@nac3/forge-cli 0.2.0-alpha.4 → 0.2.0-alpha.59z.118

package/dist/nac3/internal_manifest.js

@@ -0,0 +1,1846 @@
+/**
+ * NAC3 internal manifest -- Forge dogfood.
+ *
+ * Single source of truth for every verb the LLM can invoke.
+ * The chat panel reads this at boot, the system prompt embeds
+ * the JSON-serialised version of `manifest()`, and `nac3_invoke`
+ * uses `findVerb()` + `validateArgs()` to gate calls.
+ *
+ * Adding a new verb is one declaration here -- no separate tool
+ * spec, no separate handler registration, no system prompt edit.
+ *
+ * Contract: docs/NAC3_INTERNAL_MANIFEST.md
+ *
+ * ASCII-only.
+ */
+import { VERSION as FORGE_VERSION } from '../version.js';
+/* ============================================================
+ * Verb declarations
+ *
+ * Add new verbs here. The single source of truth.
+ * ============================================================ */
+const VERBS = [
+    /* ============================================================
+     * PIZARRON -- two distinct verbs.
+     *
+     * yujin.pizarron.create-tab -- ad-hoc content YOU generated.
+     *   Side effects: dom ONLY. No file_path. The pizarron is a
+     *   canvas, NOT a file-edit affordance.
+     *
+     * yujin.pizarron.open-file  -- read a project file from disk
+     *   AND open it as an editor tab. Side effects: filesystem +
+     *   dom. The verb makes the read explicit. The LLM that calls
+     *   this commits to "te abri el archivo" with a real disk read
+     *   behind it. To persist edits, pair with yujin.fs.write-
+     *   project-file.
+     * ============================================================ */
+    {
+        id: 'yujin.pizarron.create-tab',
+        role: 'action',
+        action: 'create_tab',
+        label: 'Crear pestana en pizarron (contenido ad-hoc)',
+        description: 'Open a new tab in the pizarron with AD-HOC content YOU '
+            + 'generated (table, code you wrote, doc, BPMN, flow). NOT '
+            + 'for opening files from disk -- for that use '
+            + 'yujin.pizarron.open-file. After invoking, your chat '
+            + 'reply must be 1-3 short sentences pointing at the '
+            + 'pizarron.',
+        schema: {
+            type: 'object',
+            properties: {
+                title: { type: 'string', description: 'Tab header label. Max 80 chars.', minLength: 1, maxLength: 80 },
+                kind: { type: 'string', description: 'Render mode.', enum: ['code', 'table', 'markdown', 'bpmn', 'flow', 'document', 'tree'] },
+                content: { type: 'string', description: 'Body text. Max 100000 chars.', minLength: 1, maxLength: 100000 },
+                language: { type: 'string', description: 'For kind=code: language hint.', maxLength: 40 },
+            },
+            required: ['title', 'kind', 'content'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['dom'],
+        visible: false,
+        handler_side: 'panel',
+        deprecated_aliases: ['forge_show_in_pizarron'],
+    },
+    /* ============================================================
+     * PANEL VISIBLE VERBS (alpha.44 C3)
+     *
+     * The 33 verbs above are all visible:false (server / panel
+     * actions without a DOM element). These three correspond to
+     * visible UI controls. The LLM can invoke them so a fully
+     * voice-driven flow does NOT depend on the user clicking the
+     * chrome -- "abri la configuracion" / "pasa a modo full" /
+     * "mandame X" all resolve to these verbs.
+     * ============================================================ */
+    {
+        id: 'yujin.panel.open-settings',
+        role: 'button',
+        action: 'open_settings',
+        label: 'Abrir el dropdown de configuracion',
+        description: 'Open the panel settings dropdown (the gear icon). Use when '
+            + 'the user says "abrime la configuracion" / "donde cambio X" '
+            + '/ "abri ajustes". This shows the language selector, the '
+            + 'mode toggle, the keys editor, etc.',
+        schema: { type: 'object', properties: {}, required: [] },
+        policy: 'unrestricted',
+        side_effects: ['dom'],
+        visible: true,
+        handler_side: 'panel',
+    },
+    {
+        id: 'yujin.panel.switch-mode',
+        role: 'control',
+        action: 'switch_mode',
+        label: 'Cambiar el modo del panel (globito / mini / full)',
+        description: 'Switch the panel view mode. Use when the user says "pasa a '
+            + 'modo full" / "minimiza" / "ocultalo en el globito".',
+        schema: {
+            type: 'object',
+            properties: {
+                mode: {
+                    type: 'string',
+                    description: 'Target mode.',
+                    enum: ['globito', 'mini', 'full'],
+                },
+            },
+            required: ['mode'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['dom'],
+        visible: true,
+        handler_side: 'panel',
+    },
+    {
+        id: 'yujin.panel.send-message',
+        role: 'action',
+        action: 'send_message',
+        label: 'Enviar un mensaje desde la barra del chat',
+        description: 'Inject text into the chat input + submit it. Use only when '
+            + 'the user dictated a message intended for the chat itself '
+            + '(e.g. "mandale esto al chat: ..."). For tool actions use '
+            + 'the matching NAC3 verb directly, not this.',
+        schema: {
+            type: 'object',
+            properties: {
+                text: { type: 'string', description: 'Message body.', minLength: 1, maxLength: 4000 },
+            },
+            required: ['text'],
+        },
+        policy: 'confirm',
+        side_effects: ['dom'],
+        visible: true,
+        handler_side: 'panel',
+    },
+    {
+        id: 'yujin.pizarron.read-tab',
+        role: 'action',
+        action: 'read_tab',
+        label: 'Leer en voz alta una pestana del pizarron',
+        description: 'TTS over a pizarron tab. THIS IS THE ONE FOR "leeme el '
+            + 'codigo del pizarron" / "leeme la tabla" / "leemelo en '
+            + 'voz alta" / "que dice esto" -- ANY voice-read request '
+            + 'targeting content already shown in the pizarron. The '
+            + 'panel pre-processes per kind: code blocks summarized as '
+            + '"codigo en N lineas en <language>" (NOT literal source), '
+            + 'tables serialized to "fila uno: columna A es X, ...", '
+            + 'markdown/document with code fences stripped.\n\n'
+            + 'DO NOT CONFUSE with yujin.reader.open -- that one is for '
+            + 'opening a NEW document FROM DISK into the document reader '
+            + '(pdf/docx/epub/etc), NOT for reading aloud a tab that is '
+            + 'already on screen. If the user references "la tabla / el '
+            + 'codigo / la pestana / esto / lo que pusiste / el pizarron", '
+            + 'they mean an already-open tab -> use read-tab.\n\n'
+            + 'Use without item_id to read the ACTIVE tab; pass item_id '
+            + 'only when the user named a specific other tab.',
+        schema: {
+            type: 'object',
+            properties: {
+                item_id: { type: 'string', description: 'Optional tab id. Default: the active tab.', maxLength: 80 },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['dom', 'external-api'],
+        visible: false,
+        handler_side: 'panel',
+    },
+    {
+        id: 'yujin.pizarron.open-file',
+        role: 'action',
+        action: 'open_file',
+        label: 'Abrir archivo del proyecto en editor',
+        description: 'Read a project file from disk AND open it as an EDITOR '
+            + 'tab in the pizarron. Use when the user says "edita / '
+            + 'abrime / mostrame el archivo X". The file is read '
+            + 'server-side; the panel renders the tab in edit mode. '
+            + 'Opening does NOT persist anything to disk -- to save, '
+            + 'call yujin.fs.write-project-file with the new content.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Project-relative path.', minLength: 1, maxLength: 500 },
+                language: { type: 'string', description: 'Optional language hint.', maxLength: 40 },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem', 'dom'],
+        visible: false,
+        handler_side: 'server',
+        panel_consume: true,
+        deprecated_aliases: ['forge_open_file_for_editor'],
+    },
+    /* ============================================================
+     * FILESYSTEM
+     * ============================================================ */
+    {
+        id: 'yujin.fs.list-files',
+        role: 'query',
+        action: 'list_files',
+        label: 'Listar archivos del proyecto',
+        description: 'List source files under a project subdirectory. Returns '
+            + 'paths + sizes. Refuses absolute paths and ../.',
+        schema: {
+            type: 'object',
+            properties: {
+                subdir: { type: 'string', description: 'Relative subdir. Default "src".', maxLength: 200 },
+                glob: { type: 'string', description: 'Optional basename glob.', maxLength: 60 },
+                max_files: { type: 'number', description: 'Default 100, max 500.' },
+            },
+            required: [],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_list_files'],
+    },
+    {
+        id: 'yujin.fs.find',
+        role: 'query',
+        action: 'find',
+        label: 'Buscar texto via regex en archivos',
+        description: 'Search the project for files containing lines that match '
+            + 'a regex. Returns a list of {path, line, match, context} '
+            + 'hits with caps + truncation. Skips binary files, deps, '
+            + 'build output. Faster + safer than yujin.shell.exec with '
+            + 'grep / ripgrep on a fresh checkout.',
+        schema: {
+            type: 'object',
+            properties: {
+                pattern: { type: 'string', description: 'Regex pattern.', minLength: 1, maxLength: 400 },
+                subdir: { type: 'string', description: 'Project-relative dir. Default ".".', maxLength: 200 },
+                glob: { type: 'string', description: 'Basename glob (e.g. "*.ts").', maxLength: 80 },
+                max_hits: { type: 'number', description: 'Default 50, max 500.' },
+                max_files: { type: 'number', description: 'Default 1000, max 5000.' },
+                flags: { type: 'string', description: 'Regex flags. Default "i".', maxLength: 8 },
+            },
+            required: ['pattern'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.fs.read-file',
+        role: 'query',
+        action: 'read_file',
+        label: 'Leer archivo del proyecto',
+        description: 'Read a single text file. Refuses binary. Path is project-'
+            + 'relative.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Project-relative path.', minLength: 1, maxLength: 500 },
+                max_bytes: { type: 'number', description: 'Default 65536, max 262144.' },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_read_file'],
+    },
+    {
+        id: 'yujin.fs.write-project-file',
+        role: 'action',
+        action: 'write_project_file',
+        label: 'Escribir archivo en el proyecto',
+        description: 'Write text content to a project-relative path. Creates '
+            + 'parent dirs as needed. Refuses absolute paths, ../, '
+            + 'and binary content. Returns bytes_written + path. THIS '
+            + 'PERSISTS TO DISK. Use only when the user explicitly '
+            + 'asked to save / write / create a file. NOT for showing '
+            + 'content (use create-tab or open-file).',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Project-relative path.', minLength: 1, maxLength: 500 },
+                content: { type: 'string', description: 'Text content. Max 1 MB.', maxLength: 1048576 },
+                create_dirs: { type: 'boolean', description: 'Create missing parents. Default true.' },
+            },
+            required: ['path', 'content'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_write_project_file'],
+    },
+    /* ============================================================
+     * MANIFEST + CONSULT
+     * ============================================================ */
+    {
+        id: 'yujin.manifest.read',
+        role: 'query',
+        action: 'read_manifest',
+        label: 'Leer manifest NAC-3 del proyecto activo',
+        description: 'Read the public NAC-3 manifest of the adopter project '
+            + '(NOT this Forge-internal manifest, which you already '
+            + 'see in the system prompt). Optional plugin_slug filter.',
+        schema: {
+            type: 'object',
+            properties: {
+                plugin_slug: { type: 'string', description: 'Filter elements whose id starts with this slug + ".".', maxLength: 120 },
+            },
+            required: [],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_read_manifest'],
+    },
+    {
+        id: 'yujin.consult.nac-spec',
+        role: 'query',
+        action: 'consult_nac_spec',
+        label: 'Consultar la especificacion NAC-3',
+        description: 'Search the canonical NAC-3 spec (docs/SPEC.md) for '
+            + 'paragraphs matching a free-text query.',
+        schema: {
+            type: 'object',
+            properties: {
+                query: { type: 'string', description: 'Free-text query.', minLength: 1, maxLength: 200 },
+                max_results: { type: 'number', description: 'Default 5, max 20.' },
+            },
+            required: ['query'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_consult_nac_spec'],
+    },
+    /* ============================================================
+     * KEYS (BYOK)
+     * ============================================================ */
+    {
+        id: 'yujin.keys.status',
+        role: 'query',
+        action: 'get_byok_status',
+        label: 'Estado de las API keys (BYOK)',
+        description: 'Report which BYOK provider keys are configured. Returns '
+            + 'booleans only -- never the values.',
+        schema: { type: 'object', properties: {}, required: [] },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_get_byok_status'],
+    },
+    {
+        id: 'yujin.keys.set',
+        role: 'action',
+        action: 'set_byok_key',
+        label: 'Guardar una API key (BYOK)',
+        description: 'Store a BYOK provider key locally. Atomic write, mode '
+            + '0600. NEVER echo the value back.',
+        schema: {
+            type: 'object',
+            properties: {
+                slot: { type: 'string', description: 'Slot (anthropic_api_key, openai_api_key, google_ai_key, google_stt_key, google_tts_key, whisper_api_key, elevenlabs_api_key).', minLength: 1, maxLength: 80 },
+                value: { type: 'string', description: 'Key value. Empty string clears.', maxLength: 4096 },
+            },
+            required: ['slot', 'value'],
+        },
+        policy: 'confirm',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_set_byok_key'],
+    },
+    /* ============================================================
+     * GIT (local repo)
+     * ============================================================ */
+    {
+        id: 'yujin.git.commit',
+        role: 'action',
+        action: 'git_commit',
+        label: 'Commit en git',
+        description: 'Commit staged changes (or all tracked with all=true). '
+            + 'Returns the commit hash. THIS MUTATES GIT STATE.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', description: 'Default: project root.', maxLength: 500 },
+                message: { type: 'string', description: 'Commit message.', minLength: 1, maxLength: 4096 },
+                all: { type: 'boolean', description: 'Commit all tracked changes. Default false.' },
+            },
+            required: ['message'],
+        },
+        policy: 'destructive',
+        side_effects: ['git', 'filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_git_commit'],
+    },
+    {
+        id: 'yujin.git.push',
+        role: 'action',
+        action: 'git_push',
+        label: 'Push a remote git',
+        description: 'Push current branch to remote. force=true uses '
+            + '--force-with-lease (irreversible).',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                remote: { type: 'string', maxLength: 80 },
+                branch: { type: 'string', maxLength: 200 },
+                force: { type: 'boolean' },
+            },
+            required: [],
+        },
+        policy: 'destructive',
+        side_effects: ['git', 'network'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_git_push'],
+    },
+    {
+        id: 'yujin.git.pull',
+        role: 'action',
+        action: 'git_pull',
+        label: 'Pull desde remote git',
+        description: 'Fast-forward pull from configured remote.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                remote: { type: 'string', maxLength: 80 },
+                branch: { type: 'string', maxLength: 200 },
+            },
+            required: [],
+        },
+        policy: 'approval-required',
+        side_effects: ['git', 'network'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_git_pull'],
+    },
+    {
+        id: 'yujin.git.log',
+        role: 'query',
+        action: 'git_log',
+        label: 'Log de commits',
+        description: 'Return the last N commits. Default 10, max 50.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                max: { type: 'number', description: 'Default 10, max 50.' },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_git_log'],
+    },
+    {
+        id: 'yujin.git.diff',
+        role: 'query',
+        action: 'git_diff',
+        label: 'Diff de cambios',
+        description: 'Run `git diff <ref>` and return the diff output. ref '
+            + 'defaults to HEAD. Pass two refs with .. or ... for a '
+            + 'range. Optional path filter. Lines hard-capped + the '
+            + 'tail truncated.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                ref: { type: 'string', description: 'Default HEAD.', maxLength: 200 },
+                path: { type: 'string', description: 'Limit to a path.', maxLength: 500 },
+                name_only: { type: 'boolean', description: 'Default false. Returns only file names + status.' },
+                max_lines: { type: 'number', description: 'Default 100, max 2000.' },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.git.show',
+        role: 'query',
+        action: 'git_show',
+        label: 'Mostrar un commit',
+        description: 'Run `git show <ref>` -- returns the commit metadata '
+            + '(hash, author, date, subject, body) and the diff. '
+            + 'Pass metadata_only=true to skip the diff body for cheap '
+            + 'lookups.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                ref: { type: 'string', description: 'Commit hash, ref name, or HEAD~N.', minLength: 1, maxLength: 200 },
+                metadata_only: { type: 'boolean', description: 'Skip diff body. Default false.' },
+                max_lines: { type: 'number', description: 'Default 100, max 2000.' },
+            },
+            required: ['ref'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.git.status',
+        role: 'query',
+        action: 'git_status',
+        label: 'Estado del worktree',
+        description: 'Run `git status --porcelain=v2` and return the parsed list '
+            + 'of staged + unstaged + untracked files plus the current '
+            + 'branch + ahead/behind counts. No side effects.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.git.branch-list',
+        role: 'query',
+        action: 'git_branch_list',
+        label: 'Listar ramas',
+        description: 'Return the local branches with their last commit hash + '
+            + 'subject + whether they are the current branch. Pass '
+            + 'include_remotes=true to also list remote-tracking refs.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                include_remotes: { type: 'boolean', description: 'Default false.' },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    /* ============================================================
+     * GITHUB (remote)
+     * ============================================================ */
+    {
+        id: 'yujin.github.create-repo',
+        role: 'action',
+        action: 'create_github_repo',
+        label: 'Crear repositorio en GitHub',
+        description: 'Create a new repository under the authenticated GitHub '
+            + 'user. Requires vault slot github_token with repo scope.',
+        schema: {
+            type: 'object',
+            properties: {
+                name: { type: 'string', description: 'Repo name [a-zA-Z0-9._-].', minLength: 1, maxLength: 100 },
+                private: { type: 'boolean', description: 'Default true.' },
+                description: { type: 'string', maxLength: 400 },
+            },
+            required: ['name'],
+        },
+        policy: 'approval-required',
+        side_effects: ['network', 'external-api'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_create_github_repo'],
+    },
+    {
+        id: 'yujin.github.clone-repo',
+        role: 'action',
+        action: 'clone_repo',
+        label: 'Clonar repositorio',
+        description: 'Clone a remote git repo locally. Public repos need no '
+            + 'auth; private repos use github_token vault slot.',
+        schema: {
+            type: 'object',
+            properties: {
+                url: { type: 'string', description: 'HTTPS clone URL.', minLength: 1, maxLength: 500 },
+                target_dir: { type: 'string', description: 'Default ./<repo>.', maxLength: 500 },
+            },
+            required: ['url'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem', 'network', 'process'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_clone_repo'],
+    },
+    {
+        id: 'yujin.github.branch-status',
+        role: 'query',
+        action: 'branch_status',
+        label: 'Estado del branch local',
+        description: 'Read current git branch + dirty-tree status. Returns '
+            + 'branch, ahead/behind counts, dirty files (max 50).',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', description: 'Default: project root.', maxLength: 500 },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_branch_status'],
+    },
+    /* ============================================================
+     * DOCTRINE META (alpha.59z.0 -- doctrine-on-demand)
+     *
+     * yujin.doctrine.discover -- fetch long-form rules / reference
+     *   blocks (workflow, nac3-attrs, g-doc, pizarron-condensed,
+     *   r8-modal, gates) from docs/doctrine/{slug}.md on demand.
+     *   Same pattern as nac3.discover-schemas: bulk array of
+     *   slugs, returns markdown content per slug.
+     *
+     *   When unknown slug -> {error, available: [...]} so the LLM
+     *   can recover.
+     *
+     * Side effects: none. Pure read of doctrine markdown files.
+     * ============================================================ */
+    {
+        id: 'yujin.doctrine.discover',
+        role: 'query',
+        action: 'discover_doctrine',
+        label: 'Traer doctrinas / reglas long-form por slug',
+        description: 'Return the full markdown text for one or more doctrine '
+            + 'slugs. Use when the system prompt references a doctrine '
+            + 'by name but you need the full rules (e.g. workflow, '
+            + 'nac3-attrs, g-doc). Bulk: pass an array of slugs in one '
+            + 'call. Returns {ok, slug, content} per entry; unknown '
+            + 'slugs return {error, available: [...]} for recovery.',
+        schema: {
+            type: 'object',
+            properties: {
+                slugs: {
+                    type: 'array',
+                    description: 'List of doctrine slugs (kebab-case). Empty array '
+                        + 'returns just the list of available slugs.',
+                },
+            },
+            required: ['slugs'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+    },
+    /* ============================================================
+     * NAC3 META (alpha.59x -- manifest lazy)
+     *
+     * yujin.nac3.discover-schemas -- fetch full schema + description
+     *   + policy detail for one or more verb_ids. Used in lazy
+     *   manifest mode (YF_MANIFEST_MODE=lazy, default) where the
+     *   stub embedded in the system prompt only carries name +
+     *   policy + label + args_hint. When the LLM needs the full
+     *   schema (enum values, length limits, etc) it calls this
+     *   FIRST, then composes args + invokes the real verb.
+     *
+     * Side effects: none. Read-only enumeration over the in-memory
+     *   manifest. Safe to call multiple times per turn.
+     * ============================================================ */
+    {
+        id: 'yujin.nac3.discover-schemas',
+        role: 'query',
+        action: 'discover_schemas',
+        label: 'Traer schemas completos de verbos por id',
+        description: 'Return the full schema + description + policy + side_effects '
+            + 'for one or more verb_ids. Use BEFORE invoking a verb when '
+            + 'you need the exact arg names, types, enums, or length '
+            + 'limits and the stub args_hint is not enough. Bulk: pass '
+            + 'multiple verb_ids in one call (no extra rounds).',
+        schema: {
+            type: 'object',
+            properties: {
+                verb_ids: {
+                    type: 'array',
+                    description: 'List of verb_ids to fetch schemas for. Unknown ids '
+                        + 'return null in the result with a suggestion field.',
+                },
+            },
+            required: ['verb_ids'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+    },
+    /* ============================================================
+     * AUDIT
+     * ============================================================ */
+    {
+        id: 'yujin.audit.consumers',
+        role: 'query',
+        action: 'audit_consumers',
+        label: 'Auditar consumidores de un concepto',
+        description: 'Enumerate every file that reads/writes a concept (env '
+            + 'var, JSON key, type, tool name, vault slot). Use BEFORE '
+            + 'any commit that changes a shared structure.',
+        schema: {
+            type: 'object',
+            properties: {
+                concept: { type: 'string', description: 'Identifier.', minLength: 1, maxLength: 200 },
+                include_tests: { type: 'boolean', description: 'Default true.' },
+                include_docs: { type: 'boolean', description: 'Default true.' },
+                max_hits: { type: 'number', description: 'Default 200.' },
+            },
+            required: ['concept'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_audit_consumers'],
+    },
+    /* ============================================================
+     * WORKFLOW (18-step methodology state machine)
+     * ============================================================ */
+    {
+        id: 'yujin.workflow.state',
+        role: 'query',
+        action: 'workflow_state',
+        label: 'Estado del workflow del proyecto',
+        description: 'Read project workflow state from yujin.forge.json. Use '
+            + 'at the START of every chat turn to know where the user '
+            + 'is in the 18-step methodology.',
+        schema: {
+            type: 'object',
+            properties: {
+                scope: { type: 'string', description: 'Optional group filter.', maxLength: 60 },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_workflow_state'],
+    },
+    {
+        id: 'yujin.workflow.set',
+        role: 'action',
+        action: 'workflow_set',
+        label: 'Persistir respuestas del workflow',
+        description: 'Patch workflow.<group> in yujin.forge.json after '
+            + 'collecting triage / discover / clarification answers.',
+        schema: {
+            type: 'object',
+            properties: {
+                group: { type: 'string', description: 'Group to patch.', minLength: 1, maxLength: 60 },
+                patch: { type: 'object', description: 'Partial merged into group.' },
+                top_level: { type: 'boolean', description: 'Top-level (tier/blocks_progress/etc).' },
+            },
+            required: ['group', 'patch'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_workflow_set'],
+    },
+    {
+        id: 'yujin.workflow.run-step',
+        role: 'action',
+        action: 'workflow_run_step',
+        label: 'Correr paso autonomo del workflow',
+        description: 'Run an autonomous step. Valid: legacy_audit | coverage | '
+            + 'manual_generate | handoff | metrics.',
+        schema: {
+            type: 'object',
+            properties: {
+                step: { type: 'string', description: 'Step name.', enum: ['legacy_audit', 'coverage', 'manual_generate', 'handoff', 'metrics'] },
+            },
+            required: ['step'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_workflow_run_step'],
+    },
+    /* ============================================================
+     * LIFECYCLE (dev-server child processes)
+     * ============================================================ */
+    {
+        id: 'yujin.lifecycle.run-app',
+        role: 'action',
+        action: 'run_app',
+        label: 'Lanzar dev server del proyecto',
+        description: 'Launch the project dev server. Auto-detects package '
+            + 'manager + script. Returns pid + best-effort URL.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                command: { type: 'string', description: 'Default autoselected.', maxLength: 80 },
+                wait_for_url_ms: { type: 'number', description: 'Default 5000, max 30000.' },
+            },
+            required: [],
+        },
+        policy: 'approval-required',
+        side_effects: ['process'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_run_app'],
+    },
+    {
+        id: 'yujin.lifecycle.stop-app',
+        role: 'action',
+        action: 'stop_app',
+        label: 'Detener dev server',
+        description: 'Stop the running app spawned by run-app.',
+        schema: {
+            type: 'object',
+            properties: {
+                pid: { type: 'number', description: 'Default: active.' },
+            },
+            required: [],
+        },
+        policy: 'approval-required',
+        side_effects: ['process'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_stop_app'],
+    },
+    {
+        id: 'yujin.lifecycle.restart-app',
+        role: 'action',
+        action: 'restart_app',
+        label: 'Reiniciar dev server',
+        description: 'Stop + relaunch with same (or new) options.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+                command: { type: 'string', maxLength: 80 },
+                wait_for_url_ms: { type: 'number' },
+            },
+            required: [],
+        },
+        policy: 'approval-required',
+        side_effects: ['process'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_restart_app'],
+    },
+    /* ============================================================
+     * READER (10-format document reader for voice)
+     * ============================================================ */
+    {
+        id: 'yujin.reader.open',
+        role: 'action',
+        action: 'reader_open',
+        label: 'Abrir documento en lector',
+        description: 'Open a NEW DOCUMENT FROM DISK into the document reader. '
+            + 'Supported: txt, md, pdf, docx, epub, xlsx, csv, html, '
+            + 'rtf, source. Returns doc_id + title + section count + '
+            + 'first block.\n\n'
+            + 'DO NOT USE FOR reading aloud a tab already in the '
+            + 'pizarron -- that is yujin.pizarron.read-tab. The reader '
+            + 'is for ingest of a new file the user wants to navigate '
+            + 'by sections / bookmarks / search, not for TTS over the '
+            + 'pizarron canvas.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Path (rel or abs).', minLength: 1, maxLength: 500 },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_open'],
+    },
+    {
+        id: 'yujin.reader.list-docs',
+        role: 'query',
+        action: 'reader_list_documents',
+        label: 'Listar documentos abiertos',
+        description: 'List all documents currently open in this chat session.',
+        schema: { type: 'object', properties: {}, required: [] },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_list_documents'],
+    },
+    {
+        id: 'yujin.reader.read-section',
+        role: 'query',
+        action: 'reader_read_section',
+        label: 'Leer seccion del documento',
+        description: 'Return the blocks of a section.',
+        schema: {
+            type: 'object',
+            properties: {
+                doc_id: { type: 'string', minLength: 1, maxLength: 200 },
+                index: { type: 'number', description: '0-based.' },
+            },
+            required: ['doc_id'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_read_section'],
+    },
+    {
+        id: 'yujin.reader.next-block',
+        role: 'query',
+        action: 'reader_next_block',
+        label: 'Avanzar al siguiente bloque',
+        description: 'Advance the cursor one block forward.',
+        schema: {
+            type: 'object',
+            properties: {
+                doc_id: { type: 'string', minLength: 1, maxLength: 200 },
+            },
+            required: ['doc_id'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_next_block'],
+    },
+    {
+        id: 'yujin.reader.search',
+        role: 'query',
+        action: 'reader_search',
+        label: 'Buscar en el documento',
+        description: 'Full-text search across a document.',
+        schema: {
+            type: 'object',
+            properties: {
+                doc_id: { type: 'string', minLength: 1, maxLength: 200 },
+                query: { type: 'string', minLength: 1, maxLength: 200 },
+                max: { type: 'number', description: 'Default 20.' },
+            },
+            required: ['doc_id', 'query'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_search'],
+    },
+    {
+        id: 'yujin.reader.bookmark-set',
+        role: 'action',
+        action: 'reader_bookmark_set',
+        label: 'Marcar bookmark',
+        description: 'Set a named bookmark at the current cursor.',
+        schema: {
+            type: 'object',
+            properties: {
+                doc_id: { type: 'string', minLength: 1, maxLength: 200 },
+                name: { type: 'string', description: 'Letter + lowercase + digits + _ -.', minLength: 1, maxLength: 60 },
+            },
+            required: ['doc_id', 'name'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_bookmark_set'],
+    },
+    {
+        id: 'yujin.reader.bookmark-jump',
+        role: 'action',
+        action: 'reader_bookmark_jump',
+        label: 'Saltar a bookmark',
+        description: 'Jump to a previously-set bookmark.',
+        schema: {
+            type: 'object',
+            properties: {
+                doc_id: { type: 'string', minLength: 1, maxLength: 200 },
+                name: { type: 'string', minLength: 1, maxLength: 60 },
+            },
+            required: ['doc_id', 'name'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_bookmark_jump'],
+    },
+    {
+        id: 'yujin.reader.recap',
+        role: 'query',
+        action: 'reader_recap',
+        label: 'Recap del lector',
+        description: 'Return the last N spoken blocks. mode=summary calls '
+            + 'Claude (gated by YF_ENABLE_CLAUDE_RECAP=1).',
+        schema: {
+            type: 'object',
+            properties: {
+                doc_id: { type: 'string', minLength: 1, maxLength: 200 },
+                window: { type: 'number', description: 'Default 10, max 60.' },
+                mode: { type: 'string', enum: ['literal', 'summary'] },
+            },
+            required: ['doc_id'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['external-api'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_reader_recap'],
+    },
+    /* ============================================================
+     * MANUAL (Forge user manual, 10 languages)
+     * ============================================================ */
+    {
+        id: 'yujin.manual.open',
+        role: 'action',
+        action: 'manual_open',
+        label: 'Abrir manual del usuario de Forge',
+        description: 'Open the Yujin Forge user manual in the requested '
+            + 'language (default: current panel language). 10 locales: '
+            + 'es, en, pt, fr, ja, zh, hi, ar, de, it.',
+        schema: {
+            type: 'object',
+            properties: {
+                lang: { type: 'string', description: 'Language code.', enum: ['es', 'en', 'pt', 'fr', 'ja', 'zh', 'hi', 'ar', 'de', 'it'] },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+        deprecated_aliases: ['forge_manual_open'],
+    },
+    /* ============================================================
+     * alpha.59d -- LIFECYCLE + SHELL verbs.
+     *
+     * These give Forge real control over the host: create
+     * directories, move files, init projects, switch project
+     * root, execute arbitrary shell. Pablo Q1+Q2+Q3 + PD1
+     * (Danger Zone master toggle in limits) + PD2 (every
+     * invocation gets an audit row).
+     * ============================================================ */
+    {
+        id: 'yujin.fs.mkdir',
+        role: 'action',
+        action: 'fs_mkdir',
+        label: 'Crear directorio',
+        description: 'Create a directory (recursive by default). Accepts '
+            + 'absolute paths -- this verb is NOT project-root-gated '
+            + 'because lifecycle verbs need to operate outside the '
+            + 'current root. Approval-required.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path to create.', minLength: 1, maxLength: 500 },
+                recursive: { type: 'boolean', description: 'Default true.' },
+            },
+            required: ['path'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.fs.move',
+        role: 'action',
+        action: 'fs_move',
+        label: 'Mover / renombrar archivo',
+        description: 'Move or rename a file. Both paths may be absolute or '
+            + 'project-relative. Approval-required (destructive: '
+            + 'overwrites the destination if it exists).',
+        schema: {
+            type: 'object',
+            properties: {
+                from: { type: 'string', description: 'Source path.', minLength: 1, maxLength: 500 },
+                to: { type: 'string', description: 'Destination path.', minLength: 1, maxLength: 500 },
+            },
+            required: ['from', 'to'],
+        },
+        policy: 'destructive',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.project.init',
+        role: 'action',
+        action: 'project_init',
+        label: 'Inicializar proyecto Forge',
+        description: 'Create a directory + scaffold yujin.forge.json with '
+            + 'project_slug + project_name + tier. Creates docs/ + '
+            + 'src/ subdirs. Idempotent: re-running on an existing '
+            + 'yujin.forge.json preserves prior fields.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Directory to create / use.', minLength: 1, maxLength: 500 },
+                slug: { type: 'string', description: 'Optional. Defaults to basename(path) sanitised.' },
+                project_name: { type: 'string', description: 'Optional human label.' },
+                tier: { type: 'string', enum: ['simple', 'medium', 'full'], description: 'Optional workflow tier seed.' },
+            },
+            required: ['path'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.project.set-root',
+        role: 'action',
+        action: 'project_set_root',
+        label: 'Cambiar project root activo',
+        description: 'Persist a new active project root in ~/.yujin-forge/'
+            + 'projects.json. The CURRENT process keeps operating on '
+            + 'the projectRoot it was started with; the next yf chat '
+            + 'session reads this. Returns active_root + known_roots.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute path to an existing directory.', minLength: 1, maxLength: 500 },
+            },
+            required: ['path'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.shell.exec',
+        role: 'action',
+        action: 'shell_exec',
+        label: 'Ejecutar comando shell',
+        description: 'Execute an arbitrary shell command. The server classifies '
+            + 'the command (destructive / elevation / network / safe) '
+            + 'and the panel approval modal shows the classification '
+            + 'before dispatching. Per Pablo: destructive/elevation/'
+            + 'network always require approval; safe commands auto-'
+            + 'approve. Output truncated at limits.shell.max_output_'
+            + 'bytes. Timeout bounded by limits.shell.timeout_ms_max. '
+            + 'Every invocation is audit-logged.',
+        schema: {
+            type: 'object',
+            properties: {
+                command: { type: 'string', description: 'The shell command to run.', minLength: 1, maxLength: 16384 },
+                cwd: { type: 'string', description: 'Working directory. Absolute or project-relative. Outside-root requires extra approval (limits.shell.cwd_boundary_strict).' },
+                timeout_ms: { type: 'number', description: 'Override timeout. Capped by limits.shell.timeout_ms_max.' },
+                env: { type: 'object', description: 'Extra env vars to inject on top of the whitelist.' },
+            },
+            required: ['command'],
+        },
+        policy: 'destructive',
+        side_effects: ['filesystem', 'network', 'process'],
+        visible: false,
+        handler_side: 'server',
+    },
+    /* ============================================================
+     * MCP BRIDGE VERBS (alpha.59z.26 F101 slice 2)
+     *
+     * These verbs are conditionally surfaced in the system prompt:
+     * buildManifestStub({ includeMcpVerbs: true }) only includes them
+     * when at least one MCP bridge is discovered (Invariant 1:
+     * Forge without MCP is identical to pre-F101). findVerb() and
+     * validateArgs() still resolve them regardless -- the gate is
+     * only on the prompt-side stub.
+     *
+     * Slice 2 ships discovery + listing. Slice 4 wires the proxy
+     * invocation through nac3_invoke. Slice 3 adds panel UI.
+     * ============================================================ */
+    {
+        id: 'yujin.json.query',
+        role: 'query',
+        action: 'json_query',
+        label: 'Consultar un valor JSON con jq-lite',
+        description: 'Evaluate a jq-lite path query against an inline JSON value. '
+            + 'Supports field access, indexing, splat, slice, bracket '
+            + 'access, and a builtin pipe (length, keys, values, type, '
+            + 'first, last). Use this instead of yujin.shell.exec with '
+            + 'jq for cheap extractions from tool_result objects or '
+            + 'small inline JSON blobs.',
+        schema: {
+            type: 'object',
+            properties: {
+                input: { type: 'object', description: 'JSON value to query (object or array; primitives wrap as {value: ...}).' },
+                query: { type: 'string', description: 'jq-lite path expression.', minLength: 1, maxLength: 500 },
+            },
+            required: ['input', 'query'],
+        },
+        policy: 'unrestricted',
+        side_effects: [],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.json.parse',
+        role: 'query',
+        action: 'json_parse',
+        label: 'Parsear texto JSON',
+        description: 'Parse a JSON string and return the resulting value. Use this '
+            + 'when a previous tool_result returned text instead of a '
+            + 'structured object (e.g. fs.read of a .json file). Returns '
+            + '{ok:true, value:<parsed>} or {ok:false, error:"reason"}.',
+        schema: {
+            type: 'object',
+            properties: {
+                text: { type: 'string', description: 'JSON text to parse.', minLength: 1, maxLength: 1048576 },
+            },
+            required: ['text'],
+        },
+        policy: 'unrestricted',
+        side_effects: [],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.json.stringify',
+        role: 'query',
+        action: 'json_stringify',
+        label: 'Serializar a JSON',
+        description: 'Serialise a value to a JSON string. Defaults to pretty-print '
+            + 'with 2-space indent. Pass compact=true for a single-line '
+            + 'output.',
+        schema: {
+            type: 'object',
+            properties: {
+                value: { type: 'object', description: 'Value to serialise.' },
+                compact: { type: 'boolean', description: 'Default false.' },
+            },
+            required: ['value'],
+        },
+        policy: 'unrestricted',
+        side_effects: [],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.text.diff',
+        role: 'query',
+        action: 'text_diff',
+        label: 'Diff de dos textos en memoria',
+        description: 'Compute a unified-format diff between two text values. Use '
+            + 'this for in-memory comparisons (e.g. proposed file edit vs '
+            + 'current content) without writing to disk. Hard-capped at '
+            + '5000 lines per side.',
+        schema: {
+            type: 'object',
+            properties: {
+                before: { type: 'string', description: 'Original text.', maxLength: 1048576 },
+                after: { type: 'string', description: 'New text.', maxLength: 1048576 },
+                context: { type: 'number', description: 'Default 3 lines of context.' },
+                path_hint: { type: 'string', description: 'Optional path shown in the diff header.', maxLength: 500 },
+            },
+            required: ['before', 'after'],
+        },
+        policy: 'unrestricted',
+        side_effects: [],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.url.parse',
+        role: 'query',
+        action: 'url_parse',
+        label: 'Parsear una URL',
+        description: 'Parse a URL into its components (protocol, host, port, path, '
+            + 'query, hash) and return a structured object. Reuse instead '
+            + 'of asking the user "what is the host?" or running a shell '
+            + 'invocation.',
+        schema: {
+            type: 'object',
+            properties: {
+                url: { type: 'string', description: 'URL to parse.', minLength: 1, maxLength: 4096 },
+            },
+            required: ['url'],
+        },
+        policy: 'unrestricted',
+        side_effects: [],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.env.list',
+        role: 'query',
+        action: 'env_list',
+        label: 'Listar variables de entorno permitidas',
+        description: 'Return the safe whitelisted env vars currently set (NODE_ENV, '
+            + 'YF_*, PATH dirname count). Sensitive variables (API keys, '
+            + 'secrets) are NEVER included. Use to confirm Forge runtime '
+            + 'configuration without exposing credentials.',
+        schema: {
+            type: 'object',
+            properties: {
+                prefix: { type: 'string', description: 'Optional prefix filter (e.g. "YF_").', maxLength: 64 },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: [],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.npm.outdated',
+        role: 'query',
+        action: 'npm_outdated',
+        label: 'Paquetes npm desactualizados',
+        description: 'Run `npm outdated --json` (or pnpm equivalent if pnpm-lock '
+            + 'exists) and return parsed list of packages with current vs '
+            + 'wanted vs latest versions. Read-only.',
+        schema: {
+            type: 'object',
+            properties: {
+                repo_dir: { type: 'string', maxLength: 500 },
+            },
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['filesystem', 'process'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.mcp.list-bridges',
+        role: 'query',
+        action: 'list_bridges',
+        label: 'Listar bridges MCP descubiertos',
+        description: 'Returns the active MCP bridges discovered by the registry '
+            + '(loopback scan, project manifest, file convention, env). '
+            + 'Read-only query. Use when the user asks what MCP servers '
+            + 'are available or which tools can be proxied.',
+        schema: {
+            type: 'object',
+            properties: {},
+            required: [],
+        },
+        policy: 'unrestricted',
+        side_effects: ['none'],
+        visible: true,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.mcp.show-tools',
+        role: 'query',
+        action: 'show_tools',
+        label: 'Listar tools de un bridge MCP especifico',
+        description: 'Returns the tool catalogue of a single bridge by id. Read-'
+            + 'only HTTP GET to the bridges /.well-known/mcp/tools '
+            + 'endpoint. Slice 2 returns a stub list; slice 4 wires the '
+            + 'real proxy.',
+        schema: {
+            type: 'object',
+            properties: {
+                bridge_id: { type: 'string', description: 'Bridge id from list-bridges.', minLength: 1, maxLength: 80 },
+            },
+            required: ['bridge_id'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['network'],
+        visible: true,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.mcp.discover-tools',
+        role: 'query',
+        action: 'discover_tools',
+        label: 'Cargar schemas de tools especificos (lazy)',
+        description: 'Meta-verb: fetch the full schema of one or more MCP-proxied '
+            + 'tools on-demand. The args hint shows tool slugs; this verb '
+            + 'returns their parameter schemas + descriptions. Mirrors the '
+            + 'yujin.nac3.discover-schemas pattern for native NAC-3 verbs.',
+        schema: {
+            type: 'object',
+            properties: {
+                bridge_id: { type: 'string', description: 'Bridge id from list-bridges.', minLength: 1, maxLength: 80 },
+                tool_slugs: { type: 'array', description: 'Array of tool slug strings from the bridges tool list.' },
+            },
+            required: ['bridge_id', 'tool_slugs'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['network'],
+        visible: true,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.mcp.toggle',
+        role: 'action',
+        action: 'toggle_bridge',
+        label: 'Habilitar / deshabilitar un bridge MCP',
+        description: 'Flip the active flag of a bridge. When disabled, its proxied '
+            + 'tools disappear from the manifest stub on the next chat '
+            + 'turn. R8 modal triggers because the change affects what '
+            + 'verbs the brain sees globally for this session.',
+        schema: {
+            type: 'object',
+            properties: {
+                bridge_id: { type: 'string', description: 'Bridge id from list-bridges.', minLength: 1, maxLength: 80 },
+                enabled: { type: 'boolean', description: 'true=enable, false=disable.' },
+            },
+            required: ['bridge_id', 'enabled'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: true,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.mcp.invoke-tool',
+        role: 'action',
+        action: 'invoke_tool',
+        label: 'Invocar una tool proxiada en un MCP bridge',
+        description: 'Slice 4 minimal proxy invocation. Posts {tool_slug, args} '
+            + 'to the bridge endpoint /tools/<tool_slug>/invoke and '
+            + 'returns the bridge response. The brain calls this AFTER '
+            + 'yujin.mcp.show-tools to know which tool_slug to use. '
+            + 'Audit log captures bridge_id + bridge_endpoint + tool_slug '
+            + 'so MCP-proxied invocations are auditable separately from '
+            + 'native NAC-3 dispatch. R8 modal triggers per the tool policy '
+            + '(approval-required if the bridge tagged it destructive).',
+        schema: {
+            type: 'object',
+            properties: {
+                bridge_id: { type: 'string', description: 'Bridge id from list-bridges.', minLength: 1, maxLength: 80 },
+                tool_slug: { type: 'string', description: 'Tool slug from show-tools.', minLength: 1, maxLength: 120 },
+                args: { type: 'object', description: 'Arguments object passed verbatim to the bridge.' },
+            },
+            required: ['bridge_id', 'tool_slug'],
+        },
+        policy: 'approval-required',
+        side_effects: ['network', 'external-api'],
+        visible: true,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.mcp.set-creds',
+        role: 'action',
+        action: 'set_creds',
+        label: 'Configurar credenciales de un bridge MCP',
+        description: 'Store bearer / api key for a bridge in CredentialVault. R8 '
+            + 'modal triggers because the operation persists encrypted '
+            + 'secrets. Slice 2 ships a stub returning "not implemented '
+            + 'yet"; slice 4 wires the actual vault write.',
+        schema: {
+            type: 'object',
+            properties: {
+                bridge_id: { type: 'string', description: 'Bridge id from list-bridges.', minLength: 1, maxLength: 80 },
+                creds_slot: { type: 'string', description: 'CredentialVault slot name (lowercase).', minLength: 1, maxLength: 60 },
+            },
+            required: ['bridge_id', 'creds_slot'],
+        },
+        policy: 'destructive',
+        side_effects: ['filesystem'],
+        visible: true,
+        handler_side: 'server',
+    },
+    /* ============================================================
+     * OFFICE (F106) -- cross-platform Excel + Word read/write
+     * ============================================================ */
+    {
+        id: 'office.excel.read',
+        role: 'query',
+        action: 'read_excel',
+        label: 'Leer una hoja de calculo Excel',
+        description: 'Read a .xlsx / .xls / .csv file into structured rows. '
+            + 'When header_row is true (default) each row is an object '
+            + 'keyed by column header. Optional sheet + range filters.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path.', minLength: 1, maxLength: 500 },
+                sheet: { type: 'string', description: 'Sheet name. Default first sheet.', maxLength: 60 },
+                range: { type: 'string', description: 'Cell range like A1:C20. Default full sheet.', maxLength: 40 },
+                header_row: { type: 'boolean', description: 'Treat row 1 as header. Default true.' },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'office.excel.write',
+        role: 'action',
+        action: 'write_excel',
+        label: 'Escribir una hoja de calculo Excel',
+        description: 'Build a fresh .xlsx / .xls / .csv file from rows. Accepts '
+            + 'rows as array of objects (keys -> headers) or array of '
+            + 'arrays (raw cells). Refuses to overwrite existing files '
+            + 'unless overwrite=true.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path.', minLength: 1, maxLength: 500 },
+                sheet: { type: 'string', description: 'Sheet name. Default Sheet1.', maxLength: 60 },
+                rows: { type: 'array', description: 'Array of objects OR array of arrays. Max 1,000,000 rows.' },
+                overwrite: { type: 'boolean', description: 'Replace existing file. Default false.' },
+            },
+            required: ['path', 'rows'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'office.excel.list-sheets',
+        role: 'query',
+        action: 'list_sheets',
+        label: 'Listar hojas de un Excel',
+        description: 'Enumerate sheet names + row/col counts from a .xlsx / .xls / '
+            + '.csv file without materialising every cell. Use this to '
+            + 'pick the right sheet + range before invoking office.excel.read '
+            + 'on a large workbook.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path.', minLength: 1, maxLength: 500 },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'office.excel.append-sheet',
+        role: 'action',
+        action: 'append_sheet',
+        label: 'Agregar una hoja a un Excel existente',
+        description: 'Append a new sheet to an existing .xlsx / .xls workbook '
+            + 'without touching the other sheets. Use this instead of '
+            + 'office.excel.write when the user wants to ADD a tab to a '
+            + 'workbook (not replace the whole file). if_exists controls '
+            + 'the conflict policy: fail (default), replace, or rename '
+            + '(appends " (2)", " (3)" until unique). CSV not supported.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Existing workbook path (xlsx or xls).', minLength: 1, maxLength: 500 },
+                sheet: { type: 'string', description: 'New sheet name.', minLength: 1, maxLength: 100 },
+                rows: { type: 'array', description: 'Cells. Array of objects (keys = headers) or array of arrays (raw cells).' },
+                if_exists: { type: 'string', enum: ['fail', 'replace', 'rename'], description: 'Conflict policy. Default fail.' },
+            },
+            required: ['path', 'sheet', 'rows'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'office.word.read',
+        role: 'query',
+        action: 'read_word',
+        label: 'Leer un documento Word',
+        description: 'Extract text + heading outline from a .docx file. Uses '
+            + 'mammoth for parsing. Returns text, optional outline of '
+            + 'headings, parse warnings, and byte_size.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path.', minLength: 1, maxLength: 500 },
+                include_outline: { type: 'boolean', description: 'Include heading outline. Default true.' },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'office.word.write',
+        role: 'action',
+        action: 'write_word',
+        label: 'Escribir un documento Word',
+        description: 'Build a minimal .docx file from sections. Each section is '
+            + '{kind:heading|paragraph, level?:1..6, text}. Refuses to '
+            + 'overwrite existing files unless overwrite=true. Only '
+            + '.docx output is supported (the cross-platform path skips '
+            + 'the legacy .doc binary format).',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path (.docx).', minLength: 1, maxLength: 500 },
+                sections: { type: 'array', description: 'Array of {kind, level?, text}. Max 50,000 sections.' },
+                overwrite: { type: 'boolean', description: 'Replace existing file. Default false.' },
+            },
+            required: ['path', 'sections'],
+        },
+        policy: 'approval-required',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'office.pdf.read',
+        role: 'query',
+        action: 'read_pdf',
+        label: 'Leer un PDF',
+        description: 'Extract plain text + per-page outline from a PDF. Uses '
+            + 'pdfjs-dist. Returns {title, text, page_count, outline, '
+            + 'byte_size}. Read cap 32 MB.',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Absolute or project-relative path.', minLength: 1, maxLength: 500 },
+                include_outline: { type: 'boolean', description: 'Include per-page outline. Default true.' },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    {
+        id: 'yujin.fs.stat',
+        role: 'query',
+        action: 'stat',
+        label: 'Stat de un archivo',
+        description: 'Return stat info (exists, is_file, is_dir, size, mtime) '
+            + 'for a project-relative path. Cheap predicate for "does '
+            + 'this file exist before I read it?".',
+        schema: {
+            type: 'object',
+            properties: {
+                path: { type: 'string', description: 'Project-relative path.', minLength: 1, maxLength: 500 },
+            },
+            required: ['path'],
+        },
+        policy: 'project-root-gated',
+        side_effects: ['filesystem'],
+        visible: false,
+        handler_side: 'server',
+    },
+    /* ============================================================
+     * A11Y (F107) -- screen-reader + voice-first hooks
+     * ============================================================ */
+    {
+        id: 'yujin.a11y.announce',
+        role: 'action',
+        action: 'announce',
+        label: 'Anunciar texto al lector de pantalla',
+        description: 'Push text into an ARIA live region so screen readers + the '
+            + 'voice loop notify the user. Politeness defaults to polite. '
+            + 'Set speak=true to also queue TTS. Use for status updates, '
+            + 'errors, async completions.',
+        schema: {
+            type: 'object',
+            properties: {
+                text: { type: 'string', description: 'Announcement text. Max 1000 chars.', minLength: 1, maxLength: 1000 },
+                politeness: { type: 'string', description: 'polite|assertive. Default polite.', maxLength: 10 },
+                speak: { type: 'boolean', description: 'Also speak via TTS. Default false.' },
+                locale: { type: 'string', description: 'BCP47 locale hint. Default user voice config.', maxLength: 35 },
+            },
+            required: ['text'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['dom'],
+        visible: false,
+        handler_side: 'panel',
+    },
+    {
+        id: 'yujin.a11y.focus',
+        role: 'action',
+        action: 'focus',
+        label: 'Mover el foco a un elemento NAC-3',
+        description: 'Move keyboard focus to the element identified by its NAC-3 '
+            + 'slug (data-nac-slug attr). Scrolls into view + announces '
+            + 'by default.',
+        schema: {
+            type: 'object',
+            properties: {
+                slug: { type: 'string', description: 'NAC-3 element slug.', minLength: 1, maxLength: 120 },
+                scroll: { type: 'boolean', description: 'Scroll into view. Default true.' },
+                announce: { type: 'boolean', description: 'Announce focus change. Default true.' },
+            },
+            required: ['slug'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['dom'],
+        visible: false,
+        handler_side: 'panel',
+    },
+    {
+        id: 'yujin.a11y.label',
+        role: 'action',
+        action: 'label',
+        label: 'Etiquetar un elemento para lector de pantalla',
+        description: 'Attach a screen-reader description to the element identified '
+            + 'by its NAC-3 slug. Sets aria-label / aria-describedby + '
+            + 'optional role + shortcut hint.',
+        schema: {
+            type: 'object',
+            properties: {
+                slug: { type: 'string', description: 'NAC-3 element slug.', minLength: 1, maxLength: 120 },
+                description: { type: 'string', description: 'Screen-reader text. Max 500 chars.', minLength: 1, maxLength: 500 },
+                shortcut: { type: 'string', description: 'Optional shortcut hint (e.g. Ctrl+S).', maxLength: 40 },
+                role: { type: 'string', description: 'Optional ARIA role hint.', maxLength: 40 },
+            },
+            required: ['slug', 'description'],
+        },
+        policy: 'unrestricted',
+        side_effects: ['dom'],
+        visible: false,
+        handler_side: 'panel',
+    },
+];
+/* ============================================================
+ * Public API
+ * ============================================================ */
+const BUILT_AT = new Date().toISOString();
+/** Manifest version bumps when the verbs[] list changes. Hash of
+ *  the sorted verb ids -- changes if any verb is added, removed,
+ *  or renamed. Schema-only changes do NOT bump the version (the
+ *  LLM re-reads the full manifest every session anyway). */
+function computeManifestVersion() {
+    const ids = VERBS.map((v) => v.id).slice().sort();
+    let h = 5381;
+    const s = ids.join('|');
+    for (let i = 0; i < s.length; i++) {
+        h = ((h << 5) + h + s.charCodeAt(i)) >>> 0;
+    }
+    return 'v1.' + h.toString(36);
+}
+const MANIFEST_VERSION = computeManifestVersion();
+export function manifest() {
+    return {
+        version: MANIFEST_VERSION,
+        built_at: BUILT_AT,
+        forge_version: FORGE_VERSION,
+        verbs: VERBS.slice(),
+    };
+}
+export function findVerb(verb_id) {
+    for (const v of VERBS)
+        if (v.id === verb_id)
+            return v;
+    return null;
+}
+/** Resolve a deprecated alias (legacy `forge_*` tool name) to
+ *  its current verb. Returns null when the alias is unknown. */
+export function findVerbByAlias(alias) {
+    for (const v of VERBS) {
+        if (v.deprecated_aliases && v.deprecated_aliases.includes(alias)) {
+            return v;
+        }
+    }
+    return null;
+}
+/** Validate args against the verb's schema. Returns null when
+ *  ok, or a short error string when not. Subset of JSON Schema --
+ *  enough to catch the LLM's typical mistakes (missing required,
+ *  wrong type, value out of enum, string too long). */
+export function validateArgs(verb, args) {
+    const argsObj = (args && typeof args === 'object') ? args : {};
+    for (const req of verb.schema.required) {
+        if (!(req in argsObj))
+            return 'missing required arg: ' + req;
+        const v = argsObj[req];
+        if (v === null || v === undefined || v === '') {
+            return 'required arg ' + req + ' is empty';
+        }
+    }
+    for (const [key, val] of Object.entries(argsObj)) {
+        const propSchema = verb.schema.properties[key];
+        if (!propSchema)
+            continue; // permissive on extras
+        const expected = propSchema.type;
+        const actual = Array.isArray(val) ? 'array' : typeof val;
+        if (expected === 'array' && actual !== 'array')
+            return 'arg ' + key + ': expected array, got ' + actual;
+        if (expected !== 'array' && actual !== expected)
+            return 'arg ' + key + ': expected ' + expected + ', got ' + actual;
+        if (expected === 'string' && typeof val === 'string') {
+            if (propSchema.minLength != null && val.length < propSchema.minLength) {
+                return 'arg ' + key + ': too short (min ' + propSchema.minLength + ')';
+            }
+            if (propSchema.maxLength != null && val.length > propSchema.maxLength) {
+                return 'arg ' + key + ': too long (max ' + propSchema.maxLength + ')';
+            }
+            if (propSchema.enum && !propSchema.enum.includes(val)) {
+                return 'arg ' + key + ': value not in enum [' + propSchema.enum.join(', ') + ']';
+            }
+            if (propSchema.pattern && !new RegExp(propSchema.pattern).test(val)) {
+                return 'arg ' + key + ': does not match pattern ' + propSchema.pattern;
+            }
+        }
+    }
+    return null;
+}
+/** Compute up to N verb ids closest to the queried id by
+ *  Levenshtein distance. Used by the dispatcher when a verb is
+ *  not found to give the LLM (and the log) actionable suggestions. */
+export function suggestVerbs(queried, top = 3) {
+    const scored = VERBS.map((v) => ({
+        id: v.id,
+        d: levenshtein(queried.toLowerCase(), v.id.toLowerCase()),
+    }));
+    scored.sort((a, b) => a.d - b.d);
+    return scored.slice(0, top).map((s) => s.id);
+}
+function levenshtein(a, b) {
+    if (a === b)
+        return 0;
+    if (a.length === 0)
+        return b.length;
+    if (b.length === 0)
+        return a.length;
+    const m = a.length, n = b.length;
+    const prev = new Array(n + 1).fill(0);
+    const curr = new Array(n + 1).fill(0);
+    for (let j = 0; j <= n; j++)
+        prev[j] = j;
+    for (let i = 1; i <= m; i++) {
+        curr[0] = i;
+        for (let j = 1; j <= n; j++) {
+            const cost = a.charCodeAt(i - 1) === b.charCodeAt(j - 1) ? 0 : 1;
+            const del = prev[j] + 1;
+            const ins = curr[j - 1] + 1;
+            const sub = prev[j - 1] + cost;
+            curr[j] = del < ins ? (del < sub ? del : sub) : (ins < sub ? ins : sub);
+        }
+        for (let j = 0; j <= n; j++)
+            prev[j] = curr[j];
+    }
+    return prev[n];
+}
+//# sourceMappingURL=internal_manifest.js.map