@milpa/comal 0.2.2 → 0.2.3

package/src/file-recovery.mjs

@@ -11,6 +11,10 @@ import { chromeRecoveryMessage,chromeObservationMessage } from './chrome-recover
 import { nativeDelegation, agentRecoveryPlan } from './agent-recovery-proof.mjs';
 import { nativeChromeCandidate, chromeCandidateRecoveryPlan } from './chrome-candidate-recovery-proof.mjs';
 
+// Violations that void recovery. A file changed outside the agent shows as state_chain_broken:<file>:
+// an audit fact about disk drift, not a damaged or forged record, so it never blocks recovery.
+export const recoveryBlockers = violations => violations.filter(v => !String(v.reason).startsWith('state_chain_broken:'));
+
 function pendingFromDeadProcess(session,actor,active=new Set()){
   const closed=new Set(session.rows.filter(r=>r.type==='house_receipt').map(r=>r.invocation_id)), starts=new Set(session.rows.filter(r=>r.type==='house_started').map(r=>r.invocation_id)), owners=new Map();
   return session.rows.flatMap((p,index)=>{
@@ -20,16 +24,38 @@ function pendingFromDeadProcess(session,actor,active=new Set()){
     return owners.get(key)?[{p,index}]:[];
   });
 }
+// A person may acknowledge a call whose recovery the house already blocked as uncertain (the process
+// died mid-call and no adapter can observe its effects). The acknowledgement is a new human fact: the
+// call is closed as "effects unknown", never replayed, history is not edited and no permission is granted.
+export function recoveryAcknowledgeOperation({store}){
+  return {name:'RecoveryAcknowledge',description:'Human acknowledgement that an interrupted call recovery blocked as uncertain has unknown effects, after inspecting the workspace. The call is closed as unknown effects on the next resume; it is never replayed and grants no permission.',
+    audience:'human',surfaces:['cli','tui'],permission:null,effects:{workspace:'none',external:'none',process:'none',authority:'recovery_acknowledgement'},
+    input_schema:{type:'object',properties:{invocation_id:{type:'string',format:'uuid'},reason:{type:'string',minLength:20,maxLength:1000}},required:['invocation_id','reason'],additionalProperties:false},
+    run:async(input,options)=>{
+      if(options.actor?.kind!=='human')throw Object.assign(new Error('Sólo una persona puede reconocer una recuperación incierta; usa /recover acknowledge.'),{code:'HOUSE_REFUSED'});
+      if(typeof input.reason!=='string'||input.reason.trim().length<20)throw Object.assign(new Error('Escribe qué revisaste (al menos 20 caracteres).'),{code:'RECOVERY_ACK_INVALID'});
+      const session=await store.load(options.sessionId), rows=session.rows;
+      const proposal=rows.find(r=>r.type==='house_proposal'&&r.invocation_id===input.invocation_id);
+      if(!proposal||!rows.some(r=>r.type==='process_recovery_blocked'&&r.invocation_id===input.invocation_id))throw Object.assign(new Error(`No hay una recuperación bloqueada para ${input.invocation_id}.`),{code:'RECOVERY_ACK_INVALID'});
+      if(rows.some(r=>r.type==='house_receipt'&&r.invocation_id===input.invocation_id))throw Object.assign(new Error('Esa llamada ya tiene recibo.'),{code:'RECOVERY_ACK_INVALID'});
+      if(rows.some(r=>r.type==='process_recovery_acknowledged'&&r.invocation_id===input.invocation_id))return JSON.stringify({acknowledged:true,invocation_id:input.invocation_id,already:true});
+      await store.append(options.sessionId,{type:'process_recovery_acknowledged',source:'human_control',invocation_id:input.invocation_id,operation:proposal.operation,actor:options.actor,reason:input.reason.trim()});
+      return JSON.stringify({acknowledged:true,invocation_id:input.invocation_id,operation:proposal.operation,next_action:'Reanuda la sesión: la llamada se cierra como efectos desconocidos y el modelo continúa.'});
+    }};
+}
 export async function recoverFileEffects({store,house,executor,sessionId,actor,signal,session}) {
   if(!sessionId)return;
   const snapshot=session?.id===sessionId?session:await store.load(sessionId);
-  if(snapshot.rows.some(row=>row.recovery) && auditExecution(snapshot,house.stateContext()).violations.length)throw Object.assign(new Error('Recibo de recuperación inválido; no se entregó al modelo.'),{code:'AUDIT_INVALID'});
+  // Only a violation in a recovery receipt voids recovery. Others (a file changed outside the agent,
+  // seen as state_chain_broken) stay audit facts and do not block resuming.
+  const recoveries=new Set(snapshot.rows.filter(row=>row.recovery).map(row=>row.invocation_id));
+  if(recoveries.size && recoveryBlockers(auditExecution(snapshot,house.stateContext()).violations).some(v=>recoveries.has(v.invocation_id)||String(v.reason).startsWith('recovery_')))throw Object.assign(new Error('Recibo de recuperación inválido; no se entregó al modelo.'),{code:'AUDIT_INVALID'});
   if(!pendingFromDeadProcess(snapshot,actor,house.stateContext().active).length)return;
   return store.workTransaction(sessionId,()=>reconcile({store,house,executor,sessionId,actor,signal}));
 }
 async function reconcile({store,house,executor,sessionId,actor,signal}) {
   let session=await store.load(sessionId);const audit=auditExecution(session,house.stateContext());
-  if(!audit.journal.consistent || audit.violations.length)throw Object.assign(new Error('Libro inválido; recuperación suspendida.'),{code:'AUDIT_INVALID'});
+  if(!audit.journal.consistent || recoveryBlockers(audit.violations).length)throw Object.assign(new Error('Libro inválido; recuperación suspendida.'),{code:'AUDIT_INVALID'});
   const candidates=pendingFromDeadProcess(session,actor,house.stateContext().active).sort((a,b)=>Number(Boolean(house.recoveryAdapter(sessionId,b.p.operation)))-Number(Boolean(house.recoveryAdapter(sessionId,a.p.operation))) || b.index-a.index);
   for(const {p,index,unknownOwner} of candidates){
     signal?.throwIfAborted();
@@ -42,8 +68,15 @@ async function reconcile({store,house,executor,sessionId,actor,signal}) {
       const event={type:'process_recovery_blocked',source:'recovery_host',invocation_id:p.invocation_id,operation:p.operation,reason};
       const loaded=await store.load(sessionId);
       if(!loaded.rows.some(r=>r.type===event.type && r.invocation_id===p.invocation_id && r.reason===reason))await store.append(sessionId,event);
-      throw Object.assign(new Error(`Recuperación incierta de ${p.operation} (${p.invocation_id}): ${reason}. No se repitió el efecto ni se llamó al modelo.`),{code:'HOUSE_RECOVERY_UNCERTAIN'});
+      throw Object.assign(new Error(`Recuperación incierta de ${p.operation} (${p.invocation_id}): ${reason}. No se repitió el efecto ni se llamó al modelo. Revisa el estado y, si decides continuar, ejecuta: /recover acknowledge ${p.invocation_id} <qué revisaste>`),{code:'HOUSE_RECOVERY_UNCERTAIN'});
     };
+    const acknowledgementRef=session.rows.findIndex(r=>r.type==='process_recovery_acknowledged'&&r.invocation_id===p.invocation_id&&r.actor?.kind==='human');
+    if(acknowledgementRef>=0){
+      const receipt={...base,type:'house_receipt',source:'recovery_host',status:'refused',code:'HOUSE_RECOVERY_ACKNOWLEDGED_UNCERTAIN',error:`El proceso murió durante ${p.operation} y sus efectos son desconocidos; una persona lo reconoció para continuar. No se repitió. Comprueba el estado antes de depender de él.`,effects_observed:'unknown',observations:[],asked:'unjudged',recovery:{...recovery,kind:'acknowledged_uncertain',acknowledgement_ref:acknowledgementRef}};
+      const current=await store.load(sessionId);
+      if(!recoveryReceiptValid(current.rows,current.rows.length,receipt))return blocked('El reconocimiento humano no valida');
+      await store.append(sessionId,receipt);continue;
+    }
     if(unknownOwner)return blocked('El inicio legacy no identifica un proceso verificable; se conserva incierto');
     let receipt;
     const adapter=house.recoveryAdapter(sessionId,p.operation);

package/src/gemini-provider.mjs

@@ -101,7 +101,7 @@ export class GeminiProvider {
   }
   getCapabilities() { return { ...this.capabilities, ...(this.modelCapabilities && this.modelCapabilities.model === this.model ? Object.fromEntries(Object.entries(this.modelCapabilities.capabilities).filter(([,value]) => value !== null)) : {}) }; }
   getVisionCapability() { return { supported: this.getCapabilities().vision, source: 'explicit_profile_configuration', model: this.model, imageTokens: this.imageTokens }; }
-  async complete({ system, messages, tools = [], schemaCatalog = [], contextIdentity, signal, onText = () => {}, onProgress = () => {}, maxTokens = this.maxTokens, purpose = 'worker', nativeSearch = false, stream = true }) {
+  async complete({ system, messages, tools = [], schemaCatalog = [], contextIdentity, signal, onText = () => {}, onProgress = () => {}, onReasoning = () => {}, onToolCall = () => {}, maxTokens = this.maxTokens, purpose = 'worker', nativeSearch = false, stream = true }) {
     const accountingRequest={system,messages,tools,maxTokens},identity={...accountingIdentity(this),projection_epoch:contextIdentity?.projection_epoch ?? null};
     if (tools.length && !this.getCapabilities().tools) throw unsupported('tools');
     if (nativeSearch && !this.getCapabilities().web_search) throw unsupported('web_search');
@@ -120,7 +120,7 @@ export class GeminiProvider {
       const response = await this.fetch(`${this.baseURL}/models/${this.model}:${stream ? 'streamGenerateContent?alt=sse' : 'generateContent'}`, { method: 'POST', headers: { 'content-type': 'application/json', 'x-goog-api-key': this.apiKey }, body, signal: deadline.signal, redirect: 'error' });
       if (!response.ok) { await response.body?.cancel(); throw new Error(`Gemini HTTP ${response.status}. Revisa modelo, endpoint y credenciales del perfil.`); }
       const parts = []; let finish, grounding, usageRaw, usage = { input_tokens: 0, output_tokens: 0 };
-      const consume = event => {
+      const consume = (event, live = false) => {
         if (event.error) throw new Error('Gemini devolvió un error; no se ejecutaron herramientas.');
         const candidate = event.candidates?.find(item => item.index === 0) || event.candidates?.[0];
         if (candidate?.finishReason) finish = candidate.finishReason;
@@ -129,10 +129,12 @@ export class GeminiProvider {
         for (const part of candidate?.content?.parts || []) {
           parts.push(part); deadline.touch();
           if (typeof part.text === 'string' && !part.thought) onText(part.text);
+          else if (live && part.thought && part.text) onReasoning();
+          if (live && part.functionCall) onToolCall();
         }
         onProgress({ elapsed_ms: deadline.elapsedMs(), purpose });
       };
-      if (response.headers.get('content-type')?.includes('text/event-stream')) { for await (const event of sseEvents(response.body)) { if (event.type !== 'stream_done') consume(event); } }
+      if (response.headers.get('content-type')?.includes('text/event-stream')) { for await (const event of sseEvents(response.body)) { if (event.type !== 'stream_done') consume(event, true); } deadline.signal.throwIfAborted(); if (!finish) throw Object.assign(new Error('Respuesta Gemini incompleta (stream interrumpido); no se ejecutaron herramientas.'), { code: 'MODEL_STREAM_ERROR' }); }
       else consume(await response.json());
       deadline.signal.throwIfAborted();
       return {...normalize(parts, finish, usage, grounding,bindUsageAccounting(normalizeUsage('gemini',usageRaw),accountingRequest,identity,body)),schema_diagnostics:schemaFrame.diagnostics,schema_manifest:schemaFrame.manifest};

package/src/git-integration-operations.mjs

@@ -14,6 +14,7 @@ import {integrationLineage} from './git-integration-lineage.mjs';
 import {readPageEvidence,pageEvidenceReferences,publicPageResult,publicPageError} from './git-page-evidence.mjs';
 import {hostCodeIdentity} from './git-page-identity.mjs';
 import {isPageVerification,pageVerificationSchema} from './git-page-proof.mjs';
+import {bashTimeoutSchema} from './bash-timeouts.mjs';
 
 export const GIT_INTEGRATION_MECHANISM='comal-git-integration-v1';
 const source='git_integration_host',fail=(message,code='GIT_INTEGRATION_BINDING')=>Object.assign(new Error(message),{code});
@@ -22,7 +23,7 @@ const id={type:'string',pattern:'^[a-f0-9-]{36}$'},token={type:'string',minLengt
 // contract. Factoring avoids the local GBNF compiler's 2000-repetition boundary;
 // native min/max lengths and every other check constraint remain in place.
 const commandPattern=String.raw`^(?:[^\n]|\n){1,1000}(?:[^\n]|\n){0,1000}$`;
-const commandVerification={type:'object',additionalProperties:false,required:['criterion','checks'],properties:{criterion:{type:'string',minLength:1,maxLength:4000},checks:{type:'array',minItems:1,maxItems:8,items:{type:'object',additionalProperties:false,required:['id','command'],properties:{id:{type:'string',pattern:'^[a-zA-Z0-9_.:-]{1,80}$'},command:{type:'string',minLength:1,maxLength:2000,pattern:commandPattern},timeout:{type:'integer',minimum:1,maximum:120000},assertions:{type:'array',maxItems:8,items:assertionSchema}}}}}};
+const commandVerification={type:'object',additionalProperties:false,required:['criterion','checks'],properties:{criterion:{type:'string',minLength:1,maxLength:4000},checks:{type:'array',minItems:1,maxItems:8,items:{type:'object',additionalProperties:false,required:['id','command'],properties:{id:{type:'string',pattern:'^[a-zA-Z0-9_.:-]{1,80}$'},command:{type:'string',minLength:1,maxLength:2000,pattern:commandPattern},timeout:bashTimeoutSchema(),assertions:{type:'array',maxItems:8,items:assertionSchema}}}}}};
 const verification=commandVerification;
 const schema=(properties,required=[])=>({type:'object',additionalProperties:false,properties,required});
 const effects={workspace:'write',external:'none',process:'write',authority:'none'};

package/src/git-plumbing.mjs

@@ -1,3 +1,4 @@
+import {childEnvironment} from './child-env.mjs';
 import {spawn,execFile} from 'node:child_process';
 import {promisify} from 'node:util';
 import {mkdir,lstat,stat,realpath,readFile,readlink,access} from 'node:fs/promises';
@@ -19,7 +20,7 @@ export async function privateGitDirectory(directory){
 }
 const baseArgs=['--no-pager','--no-optional-locks','--literal-pathspecs','-c','core.fsmonitor=false','-c','core.hooksPath=/dev/null','-c','core.autocrlf=false','-c','commit.gpgsign=false'];
 export function gitHostEnvironment(extra={}){
- return{...Object.fromEntries(Object.entries(process.env).filter(([key])=>!key.startsWith('GIT_'))),GIT_CONFIG_NOSYSTEM:'1',GIT_CONFIG_GLOBAL:'/dev/null',GIT_TERMINAL_PROMPT:'0',GIT_OPTIONAL_LOCKS:'0',LC_ALL:'C',...extra};
+ return{...Object.fromEntries(Object.entries(childEnvironment()).filter(([key])=>!key.startsWith('GIT_'))),GIT_CONFIG_NOSYSTEM:'1',GIT_CONFIG_GLOBAL:'/dev/null',GIT_TERMINAL_PROMPT:'0',GIT_OPTIONAL_LOCKS:'0',LC_ALL:'C',...extra};
 }
 export function gitWorkerGone(fact){
  if(!fact?.identity||!processDead(fact.identity))return false;

package/src/git-source.mjs

@@ -1,3 +1,4 @@
+import {childEnvironment} from './child-env.mjs';
 import {execFile} from 'node:child_process';
 import {promisify} from 'node:util';
 import {lstat,open,readlink,realpath} from 'node:fs/promises';
@@ -13,7 +14,7 @@ function text(bytes){const value=bytes.toString('utf8');if(!Buffer.from(value).e
 const line=bytes=>text(bytes).replace(/\n$/,'');
 const blobHash=(bytes,format)=>createHash(format).update(`blob ${bytes.length}\0`).update(bytes).digest('hex');
 function environment(){
- const env=Object.fromEntries(Object.entries(process.env).filter(([key])=>!key.startsWith('GIT_')));
+ const env=Object.fromEntries(Object.entries(childEnvironment()).filter(([key])=>!key.startsWith('GIT_')));
  return{...env,GIT_CONFIG_NOSYSTEM:'1',GIT_CONFIG_GLOBAL:'/dev/null',GIT_TERMINAL_PROMPT:'0',GIT_OPTIONAL_LOCKS:'0',LC_ALL:'C'};
 }
 async function git(cwd,args,signal,allowed=[]){

package/src/git-workspaces.mjs

@@ -14,6 +14,7 @@ import {GitPlumbing,mutateGit,mutateGitWithChildWitness,GIT_INPUT_GATE_PROTOCOL,
 import {isPageVerification,pageVerificationSchema,assertPageChain,assertNativePrefix,nativePrefix} from './git-page-proof.mjs';
 import {hostCodeIdentity} from './git-page-identity.mjs';
 import {reservePageCheck} from './git-page-verification.mjs';
+import {bashTimeoutSchema} from './bash-timeouts.mjs';
 
 const sha=bytes=>createHash('sha256').update(bytes).digest('hex'),line=result=>result.stdout.toString('utf8').replace(/\n$/,'');
 const sourcePath=name=>{
@@ -25,7 +26,7 @@ const ownerDigest=owner=>{
 export function gitWorkspaceResourceId(cwd,owner,request){const hex=digest({mechanism:'comal-git-workspace-v1',cwd,owner:ownerDigest(owner),request}).slice(0,32);return`${hex.slice(0,8)}-${hex.slice(8,12)}-${hex.slice(12,16)}-${hex.slice(16,20)}-${hex.slice(20)}`;}
 const resourceId=gitWorkspaceResourceId;
 const publicWork=work=>({...work,scope:'isolated_source_not_verified_delivery',asked:'unjudged'});
-const checkContract=new Ajv({strict:false}).compile({type:'object',additionalProperties:false,required:['criterion','checks'],properties:{criterion:{type:'string',minLength:1,maxLength:4000},checks:{type:'array',minItems:1,maxItems:8,items:{type:'object',additionalProperties:false,required:['id','command'],properties:{id:{type:'string',pattern:'^[a-zA-Z0-9_.:-]{1,80}$'},command:{type:'string',minLength:1,maxLength:2000},timeout:{type:'integer',minimum:1,maximum:120000},assertions:{type:'array',maxItems:8,items:assertionSchema}}}}}});
+const checkContract=new Ajv({strict:false}).compile({type:'object',additionalProperties:false,required:['criterion','checks'],properties:{criterion:{type:'string',minLength:1,maxLength:4000},checks:{type:'array',minItems:1,maxItems:8,items:{type:'object',additionalProperties:false,required:['id','command'],properties:{id:{type:'string',pattern:'^[a-zA-Z0-9_.:-]{1,80}$'},command:{type:'string',minLength:1,maxLength:2000},timeout:bashTimeoutSchema(),assertions:{type:'array',maxItems:8,items:assertionSchema}}}}}});
 const checkPageContract=new Ajv({strict:false}).compile(pageVerificationSchema);
 
 async function readCaptured(root,file,budget,signal){

package/src/house.mjs

@@ -8,6 +8,14 @@ import { auditExecution } from './audit.mjs';
 import { hostRefusalFailure, governanceRefusalFailure, settleNativeRefusal } from './native-refusal.mjs';
 import { prepareNativeSourceRequest } from './source-requests.mjs';
 import { t, registerMessages } from './i18n/index.mjs';
+import { parseRule } from './permission-rules.mjs';
+// A saved human allow rule for the whole tool (Bash or Bash(*)) counts like --allowed-tools. Rules live in a
+// private file outside the workspace, never where the model writes.
+const savedBroadAllow = (rules, name) => !rules?.decide?.(name, {})?.list?.match?.(/^(?:deny|ask)$/) && (rules?.applicable?.() || []).some(rule => {
+  if (rule.list !== 'allow') return false;
+  try { const parsed = parseRule(rule.rule); return (parsed.kind === 'tool' && parsed.name === name) || (name === 'Bash' && parsed.kind === 'bash-any'); } catch { return false; }
+});
+
 
 // Textos de la tarjeta de confirmación: sólo los ve el humano.
 registerMessages({
@@ -234,6 +242,10 @@ export class House {
     return {
       identity: () => ({actor:structuredClone(context.actor),session_id:context.sessionId,surface:context.surface}),
       setContext: value => policy.setContext?.(value), getMode: () => policy.mode,
+      // Directories the human opened besides the workspace: --add-dir (read) and /add-dir (read+write).
+      getDirectories: () => ({ read: [...(policy.readRoots || [])], work: [...(policy.workRoots || [])] }),
+      // Decisión del humano al arrancar (--allowed-tools o saltar permisos); el modelo no la escribe.
+      grantedByHuman: name => policy.mode === 'bypassPermissions' || Boolean(policy.allowed?.has?.(name)) || !policy.denied?.has?.(name) && savedBroadAllow(policy.rules, name),
       execute: (name, input, options) => execute(snapshot(), name, input, options),
       snapshot: () => { const catalog = snapshot(), captured = frame(); return { setContext: value => policy.setContext?.(value), execute: (name, input, options) => execute(catalog, name, input, options, captured), definitions: () => [...catalog.values()].map(op => op.tool()), catalogue: () => [...catalog.values()].map(op => ({ ...op.contract, contract_digest: op.digest })) }; },
       definitions: () => [...snapshot().values()].map(op => op.tool()),
@@ -260,7 +272,7 @@ export class House {
       }
     }
   }
-  authority(context) { return digest({ mode: context.policy.mode, allowed: [...(context.policy.allowed || [])].sort(), denied: [...(context.policy.denied || [])].sort(), intentions: context.policy.context?.intentions, governance: this.governance(context.sessionId), scope: this.#scopeStamp(context.sessionId), guards: [...this.#effectiveGuards().values()].map(({ id, token }) => ({ id, token })) }); }
+  authority(context) { return digest({ mode: context.policy.mode, allowed: [...(context.policy.allowed || [])].sort(), denied: [...(context.policy.denied || [])].sort(), ...(context.policy.workRoots?.length ? { work_roots: [...context.policy.workRoots] } : {}), intentions: context.policy.context?.intentions, governance: this.governance(context.sessionId), scope: this.#scopeStamp(context.sessionId), guards: [...this.#effectiveGuards().values()].map(({ id, token }) => ({ id, token })) }); }
   async judge(context, name, input, { signal } = {}) {
     for (let attempt = 0; attempt < 4; attempt++) {
       signal?.throwIfAborted(); const before = this.authority(context);

package/src/i18n/cli-es.mjs

@@ -72,6 +72,17 @@ export default Object.freeze({
   "Use /model ID, without spaces.": "Usa /model ID, sin espacios.",
   "Model: {v0} · effort {v1} · same session": "Modelo: {v0} · effort {v1} · misma sesión",
   "Use /rename NAME.": "Usa /rename NOMBRE.",
+  "Added: {v0} · read and write; writes follow the permission mode ({v1}).": "Agregada: {v0} · lectura y escritura; escribir sigue el modo de permisos ({v1}).",
+  "{v0} is already inside the workspace.": "{v0} ya está dentro del workspace.",
+  "{v0} was already added.": "{v0} ya estaba agregada.",
+  "Directories Comal can work in:": "Carpetas donde Comal puede trabajar:",
+  "workspace": "workspace",
+  "/add-dir: read and write": "/add-dir: lectura y escritura",
+  "--add-dir: read only": "--add-dir: solo lectura",
+  "Use /add-dir PATH to add one.": "Usa /add-dir RUTA para agregar otra.",
+  "/add-dir not restored: {v0}": "/add-dir no se restauró: {v0}",
+  "/add-dir not restored: {v0} (the session journal is not consistent).": "/add-dir no se restauró: {v0} (el diario de la sesión no es consistente).",
+  "/add-dir restored: {v0} (read and write).": "/add-dir restaurada: {v0} (lectura y escritura).",
   "Session: {v0}": "Sesión: {v0}",
   "The demo does not allow changing provider.": "La demo no permite cambiar proveedor.",
   "Provider: {v0} · {v1} · {v2}": "Proveedor: {v0} · {v1} · {v2}",
@@ -97,5 +108,5 @@ export default Object.freeze({
   "Use /permissions default|plan|acceptEdits|auto.": "Usa /permissions default|plan|acceptEdits|auto.",
   "Model: {v0} · effort {v1}\nUse /models, /model ID, or /effort LEVEL.": "Modelo: {v0} · effort {v1}\nUsa /models, /model ID o /effort NIVEL.",
   "There are no saved sessions.\n": "No hay sesiones guardadas.\n",
-  "Comal · standalone CLI programming assistant\n\nUsage: node bin/comal.mjs [options] [prompt]\n     node bin/comal.mjs sessions | evidence | audit --resume UUID\n\n  -p, --print                   Runs a turn and exits (also accepts stdin)\n  --demo                        Deterministic demo without credentials; allows its edits\n  --cwd <path>                  Workspace (default: current directory)\n  --provider <protocol>        openai (default) | anthropic | gemini\n  --profile <name>            Profile from .comal/providers.json (endpoint/model/capabilities)\n  --providers-config <file>  Profiles file; keys only via apiKeyEnv\n  --name <name>               Name visible to other sessions\n  --listen                      Keeps the CLI listening for messages and responds when idle\n  --inbound <mode>              accept (default) | hold | refuse\n  --auth-provider <id>          Comal login: codex | kimi | minimax | grok\n  --effort <level>              auto | off | minimal | low | medium | high | xhigh | max (if the model supports it)\n  --model <id>                  Model; by default discovers the local one at /v1/models\n  --base-url <url>              Endpoint; default http://llama.local:11438/\n  --permission-mode <mode>      default | acceptEdits | plan | auto\n  --allowed-tools <names>     Authorizes comma-separated names\n  --disallowed-tools <names>  Denies names; overrides authorization\n  --resume <uuid>               Resumes session; with -p and no text continues pending work\n  -c, --continue                Resumes the most recent session\n  --output-format <format>     text | json | stream-json (with --print)\n  --max-turns <n>               Calls before extending work with progress (12)\n  --work-max-calls <n>          Total limit with task continuation (80; 0 disables)\n  --context-window <n>          Explicit limit; automatic based on model, fallback 45000\n  --max-tokens <n>              Initial maximum output tokens (8192)\n  --thinking <mode>             auto | on | off | low | medium | high (llama.cpp)\n  --vision <mode>               auto | on | off (auto queries /props when receiving images)\n  --image-tokens <n>            Estimated reservation per image (4096, maximum 2 images)\n  --model-timeout-ms <n>        Total time for each OpenAI response (600000)\n  --model-idle-timeout-ms <n>   Time without OpenAI token progress (180000)\n  --system-prompt <text>       Additional instructions\n  --state-dir <path>            State location; default .comal/ (reuses existing .harness/)\n  --mcp-config <file>        Connects MCP stdio, Streamable HTTP, or SSE from a JSON\n  --trust-mcp                   Authorizes initial connections; changes are reviewed again\n  --plugin-config <file>     Local Node plugins (JSON); default .comal/plugins.json\n  --lang <en|es|auto>           UI language (default: en; auto opts into locale detection)\n  --codemode                    Read-only JavaScript tool composition (default: on)\n  --no-codemode                 Disable CodeRun for this process\n  --trust-plugins               Authorizes loading local code from the initial config\n  --chrome-task <file.json>  Explicit Chrome task; the house coordinates publication, checks, and closure\n  --goal <condition>            Runs a goal until verification or limit\n  --goal-max-turns <n>          Maximum goal turns (20)\n  --goal-max-calls <n>          Total calls: agent + verifiers (80)\n  --goal-max-tokens <n>         Goal token budget (100000)\n  -h, --help                    Shows this help\n  -v, --version                 Shows version\n\nVariables (HARNESS_* remains as alias): COMAL_PROVIDER, COMAL_BASE_URL, COMAL_MODEL,\n           COMAL_CONTEXT_WINDOW, COMAL_MAX_TOKENS, COMAL_WORK_MAX_CALLS,\n           COMAL_MODEL_TIMEOUT_MS, COMAL_MODEL_IDLE_TIMEOUT_MS,\n           OPENAI_BASE_URL, OPENAI_MODEL, OPENAI_API_KEY (optional for local),\n           ANTHROPIC_API_KEY, ANTHROPIC_BASE_URL (with --provider anthropic).\nRead authorized by default; write and Bash require permission.\nIn --print without a terminal, unauthorized tools are denied.\nShift+Tab: default → acceptEdits → plan → auto → default.\nInteractive commands: /help /status /tools /house /operations /sessions /resume UUID /clear\n                       /compact /context /state /audit /board /work resume|recover\n                       /model ID /permissions MODE /goal [condition] /exit\n                       /queue [pause|resume|clear|edit N] /rename NAME /table FILE\nTUI: F1 help · F2 sessions · F4 queue · F5 or /select selection · F6 discover commands/tools.\n     / and Tab complete; ↑/↓ chooses; Enter on suggestions only completes. Alt+C or /copy copies.\n     Ctrl+G editor · Alt+Enter multiline.\nMCP: /mcp · /mcp reload [file] · /mcp add NAME {JSON} · /mcp remove NAME\n     /mcp reconnect NAME. Default file: .mcp.json in the workspace.\nWeb: /search QUERY · WebSearch/WebFetch · COMAL_SEARCH_PROVIDER, SEARXNG_URL, BRAVE_SEARCH_API_KEY.\nSubagents: /agent [explore|general] TASK · /agents [UUID] · Agent/AgentBatch.\nPlugins: /plugins [list|enable ID|disable ID|reload [ID]|run ID OPERATION {JSON}].\nLive sessions: /list-agents · /send ID_OR_NAME TEXT · /inbox [accept|hold|refuse|release ID|all]\nComal account: comal cloud login|status|logout [--cloud-url ORIGIN] (separate from the model provider)\nArtifacts: comal artifacts list|inspect ID|verify ID|publish DIR --manifest JSON|release ID VERSION JOB\nLogin: comal login PROVIDER [--api-key-env VARIABLE] · comal auth status [PROVIDER] · comal logout PROVIDER\nModels: /model [ID] · /models · /effort [LEVEL] · /capabilities [refresh] · /login PROVIDER · /logout PROVIDER\nProviders: /providers · /provider PROFILE · ProviderSearch/AnalyzeMedia according to capabilities.\nCLI: comal peers | providers | message DESTINATION TEXT (use --listen to receive in CLI).\n/goal status|pause|resume|clear controls the goal; Ctrl+C pauses it.\nLocal skills: .comal/skills/<name>/SKILL.md → /<name> [task]\n\nRemote Control: /rc [start|status|stop] · TUI account: /cloud [login|status|logout] · CLI: comal cloud login\n": "Comal · asistente de programación CLI independiente\n\nUso: node bin/comal.mjs [opciones] [prompt]\n     node bin/comal.mjs sessions | evidence | audit --resume UUID\n\n  -p, --print                   Ejecuta un turno y termina (también acepta stdin)\n  --demo                        Demo determinista sin credenciales; permite sus ediciones\n  --cwd <ruta>                  Workspace (por defecto: directorio actual)\n  --provider <protocolo>        openai (predeterminado) | anthropic | gemini\n  --profile <nombre>            Perfil de .comal/providers.json (endpoint/modelo/capacidades)\n  --providers-config <archivo>  Archivo de perfiles; claves sólo vía apiKeyEnv\n  --name <nombre>               Nombre visible a otras sesiones\n  --listen                      Mantiene el CLI escuchando mensajes y responde al quedar idle\n  --inbound <modo>              accept (predeterminado) | hold | refuse\n  --auth-provider <id>          Login de Comal: codex | kimi | minimax | grok\n  --effort <nivel>              auto | off | minimal | low | medium | high | xhigh | max (si el modelo lo admite)\n  --model <id>                  Modelo; por defecto descubre el local en /v1/models\n  --base-url <url>              Endpoint; por defecto http://llama.local:11438/\n  --permission-mode <modo>      default | acceptEdits | plan | auto\n  --allowed-tools <nombres>     Autoriza nombres separados por comas\n  --disallowed-tools <nombres>  Deniega nombres; prevalece sobre autorización\n  --resume <uuid>               Reanuda sesión; con -p sin texto continúa trabajo pendiente\n  -c, --continue                Reanuda la sesión más reciente\n  --output-format <formato>     text | json | stream-json (con --print)\n  --max-turns <n>               Llamadas antes de extender trabajo con progreso (12)\n  --work-max-calls <n>          Límite total con continuación de tareas (80; 0 desactiva)\n  --context-window <n>          Límite explícito; automático según modelo, fallback 45000\n  --max-tokens <n>              Máximo inicial de tokens de salida (8192)\n  --thinking <modo>             auto | on | off | low | medium | high (llama.cpp)\n  --vision <modo>               auto | on | off (auto consulta /props al recibir imágenes)\n  --image-tokens <n>            Reserva estimada por imagen (4096, máximo 2 imágenes)\n  --model-timeout-ms <n>        Tiempo total de cada respuesta OpenAI (600000)\n  --model-idle-timeout-ms <n>   Tiempo sin progreso de tokens OpenAI (180000)\n  --system-prompt <texto>       Instrucciones adicionales\n  --state-dir <ruta>            Ubicación del estado; por defecto .comal/ (reutiliza .harness/ existente)\n  --mcp-config <archivo>        Conecta MCP stdio, Streamable HTTP o SSE de un JSON\n  --trust-mcp                   Autoriza conexiones iniciales; cambios se revisan de nuevo\n  --plugin-config <archivo>     Plugins Node locales (JSON); por defecto .comal/plugins.json\n  --trust-plugins               Autoriza cargar código local de la config inicial\n  --codemode                    Experimental read-only JavaScript tool composition\n  --chrome-task <archivo.json>  Tarea Chrome explícita; la casa coordina publicación, checks y cierre\n  --goal <condición>            Ejecuta un objetivo hasta verificación o límite\n  --goal-max-turns <n>          Máximo de turnos del objetivo (20)\n  --goal-max-calls <n>          Llamadas totales: agente + verificadores (80)\n  --goal-max-tokens <n>         Presupuesto de tokens del objetivo (100000)\n  -h, --help                    Muestra esta ayuda\n  -v, --version                 Muestra versión\n\nVariables (HARNESS_* sigue como alias): COMAL_PROVIDER, COMAL_BASE_URL, COMAL_MODEL,\n           COMAL_CONTEXT_WINDOW, COMAL_MAX_TOKENS, COMAL_WORK_MAX_CALLS,\n           COMAL_MODEL_TIMEOUT_MS, COMAL_MODEL_IDLE_TIMEOUT_MS,\n           OPENAI_BASE_URL, OPENAI_MODEL, OPENAI_API_KEY (opcional para local),\n           ANTHROPIC_API_KEY, ANTHROPIC_BASE_URL (con --provider anthropic).\nLectura autorizada por defecto; escritura y Bash requieren permiso.\nEn --print sin terminal, las herramientas no autorizadas se deniegan.\nShift+Tab: default → acceptEdits → plan → auto → default.\nRemote Control: /rc [start|status|stop] · TUI account: /cloud [login|status|logout] · CLI: comal cloud login\nComandos interactivos: /help /status /tools /house /operations /sessions /resume UUID /clear\n                       /compact /context /state /audit /board /work resume|recover\n                       /model ID /permissions MODO /goal [condición] /exit\n                       /queue [pause|resume|clear|edit N] /rename NOMBRE /table ARCHIVO\nTUI: F1 ayuda · F2 sesiones · F4 cola · F5 o /select selección · F6 descubrir comandos/herramientas.\n     / y Tab completan; ↑/↓ elige; Enter en sugerencias sólo completa. Alt+C o /copy copiar.\n     Ctrl+G editor · Alt+Enter multilínea.\nMCP: /mcp · /mcp reload [archivo] · /mcp add NOMBRE {JSON} · /mcp remove NOMBRE\n     /mcp reconnect NOMBRE. Archivo predeterminado: .mcp.json del workspace.\nWeb: /search CONSULTA · WebSearch/WebFetch · COMAL_SEARCH_PROVIDER, SEARXNG_URL, BRAVE_SEARCH_API_KEY.\nSubagentes: /agent [explore|general] TAREA · /agents [UUID] · Agent/AgentBatch.\nPlugins: /plugins [list|enable ID|disable ID|reload [ID]|run ID OPERACIÓN {JSON}].\nSesiones vivas: /list-agents · /send ID_O_NOMBRE TEXTO · /inbox [accept|hold|refuse|release ID|all]\nCuenta Comal: comal cloud login|status|logout [--cloud-url ORIGEN] (separada del proveedor de modelos)\nArtifacts: comal artifacts list|inspect ID|verify ID|publish DIR --manifest JSON|release ID VERSION JOB\nLogin: comal login PROVEEDOR [--api-key-env VARIABLE] · comal auth status [PROVEEDOR] · comal logout PROVEEDOR\nModelos: /model [ID] · /models · /effort [NIVEL] · /capabilities [refresh] · /login PROVEEDOR · /logout PROVEEDOR\nProveedores: /providers · /provider PERFIL · ProviderSearch/AnalyzeMedia según capacidades.\nCLI: comal peers | providers | message DESTINO TEXTO (usa --listen para recibir en CLI).\n/goal status|pause|resume|clear controla el objetivo; Ctrl+C lo pausa.\nSkills locales: .comal/skills/<nombre>/SKILL.md → /<nombre> [tarea]\n\n  --lang <en|es|auto>           Idioma de interfaz (predeterminado: en)\n\n  --no-codemode                 Desactiva CodeRun para este proceso\n"
+  "Comal · standalone CLI programming assistant\n\nUsage: node bin/comal.mjs [options] [prompt]\n     node bin/comal.mjs sessions | evidence | audit --resume UUID\n\n  -p, --print                   Runs a turn and exits (also accepts stdin)\n  --demo                        Deterministic demo without credentials; allows its edits\n  --cwd <path>                  Workspace (default: current directory)\n  --provider <protocol>        openai (default) | anthropic | gemini\n  --profile <name>            Profile from .comal/providers.json (endpoint/model/capabilities)\n  --providers-config <file>  Profiles file; keys only via apiKeyEnv\n  --name <name>               Name visible to other sessions\n  --listen                      Keeps the CLI listening for messages and responds when idle\n  --inbound <mode>              accept (default) | hold | refuse\n  --no-peers                    No cross-session bus (also COMAL_PEERS=off)\n  --auth-provider <id>          Comal login: codex | kimi | minimax | grok\n  --effort <level>              auto | off | minimal | low | medium | high | xhigh | max (if the model supports it)\n  --model <id>                  Model; by default discovers the local one at /v1/models\n  --base-url <url>              Endpoint; default http://llama.local:11438/\n  --permission-mode <mode>      default | acceptEdits | plan | auto\n  --allowed-tools <names>     Authorizes comma-separated names\n  --disallowed-tools <names>  Denies names; overrides authorization\n  --resume <uuid>               Resumes session; with -p and no text continues pending work\n  -c, --continue                Resumes the most recent session\n  --output-format <format>     text | json | stream-json (with --print)\n  --max-turns <n>               Calls before extending work with progress (12)\n  --work-max-calls <n>          Total limit with task continuation (80; 0 disables)\n  --context-window <n>          Explicit limit; automatic based on model, fallback 45000\n  --max-tokens <n>              Initial maximum output tokens (8192; up to 32000 when the model allows)\n  --autocompact <n|auto|off>    Compaction window: N or Nk tokens, auto or off (also COMAL_AUTOCOMPACT)\n  --thinking <mode>             auto | on | off | low | medium | high (llama.cpp)\n  --vision <mode>               auto | on | off (auto queries /props when receiving images)\n  --image-tokens <n>            Estimated reservation per image (4096, maximum 2 images)\n  --model-timeout-ms <n>        Total time for each OpenAI response (600000)\n  --model-idle-timeout-ms <n>   Time without model token progress (180000)\n  --system-prompt <text>       Additional instructions\n  --state-dir <path>            State location; default .comal/ (reuses existing .harness/)\n  --mcp-config <file>        Connects MCP stdio, Streamable HTTP, or SSE from a JSON\n  --trust-mcp                   Authorizes initial connections; changes are reviewed again\n  --plugin-config <file>     Local Node plugins (JSON); default .comal/plugins.json\n  --lang <en|es|auto>           UI language (default: en; auto opts into locale detection)\n  --codemode                    Read-only JavaScript tool composition (default: on)\n  --no-codemode                 Disable CodeRun for this process\n  --trust-plugins               Authorizes loading local code from the initial config\n  --chrome-task <file.json>  Explicit Chrome task; the house coordinates publication, checks, and closure\n  --goal <condition>            Runs a goal until verification or limit\n  --goal-max-turns <n>          Maximum goal turns (20)\n  --goal-max-calls <n>          Total calls: agent + verifiers (80)\n  --goal-max-tokens <n>         Goal token budget (100000)\n  -h, --help                    Shows this help\n  -v, --version                 Shows version\n\nVariables (HARNESS_* remains as alias): COMAL_PROVIDER, COMAL_BASE_URL, COMAL_MODEL,\n           COMAL_CONTEXT_WINDOW, COMAL_MAX_TOKENS, COMAL_WORK_MAX_CALLS,\n           COMAL_MODEL_TIMEOUT_MS, COMAL_MODEL_IDLE_TIMEOUT_MS,\n           OPENAI_BASE_URL, OPENAI_MODEL, OPENAI_API_KEY (optional for local),\n           ANTHROPIC_API_KEY, ANTHROPIC_BASE_URL (with --provider anthropic).\nRead authorized by default; write and Bash require permission.\nIn --print without a terminal, unauthorized tools are denied.\nShift+Tab: default → acceptEdits → plan → auto → default.\nInteractive commands: /help /status /tools /house /operations /sessions /resume UUID /clear\n                       /compact /context /state /audit /board /work resume|recover\n                       /model ID /permissions MODE /goal [condition] /exit\n                       /queue [pause|resume|clear|edit N] /rename NAME /table FILE\nTUI: F1 help · F2 sessions · F4 queue · F5 or /select selection · F6 discover commands/tools.\n     / and Tab complete; ↑/↓ chooses; Enter on suggestions only completes. Alt+C or /copy copies.\n     Ctrl+G editor · Alt+Enter multiline.\nMCP: /mcp · /mcp reload [file] · /mcp add NAME {JSON} · /mcp remove NAME\n     /mcp reconnect NAME. Default file: .mcp.json in the workspace.\nWeb: /search QUERY · WebSearch/WebFetch · COMAL_SEARCH_PROVIDER, SEARXNG_URL, BRAVE_SEARCH_API_KEY.\nSubagents: /agent [explore|general] TASK · /agents [UUID] · Agent/AgentBatch.\nPlugins: /plugins [list|enable ID|disable ID|reload [ID]|run ID OPERATION {JSON}].\nLive sessions: /list-agents · /send ID_OR_NAME TEXT · /inbox [accept|hold|refuse|release ID|all]\nComal account: comal cloud login|status|logout [--cloud-url ORIGIN] (separate from the model provider)\nArtifacts: comal artifacts list|inspect ID|verify ID|publish DIR --manifest JSON|release ID VERSION JOB\nLogin: comal login PROVIDER [--api-key-env VARIABLE] · comal auth status [PROVIDER] · comal logout PROVIDER\nModels: /model [ID] · /models · /effort [LEVEL] · /capabilities [refresh] · /login PROVIDER · /logout PROVIDER\nProviders: /providers · /provider PROFILE · ProviderSearch/AnalyzeMedia according to capabilities.\nCLI: comal peers | providers | message DESTINATION TEXT (use --listen to receive in CLI).\n/goal status|pause|resume|clear controls the goal; Ctrl+C pauses it.\nLocal skills: .comal/skills/<name>/SKILL.md → /<name> [task]\n\nRemote Control: /rc [start|status|stop] · TUI account: /cloud [login|status|logout] · CLI: comal cloud login\n": "Comal · asistente de programación CLI independiente\n\nUso: node bin/comal.mjs [opciones] [prompt]\n     node bin/comal.mjs sessions | evidence | audit --resume UUID\n\n  -p, --print                   Ejecuta un turno y termina (también acepta stdin)\n  --demo                        Demo determinista sin credenciales; permite sus ediciones\n  --cwd <ruta>                  Workspace (por defecto: directorio actual)\n  --provider <protocolo>        openai (predeterminado) | anthropic | gemini\n  --profile <nombre>            Perfil de .comal/providers.json (endpoint/modelo/capacidades)\n  --providers-config <archivo>  Archivo de perfiles; claves sólo vía apiKeyEnv\n  --name <nombre>               Nombre visible a otras sesiones\n  --listen                      Mantiene el CLI escuchando mensajes y responde al quedar idle\n  --inbound <modo>              accept (predeterminado) | hold | refuse\n  --no-peers                    Sin bus entre sesiones (también COMAL_PEERS=off)\n  --auth-provider <id>          Login de Comal: codex | kimi | minimax | grok\n  --effort <nivel>              auto | off | minimal | low | medium | high | xhigh | max (si el modelo lo admite)\n  --model <id>                  Modelo; por defecto descubre el local en /v1/models\n  --base-url <url>              Endpoint; por defecto http://llama.local:11438/\n  --permission-mode <modo>      default | acceptEdits | plan | auto\n  --allowed-tools <nombres>     Autoriza nombres separados por comas\n  --disallowed-tools <nombres>  Deniega nombres; prevalece sobre autorización\n  --resume <uuid>               Reanuda sesión; con -p sin texto continúa trabajo pendiente\n  -c, --continue                Reanuda la sesión más reciente\n  --output-format <formato>     text | json | stream-json (con --print)\n  --max-turns <n>               Llamadas antes de extender trabajo con progreso (12)\n  --work-max-calls <n>          Límite total con continuación de tareas (80; 0 desactiva)\n  --context-window <n>          Límite explícito; automático según modelo, fallback 45000\n  --max-tokens <n>              Máximo inicial de tokens de salida (8192; hasta 32000 si el modelo lo admite)\n  --autocompact <n|auto|off>    Ventana de compactación: N o Nk tokens, auto u off (también COMAL_AUTOCOMPACT)\n  --thinking <modo>             auto | on | off | low | medium | high (llama.cpp)\n  --vision <modo>               auto | on | off (auto consulta /props al recibir imágenes)\n  --image-tokens <n>            Reserva estimada por imagen (4096, máximo 2 imágenes)\n  --model-timeout-ms <n>        Tiempo total de cada respuesta OpenAI (600000)\n  --model-idle-timeout-ms <n>   Tiempo sin progreso de tokens del modelo (180000)\n  --system-prompt <texto>       Instrucciones adicionales\n  --state-dir <ruta>            Ubicación del estado; por defecto .comal/ (reutiliza .harness/ existente)\n  --mcp-config <archivo>        Conecta MCP stdio, Streamable HTTP o SSE de un JSON\n  --trust-mcp                   Autoriza conexiones iniciales; cambios se revisan de nuevo\n  --plugin-config <archivo>     Plugins Node locales (JSON); por defecto .comal/plugins.json\n  --trust-plugins               Autoriza cargar código local de la config inicial\n  --codemode                    Experimental read-only JavaScript tool composition\n  --chrome-task <archivo.json>  Tarea Chrome explícita; la casa coordina publicación, checks y cierre\n  --goal <condición>            Ejecuta un objetivo hasta verificación o límite\n  --goal-max-turns <n>          Máximo de turnos del objetivo (20)\n  --goal-max-calls <n>          Llamadas totales: agente + verificadores (80)\n  --goal-max-tokens <n>         Presupuesto de tokens del objetivo (100000)\n  -h, --help                    Muestra esta ayuda\n  -v, --version                 Muestra versión\n\nVariables (HARNESS_* sigue como alias): COMAL_PROVIDER, COMAL_BASE_URL, COMAL_MODEL,\n           COMAL_CONTEXT_WINDOW, COMAL_MAX_TOKENS, COMAL_WORK_MAX_CALLS,\n           COMAL_MODEL_TIMEOUT_MS, COMAL_MODEL_IDLE_TIMEOUT_MS,\n           OPENAI_BASE_URL, OPENAI_MODEL, OPENAI_API_KEY (opcional para local),\n           ANTHROPIC_API_KEY, ANTHROPIC_BASE_URL (con --provider anthropic).\nLectura autorizada por defecto; escritura y Bash requieren permiso.\nEn --print sin terminal, las herramientas no autorizadas se deniegan.\nShift+Tab: default → acceptEdits → plan → auto → default.\nRemote Control: /rc [start|status|stop] · TUI account: /cloud [login|status|logout] · CLI: comal cloud login\nComandos interactivos: /help /status /tools /house /operations /sessions /resume UUID /clear\n                       /compact /context /state /audit /board /work resume|recover\n                       /model ID /permissions MODO /goal [condición] /exit\n                       /queue [pause|resume|clear|edit N] /rename NOMBRE /table ARCHIVO\nTUI: F1 ayuda · F2 sesiones · F4 cola · F5 o /select selección · F6 descubrir comandos/herramientas.\n     / y Tab completan; ↑/↓ elige; Enter en sugerencias sólo completa. Alt+C o /copy copiar.\n     Ctrl+G editor · Alt+Enter multilínea.\nMCP: /mcp · /mcp reload [archivo] · /mcp add NOMBRE {JSON} · /mcp remove NOMBRE\n     /mcp reconnect NOMBRE. Archivo predeterminado: .mcp.json del workspace.\nWeb: /search CONSULTA · WebSearch/WebFetch · COMAL_SEARCH_PROVIDER, SEARXNG_URL, BRAVE_SEARCH_API_KEY.\nSubagentes: /agent [explore|general] TAREA · /agents [UUID] · Agent/AgentBatch.\nPlugins: /plugins [list|enable ID|disable ID|reload [ID]|run ID OPERACIÓN {JSON}].\nSesiones vivas: /list-agents · /send ID_O_NOMBRE TEXTO · /inbox [accept|hold|refuse|release ID|all]\nCuenta Comal: comal cloud login|status|logout [--cloud-url ORIGEN] (separada del proveedor de modelos)\nArtifacts: comal artifacts list|inspect ID|verify ID|publish DIR --manifest JSON|release ID VERSION JOB\nLogin: comal login PROVEEDOR [--api-key-env VARIABLE] · comal auth status [PROVEEDOR] · comal logout PROVEEDOR\nModelos: /model [ID] · /models · /effort [NIVEL] · /capabilities [refresh] · /login PROVEEDOR · /logout PROVEEDOR\nProveedores: /providers · /provider PERFIL · ProviderSearch/AnalyzeMedia según capacidades.\nCLI: comal peers | providers | message DESTINO TEXTO (usa --listen para recibir en CLI).\n/goal status|pause|resume|clear controla el objetivo; Ctrl+C lo pausa.\nSkills locales: .comal/skills/<nombre>/SKILL.md → /<nombre> [tarea]\n\n  --lang <en|es|auto>           Idioma de interfaz (predeterminado: en)\n\n  --no-codemode                 Desactiva CodeRun para este proceso\n"
 });

package/src/i18n/es.mjs

@@ -1,5 +1,18 @@
 // Host-authored interface text only. User/model/evidence content is never translated.
 export default Object.freeze({
+  "{provider} model exceeded {limit} after {seconds} s ({stage}). No tools from this response were executed. {guidance}": "Modelo {provider} agotó {limit} tras {seconds} s ({stage}). No se ejecutaron herramientas de esta respuesta. {guidance}",
+  "Anthropic declined this request (category: {category}).": "Anthropic declinó esta petición (categoría: {category}).",
+  "A server-side fallback was attempted and also declined.": "Se intentó un fallback del lado del servidor y también fue declinado.",
+  "Server-side fallback is off or unavailable for this model.": "El fallback del lado del servidor está desactivado o no disponible para este modelo.",
+  "Next: switch models with /model, or for legitimate security work apply to the Cyber Verification Program: https://support.claude.com/en/articles/14604842-real-time-cyber-safeguards-on-claude-opus-and-sonnet": "Siguiente paso: cambia de modelo con /model, o para trabajo de seguridad legítimo solicita el Cyber Verification Program: https://support.claude.com/en/articles/14604842-real-time-cyber-safeguards-on-claude-opus-and-sonnet",
+  "unspecified": "sin especificar",
+  "--anthropic-fallback only applies to the Anthropic provider.": "--anthropic-fallback sólo aplica al proveedor Anthropic.",
+  "Anthropic fallback: {v0}": "Fallback de Anthropic: {v0}",
+  " · fallback {v0}": " · fallback {v0}",
+  "Anthropic declined (category: {v0}).{v1}": "Anthropic declinó (categoría: {v0}).{v1}",
+  " Fallback also declined.": " El fallback también declinó.",
+  "Served by fallback model {v0}.": "Respondió el modelo de fallback {v0}.",
+  "Anthropic fallback": "Fallback de Anthropic",
   "Invalid model timing: {name} must be between 1 and 3600000 ms.": "Tiempo de modelo inválido: {name} debe estar entre 1 y 3600000 ms.",
   "Check /v1/models or set --model / COMAL_MODEL to skip discovery.": "Revisa /v1/models o fija --model / COMAL_MODEL para omitir el descubrimiento.",
   "Adjust {setting} if the model needs more time.": "Ajusta {setting} si el modelo necesita más tiempo.",
@@ -86,6 +99,7 @@ export default Object.freeze({
   "Display a CSV, TSV, JSON, or Markdown table": "Mostrar una tabla CSV, TSV, JSON o Markdown",
   "FILE": "ARCHIVO",
   "Change the visible name of this session": "Cambiar el nombre visible de esta sesión",
+  "Open another directory for reading and writing, or list the open ones": "Abrir otra carpeta para leer y escribir, o listar las abiertas",
   "NAME": "NOMBRE",
   "Manage queued messages": "Gestionar los mensajes en cola",
   "Define or control a persistent goal": "Definir o controlar un objetivo persistente",
@@ -251,7 +265,7 @@ export default Object.freeze({
   "Ready": "Listo",
   "Preparing turn": "Preparando turno",
   "Connecting to the model": "Conectando con el modelo",
-  "# Comal · keyboard\n\n| Action | Key |\n| --- | --- |\n| Discover commands and tools | F6 |\n| Complete command or argument | / and Tab; ↑/↓ chooses; Esc closes |\n| Send / enqueue | Enter (suggestions only complete) |\n| New line | Alt+Enter or Ctrl+J |\n| Switch mode | Shift+Tab |\n| Edit with $VISUAL/$EDITOR | Ctrl+G |\n| Work board | F3 or /board |\n| Swarm panel (open-relay) | /swarm · /swarm strip |\n| Continue from checkpoint | /work resume |\n| Sessions / resume | F2 or Ctrl+S |\n| Message queue | F4 or Ctrl+Q |\n| Expand tool results | Ctrl+O |\n| Scroll history | Mouse wheel / PgUp / PgDn |\n| Select text with mouse | F5 or /select; F5 or Esc returns |\n| Copy last full response | Alt+C or /copy |\n| Go to end | Ctrl+End |\n| Composer history | ↑/↓ on first/last line |\n| Start / end of line | Home / End or Ctrl+A / Ctrl+E |\n| Delete word / start / end | Ctrl+W / Ctrl+U / Ctrl+K |\n| Cancel turn / pause goal | Ctrl+C or Esc while working |\n| Exit | Ctrl+D with empty composer or /exit |\n\nYou can keep typing during streaming. Sent messages run in order when the current turn ends. F4 lets you pause, edit, remove, and reorder the queue.\n\n/context shows the context budget. /compact derives state without LLM and waits its turn if there is active work. /state shows request and state; /audit verifies the ledger. The original history is preserved.\n/house shows execution receipts and interrupted operations; /operations shows contracts and declared effects. Execution success does not certify the human goal.\n/plugins shows plugins, dependencies, and operations; enable/disable/reload wait their turn and only the user can change their lifecycle.\n/model ID and /effort LEVEL change the next call; during work they stay queued. /models lists models and /capabilities shows support, provenance, and levels. E indicates effort; Ctx shows the effective window (k/M tokens); ~ indicates a configured limit, ? unknown/fallback capability. /context shows exact values, reserve, and source. /login PROVIDER authenticates; /logout PROVIDER removes credentials from Comal.\n\n**Help keeps the composer active.** You can type while viewing it; PgUp/PgDn scrolls it and Esc/F1 closes it. Sending returns to the conversation. The wheel scrolls the conversation; the arrows edit the draft. F5 releases the mouse and freezes the view: drag to select and use your terminal's copy action (usually Ctrl+Shift+C). Work continues and the view updates when you return. /copy preserves Markdown and code blocks, without the screen line wrapping. Multi-line paste is not sent automatically.": "# Comal · teclado\n\n| Acción | Tecla |\n| --- | --- |\n| Descubrir comandos y herramientas | F6 |\n| Completar comando o argumento | / y Tab; ↑/↓ elige; Esc cierra |\n| Enviar / encolar | Enter (las sugerencias sólo completan) |\n| Nueva línea | Alt+Enter o Ctrl+J |\n| Cambiar modo | Shift+Tab |\n| Editar con $VISUAL/$EDITOR | Ctrl+G |\n| Tablero de trabajo | F3 o /board |\n| Panel del enjambre (open-relay) | /swarm · /swarm strip |\n| Continuar desde checkpoint | /work resume |\n| Sesiones / reanudar | F2 o Ctrl+S |\n| Cola de mensajes | F4 o Ctrl+Q |\n| Desplegar resultados de herramientas | Ctrl+O |\n| Scroll del historial | Rueda del mouse / PgUp / PgDn |\n| Seleccionar texto con el mouse | F5 o /select; F5 o Esc vuelve |\n| Copiar última respuesta completa | Alt+C o /copy |\n| Ir al final | Ctrl+End |\n| Historial del composer | ↑/↓ en primera/última línea |\n| Inicio / final de línea | Home / End o Ctrl+A / Ctrl+E |\n| Borrar palabra / inicio / final | Ctrl+W / Ctrl+U / Ctrl+K |\n| Cancelar turno / pausar goal | Ctrl+C o Esc mientras trabaja |\n| Salir | Ctrl+D con composer vacío o /exit |\n\nPuedes seguir escribiendo durante el streaming. Los mensajes enviados se ejecutan en orden al terminar el turno actual. F4 permite pausar, editar, quitar y reordenar la cola.\n\n/context muestra el presupuesto de contexto. /compact deriva el estado sin LLM y espera su turno si hay trabajo activo. /state muestra petición y estado; /audit verifica el libro. El historial original se conserva.\n/house muestra recibos de ejecución y operaciones interrumpidas; /operations muestra contratos y efectos declarados. El éxito de ejecución no certifica el objetivo humano.\n/plugins muestra plugins, dependencias y operaciones; enable/disable/reload esperan su turno y sólo el usuario puede cambiar su ciclo de vida.\n/model ID y /effort NIVEL cambian la siguiente llamada; durante trabajo quedan en cola. /models lista modelos y /capabilities muestra soporte, procedencia y niveles. E indica esfuerzo; Ctx muestra la ventana efectiva (k/M tokens); ~ indica un límite configurado, ? capacidad desconocida/fallback. /context muestra valores exactos, reserva y fuente. /login PROVEEDOR autentica; /logout PROVEEDOR retira credenciales de Comal.\n\n**La ayuda mantiene activo el composer.** Puedes escribir mientras la consultas; PgUp/PgDn la desplaza y Esc/F1 la cierra. Al enviar vuelve la conversación. La rueda desplaza la conversación; las flechas editan el borrador. F5 libera el mouse y congela la vista: arrastra para seleccionar y usa la acción de copiar de tu terminal (normalmente Ctrl+Shift+C). El trabajo continúa y la vista se actualiza al volver. /copy conserva Markdown y bloques de código, sin el ajuste de líneas de la pantalla. El pegado multilínea no se envía automáticamente.",
+  "# Comal · keyboard\n\n| Action | Key |\n| --- | --- |\n| Discover commands and tools | F6 |\n| Complete command or argument | / and Tab; ↑/↓ chooses; Esc closes |\n| Send / enqueue | Enter (suggestions only complete) |\n| New line | Alt+Enter or Ctrl+J |\n| Switch mode | Shift+Tab |\n| Edit with $VISUAL/$EDITOR | Ctrl+G |\n| Work board | F3 or /board |\n| Swarm of this repo (open-relay) | /relay |\n| Swarm panel (open-relay) | /swarm · /swarm strip |\n| Continue from checkpoint | /work resume |\n| Sessions / resume | F2 or Ctrl+S |\n| Message queue | F4 or Ctrl+Q |\n| Expand tool results | Ctrl+O |\n| Scroll history | Mouse wheel / PgUp / PgDn |\n| Select text with mouse | F5 or /select; F5 or Esc returns |\n| Copy last full response | Alt+C or /copy |\n| Go to end | Ctrl+End |\n| Composer history | ↑/↓ on first/last line |\n| Start / end of line | Home / End or Ctrl+A / Ctrl+E |\n| Delete word / start / end | Ctrl+W / Ctrl+U / Ctrl+K |\n| Cancel turn / pause goal | Ctrl+C or Esc while working |\n| Exit | Ctrl+D with empty composer or /exit |\n\nYou can keep typing during streaming. Sent messages run in order when the current turn ends. F4 lets you pause, edit, remove, and reorder the queue.\n\n/context shows the context budget. /compact derives state without LLM and waits its turn if there is active work. /state shows request and state; /audit verifies the ledger. The original history is preserved.\n/house shows execution receipts and interrupted operations; /operations shows contracts and declared effects. Execution success does not certify the human goal.\n/plugins shows plugins, dependencies, and operations; enable/disable/reload wait their turn and only the user can change their lifecycle.\n/model ID and /effort LEVEL change the next call; during work they stay queued. /models lists models and /capabilities shows support, provenance, and levels. E indicates effort; Ctx shows the effective window (k/M tokens); ~ indicates a configured limit, ? unknown/fallback capability. /context shows exact values, reserve, and source. /login PROVIDER authenticates; /logout PROVIDER removes credentials from Comal.\n\n**Help keeps the composer active.** You can type while viewing it; PgUp/PgDn scrolls it and Esc/F1 closes it. Sending returns to the conversation. The wheel scrolls the conversation; the arrows edit the draft. F5 releases the mouse and freezes the view: drag to select and use your terminal's copy action (usually Ctrl+Shift+C). Work continues and the view updates when you return. /copy preserves Markdown and code blocks, without the screen line wrapping. Multi-line paste is not sent automatically.": "# Comal · teclado\n\n| Acción | Tecla |\n| --- | --- |\n| Descubrir comandos y herramientas | F6 |\n| Completar comando o argumento | / y Tab; ↑/↓ elige; Esc cierra |\n| Enviar / encolar | Enter (las sugerencias sólo completan) |\n| Nueva línea | Alt+Enter o Ctrl+J |\n| Cambiar modo | Shift+Tab |\n| Editar con $VISUAL/$EDITOR | Ctrl+G |\n| Tablero de trabajo | F3 o /board |\n| Enjambre de este repo (open-relay) | /relay |\n| Panel del enjambre (open-relay) | /swarm · /swarm strip |\n| Continuar desde checkpoint | /work resume |\n| Sesiones / reanudar | F2 o Ctrl+S |\n| Cola de mensajes | F4 o Ctrl+Q |\n| Desplegar resultados de herramientas | Ctrl+O |\n| Scroll del historial | Rueda del mouse / PgUp / PgDn |\n| Seleccionar texto con el mouse | F5 o /select; F5 o Esc vuelve |\n| Copiar última respuesta completa | Alt+C o /copy |\n| Ir al final | Ctrl+End |\n| Historial del composer | ↑/↓ en primera/última línea |\n| Inicio / final de línea | Home / End o Ctrl+A / Ctrl+E |\n| Borrar palabra / inicio / final | Ctrl+W / Ctrl+U / Ctrl+K |\n| Cancelar turno / pausar goal | Ctrl+C o Esc mientras trabaja |\n| Salir | Ctrl+D con composer vacío o /exit |\n\nPuedes seguir escribiendo durante el streaming. Los mensajes enviados se ejecutan en orden al terminar el turno actual. F4 permite pausar, editar, quitar y reordenar la cola.\n\n/context muestra el presupuesto de contexto. /compact deriva el estado sin LLM y espera su turno si hay trabajo activo. /state muestra petición y estado; /audit verifica el libro. El historial original se conserva.\n/house muestra recibos de ejecución y operaciones interrumpidas; /operations muestra contratos y efectos declarados. El éxito de ejecución no certifica el objetivo humano.\n/plugins muestra plugins, dependencias y operaciones; enable/disable/reload esperan su turno y sólo el usuario puede cambiar su ciclo de vida.\n/model ID y /effort NIVEL cambian la siguiente llamada; durante trabajo quedan en cola. /models lista modelos y /capabilities muestra soporte, procedencia y niveles. E indica esfuerzo; Ctx muestra la ventana efectiva (k/M tokens); ~ indica un límite configurado, ? capacidad desconocida/fallback. /context muestra valores exactos, reserva y fuente. /login PROVEEDOR autentica; /logout PROVEEDOR retira credenciales de Comal.\n\n**La ayuda mantiene activo el composer.** Puedes escribir mientras la consultas; PgUp/PgDn la desplaza y Esc/F1 la cierra. Al enviar vuelve la conversación. La rueda desplaza la conversación; las flechas editan el borrador. F5 libera el mouse y congela la vista: arrastra para seleccionar y usa la acción de copiar de tu terminal (normalmente Ctrl+Shift+C). El trabajo continúa y la vista se actualiza al volver. /copy conserva Markdown y bloques de código, sin el ajuste de líneas de la pantalla. El pegado multilínea no se envía automáticamente.",
   "View or configure MCP servers": "Ver o configurar servidores MCP",
   "View plugins and control their lifecycle": "Ver plugins y controlar su ciclo de vida",
   "View and control child runs": "Ver y controlar ejecuciones hijas",
@@ -323,6 +337,7 @@ export default Object.freeze({
   "Connection applied; live-session presence could not be refreshed.": "Conexión aplicada; no se pudo actualizar la presencia de la sesión en vivo.",
   "Model catalog unavailable; the active connection is unverified. No inference was sent.": "Catálogo de modelos no disponible; la conexión activa no está verificada. No se envió ninguna inferencia.",
   "Cross-session messaging is unavailable on this platform. Local work remains available.": "Los mensajes entre sesiones no están disponibles en esta plataforma. El trabajo local sigue disponible.",
+  "Cross-session messaging unavailable ({v0}); continuing without peers. Use --no-peers or COMAL_PEERS=off to skip it.": "Mensajes entre sesiones no disponibles ({v0}); se continúa sin peers. Usa --no-peers o COMAL_PEERS=off para omitirlos.",
   "Attach up to two images per message.": "Adjunta hasta dos imágenes por mensaje.",
   "The session changed; the image was not attached.": "La sesión cambió; no se adjuntó la imagen.",
   "Checking vision support…": "Comprobando soporte de visión…",
@@ -355,11 +370,31 @@ export default Object.freeze({
   "Start a new sign-in only if you choose this option.": "Inicia otra autenticación solo si eliges esta opción.",
   // Panel /swarm (open-relay, fase 4)
   "Open the open-relay swarm panel": "Abrir el panel del enjambre open-relay",
+  "Create or open the swarm project of this repo and start a swarm (human cards)": "Crear o abrir el proyecto de enjambre de este repo y arrancar un enjambre (tarjetas humanas)",
+  "Swarm project of this repo; every step is a card you confirm": "Proyecto de enjambre de este repo; cada paso es una tarjeta que confirmas",
+  "PgUp/PgDn scrolls · lines {from}–{to} of {count}": "PgUp/PgDn desplaza · líneas {from}–{to} de {count}",
   "Toggle the compact swarm summary next to the conversation": "Mostrar u ocultar el resumen compacto del enjambre junto a la conversación",
+  "reasoned {v0}": "razonó {v0}",
+  "first response {v0}": "primera respuesta {v0}",
+  "tools {v0}": "herramientas {v0}",
+  "waiting for you {v0}": "esperándote {v0}",
+  "Reasoning…": "Razonando…",
+  "Responding…": "Respondiendo…",
+  "Response timing on: a dim line after each answer. /timing off hides it.": "Tiempos de respuesta activos: una línea tenue después de cada respuesta. /timing off los oculta.",
+  "Response timing off. /timing on shows it again.": "Tiempos de respuesta ocultos. /timing on los vuelve a mostrar.",
+  "Use /timing [on|off].": "Usa /timing [on|off].",
+  "Show or hide response timing after each answer": "Mostrar u ocultar los tiempos de respuesta después de cada respuesta",
   "Use /swarm or /swarm strip [on|off].": "Usa /swarm o /swarm strip [on|off].",
   "Swarm strip on: a compact summary next to the conversation (terminals 110+ columns wide). /swarm strip turns it off.": "Franja del enjambre activa: un resumen compacto junto a la conversación (terminales de 110+ columnas). /swarm strip la apaga.",
   "Swarm strip off.": "Franja del enjambre apagada.",
   "VERIFYING": "VERIFICANDO",
+  "IN REVIEW": "EN REVISIÓN",
+  "waiting for the success criteria": "espera los criterios de éxito",
+  "the reviewer is correcting it": "el revisor la está corrigiendo",
+  "task review": "revisión de tarea",
+  "integration review": "revisión de integración",
+  "final review": "revisión final",
+  "reviewer objections: {n}": "objeciones del revisor: {n}",
   "DONE": "HECHO",
   "FAILED · CANCELLED": "FALLIDO · CANCELADO",
   "OTHER": "OTROS",
@@ -429,7 +464,9 @@ export default Object.freeze({
   "(agent recommends)": "(la recomienda el agente)",
   "  Nothing waiting for you in this swarm.": "  Nada te espera en este swarm.",
   "{used}/{max} attempts": "{used}/{max} intentos",
+  "{used}/{max} attempts (+{excused} excused)": "{used}/{max} intentos (+{excused} excusados)",
   "infrastructure streak exhausted": "racha de infraestructura agotada",
+  "wake cap reached: only you can resume it": "tope de despertares agotado: sólo tú la reanudas",
   "  No tasks in this swarm yet.": "  Este swarm aún no tiene tareas.",
   "  Some tasks or roles are not shown (panel limit). Ask for plugin__open-relay__Swarm for the full list.": "  Hay tareas o roles sin mostrar (tope del panel). Pide plugin__open-relay__Swarm para la lista completa.",
   "last event {seq} · {type}": "último evento {seq} · {type}",

package/src/judges.mjs

@@ -3,8 +3,9 @@ import { digest } from './operations.mjs';
 import { randomUUID } from 'node:crypto';
 import { performance } from 'node:perf_hooks';
 
+// Reasoning models spend part of this budget thinking before the JSON verdict.
 export async function judgeJSON(provider, system, data, signal, purpose = 'goal-evaluation', responseSchema) {
-  const answer = await provider.complete({ system, messages: [{ role: 'user', content: JSON.stringify(data) }], tools: [], maxTokens: 2048, signal, purpose, ...(responseSchema?{responseSchema}:{}) });
+  const answer = await provider.complete({ system, messages: [{ role: 'user', content: JSON.stringify(data) }], tools: [], maxTokens: 8192, signal, purpose, ...(responseSchema?{responseSchema}:{}) });
   const text = answer.content.filter(b => b.type === 'text').map(b => b.text).join('').trim().replace(/^```(?:json)?\s*|\s*```$/g, '');
   const result = JSON.parse(text);
   if (!result || Array.isArray(result) || typeof result !== 'object') throw new Error('El verificador no devolvió un objeto JSON.');

package/src/mcp.mjs

@@ -1,3 +1,4 @@
+import { childEnvironment } from './child-env.mjs';
 import { spawn } from 'node:child_process';
 import { createHash } from 'node:crypto';
 
@@ -12,7 +13,7 @@ export class McpClient extends McpRpcClient {
     if (!config || typeof config.command !== 'string' || !config.command || config.args && (!Array.isArray(config.args) || config.args.some(v => typeof v !== 'string'))) throw new Error(`Configuración MCP inválida: ${name}`);
     if (config.env && (typeof config.env !== 'object' || Array.isArray(config.env) || Object.values(config.env).some(v => typeof v !== 'string'))) throw new Error(`env MCP inválido: ${name}`);
     this.transport = 'stdio';
-    this.child = spawn(config.command, config.args || [], { cwd, env: { ...process.env, ...config.env }, stdio: ['pipe', 'pipe', 'pipe'], detached: true });
+    this.child = spawn(config.command, config.args || [], { cwd, env: childEnvironment(process.env, config.env), stdio: ['pipe', 'pipe', 'pipe'], detached: true });
     this.child.on('error', err => this.fail(err));
     this.child.on('exit', () => this.fail(new Error(`Servidor MCP ${name} terminó.`)));
     this.child.stdin.on('error', err => this.fail(err));

package/src/model-controls.mjs

@@ -10,6 +10,7 @@ export function normalizeEffort(value = 'auto') {
   if (typeof value !== 'string' || !validLevel(value)) throw fail(`Invalid effort. Use ${EFFORT_LEVELS.join(', ')}.`);
   return value;
 }
+const claude5 = provider => protocol(provider) === 'anthropic' && /^claude-(?:opus|sonnet|haiku)-5(?:[-.]|$)/.test(provider.model || '');
 function protocol(provider) { return provider.protocol || (provider.url ? 'anthropic' : provider.baseURL?.includes('generativelanguage') ? 'gemini' : 'openai'); }
 function headers(provider) {
   return typeof provider.headers === 'function' ? provider.headers() : protocol(provider) === 'anthropic'
@@ -83,6 +84,11 @@ export async function discoverModelCapabilities(provider, { signal, force = fals
     const field = ['context_window','context_length','inputTokenLimit','max_input_tokens'].find(key=>Number.isSafeInteger(metadata[key]) && metadata[key]>0);
     const context = field ? metadata[field] : metadata.meta?.n_ctx;
     if (Number.isSafeInteger(context) && context > 0) { result.contextWindow = context; result.contextWindowProvenance = { source, field: field || 'meta.n_ctx', scope: ['inputTokenLimit','max_input_tokens'].includes(field) ? 'input_limit' : 'context', kind: 'detected' }; }
+    // Output ceiling when the catalogue states one (Gemini outputTokenLimit,
+    // Anthropic max_tokens, OpenAI-style max_output_tokens). It only caps the
+    // model-aware default output budget; an explicit --max-tokens still wins.
+    const outputField = ['max_output_tokens', 'outputTokenLimit', 'max_completion_tokens', 'max_tokens'].find(key => Number.isSafeInteger(metadata[key]) && metadata[key] > 0);
+    if (outputField) { result.outputTokenLimit = metadata[outputField]; result.outputTokenLimitProvenance = { source, field: outputField, kind: 'detected' }; }
     let levels = effortValues(metadata.supported_reasoning_efforts || metadata.reasoning_effort?.values || metadata.thinking?.values || caps?.effort?.levels);
     if (caps?.effort && typeof caps.effort === 'object') levels = [...new Set([...levels, ...EFFORT_LEVELS.filter(level => bool(caps.effort[level]) === true)])];
     if (levels.length || bool(caps?.effort) === false) result.effort = { ...result.effort, supported: levels.length > 0, levels: ['auto', ...levels], source };
@@ -156,6 +162,8 @@ export async function discoverModelCapabilities(provider, { signal, force = fals
       announced(await optional(() => json(provider, url, { signal })), `${protocol(provider)}_model`);
     }
   }
+  // The Anthropic Messages adapter implements tool use; catalogues do not announce it.
+  if (protocol(provider) === 'anthropic' && result.capabilities.tools === null) put('tools', true, 'adapter_default', 'adapter');
   // Discovery cannot add a wire feature this adapter has not implemented.
   if (protocol(provider) !== 'gemini') { put('video', false, 'adapter_unsupported', 'adapter'); put('web_search', false, 'adapter_unsupported', 'adapter'); }
   const configured = provider.capabilitiesConfigured || {};
@@ -173,7 +181,7 @@ export async function setProviderEffort(provider, value, { signal } = {}) {
   value = normalizeEffort(value);
   if (value !== 'auto') {
     const state = await discoverModelCapabilities(provider, { signal });
-    if (!state.effort.levels.includes(value)) throw fail(`Model ${provider.model || '(no model)'} does not advertise effort ${value}. Available: ${state.effort.levels.join(', ')}.`);
+    if (!state.effort.levels.includes(value) && !(value === 'off' && claude5(provider) && state.effort.levels.includes('low'))) throw fail(`Model ${provider.model || '(no model)'} does not advertise effort ${value}. Available: ${state.effort.levels.join(', ')}.`);
   }
   provider.effort = value;
   if (Object.hasOwn(provider, 'thinking')) provider.thinking = 'auto';
@@ -183,7 +191,13 @@ export async function providerEffortWire(provider, { signal } = {}) {
   const value = normalizeEffort(provider.effort || 'auto');
   if (value === 'auto') return {};
   await setProviderEffort(provider, value, { signal });
-  if (protocol(provider) === 'anthropic') return value === 'off' ? { thinking: { type: 'disabled' } } : { output_config: { effort: value } };
+  if (protocol(provider) === 'anthropic') {
+    // Claude 5.x rejects thinking.disabled and budget_tokens (HTTP 400); thinking is
+    // adaptive by default there, so Comal only sends output_config.effort.
+    // effort off there means the lowest effort, never thinking.disabled.
+    if (claude5(provider)) return { output_config: { effort: value === 'off' ? 'low' : value } };
+    return value === 'off' ? { thinking: { type: 'disabled' } } : { output_config: { effort: value } };
+  }
   if (protocol(provider) === 'gemini') return { thinkingConfig: { thinkingLevel: value.toUpperCase() } };
   if (['server_template_literal', 'server_props'].includes(provider.modelCapabilities?.effort.source)) return { chat_template_kwargs: value === 'off' ? { enable_thinking: false } : { enable_thinking: true, reasoning_effort: value }, ...(value === 'off' ? { reasoning_effort: 'none' } : {}) };
   return { reasoning_effort: value === 'off' ? 'none' : value };

package/src/model-deadline.mjs

@@ -10,14 +10,14 @@ export function modelTimingSettings(options = {}, env = process.env) {
   return { timeoutMs, idleTimeoutMs };
 }
 
-export function modelDeadline({ signal, timeoutMs, idleTimeoutMs, purpose = 'worker' }) {
+export function modelDeadline({ signal, timeoutMs, idleTimeoutMs, purpose = 'worker', provider = 'OpenAI' }) {
   const started = Date.now(), controller = new AbortController(); let idleTimer, expired;
   let lastActivity = started, stage = 'waiting';
   const expire = kind => {
     if (controller.signal.aborted) return;
     const elapsedMs = Date.now() - started;
     const guidance = purpose === 'model-discovery' ? t('Check /v1/models or set --model / COMAL_MODEL to skip discovery.') : t('Adjust {setting} if the model needs more time.', { setting: kind === 'idle' ? '--model-idle-timeout-ms / COMAL_MODEL_IDLE_TIMEOUT_MS' : '--model-timeout-ms / COMAL_MODEL_TIMEOUT_MS' });
-    const error = new Error(t('OpenAI model exceeded {limit} after {seconds} s ({stage}). No tools from this response were executed. {guidance}', { limit: kind === 'idle' ? t('the idle timeout') : t('the total timeout'), seconds: Math.round(elapsedMs / 1000), stage: stage === 'waiting' ? t('waiting for tokens') : t('generating a response'), guidance }));
+    const error = new Error(t('{provider} model exceeded {limit} after {seconds} s ({stage}). No tools from this response were executed. {guidance}', { provider, limit: kind === 'idle' ? t('the idle timeout') : t('the total timeout'), seconds: Math.round(elapsedMs / 1000), stage: stage === 'waiting' ? t('waiting for tokens') : t('generating a response'), guidance }));
     error.code = 'MODEL_TIMEOUT'; error.details = { kind, purpose, stage, elapsed_ms: elapsedMs, idle_ms: Date.now() - lastActivity, timeout_ms: timeoutMs, idle_timeout_ms: idleTimeoutMs };
     expired = error; controller.abort(error);
   };

package/src/openai-provider.mjs

@@ -62,7 +62,7 @@ export function toOpenAIMessages(system, messages, { reasoningField = 'reasoning
 
 function normalizedMessage({ text = '', reasoning = '', calls = [], finish, usage = {} }) {
   if (typeof text !== 'string' || typeof reasoning !== 'string' || !Array.isArray(calls)) throw new Error('Invalid OpenAI content.');
-  if (!finish) throw new Error('OpenAI streaming was interrupted; no tools from this response were executed.');
+  if (!finish) throw new Error('OpenAI response has no finish_reason; no tools from this response were executed.');
   if (finish === 'length') {
     const error = new Error('OpenAI response truncated (length): generation budget or server capacity exhausted; no tools were executed. Use /compact and --max-tokens, or split the script into smaller calls.');
     error.code = 'OUTPUT_LENGTH'; error.details = { text_chars: text.length, reasoning_chars: reasoning.length, tool_argument_chars: calls.reduce((sum, call) => sum + (typeof call?.function?.arguments === 'string' ? call.function.arguments.length : 0), 0), ...(typeof calls.at(-1)?.function?.name === 'string' && calls.at(-1).function.name ? { tool_name: calls.at(-1).function.name } : {}) }; error.usage_accounting = normalizeUsage('openai',usage); error.usage = { input_tokens: usage.prompt_tokens || 0, output_tokens: usage.completion_tokens || 0 }; throw error;
@@ -173,7 +173,7 @@ export class OpenAIProvider {
       this.model = model; return model;
     } catch (error) { throw deadline.error(error); } finally { deadline.close(); }
   }
-  async complete({ system, messages, tools = [], schemaCatalog = [], contextIdentity, signal, onText = () => {}, onProgress = () => {}, purpose = 'worker', maxTokens = this.maxTokens, responseSchema }) {
+  async complete({ system, messages, tools = [], schemaCatalog = [], contextIdentity, signal, onText = () => {}, onProgress = () => {}, onReasoning = () => {}, onToolCall = () => {}, purpose = 'worker', maxTokens = this.maxTokens, responseSchema }) {
     await this.discoverModel({ signal });
     const accountingRequest={system,messages,tools,maxTokens,...(responseSchema?{responseSchema}:{})}, identity={...accountingIdentity(this),projection_epoch:contextIdentity?.projection_epoch ?? null};
     const schemaFrame=compileToolSchemas(tools,{provider:this.protocol,capabilities:{...(this.getCapabilities?.() || {}),...(this.toolSchemaCapabilities?{tool_schema:this.toolSchemaCapabilities}:{})},catalogue:schemaCatalog}); tools=schemaFrame.tools;
@@ -219,14 +219,18 @@ export class OpenAIProvider {
         let active = false;
         if (typeof delta.content === 'string') { text += delta.content; onText(delta.content); progress.text_chars += delta.content.length; active ||= !!delta.content.length; }
         const reasoningDelta = this.reasoningOf(delta);
-        if (reasoningDelta) { reasoning += reasoningDelta; progress.reasoning_chars += reasoningDelta.length; active = true; }
+        if (reasoningDelta) { reasoning += reasoningDelta; progress.reasoning_chars += reasoningDelta.length; active = true; onReasoning(); }
         for (const part of delta.tool_calls || []) {
           progress.tool_argument_chars += calls.add(part);
           active ||= !!(part.id || part.function?.name || part.function?.arguments);
+          if (part.id || part.function?.name) onToolCall();
         }
         if (active || choice.finish_reason) { deadline.touch(); report(!!choice.finish_reason); }
       }
       deadline.signal.throwIfAborted();
+      // HTTP 200 whose SSE body ends without finish_reason (no [DONE], no usage) is a
+      // transport cut, not an answer: transient and retryable; nothing from it runs.
+      if (!finish) throw Object.assign(new Error('OpenAI streaming was interrupted before finish_reason; the incomplete response was discarded before any tool execution.'), { code: 'MODEL_STREAM_ERROR', details: { ...progress } });
       return account(normalizedMessage({ text, reasoning, finish, usage, calls: calls.calls() }));
     } catch (error) {
       if(responseAccepted&&!deadline.signal.aborted&&(error.name==='SyntaxError'||error.name==='TypeError'&&(error.message==='terminated'||['UND_ERR_SOCKET','ECONNRESET','ERR_STREAM_PREMATURE_CLOSE'].includes(error.cause?.code))))error=Object.assign(new Error('The OpenAI response stream ended or was malformed; the incomplete response was discarded before any tool execution.'),{code:'MODEL_STREAM_ERROR'});
@@ -250,7 +254,7 @@ export function providerSettings(options = {}, env = process.env, session) {
     thinking: options.thinking || env.COMAL_THINKING || 'auto',
     effort: options.effort || env.COMAL_EFFORT || 'auto',
     baseURL: options.baseURL || env.COMAL_BASE_URL || (provider === 'openai' ? env.OPENAI_BASE_URL || DEFAULT_LOCAL_URL : env.ANTHROPIC_BASE_URL || 'https://api.anthropic.com'),
-    model: options.model || env.COMAL_MODEL || (provider === 'openai' ? env.OPENAI_MODEL : undefined) || (sameProvider ? session.model : undefined) || (provider === 'anthropic' ? 'claude-sonnet-4-6' : undefined),
+    model: options.model || env.COMAL_MODEL || (provider === 'openai' ? env.OPENAI_MODEL : undefined) || (sameProvider ? session.model : undefined) || (provider === 'anthropic' ? 'claude-sonnet-5-5' : undefined),
     apiKey: provider === 'openai' ? env.OPENAI_API_KEY : env.ANTHROPIC_API_KEY,
   };
 }