@mrciphersmith/keryx 0.3.124 → 0.3.126

package/dist/cli.js

@@ -19499,7 +19499,7 @@ var init_skill_length_ceilings = __esm(() => {
     "review/review-jev-scenarios": 182,
     "review/review-layout": 237,
     "review/review-logic": 365,
-    "review/review-orchestrator": 1572,
+    "review/review-orchestrator": 1571,
     "review/review-performance": 354,
     "review/review-pr-contract": 191,
     "review/review-pr-feedback": 893,
@@ -23312,7 +23312,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@mrciphersmith/keryx",
-    version: "0.3.124",
+    version: "0.3.126",
     description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
     private: false,
     publishConfig: {
@@ -36527,6 +36527,19 @@ function leadingYamlBlock(markdown) {
 `, close + 4);
   return markdown.slice(0, lineEnd < 0 ? markdown.length : lineEnd + 1);
 }
+function unwrapFencedPage(markdown) {
+  const source = toLf(markdown);
+  const meta = leadingYamlBlock(source);
+  if (meta === null)
+    return markdown;
+  const body = source.slice(meta.length);
+  const unwrapped = unwrapFencedReply(body);
+  if (unwrapped === body)
+    return markdown;
+  const innerMeta = leadingYamlBlock(unwrapped);
+  const inner = innerMeta === null ? unwrapped : unwrapped.slice(innerMeta.length);
+  return inEolOf(markdown, `${meta}${inner.replace(/^\n+/, "")}`);
+}
 function preserveEnrichInvariants(original, enriched, entryNote) {
   const source = toLf(original);
   let next = toLf(enriched);
@@ -36569,7 +36582,8 @@ function isDeclaredGenerated(heading) {
   return isReferenceHeading(heading) || /^related wiki$/i.test(heading);
 }
 function mergeGeneratedSections(existing, generated, entryNote) {
-  const source = toLf(existing);
+  const original = toLf(existing);
+  const source = toLf(unwrapFencedPage(original));
   const generatedLf = toLf(generated);
   const fresh = new Map(sectionsOf(generatedLf).map((section) => [section.heading.toLowerCase(), section]));
   const enriched = sectionsOf(source).some((section) => !fresh.has(section.heading.toLowerCase()) && !/^changelog$/i.test(section.heading));
@@ -36620,8 +36634,8 @@ ${replacement.lines.join(`
     }
   }
   const repaired = repairVersionAndOrder(next);
-  if (next === source)
-    return repaired === source ? existing : inEolOf(existing, repaired);
+  if (next === original)
+    return repaired === original ? existing : inEolOf(existing, repaired);
   const version = nextPageVersion(repaired);
   return inEolOf(existing, prependChangelogEntry(setPageVersion(repaired, version), `- ${version} - ${entryNote}`));
 }
@@ -43752,12 +43766,23 @@ function cardPressFields(source) {
     ...source?.pressedAt === undefined ? {} : { pressedAt: source.pressedAt }
   };
 }
-var MANAGED_REVIEW_MODES, REVIEW_TARGET_KINDS, REVIEW_PACKAGE_STATUSES, REVIEW_COVERAGE_STATUSES, REVIEW_FINDING_SEVERITIES, REVIEW_FINDING_CONFIDENCES, FINDING_DISPOSITION_STATES, FINDING_DISMISSAL_STATES, EXTERNAL_TERMINAL_DISPOSITIONS, VERIFICATION_VERDICTS, VERIFICATION_METHODS, REASONING_CAPPED_VERDICT = "unverifiable", VERIFICATION_MODES, DEFAULT_VERIFICATION_MODE = "annotate", PREMISE_VERDICTS, HELD_PREMISE_VERDICTS;
+function isHostQuestion(value) {
+  if (value === null || typeof value !== "object")
+    return false;
+  const hq = value;
+  const filled = (field) => typeof field === "string" && field.trim() !== "";
+  return HOST_QUESTION_SOURCES.includes(hq["source"]) && filled(hq["ref"]) && filled(hq["questionText"]) && filled(hq["answerText"]) && filled(hq["time"]);
+}
+function hostQuestionFields(source) {
+  return source?.hostQuestion === undefined ? {} : { hostQuestion: source.hostQuestion };
+}
+var MANAGED_REVIEW_MODES, REVIEW_TARGET_KINDS, REVIEW_PACKAGE_STATUSES, REVIEW_COVERAGE_STATUSES, HOST_QUESTION_SOURCES, REVIEW_FINDING_SEVERITIES, REVIEW_FINDING_CONFIDENCES, FINDING_DISPOSITION_STATES, FINDING_DISMISSAL_STATES, EXTERNAL_TERMINAL_DISPOSITIONS, VERIFICATION_VERDICTS, VERIFICATION_METHODS, REASONING_CAPPED_VERDICT = "unverifiable", VERIFICATION_MODES, DEFAULT_VERIFICATION_MODE = "annotate", PREMISE_VERDICTS, HELD_PREMISE_VERDICTS;
 var init_types4 = __esm(() => {
   MANAGED_REVIEW_MODES = ["attach-review", "review-flow", "ingest"];
   REVIEW_TARGET_KINDS = ["pr", "issue", "branch", "path", "report"];
   REVIEW_PACKAGE_STATUSES = ["draft", "reviewed", "decided", "learned", "closed"];
   REVIEW_COVERAGE_STATUSES = ["run", "skipped", "failed", "needs_context"];
+  HOST_QUESTION_SOURCES = ["claude-code", "codex", "keryx-shell", "helyx-poll", "other"];
   REVIEW_FINDING_SEVERITIES = ["blocker", "major", "minor", "info"];
   REVIEW_FINDING_CONFIDENCES = ["high", "medium", "low"];
   FINDING_DISPOSITION_STATES = [
@@ -46688,7 +46713,7 @@ function resultOf(record) {
     flow: record.flow
   };
 }
-function findOpenTwin(records, hash, session, now) {
+function findOpenTwin(records, hash, session, now, host) {
   const answered = new Set;
   for (const r of records)
     if (r.kind === "answer")
@@ -46696,6 +46721,8 @@ function findOpenTwin(records, hash, session, now) {
   for (const r of records) {
     if (r.kind !== "open" || r.backfilled === true || answered.has(r.id))
       continue;
+    if (r.hostQuestion?.source !== host?.source || r.hostQuestion?.ref !== host?.ref || r.hostQuestion?.verb !== host?.verb)
+      continue;
     if ((r.session ?? undefined) !== (session !== undefined && session.length > 0 ? session : undefined))
       continue;
     const age = now.getTime() - Date.parse(r.at);
@@ -46730,14 +46757,14 @@ async function openDecision(input) {
 }
 async function openLocked(input, now, random, question, ids, recommendation) {
   const records = await readRecords(input.cwd);
-  const twin = findOpenTwin(records, questionHash(question, [...ids]), input.session, now);
+  const twin = findOpenTwin(records, questionHash(question, [...ids]), input.session, now, input.hostQuestion);
   if (twin !== undefined)
     return resultOf(twin);
   const config = await loadDecisionsConfig(input.cwd);
   const tagged = input.action !== undefined && input.action.trim().length > 0;
   const irreversible = input.irreversible === true || tagged || isIrreversible(config.irreversible, question, input.action, input.options);
   const salt = input.salt ?? await loadRepoSalt(input.cwd);
-  const seq = input.seq ?? records.filter((r) => r.kind === "open").length + 1;
+  const seq = input.seq ?? records.filter((r) => r.kind === "open" && r.hostQuestion === undefined).length + 1;
   const choice = chooseArm({
     salt,
     seq,
@@ -46786,6 +46813,7 @@ async function openLocked(input, now, random, question, ids, recommendation) {
     ...tagged ? { action: input.action?.trim() ?? "" } : {},
     ...blindRefused ? { blindRefused: true } : {},
     ...input.source !== undefined && input.source.trim().length > 0 ? { source: oneLine(input.source) } : {},
+    ...input.hostQuestion === undefined ? {} : { hostQuestion: { source: oneLine(input.hostQuestion.source), ref: oneLine(input.hostQuestion.ref), verb: oneLine(input.hostQuestion.verb), answerText: storedOperatorText(input.hostQuestion.answerText) } },
     ...input.session !== undefined && input.session.length > 0 ? { session: input.session } : {}
   };
   await appendRecord(input.cwd, record);
@@ -46910,7 +46938,8 @@ var init_sources = __esm(() => {
     roundLimit: "round-limit",
     wikiEnrich: "tui-wiki-enrich",
     queueRoute: "tui-queue-route",
-    sessionLease: "tui-session-lease"
+    sessionLease: "tui-session-lease",
+    hostQuestion: "host-question"
   };
   WORK_DECISION_SOURCES = Object.values(DECISION_SOURCES);
 });
@@ -47393,6 +47422,14 @@ var init_quality = __esm(() => {
   CHILD_ENV_KEYS = ["PATH", "HOME", "LANG", "LC_ALL", "TMPDIR"];
 });
 
+// src/decisions/types.ts
+function isHostQuestionEntry(record) {
+  return record !== null && record !== undefined && record.hostQuestion !== undefined && record.hostQuestion !== null;
+}
+function hostQuestionLabel(host) {
+  return `answered via host question (${host.source}:${host.ref})`;
+}
+
 // src/decisions/report.ts
 function emptyTally() {
   return { answered: 0, matched: 0 };
@@ -47567,6 +47604,22 @@ function buildLegacy(opens, firstOf) {
   out.matchShare = out.matchTally.answered === 0 ? null : out.matchTally.matched / out.matchTally.answered;
   return out;
 }
+function hostQuestionRow(open, answered) {
+  const latest = [...answered].sort((a, b) => a.seq - b.seq).pop();
+  const host = open.hostQuestion;
+  return {
+    id: open.id,
+    label: hostQuestionLabel({ source: host?.source ?? "", ref: host?.ref ?? "" }),
+    verb: host?.verb ?? "",
+    question: open.question,
+    options: open.options.map((option) => ({ id: option.id, label: option.label })),
+    choice: latest?.choice ?? "",
+    answerText: host?.answerText ?? "",
+    source: host?.source ?? "",
+    ref: host?.ref ?? "",
+    at: open.at
+  };
+}
 function buildReport2(records, skipped = 0, options = {}) {
   const opens = [];
   const answers = new Map;
@@ -47588,7 +47641,9 @@ function buildReport2(records, skipped = 0, options = {}) {
   }
   const excludeLegacy = options.excludeLegacy === true;
   const settings = options.settings ?? defaultSettings();
-  const kept = excludeLegacy ? opens.filter((open) => open.backfilled !== true && !isLegacy(open)) : opens;
+  const hostOpens = opens.filter((open) => isHostQuestionEntry(open));
+  const drawn = opens.filter((open) => !isHostQuestionEntry(open));
+  const kept = excludeLegacy ? drawn.filter((open) => open.backfilled !== true && !isLegacy(open)) : drawn;
   const live = kept.filter((open) => open.backfilled !== true);
   const history = kept.filter((open) => open.backfilled === true);
   const firstAnswer = (id) => [...answers.get(id) ?? []].sort((a, b) => a.seq - b.seq)[0];
@@ -47627,6 +47682,7 @@ function buildReport2(records, skipped = 0, options = {}) {
     excludeLegacy,
     quality: buildQualityMatrix(options.quality ?? [], known),
     reasons: buildReasons(compared, headline, firstAnswer, reasons),
+    hostQuestions: hostOpens.map((open) => hostQuestionRow(open, answers.get(open.id) ?? [])),
     ineligible: {
       decisions: randomized.filter((open) => !recordEligible(open)).length,
       answered: randomized.filter((open) => !recordEligible(open) && firstAnswer(open.id) !== undefined).length
@@ -47807,15 +47863,40 @@ function renderLegacy(report) {
 function seconds(ms) {
   return `${(ms / 1000).toFixed(1)}s`;
 }
+function renderHostQuestions(report) {
+  const rows = report.hostQuestions ?? [];
+  if (rows.length === 0)
+    return [];
+  const lines = [`Host questions (asked through the host's own tool, recorded by a keryx review verb; counted apart from the decisions above, in no arm or match number): ${rows.length}`];
+  for (const row of rows) {
+    lines.push(`  ${oneLine(row.id)} [host-question, ${oneLine(row.label)}, ${oneLine(row.verb)}, ${oneLine(row.at)}]`);
+    lines.push(`    ${oneLine(row.question, FULL_TEXT)}`);
+    lines.push(`    options: ${row.options.map((option) => oneLine(option.id)).join(", ")}; chose ${row.choice === "" ? "(not answered)" : oneLine(row.choice)}`);
+    lines.push(`    answer: ${oneLine(row.answerText, FULL_TEXT)}`);
+  }
+  return lines;
+}
 function renderReport(report) {
   const skippedLine = report.skipped > 0 ? `Skipped ${report.skipped} unreadable journal record${report.skipped === 1 ? "" : "s"}.` : undefined;
   const configLines = report.settings.invalid.length > 0 ? renderSettings(report.settings) : [];
+  const hostLines = renderHostQuestions(report);
   if (report.total === 0 && report.backfilled.total === 0) {
+    if (hostLines.length > 0) {
+      const lines = ["No live decisions recorded yet.", "", ...hostLines];
+      if (configLines.length > 0)
+        lines.push("", ...configLines);
+      if (skippedLine !== undefined)
+        lines.push("", skippedLine);
+      return lines.join(`
+`);
+    }
     return ["No decisions recorded yet.", ...configLines, ...skippedLine === undefined ? [] : [skippedLine]].join(`
 `);
   }
   if (report.total === 0) {
     const lines = ["No live decisions recorded yet.", "", ...renderBackfilled(report.backfilled)];
+    if (hostLines.length > 0)
+      lines.push("", ...hostLines);
     if (configLines.length > 0)
       lines.push("", ...configLines);
     if (skippedLine !== undefined)
@@ -47880,6 +47961,8 @@ function renderReport(report) {
   if (report.inferredFlow > 0) {
     lines.push("", `Flow attribution inferred (the one flow in progress, not named by KERYX_FLOW or the branch): ${report.inferredFlow} decision${report.inferredFlow === 1 ? "" : "s"}.`);
   }
+  if (hostLines.length > 0)
+    lines.push("", ...hostLines);
   if (report.backfilled.total > 0)
     lines.push("", ...renderBackfilled(report.backfilled));
   if (skippedLine !== undefined)
@@ -47918,7 +48001,8 @@ function toUtcIso(value) {
   return ISO_OFFSET.test(value) ? new Date(at).toISOString() : null;
 }
 function exportSummaryLine(summary) {
-  return `Export: ${summary.rows} decision${summary.rows === 1 ? "" : "s"}, ${summary.skipped} skipped, ${summary.blanked} invalid field${summary.blanked === 1 ? "" : "s"} blanked.`;
+  const line = `Export: ${summary.rows} decision${summary.rows === 1 ? "" : "s"}, ${summary.skipped} skipped, ${summary.blanked} invalid field${summary.blanked === 1 ? "" : "s"} blanked.`;
+  return summary.hostQuestions > 0 ? `${line} ${summary.hostQuestions} answered via host question, not exported as rows.` : line;
 }
 
 class Validator {
@@ -48002,7 +48086,14 @@ function buildExportWithSummary(records, quality = [], options = {}) {
     }
   }
   const rows = [];
+  let hostQuestions = 0;
   for (const open of opens) {
+    if (isHostQuestionEntry(open)) {
+      const at = toUtcIso(open.at);
+      if (options.since === undefined || at !== null && Date.parse(at) >= options.since.getTime())
+        hostQuestions += 1;
+      continue;
+    }
     const arm = exportArm(open);
     if (arm === null || !Array.isArray(open.options) || !Array.isArray(open.order)) {
       check.skipped += 1;
@@ -48047,7 +48138,7 @@ function buildExportWithSummary(records, quality = [], options = {}) {
       ratings: ratingsOf(open.id, quality, check)
     });
   }
-  return { rows, summary: { rows: rows.length, skipped: check.skipped, blanked: check.blanked } };
+  return { rows, summary: { rows: rows.length, skipped: check.skipped, blanked: check.blanked, hostQuestions } };
 }
 function ratingsOf(id, quality, check) {
   const out = [];
@@ -48473,7 +48564,7 @@ async function latestAnsweredDecision(cwd, flow) {
   const answered = new Set(records.filter((r) => r.kind === "answer").map((r) => r.id));
   for (let i = records.length - 1;i >= 0; i -= 1) {
     const record = records[i];
-    if (record !== undefined && record.kind === "open" && record.backfilled !== true && answered.has(record.id) && (flow === undefined || record.flow === flow))
+    if (record !== undefined && record.kind === "open" && record.backfilled !== true && !isHostQuestionEntry(record) && answered.has(record.id) && (flow === undefined || record.flow === flow))
       return record.id;
   }
   return;
@@ -48559,6 +48650,9 @@ async function reportLine(cwd) {
 async function decisionCount(cwd) {
   return (await loadReport(cwd)).total;
 }
+async function hostQuestionCount(cwd) {
+  return (await loadReport(cwd)).hostQuestions?.length ?? 0;
+}
 async function annotatedCount(cwd) {
   return (await loadReport(cwd)).annotated.length;
 }
@@ -48932,17 +49026,20 @@ function validPremiseSubject(value) {
   const subject = value;
   return text(subject.severity) && text(subject.verdict) && text(subject.problemSha256);
 }
+function viaConsistent(d) {
+  return d.confirmedVia === "host-question" ? isHostQuestion(d.hostQuestion) : true;
+}
 function validPremise(entry) {
   if (entry === null || typeof entry !== "object")
     return false;
   const d = entry;
-  return d.kind === PREMISE_DECISION_KIND && text(d.finding) && (d.answer === "uphold" || d.answer === "dismiss") && text(d.reason) && text(d.quote) && text(d.at) && text(d.actor) && VIAS.includes(d.confirmedVia) && validPremiseSubject(d.subject);
+  return d.kind === PREMISE_DECISION_KIND && text(d.finding) && (d.answer === "uphold" || d.answer === "dismiss") && text(d.reason) && text(d.quote) && text(d.at) && text(d.actor) && VIAS.includes(d.confirmedVia) && viaConsistent(d) && validPremiseSubject(d.subject);
 }
 function validGateDecision(entry) {
   if (entry === null || typeof entry !== "object")
     return false;
   const d = entry;
-  return OPERATOR_DECISION_KINDS.includes(d.kind) && text(d.quote) && text(d.reason) && VIAS.includes(d.confirmedVia) && text(d.at) && (d.subject === undefined || validSubject(d.subject));
+  return OPERATOR_DECISION_KINDS.includes(d.kind) && text(d.quote) && text(d.reason) && VIAS.includes(d.confirmedVia) && viaConsistent(d) && text(d.at) && (d.subject === undefined || validSubject(d.subject));
 }
 function validDecision(entry) {
   return validGateDecision(entry) || validPremise(entry);
@@ -49001,7 +49098,8 @@ async function recordPremiseDecisionAfter(packageDir, input, applyFirst) {
     confirmedVia: input.confirmedVia,
     ...cardPressFields(input),
     subject: input.subject,
-    ...input.carriedFrom === undefined ? {} : { carriedFrom: input.carriedFrom }
+    ...input.carriedFrom === undefined ? {} : { carriedFrom: input.carriedFrom },
+    ...hostQuestionFields(input)
   };
   if (!validPremise(kept)) {
     throw new Error("a premise decision needs the finding, an answer of uphold or dismiss, a reason, the operator's words, the time, how it was confirmed and the finding it was shown");
@@ -49045,9 +49143,9 @@ async function recordOperatorDecision(packageDir, decision) {
 }
 function decisionWriters(kind, packageArg = "<review-dir>") {
   if (kind === PREMISE_DECISION_KIND) {
-    return `in keryx shell, call the review_decide_premise tool (the operator answers a card); in a terminal, run \`keryx review decide-premise --package ${packageArg} --finding <id> --answer uphold|dismiss --reason "<why>"\``;
+    return `in keryx shell, call the review_decide_premise tool (the operator answers a card); elsewhere ask the operator with the host's question tool, or in a terminal, run \`keryx review decide-premise --package ${packageArg} --finding <id> --answer uphold|dismiss --reason "<why>"\` (from a host question add --answered-by <source>:<ref> --answer-text "<their words>" --question-text "<the question>")`;
   }
-  return kind === "mutation-waiver" ? `in keryx shell, call the review_waive_mutation tool (the operator answers a card); in a terminal, run \`keryx review waive-mutation --package ${packageArg} --reason "<why>"\`` : `in keryx shell, call the review_override_reviewers tool (the operator answers a card); in a terminal, run \`keryx review override-reviewers --package ${packageArg} --reason "<why>"\``;
+  return kind === "mutation-waiver" ? `in keryx shell, call the review_waive_mutation tool (the operator answers a card); elsewhere ask the operator with the host's question tool, or in a terminal, run \`keryx review waive-mutation --package ${packageArg} --reason "<why>"\` (from a host question add --answered-by <source>:<ref> --answer-text "<their words>" --question-text "<the question>")` : `in keryx shell, call the review_override_reviewers tool (the operator answers a card); elsewhere ask the operator with the host's question tool, or in a terminal, run \`keryx review override-reviewers --package ${packageArg} --reason "<why>"\` (from a host question add --answered-by <source>:<ref> --answer-text "<their words>" --question-text "<the question>")`;
 }
 var OPERATOR_DECISIONS_FILE = "operator-decisions.json", OPERATOR_DECISIONS_LOCK = ".operator-decisions.lock", OPERATOR_DECISION_KINDS, PREMISE_DECISION_KIND = "premise-question", VIAS, PREMISE_DECISION_ACTOR = "operator", text = (value) => typeof value === "string" && value.trim().length > 0;
 var init_operator_decisions = __esm(() => {
@@ -49055,7 +49153,7 @@ var init_operator_decisions = __esm(() => {
   init_json();
   init_types4();
   OPERATOR_DECISION_KINDS = ["mutation-waiver", "reviewer-override"];
-  VIAS = ["tui-card", "remote-card", "terminal"];
+  VIAS = ["tui-card", "remote-card", "terminal", "host-question"];
 });
 
 // src/review/mutate.ts
@@ -74403,7 +74501,8 @@ function applyPremiseDecision(finding, decision) {
     quote: decision.quote,
     at: decision.at,
     actor: decision.actor,
-    confirmedVia: decision.confirmedVia
+    confirmedVia: decision.confirmedVia,
+    ...hostQuestionFields(decision)
   };
   const { disposition: existing, ...rest } = record;
   const current = isRecord9(existing) ? existing : undefined;
@@ -74412,7 +74511,7 @@ function applyPremiseDecision(finding, decision) {
   return {
     ...ownDismissal ? rest : record,
     premise: { ...premise, operator },
-    ...decision.answer === "dismiss" && open ? { disposition: { state: "dismissed-incorrect", evidence: `operator (${decision.confirmedVia}, ${decision.at}) on the premise question: ${decision.reason}` } } : {}
+    ...decision.answer === "dismiss" && open ? { disposition: { state: "dismissed-incorrect", evidence: `operator (${decision.confirmedVia}${decision.hostQuestion === undefined ? "" : ` ${decision.hostQuestion.source}:${decision.hostQuestion.ref}`}, ${decision.at}) on the premise question: ${decision.reason}` } } : {}
   };
 }
 function applyPremiseDecisions(findings, decisions) {
@@ -82100,10 +82199,43 @@ var init_patch_risk = __esm(() => {
   NEW_FILE_HEADER = /^\+\+\+ (.+)$/;
 });
 
+// src/review/host-question-verbs.ts
+var HOST_QUESTION_VERBS;
+var init_host_question_verbs = __esm(() => {
+  HOST_QUESTION_VERBS = ["waive-mutation", "override-reviewers", "confirm-plan", "decide-premise"];
+});
+
 // src/trigger/unattended.ts
 function isUnattendedExcludedTool(toolName) {
   return UNATTENDED_EXCLUDED_TOOLS.includes(toolName) || OPERATOR_CONFIRM_TOOL_NAMES.includes(toolName);
 }
+function recordsHostQuestion(text, depth = 0) {
+  const joined = text.replace(/\\\r?\n/g, "").replace(/\$(?=["'])/g, "");
+  const segments = splitSegments(joined);
+  const feedsShell = segments.some((s) => s.precededBy === "|" && SHELL_WRAPPERS.has(commandWord(s.words)));
+  const inner = (words) => depth < 3 && words.some((w) => /\s/.test(w) && recordsHostQuestion(w, depth + 1));
+  for (const segment of segments) {
+    const words = stripAssignments(segment.words).map((w) => w.replace(/\\/g, "").replace(/^[$(`{]+/, ""));
+    const cmd = commandWord(words);
+    if (PRINTING_COMMANDS.has(cmd)) {
+      if (feedsShell && inner(words))
+        return true;
+      continue;
+    }
+    if (SHELL_WRAPPERS.has(cmd) && inner(words))
+      return true;
+    const reviewAt = words.findIndex((w, i) => w === "review" && words.slice(0, i).some((p) => KERYX_ENTRY.test(p)));
+    if (reviewAt < 0)
+      continue;
+    const args = words.slice(reviewAt + 1);
+    const verbAt = args.findIndex((w) => !w.startsWith("-"));
+    if (verbAt < 0 || !HOST_QUESTION_VERB_SET.has(args[verbAt]))
+      continue;
+    if (args.slice(verbAt + 1).some((w) => w === "--answered-by" || w.startsWith("--answered-by=")))
+      return true;
+  }
+  return false;
+}
 function isUnattendedProtectedPath(p) {
   const normalized = p.replace(/\\/g, "/").trim();
   return /(^|\/)flow\.json$/.test(normalized) || /(^|\/)acceptance-criteria\.md$/.test(normalized) || /(^|\/)\.metaproject\/triggers\.json$/.test(normalized) || /(^|\/)\.metaproject\/data\/trigger(\/|$)/.test(normalized) || /confirm-token\.json$/.test(normalized);
@@ -82112,6 +82244,9 @@ function unattendedShellRefusal(command) {
   const text = command.trim();
   if (text.length === 0)
     return;
+  if (recordsHostQuestion(text)) {
+    return "`--answered-by` records the operator's answer to a question the host asked \u2014 an unattended run has no operator to ask, so it never records one";
+  }
   for (const pattern of FORBIDDEN_FLOW_VERBS) {
     const match = pattern.exec(text);
     if (match !== null) {
@@ -82186,9 +82321,10 @@ function unattendedRefusal(toolName, input) {
   }
   return;
 }
-var UNATTENDED_EXCLUDED_TOOLS, OPERATOR_CONFIRM_TOOL_NAMES, FORBIDDEN_FLOW_VERBS, FORBIDDEN_GIT_VERBS, FORBIDDEN_GIT_BRANCH_FLAGS, GH_API_BODY_FLAGS, RAW_GIT, RAW_PUBLISH, PROTECTED_TEXT_MARKERS;
+var UNATTENDED_EXCLUDED_TOOLS, OPERATOR_CONFIRM_TOOL_NAMES, FORBIDDEN_FLOW_VERBS, HOST_QUESTION_VERB_SET, KERYX_ENTRY, SHELL_WRAPPERS, PRINTING_COMMANDS, FORBIDDEN_GIT_VERBS, FORBIDDEN_GIT_BRANCH_FLAGS, GH_API_BODY_FLAGS, RAW_GIT, RAW_PUBLISH, PROTECTED_TEXT_MARKERS;
 var init_unattended = __esm(() => {
   init_patch_risk();
+  init_host_question_verbs();
   init_shell_syntax();
   init_command_risk();
   UNATTENDED_EXCLUDED_TOOLS = [
@@ -82240,6 +82376,10 @@ var init_unattended = __esm(() => {
     /\blaunchctl\b/,
     /\bloginctl\b/
   ];
+  HOST_QUESTION_VERB_SET = new Set(HOST_QUESTION_VERBS);
+  KERYX_ENTRY = /(?:^|\/)(?:keryx|cli\.[cm]?[jt]s)$/;
+  SHELL_WRAPPERS = new Set(["sh", "bash", "zsh", "dash", "ksh", "eval"]);
+  PRINTING_COMMANDS = new Set(["echo", "printf", "grep", "egrep", "fgrep", "rg", "ag", "cat"]);
   FORBIDDEN_GIT_VERBS = new Set(["push", "merge", "tag", "update-ref"]);
   FORBIDDEN_GIT_BRANCH_FLAGS = new Set(["-f", "--force", "-D", "-M", "--delete", "-d", "-m", "--move"]);
   GH_API_BODY_FLAGS = new Set(["-f", "-F", "--field", "--raw-field", "--input"]);
@@ -87745,13 +87885,19 @@ function premiseDecisionsCheck(ctx) {
   if (held.length === 0)
     return ok("no finding is held by the premise judge");
   const awaiting = awaitingOperator(records, decisions);
-  if (awaiting.length === 0)
-    return ok(`${held.length} held finding(s), every one with an operator decision`);
+  if (awaiting.length === 0) {
+    const hostQuestions = held.flatMap((finding) => {
+      const decision = latestPremiseDecision(finding, decisions);
+      return decision?.confirmedVia === "host-question" && decision.hostQuestion !== undefined ? [`${decision.hostQuestion.source}:${decision.hostQuestion.ref}`] : [];
+    });
+    const viaHost = hostQuestions.length === 0 ? "" : `; ${hostQuestions.length} confirmed via host-question (${hostQuestions.join(", ")}), not by a card`;
+    return ok(`${held.length} held finding(s), every one with an operator decision${viaHost}`);
+  }
   const evidence = `${awaiting.length} of ${held.length} held finding(s) have no operator decision: ${some(awaiting)}`;
   if (!ctx.premise.ingested) {
     return bad(`${evidence} (not ingested yet)`, `ingest the round with its premise results first (\`keryx review ingest ... --premises ${ctx.arg}/research-evidence/premises.json\`), then ask the operator to answer each held finding`);
   }
-  return bad(evidence, `ask the operator: in keryx shell call the review_decide_premise tool (a card); in a terminal run keryx review decide-premise --package ${ctx.arg} --finding <id> --answer uphold|dismiss --reason "<why>"`);
+  return bad(evidence, `ask the operator: in keryx shell call the review_decide_premise tool (a card); elsewhere ask with the host's question tool, or in a terminal run keryx review decide-premise --package ${ctx.arg} --finding <id> --answer uphold|dismiss --reason "<why>" (from a host question add --answered-by <source>:<ref> --answer-text "<their words>" --question-text "<the question>")`);
 }
 function quotesLocatedCheck(ctx) {
   const flagged = ctx.findings.filter((finding) => asRecord2(finding.quote_unlocated) !== undefined);
@@ -125655,7 +125801,7 @@ async function carryPremiseDecisions(packageDir, previousDir, carriedIds, carrie
   return carried;
 }
 async function answerPremiseQuestion(packageDir, input, registry = {}) {
-  const { decision, applied: vouched } = await recordPremiseDecisionAfter(packageDir, { finding: input.finding.key, answer: input.answer, reason: input.reason, quote: input.quote, at: input.at, confirmedVia: input.confirmedVia, ...cardPressFields(input), subject: input.finding.subject }, (kept) => applyAnswerToFindings(packageDir, kept, registry));
+  const { decision, applied: vouched } = await recordPremiseDecisionAfter(packageDir, { finding: input.finding.key, answer: input.answer, reason: input.reason, quote: input.quote, at: input.at, confirmedVia: input.confirmedVia, ...cardPressFields(input), subject: input.finding.subject, ...input.hostQuestion === undefined ? {} : { hostQuestion: input.hostQuestion } }, (kept) => applyAnswerToFindings(packageDir, kept, registry));
   if (vouched === true)
     reRecordRegistry(packageDir, registry);
   return decision;
@@ -125814,7 +125960,7 @@ function isPlanConfirmation(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value))
     return false;
   const v = value;
-  return typeof v.planKey === "string" && v.planKey !== "" && typeof v.dispatches === "number" && Number.isFinite(v.dispatches) && Array.isArray(v.minutes) && v.minutes.length === 2 && v.minutes.every((m) => typeof m === "number" && Number.isFinite(m)) && typeof v.quote === "string" && v.quote.trim() !== "" && typeof v.confirmedVia === "string" && CONFIRMED_VIA.includes(v.confirmedVia) && typeof v.at === "string" && v.at !== "";
+  return typeof v.planKey === "string" && v.planKey !== "" && typeof v.dispatches === "number" && Number.isFinite(v.dispatches) && Array.isArray(v.minutes) && v.minutes.length === 2 && v.minutes.every((m) => typeof m === "number" && Number.isFinite(m)) && typeof v.quote === "string" && v.quote.trim() !== "" && typeof v.confirmedVia === "string" && CONFIRMED_VIA.includes(v.confirmedVia) && (v.confirmedVia !== "host-question" || isHostQuestion(v.hostQuestion)) && typeof v.at === "string" && v.at !== "";
 }
 function readPlanConfirmation(packageDir) {
   try {
@@ -125923,7 +126069,8 @@ var init_estimate = __esm(() => {
   init_slice_routing();
   init_waves();
   init_round_split();
-  CONFIRMED_VIA = ["tui-card", "remote-card", "terminal"];
+  init_types4();
+  CONFIRMED_VIA = ["tui-card", "remote-card", "terminal", "host-question"];
 });
 
 // src/review/plan-confirmation.ts
@@ -125937,9 +126084,14 @@ function planKeyOf2(estimate) {
 function estimatePlan(packageDir) {
   return estimatePackage(packageDir);
 }
+async function readPlanConfirmation2(packageDir) {
+  return readPlanConfirmation(packageDir);
+}
 async function recordPlanConfirmation(packageDir, estimate, confirmation) {
   if (confirmation.quote.trim() === "")
     throw new Error("a plan confirmation needs the operator's own words");
+  if (confirmation.confirmedVia === "host-question" && confirmation.hostQuestion === undefined)
+    throw new Error("a host-question plan confirmation needs the question and the answer");
   const record = {
     planKey: planKeyOf2(estimate),
     dispatches: estimate.dispatches,
@@ -125947,7 +126099,8 @@ async function recordPlanConfirmation(packageDir, estimate, confirmation) {
     quote: confirmation.quote.trim(),
     confirmedVia: confirmation.confirmedVia,
     ...cardPressFields(confirmation),
-    at: confirmation.at
+    at: confirmation.at,
+    ...confirmation.hostQuestion === undefined ? {} : { hostQuestion: confirmation.hostQuestion }
   };
   await writeFileAtomic(path290.join(packageDir, PLAN_CONFIRMATION_FILE), `${JSON.stringify(record, null, 2)}
 `);
@@ -134590,17 +134743,34 @@ function printOperatorCommandHelp(command) {
 
 Records the operator's waiver of the mutation pass in <review-dir>/operator-decisions.json: the review may
 record \`Not run: mutation pass\` with unrun mutants. Asks at the terminal; refused without a TTY. In keryx
-shell the review_waive_mutation tool asks the same as a card.`,
+shell the review_waive_mutation tool asks the same as a card.
+
+Without a TTY, record the operator's answer to a question you asked through the host's own question tool:
+  keryx review waive-mutation --package <review-dir> --reason "<why>" --answered-by <source>:<ref> \\
+    --answer-text "<the operator's words>" --question-text "<the question as asked>"
+${hostHelpTail("an --answer-text that is not a plain yes (a decline, a negation, the word keep, no yes at all), a blank or oversize text, a missing --reason")}`,
     "override-reviewers": `keryx review override-reviewers --package <review-dir> --reason "<why>" [--selected a,b]
 
 Records the operator's decision to run a smaller reviewer set than \`keryx review required\` names (an
 override or mode diff) in <review-dir>/operator-decisions.json. Asks at the terminal; refused without a TTY.
-In keryx shell the review_override_reviewers tool asks the same as a card.`,
+In keryx shell the review_override_reviewers tool asks the same as a card.
+
+Without a TTY, record the operator's answer to a question you asked through the host's own question tool:
+  keryx review override-reviewers --package <review-dir> --reason "<why>" [--selected a,b] --answered-by <source>:<ref> \\
+    --answer-text "<the operator's words>" --question-text "<the question as asked>"
+${hostHelpTail("an --answer-text that is not a plain yes (a decline, a negation, the word keep, no yes at all), a blank or oversize text, a missing --reason")}`,
     "confirm-plan": `keryx review confirm-plan --package <review-dir>
 
 Shows the plan's dispatches and minutes (\`keryx review estimate\`) and records the operator's yes in
 <review-dir>/plan-confirmation.json for exactly this plan. Asks at the terminal; refused without a TTY. In
-keryx shell the review_confirm_plan tool asks the same as a card.`,
+keryx shell the review_confirm_plan tool asks the same as a card.
+
+Without a TTY, record the operator's answer to a question you asked through the host's own question tool:
+  keryx review confirm-plan --package <review-dir> --answered-by <source>:<ref> \\
+    --answer-text "<the operator's words>" --question-text "<the question as asked>"
+The question must show this plan's dispatches and minutes (as \`keryx review estimate\` prints them): a question that
+does not is refused as a stale plan, so ask again with the current numbers.
+${hostHelpTail("an --answer-text that is not a plain yes (a decline, a negation, no yes at all), a blank or oversize text")}`,
     "decide-premise": `keryx review decide-premise --package <review-dir> --finding <id> --answer uphold|dismiss --reason "<why>"
 
 Answers the premise question on a finding the premise judge held (verdict challenged or owner-decision) and
@@ -134608,7 +134778,14 @@ records it in <review-dir>/operator-decisions.json, with your typed words, and o
 (so the next round and the published round block read the answer too). uphold returns the finding to kept at its original
 severity; dismiss records it dismissed-incorrect with your reason as the evidence. Refused for an unknown
 finding, a finding that is not held, or a missing reason. Asks at the terminal; refused without a TTY. In
-keryx shell the review_decide_premise tool asks the same as a card.`,
+keryx shell the review_decide_premise tool asks the same as a card.
+
+Without a TTY, record the operator's answer to a question you asked through the host's own question tool:
+  keryx review decide-premise --package <review-dir> --finding <id> --answer uphold|dismiss --reason "<why>" \\
+    --answered-by <source>:<ref> --answer-text "<the operator's words>" --question-text "<the question as asked>"
+The operator's words must name the same choice as --answer (uphold or dismiss, or the same in Russian) and no other;
+the finding changes as on the terminal path.
+${hostHelpTail("words that name the other choice or none, a blank or oversize text, a missing --reason, an unknown or not-held finding")}`,
     "verify-run": `keryx review verify-run --package <review-dir> --finding <id> [--timeout <seconds>] -- <command\u2026>
 
 Runs a verification command in this (the parent's) session and saves its stdout, stderr and exit status to
@@ -134654,6 +134831,9 @@ async function runOperatorCommand(command, args, seams = {}) {
     log("Hand that file to the verifier (context_files) and have it cite the file in the claim's evidence.");
     return 0;
   }
+  if (own.some((arg) => arg === "--answered-by" || arg.startsWith("--answered-by="))) {
+    return recordHostQuestion(command, own, packageDir, { cwd, log, env: seams.env ?? process.env });
+  }
   const isTerminal = seams.isTerminal ?? (() => process.stdin.isTTY === true && process.stdout.isTTY === true);
   requireTerminal(command, isTerminal);
   const ask = seams.ask ?? terminalAsk;
@@ -134710,13 +134890,210 @@ async function runOperatorCommand(command, args, seams = {}) {
   log(`${kind} recorded (terminal, ${at}) in operator-decisions.json`);
   return 0;
 }
-var OPERATOR_COMMANDS, CARD;
+function parseAnsweredBy(raw, command) {
+  const refuse = (why) => {
+    throw new Error(`--answered-by must be <source>:<ref>: <source> one of ${HOST_QUESTION_SOURCES.join(", ")} and <ref> the host's own id for the question, not empty, at most ${REF_MAX_LENGTH} characters, no control characters` + `${raw === undefined ? " (the flag has no value)" : ` (got ${shortened(raw)}${why})`}. See \`keryx review ${command} --help\`.`);
+  };
+  if (raw === undefined)
+    return refuse("");
+  const colon = raw.indexOf(":");
+  const source = colon <= 0 ? "" : raw.slice(0, colon);
+  const ref = colon <= 0 ? "" : raw.slice(colon + 1).trim();
+  if (!HOST_QUESTION_SOURCES.includes(source) || ref === "")
+    return refuse("");
+  if (ref.length > REF_MAX_LENGTH)
+    return refuse(`: the ref is ${ref.length} characters`);
+  if ([...ref].some((char) => /\p{Cc}/u.test(char)))
+    return refuse(": the ref holds a control character");
+  return { source, ref };
+}
+function refuseNonAffirmative(answerText, verb) {
+  const words = wordsOf(answerText);
+  const choices = HOST_OPTIONS[verb];
+  const fix = `Nothing was recorded. Ask the operator again and pass their own words, which must say yes (for example "yes, ${choices.confirm} it") and nothing against it. See \`keryx review ${verb} --help\`.`;
+  if (words.length === 0 || LEAD_DECLINE.has(words[0])) {
+    throw new Error(`--answer-text reads as a decline (${shortened(answerText)}): a declined question records nothing. ${fix}`);
+  }
+  if (words.some((word) => NEGATIONS.has(word)))
+    throw new Error(`--answer-text reads as a decline (${shortened(answerText)}): it holds a negation, so it is not a yes. ${fix}`);
+  if (words.includes(choices.decline))
+    throw new Error(`--answer-text reads as a decline (${shortened(answerText)}): it names the other option, "${choices.decline}". ${fix}`);
+  if (!words.some((word) => AFFIRMATIVE.has(word) || word === choices.confirm || choices.alsoAffirms?.includes(word) === true)) {
+    throw new Error(`--answer-text is not a yes (${shortened(answerText)}): free text that does not say yes is not a decision. ${fix}`);
+  }
+}
+function refuseOtherChoice(answerText, answer) {
+  const clauses = answerText.toLowerCase().split(/[,.;:!?()\n]+/u).map(wordsOf).filter((clause) => clause.length > 0);
+  const other = answer === "uphold" ? "dismiss" : "uphold";
+  const chosen = CHOICE_WORDS[answer];
+  const words = clauses.flat();
+  const named = words.some((word) => chosen.has(word));
+  const namesOther = words.some((word) => CHOICE_WORDS[other].has(word));
+  const negated = clauses.some((clause) => clause.some((word, index) => (chosen.has(word) || CHOICE_WORDS[other].has(word)) && NEGATIONS.has(clause[index - 1] ?? "")));
+  if (!named || namesOther || negated) {
+    throw new Error(`--answer-text does not name the same choice as --answer ${answer}: the operator's words must say ${answer} (and not ${other}, and not behind a "not"; a bare yes or no is not a choice here). ` + `Nothing was recorded; ask the operator again, or pass the --answer they gave.`);
+  }
+}
+function requireText(flag, value, command) {
+  if (value === undefined || value.trim() === "")
+    throw new Error(`${flag} "<text>" is required and must not be blank: it holds ${flag === "--answer-text" ? "the operator's own words" : "the question as it was asked"}. See \`keryx review ${command} --help\`.`);
+  if (value.length > MAX_OPERATOR_TEXT_LENGTH)
+    throw new Error(`${flag} is ${value.length} characters; at most ${MAX_OPERATOR_TEXT_LENGTH} are recorded. Pass the operator's words or the question as asked, shortened. See \`keryx review ${command} --help\`.`);
+  return value;
+}
+function requireReason(own, command) {
+  const reason = optionValue(own, "--reason");
+  if (reason === undefined || reason.trim() === "")
+    throw new Error(`Missing --reason "<why>". See \`keryx review ${command} --help\`.`);
+  return reason.trim();
+}
+function refuseHostQuestionHere(command, packageDir, env) {
+  if (env["KERYX_TOOL_CALL"] === "1") {
+    throw new Error(`keryx review ${command} --answered-by is refused: this keryx was started from an agent's shell (KERYX_TOOL_CALL=1), and an agent can type into it. ` + `Nothing was recorded. The operator answers the ${CARD[command]} card instead.`);
+  }
+  if (isAutonomousEnv(env) || readRunProfile(packageDir)?.mode === "unattended") {
+    throw new Error(`keryx review ${command} --answered-by is refused in an unattended run: nobody is there to be asked, so nothing was recorded.`);
+  }
+}
+function refuseRepeat(command, host, held) {
+  if (held === undefined || held.source !== host.hostQuestion.source || held.ref !== host.hostQuestion.ref)
+    return;
+  throw new Error(`keryx review ${command}: the host question ${held.source}:${held.ref} is already recorded here, so this call recorded nothing again. ` + `If this is a new question, give it its own <ref> in --answered-by.`);
+}
+function refuseUnboundQuestion(command, questionText, subject, tokens, countAlso) {
+  if (tokens.length === 0)
+    return;
+  if (tokens.every((token) => namesToken(questionText, token)))
+    return;
+  if (countAlso && namesToken(questionText, String(tokens.length)))
+    return;
+  throw new Error(`--question-text does not name the ${subject}: ${tokens.length === 1 ? tokens[0] : `${tokens.slice(0, 6).join(", ")}${tokens.length > 6 ? ", ..." : ""}`}${countAlso ? ` (or their count, ${tokens.length})` : ""}. ` + `An answer to a question that does not say what it is about is not recorded. Ask the operator again with the ${subject} in the question. Nothing was recorded. See \`keryx review ${command} --help\`.`);
+}
+async function prepareConfirmPlan(packageDir, host) {
+  const estimate = await estimatePlan(packageDir);
+  const shown = new Set(host.questionText.match(/\d+/g) ?? []);
+  if (![estimate.dispatches, estimate.minutes.min, estimate.minutes.max].every((value) => shown.has(String(value)))) {
+    throw new Error(`The plan changed, or the question does not show it: the plan now is ${estimate.dispatches} reviewer dispatches (${estimate.minutes.min}-${estimate.minutes.max} min) ` + `and --question-text names other numbers. Ask the operator again with the current numbers in the question. Nothing was recorded.`);
+  }
+  refuseNonAffirmative(host.answerText, "confirm-plan");
+  refuseRepeat("confirm-plan", host, (await readPlanConfirmation2(packageDir))?.hostQuestion);
+  const commit = async () => {
+    const record = await recordPlanConfirmation(packageDir, estimate, { quote: `${host.questionText}: ${host.answerText}`, confirmedVia: "host-question", at: host.at, hostQuestion: host.hostQuestion });
+    return `plan confirmed (${host.where}): ${record.dispatches} dispatch(es), ${record.minutes[0]}-${record.minutes[1]} min`;
+  };
+  return { commit, choice: HOST_OPTIONS["confirm-plan"].confirm };
+}
+async function preparePremise(packageDir, host, input, deps) {
+  const held = await findHeldFinding(packageDir, input.ref);
+  if (!held.ok)
+    throw new Error(held.refusal);
+  const finding = held.finding;
+  const shortId = finding.key.split("#").pop();
+  if (!namesToken(host.questionText, finding.key))
+    refuseUnboundQuestion("decide-premise", host.questionText, "finding id", [shortId], false);
+  refuseOtherChoice(host.answerText, input.answer);
+  const prior = (await readPremiseDecisions(packageDir)).find((decision) => decision.finding === finding.key && decision.hostQuestion?.source === host.hostQuestion.source && decision.hostQuestion.ref === host.hostQuestion.ref);
+  refuseRepeat("decide-premise", host, prior?.hostQuestion);
+  const commit = async () => {
+    await answerPremiseQuestion(packageDir, { finding, answer: input.answer, reason: input.reason, quote: host.answerText, at: host.at, confirmedVia: "host-question", hostQuestion: host.hostQuestion }, { cwd: deps.cwd, warn: (line) => deps.log(`warning: ${line}`) });
+    return `premise-question ${input.answer} recorded for ${finding.key} (${host.where}, ${host.at}) in operator-decisions.json and findings.json`;
+  };
+  return { commit, choice: input.answer };
+}
+async function prepareGate(packageDir, host, input) {
+  const kind = input.command === "waive-mutation" ? "mutation-waiver" : "reviewer-override";
+  const subject = await operatorDecisionSubject(packageDir, kind, kind === "mutation-waiver" ? undefined : input.selected);
+  refuseUnboundQuestion(input.command, host.questionText, kind === "mutation-waiver" ? "unrun mutants" : "reviewers left out", subject.items, true);
+  refuseNonAffirmative(host.answerText, input.command);
+  const prior = (await readOperatorDecisions(packageDir)).find((decision) => decision.kind === kind && decision.hostQuestion?.source === host.hostQuestion.source && decision.hostQuestion.ref === host.hostQuestion.ref);
+  refuseRepeat(input.command, host, prior?.hostQuestion);
+  const commit = async () => {
+    await recordOperatorDecision(packageDir, { kind, quote: host.answerText, reason: input.reason, confirmedVia: "host-question", at: host.at, subject, hostQuestion: host.hostQuestion });
+    return `${kind} recorded (${host.where}, ${host.at}) in operator-decisions.json`;
+  };
+  return { commit, choice: HOST_OPTIONS[input.command].confirm };
+}
+function refuseOtherAnswer(own, command) {
+  const choices = HOST_OPTIONS[command];
+  const answerArg = optionValue(own, "--answer");
+  if (answerArg === undefined || answerArg === choices.confirm)
+    return;
+  throw new Error(answerArg === choices.decline ? `--answer ${answerArg} is a decline: a declined question records nothing. See \`keryx review ${command} --help\`.` : `--answer must be ${choices.confirm} (the option this verb records) or left out; got ${JSON.stringify(answerArg.slice(0, 40))}. See \`keryx review ${command} --help\`.`);
+}
+async function prepareVerb(command, own, packageDir, host, deps) {
+  switch (command) {
+    case "decide-premise": {
+      const answer = optionValue(own, "--answer");
+      if (answer !== "uphold" && answer !== "dismiss")
+        throw new Error("--answer must be uphold or dismiss. See `keryx review decide-premise --help`.");
+      const reason = requireReason(own, command);
+      const ref = optionValue(own, "--finding");
+      if (ref === undefined || ref.trim() === "")
+        throw new Error("Missing --finding <id>. See `keryx review decide-premise --help`.");
+      return preparePremise(packageDir, host, { ref, answer, reason }, deps);
+    }
+    case "confirm-plan":
+      refuseOtherAnswer(own, command);
+      return prepareConfirmPlan(packageDir, host);
+    case "waive-mutation":
+    case "override-reviewers": {
+      refuseOtherAnswer(own, command);
+      const reason = requireReason(own, command);
+      const selectedArg = optionValue(own, "--selected");
+      const selected = selectedArg === undefined ? undefined : selectedArg.split(",").map((item) => item.trim()).filter(Boolean);
+      return prepareGate(packageDir, host, { command, reason, selected });
+    }
+  }
+}
+async function recordHostQuestion(command, own, packageDir, context) {
+  const { cwd, log, env } = context;
+  refuseHostQuestionHere(command, packageDir, env);
+  const by = parseAnsweredBy(optionValue(own, "--answered-by"), command);
+  const answerText = requireText("--answer-text", optionValue(own, "--answer-text"), command);
+  const questionText = requireText("--question-text", optionValue(own, "--question-text"), command);
+  const at = new Date().toISOString();
+  const host = { hostQuestion: { source: by.source, ref: by.ref, questionText, answerText, time: at }, answerText, questionText, at, where: `host-question, ${by.source}:${by.ref}` };
+  const { commit, choice } = await prepareVerb(command, own, packageDir, host, { cwd, log });
+  log(await commit());
+  await journalHostQuestion(command, host, choice, { cwd, log, env });
+  return 0;
+}
+async function journalHostQuestion(command, host, choice, context) {
+  const { cwd, log, env } = context;
+  const { source, ref } = host.hostQuestion;
+  const choices = HOST_OPTIONS[command];
+  try {
+    const flow = await resolveFlowContext(cwd, env);
+    const opened = await openDecision({
+      cwd,
+      question: host.questionText,
+      options: choices.options.map((option) => ({ ...option, description: SYNTHESIZED_OPTION })),
+      stage: `review ${command}`,
+      flow: flow.flow,
+      flowSource: flow.flowSource,
+      channel: source,
+      source: DECISION_SOURCES.hostQuestion,
+      hostQuestion: { source, ref, verb: command, answerText: host.answerText },
+      salt: "host-question"
+    });
+    await answerDecision({ cwd, id: opened.id, choice });
+  } catch (error) {
+    log(`warning: the answer is recorded, but the keryx decisions journal was not updated (${error instanceof Error ? error.message : String(error)})`);
+  }
+}
+var OPERATOR_COMMANDS, CARD, hostHelpTail = (refusedFor) => `<source> is ${HOST_QUESTION_SOURCES.join(", ")}; <ref> is the host's own id for the question (a poll or message id, at most ${REF_MAX_LENGTH} characters).
+The record says confirmedVia host-question with both texts (each at most ${MAX_OPERATOR_TEXT_LENGTH} characters), and \`keryx decisions\` keeps the question.
+keryx cannot see the question: it records what you report. Refused, with nothing recorded, for ${refusedFor}, the same host question recorded twice,
+in an unattended run and under KERYX_TOOL_CALL=1.`, REF_MAX_LENGTH = 200, SYNTHESIZED_OPTION = "Synthesized by keryx from the verb: not an option the host offered.", HOST_OPTIONS, LEAD_DECLINE, CHOICE_WORDS, NEGATIONS, AFFIRMATIVE, wordsOf = (text) => text.toLowerCase().split(/[^\p{L}\p{N}]+/u).filter((word) => word !== ""), shortened = (text) => JSON.stringify(text.trim().slice(0, 80)), escapeRegExp11 = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"), namesToken = (text, token) => new RegExp(`(?<![\\p{L}\\p{N}_-])${escapeRegExp11(token)}(?![\\p{L}\\p{N}_-])`, "iu").test(text);
 var init_review_operator = __esm(() => {
+  init_service6();
   init_args();
   init_coverage();
   init_operator_decisions();
   init_plan_confirmation();
   init_premise_question();
+  init_run_profile();
+  init_types4();
   init_verify_run();
   init_review_layers();
   OPERATOR_COMMANDS = ["waive-mutation", "override-reviewers", "confirm-plan", "decide-premise", "verify-run"];
@@ -134726,6 +135103,70 @@ var init_review_operator = __esm(() => {
     "confirm-plan": "review_confirm_plan",
     "decide-premise": "review_decide_premise"
   };
+  HOST_OPTIONS = {
+    "decide-premise": {
+      confirm: "uphold",
+      decline: "dismiss",
+      options: [
+        { id: "uphold", label: "Uphold: the finding stands at its original severity" },
+        { id: "dismiss", label: "Dismiss: the finding is incorrect" }
+      ]
+    },
+    "confirm-plan": {
+      confirm: "yes",
+      decline: "no",
+      alsoAffirms: ["run"],
+      options: [
+        { id: "yes", label: "Yes: run the plan as estimated" },
+        { id: "no", label: "No: do not run it" }
+      ]
+    },
+    "waive-mutation": {
+      confirm: "waive",
+      decline: "keep",
+      options: [
+        { id: "waive", label: "Waive: skip the mutation pass" },
+        { id: "keep", label: "Keep: run the mutation pass" }
+      ]
+    },
+    "override-reviewers": {
+      confirm: "override",
+      decline: "keep",
+      options: [
+        { id: "override", label: "Override: run the smaller reviewer set" },
+        { id: "keep", label: "Keep: run the required reviewers" }
+      ]
+    }
+  };
+  LEAD_DECLINE = new Set(["n", "no", "nope", "nah", "not", "never", "cancel", "stop", "decline", "declined", "reject", "\u043D\u0435\u0442", "\u043D\u0435", "\u043E\u0442\u043C\u0435\u043D\u0430"]);
+  CHOICE_WORDS = {
+    uphold: new Set(["uphold", "upheld", "upholds", "keep", "kept", "\u043E\u0441\u0442\u0430\u0432\u0438\u0442\u044C", "\u043E\u0441\u0442\u0430\u0432\u043B\u044F\u0435\u043C", "\u043E\u0441\u0442\u0430\u0432\u043B\u044F\u044E", "\u043F\u043E\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044C", "\u043F\u043E\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044E", "\u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0430\u0442\u044C"]),
+    dismiss: new Set(["dismiss", "dismissed", "dismisses", "drop", "dropped", "\u043E\u0442\u043A\u043B\u043E\u043D\u0438\u0442\u044C", "\u043E\u0442\u043A\u043B\u043E\u043D\u044F\u044E", "\u043E\u0442\u043A\u043B\u043E\u043D\u044F\u0435\u043C", "\u0441\u043D\u044F\u0442\u044C", "\u0437\u0430\u043A\u0440\u044B\u0442\u044C"])
+  };
+  NEGATIONS = new Set(["not", "never", "no", "nope", "nah", "dont", "don", "t", "nt", "cannot", "cant", "\u043D\u0435\u0442", "\u043D\u0435", "\u043D\u0438", "\u0431\u0435\u0437"]);
+  AFFIRMATIVE = new Set([
+    "yes",
+    "y",
+    "yep",
+    "yeah",
+    "ok",
+    "okay",
+    "sure",
+    "confirm",
+    "confirmed",
+    "approve",
+    "approved",
+    "agree",
+    "agreed",
+    "go",
+    "\u0434\u0430",
+    "\u043E\u043A",
+    "\u043E\u043A\u0435\u0439",
+    "\u043F\u043E\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044E",
+    "\u0441\u043E\u0433\u043B\u0430\u0441\u0435\u043D",
+    "\u0434\u0430\u0432\u0430\u0439",
+    "\u0437\u0430\u043F\u0443\u0441\u043A\u0430\u0439"
+  ]);
 });
 
 // src/commands/review-chunks.ts
@@ -148354,7 +148795,7 @@ async function completionFacts(dir) {
   for (const decision of await readOperatorDecisions(dir)) {
     const items = decision.subject?.items ?? [];
     const what = decision.kind === "mutation-waiver" ? "mutation pass not run" : "reviewer override, left out";
-    waivers.push(`waiver: ${what}${items.length === 0 ? "" : ` ${cardSafe(items.join(", "))}`}: "${quoteWhole(decision.quote)}" (${decision.confirmedVia})`);
+    waivers.push(`waiver: ${what}${items.length === 0 ? "" : ` ${cardSafe(items.join(", "))}`}: "${quoteWhole(decision.quote)}" (${decision.confirmedVia}${decision.hostQuestion === undefined ? "" : ` ${cardSafe(decision.hostQuestion.source)}:${cardSafe(decision.hostQuestion.ref)}`})`);
   }
   return {
     reviewId: manifest.reviewId ?? path337.basename(dir),
@@ -176138,7 +176579,7 @@ function summarizeExtras(report) {
       counts: ARMS.map((arm) => [arm, whole(counts[arm])])
     };
   }
-  return { reasons, ineligible, progress };
+  return { reasons, ineligible, progress, hostQuestions: Array.isArray(report.hostQuestions) ? report.hostQuestions.length : 0 };
 }
 function nonNegative(value) {
   return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : 0;
@@ -176218,6 +176659,8 @@ function extrasLines(extras) {
   }
   if (extras.ineligible !== null)
     lines.push(`Not in the comparison (ineligible): ${extras.ineligible.decisions}, ${extras.ineligible.answered} answered`);
+  if (extras.hostQuestions > 0)
+    lines.push(`Answered via host question (a separate kind, not in the comparison): ${extras.hostQuestions}`);
   if (extras.progress !== null) {
     const p = extras.progress;
     lines.push(`Progress, flow 392 AC11: ${p.decisions}/${p.decisionsTarget} decisions, ${p.blind}/${p.blindTarget} blind`, `Progress per arm (threshold ${p.threshold}): ${p.counts.map(([arm, n]) => `${arm} ${n}`).join(", ")}`);
@@ -176331,12 +176774,13 @@ async function openDecisionsArms(otui, chrome, options) {
   const text = await armsText(cwd);
   return presentDecisions((hostOtui, hostChrome, input) => openModal(hostOtui, hostChrome, input), otui, chrome, { ...rest, text, tabLabel: "Arms" });
 }
-function projectDecisionsPanel(count, width, backfilled = 0, annotated = 0) {
-  if (count <= 0 && backfilled <= 0)
+function projectDecisionsPanel(count, width, backfilled = 0, annotated = 0, hostQuestions = 0) {
+  if (count <= 0 && backfilled <= 0 && hostQuestions <= 0)
     return { visible: false, text: "" };
   const live = count > 0 ? `${count} decision${count === 1 ? "" : "s"}` : "";
   const before = backfilled > 0 ? `${count > 0 ? " + " : ""}${backfilled} before` : "";
-  const label = `${live}${before}`;
+  const via = hostQuestions > 0 ? `${count > 0 || backfilled > 0 ? " + " : ""}${hostQuestions} via host` : "";
+  const label = `${live}${before}${via}`;
   const marked = annotated > 0 ? `${label} ${OWN_MARK}${annotated}` : label;
   const candidates = [`${marked} \xB7 /decisions`, marked, `${label} \xB7 /decisions`, label];
   const text = candidates.find((candidate) => candidate.length <= width) ?? label.slice(0, Math.max(1, width));
@@ -176362,6 +176806,7 @@ function mountDecisionsSidebar(options) {
   const count = options.count ?? (() => decisionCount(options.cwd));
   const backfilledTotal = options.backfilled ?? (() => backfilledCount(options.cwd));
   const annotatedTotal = options.annotated ?? (() => annotatedCount(options.cwd));
+  const hostTotal = options.hostQuestions ?? (() => hostQuestionCount(options.cwd));
   const box = new core.BoxRenderable(r, { id: "sb-decisions", flexDirection: "column", flexShrink: 0 });
   options.parent.add(box);
   const armsBox = new core.BoxRenderable(r, { id: "sb-decisions-arms", flexDirection: "column", flexShrink: 0 });
@@ -176449,9 +176894,15 @@ function mountDecisionsSidebar(options) {
     } catch {
       marked = 0;
     }
+    let viaHost;
+    try {
+      viaHost = await hostTotal();
+    } catch {
+      viaHost = 0;
+    }
     if (disposed || generation !== refreshGeneration)
       return;
-    projected = projectDecisionsPanel(n, options.width, before, marked);
+    projected = projectDecisionsPanel(n, options.width, before, marked, viaHost);
     paint();
     let nextArms;
     try {
@@ -216271,7 +216722,7 @@ function parseSkillMetadata(skillMd, registryEntry) {
   };
 }
 function readMetadataLine(content, label) {
-  const match = content.match(new RegExp(`^${escapeRegExp11(label)}:\\s*(.+)$`, "m"));
+  const match = content.match(new RegExp(`^${escapeRegExp12(label)}:\\s*(.+)$`, "m"));
   return match?.[1]?.trim();
 }
 function updateLastVerified(skillMd, verifiedAt) {
@@ -216306,7 +216757,7 @@ function inferModuleFromPath(packageRoot) {
   const next = parts[index + 1];
   return index >= 0 && next ? next : "general";
 }
-function escapeRegExp11(value) {
+function escapeRegExp12(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 var init_verify2 = __esm(() => {