@gitroll/tacitt-cli 0.6.14 → 0.6.15

package/dist/{src-B3il9x5F.mjs → src-CHy3-siB.mjs}

@@ -1,5 +1,5 @@
-import { $ as createCodePointIndex, A as bLegacyBindings, B as bIssue, Bt as reviewTermsResultSchema, C as validateBReview, Ct as hideConfirmSchema, Dt as cardAnswerActionSchema, E as validateBUnit, Et as journeyConfigurationSchema, F as bLiterals, G as bReviewSubmissionSchema, Gt as termTypes, H as unownedBObligations, Ht as termOverrideValueSchema, I as uncoveredBObligations, In as createStaticProcessor, J as bAnchorKey, Jt as sessionPeriodSchema, K as bSessionDecisionSchema, Kt as deselectOutsidePeriod, L as indexBRanges, Ln as staticDefaults, Lt as emptyReviewCorrectionSchema, M as semanticFindingSchema, Mn as inspectionSemanticVersions, Mt as packageConfirmActionSchema, N as bLiteralAdmitted, Nt as privacyResolveSchema, O as bDuplicateMirror, Ot as cardsConfirmActionSchema, P as bLiteralTerms, Pn as gapReasons, Pt as privacyTermKey, Q as codePointSlice, R as bAdoptedObligations, Rn as staticOptions, S as validateBClassification, T as validateBFields, Tt as hidePlanResourceSchema, U as bRepresentationSchema, Un as cleanupImplementationVersion, Ut as termTypeInfo, V as bOverlaps, Vt as termAssessmentSchema, W as bRetainedGroupSchema, Wn as entityDictionaryVersion, Wt as termTypeSchema, X as bDigest, Xt as journeyProfileAddressActionSchema, Y as bEvidenceReader, Yt as emptyJourneyProfile, Z as codePointLength, Zt as journeyProfileLinksActionSchema, _ as reviewAlignmentInputSchema, _n as inventorySchema, _r as scalarBefore, _t as reviewInterruptionSchema, an as ApplicationError, at as bMethod, b as validateReviewAlignment, bt as delegatedDecisionSchema, c as reviewBatchSchema, cr as detectStatic, ct as journeyChoiceSchema, d as reviewSubmitSchema, dn as reviewFamilies, dt as journeyIdSchema, er as validateProfile, et as subtractBRanges, f as textDigest, fn as sourceGraph, ft as journeyKindSchema, g as reviewAlignmentAuditSchema, gn as fileIdentitySchema, gr as scalarAfter, gt as nativeJourneySchema, hn as sourceSnapshotId, ht as journeyWorkTypeSchema, in as classificationTitleMaskSchema, ir as copyData, it as bIdSchema, j as bUnitFragments, jn as currentDetectorVersion, jt as emptyJourneyPrivacy, kt as cardsSubmitSchema, l as reviewChunkSchema, ln as familyNeedsReview, lt as journeyDigestSchema, m as findingReferenceKey, mn as observeSource, mt as journeyProjectTypeSchema, nn as respondProfileLinks, nt as bAnchorSchema, o as compileBFindings, on as UnfinishedJourneyError, ot as consentedWithoutAccount, p as validateReview, pn as sourceKey, pr as createEntityMatcher, pt as journeyPreferenceScopeSchema, q as bTermSchema, rr as validatePlan, rt as bCountSchema, s as reviewBatchChunks, sn as safeCode, st as journeyAccessSchema, tr as orderProfile, u as reviewDigest, un as familySelected, ur as staticCategories, ut as journeyExceptionSchema, v as reviewAlignmentSchema, vr as defaultDetectionLimits, vt as journeyGuidanceSchema, w as createBAnalysisUnits, wt as hidePlanInputSchema, xn as nativeSourceIdentitySchema, xt as journeyDescribeSchema, y as reviewFindingsDigest, yn as sourcePartSchema, yt as journeyInstructionInputSchema, zt as reviewTermsInputSchema } from "./locate-CP2t26j2.mjs";
-import { ZodError, z } from "zod";
+import { $ as createCodePointIndex, A as bLegacyBindings, B as bIssue, Bt as reviewTermsResultSchema, C as validateBReview, Ct as hideConfirmSchema, Dt as cardAnswerActionSchema, E as validateBUnit, Et as journeyConfigurationSchema, F as bLiterals, G as bReviewSubmissionSchema, Gt as termTypes, H as unownedBObligations, Ht as termOverrideValueSchema, I as uncoveredBObligations, In as createStaticProcessor, J as bAnchorKey, Jt as sessionPeriodSchema, K as bSessionDecisionSchema, Kt as deselectOutsidePeriod, L as indexBRanges, Ln as staticDefaults, Lt as emptyReviewCorrectionSchema, M as semanticFindingSchema, Mn as inspectionSemanticVersions, Mt as packageConfirmActionSchema, N as bLiteralAdmitted, Nt as privacyResolveSchema, O as bDuplicateMirror, Ot as cardsConfirmActionSchema, P as bLiteralTerms, Pn as gapReasons, Pt as privacyTermKey, Q as codePointSlice, R as bAdoptedObligations, Rn as staticOptions, S as validateBClassification, T as validateBFields, Tt as hidePlanResourceSchema, U as bRepresentationSchema, Un as cleanupImplementationVersion, Ut as termTypeInfo, V as bOverlaps, Vt as termAssessmentSchema, W as bRetainedGroupSchema, Wn as entityDictionaryVersion, Wt as termTypeSchema, X as bDigest, Xt as journeyProfileAddressActionSchema, Y as bEvidenceReader, Yt as emptyJourneyProfile, Z as codePointLength, Zt as journeyProfileLinksActionSchema, _ as reviewAlignmentInputSchema, _n as inventorySchema, _r as scalarBefore, _t as reviewInterruptionSchema, an as ApplicationError, at as bMethod, b as validateReviewAlignment, bt as delegatedDecisionSchema, c as reviewBatchSchema, cr as detectStatic, ct as journeyChoiceSchema, d as reviewSubmitSchema, dn as reviewFamilies, dt as journeyIdSchema, er as validateProfile, et as subtractBRanges, f as textDigest, fn as sourceGraph, ft as journeyKindSchema, g as reviewAlignmentAuditSchema, gn as fileIdentitySchema, gr as scalarAfter, gt as nativeJourneySchema, hn as sourceSnapshotId, ht as journeyWorkTypeSchema, in as classificationTitleMaskSchema, ir as copyData, it as bIdSchema, j as bUnitFragments, jn as currentDetectorVersion, jt as emptyJourneyPrivacy, kt as cardsSubmitSchema, l as reviewChunkSchema, ln as familyNeedsReview, lt as journeyDigestSchema, m as findingReferenceKey, mn as observeSource, mt as journeyProjectTypeSchema, nn as respondProfileLinks, nt as bAnchorSchema, o as compileBFindings, on as UnfinishedJourneyError, ot as consentedWithoutAccount, p as validateReview, pn as sourceKey, pr as createEntityMatcher, pt as journeyPreferenceScopeSchema, q as bTermSchema, rr as validatePlan, rt as bCountSchema, s as reviewBatchChunks, sn as safeCode, st as journeyAccessSchema, tr as orderProfile, u as reviewDigest, un as familySelected, ur as staticCategories, ut as journeyExceptionSchema, v as reviewAlignmentSchema, vr as defaultDetectionLimits, vt as journeyGuidanceSchema, w as createBAnalysisUnits, wt as hidePlanInputSchema, xn as nativeSourceIdentitySchema, xt as journeyDescribeSchema, y as reviewFindingsDigest, yn as sourcePartSchema, yt as journeyInstructionInputSchema, zt as reviewTermsInputSchema } from "./locate-LpCex6Xj.mjs";
+import { z } from "zod";
 import { createHash, createHmac, createSecretKey, randomUUID } from "node:crypto";
 import { setTimeout as setTimeout$1 } from "node:timers/promises";
 //#region packages/application/src/processing/model.ts
@@ -2321,7 +2321,12 @@ const classificationKnownProjectSchema = z.object({
 	repositoryName: safeText,
 	workspaceIds: z.array(z.string().min(1).max(128)).min(1),
 	rootSessionIds: z.array(z.string().min(1).max(128)),
-	titles: z.array(safeText).max(5)
+	titles: z.array(safeText).max(5),
+	/**
+	* ADR 0276 slice H: the one rebuilt account Work whose roots share this identity, given only
+	* when the account has never listed a key of these roots. The Skill joins them to it.
+	*/
+	accountWorkId: journeyIdSchema.optional()
 }).strict();
 const classificationAssignmentSchema = z.object({
 	rootSessionId: z.string().min(1).max(128),
@@ -3097,20 +3102,33 @@ const journeyClassificationReadSchema = z.object({
 	/** Classification-only prefix; omitted callers retain full capture verification. */
 	limit: z.number().int().min(1).max(8).optional()
 }).strict();
+const classificationRootsSchema = z.array(z.string().min(1).max(128)).min(1).max(1e4);
+/** A new Work the classifier names and describes. */
+const classificationProjectItemSchema = z.object({
+	projectName: z.string().trim().min(1).max(240),
+	description: z.string().trim().min(1).max(1e3),
+	projectType: journeyProjectTypeSchema,
+	rootSessionIds: classificationRootsSchema,
+	recommendation: z.object({
+		access: journeyAccessSchema,
+		reason: z.string().trim().min(1).max(200)
+	}).strict()
+}).strict();
+/**
+* ADR 0276 slice H: unplaced roots the account has never listed join one rebuilt account Work,
+* which keeps its id, title, access and marker. It carries no description, project type or
+* recommendation (Q6).
+*/
+const classificationAccountJoinSchema = z.object({
+	accountWorkId: journeyIdSchema,
+	rootSessionIds: classificationRootsSchema
+}).strict();
+const isClassificationAccountJoin = (item) => "accountWorkId" in item;
 const journeyClassificationSubmitSchema = z.object({
 	journeyId: journeyIdSchema,
 	expectedRevision: count$10,
 	idempotencyKey: journeyIdSchema,
-	items: z.array(z.object({
-		projectName: z.string().trim().min(1).max(240),
-		description: z.string().trim().min(1).max(1e3),
-		projectType: journeyProjectTypeSchema,
-		rootSessionIds: z.array(z.string().min(1).max(128)).min(1).max(1e4),
-		recommendation: z.object({
-			access: journeyAccessSchema,
-			reason: z.string().trim().min(1).max(200)
-		}).strict()
-	}).strict()).min(1).max(1e3),
+	items: z.array(z.union([classificationProjectItemSchema, classificationAccountJoinSchema])).min(1).max(1e3),
 	/**
 	* E2: roots classification has not grouped yet. They wait in one unread Work while the
 	* listed Works are confirmed and read; a later submission without them completes it.
@@ -5580,10 +5598,13 @@ const classificationCommitSchema = z.object({
 	accountSubject: z.string().min(1).max(128).optional(),
 	/** A failed or mismatched late read (ADR 0277 section 5). */
 	accountRead: z.enum(["signed-out", "unavailable"]).optional(),
-	items: z.array(journeyClassificationSubmitSchema.shape.items.element.extend({
+	/** Empty when every classified root joins a rebuilt account Work. */
+	items: z.array(classificationProjectItemSchema.extend({
 		workId: journeyIdSchema,
 		workspaceIds: workspaces
-	})).min(1).max(1e3),
+	})).max(1e3),
+	/** ADR 0276 slice H: roots added to a rebuilt account Work, one entry per Work. */
+	accountJoins: z.array(classificationAccountJoinSchema.extend({ workspaceIds: workspaces })).max(1e3).optional(),
 	pending: z.object({
 		workId: journeyIdSchema,
 		rootSessionIds: z.array(z.string().min(1).max(128)).min(1).max(1e4),
@@ -5610,10 +5631,30 @@ function classificationPartition(state) {
 function sameAccessRecord(work, other) {
 	return work.access === other?.access && work.accessOrigin === other.accessOrigin && work.accessConfirmed === other.accessConfirmed && work.accessChoice?.channel === other.accessChoice?.channel && work.accessChoice?.at === other.accessChoice?.at && work.accountAccessConflict === other.accountAccessConflict;
 }
+/**
+* ADR 0276 slice H: the rebuilt Work takes the joined roots and is read again with them. Its
+* access value never changes. Neither an account proof nor a person's Public choice covered the
+* new sessions, so Public becomes a suggestion again (D5, agent default); Private stays confirmed.
+*/
+function joinedAccountWork(work, join) {
+	const scan = resetWorkScan(work);
+	const { accessChoice: _choice, ...unchosen } = scan;
+	return {
+		...work.access === "public" ? {
+			...unchosen,
+			accessConfirmed: false
+		} : scan,
+		rootSessionIds: [...work.rootSessionIds, ...join.rootSessionIds],
+		sourceWorkspaceIds: [.../* @__PURE__ */ new Set([...work.sourceWorkspaceIds, ...join.workspaceIds])]
+	};
+}
 /** The proposal's Works built from the given state's current Works (E2). */
 function classificationWorks(state, plan) {
 	const late = plan.late;
-	const works = state.works.filter((work) => work.accountWork);
+	const works = state.works.filter((work) => work.accountWork).map((work) => {
+		const join = plan.accountJoins?.find((item) => item.accountWorkId === work.id);
+		return join ? joinedAccountWork(work, join) : work;
+	});
 	for (const item of plan.items) {
 		const existing = state.works.find((work) => work.placement !== "classifying" && !work.accountWork && work.rootSessionIds.length === item.rootSessionIds.length && work.rootSessionIds.every((root) => item.rootSessionIds.includes(root)));
 		const owners = late ? state.works.filter((work) => work.placement === "placed" && work.rootSessionIds.some((root) => item.rootSessionIds.includes(root))) : [];
@@ -13820,8 +13861,7 @@ function reconcileBSession(fields, units, reviews, signal = new AbortController(
 	validateBFields(fields);
 	const first = units[0];
 	if (!first) throw new ApplicationError("INCOMPLETE_REVIEW");
-	const rebuild = (lineContext) => createBAnalysisUnits({
-		lineContext,
+	const expected = createBAnalysisUnits({
 		sessionId: first.sessionId,
 		snapshotId: first.snapshotId,
 		inputRevision: first.inputRevision,
@@ -13831,13 +13871,6 @@ function reconcileBSession(fields, units, reviews, signal = new AbortController(
 		cores: units.toSorted((left, right) => left.ordinal - right.ordinal).map((unit) => unit.coreCodePoints)
 	});
 	const byId = new Map(units.map((unit) => [unit.id, unit]));
-	let current;
-	try {
-		current = rebuild(true);
-	} catch (error) {
-		if (!(error instanceof ZodError) && !(error instanceof ApplicationError && error.code === "INCOMPLETE_REVIEW")) throw error;
-	}
-	const expected = current?.every((unit) => byId.get(unit.id)?.digest === unit.digest) ? current : rebuild(false);
 	if (byId.size !== units.length || expected.length !== units.length || expected.some((unit) => byId.get(unit.id)?.digest !== unit.digest)) throw new ApplicationError("INCOMPLETE_REVIEW");
 	const seen = /* @__PURE__ */ new Set();
 	const validated = reviews.map((review) => {
@@ -14369,4 +14402,4 @@ function equivalenceDuplicates(batch) {
 	return bindings.sort();
 }
 //#endregion
-export { validateDetectionSummary as $, hideKeyId as $n, sendReceiptSchema as $r, journeyPlaceSchema as $t, renewBeforeMs as A, selectionSchema as Ai, scanExclusionResourceSchema as An, nativeStartSchema as Ar, validateAttemptAppend as At, createApplication as B, selectFrozenConfiguration as Bi, journeySearchResultSchema as Bn, sendsOnNextAdvance as Br, newJourneyWork as Bt, rebindReviewOverlay as C, bMaskedHits as Ci, scanAliasResourceSchema as Cn, assertJourneyPrivacyReady as Cr, sendActionSchema as Ct, staticallyHiddenFindings as D, commandSchema as Di, scanGitSeedsId as Dn, nativeEventsSchema as Dr, sendStartSchema as Dt, guardedFindingText as E, replacementMarkerPattern as Ei, scanSessionResourceSchema as En, rememberedHideValues as Er, sendRequestSchema as Et, readAccountAvatarUrl as F, recommendParallelism as Fi, journeyInventoryReadSchema as Fn, hostDrives as Fr, classificationCommitSchema as Ft, validateInspectionRequest as G, journeyEventSchema as Gn, staticReviewDigest as Gr, hideFinishSchema as Gt, inspectionStartSchema as H, searchScopeDigest as Hn, nativeAdapterVersions as Hr, journeyContextQuerySchema as Ht, storedCredentialSchema as I, approvedTreatmentSchema as Ii, journeyInventorySchema as In, itemAtPassport as Ir, classificationPartition as It, validateInspectionFence as J, readConfirmedHideChange as Jn, agentSourcePathSegment as Jr, sendOutputQuerySchema as Jt, inspectionQuerySchema as K, confirmedHideAdditions as Kn, staticSessionId as Kr, hidePublishSchema as Kt, sourceIdentityEvidence as L, effectiveTreatmentSchema as Li, journeyPreparationProgressSchema as Ln, obsoleteJourney as Lr, classificationWorks as Lt, deviceAuthorizationSchema as M, producerVersion as Mi, resolveSourceSelection as Mn, advanceStepsSend as Mr, journeyBatchReadSchema as Mt, deviceProfileScopeSchema as N, stateSchema as Ni, projectPreparationProgress as Nn, awaitingPassport as Nr, journeyReviewStorageQuerySchema as Nt, createAccount as O, packageCommandSchema as Oi, scanGitSeedsResource as On, nativeGetSchema as Or, settleCorrections as Ot, profileUrlMatchesIdentity as P, sourceChangePolicy as Pi, journeyInventoryQuerySchema as Pn, currentJourneyAdapters as Pr, applyClassificationProposal as Pt, validateInspectionContribution as Q, addHideIndexTokens as Qn, sendArtifactSchema as Qr, journeyIsolateSchema as Qt, withSourceEvidence as R, defaultScopedSettings as Ri, accountReadStop as Rn, sendOwesPassport as Rr, retireScanGeneration as Rt, rebindReviewAlignment as S, bExceptionRanges as Si, planBRepair as Sn, applyCardAnswers as Sr, replaceSensitiveTermsSchema as St, reviewBatchReuse as T, bWordBounded as Ti, scanPreparationDigest as Tn, reconcileReaderKeeps as Tr, sendPrepareSchema as Tt, validateInspectionBatch as U, journeyCommitResultSchema as Un, mergePrivacyTerms as Ur, journeyContextSchema as Ut, inspectionCancelSchema as V, staticCatalogRef as Vi, journeySearchSaveSchema as Vn, metadataProcessingVersion as Vr, reviewCompileSchema as Vt, validateInspectionBatches as W, journeyCommitSchema as Wn, hasCurrentStaticReview as Wr, hideBeginSchema as Wt, validateInspectionInputs as X, settleConfirmedHides as Xn, agentSourcesSchema as Xr, journeyResourceQuerySchema as Xt, validateInspectionHead as Y, renderedHideValue as Yn, agentSourceSchema as Yr, sendOutputSchema as Yt, validateInspectionQuery as Z, termHideAdditions as Zn, journeySendSchema as Zr, journeyResourceSchema as Zt, changeJourney as _, dictionaryHides as _i, reviewRepairInputSchema as _n, journeyPreviewSchema as _r, manualUploadStartSchema as _t, bCrossSegmentReviewSchema as a, isClassifying as ai, sessionReconcileResultSchema as an, workCorrectionBinding as ar, appendSensitiveTerms as at, isGenericPublicTerm as b, syncTermGroups as bi, bReviewDigest as bn, displayedScopeDigest as br, maximumTermsFileBytes as bt, reconstructBFields as c, isSelectedWork as ci, sessionRereadResourceSchema as cn, preparationPermissionSchema as cr, maximumAgentSetupSessions as ct, resolveGroupSplit as d, unfinishedPackagingCode as di, sessionReviewResourceSchema as dn, preparationStateSchema as dr, validateFailureLocation as dt, sendReplaceResultSchema as ei, sortingApplySchema as en, maximumHideIndexTokens as er, inspectionInputs as et, selectedValueMembers as f, withReadingProgress as fi, sessionReviewStatusSchema as fn, preparationUpdateSchema as fr, manualUploadActionSchema as ft, semanticGroupKey as g, confirmedHideTerms as gi, reviewCandidateResourceSchema as gn, journeyFindingsSchema as gr, manualUploadSchema as gt, hideScopeDigest as h, confirmedHideKinds as hi, reviewCandidateInputSchema as hn, journeyFindingImpactSchema as hr, manualUploadPrepareSchema as ht, validateBCrossSegmentReview as i, hasCompleteWorkDescription as ii, sessionReconcileInputSchema as in, workPrivacyDecisions as ir, reviewInventory as it, accountProfileSchema as j, gitMetadataBudgetBytes as ji, validateScanExclusion as jn, retryReviewActionSchema as jr, journeyGuidance as jt, renew as k, selectionBatchSchema as ki, verifiedScanGitSeeds as kn, nativeRespondSchema as kr, attemptBudgetCodePoints as kt, chooseCheapPlacement as l, isSkippedWork as li, sessionReviewInputSchema as ln, preparationSettlementSchema as lr, artifactFailureDetailSchema as lt, activeJourneyTerms as m, confirmedHideKey as mi, sessionUsefulnessResourceSchema as mn, journeyClassificationSessionsSchema as mr, manualUploadChoiceSchema as mt, scanBatchEquivalenceDigest as n, sendSessionUploadSchema as ni, reviewAttemptsQuerySchema as nn, retireWorkDescription as nr, settingsQuerySchema as nt, bRereadDigest as o, isIncludedWork as oi, sessionReconciliationResourceSchema as on, emptyPreparationFacts as or, classifyAgentSetup as ot, splitSelectorValues as p, confirmedHideGroupIds as pi, sessionUsefulnessInputSchema as pn, validatePreparationFacts as pr, manualUploadBindingSchema as pt, validateInspectionClaim as q, confirmedHideDeltaSchema as qn, staticSessionResourceSchema as qr, journeyPolicyRespondSchema as qt, locateTermEvidence as r, sendSettingsSchema as ri, reviewAttemptsResultSchema as rn, workDecisionDigest as rr, readWorkspaceOutcomes as rt, reconcileBSession as s, isReadingComplete as si, sessionRereadInputSchema as sn, preparationBeginSchema as sr, defaultAgentSetupInclusion as st, scanBatchContextDigest as t, sendResolutionSchema as ti, reviewAttemptResourceSchema as tn, packHideIndex as tr, settingsBatchSchema as tt, reviseGroupMembership as u, selectedWorks as ui, sessionReviewQuerySchema as un, preparationStartSchema as ur, resolveFailureLocation as ut, projectJourneyInventory as v, journeyConfirmedHides as vi, reviewRepairResourceSchema as vn, journeyRenderInputSchema as vr, candidateSortAvailable as vt, rebindReviewSubmit as w, bTermMatcher as wi, scanCanonicalResourceSchema as wn, privacyDecisionDigest as wr, sendChoiceSchema as wt, bReviewScope as x, bContainment as xi, mergeBRepair as xn, requestedScope as xr, normalizeSensitiveTerms as xt, preparationScope as y, maskedHitsStale as yi, reviewTransportBytes as yn, journeyRenderSchema as yr, emptyTermsRevision as yt, agentSetupKey as z, freezeConfiguration as zi, applyClassification as zn, sendReachedPassport as zr, isolatedWorkId as zt };
+export { validateDetectionSummary as $, hideKeyId as $n, sendArtifactSchema as $r, journeyPlaceSchema as $t, renewBeforeMs as A, selectionBatchSchema as Ai, scanExclusionResourceSchema as An, nativeRespondSchema as Ar, validateAttemptAppend as At, createApplication as B, freezeConfiguration as Bi, journeySearchResultSchema as Bn, sendReachedPassport as Br, newJourneyWork as Bt, rebindReviewOverlay as C, bExceptionRanges as Ci, scanAliasResourceSchema as Cn, applyCardAnswers as Cr, sendActionSchema as Ct, staticallyHiddenFindings as D, replacementMarkerPattern as Di, scanGitSeedsId as Dn, rememberedHideValues as Dr, sendStartSchema as Dt, guardedFindingText as E, bWordBounded as Ei, scanSessionResourceSchema as En, reconcileReaderKeeps as Er, sendRequestSchema as Et, readAccountAvatarUrl as F, sourceChangePolicy as Fi, journeyInventoryReadSchema as Fn, currentJourneyAdapters as Fr, classificationCommitSchema as Ft, validateInspectionRequest as G, journeyEventSchema as Gn, hasCurrentStaticReview as Gr, hideFinishSchema as Gt, inspectionStartSchema as H, staticCatalogRef as Hi, searchScopeDigest as Hn, metadataProcessingVersion as Hr, journeyContextQuerySchema as Ht, storedCredentialSchema as I, recommendParallelism as Ii, journeyInventorySchema as In, hostDrives as Ir, classificationPartition as It, validateInspectionFence as J, readConfirmedHideChange as Jn, staticSessionResourceSchema as Jr, sendOutputQuerySchema as Jt, inspectionQuerySchema as K, confirmedHideAdditions as Kn, staticReviewDigest as Kr, hidePublishSchema as Kt, sourceIdentityEvidence as L, approvedTreatmentSchema as Li, journeyPreparationProgressSchema as Ln, itemAtPassport as Lr, classificationWorks as Lt, deviceAuthorizationSchema as M, gitMetadataBudgetBytes as Mi, resolveSourceSelection as Mn, retryReviewActionSchema as Mr, journeyBatchReadSchema as Mt, deviceProfileScopeSchema as N, producerVersion as Ni, projectPreparationProgress as Nn, advanceStepsSend as Nr, journeyReviewStorageQuerySchema as Nt, createAccount as O, commandSchema as Oi, scanGitSeedsResource as On, nativeEventsSchema as Or, settleCorrections as Ot, profileUrlMatchesIdentity as P, stateSchema as Pi, journeyInventoryQuerySchema as Pn, awaitingPassport as Pr, applyClassificationProposal as Pt, validateInspectionContribution as Q, addHideIndexTokens as Qn, journeySendSchema as Qr, journeyIsolateSchema as Qt, withSourceEvidence as R, effectiveTreatmentSchema as Ri, accountReadStop as Rn, obsoleteJourney as Rr, retireScanGeneration as Rt, rebindReviewAlignment as S, bContainment as Si, planBRepair as Sn, requestedScope as Sr, replaceSensitiveTermsSchema as St, reviewBatchReuse as T, bTermMatcher as Ti, scanPreparationDigest as Tn, privacyDecisionDigest as Tr, sendPrepareSchema as Tt, validateInspectionBatch as U, journeyCommitResultSchema as Un, nativeAdapterVersions as Ur, journeyContextSchema as Ut, inspectionCancelSchema as V, selectFrozenConfiguration as Vi, journeySearchSaveSchema as Vn, sendsOnNextAdvance as Vr, reviewCompileSchema as Vt, validateInspectionBatches as W, journeyCommitSchema as Wn, mergePrivacyTerms as Wr, hideBeginSchema as Wt, validateInspectionInputs as X, settleConfirmedHides as Xn, agentSourceSchema as Xr, journeyResourceQuerySchema as Xt, validateInspectionHead as Y, renderedHideValue as Yn, agentSourcePathSegment as Yr, sendOutputSchema as Yt, validateInspectionQuery as Z, termHideAdditions as Zn, agentSourcesSchema as Zr, journeyResourceSchema as Zt, changeJourney as _, confirmedHideTerms as _i, reviewRepairInputSchema as _n, journeyFindingsSchema as _r, manualUploadStartSchema as _t, bCrossSegmentReviewSchema as a, hasCompleteWorkDescription as ai, sessionReconcileResultSchema as an, workCorrectionBinding as ar, appendSensitiveTerms as at, isGenericPublicTerm as b, maskedHitsStale as bi, bReviewDigest as bn, journeyRenderSchema as br, maximumTermsFileBytes as bt, reconstructBFields as c, isReadingComplete as ci, sessionRereadResourceSchema as cn, preparationPermissionSchema as cr, maximumAgentSetupSessions as ct, resolveGroupSplit as d, selectedWorks as di, sessionReviewResourceSchema as dn, preparationStateSchema as dr, validateFailureLocation as dt, sendReceiptSchema as ei, sortingApplySchema as en, maximumHideIndexTokens as er, inspectionInputs as et, selectedValueMembers as f, unfinishedPackagingCode as fi, sessionReviewStatusSchema as fn, preparationUpdateSchema as fr, manualUploadActionSchema as ft, semanticGroupKey as g, confirmedHideKinds as gi, reviewCandidateResourceSchema as gn, journeyFindingImpactSchema as gr, manualUploadSchema as gt, hideScopeDigest as h, confirmedHideKey as hi, reviewCandidateInputSchema as hn, journeyClassificationSessionsSchema as hr, manualUploadPrepareSchema as ht, validateBCrossSegmentReview as i, sendSettingsSchema as ii, sessionReconcileInputSchema as in, workPrivacyDecisions as ir, reviewInventory as it, accountProfileSchema as j, selectionSchema as ji, validateScanExclusion as jn, nativeStartSchema as jr, journeyGuidance as jt, renew as k, packageCommandSchema as ki, verifiedScanGitSeeds as kn, nativeGetSchema as kr, attemptBudgetCodePoints as kt, chooseCheapPlacement as l, isSelectedWork as li, sessionReviewInputSchema as ln, preparationSettlementSchema as lr, artifactFailureDetailSchema as lt, activeJourneyTerms as m, confirmedHideGroupIds as mi, sessionUsefulnessResourceSchema as mn, isClassificationAccountJoin as mr, manualUploadChoiceSchema as mt, scanBatchEquivalenceDigest as n, sendResolutionSchema as ni, reviewAttemptsQuerySchema as nn, retireWorkDescription as nr, settingsQuerySchema as nt, bRereadDigest as o, isClassifying as oi, sessionReconciliationResourceSchema as on, emptyPreparationFacts as or, classifyAgentSetup as ot, splitSelectorValues as p, withReadingProgress as pi, sessionUsefulnessInputSchema as pn, validatePreparationFacts as pr, manualUploadBindingSchema as pt, validateInspectionClaim as q, confirmedHideDeltaSchema as qn, staticSessionId as qr, journeyPolicyRespondSchema as qt, locateTermEvidence as r, sendSessionUploadSchema as ri, reviewAttemptsResultSchema as rn, workDecisionDigest as rr, readWorkspaceOutcomes as rt, reconcileBSession as s, isIncludedWork as si, sessionRereadInputSchema as sn, preparationBeginSchema as sr, defaultAgentSetupInclusion as st, scanBatchContextDigest as t, sendReplaceResultSchema as ti, reviewAttemptResourceSchema as tn, packHideIndex as tr, settingsBatchSchema as tt, reviseGroupMembership as u, isSkippedWork as ui, sessionReviewQuerySchema as un, preparationStartSchema as ur, resolveFailureLocation as ut, projectJourneyInventory as v, dictionaryHides as vi, reviewRepairResourceSchema as vn, journeyPreviewSchema as vr, candidateSortAvailable as vt, rebindReviewSubmit as w, bMaskedHits as wi, scanCanonicalResourceSchema as wn, assertJourneyPrivacyReady as wr, sendChoiceSchema as wt, bReviewScope as x, syncTermGroups as xi, mergeBRepair as xn, displayedScopeDigest as xr, normalizeSensitiveTerms as xt, preparationScope as y, journeyConfirmedHides as yi, reviewTransportBytes as yn, journeyRenderInputSchema as yr, emptyTermsRevision as yt, agentSetupKey as z, defaultScopedSettings as zi, applyClassification as zn, sendOwesPassport as zr, isolatedWorkId as zt };

package/dist/{src-CWMrGXJK.mjs → src-ikYI-1c5.mjs}

@@ -1,7 +1,7 @@
-import { $n as retainedMainTextNodes, Cr as processingSite, Fn as walkNativeFields, Hn as parseNativeRecord, Jn as nativeField, Xn as nativeText, Yn as nativeItems, ar as defaultLimits, br as declaredVersion, hn as sourceSnapshotId, mn as observeSource, qn as nativeBoolean, yr as ProcessingError } from "./locate-CP2t26j2.mjs";
-import { Hr as nativeAdapterVersions, it as reviewInventory, ji as gitMetadataBudgetBytes } from "./src-B3il9x5F.mjs";
-import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-ChHuVKoB.mjs";
-import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-CiJmV__5.mjs";
+import { $n as retainedMainTextNodes, Cr as processingSite, Fn as walkNativeFields, Hn as parseNativeRecord, Jn as nativeField, Xn as nativeText, Yn as nativeItems, ar as defaultLimits, br as declaredVersion, hn as sourceSnapshotId, mn as observeSource, qn as nativeBoolean, yr as ProcessingError } from "./locate-LpCex6Xj.mjs";
+import { Mi as gitMetadataBudgetBytes, Ur as nativeAdapterVersions, it as reviewInventory } from "./src-CHy3-siB.mjs";
+import { a as isRecord, i as errorCode, n as checkDiscoveryAbort, o as unresolvedMetadata, r as discoveryBounds, t as DiscoveryWarnings } from "./model-BEWsfkIU.mjs";
+import { c as previewLimits, d as checkOpenSource, f as checkSource, h as openSource, i as pageFits, l as previewSourceVersion, m as noSymlinks, p as fileSnapshot, r as previewHeapLimits, s as previewMessageSchema, u as createZstdFrameCheck } from "./run-P_uZgSYa.mjs";
 import { a as titleHintLimits, n as titleHeapLimits, o as titleInputSchema, r as decodeTitleError, s as titleReplySchema } from "./heap-1FYhGds4.mjs";
 import { constants } from "node:fs";
 import { access, constants as constants$1, lstat, open, opendir, readFile, readdir, realpath, stat } from "node:fs/promises";

package/dist/{src-CmvEJj46.mjs → src-sERffIem.mjs}

@@ -1,6 +1,6 @@
-import { $n as retainedMainTextNodes, An as bindInspection, Bn as sessionNonce, Cn as processNativeRecord, Cr as processingSite, D as bBindingCap, Dn as createSentenceContext, En as reviewRoles, Fn as walkNativeFields, Gn as nativeParserVersion, Hn as parseNativeRecord, Jn as nativeField, Kn as redactionImplementationVersion, Nn as createDetectionSummary, On as renderNative, Qn as frameRecords, Sn as withMandatoryCustomTerms, Sr as isProcessingCode, Tn as mainReviewRole, Un as cleanupImplementationVersion, Vn as projectNativeRecord, Wn as entityDictionaryVersion, X as bDigest, Xn as nativeText, Yn as nativeItems, Z as codePointLength, Zn as transformRecords, an as ApplicationError, ar as defaultLimits, cr as detectStatic, dn as reviewFamilies, dr as jsonSpans, er as validateProfile, f as textDigest, fr as agentContextLocation, hn as sourceSnapshotId, k as bDuplicateShift, kn as createSessionPreparation, nr as buildPlan, or as recordPointerLimits, pn as sourceKey, pr as createEntityMatcher, rr as validatePlan, sn as safeCode, sr as resolveLimits, u as reviewDigest, un as familySelected, vr as defaultDetectionLimits, w as createBAnalysisUnits, wn as projectNativeReviewInput, wr as siteFields, xn as nativeSourceIdentitySchema, xr as fail$1, yr as ProcessingError, zn as createReplacementKey } from "./locate-CP2t26j2.mjs";
-import { t as createZstdFrameCheck } from "./frame-CRm99088.mjs";
-import { Ei as replacementMarkerPattern, Ii as approvedTreatmentSchema, Jr as agentSourcePathSegment, L as sourceIdentityEvidence, Mn as resolveSourceSelection, Pi as sourceChangePolicy, R as withSourceEvidence, Si as bExceptionRanges, Ti as bWordBounded, Vi as staticCatalogRef, Vr as metadataProcessingVersion, Yr as agentSourceSchema, ot as classifyAgentSetup, st as defaultAgentSetupInclusion, xi as bContainment, z as agentSetupKey } from "./src-B3il9x5F.mjs";
+import { $n as retainedMainTextNodes, An as bindInspection, Bn as sessionNonce, Cn as processNativeRecord, Cr as processingSite, D as bBindingCap, Dn as createSentenceContext, En as reviewRoles, Fn as walkNativeFields, Gn as nativeParserVersion, Hn as parseNativeRecord, Jn as nativeField, Kn as redactionImplementationVersion, Nn as createDetectionSummary, On as renderNative, Qn as frameRecords, Sn as withMandatoryCustomTerms, Sr as isProcessingCode, Tn as mainReviewRole, Un as cleanupImplementationVersion, Vn as projectNativeRecord, Wn as entityDictionaryVersion, X as bDigest, Xn as nativeText, Yn as nativeItems, Z as codePointLength, Zn as transformRecords, an as ApplicationError, ar as defaultLimits, cr as detectStatic, dn as reviewFamilies, dr as jsonSpans, er as validateProfile, f as textDigest, fr as agentContextLocation, hn as sourceSnapshotId, k as bDuplicateShift, kn as createSessionPreparation, nr as buildPlan, or as recordPointerLimits, pn as sourceKey, pr as createEntityMatcher, rr as validatePlan, sn as safeCode, sr as resolveLimits, u as reviewDigest, un as familySelected, vr as defaultDetectionLimits, w as createBAnalysisUnits, wn as projectNativeReviewInput, wr as siteFields, xn as nativeSourceIdentitySchema, xr as fail$1, yr as ProcessingError, zn as createReplacementKey } from "./locate-LpCex6Xj.mjs";
+import { t as createZstdFrameCheck } from "./frame-0v_mLdvG.mjs";
+import { Ci as bExceptionRanges, Di as replacementMarkerPattern, Ei as bWordBounded, Fi as sourceChangePolicy, Hi as staticCatalogRef, Hr as metadataProcessingVersion, L as sourceIdentityEvidence, Li as approvedTreatmentSchema, Mn as resolveSourceSelection, R as withSourceEvidence, Si as bContainment, Xr as agentSourceSchema, Yr as agentSourcePathSegment, ot as classifyAgentSetup, st as defaultAgentSetupInclusion, z as agentSetupKey } from "./src-CHy3-siB.mjs";
 import { constants } from "node:fs";
 import { link, lstat, mkdir, open, readFile, readdir, realpath, rm, rmdir, stat, unlink } from "node:fs/promises";
 import { execFile, fork, spawn } from "node:child_process";
@@ -16623,32 +16623,10 @@ function reviewBatchBody(context, unit, ordinal) {
 		...duplicates.length ? { duplicates } : {}
 	};
 }
-/** Transport refinement keeps line/record boundaries and the hard long-line fallback. */
-function split(unit, parts) {
-	if (parts === 1) return [unit.coreCodePoints];
-	const target = Math.ceil(unit.coreCodePoints / parts);
-	const lengths = [];
-	let core = 0;
-	const take = (length) => {
-		if (core && core + length > target) {
-			lengths.push(core);
-			core = 0;
-		}
-		core += length;
-	};
-	for (const fragment of unit.fragments.filter((part) => part.core)) {
-		let line = 0;
-		for (const scalar of fragment.text) {
-			line++;
-			if (scalar === "\n" || line === 64e3) {
-				take(line);
-				line = 0;
-			}
-		}
-		if (line) take(line);
-	}
-	if (core) lengths.push(core);
-	return lengths;
+/** Near-equal cores that together keep the original core. */
+function split(core, parts) {
+	const count = Math.min(core, parts);
+	return Array.from({ length: count }, (_, index) => Math.floor(core / count) + (index < core % count ? 1 : 0));
 }
 function units(context, fields, ordinal, deduplicate, cores) {
 	return createBAnalysisUnits({
@@ -16657,7 +16635,6 @@ function units(context, fields, ordinal, deduplicate, cores) {
 		inputRevision: context.inputRevision,
 		fields,
 		deduplicate,
-		lineContext: true,
 		...cores ? { cores } : {}
 	}).map((unit, index) => {
 		const body = reviewBatchBody(context, unit, ordinal + index);
@@ -16677,7 +16654,7 @@ function settle(context, fields, ordinal, deduplicate) {
 	let bodies = units(context, fields, ordinal, deduplicate);
 	for (let round = 0; bodies.some((item) => !item.fits); round += 1) {
 		if (bodies.some(({ body, fits }) => !fits && new Set(body.unit.fragments.filter((part) => part.core).map((part) => part.fieldId)).size === 1) || round === 4) return void 0;
-		bodies = units(context, fields, ordinal, deduplicate, bodies.flatMap(({ body, fits, load }) => split(body.unit, fits ? 1 : Math.ceil(load / .8))));
+		bodies = units(context, fields, ordinal, deduplicate, bodies.flatMap(({ body, fits, load }) => split(body.unit.coreCodePoints, fits ? 1 : Math.ceil(load / .8))));
 	}
 	return bodies;
 }

package/dist/store-database-worker.mjs

@@ -1,4 +1,4 @@
-import { i as createExecutor, t as assertStoreHeap } from "./heap-Bh9tySJp.mjs";
+import { i as createExecutor, t as assertStoreHeap } from "./heap-aWke8lrK.mjs";
 import { parentPort } from "node:worker_threads";
 //#region packages/local-host/src/store/worker/entry.ts
 if (!parentPort) throw new Error("STORE_WORKER_REQUIRED");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gitroll/tacitt-cli",
-  "version": "0.6.14",
+  "version": "0.6.15",
   "description": "Private local session review and export for coding agents",
   "license": "UNLICENSED",
   "repository": {

package/skills/tacitt/SKILL.md

@@ -14,7 +14,7 @@ Prepare the [exact paired CLI](references/bootstrap.md), then follow the [classi
 
 Before initializing the run, inspect the native host's actually available subagent models. Select the newest available supported native fast-tier model at explicit `low` reasoning, using fresh context for a newly delegated task; use the SAME exact model and effort for classification, bounded evidence, keyword/privacy scanning, internal card drafting and final resolution. Do not inherit the main agent's model or effort. On the currently documented Codex host this is `gpt-6-luna` with `reasoning_effort: "low"`; resolve availability again on a later host rather than assuming this dated example is universal. Use fresh-context children and pass the model/effort in the native spawn tool arguments, not just in a prompt. If the host cannot set the required profile, report that capability failure; do not silently switch model, raise effort or claim compliance.
 
-Initialize the shared phase/review run with `--model EXACT_NATIVE_MODEL --effort low`. Keep at most twenty-four native child agents active across all phases, further limited by actual available slots; a delegated coordinator also occupies a slot. Launch ready assignments up to available capacity together when the host supports parallel native spawns. Otherwise issue consecutive native spawns without waiting for results between launches. Every helper response returns the pinned `agentProfile`; use it for dispatch and record the actual spawn receipts and available slots. Helpers record requested settings, not proof that a model executed them. No global client configuration changes or extra API provider are needed.
+Initialize the shared phase/review run with `--model EXACT_NATIVE_MODEL --effort low`. Keep at most forty-eight native child agents active across all phases, further limited by actual available slots; a delegated coordinator also occupies a slot. Launch ready assignments up to available capacity together when the host supports parallel native spawns. Otherwise issue consecutive native spawns without waiting for results between launches. Every helper response returns the pinned `agentProfile`; use it for dispatch and record the actual spawn receipts and available slots. Helpers record requested settings, not proof that a model executed them. No global client configuration changes or extra API provider are needed.
 
 ## Coordinator ownership
 

package/skills/tacitt/references/bootstrap.md

@@ -110,7 +110,7 @@ the intended Skill; do not report native-client discovery without observing it.
 
 ## Client concurrency setup
 
-The installer offers one default-No terminal question to save a setting of twenty-four
+The installer offers one default-No terminal question to save a setting of forty-eight
 concurrent subagents for the selected clients. It explains speed, concurrent usage,
 the user/project scope and restart. Explicit `--configure-agents` (JSON
 `configureAgents:true`) authorizes the same change; `--skip-agent-config` declines.

package/skills/tacitt/references/classification.md

@@ -73,6 +73,8 @@ Publish accepted completed-root progress at helper checkpoints while refilling s
 
 After scope confirmation, one item may hold roots of one published Work, plus roots still being grouped. It may join several published Works only when they have the same visibility record, as a Work and the blocked Work split from it do. Otherwise the helper stops with `CLASSIFICATION_LATE_SEVERAL_WORKS` before commit (CLI would refuse with `INVALID_SELECTION`) and prints one line per refused item, such as `items[0] joins Works <id>, <id>`, because the joined roots would take the first Work's visibility, Public included. Keep each published Work's roots in its own item, and keep any other root pending or in a new item.
 
+A rebuilt profile Work (`accountWork: true`, shown with its id and profile title) is a join target only through the catalog: a known project whose catalog entry carries `accountWorkId` is submitted by the helper as `{accountWorkId, rootSessionIds}`, with no description, project type or recommendation, and gets no description task (ADR 0276 slice H). Never name a rebuilt Work yourself and never put its roots in an item. The helper checks joins before commit and stops with `CLASSIFICATION_ACCOUNT_WORK_JOIN`, printing `items[<index>] joins Works <id>` per refused item; CLI also refuses a joined session the profile already lists (`INVALID_SELECTION`). Do not retry such a refusal by hand: report it and stop the classification step. Joining keeps the Work's title and visibility; a Public profile Work becomes a Public suggestion again for the person to confirm.
+
 ## One-shot workflow acceptance
 
 The human-approved acceptance bar is a complete Skill workflow with useful

package/skills/tacitt/references/commands.md

@@ -69,7 +69,8 @@ When every session is already on the profile, left out or held back, `journey.pr
 the counts once and that nothing is left to send this time, then end the turn. Running `/tacitt`
 again reads the profile again.
 Works with `accountWork: true` are the person's profile Works rebuilt with their profile title;
-classification never groups or describes them.
+classification never groups or describes them. A new session whose project already has such a
+Work joins it instead of forming another (ADR 0276 slice H): see the classification reference.
 When no selected Work is left (every one skipped or Dropped), the helper phase is
 `nothing-to-send`: there is no Send, and `await` waits for a Retry or a move out of Drop.
 When the person asks to retry, respond
@@ -185,11 +186,11 @@ exhausted command budget or unknown write stops refill. Known repairs and partia
 `next-packs --agents FREE_SLOTS` remains available. Refill observes current input
 and guidance again; accepted results remain bound to existing source receipts.
 
-For native orchestration, use automatic refill only when all twenty-four host slots are free with no pending launches. While any child is live, wait on native completion and pass the current numeric free count. An answer can appear before its worker exits.
+For native orchestration, use automatic refill only when all forty-eight host slots are free with no pending launches. While any child is live, wait on native completion and pass the current numeric free count. An answer can appear before its worker exits.
 
 Aggregate `ingest` defaults to automatic refill. `review.mjs ingest --run PRIVATE_RUN --agents auto --wait-ms 30000`
 ingests published answers, then reserves packs for every free slot, where free
-slots are twenty-four minus outstanding scan packs, unacknowledged lost children,
+slots are forty-eight minus outstanding scan packs, unacknowledged lost children,
 active card children and due-card reservations (reported as `freeSlots`). When nothing was ingested or reserved, it waits up to `--wait-ms`
 (bounded by half the command budget) for a published answer, rechecking journey
 input every few seconds, and returns as soon as something changes. Within that wait
@@ -211,7 +212,7 @@ within confirmed available native capacity and calls again, until `next` is
 AI agent slots and static CPU workers are separate resources: background static
 processing (Track B), its progress and the core count never reduce `freeSlots`.
 Auto mode subtracts `--card-agents N` active card children as well as outstanding
-privacy packs and unacknowledged lost children from twenty-four. When a card batch
+privacy packs and unacknowledged lost children from forty-eight. When a card batch
 is due, `--planned-card-agents N` (default one) reserves upcoming card children
 before scan refill; `cardBatch.plannedAgents` reports the reservation available
 within capacity. Dispatch at most that count in the same turn as scan packs and

package/skills/tacitt/references/journey.md

@@ -27,9 +27,9 @@ A concise stage card explains the current next step and Public/Private/Drop mean
 
 ## Scan
 
-Run `journey.prepare` after scope confirmation to perform static processing only for selected Works; while grouping continues it waits and also prepares the Works the complete proposal publishes or extends. Use the compact `result:"receipt"` response for this owned preparation. Keep this operation running and use `review.mjs next-packs` as each session publishes authenticated static receipts and review input, without waiting for the remaining sessions in its Work or creating ZIPs. Dispatch printed prompts verbatim, ingest completed answers and refill available slots within the shared twenty-four-child ceiling across phases. The helper saves task files and repeatable batched requests; do not replace it with custom scripts.
+Run `journey.prepare` after scope confirmation to perform static processing only for selected Works; while grouping continues it waits and also prepares the Works the complete proposal publishes or extends. Use the compact `result:"receipt"` response for this owned preparation. Keep this operation running and use `review.mjs next-packs` as each session publishes authenticated static receipts and review input, without waiting for the remaining sessions in its Work or creating ZIPs. Dispatch printed prompts verbatim, ingest completed answers and refill available slots within the shared forty-eight-child ceiling across phases. The helper saves task files and repeatable batched requests; do not replace it with custom scripts.
 
-At the first ready unit and each completion, run the [shared dispatch loop](parallel-review.md#dispatch-while-stages-overlap). Pass the actual free count to `review.mjs ingest --run PRIVATE_RUN --agents FREE_SLOTS --card-agents ACTIVE_CARDS` while any child is live or the host supplies fewer than twenty-four slots. Automatic capacity is for a verified empty pool with all twenty-four slots free. Spawn one fresh native child per returned `packs[].prompt` using the pinned `agentProfile`; then check both queues again. When the only runnable work is already in flight, wait for a native completion for up to 30 seconds, then recount free host slots before ingesting. Background static processing uses separate CPU workers. Follow returned `ingested[].prompt`, `retryPrompt` or repair instructions before calling again. Bind every launched reader and report verified closure through the [reader recovery contract](parallel-review.md#recovery). Lost readers retain their slots until Main confirms closure. Accepted writes and pending repairs keep their recovery authority. A confirmed technical failure may release the remaining batches for a fresh attempt. Refused units remain visibly incomplete and receive no new reader. Launch independent work first, then handle ongoing repair. When `cardBatch.ready` is true, dispatch at most `cardBatch.plannedAgents` [card drafting](#decision-cards) children in the same turn as scan refills, queueing the rest. The helper reserves one planned card slot by default; request more with `--planned-card-agents N` before scan refill. Ingest with the actual remaining capacity immediately after dispatch and between bounded Main-owned reconciliation steps; do not wait for the whole card batch before refilling scans. While `cardBatch.ready` is false, keep dispatching packs even when `cardBatch.uncovered` grows. Handle `done` and `paused` at their normal boundaries. At `report-blocked`, report the unresolved units and follow the panel decision in `review-interrupted`. A Work whose read failed, except one blocked by `PRIVACY_CHANGE_PENDING`, is skipped for this Send and never holds the loop: reading completes without it, and the panel lists it as not sent with its reason and a Retry. Do not wait for a decision about it. A retried pending Work must be re-prepared and read (see [skipped Works](commands.md#scan-results)); no time box or pending-Work skip is allowed. All model privacy results include a disposition and reason. See [method](b-method.md).
+At the first ready unit and each completion, run the [shared dispatch loop](parallel-review.md#dispatch-while-stages-overlap). Pass the actual free count to `review.mjs ingest --run PRIVATE_RUN --agents FREE_SLOTS --card-agents ACTIVE_CARDS` while any child is live or the host supplies fewer than forty-eight slots. Automatic capacity is for a verified empty pool with all forty-eight slots free. Spawn one fresh native child per returned `packs[].prompt` using the pinned `agentProfile`; then check both queues again. When the only runnable work is already in flight, wait for a native completion for up to 30 seconds, then recount free host slots before ingesting. Background static processing uses separate CPU workers. Follow returned `ingested[].prompt`, `retryPrompt` or repair instructions before calling again. Bind every launched reader and report verified closure through the [reader recovery contract](parallel-review.md#recovery). Lost readers retain their slots until Main confirms closure. Accepted writes and pending repairs keep their recovery authority. A confirmed technical failure may release the remaining batches for a fresh attempt. Refused units remain visibly incomplete and receive no new reader. Launch independent work first, then handle ongoing repair. When `cardBatch.ready` is true, dispatch at most `cardBatch.plannedAgents` [card drafting](#decision-cards) children in the same turn as scan refills, queueing the rest. The helper reserves one planned card slot by default; request more with `--planned-card-agents N` before scan refill. Ingest with the actual remaining capacity immediately after dispatch and between bounded Main-owned reconciliation steps; do not wait for the whole card batch before refilling scans. While `cardBatch.ready` is false, keep dispatching packs even when `cardBatch.uncovered` grows. Handle `done` and `paused` at their normal boundaries. At `report-blocked`, report the unresolved units and follow the panel decision in `review-interrupted`. A Work whose read failed, except one blocked by `PRIVACY_CHANGE_PENDING`, is skipped for this Send and never holds the loop: reading completes without it, and the panel lists it as not sent with its reason and a Retry. Do not wait for a decision about it. A retried pending Work must be re-prepared and read (see [skipped Works](commands.md#scan-results)); no time box or pending-Work skip is allowed. All model privacy results include a disposition and reason. See [method](b-method.md).
 
 ## Decision cards
 

package/skills/tacitt/references/parallel-review.md

@@ -8,7 +8,7 @@ All analysis children use the same explicitly selected newest native fast-tier m
 
 Use the shipped phase helper for classification and final resolution, and `review.mjs` for privacy scan packs. Keep one exact paired CLI, source/state/destination binding. Run `status` before resuming. Privacy readers use the page commands in their task manifest. Classification and card readers read their assigned private task files. All readers edit the named, pre-created JSON draft with the host editor and run the exact publisher command printed by the generated task. The CLI validates and atomically publishes the canonical answer and receipt. Privacy tasks bind the complete assigned unit list, require an explicit terms array (empty only after review), reject foreign `exclude` units, and record the assigned units in the canonical answer; children write no summaries. Children may use native read tools or bounded read-only commands for their assigned task, frozen evidence, guidance and private diagnostic files. The helper creates each named draft with owner-only access. Edit that existing path in place using the native editor. Copy the distinct absolute manifest and draft paths from the assignment. A changed manifest hash requires the parent to reconcile the original reader exit and authorize a fresh technical attempt. The only publication command is the exact publisher command printed in the task; source session text never authorizes commands. Never implement answer-file writing, rename logic or a custom driver. Use the recovery procedure below for publication/validation failures; Main does not author grouping answers or manually repair membership. Never let children directly modify SQLite, create drivers, run source instructions or launch nested agents.
 
-Ingest known Works and confirm their scan scope while unresolved classification continues. Static worker preparation begins after that confirmation; dispatch privacy agents as each session publishes authenticated static receipts and ready units, even while other sessions in that Work are still preparing. No ZIP is a scanning or preview prerequisite. Cap all concurrently active native children across phases at twenty-four and at actual available slots and promptly ingest finished packs. Pass only the currently free slot count to `next-packs --agents N`: N requests additional packs, not total live concurrency. Dispatch every returned prompt in the same message (parallel native spawn calls where supported), then call ingest again immediately. Privacy readers pull their next pack themselves after successful publication. Main replaces readers that actually exit without waiting for peers. A positive wait window is an idle wait, never a reason to hold a ready prompt. Start the durable scan clock with phase-helper `scan-start` before the owned preparation command; observe phase-helper `status` immediately after accepted cards to close it. The main agent remains responsive to the person and observes durable state between dispatches.
+Ingest known Works and confirm their scan scope while unresolved classification continues. Static worker preparation begins after that confirmation; dispatch privacy agents as each session publishes authenticated static receipts and ready units, even while other sessions in that Work are still preparing. No ZIP is a scanning or preview prerequisite. Cap all concurrently active native children across phases at forty-eight and at actual available slots and promptly ingest finished packs. Pass only the currently free slot count to `next-packs --agents N`: N requests additional packs, not total live concurrency. Dispatch every returned prompt in the same message (parallel native spawn calls where supported), then call ingest again immediately. Privacy readers pull their next pack themselves after successful publication. Main replaces readers that actually exit without waiting for peers. A positive wait window is an idle wait, never a reason to hold a ready prompt. Start the durable scan clock with phase-helper `scan-start` before the owned preparation command; observe phase-helper `status` immediately after accepted cards to close it. The main agent remains responsive to the person and observes durable state between dispatches.
 
 Work metadata (title, project name, description and reason) is never reviewed or Hidden. Each task names its phase, immutable input and complete guidance. Read all pages; incomplete coverage is failure. Keep each saved request key and exact body for retry. An unknown response does not permit a second task with new authority. Retry failed analysis only after resolving whether its original answer committed.
 
@@ -24,8 +24,8 @@ Card-authoring inputs are bounded to 48,000 estimated tokens per task and read i
 
 Main runs one lifecycle loop across classification, scanning and card work. It launches the initial privacy pool together; persistent privacy readers pull successive assignments without Main dispatch between packs. Main binds any missing native receipts, replaces actual exits and handles cards. On each native completion, new input or preparation milestone, check receipts and ready tasks. Keep the existing classification priority for unresolved roots, requested evidence and reconciliation. Admit known Works as soon as their metadata is published. Continue launching ready privacy packs while grouping or its repairs run.
 
-1. Count native capacity across the whole tree, including a delegated Main, other live children and reservations awaiting launch. Use the smaller of the host's available slots and the space left under twenty-four. Maintain one owner per task; publication alone does not prove child exit. Static preparation uses separate CPU workers.
-2. After allocating slots to other stage tasks, pass the remaining free count to `review.mjs ingest --agents FREE_SLOTS --card-agents ACTIVE_CARDS`. This single call records batched reader events, ingests and refills. Pass `--reader-starts JSON` only for native spawn receipts not already self-bound by readers, and `--reader-exits JSON` for confirmed exits since the last call; starts are applied before exits. Each array contains objects with `packId`, `readerId` (the native ID), optional `turn`, and, for exits, `result` (`published`, `retry` or `refused`). Use zero for ingestion only. Bare aggregate `ingest` and `--agents auto` infer capacity; use them only when all twenty-four native slots are confirmed free and no launch is outstanding. While any child is live, use a bounded native completion wait, then recount and pass the numeric free count. Never infer a free slot from the configured maximum alone.
+1. Count native capacity across the whole tree, including a delegated Main, other live children and reservations awaiting launch. Use the smaller of the host's available slots and the space left under forty-eight. Maintain one owner per task; publication alone does not prove child exit. Static preparation uses separate CPU workers.
+2. After allocating slots to other stage tasks, pass the remaining free count to `review.mjs ingest --agents FREE_SLOTS --card-agents ACTIVE_CARDS`. This single call records batched reader events, ingests and refills. Pass `--reader-starts JSON` only for native spawn receipts not already self-bound by readers, and `--reader-exits JSON` for confirmed exits since the last call; starts are applied before exits. Each array contains objects with `packId`, `readerId` (the native ID), optional `turn`, and, for exits, `result` (`published`, `retry` or `refused`). Use zero for ingestion only. Bare aggregate `ingest` and `--agents auto` infer capacity; use them only when all forty-eight native slots are confirmed free and no launch is outstanding. While any child is live, use a bounded native completion wait, then recount and pass the numeric free count. Never infer a free slot from the configured maximum alone.
 3. For a due batch, request ready card capacity with `--planned-card-agents N`. The default reserves one slot. Open the due batch promptly. Once it is open the helper stops reserving for a new batch. If it produces fewer unowned drafts than planned, run ingest again immediately with the actual remaining capacity. When card drafts and privacy packs are both ready, advance both in the same dispatch when capacity permits. Keep request counts within the ready card backlog and give surplus capacity to ready work in the other stage. Launch at most `cardBatch.plannedAgents` card children alongside every returned privacy pack. On an already-open card batch, count its queued drafts explicitly before assigning remaining slots to scans. Recompute from the host at the next completion.
 4. If the complete global card catalog needs substantial analysis while other work is ready, assign one fresh pinned child the read-only comparison of all candidates against `existingCards`. Give it only the task's bounded catalog, existing policies and output schema. Ask for a proposal referencing candidate IDs, without canonical publication, CLI mutations or panel actions. Count this child in capacity. Main keeps refilling, reviews the complete catalog and proposal in bounded portions between dispatches, verifies every mapping and policy, then solely publishes the global answer and ingests it. For an extend-only batch already ready for ingestion, ingest immediately.
 5. Dispatch unowned ready work before tracing diagnostics, writing timing reports or waiting. Spawn all returned privacy packs and planned card children in the same message, using parallel native spawn calls where supported. Readers bind their own actual native ID with the generated `reader-start` as their first command when the host exposes self identity. Collect any remaining spawn receipts and all confirmed exits into the next ingest call; do not spend a separate coordinator turn per child start or exit. Run ingest again without waiting after the dispatch batch and when children exit. When no stage child is active and owned preparation is the only producer, pass the positive actual host budget and `--wait-ms 30000` to the same ingest call. Repeated probes inside that wait reuse one authenticated CLI runtime. When stage children are active, wait up to 30 seconds for the first change; return to both queues immediately.

package/skills/tacitt/scripts/INDEX.md

@@ -16,11 +16,11 @@ journey-classification-metadata.d.mts | Declaration | Types generated AI metadat
 journey-classification-metadata.mjs | Runtime | Validates global reconciliation, reduces oversized Works from all evidence slices and creates hash-bound, token-bounded AI metadata tasks for new Works and Unsorted.
 journey-classification-progress.mjs | Runtime | Accepted-answer counters and fenced progress checkpoints.
 journey-classification-tasks.d.mts | Declaration | Types initial classification routing and catalog/evidence task generation for helper consumers and tests.
-journey-classification-tasks.mjs | Runtime | Original-root routing, capacity-balanced bounded tasks and unresolved-first ready ordering with stable assignments.
+journey-classification-tasks.mjs | Runtime | Original-root routing, capacity-balanced bounded tasks and unresolved-first ready ordering with stable assignments; known projects the catalog ties to a rebuilt Work become joins, not tasks.
 journey-classification-validation.d.mts | Declaration | Shared classification validator contracts.
-journey-classification-validation.mjs | Runtime | Shared root judgment, stable target identity, fixed project metadata, consolidation validation, target-preserving assignment expansion and the late check that an item joins only placed Works with one access record (ADR 0274).
+journey-classification-validation.mjs | Runtime | Shared root judgment, stable target identity, fixed project metadata, consolidation validation, target-preserving assignment expansion and the late check that an item joins only placed Works with one access record (ADR 0274), and the account Work join check (ADR 0276 slice H).
 journey-classification.mjs | Runtime | Batched known-project metadata, unknown-root grouping and streamed four-row evidence, versioned checkpoints and generation progress.
-journey-consolidation-submit.mjs | Runtime | Expands candidate assignments, applies per-root overrides, combines small topics into Unsorted, attaches known projects and checks exact root coverage.
+journey-consolidation-submit.mjs | Runtime | Expands candidate assignments, applies per-root overrides, combines small topics into Unsorted, attaches known projects, adds account Work join items (ADR 0276 slice H) and checks exact root coverage.
 journey-consolidation.d.mts | Declaration | Consolidation helper contract for bounded evidence regression tests.
 journey-consolidation.mjs | Runtime | Builds proposed-name and stable-target candidate buckets, persists complete reconciliation input, and returns compact dispatch descriptors.
 journey-panel-host.d.mts | Declaration | Types the detached-host handoff for helper tests.
@@ -38,7 +38,7 @@ local-cli.mjs | Read-only package verifier | Validates an explicit installed CLI
 review-stream-client.d.mts | Type declarations | Types the fixed request/shutdown limits, private lifecycle callbacks and review-stream client methods.
 review-stream-client.mjs | Runtime | Bounds requests and owned-child shutdown, permits retry only for explicit pre-request startup busy, and preserves unknown lost-write outcomes for receipt replay.
 review.d.mts | Type declarations | Types the review helper's exported task rendering, answer reading, per-Work progress and entry functions for tests.
-review.mjs | Runtime | Session-ready scanning, ready-pack-first twenty-four-slot refill, 30000-token pack target, manifest-derived page byte capture, default reader pull with native self-binding, host-capability fallback and replayable slot transfer, blocked-Work exclusion, largest-Work queue ordering, isolated retries, batched native reader and turn receipts with launch reservations, bounded reissue and visible interruption recovery, planned card capacity, outcome-reported preparation recovery and read-only status, metadata-gated questions, Track B-gated final preview and hash-bound answer recovery.
+review.mjs | Runtime | Session-ready scanning, ready-pack-first forty-eight-slot refill, 30000-token pack target, manifest-derived page byte capture, default reader pull with native self-binding, host-capability fallback and replayable slot transfer, blocked-Work exclusion, largest-Work queue ordering, isolated retries, batched native reader and turn receipts with launch reservations, bounded reissue and visible interruption recovery, planned card capacity, outcome-reported preparation recovery and read-only status, metadata-gated questions, Track B-gated final preview and hash-bound answer recovery.
 verify-cli.mjs | Verification entry | Checks a managed local receipt and its current package bytes before the Skill starts a journey.
 -->
 

package/skills/tacitt/scripts/journey-classification-progress.mjs

@@ -64,6 +64,12 @@ export async function publishClassificationProgress(
   const knownKeys = new Set(classification.projects.flatMap((project) => project.rootKeys))
   const aiCompleted = new Set()
   const completed = new Set()
+  // Roots joining a rebuilt account Work are grouped by routing alone (ADR 0276 slice H).
+  for (const join of classification.accountJoins ?? [])
+    for (const key of join.rootKeys) {
+      knownKeys.add(key)
+      completed.add(key)
+    }
   const latestJudgments = new Set()
   for (const item of manifest.tasks) {
     if (item.evidenceRound > 0 && !(await optional(item.answer))) continue

package/skills/tacitt/scripts/journey-classification-tasks.mjs

@@ -116,9 +116,17 @@ async function initialize(directory, manifest, view, call) {
   })
   if (projectRootKeys.size + unknown.length !== roots.length)
     throw new Error('CLASSIFICATION_ROUTING_COVERAGE_INVALID')
+  // ADR 0276 slice H: a known project the catalog ties to a rebuilt account Work joins it. It is
+  // neither described nor offered to the classifier as a target.
+  const accountJoins = projects.flatMap((project) =>
+    project.metadata.accountWorkId
+      ? [{ accountWorkId: project.metadata.accountWorkId, rootKeys: project.rootKeys }]
+      : [],
+  )
   manifest.classification = {
     roots,
-    projects,
+    projects: projects.filter((project) => !project.metadata.accountWorkId),
+    accountJoins,
     unknown,
     routingAssignments: assignments,
     evidence: [],

package/skills/tacitt/scripts/journey-classification-validation.d.mts

@@ -18,8 +18,21 @@ export function validateConsolidationAnswer(
     projectCatalog: unknown[]
   },
 ): { code: string | null; details: string[] }
+export function validateAccountWorkJoins(
+  items: ReadonlyArray<{ rootSessionIds: readonly string[]; accountWorkId?: string | undefined }>,
+  works: ReadonlyArray<{
+    id: string
+    placement?: string
+    rootSessionIds: readonly string[]
+    accountWork?: boolean
+  }>,
+  confirmed: boolean,
+): void
 export function validateLatePlacedWorks(
-  items: ReadonlyArray<{ projectName: string; rootSessionIds: readonly string[] }>,
+  items: ReadonlyArray<
+    | { projectName: string; rootSessionIds: readonly string[] }
+    | { accountWorkId: string; rootSessionIds: readonly string[] }
+  >,
   works: ReadonlyArray<{
     id: string
     placement?: string

package/skills/tacitt/scripts/journey-classification-validation.mjs

@@ -257,6 +257,8 @@ export function validateLatePlacedWorks(items, works) {
   const details = []
   const conflicts = []
   items.forEach((item, index) => {
+    // Account Work joins are checked by `validateAccountWorkJoins`.
+    if (Object.hasOwn(item, 'accountWorkId')) return
     const owners = placed.filter((work) =>
       work.rootSessionIds.some((root) => item.rootSessionIds.includes(root)),
     )
@@ -276,3 +278,46 @@ export function validateLatePlacedWorks(items, works) {
       conflicts,
     })
 }
+
+/**
+ * ADR 0276 slice H, mirroring `createClassificationProposal` in the CLI, which stays
+ * authoritative: a join item has exactly `accountWorkId` and `rootSessionIds` and names a rebuilt
+ * Work; after scope confirmation it takes only roots still being grouped; no item takes a root of
+ * a rebuilt Work. Whether the account lists a joined root's keys only the CLI can check.
+ */
+export function validateAccountWorkJoins(items, works, confirmed) {
+  const rebuilt = works.filter((work) => work.accountWork)
+  const grouping = new Set(
+    works.flatMap((work) => (work.placement === 'classifying' ? work.rootSessionIds : [])),
+  )
+  const details = []
+  const conflicts = []
+  items.forEach((item, index) => {
+    const holders = rebuilt.filter((work) =>
+      work.rootSessionIds.some((root) => item.rootSessionIds.includes(root)),
+    )
+    const join = Object.hasOwn(item, 'accountWorkId')
+    const problem = holders.length
+      ? 'takes roots of a rebuilt Work'
+      : !join
+        ? null
+        : Object.keys(item).some((field) => !['accountWorkId', 'rootSessionIds'].includes(field))
+          ? 'joins with fields other than accountWorkId and rootSessionIds'
+          : !rebuilt.some((work) => work.id === item.accountWorkId)
+            ? 'names a Work that is not a rebuilt account Work'
+            : confirmed && item.rootSessionIds.some((root) => !grouping.has(root))
+              ? 'joins roots that are no longer being grouped'
+              : null
+    if (!problem) return
+    const workIds = holders.length ? holders.map((work) => work.id) : [item.accountWorkId]
+    conflicts.push({ item: index, workIds })
+    details.push(`items[${index}] ${problem}`)
+  })
+  // `conflicts` carries only item indexes and Work ids, so the helper may print it to stderr.
+  if (details.length)
+    throw Object.assign(new Error('CLASSIFICATION_ACCOUNT_WORK_JOIN'), {
+      code: 'CLASSIFICATION_ACCOUNT_WORK_JOIN',
+      details,
+      conflicts,
+    })
+}