@cello-protocol/daemon 0.0.47 → 0.0.48

package/dist/index.d.ts

@@ -15,4 +15,5 @@ export { RandomizedPollScheduler, ImmediatePollScheduler } from "./manifest-poll
 export { InMemoryManifestVersionStore } from "./manifest-version-store.js";
 export { DbManifestVersionStore } from "./manifest-version-store-db.js";
 export { ManifestDirectoryChallengeVerifier, TestDirectoryChallengeVerifier } from "./challenge-verifier.js";
+export { DUAL_SURFACE_VERBS, MCP_ONLY_TOOLS, NON_TOOL_IDENTIFIERS, DEAD_CLI_VERBS, deadCliVerbPattern, RENAMED_AWAY_TOOLS, knownToolNames, toCliGuidance, renderForSurface, type DualSurfaceVerb, type ClientSurface, } from "./vocabulary.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,MAAM,EACN,eAAe,EACf,UAAU,EACV,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzG,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGpE,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,MAAM,EACN,eAAe,EACf,UAAU,EACV,WAAW,EACX,aAAa,EACb,gBAAgB,EAChB,eAAe,EACf,QAAQ,EACR,UAAU,EACV,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,sBAAsB,EACtB,2BAA2B,GAC5B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzG,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,KAAK,eAAe,EAAE,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGpE,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AAGjC,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAK7G,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -15,4 +15,8 @@ export { RandomizedPollScheduler, ImmediatePollScheduler } from "./manifest-poll
 export { InMemoryManifestVersionStore } from "./manifest-version-store.js";
 export { DbManifestVersionStore } from "./manifest-version-store-db.js";
 export { ManifestDirectoryChallengeVerifier, TestDirectoryChallengeVerifier } from "./challenge-verifier.js";
+// DOD-ONBOARD-HELP-1 §2b — the ONE vocabulary (capability → {cli, mcp}). Exported so the CLI
+// registry and the connect shim's audit test derive their names from the SAME table the daemon
+// renders its guidance from, instead of three lists of literals that drift.
+export { DUAL_SURFACE_VERBS, MCP_ONLY_TOOLS, NON_TOOL_IDENTIFIERS, DEAD_CLI_VERBS, deadCliVerbPattern, RENAMED_AWAY_TOOLS, knownToolNames, toCliGuidance, renderForSurface, } from "./vocabulary.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,UAAU,EAA4D,MAAM,mBAAmB,CAAC;AACzG,OAAO,EAAE,eAAe,EAAoF,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAAE,eAAe,EAAkB,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA0D,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEpE,qFAAqF;AACrF,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AASjC,+DAA+D;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,UAAU,EAA4D,MAAM,mBAAmB,CAAC;AACzG,OAAO,EAAE,eAAe,EAAoF,MAAM,iBAAiB,CAAC;AACpI,OAAO,EAAE,eAAe,EAAkB,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAE,cAAc,EAAsB,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAA0D,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACvH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEpE,qFAAqF;AACrF,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,eAAe,EACf,8BAA8B,EAC9B,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AASjC,+DAA+D;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAC/F,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AACxE,OAAO,EAAE,kCAAkC,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAE7G,6FAA6F;AAC7F,+FAA+F;AAC/F,4EAA4E;AAC5E,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,oBAAoB,EACpB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC"}

package/dist/vocabulary.d.ts

@@ -0,0 +1,122 @@
+/**
+ * DOD-ONBOARD-HELP-1 §2b — the ONE vocabulary.
+ *
+ * A capability has exactly one name, and that name renders differently on each surface:
+ *
+ *     capability "agents"  →  MCP tool `cello_agents`  ·  CLI command `cello agents`
+ *
+ * The rule (Andre, 2026-07-11): **an MCP tool's name is `cello_` + the CLI command name**,
+ * snake_cased, keeping any sub-verb. Humans and agents learn a capability ONCE.
+ *
+ * Why this table exists rather than three lists of string literals:
+ *
+ *  - the CLI registry names its commands,
+ *  - the connect shim names its MCP tools,
+ *  - and the DAEMON names them BACK to you in ~50 error-guidance strings.
+ *
+ * That third one is the trap. The daemon is where a new user actually MEETS these names — a
+ * refused send says "call cello_receive first". Rename the tools without touching the daemon and
+ * every one of those strings points at a tool that no longer exists: an error message that hands
+ * you a wrong instruction is worse than no error message. So the names live HERE, once, and the
+ * daemon RENDERS them for whichever surface is asking (it knows: `clientType` is recorded at
+ * `ipc.connect`). A CLI caller is told `cello use-agent`; an MCP caller is told `cello_use_agent`.
+ *
+ * Enforced by dod-onboard-help-1-vocabulary.test.ts:
+ *  - every entry obeys the `cello_` + command rule (no hand-typed exceptions),
+ *  - every `cello_*` token in a daemon guidance string resolves here (a stale/typo'd name FAILS
+ *    the build rather than shipping a dead instruction),
+ *  - the CLI registry's command names == the CLI names here,
+ *  - the connect shim's tool names == the MCP names here.
+ */
+/** A capability reachable from BOTH surfaces. `mcp` is the tool name; `cli` is the command line. */
+export interface DualSurfaceVerb {
+    mcp: string;
+    cli: string;
+}
+/**
+ * Every capability with BOTH an MCP tool and a CLI command. Guidance naming one of these is
+ * rendered per caller.
+ *
+ * The `cli` string is what an operator would TYPE, so per-contact ops carry the `<pubkey>`
+ * placeholder — the CLI shape is `cello contact <pubkey> set-tier`, not `cello contact-set-tier`.
+ */
+export declare const DUAL_SURFACE_VERBS: readonly DualSurfaceVerb[];
+/**
+ * Tools that exist ONLY on the MCP surface. They are the DOD-CUSTODY-DAEMON-1 stubs — the daemon
+ * handlers return `not_implemented`, so there is deliberately no CLI command to build a second
+ * broken path to. Listed so the audit test can tell "known MCP-only" from "stale name".
+ */
+export declare const MCP_ONLY_TOOLS: readonly string[];
+/**
+ * `cello_*` identifiers that are NOT tools and must never be mistaken for one.
+ *
+ * `cello_message` is the doorbell NOTIFICATION frame type (and the stem of the
+ * `notification.cello_message.dispatch.failed` log event). It is wire vocabulary and log taxonomy,
+ * never a command an operator could run — so the audit must recognise it rather than demand it be
+ * renamed to a tool that would not exist.
+ */
+export declare const NON_TOOL_IDENTIFIERS: readonly string[];
+/** Every `cello_*` token the daemon is ALLOWED to name in guidance. Anything else is a bug. */
+export declare function knownToolNames(): ReadonlySet<string>;
+/**
+ * CLI verbs that NO LONGER EXIST (DOD-ONBOARD-HELP-1 §2, clean renames — no aliases).
+ *
+ * Why this list exists as well as the tool audit: the tool audit matches `cello_*` tokens, so it is
+ * structurally BLIND to a dead *CLI* verb — `cello register` is just prose to it. That blindness is
+ * exactly how three dead-command instructions survived a green build in the first cut of this story
+ * (the missing-token onboarding error, an unregistered-agent warning, and relay-receipts' own usage
+ * line all still said `cello register` / `cello receipts`). A user handed a command that does not
+ * dispatch is worse off than one handed nothing.
+ *
+ * The trailing space matters: it anchors the verb so `cello close-session` does not match
+ * `cello close `, and `cello register-agent` does not match `cello register `.
+ */
+export declare const DEAD_CLI_VERBS: readonly string[];
+/**
+ * Match any dead CLI verb, wherever it is SPOKEN — the one regex both audits share.
+ *
+ * The negative lookahead `(?![-\w])` is what makes this work, and the first cut got it wrong: it
+ * anchored on a trailing SPACE (`"cello register "`), which review broke immediately — a verb
+ * followed by a quote, period, backtick, paren or comma slipped straight through, and a live string
+ * (`'cello register'`, in the Hermes plugin scaffolded onto the operator's disk) was sailing past a
+ * green audit. An audit defeated by a full stop is not an audit.
+ *
+ * The lookahead still lets the LIVE commands through, because each dead verb is a strict prefix of
+ * its replacement: `cello register-agent`, `cello close-session`, `cello initiate-session` all have
+ * a `-` right where the lookahead refuses one.
+ */
+export declare function deadCliVerbPattern(): RegExp;
+/**
+ * MCP tool names this story RENAMED AWAY. Nothing may hand one of these to an agent again.
+ *
+ * Distinct from `knownToolNames()` (an allowlist: "every cello_* token must be in the table"). That
+ * allowlist works inside the daemon, where every `cello_*` token IS a tool name — but it cannot be
+ * used across the CLI package, where `cello_*` tokens are also IPC WIRE method names
+ * (`client.send("cello_list_agents")`, which deliberately do not move) and, in the scaffolded Hermes
+ * assets, plain config identifiers (`cello_socket_path`, `cello_dir`). An allowlist there would
+ * either drown in false positives or be so riddled with exceptions it stopped meaning anything.
+ *
+ * So outside the daemon we assert the DENYLIST instead: whatever else a string says, it must not
+ * name a tool we deleted. That is precisely the regression that shipped — the Hermes `platform_hint`
+ * told the operator's agent to call `cello_check_notifications` and `cello_list_sessions` after both
+ * had ceased to exist.
+ */
+export declare const RENAMED_AWAY_TOOLS: readonly string[];
+export declare function toCliGuidance(text: string): string;
+/** The client surfaces the daemon renders guidance for. Recorded per connection at `ipc.connect`. */
+export type ClientSurface = "cli" | "mcp";
+/**
+ * Render a handler's response for the surface that asked.
+ *
+ * Applied ONCE, at the IPC response boundary (daemon.ts wraps every handler), so a new handler
+ * cannot forget it and a new guidance string cannot drift. MCP callers get the response verbatim —
+ * the source strings already hold the canonical MCP names.
+ *
+ * RECURSES into nested objects and arrays. The first cut only rewrote a TOP-LEVEL `guidance`, which
+ * left real instructions per-surface-wrong: `cello inbox`'s rename notices live at
+ * `agents[i].rename_notices[j].notice` and told a CLI operator to call `cello_contact_set_moniker`
+ * with JSON arguments — a thing they cannot type. A choke point that only covers the easy shape is
+ * not a choke point; it just moves the leak somewhere less visible.
+ */
+export declare function renderForSurface(result: unknown, surface: ClientSurface): unknown;
+//# sourceMappingURL=vocabulary.d.ts.map

package/dist/vocabulary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.d.ts","sourceRoot":"","sources":["../src/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAmCxD,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAI3C,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAAsB,CAAC;AAEzE,+FAA+F;AAC/F,wBAAgB,cAAc,IAAI,WAAW,CAAC,MAAM,CAAC,CAMpD;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAM3C,CAAC;AASF;;;;;;;;;;;;GAYG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAI3C;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAQ/C,CAAC;AAqCF,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED,qGAAqG;AACrG,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,CAAC;AAU1C;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAGjF"}

package/dist/vocabulary.js

@@ -0,0 +1,268 @@
+/**
+ * DOD-ONBOARD-HELP-1 §2b — the ONE vocabulary.
+ *
+ * A capability has exactly one name, and that name renders differently on each surface:
+ *
+ *     capability "agents"  →  MCP tool `cello_agents`  ·  CLI command `cello agents`
+ *
+ * The rule (Andre, 2026-07-11): **an MCP tool's name is `cello_` + the CLI command name**,
+ * snake_cased, keeping any sub-verb. Humans and agents learn a capability ONCE.
+ *
+ * Why this table exists rather than three lists of string literals:
+ *
+ *  - the CLI registry names its commands,
+ *  - the connect shim names its MCP tools,
+ *  - and the DAEMON names them BACK to you in ~50 error-guidance strings.
+ *
+ * That third one is the trap. The daemon is where a new user actually MEETS these names — a
+ * refused send says "call cello_receive first". Rename the tools without touching the daemon and
+ * every one of those strings points at a tool that no longer exists: an error message that hands
+ * you a wrong instruction is worse than no error message. So the names live HERE, once, and the
+ * daemon RENDERS them for whichever surface is asking (it knows: `clientType` is recorded at
+ * `ipc.connect`). A CLI caller is told `cello use-agent`; an MCP caller is told `cello_use_agent`.
+ *
+ * Enforced by dod-onboard-help-1-vocabulary.test.ts:
+ *  - every entry obeys the `cello_` + command rule (no hand-typed exceptions),
+ *  - every `cello_*` token in a daemon guidance string resolves here (a stale/typo'd name FAILS
+ *    the build rather than shipping a dead instruction),
+ *  - the CLI registry's command names == the CLI names here,
+ *  - the connect shim's tool names == the MCP names here.
+ */
+/**
+ * Every capability with BOTH an MCP tool and a CLI command. Guidance naming one of these is
+ * rendered per caller.
+ *
+ * The `cli` string is what an operator would TYPE, so per-contact ops carry the `<pubkey>`
+ * placeholder — the CLI shape is `cello contact <pubkey> set-tier`, not `cello contact-set-tier`.
+ */
+export const DUAL_SURFACE_VERBS = [
+    // Agents
+    { mcp: "cello_agents", cli: "cello agents" },
+    { mcp: "cello_start_agent", cli: "cello start-agent" },
+    { mcp: "cello_stop_agent", cli: "cello stop-agent" },
+    { mcp: "cello_use_agent", cli: "cello use-agent" },
+    { mcp: "cello_status", cli: "cello status" },
+    // Messaging
+    { mcp: "cello_initiate_session", cli: "cello initiate-session" },
+    { mcp: "cello_await_session", cli: "cello await-session" },
+    { mcp: "cello_close_session", cli: "cello close-session" },
+    { mcp: "cello_send", cli: "cello send" },
+    { mcp: "cello_receive", cli: "cello receive" },
+    // `receive_session` is a literal ALIAS of `receive` — the daemon registers the SAME handler
+    // object for both (`handlers.set("cello_receive_session", handleReceive)`). It does not accept
+    // or join anything; inbound sessions are auto-accepted by the standing receiver. Its help said
+    // "Accept / join an inbound session request", which was simply false. Pending Andre's ruling to
+    // DELETE it (no-aliases doctrine); until then it is described for what it actually is.
+    { mcp: "cello_receive_session", cli: "cello receive-session" },
+    { mcp: "cello_inbox", cli: "cello inbox" },
+    // Sessions & receipts
+    { mcp: "cello_sessions", cli: "cello sessions" },
+    { mcp: "cello_transcript", cli: "cello transcript" },
+    { mcp: "cello_sealed_receipt", cli: "cello sealed-receipt" },
+    // Contacts
+    { mcp: "cello_contacts", cli: "cello contacts" },
+    { mcp: "cello_contact_add", cli: "cello contact <pubkey> add" },
+    { mcp: "cello_contact_remove", cli: "cello contact <pubkey> remove" },
+    { mcp: "cello_contact_set_tier", cli: "cello contact <pubkey> set-tier" },
+    { mcp: "cello_contact_set_away", cli: "cello contact <pubkey> set-away" },
+    { mcp: "cello_contact_set_moniker", cli: "cello contact <pubkey> set-moniker" },
+    // Other
+    { mcp: "cello_moniker", cli: "cello moniker" },
+    { mcp: "cello_settings_get", cli: "cello settings get" },
+    { mcp: "cello_settings_set", cli: "cello settings set" },
+];
+/**
+ * Tools that exist ONLY on the MCP surface. They are the DOD-CUSTODY-DAEMON-1 stubs — the daemon
+ * handlers return `not_implemented`, so there is deliberately no CLI command to build a second
+ * broken path to. Listed so the audit test can tell "known MCP-only" from "stale name".
+ */
+export const MCP_ONLY_TOOLS = [
+    "cello_backup",
+    "cello_restore",
+    "cello_get_inclusion_proof",
+];
+/**
+ * `cello_*` identifiers that are NOT tools and must never be mistaken for one.
+ *
+ * `cello_message` is the doorbell NOTIFICATION frame type (and the stem of the
+ * `notification.cello_message.dispatch.failed` log event). It is wire vocabulary and log taxonomy,
+ * never a command an operator could run — so the audit must recognise it rather than demand it be
+ * renamed to a tool that would not exist.
+ */
+export const NON_TOOL_IDENTIFIERS = ["cello_message"];
+/** Every `cello_*` token the daemon is ALLOWED to name in guidance. Anything else is a bug. */
+export function knownToolNames() {
+    return new Set([
+        ...DUAL_SURFACE_VERBS.map((v) => v.mcp),
+        ...MCP_ONLY_TOOLS,
+        ...NON_TOOL_IDENTIFIERS,
+    ]);
+}
+/**
+ * CLI verbs that NO LONGER EXIST (DOD-ONBOARD-HELP-1 §2, clean renames — no aliases).
+ *
+ * Why this list exists as well as the tool audit: the tool audit matches `cello_*` tokens, so it is
+ * structurally BLIND to a dead *CLI* verb — `cello register` is just prose to it. That blindness is
+ * exactly how three dead-command instructions survived a green build in the first cut of this story
+ * (the missing-token onboarding error, an unregistered-agent warning, and relay-receipts' own usage
+ * line all still said `cello register` / `cello receipts`). A user handed a command that does not
+ * dispatch is worse off than one handed nothing.
+ *
+ * The trailing space matters: it anchors the verb so `cello close-session` does not match
+ * `cello close `, and `cello register-agent` does not match `cello register `.
+ */
+export const DEAD_CLI_VERBS = [
+    "cello register",
+    "cello install",
+    "cello receipts",
+    "cello close",
+    "cello initiate",
+];
+/**
+ * The pre-§3 flat contact shape: `cello contact <op> <pubkey>`. The arguments are REVERSED now
+ * (`cello contact <pubkey> <op>`), so these are not merely renamed — following one silently targets
+ * a contact named "add". In the live shape an OP can never follow `contact` directly; a pubkey does.
+ */
+const DEAD_CONTACT_OPS = ["list", "add", "remove", "tier", "away", "set-tier", "set-away", "set-moniker"];
+/**
+ * Match any dead CLI verb, wherever it is SPOKEN — the one regex both audits share.
+ *
+ * The negative lookahead `(?![-\w])` is what makes this work, and the first cut got it wrong: it
+ * anchored on a trailing SPACE (`"cello register "`), which review broke immediately — a verb
+ * followed by a quote, period, backtick, paren or comma slipped straight through, and a live string
+ * (`'cello register'`, in the Hermes plugin scaffolded onto the operator's disk) was sailing past a
+ * green audit. An audit defeated by a full stop is not an audit.
+ *
+ * The lookahead still lets the LIVE commands through, because each dead verb is a strict prefix of
+ * its replacement: `cello register-agent`, `cello close-session`, `cello initiate-session` all have
+ * a `-` right where the lookahead refuses one.
+ */
+export function deadCliVerbPattern() {
+    const verbs = DEAD_CLI_VERBS.map((v) => v.replace(/^cello /, "")).join("|");
+    const ops = DEAD_CONTACT_OPS.join("|");
+    return new RegExp(`cello\\s+(?:${verbs})(?![-\\w])|cello\\s+contact\\s+(?:${ops})(?![-\\w])`, "g");
+}
+/**
+ * MCP tool names this story RENAMED AWAY. Nothing may hand one of these to an agent again.
+ *
+ * Distinct from `knownToolNames()` (an allowlist: "every cello_* token must be in the table"). That
+ * allowlist works inside the daemon, where every `cello_*` token IS a tool name — but it cannot be
+ * used across the CLI package, where `cello_*` tokens are also IPC WIRE method names
+ * (`client.send("cello_list_agents")`, which deliberately do not move) and, in the scaffolded Hermes
+ * assets, plain config identifiers (`cello_socket_path`, `cello_dir`). An allowlist there would
+ * either drown in false positives or be so riddled with exceptions it stopped meaning anything.
+ *
+ * So outside the daemon we assert the DENYLIST instead: whatever else a string says, it must not
+ * name a tool we deleted. That is precisely the regression that shipped — the Hermes `platform_hint`
+ * told the operator's agent to call `cello_check_notifications` and `cello_list_sessions` after both
+ * had ceased to exist.
+ */
+export const RENAMED_AWAY_TOOLS = [
+    "cello_list_agents",
+    "cello_list_sessions",
+    "cello_check_notifications",
+    "cello_get_transcript",
+    "cello_get_sealed_receipt",
+    "cello_set_moniker",
+    "cello_contact_list",
+];
+/** Longest-first, so `cello_contact_set_moniker` is matched before a hypothetical `cello_contact`. */
+const CLI_BY_MCP = [...DUAL_SURFACE_VERBS].sort((a, b) => b.mcp.length - a.mcp.length);
+/**
+ * Rewrite MCP tool names in a guidance string into the CLI verbs an operator would type.
+ *
+ * Only `cello_*` tokens in DUAL_SURFACE_VERBS are rewritten. An MCP-only tool has no CLI verb to
+ * offer, so it is left alone — inventing one would send the operator to a command that does not
+ * exist, which is the exact failure this whole mechanism prevents.
+ */
+/**
+ * Instructions that carry ARGUMENTS, not just a name — rewritten whole, before the token pass.
+ *
+ * Renaming the tool is not enough when the instruction is a CALL. `cello inbox`'s rename notice ends
+ * with a literal, copy-pasteable invocation:
+ *
+ *     Adopt it: cello_contact_set_moniker { pubkey: "abcd…", moniker: "Zoe" }, or ignore.
+ *
+ * Rewriting only the token gave a CLI operator `cello contact <pubkey> set-moniker { pubkey: "abcd…",
+ * moniker: "Zoe" }` — the tool's name with the tool's JSON still bolted on, and a literal `<pubkey>`
+ * placeholder next to the real key. It looks like a command and is not one; pasting it now trips the
+ * invalid_pubkey gate. Half a translation is its own kind of wrong answer.
+ *
+ * So the call form is translated as a unit, arguments and all, and the result is a line the operator
+ * can actually paste. Run BEFORE the token pass, which would otherwise have already eaten the name.
+ */
+const CALL_FORMS = [
+    {
+        re: /cello_contact_set_moniker\s*\{\s*pubkey:\s*"([^"]*)",\s*moniker:\s*"([^"]*)"\s*\}/g,
+        cli: (m) => `cello contact ${m[1]} set-moniker "${m[2]}"`,
+    },
+];
+export function toCliGuidance(text) {
+    let out = text;
+    for (const { re, cli } of CALL_FORMS) {
+        out = out.replace(new RegExp(re.source, re.flags), (...args) => cli(args));
+    }
+    for (const { mcp, cli } of CLI_BY_MCP) {
+        // Word-boundary on the tail: `cello_agents` must not match inside `cello_agents_foo`.
+        out = out.replace(new RegExp(`${mcp}(?![a-z_])`, "g"), cli);
+    }
+    return out;
+}
+/**
+ * The response keys that carry an INSTRUCTION TO A HUMAN — the ones that name a command to run.
+ *
+ * `reason` is deliberately absent and must stay absent: it is a machine-readable code that scripts
+ * branch on (`reason === "session_not_current"`). Rewriting it would silently break every caller.
+ */
+const INSTRUCTION_KEYS = new Set(["guidance", "warning_guidance", "notice"]);
+/**
+ * Render a handler's response for the surface that asked.
+ *
+ * Applied ONCE, at the IPC response boundary (daemon.ts wraps every handler), so a new handler
+ * cannot forget it and a new guidance string cannot drift. MCP callers get the response verbatim —
+ * the source strings already hold the canonical MCP names.
+ *
+ * RECURSES into nested objects and arrays. The first cut only rewrote a TOP-LEVEL `guidance`, which
+ * left real instructions per-surface-wrong: `cello inbox`'s rename notices live at
+ * `agents[i].rename_notices[j].notice` and told a CLI operator to call `cello_contact_set_moniker`
+ * with JSON arguments — a thing they cannot type. A choke point that only covers the easy shape is
+ * not a choke point; it just moves the leak somewhere less visible.
+ */
+export function renderForSurface(result, surface) {
+    if (surface === "mcp")
+        return result;
+    return renderCli(result);
+}
+function renderCli(value) {
+    if (Array.isArray(value)) {
+        let changed = false;
+        const out = value.map((v) => {
+            const r = renderCli(v);
+            if (r !== v)
+                changed = true;
+            return r;
+        });
+        return changed ? out : value;
+    }
+    if (value === null || typeof value !== "object")
+        return value;
+    const record = value;
+    let changed = false;
+    const out = {};
+    for (const [key, v] of Object.entries(record)) {
+        let next = v;
+        if (INSTRUCTION_KEYS.has(key) && typeof v === "string") {
+            next = toCliGuidance(v);
+        }
+        else if (v !== null && typeof v === "object") {
+            next = renderCli(v);
+        }
+        if (next !== v)
+            changed = true;
+        out[key] = next;
+    }
+    // Identity-preserving when nothing changed — the MCP path and untouched CLI payloads keep the
+    // exact object the handler returned, so nothing downstream can depend on an incidental copy.
+    return changed ? out : value;
+}
+//# sourceMappingURL=vocabulary.js.map

package/dist/vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vocabulary.js","sourceRoot":"","sources":["../src/vocabulary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAQH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,SAAS;IACT,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE;IAC5C,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,mBAAmB,EAAE;IACtD,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,kBAAkB,EAAE;IACpD,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,iBAAiB,EAAE;IAClD,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE;IAC5C,YAAY;IACZ,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,wBAAwB,EAAE;IAChE,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC1D,EAAE,GAAG,EAAE,qBAAqB,EAAE,GAAG,EAAE,qBAAqB,EAAE;IAC1D,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE;IACxC,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE;IAC9C,4FAA4F;IAC5F,+FAA+F;IAC/F,+FAA+F;IAC/F,gGAAgG;IAChG,uFAAuF;IACvF,EAAE,GAAG,EAAE,uBAAuB,EAAE,GAAG,EAAE,uBAAuB,EAAE;IAC9D,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,aAAa,EAAE;IAC1C,sBAAsB;IACtB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,EAAE;IAChD,EAAE,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,kBAAkB,EAAE;IACpD,EAAE,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,sBAAsB,EAAE;IAC5D,WAAW;IACX,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,EAAE;IAChD,EAAE,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,4BAA4B,EAAE;IAC/D,EAAE,GAAG,EAAE,sBAAsB,EAAE,GAAG,EAAE,+BAA+B,EAAE;IACrE,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,iCAAiC,EAAE;IACzE,EAAE,GAAG,EAAE,wBAAwB,EAAE,GAAG,EAAE,iCAAiC,EAAE;IACzE,EAAE,GAAG,EAAE,2BAA2B,EAAE,GAAG,EAAE,oCAAoC,EAAE;IAC/E,QAAQ;IACR,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,eAAe,EAAE;IAC9C,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,oBAAoB,EAAE;IACxD,EAAE,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE,oBAAoB,EAAE;CACzD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,cAAc;IACd,eAAe;IACf,2BAA2B;CAC5B,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB,CAAC,eAAe,CAAC,CAAC;AAEzE,+FAA+F;AAC/F,MAAM,UAAU,cAAc;IAC5B,OAAO,IAAI,GAAG,CAAC;QACb,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QACvC,GAAG,cAAc;QACjB,GAAG,oBAAoB;KACxB,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,gBAAgB;IAChB,eAAe;IACf,gBAAgB;IAChB,aAAa;IACb,gBAAgB;CACjB,CAAC;AAEF;;;;GAIG;AACH,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;AAE1G;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,IAAI,MAAM,CAAC,eAAe,KAAK,sCAAsC,GAAG,aAAa,EAAE,GAAG,CAAC,CAAC;AACrG,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,mBAAmB;IACnB,qBAAqB;IACrB,2BAA2B;IAC3B,sBAAsB;IACtB,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;CACrB,CAAC;AAEF,sGAAsG;AACtG,MAAM,UAAU,GAAmC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAC7E,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CACtC,CAAC;AAEF;;;;;;GAMG;AACH;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,GAAuE;IACrF;QACE,EAAE,EAAE,oFAAoF;QACxF,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,GAAG;KAC1D;CACF,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;QACrC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAkC,CAAC,CAAC,CAAC;IAC3G,CAAC;IACD,KAAK,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;QACtC,sFAAsF;QACtF,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,YAAY,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAKD;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE7E;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAe,EAAE,OAAsB;IACtE,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1B,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,KAAK,CAAC;gBAAE,OAAO,GAAG,IAAI,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAY,CAAC,CAAC;QACtB,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/C,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC;QAC/B,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAClB,CAAC;IACD,8FAA8F;IAC9F,6FAA6F;IAC7F,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC/B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cello-protocol/daemon",
-  "version": "0.0.47",
+  "version": "0.0.48",
   "private": false,
   "type": "module",
   "engines": {
@@ -30,9 +30,9 @@
     "@signalapp/sqlcipher": "^3.3.5",
     "cbor-x": "^1.6.0",
     "it-length-prefixed": "^10.0.1",
-    "@cello-protocol/crypto": "0.0.18",
-    "@cello-protocol/gateway": "0.0.1",
     "@cello-protocol/protocol-types": "0.0.19",
+    "@cello-protocol/gateway": "0.0.1",
+    "@cello-protocol/crypto": "0.0.18",
     "@cello-protocol/transport": "0.0.17"
   },
   "devDependencies": {