared, state, gracefulResult.error);
-        }
-        if (state.failEvent) {
-            return failFromFailEvent(shared, state, state.failEvent);
-        }
-        if (!completionResult.ok) {
-            return classifyFailure(shared, state, completionResult.error, idleTimedOut);
-        }
-        if (shared.lifecycleAbort.signal.aborted) {
-            return classifyFailure(shared, state, shared.lifecycleAbort.signal.reason, idleTimedOut);
-        }
-        if (!state.doneEvent && !completionOutcome) {
-            return failWithError(shared, state, {
-                code: "SUBAGENT_EXEC_ERROR",
-                message: `${shared.terms.provider} exec ended before completion`,
-                timeoutMs: null,
-                exitCode: null,
-            }, state.finalMessageCandidate);
-        }
-        const finalMessage = state.doneEvent?.finalMessage ??
-            completionOutcome?.finalMessage ??
-            state.finalMessageCandidate ??
-            renderOutcomeCapturedText(state.outputBuffer).trim();
-        const session = state.doneEvent?.session ?? completionOutcome?.session;
-        if (!session) {
-            return failWithError(shared, state, {
-                code: "SUBAGENT_EXEC_ERROR",
-                message: `${shared.terms.provider} exec ended without a session handle`,
-                timeoutMs: null,
-                exitCode: null,
-            }, finalMessage);
-        }
-        return completeOutcome(shared, state, finalMessage, session);
-    }
-    catch (error) {
-        if (error instanceof FlowError) {
-            throw error;
+        catch (error) {
+            if (error instanceof FlowError) {
+                throw error;
+            }
+            return classifyFailure(shared, state, error, idleTimedOut, transportFailure, policyBudgetExceeded);
         }
-        return classifyFailure(shared, state, error, idleTimedOut);
+    })();
+    providerSettlement.catch(() => undefined);
+    try {
+        const settled = await Promise.race([
+            providerSettlement.then((outcome) => ({ kind: "provider", outcome })),
+            policyBudget.then(() => ({ kind: "policy-budget" })),
+        ]);
+        return settled.kind === "provider"
+            ? settled.outcome
+            : classifyFailure(shared, state, undefined, idleTimedOut, transportFailure, true);
     }
     finally {
         if (idleTimeout)
             clearTimeout(idleTimeout);
+        if (executionTimeout)
+            clearTimeout(executionTimeout);
         shared.lifecycleAbort.signal.removeEventListener("abort", requestLiveAbort);
         shared.terminal = true;
         resolveForceWaiters(shared, undefined);

package/build/agents/providers/codex-app-server/adapter.js

@@ -13,6 +13,7 @@ function toCodexAppServerEffort(effort) {
 }
 export { codexAppServerSessionSchema } from "./session-schema.js";
 const MINIMUM_CODEX_APP_SERVER_VERSION = { major: 0, minor: 143, patch: 0 };
+const CODEX_APP_SERVER_PROBE_TIMEOUT_MS = 1_000;
 /** Non-interactive defaults for turn/start (faye #316 policy A). */
 export const CODEX_APP_SERVER_TURN_APPROVAL_POLICY = "never";
 export { buildCodexAppServerWorkspaceWriteSandboxPolicy, configOwnsApprovalPolicy, configOwnsSandboxPolicy, } from "./policy.js";
@@ -172,10 +173,41 @@ export async function startCodexAppServer(prompt, cwd, options = {}) {
             void drainPendingTells();
         });
     };
+    const probe = async () => {
+        if (!server || !activeThreadId) {
+            throw createProviderFailure(`${CODEX_APP_SERVER_PROVIDER} session probe has no active thread`, {
+                code: "SUBAGENT_TRANSPORT_ERROR",
+                timeoutMs: CODEX_APP_SERVER_PROBE_TIMEOUT_MS,
+            });
+        }
+        let timer;
+        const deadline = new Promise((_, reject) => {
+            timer = setTimeout(() => reject(new Error("session probe timed out")), CODEX_APP_SERVER_PROBE_TIMEOUT_MS);
+            timer.unref?.();
+        });
+        try {
+            await Promise.race([
+                server.request("thread/read", { threadId: activeThreadId }),
+                deadline,
+            ]);
+        }
+        catch (error) {
+            throw createProviderFailure(`${CODEX_APP_SERVER_PROVIDER} session transport probe failed`, {
+                code: "SUBAGENT_TRANSPORT_ERROR",
+                timeoutMs: CODEX_APP_SERVER_PROBE_TIMEOUT_MS,
+                cause: error,
+            });
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    };
     return createProjectionDriver({
         steerMode: "mid-execution",
         initialTurn: options.initialTurn,
         enqueue,
+        probe,
         onIngress: options.onIngress,
         async abort(mode) {
             interruptRequested = true;

package/build/agents/providers/codex-app-server/events.js

@@ -22,6 +22,11 @@ export function codexAppServerNotificationDisposition(method, params) {
         return "acknowledged-unpersisted";
     if (CODEX_APP_SERVER_NOTIFICATION_MAPPED.has(method))
         return "mapped";
+    if (method === "item/started") {
+        const item = appServerRecord(appServerRecord(params)?.item);
+        if (item && typeof item.type === "string" && isCodexAppServerActivityItemType(item.type))
+            return "mapped";
+    }
     if (method === "account/rateLimits/updated" && codexAppServerRateLimitCause(params))
         return "mapped";
     return "unknown";
@@ -303,6 +308,24 @@ export function createCodexAppServerTurnMonitor(options) {
                             });
                         }
                     }
+                    if (notification.method === "item/started") {
+                        const item = notification.params?.item;
+                        if (!item)
+                            throw new Error(`${CODEX_APP_SERVER_PROVIDER} item/started lacked required item`);
+                        const id = coerceString(item.id);
+                        const itemType = coerceString(item.type);
+                        if (!id || !itemType)
+                            throw new Error(`${CODEX_APP_SERVER_PROVIDER} item/started lacked required item id or type`);
+                        if (isCodexAppServerActivityItemType(itemType)) {
+                            builder.emit({
+                                type: "activity",
+                                phase: "started",
+                                id,
+                                tool: itemType,
+                                call: appServerActivityCall(itemType, item),
+                            });
+                        }
+                    }
                     if (notification.method === "turn/started") {
                         const turn = notification.params?.turn;
                         const turnId = recordActiveTurnId(state, turn?.id, "notification");

package/build/agents/providers/pi/events.js

@@ -142,14 +142,15 @@ function piUsageBody(event) {
     if (message?.role !== "assistant")
         return undefined;
     const usage = message.usage;
-    if (!usage || typeof usage.input !== "number" || typeof usage.output !== "number")
+    if (!usage || typeof usage.input !== "number" || !Number.isFinite(usage.input)
+        || typeof usage.output !== "number" || !Number.isFinite(usage.output))
         return undefined;
     return {
         type: "usage",
         inputTokens: usage.input,
         outputTokens: usage.output,
-        ...(typeof usage.cacheRead === "number" ? { cachedInputTokens: usage.cacheRead } : {}),
-        ...(typeof usage.cost?.total === "number" ? { costUsd: usage.cost.total } : {}),
+        ...(typeof usage.cacheRead === "number" && Number.isFinite(usage.cacheRead) ? { cachedInputTokens: usage.cacheRead } : {}),
+        ...(typeof usage.cost?.total === "number" && Number.isFinite(usage.cost.total) ? { costUsd: usage.cost.total } : {}),
         ...(typeof message.responseModel === "string"
             ? { model: message.responseModel }
             : typeof message.model === "string"

package/build/agents/types.js

@@ -1,5 +1,7 @@
 export const SUBAGENT_FAILURE_CODES = [
     "SUBAGENT_TIMEOUT",
+    "SUBAGENT_TRANSPORT_ERROR",
+    "SUBAGENT_POLICY_BUDGET",
     "SUBAGENT_NON_ZERO_EXIT",
     "SUBAGENT_SPAWN_ERROR",
     "SUBAGENT_EXEC_ERROR",

package/build/cli/commands/akuma/akuma/meta.js

@@ -2,7 +2,7 @@ export const meta = {
     command: "akuma",
     summary: "Inspect Akuma profiles",
     usage: ["keiyaku akuma ls|view"],
-    stdin: "none",
+    stdin: { mode: "argument" },
     flags: [],
     purpose: "Inspect configured helper profiles.",
     subcommands: ["ls", "view"],

package/build/cli/commands/akuma/list/meta-ls.js

@@ -2,7 +2,7 @@ export const meta = {
     command: "akuma ls",
     summary: "List Akuma profiles",
     usage: ["keiyaku akuma ls [-C|--cwd DIR] [--repo DIR]"],
-    stdin: "none",
+    stdin: { mode: "argument" },
     flags: ["cwd", "repo"],
     purpose: "List configured helper profiles.",
     notes: ["Project profiles override user profiles, which override builtins."],

package/build/cli/commands/akuma/view/meta.js

@@ -2,7 +2,7 @@ export const meta = {
     command: "akuma view",
     summary: "View one Akuma profile",
     usage: ["keiyaku akuma view NAME [-C|--cwd DIR] [--repo DIR]"],
-    stdin: "none",
+    stdin: { mode: "argument" },
     flags: ["cwd", "repo"],
     purpose: "Read one configured helper profile and its current nonterminal projections.",
 };

package/build/cli/commands/contract/amend/meta.js

@@ -2,11 +2,11 @@ export const meta = {
     command: "amend",
     summary: "Record an amendment",
     usage: [
-        "keiyaku amend [-C|--cwd DIR] [--repo DIR] [--contract ADDR] < amendment.md",
-        "keiyaku @addr amend [-C|--cwd DIR] [--repo DIR] < amendment.md",
+        "keiyaku amend [-C|--cwd DIR] [--repo DIR] [--contract ADDR] - < amendment.md",
+        "keiyaku @addr amend [-C|--cwd DIR] [--repo DIR] - < amendment.md",
     ],
-    stdin: "required",
+    stdin: { mode: "document", selector: { kind: "positional", index: 0, required: true, rejectBlank: true } },
     flags: ["cwd", "repo", "contract"],
-    purpose: "Append a prose amendment and optional structured scope delta.",
+    purpose: "Append a prose amendment and optional Scope Append gitignore-pattern delta.",
     completionRank: 8,
 };

package/build/cli/commands/contract/arc/handler.js

@@ -4,7 +4,7 @@ import { buildArcResponse } from "../../../render/arc.js";
 import { renderCoreResult } from "../../../render/shared.js";
 import { effectiveDirectory, repositoryDirectory } from "../../shared.js";
 export const handler = async (stdin, flags) => {
-    const parsed = buildArcInput(stdin, effectiveDirectory(flags), flags.waivePaths, flags.contractId, flags.contractAddressSource);
+    const parsed = buildArcInput(stdin, effectiveDirectory(flags), flags.appendScope, flags.contractId, flags.contractAddressSource);
     const cwd = await repositoryDirectory(flags, "arc");
     const address = await resolveExistingContractAddress(cwd, flags.contractId, flags.contractAddressSource, effectiveDirectory(flags));
     return renderCoreResult(arcKeiyaku({

package/build/cli/commands/contract/arc/meta.js

@@ -2,11 +2,11 @@ export const meta = {
     command: "arc",
     summary: "Optional iteration; seals current intent first",
     usage: [
-        "keiyaku arc [-C|--cwd DIR] [--repo DIR] [--contract ADDR] [--waive PATH] < arc.md",
-        "keiyaku @addr arc [-C|--cwd DIR] [--repo DIR] [--waive PATH] < arc.md",
+        "keiyaku arc [-C|--cwd DIR] [--repo DIR] [--contract ADDR] [--append-scope PATTERN] - < arc.md",
+        "keiyaku @addr arc [-C|--cwd DIR] [--repo DIR] [--append-scope PATTERN] - < arc.md",
     ],
-    stdin: "required",
-    flags: ["cwd", "repo", "contract", "waive"],
+    stdin: { mode: "document", selector: { kind: "positional", index: 0, required: true, rejectBlank: true } },
+    flags: ["cwd", "repo", "contract", "append-scope"],
     purpose: "Optional iteration boundary: record the next title, objective, and brief, and seal the current intent first.",
     input: [
         "# <arc title>",

package/build/cli/commands/contract/audit/handler.js

@@ -0,0 +1,16 @@
+import { auditContract } from "../../../../core/audit.js";
+import { resolveContractAddress, withResolvedAddress } from "../../../../core/addressing.js";
+import { buildAuditConstructionFailure, buildAuditResponse } from "../../../render/audit.js";
+import { effectiveDirectory, repositoryDirectory } from "../../shared.js";
+export const handler = async (_stdin, flags) => {
+    try {
+        const cwd = await repositoryDirectory(flags, "audit");
+        const address = await resolveContractAddress(cwd, flags.contractId, flags.contractAddressSource, effectiveDirectory(flags));
+        return await withResolvedAddress(address, async () => {
+            return buildAuditResponse(await auditContract({ cwd, address, diffBudgetBytes: flags.auditDiffBudgetBytes }), flags.json === true);
+        });
+    }
+    catch (error) {
+        return buildAuditConstructionFailure(error, flags.json === true);
+    }
+};

package/build/cli/commands/contract/audit/meta.js

@@ -0,0 +1,16 @@
+export const meta = {
+    command: "audit",
+    summary: "Read settlement facts from one pinned delivery candidate",
+    usage: [
+        "keiyaku audit [-C|--cwd DIR] [--repo DIR] [--contract ADDR] [--diff-budget BYTES] [--json]",
+        "keiyaku @<id> audit [--diff-budget BYTES] [--json]",
+    ],
+    stdin: { mode: "argument" },
+    flags: ["cwd", "repo", "contract", "diff-budget", "json"],
+    purpose: "Inspect one pinned delivery candidate, report settlement facts, and recheck its coordinates without mutating the source repository.",
+    notes: [
+        "Audit never invokes an Akuma or settles the contract.",
+        "Exit 0 means the report was constructed; exit 1 carries a typed construction cause.",
+    ],
+    completionRank: 9,
+};

package/build/cli/commands/contract/bind/meta.js

@@ -2,14 +2,14 @@ export const meta = {
     command: "bind",
     summary: "Create a contract ledger and workspace files",
     usage: [
-        "keiyaku bind [-C|--cwd DIR] [--repo DIR] [--task ID]... <<'KEIYAKU'",
+        "keiyaku bind [-C|--cwd DIR] [--repo DIR] [--task ID]... [- < contract.md]",
         "keiyaku bind [-C|--cwd DIR] [--repo DIR] [--task ID]... --place NAME --objective TEXT --scope GLOB --checks CHECK [--dry-run]",
     ],
-    stdin: "optional",
+    stdin: { mode: "document", selector: { kind: "positional", index: 0, required: false, rejectBlank: false } },
     flags: ["cwd", "repo", "after", "exclusive", "draft-only", "place", "objective", "scope", "checks", "task", "dry-run"],
     // contract is parseable only so the mouth can reject it with bind-specific copy.
     parseFlags: ["cwd", "repo", "contract", "after", "exclusive", "draft-only", "place", "objective", "scope", "checks", "task", "dry-run"],
-    purpose: "Bind a Keiyaku from contract Markdown on stdin.",
+    purpose: "Bind a Keiyaku from contract Markdown selected by literal -.",
     input: [
         "# <name>",
         "",
@@ -17,36 +17,45 @@ export const meta = {
         "<what the commission should accomplish>",
         "",
         "## Scope",
-        "- <pattern>",
+        "```",
+        "<pattern>",
+        "<another-pattern>",
+        "```",
         "",
         "## Checks",
         "- <verification>",
     ],
     notes: [
         "bind creates a contract and does not accept @addr or --contract.",
-        "Primary form is stdin Markdown (full document below).",
-        "With --task, title and body supply name/objective defaults; stdin may send only the missing sections and any present section overrides the task default.",
-        "Domain flags remain available as a full-document alternative; they cannot mix with stdin Markdown.",
+        "Primary document form is literal - followed by Markdown on stdin (full document below).",
+        "With --task, title and body supply name/objective defaults; literal - may send only the missing sections and any present section overrides the task default.",
+        "Domain flags remain available as a full-document alternative; they cannot mix with Markdown selected by literal -.",
     ],
     examples: [
         [
-            "keiyaku bind <<'KEIYAKU'",
+            "keiyaku bind - <<'KEIYAKU'",
             "# <name>",
             "",
             "## Objective",
             "<what the commission should accomplish>",
             "",
             "## Scope",
-            "- <pattern>",
+            "```",
+            "<pattern>",
+            "<another-pattern>",
+            "```",
             "",
             "## Checks",
             "- <verification>",
             "KEIYAKU",
         ].join("\n"),
         [
-            "keiyaku bind --task fix-flaky-pump <<'KEIYAKU'",
+            "keiyaku bind --task fix-flaky-pump - <<'KEIYAKU'",
             "## Scope",
-            "- <pattern>",
+            "```",
+            "<pattern>",
+            "<another-pattern>",
+            "```",
             "",
             "## Checks",
             "- <verification>",

package/build/cli/commands/contract/catalog.js

@@ -2,6 +2,7 @@ import { meta as bindMeta } from "./bind/meta.js";
 import { meta as arcMeta } from "./arc/meta.js";
 import { meta as logMeta } from "./log/meta.js";
 import { meta as amendMeta } from "./amend/meta.js";
+import { meta as auditMeta } from "./audit/meta.js";
 import { meta as renewMeta } from "./renew/meta.js";
 import { meta as petitionMeta } from "./petition/meta.js";
 import { meta as forfeitMeta } from "./forfeit/meta.js";
@@ -10,6 +11,7 @@ export const contractCatalog = [
     { meta: arcMeta, load: () => import("./arc/handler.js") },
     { meta: logMeta, load: () => import("./log/handler.js") },
     { meta: amendMeta, load: () => import("./amend/handler.js") },
+    { meta: auditMeta, load: () => import("./audit/handler.js") },
     { meta: renewMeta, load: () => import("./renew/handler.js") },
     { meta: petitionMeta, load: () => import("./petition/handler.js") },
     { meta: forfeitMeta, load: () => import("./forfeit/handler.js") },