@eir-labs/coltrane 0.14.4 → 0.14.6

package/agents/code-implementer.json

@@ -20,7 +20,11 @@
     "If you cannot retrieve it, mark it explicitly as unverified (or omit it) and record what you tried.",
     "Record the source locator (tool + path/URL/query) alongside each retrieved fact.",
     "Create only from upstream inputs and the declared task context; introduce no new external facts.",
-    "Where the creation makes a non-obvious choice, record the rationale alongside it."
+    "Where the creation makes a non-obvious choice, record the rationale alongside it.",
+    "SHELL: run ONE command per Bash call. A compound line (&&, ;, or a pipe) is denied WHOLESALE the moment any single part is ungranted, so `git diff --cached | wc -l` dies on the `wc`, not on the git.",
+    "SHELL: no command substitution or globbing — `$(...)`, backticks and `*` are refused outright as 'Contains expansion'. Read a value with one call and use it literally in the next.",
+    "SHELL: run git from the working tree you are already seated in. NEVER `git -C <path> ...` — the grant is a PREFIX match on `git add`/`git status`/`git diff`, and the `-C` flag sits between the verb and the prefix, so `git -C /path add` is refused even though `git add` is granted.",
+    "A denied command is INFORMATION, not an obstacle to reason around: it means that form is unavailable, so reach for a granted one immediately (Read instead of cat, Grep instead of a pipe) rather than spending budget re-planning the same shape. A run that argues with its permissions produces nothing."
   ],
   "behavioral_primitives": [
     "executor",
@@ -37,7 +41,13 @@
     "Write(tests/**)",
     "Bash(git add:*)",
     "Bash(git diff:*)",
-    "Bash(git status:*)"
+    "Bash(git status:*)",
+    "Bash(wc:*)",
+    "Bash(sed:*)",
+    "Bash(head:*)",
+    "Bash(tail:*)",
+    "Bash(cat:*)",
+    "Bash(ls:*)"
   ],
   "model_tier": "premium",
   "max_tool_calls": 150,

package/agents/red-spec-drafter.json

@@ -25,7 +25,11 @@
     "Where the creation makes a non-obvious choice, record the rationale alongside it.",
     "Every invariant in the contract must have at least one REAL, running RED test that asserts it; a pending/todo test, or an invariant with no test, is refused.",
     "A test must be able to FAIL for the right reason: it asserts the contract's behavior against the real callsite, never a tautology that passes regardless of the implementation.",
-    "uncovered must be empty; if an invariant cannot be covered, say so explicitly rather than dropping it."
+    "uncovered must be empty; if an invariant cannot be covered, say so explicitly rather than dropping it.",
+    "SHELL: run ONE command per Bash call. A compound line (&&, ;, or a pipe) is denied WHOLESALE the moment any single part is ungranted, so `git diff --cached | wc -l` dies on the `wc`, not on the git.",
+    "SHELL: no command substitution or globbing — `$(...)`, backticks and `*` are refused outright as 'Contains expansion'. Read a value with one call and use it literally in the next.",
+    "SHELL: run git from the working tree you are already seated in. NEVER `git -C <path> ...` — the grant is a PREFIX match on `git add`/`git status`/`git diff`, and the `-C` flag sits between the verb and the prefix, so `git -C /path add` is refused even though `git add` is granted. This exact form killed gig 486e0e6c.",
+    "A denied command is INFORMATION, not an obstacle to reason around: it means that form is unavailable, so reach for a granted one immediately (Read instead of cat, Grep instead of a pipe) rather than spending budget re-planning the same shape. A run that argues with its permissions produces nothing."
   ],
   "behavioral_primitives": [
     "executor",
@@ -43,7 +47,13 @@
     "Bash(git diff:*)",
     "Bash(git status:*)",
     "Bash(npx vitest:*)",
-    "Bash(npx tsc:*)"
+    "Bash(npx tsc:*)",
+    "Bash(wc:*)",
+    "Bash(sed:*)",
+    "Bash(head:*)",
+    "Bash(tail:*)",
+    "Bash(cat:*)",
+    "Bash(ls:*)"
   ],
   "model_tier": "premium",
   "max_tool_calls": 150,

package/dist/src/cli.d.ts

@@ -31,7 +31,7 @@ export interface CliIO {
     /** Injected for tests. Production reads stdin for `--input -`. */
     stdin?: () => string;
 }
-export declare const USAGE = "coltrane 0.14.4\n\n  coltrane validate                     load the genome; exit non-zero on load errors\n  coltrane dispatch <standard>          run a standard\n  coltrane monitor <gig-id>             report a gig's progress\n  coltrane logs <gig-id>                per-chair logs for a gig\n  coltrane abort <gig-id>               stop a running gig\n  coltrane trace <output-id>            walk an output's provenance\n  coltrane simulate <standard>          cost/shape a standard without running it\n  coltrane health                       engine + store health\n  coltrane serve                        run the MCP server on stdio\n  coltrane enqueue <standard>           queue a gig on the LOCAL file queue (no store, no key)\n                                        (env: COLTRANE_QUEUE_DIR \u2014 its absence is the whole\n                                         difference between local and hosted)\n  coltrane work                         claim one queued gig from the org store and run it\n  coltrane work --check                  report whether this box's drain environment is configured\n                                        and exit without claiming (0 ready, 1 not ready)\n                                        (env: COLTRANE_STORE_URL, COLTRANE_STORE_ANON,\n                                         COLTRANE_AGENT_TOKEN; results drain via\n                                         COLTRANE_DRAIN_URL + COLTRANE_DRAIN_KEY;\n                                         checkpoints under COLTRANE_WORKER_CHECKPOINTS,\n                                         default ~/.coltrane/worker-checkpoints;\n                                         exit 0 complete or parked, 1 failed, 3 queue empty)\n\nOptions\n  --input <json|@file|->                dispatch payload; @file reads a file, - reads stdin\n  --depth <skim|standard|deep>          tighten the per-chair turn cap\n  --budget <dollars>                    per-gig ceiling; the run stops when it is gone\n  --reuse                               allow chair-level reuse of prior sealed outputs\n  --resume <gig-id>                     continue a gig that died mid-pipeline\n  --approve <role>=<json|@file>         a human chair's verdict; repeat once per chair\n  --as <name>                           who is approving; sealed as the verdict's author\n  --wait                                block until the run finishes\n  --follow                              poll until the gig reaches a terminal state\n  --direction <upstream|downstream|both>  for trace\n  --json                                print the raw result to stdout\n  --genome <path>                       genome root (default: $COLTRANE_GENOME or cwd)\n  --help, --version\n\nA dispatch that reaches a chair a HUMAN holds parks: it names the waiting chair and exits 0,\nbecause a gig waiting on a person is not a failed gig. Approve it on the resume \u2014\n\n  coltrane dispatch <standard> --resume <gig> \\\n      --approve approve=@verdict.json --as eugene\n\n--input is NOT required on an approve-only resume: when every remaining chair is human the\ncheckpoint's recorded payload stands and the omission inherits it. If you DO pass --input it is\nchecked against the checkpoint, and a disagreement still refuses the resume.\n";
+export declare const USAGE = "coltrane 0.14.6\n\n  coltrane validate                     load the genome; exit non-zero on load errors\n  coltrane dispatch <standard>          run a standard\n  coltrane monitor <gig-id>             report a gig's progress\n  coltrane logs <gig-id>                per-chair logs for a gig\n  coltrane abort <gig-id>               stop a running gig\n  coltrane trace <output-id>            walk an output's provenance\n  coltrane simulate <standard>          cost/shape a standard without running it\n  coltrane health                       engine + store health\n  coltrane serve                        run the MCP server on stdio\n  coltrane enqueue <standard>           queue a gig on the LOCAL file queue (no store, no key)\n                                        (env: COLTRANE_QUEUE_DIR \u2014 its absence is the whole\n                                         difference between local and hosted)\n  coltrane work                         claim one queued gig from the org store and run it\n  coltrane work --check                  report whether this box's drain environment is configured\n                                        and exit without claiming (0 ready, 1 not ready)\n                                        (env: COLTRANE_STORE_URL, COLTRANE_STORE_ANON,\n                                         COLTRANE_AGENT_TOKEN; results drain via\n                                         COLTRANE_DRAIN_URL + COLTRANE_DRAIN_KEY;\n                                         checkpoints under COLTRANE_WORKER_CHECKPOINTS,\n                                         default ~/.coltrane/worker-checkpoints;\n                                         exit 0 complete or parked, 1 failed, 3 queue empty)\n\nOptions\n  --input <json|@file|->                dispatch payload; @file reads a file, - reads stdin\n  --depth <skim|standard|deep>          tighten the per-chair turn cap\n  --budget <dollars>                    per-gig ceiling; the run stops when it is gone\n  --reuse                               allow chair-level reuse of prior sealed outputs\n  --resume <gig-id>                     continue a gig that died mid-pipeline\n  --approve <role>=<json|@file>         a human chair's verdict; repeat once per chair\n  --as <name>                           who is approving; sealed as the verdict's author\n  --wait                                block until the run finishes\n  --follow                              poll until the gig reaches a terminal state\n  --direction <upstream|downstream|both>  for trace\n  --json                                print the raw result to stdout\n  --genome <path>                       genome root (default: $COLTRANE_GENOME or cwd)\n  --help, --version\n\nA dispatch that reaches a chair a HUMAN holds parks: it names the waiting chair and exits 0,\nbecause a gig waiting on a person is not a failed gig. Approve it on the resume \u2014\n\n  coltrane dispatch <standard> --resume <gig> \\\n      --approve approve=@verdict.json --as eugene\n\n--input is NOT required on an approve-only resume: when every remaining chair is human the\ncheckpoint's recorded payload stands and the omission inherits it. If you DO pass --input it is\nchecked against the checkpoint, and a disagreement still refuses the resume.\n";
 interface Parsed {
     cmd: string | undefined;
     positional: string[];

package/dist/src/version.d.ts

@@ -1,5 +1,5 @@
 /** Engine semver. Keep in lockstep with package.json `version` (enforced by test). */
-export declare const COLTRANE_VERSION = "0.14.4";
+export declare const COLTRANE_VERSION = "0.14.6";
 /**
  * The commit this engine checkout is sitting on, or null when it can't be determined.
  *

package/dist/src/version.js

@@ -17,7 +17,7 @@ import { existsSync, readFileSync, statSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 /** Engine semver. Keep in lockstep with package.json `version` (enforced by test). */
-export const COLTRANE_VERSION = "0.14.4";
+export const COLTRANE_VERSION = "0.14.6";
 /**
  * The commit this engine checkout is sitting on, or null when it can't be determined.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eir-labs/coltrane",
-  "version": "0.14.4",
+  "version": "0.14.6",
   "description": "A methodology engine \u2014 a typed substrate for defining agents, composing multi-phase standards, dispatching gigs, and sealing every output to a content-addressed ledger. Ships as an MCP server.",
   "type": "module",
   "license": "Apache-2.0",

package/standards/software-change-pr-v1.json

@@ -25,7 +25,8 @@
             "change-context"
           ],
           "optional_outputs": [],
-          "required_skills": []
+          "required_skills": [],
+          "turn_reserve": 12
         }
       ]
     },
@@ -45,7 +46,8 @@
             "change-decision"
           ],
           "optional_outputs": [],
-          "required_skills": []
+          "required_skills": [],
+          "turn_reserve": 8
         }
       ]
     },
@@ -70,7 +72,8 @@
           "required_skills": [],
           "preferred_skills": [
             "structure-conformance"
-          ]
+          ],
+          "turn_reserve": 8
         }
       ]
     },
@@ -115,7 +118,8 @@
             "change-set"
           ],
           "optional_outputs": [],
-          "required_skills": []
+          "required_skills": [],
+          "turn_reserve": 14
         }
       ]
     },
@@ -139,7 +143,8 @@
             "change-verdict"
           ],
           "optional_outputs": [],
-          "required_skills": []
+          "required_skills": [],
+          "turn_reserve": 10
         }
       ]
     },
@@ -163,7 +168,8 @@
             "pull-request"
           ],
           "optional_outputs": [],
-          "required_skills": []
+          "required_skills": [],
+          "turn_reserve": 8
         }
       ]
     }
@@ -178,5 +184,6 @@
     "change-verdict",
     "pull-request"
   ],
-  "description": "Governed dev loop, RED-first: context → decision → plan → SEALED RED LAWS → build → verify → PR. draft-laws seats red-spec-drafter (holds tests/**, cannot reach src/) and its sealed red-spec is a required input of write-change, verify-change and publish-pr — so the builder cannot begin before the laws exist, and the verifier checks every sealed law is present, unmodified and green."
+  "description": "Governed dev loop, RED-first: context → decision → plan → SEALED RED LAWS → build → verify → PR. draft-laws seats red-spec-drafter (holds tests/**, cannot reach src/) and its sealed red-spec is a required input of write-change, verify-change and publish-pr. Every chair carries a turn_reserve so a seat that spends its budget gathering can still close out and seal.",
+  "reserve_pool": 60
 }