@dungle-scrubs/harness-cli-normalizer 0.3.1 → 0.4.1

package/dist/interpretation/refusal.js

@@ -14,6 +14,8 @@ export const REFUSAL_ISSUES = deepFreeze([
     "unknown-model",
     "invalid-env",
     "invalid-tool-grant",
+    "unknown-tool-name",
+    "mutually-exclusive-options",
     "prompt-flag-injection",
     "no-autonomy-mode",
     "no-session-mode",
@@ -53,6 +55,10 @@ export const buildRefusalMessage = (issue, harness, option, facet, supported = [
             return `invalid env key or value for ${harness}${detailSuffix}; ${supportedStr} - keys must match ^[A-Za-z_][A-Za-z0-9_]*$ and contain no NUL`;
         case "invalid-tool-grant":
             return `tool grant for ${harness} contains an empty entry or a comma; a blank tool flag value grants nothing detectable, and a comma inside one name silently splits the grant; ${supportedStr} - provide comma-free, non-empty tool names as separate entries`;
+        case "unknown-tool-name":
+            return `${harness} cannot compute a tool complement around an unknown name${detailSuffix}; ${supportedStr} - exclude only curated names, or pass the unknown name through an include list instead`;
+        case "mutually-exclusive-options":
+            return `${harness} cannot combine${optionPart}${detailSuffix}; ${supportedStr} - pass exactly one of them`;
         case "prompt-flag-injection":
             return `positional prompt may not start with '-'; it would be parsed as a flag by ${harness}${detailSuffix}; ${supportedStr} - remove leading '-' or prefix with a space`;
         case "no-autonomy-mode":
@@ -72,6 +78,14 @@ export class ArgvRefusalError extends Error {
     option;
     facet;
     supported;
+    /** D7: which harnesses DO express the refused option, native spellings
+     * included. Derived by the raise site from descriptors - absent when the
+     * refusing layer has no descriptor set in scope. */
+    supportedBy;
+    /** D8: nearest-alternative suggestion for the CURRENT harness - keeps a
+     * scanning agent on its chosen harness instead of switching. Curatorial
+     * data set at the raise site; absent when no hint exists. */
+    hint;
     constructor(args) {
         const message = args.message ??
             buildRefusalMessage(args.issue, args.harness, args.option, args.facet, args.supported ?? [], args.detail);
@@ -82,6 +96,8 @@ export class ArgvRefusalError extends Error {
         this.option = args.option;
         this.facet = args.facet;
         this.supported = args.supported ?? [];
+        this.supportedBy = args.supportedBy;
+        this.hint = args.hint;
     }
 }
 //# sourceMappingURL=refusal.js.map

package/dist/interpretation/refusal.js.map

@@ -1 +1 @@
-{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/interpretation/refusal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;IACvC,oBAAoB;IACpB,0BAA0B;IAC1B,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,oBAAoB;IACpB,uBAAuB;IACvB,kBAAkB;IAClB,iBAAiB;CACT,CAAC,CAAC;AAGZ;;qEAEqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAmB,EACnB,OAAoB,EACpB,MAAsB,EACtB,KAAsB,EACtB,SAAS,GAAsB,EAAE,EACjC,MAAe,EACP,EAAE;IACV,MAAM,YAAY,GAChB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACpF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM;QACvB,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,EAAE;QACnD,CAAC,CAAC,KAAK;YACL,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,oBAAoB;YACvB,OAAO,GAAG,OAAO,kBAAkB,UAAU,GAAG,YAAY,KAAK,YAAY,qEAAqE,CAAC;QACrJ,KAAK,0BAA0B;YAC7B,OAAO,GAAG,OAAO,4BAA4B,WAAW,GAAG,YAAY,KAAK,YAAY,oEAAoE,CAAC;QAC/J,KAAK,uBAAuB,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM;gBACjB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,CAAC,CAAC,KAAK;oBACL,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBACvB,CAAC,CAAC,QAAQ,CAAC;YACf,OAAO,GAAG,IAAI,sCAAsC,OAAO,GAAG,YAAY,KAAK,YAAY,qDAAqD,CAAC;QACnJ,CAAC;QACD,KAAK,sBAAsB;YACzB,OAAO,oBAAoB,UAAU,OAAO,OAAO,GAAG,YAAY,KAAK,YAAY,kCAAkC,CAAC;QACxH,KAAK,gBAAgB;YACnB,OAAO,sBAAsB,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,iCAAiC,CAAC;QACtI,KAAK,eAAe;YAClB,OAAO,WAAW,OAAO,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,oCAAoC,CAAC;QACpI,KAAK,aAAa;YAChB,OAAO,gCAAgC,OAAO,GAAG,YAAY,KAAK,YAAY,gEAAgE,CAAC;QACjJ,KAAK,oBAAoB;YACvB,OAAO,kBAAkB,OAAO,kJAAkJ,YAAY,iEAAiE,CAAC;QAClQ,KAAK,uBAAuB;YAC1B,OAAO,6EAA6E,OAAO,GAAG,YAAY,KAAK,YAAY,8CAA8C,CAAC;QAC5K,KAAK,kBAAkB;YACrB,OAAO,GAAG,OAAO,gCAAgC,YAAY,8GAA8G,CAAC;QAC9K,KAAK,iBAAiB;YACpB,OAAO,GAAG,OAAO,kDAAkD,YAAY,0CAA0C,CAAC;QAC5H,SAAS,CAAC;YACR,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,OAAO,GAAG,UAAoB,QAAQ,OAAO,GAAG,UAAU,GAAG,YAAY,KAAK,YAAY,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,KAAK,CAAe;IACpB,OAAO,CAAc;IACrB,MAAM,CAAiB;IACvB,KAAK,CAAkB;IACvB,SAAS,CAAoB;IACtC,YAAY,IAQX;QACC,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;YACZ,mBAAmB,CACjB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,MAAM,CACZ,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;IACxC,CAAC;CACF"}
+{"version":3,"file":"refusal.js","sourceRoot":"","sources":["../../src/interpretation/refusal.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAExD,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;IACvC,oBAAoB;IACpB,0BAA0B;IAC1B,uBAAuB;IACvB,sBAAsB;IACtB,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,oBAAoB;IACpB,mBAAmB;IACnB,4BAA4B;IAC5B,uBAAuB;IACvB,kBAAkB;IAClB,iBAAiB;CACT,CAAC,CAAC;AAeZ;;qEAEqE;AACrE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAmB,EACnB,OAAoB,EACpB,MAAsB,EACtB,KAAsB,EACtB,SAAS,GAAsB,EAAE,EACjC,MAAe,EACP,EAAE;IACV,MAAM,YAAY,GAChB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACpF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM;QACvB,CAAC,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,WAAW,EAAE;QACnD,CAAC,CAAC,KAAK;YACL,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE;YACnC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAClD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,oBAAoB;YACvB,OAAO,GAAG,OAAO,kBAAkB,UAAU,GAAG,YAAY,KAAK,YAAY,qEAAqE,CAAC;QACrJ,KAAK,0BAA0B;YAC7B,OAAO,GAAG,OAAO,4BAA4B,WAAW,GAAG,YAAY,KAAK,YAAY,oEAAoE,CAAC;QAC/J,KAAK,uBAAuB,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM;gBACjB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,CAAC,CAAC,KAAK;oBACL,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;oBACvB,CAAC,CAAC,QAAQ,CAAC;YACf,OAAO,GAAG,IAAI,sCAAsC,OAAO,GAAG,YAAY,KAAK,YAAY,qDAAqD,CAAC;QACnJ,CAAC;QACD,KAAK,sBAAsB;YACzB,OAAO,oBAAoB,UAAU,OAAO,OAAO,GAAG,YAAY,KAAK,YAAY,kCAAkC,CAAC;QACxH,KAAK,gBAAgB;YACnB,OAAO,sBAAsB,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,iCAAiC,CAAC;QACtI,KAAK,eAAe;YAClB,OAAO,WAAW,OAAO,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,oCAAoC,CAAC;QACpI,KAAK,aAAa;YAChB,OAAO,gCAAgC,OAAO,GAAG,YAAY,KAAK,YAAY,gEAAgE,CAAC;QACjJ,KAAK,oBAAoB;YACvB,OAAO,kBAAkB,OAAO,kJAAkJ,YAAY,iEAAiE,CAAC;QAClQ,KAAK,mBAAmB;YACtB,OAAO,GAAG,OAAO,2DAA2D,YAAY,KAAK,YAAY,yFAAyF,CAAC;QACrM,KAAK,4BAA4B;YAC/B,OAAO,GAAG,OAAO,kBAAkB,UAAU,GAAG,YAAY,KAAK,YAAY,6BAA6B,CAAC;QAC7G,KAAK,uBAAuB;YAC1B,OAAO,6EAA6E,OAAO,GAAG,YAAY,KAAK,YAAY,8CAA8C,CAAC;QAC5K,KAAK,kBAAkB;YACrB,OAAO,GAAG,OAAO,gCAAgC,YAAY,8GAA8G,CAAC;QAC9K,KAAK,iBAAiB;YACpB,OAAO,GAAG,OAAO,kDAAkD,YAAY,0CAA0C,CAAC;QAC5H,SAAS,CAAC;YACR,MAAM,UAAU,GAAU,KAAK,CAAC;YAChC,OAAO,GAAG,UAAoB,QAAQ,OAAO,GAAG,UAAU,GAAG,YAAY,KAAK,YAAY,EAAE,CAAC;QAC/F,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,KAAK,CAAe;IACpB,OAAO,CAAc;IACrB,MAAM,CAAiB;IACvB,KAAK,CAAkB;IACvB,SAAS,CAAoB;IACtC;;wDAEoD;IAC3C,WAAW,CAAwD;IAC5E;;iEAE6D;IACpD,IAAI,CAAU;IACvB,YAAY,IAUX;QACC,MAAM,OAAO,GACX,IAAI,CAAC,OAAO;YACZ,mBAAmB,CACjB,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,SAAS,IAAI,EAAE,EACpB,IAAI,CAAC,MAAM,CACZ,CAAC;QACJ,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/interpretation/resolve-options.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Option resolution: the precedence chain args > user config > built-in
+ * profile, plus provenance. Pure - the config FILE is read by the CLI layer
+ * and passed in as data; this layer only decides what wins.
+ *
+ * Launch-only: callers apply resolved options on launch, never resume (a
+ * resumed session keeps its session's settings - same rule the codex
+ * sandbox default already follows).
+ */
+import type { HarnessDescriptor } from "../knowledge/descriptor.js";
+import type { TurnOptions } from "./argv.js";
+export type ProvenanceTier = "arg" | "project-config" | "user-config" | "profile" | "harness";
+export interface ProvenanceEntry {
+    readonly key: string;
+    readonly value: unknown;
+    readonly tier: ProvenanceTier;
+}
+/** D5: the project floor caps arg grants; exceeding it refuses naming both
+ * sets. Structured-first: fields, not prose parsing. */
+export declare class FloorExceededError extends Error {
+    readonly harness: string;
+    readonly excess: readonly string[];
+    readonly floor: readonly string[];
+    constructor(harness: string, excess: readonly string[], floor: readonly string[]);
+}
+export interface ResolvedOptions {
+    readonly options: TurnOptions;
+    readonly provenance: readonly ProvenanceEntry[];
+    /** Profile dimensions this harness cannot express (skip-and-report,
+     * never refuse): rendered as divergence, not failure. */
+    readonly unrenderable: readonly string[];
+}
+export interface ConfigTiers {
+    /** ~/.config/hcn/config.json (XDG) - machine-wide defaults. */
+    readonly user?: Readonly<Partial<TurnOptions>>;
+    /** <git-root>/.hcn/config.json - auto-discovered (ratified A), the ALL-
+     * OFF tier; its `tools` key is both the default grant and the FLOOR: an
+     * arg grant exceeding it refuses, naming both sets (D5). */
+    readonly project?: Readonly<Partial<TurnOptions>>;
+}
+export declare const resolveEffectiveOptions: (h: HarnessDescriptor, args: TurnOptions, tiers?: ConfigTiers) => ResolvedOptions;
+//# sourceMappingURL=resolve-options.d.ts.map

package/dist/interpretation/resolve-options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-options.d.ts","sourceRoot":"","sources":["../../src/interpretation/resolve-options.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,gBAAgB,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED;wDACwD;AACxD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,EAQ/E;CACF;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD;6DACyD;IACzD,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAiBD,MAAM,WAAW,WAAW;IAC1B,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/C;;gEAE4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;CACnD;AAuBD,eAAO,MAAM,uBAAuB,MAC/B,iBAAiB,QACd,WAAW,UACV,WAAW,KACjB,eAsHF,CAAC"}

package/dist/interpretation/resolve-options.js

@@ -0,0 +1,162 @@
+import { DEFAULT_TURN_PROFILE } from "../knowledge/profile.js";
+/** D5: the project floor caps arg grants; exceeding it refuses naming both
+ * sets. Structured-first: fields, not prose parsing. */
+export class FloorExceededError extends Error {
+    harness;
+    excess;
+    floor;
+    constructor(harness, excess, floor) {
+        super(`tool grant exceeds the project floor: ${JSON.stringify(excess)} not in floor ${JSON.stringify(floor)} - request a grant within the floor or raise the floor in the project config`);
+        this.name = "FloorExceededError";
+        this.harness = harness;
+        this.excess = excess;
+        this.floor = floor;
+    }
+}
+/** Expressibility per profile dimension. Dimensions whose "on" state is
+ * the harness's own default (discovery all-on) or whose "off" state emits
+ * nothing (autonomy false) are expressible EVERYWHERE - the profile value
+ * resolves to "emit nothing," which every harness can do. Divergence is
+ * reserved for dimensions that would emit a flag the harness lacks. */
+const EXPRESSIBLE = {
+    effort: (h) => h.turnOptions.effort !== undefined,
+    sandbox: (h) => h.turnOptions.sandbox !== undefined,
+    discovery: () => true,
+    autonomy: () => true,
+    write: () => true,
+    shell: () => true,
+    tools: (h) => h.tools.includeFlag !== null || h.tools.excludeFlag !== null,
+};
+/** Merge semantics (gap 1, resolved): config keys are scalars and lists in
+ * schema v1 - there is nothing to deep-merge INTO - so precedence is whole-
+ * key replacement: arg > project > user > profile. A future nested key
+ * (per-harness sections) ships with schema v2 and its own merge rule. */
+const effectiveConfig = (tiers) => ({
+    ...(tiers.user ?? {}),
+    ...(tiers.project ?? {}),
+});
+/** Resolve the effective options for a LAUNCH. `args` is what the caller
+ * passed explicitly (highest tier); `userConfig` the parsed config file;
+ * the profile is the floor. Keys absent everywhere defer to the harness
+ * and are reported with tier "harness" only when something (config or
+ * profile) attempted them - a truly untouched dimension is nobody's
+ * business and appears in provenance as tier "harness" with no value. */
+/** A discovery value emits nothing when every facet is true (on). */
+const emitsNothing = (value) => typeof value === "object" &&
+    value !== null &&
+    Object.values(value).every((v) => v === true);
+export const resolveEffectiveOptions = (h, args, tiers = {}) => {
+    const provenance = [];
+    const unrenderable = [];
+    const config = effectiveConfig(tiers);
+    const sourceTier = (key) => {
+        if (tiers.project?.[key] !== undefined)
+            return "project-config";
+        if (tiers.user?.[key] !== undefined)
+            return "user-config";
+        return undefined;
+    };
+    // D5 toolset expansion: a bare --tools name matching a configured
+    // toolset resolves to its list BEFORE the floor check, so a named set
+    // within the floor passes and one exceeding it refuses naming the set's
+    // members. Project toolsets win name collisions over user toolsets.
+    const toolsets = {
+        ...(tiers.user?.toolsets ?? {}),
+        ...(tiers.project?.toolsets ?? {}),
+    };
+    let effectiveArgs = args;
+    if (args.tools !== undefined &&
+        args.tools.length === 1 &&
+        toolsets[args.tools[0]] !== undefined) {
+        effectiveArgs = { ...args, tools: toolsets[args.tools[0]] };
+        provenance.push({
+            key: "tools",
+            value: effectiveArgs.tools,
+            tier: "arg",
+        });
+    }
+    const resolved = { ...effectiveArgs };
+    // D5 floor: a project toolset floor caps any arg grant; exceeding it is
+    // a structured refusal naming both sets - never a silent clamp.
+    const floor = tiers.project?.tools;
+    if (floor !== undefined && effectiveArgs.tools !== undefined) {
+        const floorSet = new Set(floor);
+        const excess = effectiveArgs.tools.filter((t) => !floorSet.has(t));
+        if (excess.length > 0) {
+            throw new FloorExceededError(h.name, excess, [...floor]);
+        }
+    }
+    // Profile is the floor: apply only where nothing above it set the key.
+    for (const [key, value] of Object.entries(DEFAULT_TURN_PROFILE)) {
+        const argsSet = effectiveArgs[key] !== undefined;
+        const tier = sourceTier(key);
+        if (argsSet) {
+            provenance.push({ key, value: effectiveArgs[key], tier: "arg" });
+            continue;
+        }
+        if (tier !== undefined) {
+            provenance.push({ key, value: config[key], tier });
+            resolved[key] = config[key];
+            continue;
+        }
+        const expressible = EXPRESSIBLE[key]?.(h) ?? false;
+        if (!expressible) {
+            // Skip-and-report: a profile default this harness cannot express is
+            // reported divergence, never a refusal and never silence.
+            unrenderable.push(key);
+            provenance.push({ key, value, tier: "harness" });
+            continue;
+        }
+        // D13: the tools marker expands per descriptor. On a harness whose
+        // default is already everything (claude), expansion emits nothing -
+        // the emit-nothing rule, recorded in provenance. On a harness with
+        // dormant built-ins (pi), it becomes the enabling include list.
+        if (key === "tools" && value === "all-known") {
+            const enabled = h.tools.builtins.filter((t) => t.defaultEnabled).length;
+            const all = h.tools.builtins.length;
+            if (enabled === all) {
+                provenance.push({ key, value: "all known (already default)", tier: "profile" });
+                continue;
+            }
+            const expanded = h.tools.builtins.map((t) => t.name);
+            resolved[key] = expanded;
+            provenance.push({ key, value: expanded, tier: "profile" });
+            continue;
+        }
+        // Dimensions whose value reduces to "emit nothing" (autonomy false,
+        // discovery all-on, write/shell true) stay ABSENT from the resolved
+        // options - the harness's default already satisfies the profile, and
+        // emitting explicit on-flags would change resume grammar and add
+        // breakage surface for no semantic gain. Provenance still records
+        // the tier.
+        if ((key === "autonomy" && value === false) ||
+            (key === "discovery" && emitsNothing(value)) ||
+            ((key === "write" || key === "shell") && value === true)) {
+            provenance.push({ key, value, tier: "profile" });
+            continue;
+        }
+        resolved[key] = value;
+        provenance.push({ key, value, tier: "profile" });
+    }
+    // Config keys outside the profile surface pass through at their own tier
+    // (validated later by the same renderers as args).
+    for (const [key, value] of Object.entries(config)) {
+        if (key === "toolsets")
+            continue; // expanded into args above, never a turn option
+        if (key in DEFAULT_TURN_PROFILE)
+            continue;
+        if (effectiveArgs[key] !== undefined) {
+            provenance.push({ key, value: effectiveArgs[key], tier: "arg" });
+            continue;
+        }
+        resolved[key] = value;
+        const tier = sourceTier(key) ?? "user-config";
+        provenance.push({ key, value, tier });
+    }
+    return {
+        options: resolved,
+        provenance,
+        unrenderable,
+    };
+};
+//# sourceMappingURL=resolve-options.js.map

package/dist/interpretation/resolve-options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-options.js","sourceRoot":"","sources":["../../src/interpretation/resolve-options.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,yBAAyB,CAAC;AAWhF;wDACwD;AACxD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,OAAO,CAAS;IAChB,MAAM,CAAoB;IAC1B,KAAK,CAAoB;IAClC,YAAY,OAAe,EAAE,MAAyB,EAAE,KAAwB;QAC9E,KAAK,CACH,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,8EAA8E,CACpL,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAUD;;;;uEAIuE;AACvE,MAAM,WAAW,GAAoE;IACnF,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,KAAK,SAAS;IACjD,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,KAAK,SAAS;IACnD,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI;IACrB,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI;IACpB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI;IACjB,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI;IACjB,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,KAAK,IAAI;CAC3E,CAAC;AAWF;;;yEAGyE;AACzE,MAAM,eAAe,GAAG,CAAC,KAAkB,EAAkC,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;IACrB,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;CACzB,CAAC,CAAC;AAEH;;;;;yEAKyE;AACzE,qEAAqE;AACrE,MAAM,YAAY,GAAG,CAAC,KAAc,EAAW,EAAE,CAC/C,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,CAAoB,EACpB,IAAiB,EACjB,KAAK,GAAgB,EAAE,EACN,EAAE;IACnB,MAAM,UAAU,GAAsB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,UAAU,GAAG,CAAC,GAAW,EAA8B,EAAE;QAC7D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,GAAwB,CAAC,KAAK,SAAS;YAAE,OAAO,gBAAgB,CAAC;QACrF,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,GAAwB,CAAC,KAAK,SAAS;YAAE,OAAO,aAAa,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,kEAAkE;IAClE,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,MAAM,QAAQ,GAAG;QACf,GAAG,CAAE,KAAK,CAAC,IAA4D,EAAE,QAAQ,IAAI,EAAE,CAAC;QACxF,GAAG,CAAE,KAAK,CAAC,OAA+D,EAAE,QAAQ,IAAI,EAAE,CAAC;KAC5F,CAAC;IACF,IAAI,aAAa,GAAG,IAAI,CAAC;IACzB,IACE,IAAI,CAAC,KAAK,KAAK,SAAS;QACxB,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,KAAK,SAAS,EAC/C,CAAC;QACD,aAAa,GAAG,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,EAAE,CAAC;QACtE,UAAU,CAAC,IAAI,CAAC;YACd,GAAG,EAAE,OAAO;YACZ,KAAK,EAAE,aAAa,CAAC,KAAK;YAC1B,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;IACD,MAAM,QAAQ,GAA4B,EAAE,GAAG,aAAa,EAAE,CAAC;IAE/D,wEAAwE;IACxE,gEAAgE;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAwB,CAAC,KAAK,SAAS,CAAC;QACtE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,OAAO,EAAE,CAAC;YACZ,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,GAAwB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,GAAwB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,QAAQ,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAwB,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,MAAM,WAAW,GAAG,WAAW,CAAC,GAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,oEAAoE;YACpE,0DAA0D;YAC1D,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,mEAAmE;QACnE,oEAAoE;QACpE,mEAAmE;QACnE,gEAAgE;QAChE,IAAI,GAAG,KAAK,OAAO,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC;YACxE,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YACpC,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,6BAA6B,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAChF,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACrD,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;YACzB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,oEAAoE;QACpE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,kEAAkE;QAClE,YAAY;QACZ,IACE,CAAC,GAAG,KAAK,UAAU,IAAI,KAAK,KAAK,KAAK,CAAC;YACvC,CAAC,GAAG,KAAK,WAAW,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,EACxD,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,yEAAyE;IACzE,mDAAmD;IACnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,UAAU;YAAE,SAAS,CAAC,gDAAgD;QAClF,IAAI,GAAG,IAAI,oBAAoB;YAAE,SAAS;QAC1C,IAAI,aAAa,CAAC,GAAwB,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,aAAa,CAAC,GAAwB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC;QAC9C,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAkC;QAC3C,UAAU;QACV,YAAY;KACb,CAAC;AACJ,CAAC,CAAC"}

package/dist/interpretation/skills-selection.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Caller-directed skills allowlist rendering (issue #38). The delegating
+ * agent picks the subset from its own registry; this module turns the
+ * resolved paths into per-harness argv tokens.
+ *
+ * - pi: `-ns` (discovery off) + one `--skill <path>` per entry - the
+ *   allowlist is exact: only the caller's picks load.
+ * - claude: no per-skill load flag; the registry is already present via
+ *   the personal skills dir, so the allowlist renders as the complement
+ *   OFF - `--settings '{"skillOverrides":{"<name>":"off",...}}'` for every
+ *   known skill except the picks. Known set comes from the caller's root
+ *   listing (same source that resolved the names).
+ * - codex/muse: refuse (structural) with the standard hint shape.
+ */
+import type { HarnessDescriptor } from "../knowledge/descriptor.js";
+export declare const basenameOf: (p: string) => string;
+export declare const renderSkillsSelection: (h: HarnessDescriptor, skills: readonly string[]) => readonly string[];
+/** The claude complement form, given the full known registry: every known
+ * name except the picks gets "off". Exported for the CLI layer, which owns
+ * the registry listing (an fs read - never in interpretation). */
+export declare const claudeSkillOverridesArg: (knownSkills: readonly string[], pickedPaths: readonly string[]) => string[];
+//# sourceMappingURL=skills-selection.d.ts.map

package/dist/interpretation/skills-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-selection.d.ts","sourceRoot":"","sources":["../../src/interpretation/skills-selection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAGpE,eAAO,MAAM,UAAU,MAAO,MAAM,KAAG,MAGtC,CAAC;AAEF,eAAO,MAAM,qBAAqB,MAC7B,iBAAiB,UACZ,SAAS,MAAM,EAAE,KACxB,SAAS,MAAM,EA+BjB,CAAC;AAEF;;kEAEkE;AAClE,eAAO,MAAM,uBAAuB,gBACrB,SAAS,MAAM,EAAE,eACjB,SAAS,MAAM,EAAE,KAC7B,MAAM,EAQR,CAAC"}

package/dist/interpretation/skills-selection.js

@@ -0,0 +1,49 @@
+import { ArgvRefusalError } from "./refusal.js";
+export const basenameOf = (p) => {
+    const i = p.lastIndexOf("/");
+    return i === -1 ? p : p.slice(i + 1);
+};
+export const renderSkillsSelection = (h, skills) => {
+    if (skills.length === 0)
+        return [];
+    if (h.skills === null) {
+        throw new ArgvRefusalError({
+            issue: "unsupported-option",
+            harness: h.name,
+            option: "skills",
+            supported: ["caller-directed skill sets"],
+            supportedBy: [
+                { harness: "pi", spelling: "--skill" },
+                { harness: "claude", spelling: "skillOverrides" },
+            ],
+            hint: h.name === "codex"
+                ? "codex discovers skills from its own directory with no call-time surface - stage the skills into $CODEX_HOME/skills or pass their content in the prompt"
+                : "muse scopes skills by workspace trust with no per-skill surface - include the skill content in the prompt or use --trust-workspace for the whole registry",
+        });
+    }
+    if (h.skills.loadFlag !== null) {
+        // pi: discovery off so ONLY the picks load.
+        const tokens = ["-ns"];
+        for (const path of skills)
+            tokens.push(h.skills.loadFlag, path);
+        return tokens;
+    }
+    // claude: complement-off via settings JSON. Names are the skill dir
+    // basenames; unknown names in knownSkills would be turned off
+    // pointlessly, so the caller passes exactly the known set.
+    return [];
+};
+/** The claude complement form, given the full known registry: every known
+ * name except the picks gets "off". Exported for the CLI layer, which owns
+ * the registry listing (an fs read - never in interpretation). */
+export const claudeSkillOverridesArg = (knownSkills, pickedPaths) => {
+    const picks = new Set(pickedPaths.map(basenameOf));
+    const offs = {};
+    for (const name of knownSkills) {
+        if (!picks.has(name))
+            offs[name] = "off";
+    }
+    const json = JSON.stringify({ skillOverrides: offs });
+    return ["--settings", json];
+};
+//# sourceMappingURL=skills-selection.js.map

package/dist/interpretation/skills-selection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills-selection.js","sourceRoot":"","sources":["../../src/interpretation/skills-selection.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE;IAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,CAAoB,EACpB,MAAyB,EACN,EAAE;IACrB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnC,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,gBAAgB,CAAC;YACzB,KAAK,EAAE,oBAAoB;YAC3B,OAAO,EAAE,CAAC,CAAC,IAAI;YACf,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,CAAC,4BAA4B,CAAC;YACzC,WAAW,EAAE;gBACX,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE;gBACtC,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE;aAClD;YACD,IAAI,EACF,CAAC,CAAC,IAAI,KAAK,OAAO;gBAChB,CAAC,CAAC,wJAAwJ;gBAC1J,CAAC,CAAC,2JAA2J;SAClK,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,4CAA4C;QAC5C,MAAM,MAAM,GAAa,CAAC,KAAK,CAAC,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAChE,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,oEAAoE;IACpE,8DAA8D;IAC9D,2DAA2D;IAC3D,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF;;kEAEkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,WAA8B,EAC9B,WAA8B,EACpB,EAAE;IACZ,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;AAC9B,CAAC,CAAC"}

package/dist/interpretation/support.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Cross-harness support derivation: pure functions that answer "which
+ * harnesses express this option, and under what native spelling" from the
+ * descriptor set. Phase 3 (D7): refusal diagnostics derive support lists at
+ * runtime instead of hardcoding them, so a descriptor edit can never leave
+ * a refusal message stale. The autonomy refusal in argv.ts was the
+ * counter-pattern - a hardcoded flag array that drifts on descriptor
+ * change.
+ *
+ * Interpretation-layer pure function; takes the descriptor set as an
+ * argument rather than importing the defaults, so override sets work.
+ */
+import type { DescriptorSet } from "../knowledge/overrides.js";
+import type { RefusalOption } from "./refusal.js";
+export interface SupportEntry {
+    readonly harness: string;
+    /** The native spelling a caller would use directly on that harness. */
+    readonly spelling: string;
+}
+/** Every harness in the set that can express `option`, with its native
+ * spelling. Ordered by the set's insertion order (defaults: claude, codex,
+ * pi, muse) so output is stable across calls. */
+export declare const supportedBy: (set: DescriptorSet, option: RefusalOption) => readonly SupportEntry[];
+/** Reverse lookup for native-spelling recognition (D7 part B): given a raw
+ * flag token a caller typed, find the option it belongs to and which
+ * harnesses spell it that way. Returns null for tokens no descriptor
+ * knows - those keep the plain unknown-flag error. */
+export declare const recognizeNativeSpelling: (set: DescriptorSet, flag: string) => {
+    readonly option: RefusalOption;
+    readonly entries: readonly SupportEntry[];
+} | null;
+//# sourceMappingURL=support.d.ts.map

package/dist/interpretation/support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.d.ts","sourceRoot":"","sources":["../../src/interpretation/support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAqCD;;iDAEiD;AACjD,eAAO,MAAM,WAAW,QAAS,aAAa,UAAU,aAAa,KAAG,SAAS,YAAY,EAQ5F,CAAC;AAEF;;;sDAGsD;AACtD,eAAO,MAAM,uBAAuB,QAC7B,aAAa,QACZ,MAAM,KACX;IAAE,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE,GAAG,IAwClF,CAAC"}

package/dist/interpretation/support.js

@@ -0,0 +1,107 @@
+/**
+ * Cross-harness support derivation: pure functions that answer "which
+ * harnesses express this option, and under what native spelling" from the
+ * descriptor set. Phase 3 (D7): refusal diagnostics derive support lists at
+ * runtime instead of hardcoding them, so a descriptor edit can never leave
+ * a refusal message stale. The autonomy refusal in argv.ts was the
+ * counter-pattern - a hardcoded flag array that drifts on descriptor
+ * change.
+ *
+ * Interpretation-layer pure function; takes the descriptor set as an
+ * argument rather than importing the defaults, so override sets work.
+ */
+const spellingOf = (h, option) => {
+    switch (option) {
+        case "tools":
+            return h.tools.includeFlag;
+        case "excludeTools":
+            return h.tools.excludeFlag;
+        case "autonomy":
+            return h.autonomy?.flag ?? null;
+        case "effort":
+        case "sandbox":
+        case "provider":
+        case "write":
+        case "shell":
+        case "maxSteps":
+        case "discovery": {
+            const spec = h.turnOptions[option];
+            if (spec === undefined)
+                return null;
+            const rawRender = spec.kind === "discovery"
+                ? Object.values(spec.facets)[0]?.render
+                : spec.render;
+            if (rawRender === undefined)
+                return null;
+            // flag-value/config-kv carry `flag`; flag-list carries `flags` - the
+            // first entry is the spelling a caller would type.
+            return rawRender.flag ?? rawRender.flags?.[0] ?? null;
+        }
+        default:
+            return null;
+    }
+};
+/** Every harness in the set that can express `option`, with its native
+ * spelling. Ordered by the set's insertion order (defaults: claude, codex,
+ * pi, muse) so output is stable across calls. */
+export const supportedBy = (set, option) => {
+    const out = [];
+    for (const h of Object.values(set)) {
+        if (h === undefined)
+            continue;
+        const spelling = spellingOf(h, option);
+        if (spelling !== null)
+            out.push({ harness: h.name, spelling });
+    }
+    return out;
+};
+/** Reverse lookup for native-spelling recognition (D7 part B): given a raw
+ * flag token a caller typed, find the option it belongs to and which
+ * harnesses spell it that way. Returns null for tokens no descriptor
+ * knows - those keep the plain unknown-flag error. */
+export const recognizeNativeSpelling = (set, flag) => {
+    const normalized = flag.toLowerCase();
+    const candidates = [
+        "tools",
+        "excludeTools",
+        "autonomy",
+        "effort",
+        "sandbox",
+        "provider",
+        "write",
+        "shell",
+        "maxSteps",
+    ];
+    for (const option of candidates) {
+        const entries = supportedBy(set, option).filter((e) => e.spelling.toLowerCase() === normalized);
+        if (entries.length > 0)
+            return { option, entries };
+    }
+    // Discovery facets: single-dash spellings (pi -nt/-nc/-ne/-ns) and
+    // claude's --setting-sources. Facet spellings map to the facet name so
+    // the redirect can name the normalized spelling.
+    const FACET_KEYS = ["tools", "instructionFiles", "extensions", "skills"];
+    for (const facet of FACET_KEYS) {
+        const entries = [];
+        for (const h of Object.values(set)) {
+            if (h === undefined)
+                continue;
+            const spec = h.turnOptions.discovery;
+            if (spec === undefined || spec.kind !== "discovery")
+                continue;
+            const facetSpec = spec.facets[facet];
+            if (facetSpec === undefined)
+                continue;
+            const render = facetSpec.render;
+            const spelling = render.flag ?? render.flags?.[0];
+            if (spelling !== undefined && spelling.toLowerCase() === normalized) {
+                entries.push({ harness: h.name, spelling });
+            }
+        }
+        if (entries.length > 0) {
+            return { option: `discovery.${facet}`, entries };
+        }
+    }
+    return null;
+};
+//# sourceMappingURL=support.js.map

package/dist/interpretation/support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.js","sourceRoot":"","sources":["../../src/interpretation/support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAYH,MAAM,UAAU,GAAG,CAAC,CAAoB,EAAE,MAAqB,EAAiB,EAAE;IAChF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7B,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;QAC7B,KAAK,UAAU;YACb,OAAO,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,CAAC;QAClC,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,UAAU,CAAC;QAChB,KAAK,OAAO,CAAC;QACb,KAAK,OAAO,CAAC;QACb,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACnC,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACpC,MAAM,SAAS,GACb,IAAI,CAAC,IAAI,KAAK,WAAW;gBACvB,CAAC,CACG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAG7B,EAAE,MAAM;gBACX,CAAC,CAAE,IAAyD,CAAC,MAAM,CAAC;YACxE,IAAI,SAAS,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC;YACzC,qEAAqE;YACrE,mDAAmD;YACnD,OAAO,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACxD,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC,CAAC;AAEF;;iDAEiD;AACjD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAkB,EAAE,MAAqB,EAA2B,EAAE;IAChG,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF;;;sDAGsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,GAAkB,EAClB,IAAY,EAC0E,EAAE;IACxF,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,MAAM,UAAU,GAAoB;QAClC,OAAO;QACP,cAAc;QACd,UAAU;QACV,QAAQ;QACR,SAAS;QACT,UAAU;QACV,OAAO;QACP,OAAO;QACP,UAAU;KACX,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU,CAAC,CAAC;QAChG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACrD,CAAC;IACD,mEAAmE;IACnE,uEAAuE;IACvE,iDAAiD;IACjD,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,CAAU,CAAC;IAClF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,SAAS;gBAAE,SAAS;YAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;YACrC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,SAAS,KAAK,SAAS;gBAAE,SAAS;YACtC,MAAM,MAAM,GAAG,SAAS,CAAC,MAA6C,CAAC;YACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;gBACpE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,aAAa,KAAK,EAAmB,EAAE,OAAO,EAAE,CAAC;QACpE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC"}

package/dist/interpretation/tool-selection.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Tool-selection rendering: turns normalized include/exclude lists into the
+ * per-harness argv tokens, per decisions D1-D3 and the Phase 0 evidence.
+ *
+ * Semantics:
+ * - include: exact allowlist over the descriptor's curated names. pi's flag
+ *   is strict over built-ins, rendered directly. claude's include flag only
+ *   pre-approves without restricting the visible set, so an exact allowlist
+ *   on claude renders as a deny-complement (all known minus included).
+ * - exclude: the complement of the named tools over all descriptor-known
+ *   names (D2). pi's native exclude subtracts from its default set (4
+ *   tools), so a D2 exclude renders as a computed include list there.
+ * - mutual exclusion (D1): both flags in one call refuse.
+ * - extensible rule (D3): curated names validate and map; unknown
+ *   clean-selector names pass through and are reported as unmapped so
+ *   provenance can surface them.
+ */
+import type { HarnessDescriptor } from "../knowledge/descriptor.js";
+export declare const TOOL_SELECTOR: RegExp;
+export interface ToolSelection {
+    readonly include?: readonly string[];
+    readonly exclude?: readonly string[];
+}
+export interface RenderedToolSelection {
+    readonly tokens: readonly string[];
+    readonly unmapped: readonly string[];
+}
+export declare const renderToolSelection: (h: HarnessDescriptor, selection: ToolSelection) => RenderedToolSelection;
+//# sourceMappingURL=tool-selection.d.ts.map

package/dist/interpretation/tool-selection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-selection.d.ts","sourceRoot":"","sources":["../../src/interpretation/tool-selection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAKpE,eAAO,MAAM,aAAa,QAA0C,CAAC;AAErE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAwCD,eAAO,MAAM,mBAAmB,MAC3B,iBAAiB,aACT,aAAa,KACvB,qBAqFF,CAAC"}