@intentic/sandbox-contract 1.176.2 → 1.209.0

package/dist/workspace-state.js

@@ -1,80 +1,266 @@
-export const WORKSPACE_STATE_FILES = [
-    { path: ".intentic/capabilities.json", invalidates: ["capabilities", "environment", "panels"] },
-    { path: ".intentic/environment.", invalidates: ["environment"] },
-    { path: ".intentic/settings.json", invalidates: ["settings"] },
-    { path: ".intentic/drafts/", invalidates: ["drafts"] },
+import { STATE_DIR } from "@intentic/constants";
+const STATE_FILES = [
+    { path: ".intentic/capabilities.json", invalidates: ["capabilities", "environment", "panels", "manifests"], portability: "secret" },
+    { path: ".intentic/capability-dismissals.json", invalidates: ["capabilities"], portability: "carry", versioned: true },
+    { path: ".intentic/secret-uses.json", invalidates: ["secrets"], portability: "carry" },
+    { path: ".intentic/personas.json", invalidates: ["personas", "capabilities", "manifests"], portability: "carry", versioned: true },
+    { path: ".intentic/environment.custom.Dockerfile", invalidates: ["environment"], portability: "carry", versioned: true },
+    { path: ".intentic/environment.Dockerfile", invalidates: ["environment"], portability: "carry", versioned: true },
+    { path: ".intentic/environment.d/", invalidates: ["environment"], portability: "carry", versioned: true },
+    {
+        path: ".intentic/environment.approved.Dockerfile",
+        invalidates: ["environment"],
+        portability: "derived",
+        note: "The target composes its own overlay on first boot; rebuild it there to install the tools it names.",
+    },
+    { path: ".intentic/settings.json", invalidates: ["settings", "manifests"], portability: "carry", versioned: true },
+    {
+        path: ".intentic/rule-firings.json",
+        invalidates: ["rule-firings"],
+        portability: "derived",
+        note: "Stamps of when each rule last did something; the new sandbox starts its own record.",
+    },
+    { path: ".intentic/drafts/", invalidates: ["drafts"], portability: "carry", authored: true },
     {
         path: ".intentic/automations.json",
         invalidates: [],
         why: "Declared by the intentic.automations extension's contributes.files — `automations` is its query key, not core's.",
+        portability: "carry",
+        versioned: true,
+    },
+    {
+        path: ".intentic/automation-runs.json",
+        invalidates: [],
+        why: "Declared by the intentic.automations extension's contributes.files — `automations` is its query key, not core's.",
+        portability: "carry",
     },
     {
         path: ".intentic/approvals/",
         invalidates: [],
         why: "Declared by the intentic.automations extension's contributes.files — `automation-approvals` is its query key, not core's.",
+        portability: "carry",
+    },
+    {
+        path: ".intentic/automations.seeded.json",
+        invalidates: [],
+        why: "Which default automations this workspace has been offered (default-automations.ts); nothing renders it — it exists so deleting a seeded automation is final.",
+        portability: "carry",
+        versioned: true,
+    },
+    {
+        path: ".intentic/chores/",
+        invalidates: [],
+        why: "Declared by the intentic.maintenance extension's contributes.files — `maintenance-report`/`maintenance-runs` are its query keys, not core's.",
+        portability: "carry",
+    },
+    {
+        path: ".intentic/docs/",
+        invalidates: [],
+        why: "Declared by the intentic.documentation extension's contributes.files — `documentation`/`documentation-runs` are its query keys, not core's.",
+        portability: "carry",
+        authored: true,
+        outsideWriter: "the intentic.documentation extension's staging writes (its paths.ts)",
+    },
+    { path: ".intentic/workflows.json", invalidates: ["workflows"], portability: "carry", versioned: true },
+    { path: ".intentic/workflow-runs.json", invalidates: ["workflows", "workflow-runs"], portability: "carry" },
+    { path: ".intentic/loop-designs.json", invalidates: ["loop-designs"], portability: "carry", versioned: true },
+    {
+        path: ".intentic/loops.json",
+        invalidates: [],
+        why: "Ralph loops and their iteration history. Nothing observes it: where a RUNNING loop stands rides on the fleet roster (AgentSummary.loop), which the /events stream already pushes about once a second, and a second source invalidating on this file could only ever disagree with the card beside it. The iteration list of an ENDED loop is an on-demand read — nothing renders it until someone opens it (web's useLoops, which holds no query for exactly this reason).",
+        portability: "carry",
     },
     {
         path: ".intentic/webchat-installs.json",
         invalidates: [],
         why: "Which origins have loaded a Doorbell's widget, written on a 30s flush timer while a customer's site serves page views. The install panel that renders it fetches on open and polls itself while it is on screen, which is the whole window in which the answer changes for anyone. Pushing instead would bill every connected browser a refetch per flush, for a panel almost nobody has open.",
+        portability: "carry",
     },
     {
         path: ".intentic/thread-sessions.json",
         invalidates: [],
         why: "Thread bookkeeping (an inbound thread — a Doorbell visitor, a Discord or Slack channel — → sandbox conversation + provider session), written on EVERY inbound message. Nothing in the browser reads it: what a thread produces is a conversation, and the fleet board already learns about that from the agent registry's own push. Naming a key here would bill every connected browser a refetch per inbound message — the request storm this table's own note warns about — to refresh nothing it can see.",
+        portability: "carry",
     },
     {
         path: ".intentic/extension-settings.json",
         invalidates: [],
         why: "Held in a module-level shallowRef store per extension (web's extensionSettingsStore) with no query observer, and deliberately so: api.settings.get must answer SYNCHRONOUSLY from an extension's first activate() line, and the store outlives every component scope. A module-level QueryObserver is the one shape that would make invalidation refetch, and this app already ruled it out — it detaches on the queryClient.clear() at logout (see useSandbox's sandbox-list mirror). So a remote member's setting edit reaches this browser on its next load, not live.",
+        portability: "secret",
+        note: "Re-enter each extension's settings on the Extensions tab.",
     },
     {
         path: ".intentic/extension-enablement.json",
         invalidates: ["extensions"],
+        portability: "carry",
+        versioned: true,
+    },
+    { path: ".intentic/workspace-extensions/", invalidates: ["extensions"], portability: "carry", authored: true },
+    { path: ".intentic/extension-updates.json", invalidates: ["extensions"], portability: "carry" },
+    { path: ".intentic/extension-update-policy.json", invalidates: ["extensions"], portability: "carry", versioned: true },
+    {
+        path: ".intentic/extension-usage.json",
+        invalidates: [],
+        why: "Which of the routes each extension DECLARED it has actually called — the evidence behind the permissions list on its row. The one entry here whose empty set is a RATE decision rather than an architectural one: every browser with the app open reports its batch on a timer, so wiring this to the `extensions` query would refetch the whole list every few seconds for a figure nobody is watching change. The tab reads it when it loads, which is when anyone is reading it.",
+        portability: "carry",
     },
     {
         path: ".intentic/members.json",
         invalidates: [],
         why: "Not this view's source at all: SandboxAccess renders the PLATFORM's invite records (apiClient.invite.list), and this file is the daemon's ENFORCED copy — written first so a grant the enforcer never got is never recorded, then never read back. A change here means the two disagreed, which the write order makes fail-closed rather than stale.",
+        portability: "identity",
+        note: "Re-invite collaborators from the Access tab — a grant is the platform's record, and the target enforces its own copy.",
+    },
+    {
+        path: ".intentic/auth/",
+        invalidates: [],
+        why: "AI-provider credentials and runtime homes; each account is rendered through owner-gated provider routes.",
+        portability: "secret",
+        note: "Sign the agent's AI accounts in again on the Agent tab.",
     },
     {
-        path: ".intentic/claude/",
+        path: ".intentic/sessions/claude/",
         invalidates: [],
         why: "Agent session transcripts — see the note above on why the memory notes under it stay polled.",
+        portability: "carry",
+    },
+    {
+        path: ".intentic/artifacts/",
+        invalidates: [],
+        why: "Durable outputs owned by conversations and extension runs: attachments, browser captures, generated images, acceptance reports, workflow step reports, voice transcripts, and loop ledgers.",
+        portability: "carry",
+    },
+    {
+        path: ".intentic/cache/",
+        invalidates: [],
+        why: "Rebuildable indexes and caches — the iq index and its vector sidecar, the whisper model; ignored by the watcher and recreated from carried workspace content.",
+        portability: "derived",
+    },
+    {
+        path: ".intentic/runtime/",
+        invalidates: [],
+        why: "Extension runtime scratch (watermarks, cached short-lived tokens); nothing renders it and gateways re-derive it.",
+        portability: "derived",
+        outsideWriter: "extensions, through extensionRuntimeDir below",
+    },
+    {
+        path: ".intentic/tmp/",
+        invalidates: [],
+        why: "Scratch that agents and tools leave behind (build logs, demo checkouts); nothing reads it after the turn that wrote it. The state janitor empties it at boot.",
+        portability: "derived",
+    },
+    {
+        path: ".intentic/.pnpm-store/",
+        invalidates: [],
+        why: "pnpm's content-addressable store, auto-created by installs run from under .intentic; the next install rebuilds it.",
+        portability: "derived",
+        outsideWriter: "pnpm itself, when an install runs from under .intentic",
+    },
+    {
+        path: ".intentic/newest-run.json",
+        invalidates: [],
+        why: "The newest daemon version that ever ran this workspace (store/newest-run.ts) — a downgrade tripwire, about THIS sandbox the way rule-firings is.",
+        portability: "derived",
+        note: "The target stamps its own daemon version on first boot.",
+    },
+    {
+        path: ".intentic/verify.json",
+        invalidates: [],
+        why: "The dependency verifier's verdict memory; nothing renders it directly — outcomes reach the owner as activity entries and workspace events.",
+        portability: "carry",
+    },
+    {
+        path: ".intentic/verify/",
+        invalidates: [],
+        why: "A running check's wrapper artifacts (log + exit status), read once by the daemon when the panel finishes.",
+        portability: "derived",
     },
     {
         path: ".intentic/ci.json",
         invalidates: [],
         why: "Webhook secret + conclusion memory; the Pipelines view reads it through /ci/runs, not off disk.",
+        portability: "secret",
+        note: "Re-add the CI webhook on the Pipelines view — its secret is per-sandbox.",
     },
     {
-        path: ".intentic/komodo.json",
+        path: ".intentic/control-tokens.json",
         invalidates: [],
-        why: "Per-connection 'when the owner last looked at Deployments'; the view reads it through /komodo/{capability}/overview, not off disk — and it is written BY that view being opened, so invalidating on it would refetch the board in answer to the browser's own click.",
+        why: "Hashed control tokens (the ACP editor bridge, and anything else driving this sandbox from outside), listed on demand by the owner.",
+        portability: "identity",
+        note: "Mint fresh control tokens — the old ones authenticate against the source sandbox.",
     },
-    { path: ".intentic/bridge-tokens.json", invalidates: [], why: "Hashed ACP bridge tokens, listed on demand by the owner." },
     {
         path: ".intentic/owner.json",
         invalidates: [],
         why: "Bound once on first use; a change here means the sandbox was re-owned, which re-authenticates anyway.",
+        portability: "identity",
+    },
+    {
+        path: ".intentic/workspace.json",
+        invalidates: [],
+        why: "The workspace identity, read from the /events hello frame rather than as a file.",
+        portability: "identity",
+    },
+    {
+        path: ".intentic/templates.json",
+        invalidates: [],
+        why: "Scaffold templates, read when the scaffold dialog opens.",
+        portability: "carry",
+        versioned: true,
     },
-    { path: ".intentic/workspace.json", invalidates: [], why: "The workspace identity, read from the /events hello frame rather than as a file." },
-    { path: ".intentic/templates.json", invalidates: [], why: "Scaffold templates, read when the scaffold dialog opens." },
     {
         path: ".intentic/browser/",
         invalidates: [],
         why: "Browser-login profiles: Chromium rewrites these constantly. Descent-ignored by the watcher outright.",
+        portability: "derived",
+        note: "Log the agent's browser back into any site it needs — profiles do not travel.",
     },
     {
         path: ".intentic/extensions/",
         invalidates: [],
         why: "Extension checkouts — whole git clones. The `extensions` query is driven by the capability manifest above, not by their contents.",
+        portability: "derived",
+        note: "Extensions re-clone from the capability manifest on the target's next reconcile.",
     },
-    { path: ".intentic/plugins/", invalidates: [], why: "Agent plugin dirs, read by the SDK's loader each turn." },
+    { path: ".intentic/plugins/", invalidates: [], why: "Agent plugin dirs, read by the SDK's loader each turn.", portability: "carry" },
+    { path: ".intentic/skills/", invalidates: ["skills"], portability: "carry", versioned: true },
+    { path: ".intentic/personas/", invalidates: ["personas"], portability: "carry", versioned: true },
 ];
+export const WORKSPACE_STATE_FILES = STATE_FILES;
+export const VERSIONED_STATE_PATHS = WORKSPACE_STATE_FILES.filter((file) => file.versioned).map((file) => file.path);
+export const SEARCHABLE_STATE_PATHS = WORKSPACE_STATE_FILES.filter((file) => file.versioned || file.authored).map((file) => file.path);
+export const extensionRuntimeDir = (extension) => `${STATE_DIR}/runtime/extensions/${extension.replaceAll(/[^a-zA-Z0-9._-]/g, "_")}`;
+export const REPORTED_MANIFEST_PATHS = WORKSPACE_STATE_FILES.filter((file) => file.invalidates.includes("manifests")).map((file) => file.path);
+export const isReportedManifest = (relPath) => REPORTED_MANIFEST_PATHS.includes(relPath.replaceAll("\\", "/"));
+export const RETIRED_WORKSPACE_STATE_DIRS = {
+    secret: ["claude", "codex", "kimi", "opencode", "cliproxy"],
+    derived: ["iq", "extensions-runtime", "whisper", "browser/output"],
+    artifacts: ["attachments", "acceptance", "loops", "workflow-runs", "transcripts"],
+};
+const LOCKED_STATE_ENTRIES = new Set([
+    "owner.json",
+    "members.json",
+    "capabilities.json",
+    "ci.json",
+    "claude.json",
+    "auth",
+    "sessions",
+    "browser",
+    ...RETIRED_WORKSPACE_STATE_DIRS.secret,
+]);
+export const isLockedWorkspacePath = (relPath) => {
+    const segments = relPath.split(/[\\/]/).filter((segment) => segment !== "" && segment !== ".");
+    if (segments[0] === ".git") {
+        return true;
+    }
+    return segments.length >= 2 && segments[0] === STATE_DIR && LOCKED_STATE_ENTRIES.has(segments[1] ?? "");
+};
 export const staleQueryKeys = (paths, contributed) => [
     ...new Set([...WORKSPACE_STATE_FILES, ...contributed]
         .filter((file) => file.invalidates.length > 0 && paths.some((path) => path.startsWith(file.path)))
         .flatMap((file) => file.invalidates)),
 ];
+export const fileBoundQueryKeys = (contributed) => [
+    ...new Set([...WORKSPACE_STATE_FILES, ...contributed].flatMap((file) => file.invalidates)),
+];
 //# sourceMappingURL=workspace-state.js.map

package/dist/workspace-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-state.js","sourceRoot":"","sources":["../src/workspace-state.ts"],"names":[],"mappings":"AAkDA,MAAM,CAAC,MAAM,qBAAqB,GAAkC;IAEhE,EAAE,IAAI,EAAE,6BAA6B,EAAE,WAAW,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE;IAC/F,EAAE,IAAI,EAAE,wBAAwB,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE;IAChE,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE;IAG9D,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE;IAKtD;QACI,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,kHAAkH;KAC1H;IACD;QACI,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,2HAA2H;KACnI;IAQD;QACI,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,gYAAgY;KACxY;IACD;QACI,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,+eAA+e;KACvf;IACD;QACI,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,2iBAA2iB;KACnjB;IAKD;QACI,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EAAE,CAAC,YAAY,CAAC;KAC9B;IACD;QACI,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,sVAAsV;KAC9V;IAYD;QACI,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,8FAA8F;KACtG;IACD;QACI,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,iGAAiG;KACzG;IACD;QACI,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,sQAAsQ;KAC9Q;IACD,EAAE,IAAI,EAAE,8BAA8B,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,0DAA0D,EAAE;IAC1H;QACI,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,uGAAuG;KAC/G;IACD,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,kFAAkF,EAAE;IAC9I,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,0DAA0D,EAAE;IACtH;QACI,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,sGAAsG;KAC9G;IACD;QACI,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,mIAAmI;KAC3I;IACD,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,wDAAwD,EAAE;CACjH,CAAC;AAcF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAwB,EAAE,WAAwC,EAAqB,EAAE,CAAC;IACrH,GAAG,IAAI,GAAG,CACN,CAAC,GAAG,qBAAqB,EAAE,GAAG,WAAW,CAAC;SACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;SACjG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAC3C;CACJ,CAAC"}
+{"version":3,"file":"workspace-state.js","sourceRoot":"","sources":["../src/workspace-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AA6FhD,MAAM,WAAW,GAAG;IAQhB,EAAE,IAAI,EAAE,6BAA6B,EAAE,WAAW,EAAE,CAAC,cAAc,EAAE,aAAa,EAAE,QAAQ,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE;IAOnI,EAAE,IAAI,EAAE,sCAAsC,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAOtH,EAAE,IAAI,EAAE,4BAA4B,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE;IActF,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAYlI,EAAE,IAAI,EAAE,yCAAyC,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IACxH,EAAE,IAAI,EAAE,kCAAkC,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IACjH,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IACzG;QACI,IAAI,EAAE,2CAA2C;QACjD,WAAW,EAAE,CAAC,aAAa,CAAC;QAC5B,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,oGAAoG;KAC7G;IAED,EAAE,IAAI,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAIlH;QACI,IAAI,EAAE,6BAA6B;QACnC,WAAW,EAAE,CAAC,cAAc,CAAC;QAC7B,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,qFAAqF;KAC9F;IAID,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAK5F;QACI,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,kHAAkH;QACvH,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,IAAI;KAClB;IAcD;QACI,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,kHAAkH;QACvH,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,2HAA2H;QAChI,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,8JAA8J;QACnK,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,IAAI;KAClB;IAMD;QACI,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,8IAA8I;QACnJ,WAAW,EAAE,OAAO;KACvB;IAKD;QACI,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,6IAA6I;QAClJ,WAAW,EAAE,OAAO;QACpB,QAAQ,EAAE,IAAI;QACd,aAAa,EAAE,sEAAsE;KACxF;IAQD,EAAE,IAAI,EAAE,0BAA0B,EAAE,WAAW,EAAE,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IACvG,EAAE,IAAI,EAAE,8BAA8B,EAAE,WAAW,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE;IAO3G,EAAE,IAAI,EAAE,6BAA6B,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAC7G;QACI,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,4cAA4c;QACjd,WAAW,EAAE,OAAO;KACvB;IAQD;QACI,IAAI,EAAE,iCAAiC;QACvC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,gYAAgY;QACrY,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,+eAA+e;QACpf,WAAW,EAAE,OAAO;KACvB;IAKD;QACI,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,2iBAA2iB;QAChjB,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,2DAA2D;KACpE;IAKD;QACI,IAAI,EAAE,qCAAqC;QAC3C,WAAW,EAAE,CAAC,YAAY,CAAC;QAC3B,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,IAAI;KAClB;IAOD,EAAE,IAAI,EAAE,iCAAiC,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;IAI9G,EAAE,IAAI,EAAE,kCAAkC,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE;IAG/F,EAAE,IAAI,EAAE,wCAAwC,EAAE,WAAW,EAAE,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAGtH;QACI,IAAI,EAAE,gCAAgC;QACtC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,qdAAqd;QAC1d,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,sVAAsV;QAC3V,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,uHAAuH;KAChI;IAOD;QACI,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,0GAA0G;QAC/G,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,yDAAyD;KAClE;IAWD;QACI,IAAI,EAAE,4BAA4B;QAClC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,8FAA8F;QACnG,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,6LAA6L;QAClM,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,kBAAkB;QACxB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,+JAA+J;QACpK,WAAW,EAAE,SAAS;KACzB;IAMD;QACI,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,kHAAkH;QACvH,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,+CAA+C;KACjE;IACD;QACI,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,+JAA+J;QACpK,WAAW,EAAE,SAAS;KACzB;IAMD;QACI,IAAI,EAAE,wBAAwB;QAC9B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,oHAAoH;QACzH,WAAW,EAAE,SAAS;QACtB,aAAa,EAAE,wDAAwD;KAC1E;IACD;QACI,IAAI,EAAE,2BAA2B;QACjC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,kJAAkJ;QACvJ,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,yDAAyD;KAClE;IACD;QACI,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,4IAA4I;QACjJ,WAAW,EAAE,OAAO;KACvB;IACD;QACI,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,2GAA2G;QAChH,WAAW,EAAE,SAAS;KACzB;IACD;QACI,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,iGAAiG;QACtG,WAAW,EAAE,QAAQ;QACrB,IAAI,EAAE,0EAA0E;KACnF;IACD;QACI,IAAI,EAAE,+BAA+B;QACrC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,oIAAoI;QACzI,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,mFAAmF;KAC5F;IACD;QACI,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,uGAAuG;QAC5G,WAAW,EAAE,UAAU;KAC1B;IACD;QACI,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,kFAAkF;QACvF,WAAW,EAAE,UAAU;KAC1B;IACD;QACI,IAAI,EAAE,0BAA0B;QAChC,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,0DAA0D;QAC/D,WAAW,EAAE,OAAO;QACpB,SAAS,EAAE,IAAI;KAClB;IAKD;QACI,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,sGAAsG;QAC3G,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,+EAA+E;KACxF;IACD;QACI,IAAI,EAAE,uBAAuB;QAC7B,WAAW,EAAE,EAAE;QACf,GAAG,EAAE,mIAAmI;QACxI,WAAW,EAAE,SAAS;QACtB,IAAI,EAAE,kFAAkF;KAC3F;IACD,EAAE,IAAI,EAAE,oBAAoB,EAAE,WAAW,EAAE,EAAE,EAAE,GAAG,EAAE,wDAAwD,EAAE,WAAW,EAAE,OAAO,EAAE;IASpI,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;IAc7F,EAAE,IAAI,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE;CACnD,CAAC;AAEnD,MAAM,CAAC,MAAM,qBAAqB,GAAkC,WAAW,CAAC;AAShF,MAAM,CAAC,MAAM,qBAAqB,GAAsB,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAWxI,MAAM,CAAC,MAAM,sBAAsB,GAAsB,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAChI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CACtB,CAAC;AAUF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,SAAiB,EAAU,EAAE,CAAC,GAAG,SAAS,uBAAuB,SAAS,CAAC,UAAU,CAAC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;AAmBrJ,MAAM,CAAC,MAAM,uBAAuB,GAAsB,qBAAqB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CACxI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CACtB,CAAC;AAIF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAW,EAAE,CAAC,uBAAuB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAShI,MAAM,CAAC,MAAM,4BAA4B,GAAG;IACxC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC;IAC3D,OAAO,EAAE,CAAC,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,gBAAgB,CAAC;IAClE,SAAS,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,aAAa,CAAC;CAC3E,CAAC;AAcX,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IACtD,YAAY;IACZ,cAAc;IACd,mBAAmB;IACnB,SAAS;IACT,aAAa;IACb,MAAM;IACN,UAAU;IACV,SAAS;IACT,GAAG,4BAA4B,CAAC,MAAM;CACzC,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,OAAe,EAAW,EAAE;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC;IAC/F,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC5G,CAAC,CAAC;AA2BF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAwB,EAAE,WAAwC,EAAqB,EAAE,CAAC;IACrH,GAAG,IAAI,GAAG,CACN,CAAC,GAAG,qBAAqB,EAAE,GAAG,WAAW,CAAC;SACrC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;SACjG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAC3C;CACJ,CAAC;AAOF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAwC,EAAqB,EAAE,CAAC;IAC/F,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;CAC7F,CAAC"}

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@intentic/sandbox-contract",
-  "version": "1.176.2",
+  "version": "1.209.0",
   "description": "oRPC wire contract for the intentic sandbox daemon — shared by the daemon and its browser client",
   "license": "MIT",
   "type": "module",
   "repository": {
     "type": "git",
-    "url": "git+https://gitlab.com/radarsu/intentic.git",
-    "directory": "_libs/sandbox-contract"
+    "url": "git+https://github.com/intentic/intentic.git",
+    "directory": "_sandbox/sandbox-contract"
   },
   "files": [
     "dist",
@@ -51,6 +51,28 @@
         "default": "./dist/tunnel-ids.js"
       }
     },
+    "./share-paths": {
+      "types": "./dist/share-paths.d.ts",
+      "import": {
+        "@intentic/src": "./src/share-paths.ts",
+        "default": "./dist/share-paths.js"
+      },
+      "require": {
+        "@intentic/src": "./src/share-paths.ts",
+        "default": "./dist/share-paths.js"
+      }
+    },
+    "./capability-env": {
+      "types": "./dist/capability-env.d.ts",
+      "import": {
+        "@intentic/src": "./src/capability-env.ts",
+        "default": "./dist/capability-env.js"
+      },
+      "require": {
+        "@intentic/src": "./src/capability-env.ts",
+        "default": "./dist/capability-env.js"
+      }
+    },
     "./session-names": {
       "types": "./dist/session-names.d.ts",
       "import": {
@@ -67,8 +89,9 @@
     "@orpc/contract": "1.14.13",
     "tslib": "2.8.1",
     "zod": "4.4.3",
-    "@intentic/extension-api": "1.176.2",
-    "@intentic/registry": "0.0.0"
+    "@intentic/constants": "1.209.0",
+    "@intentic/extension-manifest": "1.209.0",
+    "@intentic/registry": "1.209.0"
   },
   "devDependencies": {
     "@types/node": "24.13.2",
@@ -81,6 +104,7 @@
     "typecheck": "tsgo --noEmit -p tsconfig.test.json",
     "watch": "tsgo --build --watch",
     "test": "vitest run",
-    "test:watch": "vitest"
+    "test:watch": "vitest",
+    "lock": "tsgo -b && node scripts/write-lock.mjs"
   }
 }

package/src/agent-catalog.test.ts

@@ -7,6 +7,8 @@ import {
     effortAllowed,
     endpointIdOf,
     endpointProvider,
+    fastAllowed,
+    FREE_PROVIDERS,
     HARNESSES,
     isEndpointProvider,
     limitationsOf,
@@ -37,10 +39,16 @@ describe("every provider/harness pair declares what it can do", () => {
 
         // Nothing may be left to inference: a `permissions` a surface can't read, or a runtime nobody serves,
         // is the drift this record exists to end.
-        expect(["claude-code", "codex", "opencode", "acp"]).toContain(capabilities.runtime);
+        expect(["claude-code", "codex", "opencode", "opencode-gemini", "acp", "pi"]).toContain(capabilities.runtime);
         expect(["modes", "plan"]).toContain(capabilities.permissions);
         expect(["full", "http", "none"]).toContain(capabilities.mcp);
+        // Every runtime executes SOMETHING — a record listing no backend would hide the shell every loop has.
+        expect(capabilities.execution).toContain("shell");
+        for (const backend of capabilities.execution) {
+            expect(["shell", "js"]).toContain(backend);
+        }
         expect(["namespace", "cwd"]).toContain(capabilities.isolation);
+        expect(["replace", "append", "none"]).toContain(capabilities.instructions);
         // The permission modes offered must include the mode a clamp falls back to — a floor that isn't in the
         // list would leave the composer showing a posture the runtime can't hold.
         expect(modesFor(capabilities)).toContain(clampMode("default", capabilities));
@@ -55,16 +63,60 @@ test("an unknown provider id is an ACP agent, on either harness", () => {
     }
 });
 
-/* The harness axis is real for exactly two providers. Claude is always its own Claude Code loop, and kimi/gemini
- * have no native runtime at all (Moonshot speaks the Anthropic protocol directly; Google is re-served through
- * the translator), so all three run it whatever the client sent — which is why "is the harness claude-code" was
- * never the question worth asking. */
+/* THE `pi` ID IS RESERVED for the Pi coding agent's own RPC runtime — an `agent`-kind capability like any ACP
+ * agent, but served over Pi's JSONL protocol, which carries abilities the ACP floor cannot: real mid-turn
+ * steering, the thinking-level scale, a published command list. Falling to the ACP record instead would strip
+ * exactly the abilities that justify a fifth runtime. */
+describe("the pi provider", () => {
+    it("runs the pi runtime on either harness — pi is its own loop", () => {
+        for (const harness of HARNESSES) {
+            expect(capabilitiesOf("pi", harness.value).runtime).toBe("pi");
+        }
+    });
+
+    it("sits above the ACP floor: steering, effort and commands are real; terminals and MCP are not", () => {
+        const pi = capabilitiesOf("pi", "native");
+        expect(pi.steering).toBe(true);
+        expect(pi.effort).toBe(true);
+        expect(pi.commands).toBe(true);
+        const limitations = limitationsOf(pi);
+        expect(limitations).toContain("no MCP tools or plugins");
+        expect(limitations).toContain("no terminal panel");
+        expect(limitations).not.toContain("no mid-turn steering");
+        expect(limitations).not.toContain("no effort control");
+        expect(limitations).not.toContain("no slash commands");
+    });
+
+    it("is an installed capability, so it carries no access requirement to connect", () => {
+        expect(accessFor("pi")).toBeUndefined();
+    });
+});
+
+/* The harness axis is real for exactly two providers, and the three exceptions are each a different shape of
+ * "there is nothing to choose". Claude is always its own Claude Code loop. Kimi has no native runtime at all
+ * (Moonshot speaks the Anthropic protocol directly), so it runs Claude Code whatever the client sent. Gemini is
+ * Kimi's mirror: it has no CLAUDE CODE road, because that loop announces itself in every request and Google's
+ * Antigravity channel refuses on the announcement — every account, every time, reported as a spent quota it
+ * never was. */
 test("only codex and grok change runtime with the harness", () => {
     const switched = PROVIDERS.filter((provider) => capabilitiesOf(provider.value, "native") !== capabilitiesOf(provider.value, "claude-code"));
 
     expect(switched.map((provider) => provider.value)).toEqual(["codex", "grok"]);
 });
 
+/* THE RULE THAT KEEPS CLAUDE CODE TRAFFIC AWAY FROM GOOGLE, asserted where it is decided rather than at each of
+ * the surfaces that obey it. Everything downstream — the adapter that serves a turn, the transcript store, the
+ * quick helper's choice of loop — reads the runtime off this record, so a Gemini turn asking for Claude Code and
+ * getting it back would put the refused loop on the road again everywhere at once. */
+test("gemini answers with its own runtime whatever harness is asked for", () => {
+    const native = capabilitiesOf("gemini", "native");
+
+    expect(native.runtime).toBe("opencode-gemini");
+    expect(capabilitiesOf("gemini", "claude-code")).toEqual(native);
+    // Same abilities as the Grok loop it shares — only the runtime id, which keys adapter health, differs.
+    expect({ ...native, runtime: "opencode" }).toEqual(capabilitiesOf("grok", "native"));
+});
+
 test("codex and grok under the Claude Code harness get the full ceiling — it is the same loop", () => {
     for (const provider of ["codex", "grok"] as const) {
         expect(capabilitiesOf(provider, "claude-code")).toEqual(capabilitiesOf("claude", "native"));
@@ -112,15 +164,46 @@ test("every axis a record can lack has words for it", () => {
         permissions: "plan",
         questions: false,
         mcp: "none",
+        execution: ["shell"],
         effort: false,
+        fastMode: false,
         isolation: "cwd",
         commands: false,
         terminals: false,
         recovery: false,
+        instructions: "none",
     };
 
-    // Nine axes, nine sentences: an axis added to the interface without one would silently never be disclosed.
-    expect(limitationsOf(nothing)).toHaveLength(9);
+    // Eleven DISCLOSABLE axes, eleven sentences: an axis added to the interface without one would silently
+    // never be disclosed. fastMode is the deliberate twelfth — a record alone can't tell the truth about it (a
+    // translator-routed turn reads true here and still can't go fast), so it is answered by fastAllowed
+    // instead. Anything else added to the interface has to move this number.
+    expect(limitationsOf(nothing)).toHaveLength(11);
+    expect(limitationsOf(nothing).join(" ")).not.toContain("fast");
+});
+
+/* The instruction axis has THREE values and only two of them are worth a sentence, which is the one shape the
+ * count above cannot check: a middle value that discloses the same words as the floor would tell a Grok user
+ * their prompt is ignored when it is in fact being sent. */
+test("the instruction axis discloses its two weaker answers, differently", () => {
+    const grok = limitationsOf(capabilitiesOf("grok", "native")).join(" ");
+    const acp = limitationsOf(capabilitiesOf("some-installed-agent", "native")).join(" ");
+
+    expect(grok).toContain("added to theirs");
+    expect(grok).not.toContain("isn't applied");
+    expect(acp).toContain("isn't applied");
+    // Codex on its own runtime replaces, like the Claude Code loop — so it has nothing to disclose here.
+    expect(limitationsOf(capabilitiesOf("codex", "native")).join(" ")).not.toContain("system prompt");
+});
+
+/* The JS backend is hosted by the one loop the daemon can put its own execution seam through. Pinned as a test
+ * rather than left to the records because turn planning gates the backend on this axis — a runtime gaining it
+ * here without a seam behind it would advertise code runs that can never execute. */
+test("only the Claude Code loop hosts the js execution backend", () => {
+    for (const { provider, harness } of pairs) {
+        const capabilities = capabilitiesOf(provider, harness);
+        expect(capabilities.execution.includes("js")).toBe(capabilities.runtime === "claude-code");
+    }
 });
 
 // The mode vocabulary is the contract's own PermissionMode, so a mode added to the wire can't be quietly absent
@@ -182,3 +265,60 @@ describe("a configured model endpoint", () => {
         expect(accessFor("endpoint/gpu-box")).toBeUndefined();
     });
 });
+
+/* FAST SPEED IS OFFERED ON THREE CONDITIONS AT ONCE, and the interesting cases are the ones where two of them
+ * hold. A translator-routed provider runs the Claude Code loop — same record, same ceiling — and still cannot go
+ * fast, because the harness refuses a non-Anthropic endpoint; a Claude model that publishes no `fast` badge
+ * cannot either. Both would be silent failures if the composer offered the control anyway: the turn runs, the
+ * answer arrives, and only the bill says it was standard speed. */
+describe("offering fast speed", () => {
+    it("is offered for a Claude model that publishes the badge", () => {
+        expect(fastAllowed(capabilitiesOf("claude", "native"), "claude", ["reasoning", "fast"])).toBe(true);
+    });
+
+    it("is refused for a routed provider on the Claude Code loop, whose endpoint is not first-party", () => {
+        // Grok under the claude-code harness reads the FULL Claude Code record — the capability alone would say
+        // yes. It is served through the sandbox's translator, so the harness would report `not_first_party`.
+        expect(capabilitiesOf("grok", "claude-code").fastMode).toBe(true);
+        expect(fastAllowed(capabilitiesOf("grok", "claude-code"), "grok", ["fast"])).toBe(false);
+        // A user's own model endpoint is the same story for the same reason.
+        expect(fastAllowed(capabilitiesOf("endpoint/gpu-box", "native"), "endpoint/gpu-box", ["fast"])).toBe(false);
+    });
+
+    it("is refused for a Claude model whose catalog row doesn't publish it", () => {
+        expect(fastAllowed(capabilitiesOf("claude", "native"), "claude", ["reasoning"])).toBe(false);
+        // The seed floor and any provider that reports ids only — no capabilities published, nothing claimed.
+        expect(fastAllowed(capabilitiesOf("claude", "native"), "claude", undefined)).toBe(false);
+    });
+
+    it("is refused by every runtime that isn't the Claude Code loop", () => {
+        for (const provider of ["codex", "grok"] as const) {
+            expect(fastAllowed(capabilitiesOf(provider, "native"), provider, ["fast"])).toBe(false);
+        }
+        expect(fastAllowed(capabilitiesOf("some-installed-agent", "native"), "some-installed-agent", ["fast"])).toBe(false);
+    });
+});
+
+/* THE FREE ROW IS THE PRODUCT'S FRONT DOOR, so the list of free providers is derived from the access table and
+ * guarded here rather than typed out where it is used. Two things can break it and both are silent: the table
+ * losing its last `free` row (the connect gate then has no headline and quietly falls back to pitching a paid
+ * subscription to a user who has none), and a `free` row acquiring a requirement that costs money. */
+describe("the free providers", () => {
+    it("is exactly the access table's free rows, and is never empty", () => {
+        expect(FREE_PROVIDERS.length).toBeGreaterThan(0);
+        for (const provider of PROVIDERS) {
+            const isFree = accessFor(provider.value)?.kind === "free";
+            expect(FREE_PROVIDERS.includes(provider.value)).toBe(isFree);
+        }
+    });
+
+    it("carries the words the connect gate puts on screen", () => {
+        // The gate names the provider and states what connecting it runs; a row with either missing would put an
+        // empty headline or a dangling sentence in front of the user who has connected nothing.
+        for (const provider of FREE_PROVIDERS) {
+            const access = accessFor(provider);
+            expect(access?.requirement).toBeTruthy();
+            expect(access?.runs).toBeTruthy();
+        }
+    });
+});