@cleocode/cant 2026.4.125 → 2026.4.126

package/dist/index.d.ts

@@ -12,8 +12,8 @@ export type { ConsolidateOptions, MentalModel, MentalModelObservation, MentalMod
 export { consolidate, createEmptyModel, harvestObservations, renderMentalModel, } from './mental-model.js';
 export type { ConvertedFile, MigrationOptions, MigrationResult, UnconvertedSection, } from './migrate/index';
 export { migrateMarkdown, serializeCantDocument, showDiff, showSummary } from './migrate/index';
-export type { AgentProfile, CleocodeDogfoodPersonaId, NativeDiagnostic, NativeParseDocumentResult, NativeParseError, NativeParseResult, NativePipelineResult, NativePipelineStep, NativeValidateResult, SeedPersonaId, } from './native-loader';
-export { CLEOCODE_DOGFOOD_PERSONAS, cantClassifyDirectiveNative, cantExecutePipelineNative, cantExtractAgentProfilesNative, cantParseDocumentNative, cantParseNative, cantValidateDocumentNative, extractAgentProfilesTyped, extractAgentSkills, initWasm, isNativeAvailable, isWasmAvailable, loadSeedAgentIdentities, SEED_PERSONA_IDS, validateAgentCantPath, } from './native-loader';
+export type { AgentProfile, NativeDiagnostic, NativeParseDocumentResult, NativeParseError, NativeParseResult, NativePipelineResult, NativePipelineStep, NativeValidateResult, SeedPersonaId, } from './native-loader';
+export { cantClassifyDirectiveNative, cantExecutePipelineNative, cantExtractAgentProfilesNative, cantParseDocumentNative, cantParseNative, cantValidateDocumentNative, extractAgentProfilesTyped, extractAgentSkills, initWasm, isNativeAvailable, isWasmAvailable, loadSeedAgentIdentities, SEED_PERSONA_IDS, validateAgentCantPath, } from './native-loader';
 export type { ParsedCANTMessage } from './parse';
 export { initCantParser, parseCANTMessage } from './parse';
 export type { CantAgentV3, CantContextSourceDef, CantContractBlock, CantContractClause, CantMentalModelRef, CantOverflowStrategy, CantPathPermissions, CantTier, DirectiveType, } from './types';

package/dist/index.js

@@ -2,7 +2,7 @@
 // JIT Agent Composer (ULTRAPLAN Wave 5)
 // Wave 7a: BRAIN-backed ContextProvider (T432)
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveWorktreeRoot = exports.mergeWorktree = exports.listWorktrees = exports.createWorktree = exports.isCantAgentV3 = exports.parseCANTMessage = exports.initCantParser = exports.validateAgentCantPath = exports.SEED_PERSONA_IDS = exports.loadSeedAgentIdentities = exports.isWasmAvailable = exports.isNativeAvailable = exports.initWasm = exports.extractAgentSkills = exports.extractAgentProfilesTyped = exports.cantValidateDocumentNative = exports.cantParseNative = exports.cantParseDocumentNative = exports.cantExtractAgentProfilesNative = exports.cantExecutePipelineNative = exports.cantClassifyDirectiveNative = exports.CLEOCODE_DOGFOOD_PERSONAS = exports.showSummary = exports.showDiff = exports.serializeCantDocument = exports.migrateMarkdown = exports.renderMentalModel = exports.harvestObservations = exports.createEmptyModel = exports.consolidate = exports.WORKER_FORBIDDEN_SPAWN_TOOLS = exports.validateSpawnRequest = exports.THIN_AGENT_TOOLS_STRIPPED = exports.stripSpawnToolsForWorker = exports.ORCHESTRATOR_FORBIDDEN_TOOLS = exports.LEAD_FORBIDDEN_TOOLS = exports.filterToolsForRole = exports.validateDocument = exports.parseDocument = exports.listSections = exports.executePipeline = exports.brainContextProvider = exports.TIER_CAPS = exports.estimateTokens = exports.escalateTier = exports.composeSpawnPayload = exports.toCantAgentV3 = exports.compileBundle = void 0;
+exports.resolveWorktreeRoot = exports.mergeWorktree = exports.listWorktrees = exports.createWorktree = exports.isCantAgentV3 = exports.parseCANTMessage = exports.initCantParser = exports.validateAgentCantPath = exports.SEED_PERSONA_IDS = exports.loadSeedAgentIdentities = exports.isWasmAvailable = exports.isNativeAvailable = exports.initWasm = exports.extractAgentSkills = exports.extractAgentProfilesTyped = exports.cantValidateDocumentNative = exports.cantParseNative = exports.cantParseDocumentNative = exports.cantExtractAgentProfilesNative = exports.cantExecutePipelineNative = exports.cantClassifyDirectiveNative = exports.showSummary = exports.showDiff = exports.serializeCantDocument = exports.migrateMarkdown = exports.renderMentalModel = exports.harvestObservations = exports.createEmptyModel = exports.consolidate = exports.WORKER_FORBIDDEN_SPAWN_TOOLS = exports.validateSpawnRequest = exports.THIN_AGENT_TOOLS_STRIPPED = exports.stripSpawnToolsForWorker = exports.ORCHESTRATOR_FORBIDDEN_TOOLS = exports.LEAD_FORBIDDEN_TOOLS = exports.filterToolsForRole = exports.validateDocument = exports.parseDocument = exports.listSections = exports.executePipeline = exports.brainContextProvider = exports.TIER_CAPS = exports.estimateTokens = exports.escalateTier = exports.composeSpawnPayload = exports.toCantAgentV3 = exports.compileBundle = void 0;
 // Bundle compiler
 var bundle_1 = require("./bundle");
 Object.defineProperty(exports, "compileBundle", { enumerable: true, get: function () { return bundle_1.compileBundle; } });
@@ -43,8 +43,6 @@ Object.defineProperty(exports, "showDiff", { enumerable: true, get: function ()
 Object.defineProperty(exports, "showSummary", { enumerable: true, get: function () { return index_1.showSummary; } });
 // Native loader (replaces wasm-loader)
 var native_loader_1 = require("./native-loader");
-// T1257 — CLEO dogfood personas (classifier output; NOT shipped)
-Object.defineProperty(exports, "CLEOCODE_DOGFOOD_PERSONAS", { enumerable: true, get: function () { return native_loader_1.CLEOCODE_DOGFOOD_PERSONAS; } });
 Object.defineProperty(exports, "cantClassifyDirectiveNative", { enumerable: true, get: function () { return native_loader_1.cantClassifyDirectiveNative; } });
 Object.defineProperty(exports, "cantExecutePipelineNative", { enumerable: true, get: function () { return native_loader_1.cantExecutePipelineNative; } });
 Object.defineProperty(exports, "cantExtractAgentProfilesNative", { enumerable: true, get: function () { return native_loader_1.cantExtractAgentProfilesNative; } });

package/dist/native-loader.d.ts

@@ -239,50 +239,25 @@ export declare function cantExecutePipelineNative(filePath: string, pipelineName
  * surface (plus `meta/agent-architect.cant`, the meta-agent, which the loader
  * does not currently walk — tracked as follow-up for a loader extension).
  *
- * Note: filenames under `seed-agents/` carry a `-generic` suffix
- * (`orchestrator-generic.cant` etc.), but the agent IDs DECLARED inside each
- * template (via `agent <name>:`) are `project-*`. This list reflects the
+ * Note: filenames under `seed-agents/` use canonical role names
+ * (`orchestrator.cant`, `dev-lead.cant`, etc. — T1258 E1 clean-forward),
+ * and the agent IDs DECLARED inside each template (via `agent <name>:`) are
+ * `project-*`. This list reflects the
  * declared agent IDs the loader surfaces, not the filename stems.
  *
- * Declaration order: universal base first, then the four generic role
- * templates. Used by the regression test and as documentation of the expected
- * registry contents. Any persona on this list MUST be resolvable from the
- * canonical seed-agents path (either `cleo-subagent.cant` at package root or
- * `seed-agents/<filename>.cant`).
+ * Declaration order: universal base first, then the five canonical role
+ * templates (T1258 E1: orchestrator, dev-lead, code-worker, docs-worker,
+ * security-worker). Used by the regression test and as documentation of the
+ * expected registry contents. Any persona on this list MUST be resolvable
+ * from the canonical seed-agents path (either `cleo-subagent.cant` at package
+ * root or `seed-agents/<filename>.cant`).
  *
  * @task T1257
- * @see {@link CLEOCODE_DOGFOOD_PERSONAS} for classifier-produced IDs that live
- *      in this repo's `.cleo/cant/agents/` and are NOT shipped.
+ * @task T1258 E1 canonical naming refactor — security-worker added
  */
-export declare const SEED_PERSONA_IDS: readonly ["cleo-subagent", "project-orchestrator", "project-dev-lead", "project-code-worker", "project-docs-worker"];
+export declare const SEED_PERSONA_IDS: readonly ["cleo-subagent", "project-orchestrator", "project-dev-lead", "project-code-worker", "project-docs-worker", "project-security-worker"];
 /** Type-safe union of the ship-surface persona IDs. */
 export type SeedPersonaId = (typeof SEED_PERSONA_IDS)[number];
-/**
- * Classifier-produced CLEO dogfood persona IDs that live in this repo's
- * project-tier `.cleo/cant/agents/` directory and are NOT shipped in the
- * `@cleocode/agents` package (per ADR-055 D031).
- *
- * The T891 classifier in `packages/core/src/orchestration/classify.ts` can
- * emit any of these IDs for a task. Per ADR-055 D035, resolution flows
- * through the 5-tier resolver: when no project/global/packaged row exists
- * and no filesystem fallback is found, the `universal` tier synthesises an
- * envelope from `cleo-subagent.cant` so the orchestrator never hits
- * `E_AGENT_NOT_FOUND`.
- *
- * Exported so the regression test in `seed-persona-registry.test.ts` can
- * verify every classifier output remains routable — either because the
- * dogfood `.cant` file is present in `.cleo/cant/agents/` or because the
- * universal-tier fallback catches it.
- *
- * `cleoos-opus-orchestrator` is also present as a `DEPRECATED_ALIASES` entry
- * in `packages/core/src/store/agent-resolver.ts` (remaps to `cleo-prime`) for
- * backward compatibility with stale session records.
- *
- * @task T1257
- */
-export declare const CLEOCODE_DOGFOOD_PERSONAS: readonly ["cleo-prime", "cleo-dev", "cleo-rust-lead", "cleo-db-lead", "cleo-historian", "cleoos-opus-orchestrator"];
-/** Type-safe union of the CLEO dogfood persona IDs produced by the classifier. */
-export type CleocodeDogfoodPersonaId = (typeof CLEOCODE_DOGFOOD_PERSONAS)[number];
 /**
  * Load all seed-agent {@link PeerIdentity} records from the canonical
  * `packages/agents/` directory shipped with `@cleocode/agents`.

package/dist/native-loader.js

@@ -12,7 +12,7 @@
  * `packages/lafs/src/native-loader.ts`.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.initWasm = exports.isWasmAvailable = exports.CLEOCODE_DOGFOOD_PERSONAS = exports.SEED_PERSONA_IDS = void 0;
+exports.initWasm = exports.isWasmAvailable = exports.SEED_PERSONA_IDS = void 0;
 exports.isNativeAvailable = isNativeAvailable;
 exports.cantParseNative = cantParseNative;
 exports.cantClassifyDirectiveNative = cantClassifyDirectiveNative;
@@ -241,20 +241,21 @@ function cantExecutePipelineNative(filePath, pipelineName) {
  * surface (plus `meta/agent-architect.cant`, the meta-agent, which the loader
  * does not currently walk — tracked as follow-up for a loader extension).
  *
- * Note: filenames under `seed-agents/` carry a `-generic` suffix
- * (`orchestrator-generic.cant` etc.), but the agent IDs DECLARED inside each
- * template (via `agent <name>:`) are `project-*`. This list reflects the
+ * Note: filenames under `seed-agents/` use canonical role names
+ * (`orchestrator.cant`, `dev-lead.cant`, etc. — T1258 E1 clean-forward),
+ * and the agent IDs DECLARED inside each template (via `agent <name>:`) are
+ * `project-*`. This list reflects the
  * declared agent IDs the loader surfaces, not the filename stems.
  *
- * Declaration order: universal base first, then the four generic role
- * templates. Used by the regression test and as documentation of the expected
- * registry contents. Any persona on this list MUST be resolvable from the
- * canonical seed-agents path (either `cleo-subagent.cant` at package root or
- * `seed-agents/<filename>.cant`).
+ * Declaration order: universal base first, then the five canonical role
+ * templates (T1258 E1: orchestrator, dev-lead, code-worker, docs-worker,
+ * security-worker). Used by the regression test and as documentation of the
+ * expected registry contents. Any persona on this list MUST be resolvable
+ * from the canonical seed-agents path (either `cleo-subagent.cant` at package
+ * root or `seed-agents/<filename>.cant`).
  *
  * @task T1257
- * @see {@link CLEOCODE_DOGFOOD_PERSONAS} for classifier-produced IDs that live
- *      in this repo's `.cleo/cant/agents/` and are NOT shipped.
+ * @task T1258 E1 canonical naming refactor — security-worker added
  */
 exports.SEED_PERSONA_IDS = [
     'cleo-subagent',
@@ -262,37 +263,7 @@ exports.SEED_PERSONA_IDS = [
     'project-dev-lead',
     'project-code-worker',
     'project-docs-worker',
-];
-/**
- * Classifier-produced CLEO dogfood persona IDs that live in this repo's
- * project-tier `.cleo/cant/agents/` directory and are NOT shipped in the
- * `@cleocode/agents` package (per ADR-055 D031).
- *
- * The T891 classifier in `packages/core/src/orchestration/classify.ts` can
- * emit any of these IDs for a task. Per ADR-055 D035, resolution flows
- * through the 5-tier resolver: when no project/global/packaged row exists
- * and no filesystem fallback is found, the `universal` tier synthesises an
- * envelope from `cleo-subagent.cant` so the orchestrator never hits
- * `E_AGENT_NOT_FOUND`.
- *
- * Exported so the regression test in `seed-persona-registry.test.ts` can
- * verify every classifier output remains routable — either because the
- * dogfood `.cant` file is present in `.cleo/cant/agents/` or because the
- * universal-tier fallback catches it.
- *
- * `cleoos-opus-orchestrator` is also present as a `DEPRECATED_ALIASES` entry
- * in `packages/core/src/store/agent-resolver.ts` (remaps to `cleo-prime`) for
- * backward compatibility with stale session records.
- *
- * @task T1257
- */
-exports.CLEOCODE_DOGFOOD_PERSONAS = [
-    'cleo-prime',
-    'cleo-dev',
-    'cleo-rust-lead',
-    'cleo-db-lead',
-    'cleo-historian',
-    'cleoos-opus-orchestrator',
+    'project-security-worker',
 ];
 /**
  * Discover the `packages/agents/` root by walking up from the compiled

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cleocode/cant",
-  "version": "2026.4.125",
+  "version": "2026.4.126",
   "description": "CANT protocol parser and runtime for CLEO — wraps cant-core via napi-rs",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -9,9 +9,9 @@
     "napi/"
   ],
   "dependencies": {
-    "@cleocode/core": "2026.4.125",
-    "@cleocode/lafs": "2026.4.125",
-    "@cleocode/contracts": "2026.4.125"
+    "@cleocode/contracts": "2026.4.126",
+    "@cleocode/lafs": "2026.4.126",
+    "@cleocode/core": "2026.4.126"
   },
   "devDependencies": {
     "typescript": "^6.0.2",