@milpa/comal 0.1.7 → 0.2.0

package/README.md

@@ -28,7 +28,7 @@ comal --help
 
 Keep the PATH line in your shell startup file if you use that prefix. If your Node manager already provides a user prefix, you can omit `--prefix "$HOME/.local"`. The package registers the `comal` executable; you do not need to create a shell alias.
 
-You can pin a version with `npx @milpa/comal@0.1.7` or `npm install --global @milpa/comal@0.1.7`. The local release manifest preserves SHA-256 and SHA-512 integrity is checked against npm at publish time. No independent publisher signature is claimed.
+You can pin a version with `npx @milpa/comal@0.2.0` or `npm install --global @milpa/comal@0.2.0`. The local release manifest preserves SHA-256 and SHA-512 integrity is checked against npm at publish time. No independent publisher signature is claimed.
 
 ## Test without account or model
 
@@ -58,6 +58,24 @@ For APIs, set the key via the environment or your secrets manager. Do not paste
 
 In the TUI, `/provider` opens a searchable list of workspace profiles and login providers. `/models` lists models from the active provider; `/effort` offers the active model’s supported levels. Use ↑/↓ and Enter to select, or Esc to keep your draft. A pending selection stays distinct from the active connection. Comal checks model/provider candidates before replacing a working connection; failed checks offer explicit recovery without retrying automatically. A catalog check does not prove inference entitlement.
 
+## Configure from inside the session (0.2.0)
+
+You can start with plain `comal` and configure everything from the composer; startup flags keep working and still win over saved settings.
+
+```text
+/login ollama                 # Ollama Cloud: the key goes in a hidden field
+/provider ollama
+/model MODEL_ID
+/max-tokens 32000             # output reserve, saved for later sessions
+/context-window auto          # detected window (Ollama uses /api/show)
+/config                       # connection, limits, permissions and config paths
+/config save                  # remember this connection for the next launch
+/plugins available            # plugins bundled with Comal
+/permissions                  # mode, saved rules and recent decisions
+```
+
+Keys entered with `/login` are stored only in Comal's private credential store and are never exported to the process environment, so tools such as Bash cannot read them. What changed in 0.2.0: https://comal.milpahq.com/academy/docs/novedades/ .
+
 ## Connect your Artifacts account
 
 ```sh

package/backend/contracts/remote-commands-v1.json

@@ -91,6 +91,18 @@
       "description": "Model capability support and provenance",
       "argument_pattern": "(?:refresh)?"
     },
+    {
+      "name": "permissions",
+      "arguments": "",
+      "description": "Permission mode, saved rules and recent decisions (read-only)",
+      "argument_pattern": ""
+    },
+    {
+      "name": "autonomy",
+      "arguments": "",
+      "description": "Current autonomy level (read-only)",
+      "argument_pattern": ""
+    },
     {
       "name": "plugins",
       "arguments": "[status|list]",

package/governance/chrome-task-v10.json

@@ -0,0 +1,323 @@
+{
+  "profile": {
+    "name": "comal-chrome-task",
+    "version": "10",
+    "decisionIds": [
+      "COMAL-CHROME-010"
+    ]
+  },
+  "decisions": [
+    {
+      "id": "COMAL-CHROME-001",
+      "title": "La casa conserva el encargo y cierra con evidencia vigente",
+      "status": "accepted",
+      "supersedes": null,
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-002",
+      "title": "The accepted Chrome task binds exact artifact bytes through a narrow host hash capability",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-001",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-003",
+      "title": "Conversational declarations preserve original intent and expose scoped live popup inspection without model-managed resources",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-002",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-004",
+      "title": "Reuse completed behavior evidence only for identical source and live document identity, with fresh terminal postconditions; explicit rerun and changed resources execute tests again",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-003",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-005",
+      "title": "An explicit candidate commit composes publication, declared tests and closure with unchanged child authority and durable evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-004",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-006",
+      "title": "Own immutable fixture pages and popup resources are bound separately; cross-surface checks retain source, document, connection and permission gates",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-005",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-007",
+      "title": "Physical input targets are activated and declared reloads require an observed new document; acknowledged dispatch alone is not persistence evidence",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-006",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-008",
+      "title": "Current publication and explicit native worker generation bound diagnostic text; unavailable or historical observations do not grant effects or close work",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-007",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-009",
+      "title": "Accepted Chrome source retains exact oversized proposals through native ports, scoped history and current child authority without changing acceptance",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-008",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    },
+    {
+      "id": "COMAL-CHROME-010",
+      "title": "Explicit supplied assets remain immutable across source recovery and resume; publication binds the exact checked snapshot before dispatch",
+      "status": "accepted",
+      "supersedes": "COMAL-CHROME-009",
+      "gates": [
+        {
+          "id": "task-scope",
+          "tier": "enforced",
+          "operations": [
+            "*"
+          ],
+          "boundTo": "runtime:chrome-task.scope"
+        },
+        {
+          "id": "current-evidence",
+          "tier": "enforced",
+          "operations": [
+            "WorkTaskUpdate"
+          ],
+          "boundTo": "runtime:chrome-task.close"
+        },
+        {
+          "id": "artifact-hash",
+          "tier": "enforced",
+          "operations": [
+            "FileInfo"
+          ],
+          "boundTo": "runtime:chrome-task.artifact-hash"
+        }
+      ]
+    }
+  ]
+}