@milpa/comal 0.1.6 → 0.2.0

package/README.md

@@ -28,7 +28,7 @@ comal --help
 
 Keep the PATH line in your shell startup file if you use that prefix. If your Node manager already provides a user prefix, you can omit `--prefix "$HOME/.local"`. The package registers the `comal` executable; you do not need to create a shell alias.
 
-You can pin a version with `npx @milpa/comal@0.1.6` or `npm install --global @milpa/comal@0.1.6`. The local release manifest preserves SHA-256 and SHA-512 integrity is checked against npm at publish time. No independent publisher signature is claimed.
+You can pin a version with `npx @milpa/comal@0.2.0` or `npm install --global @milpa/comal@0.2.0`. The local release manifest preserves SHA-256 and SHA-512 integrity is checked against npm at publish time. No independent publisher signature is claimed.
 
 ## Test without account or model
 
@@ -58,6 +58,24 @@ For APIs, set the key via the environment or your secrets manager. Do not paste
 
 In the TUI, `/provider` opens a searchable list of workspace profiles and login providers. `/models` lists models from the active provider; `/effort` offers the active model’s supported levels. Use ↑/↓ and Enter to select, or Esc to keep your draft. A pending selection stays distinct from the active connection. Comal checks model/provider candidates before replacing a working connection; failed checks offer explicit recovery without retrying automatically. A catalog check does not prove inference entitlement.
 
+## Configure from inside the session (0.2.0)
+
+You can start with plain `comal` and configure everything from the composer; startup flags keep working and still win over saved settings.
+
+```text
+/login ollama                 # Ollama Cloud: the key goes in a hidden field
+/provider ollama
+/model MODEL_ID
+/max-tokens 32000             # output reserve, saved for later sessions
+/context-window auto          # detected window (Ollama uses /api/show)
+/config                       # connection, limits, permissions and config paths
+/config save                  # remember this connection for the next launch
+/plugins available            # plugins bundled with Comal
+/permissions                  # mode, saved rules and recent decisions
+```
+
+Keys entered with `/login` are stored only in Comal's private credential store and are never exported to the process environment, so tools such as Bash cannot read them. What changed in 0.2.0: https://comal.milpahq.com/academy/docs/novedades/ .
+
 ## Connect your Artifacts account
 
 ```sh

package/backend/contracts/remote-commands-v1.json

@@ -91,6 +91,18 @@
       "description": "Model capability support and provenance",
       "argument_pattern": "(?:refresh)?"
     },
+    {
+      "name": "permissions",
+      "arguments": "",
+      "description": "Permission mode, saved rules and recent decisions (read-only)",
+      "argument_pattern": ""
+    },
+    {
+      "name": "autonomy",
+      "arguments": "",
+      "description": "Current autonomy level (read-only)",
+      "argument_pattern": ""
+    },
     {
       "name": "plugins",
       "arguments": "[status|list]",

package/backend/contracts/remote-workspace-v1.schema.json

@@ -0,0 +1,287 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "version": {
+      "const": 1
+    },
+    "scope": {
+      "const": "recorded_work_execution"
+    },
+    "asked": {
+      "const": "unjudged"
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "session_id": {
+          "type": "string",
+          "maxLength": 128
+        },
+        "row": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "sha256": {
+          "type": "string",
+          "maxLength": 64,
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "integrity": {
+          "enum": [
+            "verified_hash_chain",
+            "legacy",
+            "invalid"
+          ]
+        }
+      },
+      "required": [
+        "session_id",
+        "row",
+        "sha256",
+        "integrity"
+      ]
+    },
+    "plan": {
+      "anyOf": [
+        {
+          "type": "null"
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "properties": {
+            "version": {
+              "type": "integer",
+              "minimum": 1
+            },
+            "objective": {
+              "type": "string",
+              "maxLength": 1000
+            }
+          },
+          "required": [
+            "version",
+            "objective"
+          ]
+        }
+      ]
+    },
+    "counts": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "pending": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "in_progress": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "blocked": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "done": {
+          "type": "integer",
+          "minimum": 0
+        },
+        "needs_verification": {
+          "type": "integer",
+          "minimum": 0
+        }
+      },
+      "required": [
+        "pending",
+        "in_progress",
+        "blocked",
+        "done",
+        "needs_verification"
+      ]
+    },
+    "tasks_total": {
+      "type": "integer",
+      "minimum": 0
+    },
+    "tasks": {
+      "type": "array",
+      "maxItems": 24,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "id": {
+            "type": "string",
+            "maxLength": 64,
+            "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]{0,63}$"
+          },
+          "title": {
+            "type": "string",
+            "maxLength": 180
+          },
+          "criterion": {
+            "type": "string",
+            "maxLength": 400
+          },
+          "status": {
+            "enum": [
+              "pending",
+              "in_progress",
+              "blocked",
+              "done",
+              "needs_verification"
+            ]
+          },
+          "declared_status": {
+            "enum": [
+              "pending",
+              "in_progress",
+              "blocked",
+              "done",
+              "needs_verification"
+            ]
+          },
+          "phase": {
+            "enum": [
+              "discovery",
+              "implementation",
+              "verification"
+            ]
+          },
+          "reason": {
+            "type": "string",
+            "maxLength": 240
+          },
+          "held_by": {
+            "type": "array",
+            "maxItems": 24,
+            "items": {
+              "type": "string",
+              "maxLength": 64,
+              "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]{0,63}$"
+            }
+          },
+          "checks_total": {
+            "type": "integer",
+            "minimum": 0
+          },
+          "checks": {
+            "type": "array",
+            "maxItems": 4,
+            "items": {
+              "type": "object",
+              "additionalProperties": false,
+              "properties": {
+                "step_id": {
+                  "type": "string",
+                  "maxLength": 64,
+                  "pattern": "^[A-Za-z0-9][A-Za-z0-9_.:-]{0,63}$"
+                },
+                "operation": {
+                  "type": "string",
+                  "maxLength": 128
+                },
+                "status": {
+                  "enum": [
+                    "pending",
+                    "running",
+                    "failed",
+                    "refused",
+                    "interrupted",
+                    "not_dispatched",
+                    "stale",
+                    "passed"
+                  ]
+                },
+                "receipt_id": {
+                  "type": "string",
+                  "maxLength": 36,
+                  "pattern": "^[a-f0-9-]{36}$"
+                },
+                "receipt_row": {
+                  "type": "integer",
+                  "minimum": 0
+                }
+              },
+              "required": [
+                "step_id",
+                "operation",
+                "status"
+              ],
+              "dependentRequired": {
+                "receipt_id": [
+                  "receipt_row"
+                ],
+                "receipt_row": [
+                  "receipt_id"
+                ]
+              }
+            }
+          }
+        },
+        "required": [
+          "id",
+          "title",
+          "criterion",
+          "status",
+          "declared_status",
+          "phase",
+          "reason",
+          "held_by",
+          "checks_total",
+          "checks"
+        ]
+      }
+    },
+    "receipts": {
+      "type": "array",
+      "maxItems": 8,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "id": {
+            "type": "string",
+            "maxLength": 36,
+            "pattern": "^[a-f0-9-]{36}$"
+          },
+          "operation": {
+            "type": "string",
+            "maxLength": 128
+          },
+          "status": {
+            "enum": [
+              "returned",
+              "failed",
+              "refused"
+            ]
+          },
+          "row": {
+            "type": "integer",
+            "minimum": 0
+          }
+        },
+        "required": [
+          "id",
+          "operation",
+          "status",
+          "row"
+        ]
+      }
+    }
+  },
+  "required": [
+    "version",
+    "scope",
+    "asked",
+    "source",
+    "plan",
+    "counts",
+    "tasks_total",
+    "tasks",
+    "receipts"
+  ]
+}

package/governance/chrome-task-v10.json

@@ -0,0 +1,323 @@
+{
+  "profile": {
+    "name": "comal-chrome-task",
+    "version": "10",
+    "decisionIds": [
+      "COMAL-CHROME-010"
+    ]
+  },
+  "decisions": [
+    {
+      "id": "COMAL-CHROME-001",
+      "title": "La casa conserva el encargo y cierra con evidencia vigente",
+      "status": "accepted",
+      "supersedes": null,
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-002",
+      "title": "The accepted Chrome task binds exact artifact bytes through a narrow host hash capability",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-001",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-003",
+      "title": "Conversational declarations preserve original intent and expose scoped live popup inspection without model-managed resources",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-002",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-004",
+      "title": "Reuse completed behavior evidence only for identical source and live document identity, with fresh terminal postconditions; explicit rerun and changed resources execute tests again",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-003",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-005",
+      "title": "An explicit candidate commit composes publication, declared tests and closure with unchanged child authority and durable evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-004",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-006",
+      "title": "Own immutable fixture pages and popup resources are bound separately; cross-surface checks retain source, document, connection and permission gates",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-005",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-007",
+      "title": "Physical input targets are activated and declared reloads require an observed new document; acknowledged dispatch alone is not persistence evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-006",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-008",
+      "title": "Current publication and explicit native worker generation bound diagnostic text; unavailable or historical observations do not grant effects or close work",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-007",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-009",
+      "title": "Accepted Chrome source retains exact oversized proposals through native ports, scoped history and current child authority without changing acceptance",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-008",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-010",
+      "title": "Explicit supplied assets remain immutable across source recovery and resume; publication binds the exact checked snapshot before dispatch",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-009",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    }
+  ]
+}