@deftai/directive-runtime 0.126.0-beta.3 → 0.128.0

package/dist/render-cli/capability-map-cli.d.ts

@@ -0,0 +1,3 @@
+/** Thin dispatch wrapper for `capability-map` (#5841); mirrors rule-map-cli. */
+export declare function runCapabilityMapCli(argv: readonly string[]): number;
+//# sourceMappingURL=capability-map-cli.d.ts.map

package/dist/render-cli/capability-map-cli.js

@@ -0,0 +1,6 @@
+import { capabilityMapMain } from "../../vendor/directive-core/dist/docs/capability-map.js";
+/** Thin dispatch wrapper for `capability-map` (#5841); mirrors rule-map-cli. */
+export function runCapabilityMapCli(argv) {
+    return capabilityMapMain(argv);
+}
+//# sourceMappingURL=capability-map-cli.js.map

package/dist/setup-wiring.d.ts

@@ -1,3 +1,7 @@
+/**
+ * Package-relative wiring writers for Contract 1 setup (Wave 2c / R9 / AC13.1).
+ * All managed pointers target node_modules/@deftai/directive-runtime/ — never .deft/core.
+ */
 import { type HostHooksPolicy } from "@deftai/directive-core/dist/policy/host-hooks.js";
 export declare const RUNTIME_PREFIX = "node_modules/@deftai/directive-runtime/";
 export declare const HOOK_BIN_COMMAND = "node node_modules/@deftai/directive-runtime/dist/hook-bin.js";
@@ -76,6 +80,8 @@ export declare function ensureHostHooks(projectRoot: string, hostHooksPolicy?: H
     created: string[];
     modified: string[];
 };
+/** Monotonic refuse-to-downgrade marker for marker-aware ensureGitHooks (#5804). */
+export declare const PRE_PUSH_BOUND_PRE_PR_MARKER = "deft:pre-pr-bound-push-v1";
 /** AC8.6 / AC2.5 / F-008 — disclosed when hooks files exist but core.hooksPath cannot activate. */
 export declare const GIT_HOOKS_INACTIVE_NO_GIT = "Git hooks inactive until git init + eligible repair/self-complete (core.hooksPath not set)";
 export declare function ensureGitHooks(projectRoot: string): {

package/dist/setup-wiring.js

@@ -2,9 +2,9 @@
  * Package-relative wiring writers for Contract 1 setup (Wave 2c / R9 / AC13.1).
  * All managed pointers target node_modules/@deftai/directive-runtime/ — never .deft/core.
  */
+import { execFileSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
-import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { containedChmod, containedRemove, containedWrite, } from "../vendor/directive-core/dist/fs/contained-write.js";
 import { DIRECT_WRITE_HOOK_MATCHER, KILL_HOOK_MATCHER, MCP_HOOK_MATCHER, SHELL_HOOK_MATCHER, SPAWN_HOOK_MATCHER, } from "../vendor/directive-core/dist/hooks/tools.js";
@@ -555,7 +555,9 @@ function mergeNestedHost(existing, host, options) {
 }
 function mergeCursorHost(existing) {
     const hooks = object(existing.hooks) ?? {};
-    const keep = (key) => Array.isArray(hooks[key]) ? hooks[key].filter((e) => !cursorManagedEntry(e)) : [];
+    const keep = (key) => Array.isArray(hooks[key])
+        ? hooks[key].filter((e) => !cursorManagedEntry(e))
+        : [];
     return {
         ...existing,
         version: 1,
@@ -703,11 +705,16 @@ REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || exit 1
 run_directive verify:encoding --staged --project-root "$REPO_ROOT" || exit $?
 `;
 const PRE_PUSH = `#!/usr/bin/env sh
+# deft:pre-pr-bound-push-v1 — refuse-to-downgrade marker (#5804); marker-aware ensureGitHooks only
 REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || exit 1
 # shellcheck source=/dev/null
 . "$REPO_ROOT/.githooks/_directive-run.sh"
 run_directive verify:branch --project-root "$REPO_ROOT" || exit $?
+# Enrolled bound pre-PR arm: sole-stdin (do not redirect shared run_directive to /dev/null)
+run_directive pre-pr:run --push-admit --project-root "$REPO_ROOT" || exit $?
 `;
+/** Monotonic refuse-to-downgrade marker for marker-aware ensureGitHooks (#5804). */
+export const PRE_PUSH_BOUND_PRE_PR_MARKER = "deft:pre-pr-bound-push-v1";
 /**
  * Current OVPR helpers plus supported latest-legacy Directive git hooks
  * (`_deft-run.sh` / `run_deft` / copied-core era). True third-party hooks
@@ -749,6 +756,15 @@ export function ensureGitHooks(projectRoot) {
             conflicts.push(`${file.rel}: existing hook is not Directive-managed; refusing to overwrite (chain or remove manually)`);
             continue;
         }
+        // Refuse-to-downgrade: marker-aware installer will not replace a newer enrolled
+        // pre-push arm with an older body that lacks the monotonic marker (#5804).
+        if (file.rel === ".githooks/pre-push" &&
+            prior !== null &&
+            prior.includes(PRE_PUSH_BOUND_PRE_PR_MARKER) &&
+            !next.includes(PRE_PUSH_BOUND_PRE_PR_MARKER)) {
+            conflicts.push(`${file.rel}: refuse-to-downgrade enrolled bound pre-PR arm (${PRE_PUSH_BOUND_PRE_PR_MARKER}); keeping newer hook`);
+            continue;
+        }
         const change = trackChange(projectRoot, file.rel, next);
         if (change.created)
             created.push(file.rel);
@@ -820,8 +836,7 @@ export function ensureGitHooks(projectRoot) {
                 hooksPathActive = true;
             }
             catch {
-                inactiveDisclosure =
-                    "Git hooks inactive: could not set core.hooksPath=.githooks";
+                inactiveDisclosure = "Git hooks inactive: could not set core.hooksPath=.githooks";
             }
         }
         else if (current === ".githooks" || current === ".githooks/") {
@@ -842,9 +857,7 @@ includes:
     ${RUNTIME_TASKFILE_INCLUDE}
     optional: true
 `;
-const DEFT_INCLUDE_BLOCK = `  deft:\n` +
-    `    taskfile: ./${RUNTIME_PREFIX}Taskfile.yml\n` +
-    `    optional: true\n`;
+const DEFT_INCLUDE_BLOCK = `  deft:\n` + `    taskfile: ./${RUNTIME_PREFIX}Taskfile.yml\n` + `    optional: true\n`;
 /**
  * Merge the Directive `deft:` include into an existing Taskfile without
  * duplicating top-level `includes:` keys or an occupied `deft` child.

package/dist/setup.js

@@ -10,10 +10,10 @@ import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { ContainedWriteError, containedRemove, containedWrite, } from "../vendor/directive-core/dist/fs/contained-write.js";
 import { buildOwnershipRecord, fingerprintContent, ownershipRecordsEqual, readEvidenceGenerationNumber, readOwnershipRecord, writeOwnershipRecord, } from "../vendor/directive-core/dist/install-health/index.js";
-import { CURRENT_DATA_SCHEMA_VERSION, DATA_SCHEMA_MARKER_REL, } from "./migrate.js";
-import { isConvertStrategyFrom, runStrategy, } from "./removal-steps/index.js";
-import { ensureAgentsManagedSection, ensureGitHooks, ensureHostHooks, ensureOpenClawIntegrations, ensureSkillPointers, ensureSlashCommands, ensureTaskfileInclude, listSkillPointerPaths, listVerifiedManagedSlashCommandPaths, RUNTIME_PREFIX, } from "./setup-wiring.js";
 import { assertInventoryCompleteness } from "./installer-output-inventory.js";
+import { CURRENT_DATA_SCHEMA_VERSION, DATA_SCHEMA_MARKER_REL } from "./migrate.js";
+import { isConvertStrategyFrom, runStrategy } from "./removal-steps/index.js";
+import { ensureAgentsManagedSection, ensureGitHooks, ensureHostHooks, ensureOpenClawIntegrations, ensureSkillPointers, ensureSlashCommands, ensureTaskfileInclude, listSkillPointerPaths, listVerifiedManagedSlashCommandPaths, RUNTIME_PREFIX, } from "./setup-wiring.js";
 const SEED_PLACEHOLDER_REL = "xbrief/.directive-seed-placeholder";
 const GEN_REL = ".deft/GENERATION.json";
 const WIRING_READY_DIR_REL = ".deft/directive";
@@ -174,11 +174,7 @@ function buildOwnershipArtifacts(projectRoot) {
             });
         }
     }
-    for (const rel of [
-        ".githooks/pre-commit",
-        ".githooks/pre-push",
-        ".githooks/_directive-run.sh",
-    ]) {
+    for (const rel of [".githooks/pre-commit", ".githooks/pre-push", ".githooks/_directive-run.sh"]) {
         const body = readText(join(projectRoot, rel));
         if (body !== null) {
             artifacts.push({
@@ -311,16 +307,18 @@ export function runSetup(options) {
             conflicts.push(taskfile.conflictReason ?? "Taskfile.yml: include conflict");
         }
         // Seeds only on first-time install (AC8.4); repair/upgrade never create them.
-        // AC6.2: also leave data-schema current for empty/seeded install. Repair must
-        // not migrate; upgrade still migrates when data is truly behind.
+        // AC6.2: leave data-schema current for empty/seeded install. Repair may write a
+        // missing marker (not a migration); upgrade still migrates when data is behind.
         if (operation === "install" && conflicts.length === 0) {
             const seed = createSeedPlaceholder(root);
             if (seed !== null)
                 created.push(seed);
-            if (!existsSync(join(root, DATA_SCHEMA_MARKER_REL))) {
-                writeContained(root, DATA_SCHEMA_MARKER_REL, `${JSON.stringify({ schemaVersion: CURRENT_DATA_SCHEMA_VERSION }, null, 2)}\n`);
-                created.push(DATA_SCHEMA_MARKER_REL);
-            }
+        }
+        if ((operation === "install" || operation === "repair") &&
+            conflicts.length === 0 &&
+            !existsSync(join(root, DATA_SCHEMA_MARKER_REL))) {
+            writeContained(root, DATA_SCHEMA_MARKER_REL, `${JSON.stringify({ schemaVersion: CURRENT_DATA_SCHEMA_VERSION }, null, 2)}\n`);
+            created.push(DATA_SCHEMA_MARKER_REL);
         }
         // AC13.1: never materialize a content copy under .deft/core.
         const desired = buildOwnershipRecord({

package/dist/uninstall.js

@@ -9,7 +9,7 @@ import { join } from "node:path";
 import { containedRemove } from "../vendor/directive-core/dist/fs/contained-write.js";
 import { inspectOwnershipRecord, MANAGED_SECTION_CLOSE, MANAGED_SECTION_OPEN_PREFIX, } from "../vendor/directive-core/dist/install-health/index.js";
 import { pruneEmptyAncestors, removeSoleAuthorHusks } from "./removal-steps/steps.js";
-import { HOOK_BIN_COMMAND, RUNTIME_PREFIX, SKILL_POINTER_INVENTORY, } from "./setup-wiring.js";
+import { HOOK_BIN_COMMAND, RUNTIME_PREFIX, SKILL_POINTER_INVENTORY } from "./setup-wiring.js";
 const SKILL_HOST_ROOTS = [
     ".agents/skills",
     ".claude/skills",

package/dist/vbrief-preflight-fixtures.js

@@ -59,7 +59,7 @@ export function buildFixtures(root) {
 /** Render a human-readable parity report (exported for unit tests). */
 export function renderReport(result) {
     if (result.ok) {
-        return `vbrief_preflight parity: CLEAN -- Python and TS agree on ${result.cases.length} fixture(s).`;
+        return `vbrief_preflight parity: CLEAN -- Python and TS agree on ${result.cases.length} fixtures.`;
     }
     const lines = ["vbrief_preflight parity: DIVERGENCE"];
     for (const c of result.cases.filter((x) => !x.ok)) {

package/dist/verify-intent-constraint.d.ts

@@ -5,6 +5,8 @@ interface ParsedArgs {
     staged: boolean;
     quiet: boolean;
     planId?: string;
+    pr?: string;
+    repo?: string;
     error?: string;
 }
 /** Parse verify-intent-constraint CLI args. */

package/dist/verify-intent-constraint.js

@@ -46,6 +46,28 @@ export function parseArgs(argv) {
         else if (arg?.startsWith("--plan-id=")) {
             parsed.planId = arg.slice("--plan-id=".length);
         }
+        else if (arg === "--pr") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --pr: expected one argument" };
+            }
+            parsed.pr = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--pr=")) {
+            parsed.pr = arg.slice("--pr=".length);
+        }
+        else if (arg === "--repo") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --repo: expected one argument" };
+            }
+            parsed.repo = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--repo=")) {
+            parsed.repo = arg.slice("--repo=".length);
+        }
         else if (arg === "--base-ref") {
             return {
                 ...parsed,
@@ -71,6 +93,8 @@ export function run(argv) {
         staged: args.staged,
         quiet: args.quiet,
         planId: args.planId,
+        pr: args.pr,
+        repo: args.repo,
     });
     if (result.message.length > 0) {
         if (result.stream === "stdout")

package/dist/verify-observable-scope.d.ts

@@ -5,6 +5,8 @@ interface ParsedArgs {
     staged: boolean;
     quiet: boolean;
     planId?: string;
+    pr?: string;
+    repo?: string;
     error?: string;
 }
 /** Parse verify-observable-scope CLI args. */

package/dist/verify-observable-scope.js

@@ -46,6 +46,28 @@ export function parseArgs(argv) {
         else if (arg?.startsWith("--plan-id=")) {
             parsed.planId = arg.slice("--plan-id=".length);
         }
+        else if (arg === "--pr") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --pr: expected one argument" };
+            }
+            parsed.pr = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--pr=")) {
+            parsed.pr = arg.slice("--pr=".length);
+        }
+        else if (arg === "--repo") {
+            const value = argv[i + 1];
+            if (value === undefined) {
+                return { ...parsed, error: "argument --repo: expected one argument" };
+            }
+            parsed.repo = value;
+            i += 1;
+        }
+        else if (arg?.startsWith("--repo=")) {
+            parsed.repo = arg.slice("--repo=".length);
+        }
         else if (arg === "--base-ref") {
             return {
                 ...parsed,
@@ -71,6 +93,8 @@ export function run(argv) {
         staged: args.staged,
         quiet: args.quiet,
         planId: args.planId,
+        pr: args.pr,
+        repo: args.repo,
     });
     if (result.message.length > 0) {
         if (result.stream === "stdout")

package/docs/getting-started.md

@@ -39,6 +39,8 @@ Two published packages: global **`@deftai/directive`** (launcher) and project-pi
 
 Framework maintainers of this repository use a separate Node 24 pin; see [CONTRIBUTING.md](../../CONTRIBUTING.md).
 
+Maintainer execution on this repo: after `git pull` / FF, hooks and ordinary `task <verb>` use the pin under `node_modules/@deftai/directive-runtime`. Tip dogfood without publishing is an explicit `task materialize:runtime` into **this** checkout only (each worktree installs/materializes its own pin). See [launcher.md](./launcher.md).
+
 ---
 
 ## Installation

package/docs/intent-constraint.md

@@ -11,7 +11,13 @@ First ship is a merge-base snapshot of throw/reject/abort sites and new numeric
 3. Numeric-const peel is a while-unwrap of `AsExpression` (any asserted type), `SatisfiesExpression`, unary `+`/`-`, `ParenthesizedExpression`, and angle-bracket `TypeAssertion` until `NumericLiteral`. Do not `forEachChild`-harvest `NumericLiteral` (`Number(1024)`, `{ max: 1024 }`). Do not treat a numeric literal anywhere in an if-condition as a hard constraint.
 4. Same-file helper extract of a posted throw plus same-file const is in the snapshot. Cross-file composition is a recorded first-ship miss.
 5. Leftover is skip/filter/return-error that add neither a new numeric-const nor a throw/reject/abort site. Skip plus a new numeric const is not leftover.
-6. Durable authority is still the merge-base JSON under `.deft/intent-constraint/<plan-id>.json` with `humanApproval` (`isHumanApprovalStamp`). Author `plan["x-directive/intentConstraint"]` when `value` / `unit` / `rejectionScope` already exist, before the implementation PR that introduces the facts -- not at record-approved-scope. File-scope can be named at allocation. Throw values usually cannot. Authority read is `git show <merge-base>` only. Same-PR rewrite fails. Multiple merge-base mints require `--plan-id`, `DEFT_ACTIVE_SCOPE`, or dest unique running xBRIEF. Each mint row covers at most one new numeric-const of that value and at most one new throw/reject/abort site. Do not invent a second snapshot or fill speculative value/unit/rejectionScope so a mint succeeds at park. Chat text is never the evaluate input.
+6. Durable authority is still the merge-base JSON under `.deft/intent-constraint/<plan-id>.json` with `humanApproval` (`isHumanApprovalStamp`). Author `plan["x-directive/intentConstraint"]` when `value` / `unit` / `rejectionScope` already exist, before the implementation PR that introduces the facts -- not at record-approved-scope. File-scope can be named at allocation. Throw values usually cannot. Authority read is `git show <merge-base>` only. Same-PR rewrite fails. Multiple merge-base mints require `--plan-id`, `DEFT_ACTIVE_SCOPE`, dest unique running xBRIEF, or demand-site PR `deft-story: N` adoption (#5782). Each mint row covers at most one new numeric-const of that value and at most one new throw/reject/abort site. Do not invent a second snapshot or fill speculative value/unit/rejectionScope so a mint succeeds at park. Chat text is never the evaluate input.
+
+### PR deft-story plan-id adoption (#5782)
+
+On multi-running or multi-mint tips, when plan-id is unresolved, the gate may adopt the running brief `plan.id` owned by a sole distinct `deft-story: N` mark on the PR body (`GITHUB_PR_NUMBER` or `--pr`, plus `GITHUB_REPOSITORY` / `--repo`). Empty or non-digit PR env is no-PR-context (master push / local check keep dest-unique-running). REST null is config/exit 2. Sole means exactly one distinct issue number after dedupe (duplicate identical lines are sole). Unparseable mark values (including plan-id shaped strings) refuse. Explicit `--plan-id` and a valid `DEFT_ACTIVE_SCOPE` still win.
+
+A `deft-story: N` mark asserts #4864 delivery bind (`metadata.productPullRequest` must equal this PR before leftover finalize). Satisfying that bind closes the whole story at cohort finalize (stamp path is mark-independent). Only put the mark on the PR that is the delivery for #N. Adoption is a multi-active tiebreak; it does not alter finalize-cohort bind semantics and is not an override of sole-running.
 7. Collection UX (#5010 / #5574 Prefer-A): classify the condition, not the API name. Expected operational deny → returned-failure / filter (free). Invariant / corruption / impossible-if-healthy → fail-fast throw (or language-equivalent) + attended mint; rewrite solely to clear the gate is forbidden. Attended harness → detect the hard fact and ask the human in the parent chat; on yes the **human** lands the same merge-base record on a real TTY with `mintedVia: in-harness-ask` (attestation is not an agent-shell bypass). Commit that record on the delivery-branch merge base first, then rebase the implementation branch onto it — same-PR working-tree-only records are not authoritative. Unattended / C1 / operator-gone → operational may rewrite or park; invariant requiring a new hard fact must park pending a human mint — do not ask an empty room and do not treat leave-harness TTY `scope:record-intent-constraint` as the primary path. The legacy verb may remain for repair when a human is on a real TTY. Parent-agent auto-approve is out of scope. Agent/CI markers still refuse. Numeric-const and the four `FACT_KINDS` stay on the human decision / park path; a free rewrite introduces none of them. Language-equivalent fail-fast guidance does not imply new panic/assert extraction beyond production TS/JS.
 8. Site ids are compact statement text, not source offsets. Inserting unrelated text above an existing site does not mint a new fact.
 9. P2 (literal acceptance preservation) is not this first ship. The verb is not `semantic-*`.

package/docs/known-limitations.md

@@ -20,6 +20,7 @@ Accepted product decisions for the launcher + pinned-runtime install model. Docu
 | **Only package/readiness ignore entries change** | Ignore updates cover `node_modules` and `.deft/directive/wiring-ready.*.json`; `GENERATION.json` stays committed | Broader housekeeping stays where it is |
 | **Node 20 is best-effort** | Warning on Node 20; gates test 22 and 24 | Broad compatibility without blocking |
 | **`@deftai/directive` is the launcher** | Adding it locally does not activate a project; meaning changes from “the product” to “the launcher” at the split | Pin `@deftai/directive-runtime` via `directive install` |
+| **FF alone is not tip dogfood** | On the maintainer monorepo, ordinary `task` and hooks stay on the checkout pin; workspace `packages/runtime/dist` is not a silent ordinary-verb fallback (#5805) | Run `task materialize:runtime` in the checkout that should dogfood tip; dest worktrees do not inherit primary materialize |
 | **Hooks cannot run while their runtime package is absent** | Host may block edits until packages are restored | No fallback to another version; recover with `npm i -g @deftai/directive`, then `directive install --repair` |
 | **No `--force`** | Conflicts are named and left | Destructive bypass is out of scope |
 | **Three private packages are not consumable** | `directive-core`, `directive-content`, and `directive-types` are not on npm for external use | Bundled into the runtime; loose ranges were part of the bug |

package/docs/launcher.md

@@ -32,6 +32,16 @@ npm i -g @deftai/directive
 directive install --repair
 ```
 
+## Maintainer dogfood (this repository)
+
+On the Directive monorepo, ordinary unprefixed `task <verb>` paths and Git hooks both execute the **checkout pin** at `node_modules/@deftai/directive-runtime/dist/bin.js` (#5805 / AC9.9). Fast-forwarding `master` alone does not run tip source. Tip without a public publish:
+
+```bash
+task materialize:runtime
+```
+
+That stages and packs tip via `packages/runtime/scripts/stage-bundle.mjs` + `pack-staged-runtime.mjs`, then replaces **this checkout's** pin only (no `package.json` / lockfile location-spec rewrite; primary materialize does not update dest worktree pins). CI tip probes that call `packages/runtime/dist/bin.js` directly stay carved out.
+
 ## Related
 
 - [Known limitations](./known-limitations.md)

package/docs/observable-scope.md

@@ -30,3 +30,9 @@ One remediation: restore the baseline markup structure, or ask in the parent cha
 The verb is composed on `task check` (`FRAMEWORK_CHECK_GATES`, `CONSUMER_CHECK_GATES`, and required consumer enforcement). Missing, stale, invalid, or changed provider material fails; there is no generic fallback. Dependency delta versus master is two pure parser packages (`parse5` and `entities`). The JSX path trades a bundled pinned parser for one resolved from the consumer project, recorded per artifact and never compared against the mint. Truncated or incomplete HTML is refused (parse5 onParseError into anomalies). jsdom is not a dependency.
 
 Three-state exit: `0` skip, warn-findings, or pass / `1` missing mint or unlisted delta / `2` invalid configuration.
+
+### PR deft-story plan-id adoption (#5782)
+
+Same demand-site adopter as `verify:intent-constraint`: on multi-running or multi-mint tips with unresolved plan-id, adopt the unique running `plan.id` for a sole distinct `deft-story: N` on the PR body. Explicit `--plan-id` and a valid `DEFT_ACTIVE_SCOPE` win. Empty/non-digit PR env is no-PR-context. When `DEFT_ACTIVE_SCOPE` is set but not a running xBRIEF **and** PR context is present, adoption is suppressed with a named refuse (pass `--plan-id` or clear the pin) — without PR context the tip fall-through is unchanged. REST null is config/exit 2. No YAML planId pre-export.
+
+A `deft-story: N` mark asserts #4864 delivery bind and whole-story close at cohort finalize — only use it on the PR that is the delivery for #N. Adoption does not change finalize bind semantics.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-runtime",
-  "version": "0.126.0-beta.3",
+  "version": "0.128.0",
   "description": "Directive runtime — pinned product commands, hooks, content, and engine.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",