@nac3/forge-cli 0.2.0-alpha.59z.121 → 0.2.0-alpha.59z.158

package/dist/qa/brain_matrix/fixtures/scenario_default_design_system_use_card_template.json

@@ -0,0 +1,44 @@
+{
+  "id": "default_design_system_use_card_template",
+  "description": "User asks for a component. Validates Coder fetches the Yujin template instead of inventing CSS.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Necesito una card para mostrar productos."
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "uses_yujin_template",
+      "kind": "verb_invoked",
+      "params": {
+        "verb_id": "yujin.design.get-template"
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Traigo el template Yujin de card.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.design.get-template",
+            "args": {
+              "slug": "card"
+            }
+          }
+        }
+      ]
+    },
+    {
+      "text": "Listo, aca esta el template de yj-card con tokens del Design System."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_director_delegates_to_analyst.json

@@ -0,0 +1,26 @@
+{
+  "id": "director_delegates_to_analyst",
+  "description": "Director live execution -- Director receives a spec and decides to dispatch the Analyst sub-agent via yujin.agent.delegate, NOT a direct nac3 read/write. Validates that the iterative_step + brain understand inter-agent delegation as a first-class verb.",
+  "setup": {
+    "extra_system_prompt": "DIRECTOR ROLE active. You are the orchestrator. Delegate spec extraction to the Analyst sub-agent via yujin.agent.delegate {to_slug: 'analyst', payload, tokens_used}. Do NOT call reader/pizarron verbs directly -- those are Analyst's job.\n\nAvailable verbs:\n- yujin.agent.delegate [u s] args:{to_slug<required>, payload<required>, tokens_used?}"
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Extrae los requisitos del spec docA. Pasalo al equipo." }
+  ],
+  "invariants": [
+    { "name": "delegates_to_analyst", "kind": "verb_invoked", "params": { "verb_id": "yujin.agent.delegate" } },
+    { "name": "no_direct_reader", "kind": "verb_not_invoked", "params": { "verb_id": "yujin.reader.read-section" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} }
+  ],
+  "fake_responses": [
+    {
+      "text": "Delego a Analyst.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.agent.delegate", "args": { "to_slug": "analyst", "payload": "extract spec docA requirements", "tokens_used": 25 } } }
+      ]
+    },
+    {
+      "text": "Analyst returned the plan. Listo."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_director_no_self_delegation.json

@@ -0,0 +1,20 @@
+{
+  "id": "director_no_self_delegation",
+  "description": "Director live execution -- delegations are LATERAL: dispatch to another role's slug (analyst / coder / tester / scaffolder), never to_slug='director'. The bridge ACL would reject a self-loop. Validates the brain answers without invoking yujin.agent.delegate at all when the user's request is something the director itself can handle.",
+  "setup": {
+    "extra_system_prompt": "DIRECTOR ROLE active. Delegations are LATERAL -- you call analyst / coder / tester / scaffolder. NEVER call to_slug='director' (self-loop -- the bridge ACL rejects it). When a task is reasoning-only (no spec extraction, no code generation, no fs writes), handle it yourself without delegating.\n\nVerbs:\n- yujin.agent.delegate [u s] args:{to_slug<required>, payload<required>}"
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Hazme un breakdown de los siguientes 3 pasos en texto, sin tools." }
+  ],
+  "invariants": [
+    { "name": "no_delegate_for_text_only", "kind": "verb_not_invoked", "params": { "verb_id": "yujin.agent.delegate" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "answers_with_steps", "kind": "text_contains_any", "params": { "substrs": ["1", "primero", "step 1", "paso 1", "1)", "1.", "2.", "2)"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Breakdown directo, sin delegar: 1) Parsear spec. 2) Listar entidades. 3) Priorizar slices."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_director_terminal_done_marker.json

@@ -0,0 +1,19 @@
+{
+  "id": "director_terminal_done_marker",
+  "description": "Director live execution -- when the orchestrator finishes a multi-step plan and there is nothing left, the assistant emits a clear terminal marker ('[DONE]' / 'listo' / 'terminado') so the iterative_step's done detector concludes the run. Validates the terminal-marker pathway.",
+  "setup": {
+    "extra_system_prompt": "DIRECTOR ROLE active. When all sub-agents have returned + the plan is closed, emit a clear terminal marker. Acceptable forms: '[DONE]', 'listo.', 'terminado.', 'todo listo.' -- in any locale you have already adopted. Do NOT keep delegating once the goal is met."
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Confirma que el sprint X ya esta cerrado." }
+  ],
+  "invariants": [
+    { "name": "emits_terminal", "kind": "regex_match", "params": { "pattern": "(\\[DONE\\]|\\blisto\\b|\\bterminado\\b|todo listo)" } },
+    { "name": "no_extra_delegates", "kind": "verb_not_invoked", "params": { "verb_id": "yujin.agent.delegate" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Sprint X cerrado. Todos los sub-agentes devolvieron OK. [DONE]"
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_doctrine_discover_default_design_system.json

@@ -0,0 +1,50 @@
+{
+  "id": "doctrine_discover_default_design_system",
+  "description": "Brain is asked about the default design system doctrine. Validates discovery or direct answer.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Cual es el design system por default de Forge?"
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "mentions_yujin_ds",
+      "kind": "text_contains_any",
+      "params": {
+        "substrs": [
+          "Yujin Design System",
+          "Yujin DS",
+          "yujin.design"
+        ]
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Traigo la doctrina de design system.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.doctrine.discover",
+            "args": {
+              "slugs": [
+                "default-design-system"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "text": "El default es Yujin Design System (30 componentes, 258 tokens DTCG, 170 sumi-e). Override via yujin.design.override (R8 modal)."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_doctrine_discover_language_sovereignty.json

@@ -0,0 +1,53 @@
+{
+  "id": "doctrine_discover_language_sovereignty",
+  "description": "Brain is asked about language choice doctrine. Validates discovery via yujin.doctrine.discover OR direct in-prompt answer using the language-sovereignty rule.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Que dice la doctrina sobre eleccion de lenguaje de programacion?"
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "mentions_sovereignty",
+      "kind": "text_contains_any",
+      "params": {
+        "substrs": [
+          "user",
+          "usuario",
+          "pick",
+          "elige",
+          "language",
+          "sovereignty"
+        ]
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Traigo la doctrina de language sovereignty.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.doctrine.discover",
+            "args": {
+              "slugs": [
+                "language-sovereignty"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "text": "Per docs/doctrine/language-sovereignty.md: el user picks the language; el Director suggests but never imposes. Si el lenguaje no es conducente para el componente, Director responde con la tabla."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_doctrine_discover_testing_policy.json

@@ -0,0 +1,55 @@
+{
+  "id": "doctrine_discover_testing_policy",
+  "description": "Brain is asked about TDD policy. Validates discovery or direct answer about TDD-first scope.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Cuando hago TDD primero y cuando codigo primero en Forge?"
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "mentions_tdd_scope",
+      "kind": "text_contains_any",
+      "params": {
+        "substrs": [
+          "TDD",
+          "tests first",
+          "red",
+          "green",
+          "opt-in",
+          "backend",
+          "API",
+          "transformer"
+        ]
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Traigo la doctrina de testing-policy.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.doctrine.discover",
+            "args": {
+              "slugs": [
+                "testing-policy"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "text": "TDD-first es opt-in. Lo uses en backend/API/transformer/financial/integration; code-first en UI/exploratory."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_language_sovereignty_not_conducive_spa_python.json

@@ -0,0 +1,61 @@
+{
+  "id": "language_sovereignty_not_conducive_spa_python",
+  "description": "User requests Python for SPA frontend. Validates Director responds with the table row + DOES NOT switch.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Quiero el frontend SPA en Python."
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "explains_not_conducive",
+      "kind": "text_contains_any",
+      "params": {
+        "substrs": [
+          "no es conducente",
+          "not conducive",
+          "browser",
+          "navegador",
+          "runtime",
+          "TS",
+          "JS"
+        ]
+      }
+    },
+    {
+      "name": "no_silent_switch",
+      "kind": "verb_not_invoked",
+      "params": {
+        "verb_id": "yujin.workflow.set"
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Voy a consultar la doctrina antes de responder.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.doctrine.discover",
+            "args": {
+              "slugs": [
+                "language-sovereignty"
+              ]
+            }
+          }
+        }
+      ]
+    },
+    {
+      "text": "Python no es conducente para un SPA frontend porque no es runtime del navegador. Las opciones validas son: TS, JS, WASM target (Rust, Go). Cual preferis?"
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_language_sovereignty_user_picks_python.json

@@ -0,0 +1,48 @@
+{
+  "id": "language_sovereignty_user_picks_python",
+  "description": "User declares a language preference. Validates Director switches via yujin.workflow.set.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Quiero el backend en Python con FastAPI."
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "persists_choice",
+      "kind": "verb_invoked",
+      "params": {
+        "verb_id": "yujin.workflow.set"
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Listo, backend en Python. Persisto la decision.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.workflow.set",
+            "args": {
+              "path": "language_choices.backend",
+              "value": {
+                "lang": "python",
+                "decided_by": "user"
+              }
+            }
+          }
+        }
+      ]
+    },
+    {
+      "text": "Backend en Python guardado."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_mcp_invoke_destructive_pauses_for_r8.json

@@ -0,0 +1,42 @@
+{
+  "id": "mcp_invoke_destructive_pauses_for_r8",
+  "description": "F101 slice 6 -- the brain invokes a destructive tool from a remote MCP bridge (crm.delete_contact). The dispatcher returns nac3_panel_approval_required envelope (same shape the panel modal subscribes to for native NAC-3 destructive verbs). The brain acknowledges the modal + does NOT retry the invoke in the same turn. Locks the MCP path through the unified R8 destructive-always-confirm gate.",
+  "setup": {
+    "expose_mcp_verbs": true,
+    "extra_system_prompt": "ACTIVE MCP BRIDGES (already discovered in session):\n- bridge crm: enabled, auth_loaded=true, tools include destructive delete_contact (policy=destructive, requires R8).\n\nWhen you invoke a destructive remote tool, the dispatcher fires the same panel R8 modal as native NAC-3 verbs. After the envelope returns nac3_panel_approval_required=true, your turn ENDS -- do NOT retry. The user resolves via the modal."
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Borra el contacto id=42 del CRM" },
+    {
+      "kind": "tool_result",
+      "tool_name": "yujin.mcp.invoke-tool",
+      "is_error": false,
+      "result": {
+        "nac3_panel_approval_required": true,
+        "trace_id": "tr-mcp-7",
+        "verb": "yujin.mcp.invoke-tool",
+        "args": { "bridge_id": "crm", "tool_slug": "delete_contact", "args": { "id": 42 } },
+        "remote_policy": "destructive",
+        "bridge_id": "crm",
+        "tool_slug": "delete_contact"
+      }
+    }
+  ],
+  "invariants": [
+    { "name": "uses_invoke_tool", "kind": "verb_invoked", "params": { "verb_id": "yujin.mcp.invoke-tool" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "acknowledges_modal", "kind": "text_contains_any", "params": { "substrs": ["modal", "approval", "aprobar", "espera", "espero", "pending", "confirmacion", "confirmar"] } },
+    { "name": "no_retry_after_modal", "kind": "max_tool_calls", "params": { "n": 1 } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Tool destructive. Abro el modal R8 antes de borrar.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.mcp.invoke-tool", "args": { "bridge_id": "crm", "tool_slug": "delete_contact", "args": { "id": 42 } } } }
+      ]
+    },
+    {
+      "text": "El modal de approval esta abierto. Espero a que confirmes para ejecutar el borrado."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_mcp_invoke_happy_path_writes_pizarron.json

@@ -0,0 +1,76 @@
+{
+  "id": "mcp_invoke_happy_path_writes_pizarron",
+  "description": "F101 slice 6 -- successful 2-hop happy path that goes one step further: after invoke-tool returns a structured result the brain renders the result in the pizarron via yujin.pizarron.create-tab. Validates that MCP-fetched data uses the same display path as native data (no special-case render).",
+  "setup": {
+    "expose_mcp_verbs": true,
+    "extra_system_prompt": "ACTIVE MCP BRIDGES (already discovered in session):\n- bridge crm: enabled, auth_loaded=true, tools include get_deal.\n\nThe canonical pattern: show-tools -> invoke-tool -> if result is structured + non-trivial, render in pizarron (NOT inline in chat). Inline text reserved for short summaries or confirmations.\n\nVerbs:\n- yujin.mcp.show-tools args:{bridge_id<required>}\n- yujin.mcp.invoke-tool args:{bridge_id<required>, tool_slug<required>, args?}\n- yujin.pizarron.create-tab args:{title<required>, content<required>}"
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Traeme el deal 1234 del CRM y mostralo." },
+    {
+      "kind": "tool_result",
+      "tool_name": "yujin.mcp.show-tools",
+      "is_error": false,
+      "result": {
+        "ok": true,
+        "bridge_id": "crm",
+        "endpoint": "http://localhost:3001",
+        "tools": [
+          { "id": "get_deal", "label": "Get deal by id", "description": "Fetches one deal" }
+        ],
+        "count": 1
+      }
+    },
+    {
+      "kind": "tool_result",
+      "tool_name": "yujin.mcp.invoke-tool",
+      "is_error": false,
+      "result": {
+        "ok": true,
+        "bridge_id": "crm",
+        "tool_slug": "get_deal",
+        "response": {
+          "id": 1234, "name": "ACME Onboarding", "amount": 50000,
+          "stage": "proposal", "owner": "ana@acme.com",
+          "created_at": "2026-05-12", "next_action": "follow up week of 06-10"
+        }
+      }
+    },
+    {
+      "kind": "tool_result",
+      "tool_name": "yujin.pizarron.create-tab",
+      "is_error": false,
+      "result": { "ok": true, "tab_id": "tab-mcp-deal-1234" }
+    }
+  ],
+  "invariants": [
+    { "name": "uses_show_tools", "kind": "verb_invoked", "params": { "verb_id": "yujin.mcp.show-tools" } },
+    { "name": "uses_invoke_tool", "kind": "verb_invoked", "params": { "verb_id": "yujin.mcp.invoke-tool" } },
+    { "name": "renders_pizarron", "kind": "verb_invoked", "params": { "verb_id": "yujin.pizarron.create-tab" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "tools_in_order", "kind": "verb_invoked_in_order", "params": { "sequence": ["yujin.mcp.show-tools", "yujin.mcp.invoke-tool", "yujin.pizarron.create-tab"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Verifico el catalogo de tools del crm.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.mcp.show-tools", "args": { "bridge_id": "crm" } } }
+      ]
+    },
+    {
+      "text": "Pido el deal.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.mcp.invoke-tool", "args": { "bridge_id": "crm", "tool_slug": "get_deal", "args": { "id": 1234 } } } }
+      ]
+    },
+    {
+      "text": "Lo renderizo en el pizarron.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.pizarron.create-tab", "args": { "title": "Deal 1234 ACME Onboarding", "content": "amount $50000 / proposal / owner ana@acme.com / next: follow up week of 06-10" } } }
+      ]
+    },
+    {
+      "text": "Listo, el deal esta en la pestana del pizarron."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_mcp_invoke_network_timeout_graceful.json

@@ -0,0 +1,41 @@
+{
+  "id": "mcp_invoke_network_timeout_graceful",
+  "description": "F101 slice 6 -- invoke-tool returns ok=false bridge_invoke_failed with reason=network_timeout. The brain explains the failure to the user in plain language + does NOT retry blindly + does NOT invent a fallback verb. It surfaces the bridge_id + tool_slug so the user can decide (retry later, switch bridge, etc).",
+  "setup": {
+    "expose_mcp_verbs": true,
+    "extra_system_prompt": "ACTIVE MCP BRIDGES (already discovered in session):\n- bridge crm: enabled, auth_loaded=true, tools include list_contacts.\n\nWhen a remote MCP invoke fails with network_timeout / connection_refused / bridge_unreachable, surface the failure cleanly. NEVER retry more than once -- the user should decide whether to wait, switch bridge, or try a native verb."
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Trae los contactos del CRM" },
+    {
+      "kind": "tool_result",
+      "tool_name": "yujin.mcp.invoke-tool",
+      "is_error": true,
+      "result": {
+        "ok": false,
+        "error_code": "bridge_invoke_failed",
+        "reason": "network_timeout",
+        "bridge_id": "crm",
+        "tool_slug": "list_contacts",
+        "ms_elapsed": 30000
+      }
+    }
+  ],
+  "invariants": [
+    { "name": "uses_invoke_tool", "kind": "verb_invoked", "params": { "verb_id": "yujin.mcp.invoke-tool" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "surfaces_bridge_id", "kind": "text_contains_any", "params": { "substrs": ["crm", "bridge", "timeout", "network", "red", "conexion", "conexión", "respondio", "respondió", "no responde"] } },
+    { "name": "no_blind_retry", "kind": "max_tool_calls", "params": { "n": 1 } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Invoco list_contacts.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.mcp.invoke-tool", "args": { "bridge_id": "crm", "tool_slug": "list_contacts", "args": {} } } }
+      ]
+    },
+    {
+      "text": "El bridge crm no respondio en 30s (network_timeout). No reintento solo. ¿Querés que espere y reintente, o trato con otro bridge?"
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_no_hardcoded_color_use_token.json

@@ -0,0 +1,47 @@
+{
+  "id": "no_hardcoded_color_use_token",
+  "description": "When asked for a color in CSS, brain refuses hardcoded hex + recommends tokens. Anti-reinvent guard.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Hace el boton de comprar de color #3A4DBC."
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "recommends_token",
+      "kind": "text_contains_any",
+      "params": {
+        "substrs": [
+          "--color",
+          "var(--",
+          "token",
+          "yujin.design.tokens"
+        ]
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Mejor uso un token. Consulto los tokens disponibles.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.design.tokens",
+            "args": {}
+          }
+        }
+      ]
+    },
+    {
+      "text": "El indigo de marca es var(--color-accent) (= var(--color-indigo-600) = #2D3A8C). Lo uso en lugar de hardcodear #3A4DBC."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_office_excel_update_cell_picks_right_verb.json

@@ -0,0 +1,26 @@
+{
+  "id": "office_excel_update_cell_picks_right_verb",
+  "description": "F106 closure -- user asks to mutate ONE cell of an existing workbook. The brain picks office.excel.update-cell (preserves rest of file), NOT office.excel.write (which would rewrite the whole workbook from scratch + lose other sheets / formatting). Locks the cost-aware default for single-cell edits.",
+  "setup": {
+    "extra_system_prompt": "OFFICE VERBS active:\n- office.excel.update-cell [u s] args:{path<required>, sheet?, cell<required>, value?}\n- office.excel.write          [u d] args:{path<required>, rows<required>, sheet?, overwrite?}\nWhen the user wants to change ONE cell, use update-cell -- it preserves every other cell + sheet. office.excel.write replaces the entire workbook + is the wrong tool for single-cell edits."
+  },
+  "turns": [
+    { "kind": "user_says", "text": "En el archivo data/q3.xlsx cambia la celda B5 a 500" }
+  ],
+  "invariants": [
+    { "name": "uses_update_cell", "kind": "verb_invoked", "params": { "verb_id": "office.excel.update-cell" } },
+    { "name": "no_full_rewrite", "kind": "verb_not_invoked", "params": { "verb_id": "office.excel.write" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} }
+  ],
+  "fake_responses": [
+    {
+      "text": "Cambio solo esa celda con update-cell -- preservo el resto.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "office.excel.update-cell", "args": { "path": "data/q3.xlsx", "cell": "B5", "value": 500 } } }
+      ]
+    },
+    {
+      "text": "Listo, B5 ahora vale 500."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_scaffolder_destructive_pauses_for_approval.json

@@ -0,0 +1,23 @@
+{
+  "id": "scaffolder_destructive_pauses_for_approval",
+  "description": "Director live execution -- Scaffolder asked to write a project file invokes yujin.fs.write-project-file which the panel intercepts as approval_required. The brain does NOT retry or invent a workaround; the response acknowledges the pending modal and stops. Validates R8 destructive-always-confirm + paused_for_approval status path.",
+  "setup": {
+    "extra_system_prompt": "SCAFFOLDER ROLE active. You write minimal scaffolding files. Verb yujin.fs.write-project-file is policy=destructive: every call triggers a user approval modal. After invoking, your turn ends -- you do NOT call it again until the modal resolves.\n\nVerbs:\n- yujin.fs.write-project-file [u d] args:{path<required>, body<required>}"
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Aplica el slice X: crea src/foo.ts con export const foo = 1." }
+  ],
+  "invariants": [
+    { "name": "writes_file_once", "kind": "verb_invoked", "params": { "verb_id": "yujin.fs.write-project-file" } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "acknowledges_modal", "kind": "text_contains_any", "params": { "substrs": ["modal", "aprobar", "approval", "espera", "espero", "pending", "pausa"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Abro el modal R8. Espero la aprobacion.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.fs.write-project-file", "args": { "path": "src/foo.ts", "body": "export const foo = 1;" } } }
+      ]
+    }
+  ]
+}