@holmes-lab/holmes-kit 0.12.1 → 0.13.0

package/dist/holmes/cli/approve.js

@@ -132,19 +132,19 @@ const appendEvent = (root, event) => {
  */
 // Folded to rows at the source (round-5): a refusal that wraps is a refusal whose first clause can
 // scroll away, and this one names the reason a decision was withheld.
-const TAMPERED = ['큐 기록이 자기일관되지 않습니다 — id 가 kind·target 에서 나온 값이 아닙니다.',
-    '   위조되었거나 손상된 줄이므로 이 요청은 결정하지 않습니다'].join('\n');
+const TAMPERED = ['queue record is not self-consistent — id is not derived from kind/target',
+    '   this line is forged or corrupted, so this request is not decided'].join('\n');
 function recordIsSelfConsistent(entry) {
     return entry.id === (0, approval_queue_1.approvalRequestId)(entry.kind, entry.target);
 }
 function grantRequest(root, id, opts) {
     const ttl = opts.ttlMinutes ?? DEFAULT_TTL_MINUTES;
     if (typeof ttl !== 'number' || !Number.isFinite(ttl) || !Number.isInteger(ttl) || ttl <= 0 || ttl > MAX_TTL_MINUTES) {
-        return { ok: false, reason: `TTL 은 1..${MAX_TTL_MINUTES} 사이의 정수(분)여야 합니다 — 받은 값: ${(0, screen_safe_1.rowField)(String(ttl), 40)}` };
+        return { ok: false, reason: `TTL must be an integer number of minutes in 1..${MAX_TTL_MINUTES} — received: ${(0, screen_safe_1.rowField)(String(ttl), 40)}` };
     }
     const { entry } = findPending(root, id);
     if (!entry)
-        return { ok: false, reason: `대기 중인 요청 ${(0, screen_safe_1.rowField)(id, 40)} 가 없습니다 — ${(0, npx_bin_1.npxBin)()} holmes-kit approve --list 로 확인하십시오` };
+        return { ok: false, reason: `no pending request ${(0, screen_safe_1.rowField)(id, 40)} — check with ${(0, npx_bin_1.npxBin)()} holmes-kit approve --list` };
     if (!recordIsSelfConsistent(entry))
         return { ok: false, reason: TAMPERED };
     // A "does this match what the operator saw" parameter was written here too and then removed: the
@@ -176,7 +176,7 @@ function grantRequest(root, id, opts) {
     try {
         fs.mkdirSync(dir, { recursive: true });
         if (!isWritablePath(tmp) || !isWritablePath(path.join(dir, `${id}.json`))) {
-            return { ok: false, reason: '그랜트 파일 자리가 일반 파일이 아닙니다 — 큐 디렉터리를 확인하십시오' };
+            return { ok: false, reason: 'the grant-file slot is not a regular file — check the queue directory' };
         }
         fs.writeFileSync(tmp, JSON.stringify(grant, null, 2));
     }
@@ -184,27 +184,27 @@ function grantRequest(root, id, opts) {
         // Round-7: budgeted at 200 columns on a one-row screen — measured 232 columns, three terminal
         // rows, and three of them in a row scrolled the [A] confirmation off a 24-row terminal. The same
         // class round-6 closed in findingContext, three files over.
-        return { ok: false, reason: `그랜트 파일을 쓸 수 없습니다:\n   ${(0, screen_safe_1.rowField)(e instanceof Error ? e.message : String(e), 76)}` };
+        return { ok: false, reason: `cannot write the grant file:\n   ${(0, screen_safe_1.rowField)(e instanceof Error ? e.message : String(e), 76)}` };
     }
     if (!appendEvent(root, { event: 'granted', id, actor: opts.actor, expires })) {
         try {
             fs.rmSync(tmp, { force: true });
         }
         catch { /* best effort: the temp name is not a grant */ }
-        return { ok: false, reason: '승인 기록(큐 이벤트)을 쓸 수 없어 그랜트를 발급하지 않았습니다 — .ax/approvals 쓰기 권한을 확인하십시오' };
+        return { ok: false, reason: 'could not write the approval record (queue event), so no grant was issued — check write permission on .ax/approvals' };
     }
     try {
         fs.renameSync(tmp, path.join(dir, `${id}.json`));
     }
     catch (e) {
-        return { ok: false, reason: `그랜트 파일을 제자리에 놓지 못했습니다 — 큐에는 승인 기록이 남았으니 다시 실행하십시오\n   ${(0, screen_safe_1.rowField)(e instanceof Error ? e.message : String(e), 76)}` };
+        return { ok: false, reason: `could not move the grant file into place — the approval record is already in the queue, so run this again\n   ${(0, screen_safe_1.rowField)(e instanceof Error ? e.message : String(e), 76)}` };
     }
     return { ok: true, expires };
 }
 function denyRequest(root, id, reason, actor) {
     const { entry } = findPending(root, id);
     if (!entry)
-        return { ok: false, reason: `대기 중인 요청 ${(0, screen_safe_1.rowField)(id, 40)} 가 없습니다` };
+        return { ok: false, reason: `no pending request ${(0, screen_safe_1.rowField)(id, 40)}` };
     // @implements A-SPEC-262.1 — round-4: the derivation gate guarded grant only, so a tampered record
     // let the operator "deny" one subject while the denial was keyed to another id entirely.
     if (!recordIsSelfConsistent(entry))
@@ -213,21 +213,21 @@ function denyRequest(root, id, reason, actor) {
     // decision — round-5: ✓ and exit 0 were printed over a read-only queue while nothing was recorded,
     // and the agent, never seeing the denial, retried forever.
     if (!appendEvent(root, { event: 'denied', id, reason, actor })) {
-        return { ok: false, reason: '거부 기록(큐 이벤트)을 쓸 수 없었습니다 — .ax/approvals 쓰기 권한을 확인하십시오. 아무것도 기록되지 않았습니다' };
+        return { ok: false, reason: 'could not write the denial record (queue event) — check write permission on .ax/approvals. Nothing was recorded' };
     }
     return { ok: true };
 }
-/** Hold with a question — 추후 승인/거부. The agent carries the question to the user. */
+/** Hold with a question — approve/deny later. The agent carries the question to the user. */
 function holdRequest(root, id, question, actor) {
     const { entry } = findPending(root, id);
     if (!entry)
-        return { ok: false, reason: `대기 중인 요청 ${(0, screen_safe_1.rowField)(id, 40)} 가 없습니다` };
+        return { ok: false, reason: `no pending request ${(0, screen_safe_1.rowField)(id, 40)}` };
     // @implements A-SPEC-262.1 — round-4: the derivation gate guarded grant only, so a tampered record
     // let the operator "deny" one subject while the denial was keyed to another id entirely.
     if (!recordIsSelfConsistent(entry))
         return { ok: false, reason: TAMPERED };
     if (!appendEvent(root, { event: 'held', id, question, actor })) {
-        return { ok: false, reason: '보류 기록(큐 이벤트)을 쓸 수 없었습니다 — .ax/approvals 쓰기 권한을 확인하십시오. 아무것도 기록되지 않았습니다' };
+        return { ok: false, reason: 'could not write the hold record (queue event) — check write permission on .ax/approvals. Nothing was recorded' };
     }
     return { ok: true };
 }
@@ -258,12 +258,12 @@ function renderPending(state, view) {
         // what an agent would see after destroying it. approval-queue.ts promises the opposite:
         // "an empty-looking queue must be distinguishable from a corrupted one".
         if (state.malformedLines > 0) {
-            return ['승인 대기 중인 요청이 없습니다.',
-                `(큐에 읽을 수 없는 줄 ${state.malformedLines}건 — 손상 여부를 확인하십시오)`].join('\n');
+            return ['No requests awaiting approval.',
+                `(${state.malformedLines} unreadable line(s) in the queue — check for corruption)`].join('\n');
         }
-        return '승인 대기 중인 요청이 없습니다.';
+        return 'No requests awaiting approval.';
     }
-    const lines = [`◆ 승인 대기 ${state.pending.length}건`, ''];
+    const lines = [`◆ ${state.pending.length} request(s) awaiting approval`, ''];
     // @implements A-SPEC-507.1 — the LIST VIEW sorts newest-activity-first and folds stale entries
     // (C4: 51 rows, mostly week-old residue, buried the one live approval at [32]). Only when a view
     // is passed: callers without one keep the legacy insertion order byte-for-byte.
@@ -275,15 +275,15 @@ function renderPending(state, view) {
         // was blocked on). Round-1 forged two extra rows and hid the real ones behind an ANSI conceal,
         // and the operator granted a `curl … | sh` they never saw. The template owns the line structure.
         lines.push(`[${i + 1}] ${subjectCells(`[${i + 1}]  `, p)}`);
-        lines.push(`    이유: ${(0, screen_safe_1.rowField)(p.why, screen_safe_1.ROW_COLS)}`);
+        lines.push(`    reason: ${(0, screen_safe_1.rowField)(p.why, screen_safe_1.ROW_COLS)}`);
         // Round-6: this row composed THREE separately-budgeted fields plus twenty columns of template,
         // and round-5's whole-line accounting only covered the line PREFIXES. Measured at 117 columns
         // for an ordinary hold — no forgery, no wide characters, just a question of average length. A
         // hold's question is the actionable part, so it gets a row instead of being squeezed onto one.
-        const since = p.firstTs ? ` · ${(0, screen_safe_1.rowField)(p.firstTs, 28)} 부터` : '';
-        lines.push(`    차단 ${p.count}회${since}${p.hold ? '   (보류 중)' : ''}`);
+        const since = p.firstTs ? ` · since ${(0, screen_safe_1.rowField)(p.firstTs, 28)}` : '';
+        lines.push(`    blocked ${p.count}x${since}${p.hold ? '   (on hold)' : ''}`);
         if (p.hold)
-            lines.push(`    질문: ${(0, screen_safe_1.rowField)(p.question ?? '(질문 없음)', screen_safe_1.ROW_COLS)}`);
+            lines.push(`    question: ${(0, screen_safe_1.rowField)(p.question ?? '(no question)', screen_safe_1.ROW_COLS)}`);
         lines.push(`    id: ${(0, screen_safe_1.rowField)(p.id, 40)}`);
         lines.push('');
     });
@@ -291,22 +291,22 @@ function renderPending(state, view) {
         if (view.showAll) {
             // Folding is not concealment: --all shows every expired entry under a template-owned prefix.
             for (const p of state.expired) {
-                lines.push(`[만료] ${subjectCells('[만료]  ', p)}`);
-                lines.push(`    마지막 활동: ${(0, screen_safe_1.rowField)(p.lastTs, 28)} · id: ${(0, screen_safe_1.rowField)(p.id, 40)}`);
+                lines.push(`[expired] ${subjectCells('[expired]  ', p)}`);
+                lines.push(`    last activity: ${(0, screen_safe_1.rowField)(p.lastTs, 28)} · id: ${(0, screen_safe_1.rowField)(p.id, 40)}`);
                 lines.push('');
             }
         }
         else {
-            lines.push(`⏳ 만료로 접힘 ${state.expired.length}건 (마지막 활동 ${view.staleHours}h 초과) — --all 로 표시`);
+            lines.push(`⏳ ${state.expired.length} folded as expired (no activity for over ${view.staleHours}h) — show with --all`);
         }
     }
     if (state.malformedLines > 0)
-        lines.push(`(큐에 읽을 수 없는 줄 ${state.malformedLines}건 — 손상 여부를 확인하십시오)`);
+        lines.push(`(${state.malformedLines} unreadable line(s) in the queue — check for corruption)`);
     return lines.join('\n');
 }
 /**
  * @implements A-SPEC-262.1
- * What a decision line must say. Round-1: `✓ 승인 — <expires> 까지 유효` named NOTHING, so an index
+ * What a decision line must say. Round-1: `✓ approved — valid until <expires>` named NOTHING, so an index
  * that resolved against a shifted queue granted a different request than the operator read, with no
  * way to see it from the screen. Every decision now echoes the request it acted on.
  */
@@ -314,7 +314,7 @@ function renderPending(state, view) {
  * @implements A-SPEC-262.1
  * The kind cell and the subject, fitted to what is LEFT OF THE ROW after the caller's own prefix.
  *
- * Round-8: the budgets were global constants derived once, from `✓ 승인 — ` — and `✓ 거부 기록됨 — `
+ * Round-8: the budgets were global constants derived once, from `✓ approved — ` — and `✓ denied — `
  * is seven columns wider, so every denial echo ran to 88 columns and wrapped. Round-7 had widened
  * the kind cell without re-measuring any line that carries it. A constant cannot know which prefix
  * it will be printed behind, so the line computes its own room and the prefix is passed in. The
@@ -342,7 +342,7 @@ function subjectRoom(prefix, p) {
     const kind = (0, screen_safe_1.rowField)(p.kind, screen_safe_1.KIND_COLS);
     return screen_safe_1.ROW_MAX - (0, screen_safe_1.displayWidth)(prefix) - (0, screen_safe_1.displayWidth)(kind) - 1;
 }
-function decisionSubject(p, prefix = '\u2713 \uc2b9\uc778 \u2014 ') {
+function decisionSubject(p, prefix = '\u2713 approved \u2014 ') {
     return subjectCells(prefix, p);
 }
 /**
@@ -391,14 +391,14 @@ function renderNonTtyHint(state) {
     // distinguished from this by any input — an arm no test can reach is not a guarantee, it is a
     // second thing to keep true.
     const wellFormed = /^req-[0-9a-f]{12}$/.test(p.id);
-    const id = `${(0, screen_safe_1.safeRef)((0, screen_safe_1.rowField)(p.id, 40))}${wellFormed ? '' : '   # 위조된 id — 결정 불가'}`;
+    const id = `${(0, screen_safe_1.safeRef)((0, screen_safe_1.rowField)(p.id, 40))}${wellFormed ? '' : '   # forged id — cannot decide'}`;
     return [
-        '대화형 결정은 TTY에서만 동작합니다.',
-        '이 셸에서는 아래 비대화형 명령을 사용하십시오:',
-        '  holmes-kit approve --grant 1        # 위 목록의 첫 항목 (번호로 참조 가능)',
+        'Interactive decisions work only in a TTY.',
+        'In this shell, use the non-interactive commands below:',
+        '  holmes-kit approve --grant 1        # the first item above (referenceable by number)',
         `  holmes-kit approve --grant ${id}`,
-        `  holmes-kit approve --deny ${id} --reason "<사유>"`,
-        `  holmes-kit approve --ask ${id} --question "<질문>"`,
+        `  holmes-kit approve --deny ${id} --reason "<reason>"`,
+        `  holmes-kit approve --ask ${id} --question "<question>"`,
     ].join('\n');
 }
 /**
@@ -426,8 +426,8 @@ async function runInteractive(root, io, actor) {
             io.print(`\u2717 ${r.reason}`);
             return false;
         }
-        io.print(`\u2713 \uc2b9\uc778 \u2014 ${decisionSubject(p, '\u2713 \uc2b9\uc778 \u2014 ')}`);
-        io.print(decisionDetail(p, `${r.expires} \uae4c\uc9c0 \uc720\ud6a8`));
+        io.print(`\u2713 approved \u2014 ${decisionSubject(p, '\u2713 approved \u2014 ')}`);
+        io.print(decisionDetail(p, `valid until ${r.expires}`));
         return true;
     };
     const queue = [...state.pending];
@@ -439,7 +439,7 @@ async function runInteractive(root, io, actor) {
         io.print(`\n\u2500 ${subjectCells('\u2500  ', p)}`);
         // The raw answer is kept: [A] and [a] are different keys, so lowercasing before the branch
         // would erase the batch decision.
-        const raw = (await io.ask('[a]\uc2b9\uc778  [e]\uc0ac\uc720\u00b7\uae30\uac04  [v]\uc0c1\uc138  [d]\uac70\ubd80  [q]\ubcf4\ub958  [s]\uac74\ub108\ub700  [A]\uc804\uccb4 > ')).trim();
+        const raw = (await io.ask('[a]approve  [e]reason\u00b7ttl  [v]details  [d]deny  [q]hold  [s]skip  [A]all > ')).trim();
         if (raw === 'A') {
             // @implements A-SPEC-262.1 — CONFIRMED, with the count and the list. Round-1: this was the one
             // decision in the loop with no second prompt, and it differs from [a] only by Shift — a
@@ -464,23 +464,23 @@ async function runInteractive(root, io, actor) {
             const batch = showable.slice(0, BATCH_MAX);
             const deferred = showable.length - batch.length;
             if (batch.length === 0) {
-                io.print('\u2717 \ub0a8\uc740 \ud56d\ubaa9\uc740 \ud55c \ud589\uc5d0 \uc548 \ub2f4\uaca8 \uc77c\uad04 \ub300\uc0c1\uc774 \uc544\ub2d9\ub2c8\ub2e4 \u2014 [v]\ub85c \uac1c\ubcc4 \uacb0\uc815');
+                io.print('\u2717 remaining items do not fit on one row \u2014 decide individually with [v]');
                 i--;
                 continue;
             }
-            io.print(`\u25c6 \ub2e4\uc74c ${batch.length}\uac74\uc744 \uc2b9\uc778\ud569\ub2c8\ub2e4:`);
+            io.print(`\u25c6 approving the next ${batch.length}:`);
             for (const q of batch) {
                 io.print(`   - ${subjectCells('   - ', q)}`);
             }
             if (oversize > 0) {
-                io.print(`   (\ud55c \ud589\uc5d0 \uc548 \ub2f4\uae30\ub294 ${oversize}\uac74 \uc81c\uc678 \u2014 [v]\ub85c \uac1c\ubcc4 \uacb0\uc815)`);
+                io.print(`   (${oversize} excluded for not fitting on one row \u2014 decide individually with [v])`);
             }
             if (deferred > 0) {
-                io.print(`   (\ub098\uba38\uc9c0 ${deferred}\uac74\uc740 \ub2e4\uc74c [A] \uc5d0\uc11c \uc774\uc5b4\uc11c \ubb3b\uc2b5\ub2c8\ub2e4)`);
+                io.print(`   (${deferred} more will be asked on the next [A])`);
             }
-            const ok = (await io.ask(`\uc774 ${batch.length}\uac74\uc744 \uc2b9\uc778\ud569\ub2c8\uae4c? [y/N] > `)).trim().toLowerCase();
+            const ok = (await io.ask(`Approve these ${batch.length}? [y/N] > `)).trim().toLowerCase();
             if (ok !== 'y' && ok !== 'yes') {
-                io.print('\u2717 \uc77c\uad04 \uc2b9\uc778\uc744 \ucde8\uc18c\ud588\uc2b5\ub2c8\ub2e4 \u2014 \ud56d\ubaa9\ubcc4\ub85c \uacc4\uc18d\ud558\uc2ed\uc2dc\uc624');
+                io.print('\u2717 batch approval cancelled \u2014 continue item by item');
                 i--;
                 continue;
             }
@@ -507,12 +507,12 @@ async function runInteractive(root, io, actor) {
             grantDefault(p);
         }
         else if (answer === 'e') {
-            const rationale = (await io.ask(`\uc0ac\uc720 (enter = "${DEFAULT_RATIONALE}") > `)).trim();
-            const ttlRaw = (await io.ask(`\uc720\ud6a8 \uc2dc\uac04(\ubd84, enter = ${DEFAULT_TTL_MINUTES}) > `)).trim();
+            const rationale = (await io.ask(`reason (enter = "${DEFAULT_RATIONALE}") > `)).trim();
+            const ttlRaw = (await io.ask(`ttl (minutes, enter = ${DEFAULT_TTL_MINUTES}) > `)).trim();
             const ttl = ttlRaw === '' ? DEFAULT_TTL_MINUTES : Number(ttlRaw);
             const r = grantRequest(root, p.id, { actor, rationale, ttlMinutes: ttl });
             // @implements A-SPEC-262.1 — round-6: this branch alone RETURNED on failure, so a mistyped TTL
-            // ("30분") ended the whole session with exit 0 and every remaining item undecided — measured on
+            // ("30min") ended the whole session with exit 0 and every remaining item undecided — measured on
             // a real pty, and the operator cannot tell it from a normal end of queue. The same `return`
             // fired on the round-4 tamper refusal, which means a single forged queue line placed first
             // could abandon the session when the operator pressed the MOST careful key. A refused decision
@@ -522,8 +522,8 @@ async function runInteractive(root, io, actor) {
                 i--;
                 continue;
             }
-            io.print(`\u2713 \uc2b9\uc778 \u2014 ${decisionSubject(p, '\u2713 \uc2b9\uc778 \u2014 ')}`);
-            io.print(decisionDetail(p, `${r.expires} \uae4c\uc9c0 \uc720\ud6a8`));
+            io.print(`\u2713 approved \u2014 ${decisionSubject(p, '\u2713 approved \u2014 ')}`);
+            io.print(decisionDetail(p, `valid until ${r.expires}`));
         }
         else if (answer === 'v') {
             const { renderDecisionContext } = require('./approve-context');
@@ -532,29 +532,29 @@ async function runInteractive(root, io, actor) {
             continue;
         }
         else if (answer === 'd') {
-            const reason = (await io.ask('\uac70\ubd80 \uc0ac\uc720(\uc5d0\uc774\uc804\ud2b8\uc5d0\uac8c \uc804\ub2ec\ub429\ub2c8\ub2e4) > ')).trim();
+            const reason = (await io.ask('denial reason (delivered to the agent) > ')).trim();
             if (reason === '') {
-                io.print('\u2717 \uc0ac\uc720 \uc5c6\ub294 \uac70\ubd80\ub294 \uc5d0\uc774\uc804\ud2b8\uac00 \ubcfc \uc218 \uc5c6\uc2b5\ub2c8\ub2e4 \u2014 \uac74\ub108\ub701\ub2c8\ub2e4');
+                io.print('\u2717 a denial with no reason is invisible to the agent \u2014 skipping');
                 continue;
             }
             const r = denyRequest(root, p.id, reason, actor);
             if (r.ok) {
-                io.print(`\u2713 \uac70\ubd80 \u2014 ${decisionSubject(p, '\u2713 \uac70\ubd80 \u2014 ')}`);
-                io.print(decisionDetail(p, '\uac70\ubd80\uac00 \uae30\ub85d\ub410\uc2b5\ub2c8\ub2e4'));
+                io.print(`\u2713 denied \u2014 ${decisionSubject(p, '\u2713 denied \u2014 ')}`);
+                io.print(decisionDetail(p, 'the denial was recorded'));
             }
             else
                 io.print(`\u2717 ${r.reason}`);
         }
         else if (answer === 'q') {
-            const question = (await io.ask('\uc9c8\ubb38(\uc5d0\uc774\uc804\ud2b8\uac00 \uc0ac\uc6a9\uc790\uc5d0\uac8c \uc804\ub2ec\ud569\ub2c8\ub2e4) > ')).trim();
+            const question = (await io.ask('question (the agent carries it to the user) > ')).trim();
             if (question === '') {
-                io.print('\u2717 \ube48 \uc9c8\ubb38 \u2014 \uac74\ub108\ub701\ub2c8\ub2e4');
+                io.print('\u2717 empty question \u2014 skipping');
                 continue;
             }
             const r = holdRequest(root, p.id, question, actor);
             if (r.ok) {
-                io.print(`\u2713 \ubcf4\ub958 \u2014 ${decisionSubject(p, '\u2713 \ubcf4\ub958 \u2014 ')}`);
-                io.print(decisionDetail(p, '\uc9c8\ubb38\uc740 \ub2e4\uc74c \uac70\ubd80 \ubb38\uba74\uc5d0'));
+                io.print(`\u2713 held \u2014 ${decisionSubject(p, '\u2713 held \u2014 ')}`);
+                io.print(decisionDetail(p, 'the question rides on the next denial message'));
             }
             else
                 io.print(`\u2717 ${r.reason}`);
@@ -564,7 +564,7 @@ async function runInteractive(root, io, actor) {
             // double-tap `aa` of the new one-key flow, a bare Enter) silently advanced, so the operator
             // saw the next item's prompt and read it as "approved, next please" while the item stayed
             // pending and the agent stayed blocked. Only [s] skips; everything else asks again.
-            io.print(`\u2717 \uc54c \uc218 \uc5c6\ub294 \ud0a4\uc785\ub2c8\ub2e4${raw === '' ? '' : `: '${(0, screen_safe_1.rowField)(raw, 20)}'`} \u2014 \ub2e4\uc2dc \uc785\ub825\ud558\uc2ed\uc2dc\uc624`);
+            io.print(`\u2717 unknown key${raw === '' ? '' : `: '${(0, screen_safe_1.rowField)(raw, 20)}'`} \u2014 please enter again`);
             i--;
             continue;
         }

package/dist/holmes/cli/autonomy.d.ts

@@ -0,0 +1,22 @@
+import { Approval } from '../guardrail/risk-gate';
+/** `--for` accepts `2h` / `90m` / a bare number of hours. Minutes, capped at 7 days (like grants);
+ *  null on a malformed value; default 2h when omitted. */
+export declare function parseForMinutes(s: string | undefined): number | null;
+export interface AutonomyIO {
+    now: string;
+    isTTY: boolean;
+    approval?: Approval;
+    env?: NodeJS.ProcessEnv;
+}
+export interface AutonomyResult {
+    ok: boolean;
+    exitCode: 0 | 1 | 2;
+    message: string;
+}
+/**
+ * The `holmes-kit autonomy status|on|off` core. Pure over injected io (clock/TTY/approval/env) so
+ * every branch is testable. Enabling (`on`) is protected exactly like `init --autonomy`: the raw-TTY
+ * terminal is the human-presence proof, and a non-TTY caller (an agent's Bash) must carry an
+ * out-of-band HOLMES_APPROVAL covering kind `autonomy-grant`. Disabling is always free.
+ */
+export declare function runAutonomy(root: string, sub: string | undefined, forStr: string | undefined, io: AutonomyIO): AutonomyResult;

package/dist/holmes/cli/autonomy.js

@@ -0,0 +1,145 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseForMinutes = parseForMinutes;
+exports.runAutonomy = runAutonomy;
+// @implements A-SPEC-553.1
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const risk_gate_1 = require("../guardrail/risk-gate");
+const autonomy_1 = require("../governance/autonomy");
+const ledger_store_1 = require("../governance/ledger-store");
+const provenance_chain_1 = require("../governance/provenance-chain");
+/** `--for` accepts `2h` / `90m` / a bare number of hours. Minutes, capped at 7 days (like grants);
+ *  null on a malformed value; default 2h when omitted. */
+function parseForMinutes(s) {
+    if (s === undefined)
+        return 120;
+    const m = /^\s*(\d+)\s*(h|m)?\s*$/.exec(s);
+    if (!m)
+        return null;
+    const n = parseInt(m[1], 10);
+    if (!Number.isFinite(n) || n <= 0)
+        return null;
+    const mins = m[2] === 'm' ? n : n * 60;
+    return mins <= 7 * 24 * 60 ? mins : null;
+}
+/**
+ * The `holmes-kit autonomy status|on|off` core. Pure over injected io (clock/TTY/approval/env) so
+ * every branch is testable. Enabling (`on`) is protected exactly like `init --autonomy`: the raw-TTY
+ * terminal is the human-presence proof, and a non-TTY caller (an agent's Bash) must carry an
+ * out-of-band HOLMES_APPROVAL covering kind `autonomy-grant`. Disabling is always free.
+ */
+function runAutonomy(root, sub, forStr, io) {
+    const env = io.env ?? process.env;
+    const markerPath = path.join(root, ...autonomy_1.SESSION_AUTONOMY_MARKER);
+    if (sub === undefined || sub === 'status') {
+        const envOn = typeof env[autonomy_1.AUTONOMY_ENV] === 'string' && env[autonomy_1.AUTONOMY_ENV] !== '';
+        if (envOn)
+            return { ok: true, exitCode: 0, message: 'autonomous spec approval: ON (project default, .mcp.json) — governance-critical still ask you' };
+        if ((0, autonomy_1.sessionAutonomyActive)(root, io.now)) {
+            let expires = '';
+            try {
+                expires = String(JSON.parse(fs.readFileSync(markerPath, 'utf8')).expires);
+            }
+            catch { /* best effort */ }
+            return { ok: true, exitCode: 0, message: `autonomous spec approval: ON (this session, until ${expires}) — governance-critical still ask you` };
+        }
+        return { ok: true, exitCode: 0, message: 'autonomous spec approval: OFF — every spec approval is human (holmes-kit autonomy on to self-drive this session)' };
+    }
+    if (sub === 'off') {
+        // @implements A-SPEC-558.1 — `off` is the emergency de-escalation control; it must fail CLOSED.
+        // If the marker cannot be removed it is still ON, so never report OFF: re-check after rmSync and
+        // report failure honestly if it survives.
+        let existed = false;
+        let removeError;
+        try {
+            existed = fs.existsSync(markerPath);
+            fs.rmSync(markerPath, { force: true });
+        }
+        catch (e) {
+            removeError = e instanceof Error ? e.message : String(e);
+        }
+        let stillThere = false;
+        try {
+            stillThere = fs.existsSync(markerPath);
+        }
+        catch {
+            stillThere = true;
+        }
+        if (stillThere) {
+            return { ok: false, exitCode: 1, message: `could not end session autonomy — the marker at ${markerPath} could not be removed`
+                    + `${removeError ? ` (${removeError})` : ''}. Autonomous spec approval is still ON.` };
+        }
+        if (existed) {
+            try {
+                new ledger_store_1.FileLedgerStore(path.join(root, '.ax', 'ledger')).append({
+                    ts: io.now, actor: io.approval?.actor ?? 'operator', kind: 'autonomy-revoked',
+                    summary: 'session autonomy ended', rationale: 'holmes-kit autonomy off',
+                });
+            }
+            catch { /* audit is best-effort; the marker is gone either way */ }
+        }
+        return { ok: true, exitCode: 0, message: 'autonomous spec approval: OFF — every spec approval is human again' };
+    }
+    if (sub === 'on') {
+        if (!io.isTTY && !(0, risk_gate_1.approvalCovers)(io.approval, { kind: 'autonomy-grant', target: root }, io.now)) {
+            return { ok: false, exitCode: 2, message: 'Enabling session autonomy needs a human: run it at a terminal, or supply an out-of-band approval.\n'
+                    + `Set HOLMES_APPROVAL='{"actor":"<you>","token":"<any>","rationale":"<why>"}' (scoped approvals need kind "autonomy-grant") and re-run.` };
+        }
+        const mins = parseForMinutes(forStr);
+        if (mins === null)
+            return { ok: false, exitCode: 2, message: '--for must look like 2h or 90m (1 minute .. 7 days)' };
+        const expires = new Date(Date.parse(io.now) + mins * 60_000).toISOString();
+        const grantedBy = io.approval?.actor ?? 'operator(tty)';
+        try {
+            fs.mkdirSync(path.dirname(markerPath), { recursive: true });
+            fs.writeFileSync(markerPath, JSON.stringify({ enabled: true, expires, grantedBy, rationale: `session autonomy for ${mins}m` }, null, 2) + '\n');
+        }
+        catch (e) {
+            return { ok: false, exitCode: 1, message: `could not write the autonomy marker: ${e instanceof Error ? e.message : String(e)}` };
+        }
+        try {
+            new ledger_store_1.FileLedgerStore(path.join(root, '.ax', 'ledger')).append({
+                ts: io.now, actor: grantedBy, kind: 'autonomy-granted', summary: `session autonomy until ${expires}`,
+                rationale: `${mins} minutes`, ...(io.approval ? { authorization: (0, provenance_chain_1.authorizationRef)(io.approval.actor, io.approval.token) } : {}),
+            });
+        }
+        catch { /* the marker IS the audit record (grantedBy/expires); the ledger entry is additive */ }
+        return { ok: true, exitCode: 0, message: `autonomous spec approval: ON for this session, until ${expires}.\n`
+                + 'Low-risk specs self-approve; governance-critical, high-risk and irreversible still ask you. End early: holmes-kit autonomy off.' };
+    }
+    return { ok: false, exitCode: 2, message: 'usage: holmes-kit autonomy [status|on [--for 2h]|off]' };
+}

package/dist/holmes/cli/colophon.d.ts

@@ -0,0 +1,6 @@
+/**
+ * @implements A-SPEC-548.1
+ * Pure: the maker's colophon printed by the hidden `holmes-kit elementary` / `whodunit` easter egg.
+ * English, on the detective theme. Undocumented — a mark for those who go looking.
+ */
+export declare function colophon(): string;

package/dist/holmes/cli/colophon.js

@@ -0,0 +1,24 @@
+"use strict";
+// @implements A-SPEC-548.1
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.colophon = colophon;
+/**
+ * @implements A-SPEC-548.1
+ * Pure: the maker's colophon printed by the hidden `holmes-kit elementary` / `whodunit` easter egg.
+ * English, on the detective theme. Undocumented — a mark for those who go looking.
+ */
+function colophon() {
+    return [
+        '',
+        '  holmes-kit — deterministic governance for agentic software engineering',
+        '  "No Spec, No Code."',
+        '',
+        '  Every spec sealed, every edit traced back to the requirement that asked for it.',
+        '  When you have eliminated the untraceable, whatever remains must be the code.',
+        '  Elementary, my dear Watson.',
+        '',
+        '  Crafted by SungNam Park  ·  sungnam.park.korea@gmail.com',
+        '  https://www.npmjs.com/package/@holmes-lab/holmes-kit',
+        '',
+    ].join('\n');
+}

package/dist/holmes/cli/doctor.d.ts

@@ -118,7 +118,7 @@ export declare function formatChecks(checks: Check[]): string;
  * doctor flags the old location. But the second half was real and sat one layer further in:
  *
  *   PASS mcp wiring spawn  — node wiring resolves: …/holmes-mcp.js   <- existence only
- *   PASS codex wiring      — MCP 배선이 이 설치본으로 해석됩니다      <- path resolution only
+ *   PASS codex wiring      — MCP wiring resolves to this install       <- path resolution only
  *
  * The one check that drives a real `initialize -> tools/list` ran for `.mcp.json` ONLY, and only when
  * the command was not `node` — which is what init writes for all three harnesses. So on the common
@@ -143,7 +143,7 @@ export declare function semanticTierVerdict(t: SemanticTier): {
 };
 /**
  * @implements A-SPEC-477
- * Detects the "임시 조치": a semantic key pattern inside the PROJECT's .env. The value is read
+ * Detects the "stopgap": a semantic key pattern inside the PROJECT's .env. The value is read
  * only to detect the pattern and is never returned or printed.
  */
 export declare function detectTreeKeyTemporary(root: string): {