@dzhechkov/harness-core 0.4.3 → 0.4.5

package/sbom.json

@@ -25,7 +25,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d3b77852a0bc48aa5d7c34bbd2baa2bbcf1bc73ea86e23b57a955c5ddf61cd03"
+          "content": "1ea94f4b5ca525e64959975bcd7ef4b258a9c7b83801f754694f42e3f640007a"
         }
       ]
     },
@@ -35,7 +35,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "967d5a6521a410643e8b4e7e18898ad67683f37ecb96879596646114e7085be0"
+          "content": "9cb242e309547951677c3e613c5ebfb75e4ba68c8fa8f748a9ad550a47a5c2d5"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "coverage/coverage-summary.json",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "f04d97d74ed66db11c5f7659953befe681537ec395f2a95c7e279acef78db15d"
         }
       ]
     },
@@ -1455,7 +1465,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "9288224684107b9712eec5592c3727788608e384ee4cf0899f27780ee2b668df"
+          "content": "4752ad599537abe839adfa152188269e5e5ddfdff48020129e9f4a8e70e56983"
         }
       ]
     },
@@ -1465,7 +1475,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "06617b763dc879d43f1320fdbb422fc4c61b47aea7656ca8a6508dcbe3a62778"
+          "content": "991f56d541257496aa05faec761ea0615b2468142dc8debf910a699ce50b9602"
         }
       ]
     },
@@ -1475,7 +1485,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "8c5d5828f4b0ba6dd32a15de8a3eae4e683dc8a9616d7d4cc71e07d693bfe427"
+          "content": "fc721ccc00ee1ba6a0e943583631b46557b51dcc91c1c9da1e0b33c040804f9b"
         }
       ]
     },
@@ -1485,7 +1495,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "717e974726fcd976254760be190c0bbf38be162aea4b1d3b48fe8992c9fff9bf"
+          "content": "1ef7d4f55c4f6daa9cdb87540b85d9fee7dd41008317c488c97112448d8ada07"
         }
       ]
     },
@@ -1495,7 +1505,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "06ae266e7fa0fa8a390b3a9c57a5edeb6ebc53204bf47220dec633f4d0b1d0ca"
+          "content": "3fe080f4356b1933ecf4b492134e90787fc472c642b7c64c6cce84a51fabddd4"
         }
       ]
     },
@@ -1505,7 +1515,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e157eff3ef69105095d02cd0f63b7871fe6c9b57bfc0b12198c3074f08edd343"
+          "content": "394f11cf13102edeb37c655f4796b15372c627b19814e6bc35a5b2fbe556e9b3"
         }
       ]
     },
@@ -1515,7 +1525,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2461e2f9984617a53f8d9b0bde1b7ec2f33f60f3763c1352242698848484994f"
+          "content": "9cff4d5a9745387ae90795b825e19b00ed62db2e98665bf0ddaa5f12be0ee491"
         }
       ]
     },
@@ -1565,7 +1575,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "25be50f7d13606c894880980eeb7cf989bb79eba53f19f138bafd6b2865984f5"
+          "content": "6d5df8252d9da89efd7ec8bb17c2bfbb2686c49cc9fe33422e2e80288c76b857"
         }
       ]
     },
@@ -1575,7 +1585,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "c675242b760698382b34576b6e0a29791a9bf90f8c11969f1c7b50dfdcdab090"
+          "content": "396fd7bf4041f15d8bc037bd84e740ae4c89b218e2842f84aa2d3a9ef9dcfdfc"
         }
       ]
     },
@@ -1585,7 +1595,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "49ca837d8041585638ea5b14ffcc913de77b92aa619512c9cdd2f92c7458e6d5"
+          "content": "3c14f7c6225775224ef74e15a5e215efa5118058cf35e55bfd46706b847a9db2"
         }
       ]
     },
@@ -1595,7 +1605,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d8cea571b3c22d4e88700c043d138cbb7ce03cd7aaea682185c55010430249e2"
+          "content": "5daf83a5ff7740b5dfac606747cd7f6a13dedf060aa8e149c7ecd3afe2201d5f"
         }
       ]
     },
@@ -1615,7 +1625,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5586404be53e6aaf76ea248c420ee0f6fe1be1220e1a049112429bc5c0c0ab4c"
+          "content": "6f781539cbfc72159cfc2532c53dec0adbc9061e1848e5da5ea564722dc9594a"
         }
       ]
     },
@@ -1625,7 +1635,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "51f331c1fddf74623f02dfa45ac86ca3650b1ce885f33cb07b3c3101a9de38ff"
+          "content": "d94695ae68573147c5d0c595e3fc6d9f12977fb41ddc5c36d77b1fa9c23df5a9"
         }
       ]
     },
@@ -1635,7 +1645,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "ffecd7640d6f93c8fa6be63ccc75e4be5a05ba74593513e4ce530300ce1ce02b"
+          "content": "cd7da1b9bc60372a29a970e5b5b01ab3651cf0b02716207451e0421b249bc17a"
         }
       ]
     },
@@ -2965,7 +2975,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "0e932851e1e1edfc773c1e3d5a11bd87ccbfe7a6eab245f1e2f1c34f442122d6"
+          "content": "e83c3cbd2e2ed5a861bf916ab8bf88f6984dfdc785a0168550ea47bb36484d6a"
         }
       ]
     },
@@ -2975,7 +2985,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "1218960ee42e7d8fa4e33a52585467763494bb5300a891507116cde99bb15bfc"
+          "content": "b9e63b4eef608e1ae96fca3283638ab327df62ccd027acca74aec7760ee87d0e"
         }
       ]
     },
@@ -2985,7 +2995,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "52b8c82aef616b7b91cdcb62de5fc35ed62dba4573e9c9b1c4064bfd5a167747"
+          "content": "51b505f28dcf7a61052e012c148e57a487b094bee18ea0f8878ae5ad68ec8826"
         }
       ]
     },
@@ -2995,7 +3005,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "d57185b28dc7f08e02a4f7b79d4cba53ffe395fd05a9edf4992d7f41ef08b25f"
+          "content": "250a219b82f8efc1a6f5de75296b119365df9313ae473ea335d8c8bba7ff8661"
         }
       ]
     },
@@ -3405,7 +3415,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4e0045cf445e1f6a2e173912acc2ce6b76730dbc0502219d09324644eba71d91"
+          "content": "2ba5f75f3f18c385a140889bf10117011aa892a6df79a2ef759f131089e052ce"
         }
       ]
     },
@@ -3765,7 +3775,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7433b7f1dea51a494d4a4587872d46339383b69052e8fd2127d9feffe47eaa43"
+          "content": "156bb512de2c3ced8fe5a3419c0e29682e89573d12eae6abd8aebd15534d3bb0"
         }
       ]
     },
@@ -3775,7 +3785,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3312482046cad99aa5cdedb5a87b6a5ffa3755688296f89f7081e77f47b3d5e2"
+          "content": "ce8c666b5d7fb16578a4489cafae56a0baf08dc786b052e40632692e713998f8"
         }
       ]
     },
@@ -3795,7 +3805,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "701c17c11c744a1535993ff37acb2897a105bbc3cb66283f5b64bd0b89c100c7"
+          "content": "42960dd51a381997be9f48bf23a7f6b2aa85c48479eb2b6ca884ed0d20838d74"
         }
       ]
     },
@@ -3805,7 +3815,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6761caa91ce493512cf5d2791ec4f83ca33b4c1dfc1ce9c3b8068812b4034efd"
+          "content": "d01c1a598c1b8cfa91600d4bcd2bfae492279cf27e01c07672c532449c825bb1"
         }
       ]
     },
@@ -4135,7 +4145,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a7f4cffd407fa3d9cb87bce37cb33153d98c40da4e2da74c4f9e804dc32b77fc"
+          "content": "ca2f5d5f65be107e7c1740a5447b729f08ec297baf5383a3dbe473e2c3c588da"
         }
       ]
     },
@@ -4409,6 +4419,36 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/cfr-discovery-gate.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b4d343527c5a92c624dd90daf4400d938f885836bd671e10ba3a58f05047a52d"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/cfr-handoff-exits.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "b93f89785bb853b466d40bc2c515d11ec3ae6e00c47f7364dce9a9544bc9c8eb"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "test/cfr-tool-perimeter.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "ae004e51a76a8c979e27916056baa33eac60bdfa427cd1cb7791f65aa8ad0125"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/challenge-panel.test.ts",
@@ -4745,7 +4785,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "6aab094440f13c40664e4b33e005ea1fb0fb1c9e9f1848fdde44865a53c43535"
+          "content": "027a4a5c5257725bb12c91360e02a8161b9036279eddc7ca2ca8217d1ec32deb"
         }
       ]
     },
@@ -4905,7 +4945,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7699bd5d5ea9a5a423681091678282efe96a6a978f9ee938f0911267e6463410"
+          "content": "eeb59ddb49116a20dd0b32395c8d4d6049df0579d2efb10731affbb51719c9a9"
         }
       ]
     },
@@ -4915,7 +4955,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "3681b27b5ce247b77e33bd78f17873ab5e94c693b0b523a192944ec1194b6fbe"
+          "content": "edf746d4e1f00d0b178c38890f4a1fdd875b8dedc9e5f7f13003680b96e42d2c"
         }
       ]
     },
@@ -4925,7 +4965,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e8732fadbe26cf8a0f85cc0aad90b34d0859ad98003351a1f1776f5bea777bb9"
+          "content": "0fad2ea7c4dd5c5cfc8a9cad61b5b2b2a3f17144ca746b3f9d936e2c86c250fd"
         }
       ]
     },
@@ -5015,7 +5055,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f4bed0557865d5fb5c6cf064a6ffb1425d79e09a9b24a3055477a6b1bb05c1ee"
+          "content": "9ff92463ea18e3a120df5841ab7c857b96e15d77089280a5ff3749f499b4d029"
         }
       ]
     },
@@ -5045,7 +5085,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "a26d2b3cc2434cc0846e73c1c6d5c6d7223e5be5a24217b75f62d494affa2089"
+          "content": "66711d04297969e702fa6fcdeeee3d87dac01a9e0ce2203a33569080c532f601"
         }
       ]
     },
@@ -5055,7 +5095,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "bf6bb4a399d46af5f867a3155697589bcaa93d58051f19746886afe74acf7b68"
+          "content": "13a00f4e8f5d2e8ff4a011af70bdcc200ffa93e144ada85e707a23c15f770551"
         }
       ]
     },
@@ -5169,6 +5209,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "test/registry-not-discovered.test.ts",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "d3e308b2527256b2c2e2499f1dc4841fba948168befb36a810439995b10b30f5"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "test/registry.test.ts",
@@ -5285,7 +5335,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "313b27df8d3fdfedd76d70bd6934933db13e234b645b8c7cf80144ff559ed35b"
+          "content": "2296310c423ac11900b8577b8b5ca0f61587b6d57c78cf369bfbcb736ef777fb"
         }
       ]
     },

package/src/loop-blobs.generated.ts

@@ -32,6 +32,7 @@ export const LOOP_BLOB_NAMES = ["checkpoints","training-pairs","model-resolver",
  * tracked dz-backlog item, deliberately NOT claimed here. */
 export const BLOB_COVERAGE_MANIFEST: { coveredWorkflows: string[] } = {
   "coveredWorkflows": [
+    ".claude/workflows/cfr-pipeline.js",
     ".claude/workflows/feature-adr.js",
     ".claude/workflows/health-advisor.js",
     "packages/@dzhechkov/skills-feature-adr/templates/.claude/workflows/feature-adr.js"

package/src/loop-lint.ts

@@ -41,7 +41,7 @@ export interface LintRun {
   verdict: LintVerdict;
   mode: LintMode;
   findings: LintFinding[];
-  /** Per-rule verdict map (17 rules — every rule reports, none silently skipped). */
+  /** Per-rule verdict map (18 rules — every rule reports, none silently skipped). */
   rules: Record<string, LintSeverity>;
 }
 
@@ -62,6 +62,7 @@ export const LINT_RULES = [
   'pause-wired',
   'dispatch-by-deliverable',
   'no-agent-outside-runstep',
+  'tool-perimeter-declared',
   'size-budget',
 ] as const;
 export type LintRuleId = (typeof LINT_RULES)[number];
@@ -563,6 +564,58 @@ function ruleNoAgentOutsideRunstep(ctx: Ctx): LintFinding[] {
   return out;
 }
 
+/** The `<server>:<capability>` grammar a declared perimeter entry must match (ADR-002 §1). Two or
+ * more colon-separated lowercase segments — a bare `gitlab` names a server with no capability and
+ * is exactly the shape that reads as "everything on that server". */
+export const TOOL_PERIMETER_ENTRY_RE = /^[a-z][a-z0-9-]*(:[a-z][a-z0-9-]*)+$/;
+
+/**
+ * `tool-perimeter-declared` (cfr-pipeline ADR-002) — every DISPATCHING step (`agent`|`gate`)
+ * declares its MCP tool perimeter, well-formed and without duplicates, and the rendered contract
+ * line agrees with the declared array.
+ *
+ * GENERIC by construction: it knows nothing about GitLab, Jira, Wiki or JSM — only that a
+ * dispatching step must SAY what it may touch. **Absence FLAGS: silence is never permission.**
+ * `tools: []` is the correct, meaningful declaration for a step that touches no external tool.
+ *
+ * SEVERITY IS STAGED (checkpoint amendment 2, overriding ADR-002 §Rationale-5's FAIL-everywhere
+ * stance): WARN by default, FAIL only under `--require-plan`. That keeps the published 0.4.x lint
+ * contract of harness-core/harness-cli non-breaking while still making the rule a hard gate
+ * exactly where cfr-pipeline runs it. Plan-less scripts report `inconclusive` (`no-plan-binding`)
+ * like every other plan-anchored rule — never a silent pass.
+ */
+function ruleToolPerimeterDeclared(ctx: Ctx): LintFinding[] {
+  if (ctx.projection === null) return noPlan('tool-perimeter-declared');
+  const sev: LintSeverity = ctx.mode === 'require-plan' ? 'fail' : 'warn';
+  const out: LintFinding[] = [];
+  for (const f of ctx.projection.facts) {
+    if (f.kind !== 'agent' && f.kind !== 'gate') continue;
+    if (f.tools === null) {
+      out.push({ rule: 'tool-perimeter-declared', severity: sev, message: `dispatching step ${f.id} declares no \`tools\` perimeter — absence FLAGS: silence is never permission (declare \`tools: []\` if the step touches no external tool)`, anchor: f.id });
+      continue;
+    }
+    const seen = new Set<string>();
+    for (const entry of f.tools) {
+      if (!TOOL_PERIMETER_ENTRY_RE.test(entry)) {
+        out.push({ rule: 'tool-perimeter-declared', severity: sev, message: `step ${f.id}: tool perimeter entry "${entry}" does not match <server>:<capability> (${String(TOOL_PERIMETER_ENTRY_RE)}) — a malformed entry cannot be matched against a real server inventory`, anchor: f.id });
+      }
+      if (seen.has(entry)) {
+        out.push({ rule: 'tool-perimeter-declared', severity: sev, message: `step ${f.id}: tool perimeter entry "${entry}" is declared twice — a duplicate hides a copy/paste of the wrong stage's perimeter`, anchor: f.id });
+      }
+      seen.add(entry);
+    }
+    // script cross-check: the rendered contract line must agree with the DECLARED array — a plan
+    // edit that never re-rendered would otherwise pass on the plan half alone.
+    if (f.tools.length > 0) {
+      const expected = 'declared MCP tool allowlist (plan tools): ' + f.tools.join(', ') + ' — use NOTHING outside it.';
+      if (!ctx.script.includes(expected)) {
+        out.push({ rule: 'tool-perimeter-declared', severity: sev, message: `step ${f.id}: the rendered script carries no contract line matching the declared perimeter [${f.tools.join(', ')}] — the script is stale against the plan, or the perimeter is decorative`, anchor: f.id });
+      }
+    }
+  }
+  return out;
+}
+
 function ruleSizeBudget(ctx: Ctx): LintFinding[] {
   const n = ctx.lines.length;
   if (n > SIZE_BUDGET_WARN_LINES) {
@@ -623,6 +676,7 @@ export function lint(scriptText: string, opts: LintOptions = {}): LintRun {
   run('pause-wired', () => rulePauseWired(ctx));
   run('dispatch-by-deliverable', () => ruleDispatchByDeliverable(ctx));
   run('no-agent-outside-runstep', () => ruleNoAgentOutsideRunstep(ctx));
+  run('tool-perimeter-declared', () => ruleToolPerimeterDeclared(ctx));
   run('size-budget', () => ruleSizeBudget(ctx));
 
   const severities = Object.values(rules);

package/src/loop-plan.ts

@@ -115,6 +115,20 @@ export interface LoopStep {
    * exec fingerprint in two review rounds; see roadmap. */
   checkpoint?: boolean;
   budget?: { maxAgents: number };
+  /**
+   * DECLARED MCP tool perimeter for this dispatching step (cfr-pipeline ADR-002).
+   *
+   * A `<server>:<capability>` allowlist (`^[a-z][a-z0-9-]*(:[a-z][a-z0-9-]*)+$`, checked by the
+   * `tool-perimeter-declared` lint rule, not by the schema — the schema owns only the TYPE).
+   * ENACTED by `stepPromptAssembly`: a non-empty array renders a fixed contract line into the
+   * step's prompt, so the perimeter is COMMUNICATED to the agent rather than decorative. An empty
+   * array is meaningful and is the correct value for a step that touches no external tool.
+   *
+   * HONESTY, said once and never softened elsewhere: this is a DECLARATION, not enforcement.
+   * `agent()` exposes no tool restriction; real enforcement lives at the MCP server. No document
+   * may call this a sandbox.
+   */
+  tools?: string[];
   /** Dispatch route. v1 NARROWING (QE round 6): only 'inline' is enacted — 'codex-wrapper' and
    * 'codex-exec' are VALIDATED-AWAY (ENACT-DISPATCH). The fire-and-forget wrapper returns a stub
    * that reads as a clean result, and codex-exec had no live-proven enactment here; see roadmap. */
@@ -328,6 +342,7 @@ export const FIELD_DOMAINS: Record<string, FieldDomain> = {
   'LoopStep.cache': { t: 'record' },
   'LoopStep.checkpoint': { t: 'boolean' },
   'LoopStep.budget': { t: 'record' },
+  'LoopStep.tools': { t: 'string[]' },
   'LoopStep.dispatch': { t: 'enum', values: ['inline', 'codex-wrapper', 'codex-exec'] },
   'LoopStep.pauseState': { t: 'string' },
   'artifacts.reads': { t: 'string[]' },
@@ -535,6 +550,9 @@ export const STEP_FIELD_KINDS: Record<string, readonly StepKind[]> = {
   budget: ALL_KINDS, // budget is an ACCOUNTING weight — summed into the rendered budget guard for every kind
   prompt: DISPATCHING_KINDS,
   artifacts: DISPATCHING_KINDS,
+  // the perimeter rides the PROMPT, so it enacts exactly where a prompt is dispatched — `tools`
+  // on a fanout/join/pause step would be an unperformed promise (KIND-1 rejects it).
+  tools: DISPATCHING_KINDS,
   model: DISPATCHING_KINDS,
   deliverable: DISPATCHING_KINDS,
   idempotent: DISPATCHING_KINDS,
@@ -1275,6 +1293,9 @@ export interface LintProjection {
     dispatch: DispatchRoute;
     cacheable: boolean;
     writes: string[];
+    /** DECLARED tool perimeter, or `null` when the step declares none (ADR-002: absence FLAGS —
+     * silence is never permission, so `null` and `[]` must stay distinguishable here). */
+    tools: string[] | null;
   }[];
   pauses: { state: string; resumeArg: string }[];
   checkpointingEnabled: boolean;
@@ -1345,6 +1366,7 @@ export function toLintProjection(plan: LoopPlan): LintProjection {
       dispatch: s.dispatch ?? 'inline',
       cacheable: s.cacheable === true,
       writes: s.artifacts?.writes ?? [],
+      tools: Array.isArray(s.tools) ? [...s.tools] : null,
     };
   });
 

package/src/loop-render.ts

@@ -199,6 +199,14 @@ function stepPromptAssembly(s: LoopStep, plan: LoopPlan): string[] {
     const fileNote = (s.deliverable ?? 'return-value') === 'file' ? '; your deliverable is the written file(s), not your reply' : '';
     lines.push(`  ${jsString('declared outputs (plan artifacts.writes): ' + writes.join(', ') + ' — write them' + fileNote + '. The loop verifies they land.')},`);
   }
+  // ENACTS LoopStep.tools (cfr-pipeline ADR-002): the declared perimeter is COMMUNICATED to the
+  // agent in FIXED wording, so its presence is greppable by a layer-1 test. The second sentence is
+  // not decoration — it is the honesty clause the whole feature rests on: a declaration is not
+  // enforcement, and every environment this ships into today serves the tools as labeled stubs.
+  const tools = s.tools ?? [];
+  if (tools.length > 0) {
+    lines.push(`  ${jsString('declared MCP tool allowlist (plan tools): ' + tools.join(', ') + ' — use NOTHING outside it. In this environment every one of these is a labeled STUB, not a live integration; enforcement lives at the MCP server, not here.')},`);
+  }
   if (s.kind === 'gate') {
     lines.push(`  ${jsString('GATE PROTOCOL (kind: ' + (gateCfg?.kind ?? 'gate') + '): end your reply with exactly one line "GATE: PASS" or "GATE: FAIL" — the loop PARSES this verdict and never synthesizes one.')},`);
   }