@nac3/forge-cli 0.2.0-alpha.8 → 0.2.1-alpha.60

package/dist/core/limits_config.d.ts

@@ -0,0 +1,76 @@
+export type ToolRoundsFamily = 'default' | 'reader_family' | 'search_family' | 'writer_family';
+export interface MaxToolRoundsConfig {
+    default: number;
+    reader_family: number;
+    search_family: number;
+    writer_family: number;
+    /** alpha.59e -- ceiling used when Danger Zone auto-approve
+     *  is ON. Lets the LLM run long chains of verbs without
+     *  intervention when the user has explicitly opted in to
+     *  velocity-over-safety mode. */
+    autonomous: number;
+}
+export interface RequestTimeoutsConfig {
+    managed_proxy: number;
+    byok_anthropic: number;
+    byok_openai: number;
+    byok_gemini: number;
+}
+export interface ShellLimitsConfig {
+    /** Default timeout per shell invocation. */
+    timeout_ms_default: number;
+    /** Hard ceiling -- caller cannot override above this. */
+    timeout_ms_max: number;
+    /** Combined stdout + stderr max bytes; output beyond is
+     *  truncated with a marker. */
+    max_output_bytes: number;
+    /** When true, ANY cwd outside the project root forces an
+     *  approval prompt -- even for safe-bucket commands. Pablo's
+     *  Q2: escape-with-approval. */
+    cwd_boundary_strict: boolean;
+}
+export interface DangerZoneConfig {
+    /** When true, EVERY approval prompt is auto-approved + logged
+     *  with approval_mode='danger_zone_bypass'. Trade-off:
+     *  velocity over safety. */
+    auto_approve_all: boolean;
+}
+export interface LimitsConfig {
+    version: 1;
+    max_tool_rounds: MaxToolRoundsConfig;
+    request_timeout_ms: RequestTimeoutsConfig;
+    classifier_timeout_ms: number;
+    managed_max_tokens_per_turn: number;
+    shell: ShellLimitsConfig;
+    danger_zone: DangerZoneConfig;
+}
+export declare function defaultLimitsConfig(): LimitsConfig;
+/** Read the active config. Cached for ~3 seconds to avoid
+ *  hammering the FS on every router call. Use forceRefresh=true
+ *  in tests / CLI after a setValue. */
+export declare function readLimitsConfig(forceRefresh?: boolean): Promise<LimitsConfig>;
+export declare function writeLimitsConfig(cfg: LimitsConfig): Promise<void>;
+export declare function resetLimitsConfig(): Promise<LimitsConfig>;
+/** Reset the in-memory cache. Tests use this between specs. */
+export declare function _resetLimitsCache(): void;
+export declare function classifyVerbFamily(verbId: string): ToolRoundsFamily;
+/**
+ * Pick the max_tool_rounds limit for a turn based on the verb
+ * family the LLM is using. The family is derived from the
+ * FIRST nac3 verb the LLM emits in this turn -- once decided,
+ * the cap stays for the rest of the turn (no mid-turn shifts).
+ *
+ * Callers track the first verb invoked + pass it here.
+ */
+export declare function getMaxToolRoundsForFamily(cfg: MaxToolRoundsConfig, family: ToolRoundsFamily): number;
+/** All settable field paths in dotted notation, used by `yf
+ *  limits set <field> <value>`. */
+export declare const LIMITS_FIELD_PATHS: readonly string[];
+export declare function isLimitsFieldPath(p: string): boolean;
+export declare const LIMITS_BOOLEAN_FIELD_PATHS: readonly string[];
+export declare function isLimitsBooleanFieldPath(p: string): boolean;
+export declare function setLimitsBooleanField(field: string, value: boolean): Promise<LimitsConfig>;
+/** Apply a single setValue. Returns the updated config. Throws
+ *  on invalid path or non-numeric value. */
+export declare function setLimitsField(field: string, value: number): Promise<LimitsConfig>;
+//# sourceMappingURL=limits_config.d.ts.map

package/dist/core/limits_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits_config.d.ts","sourceRoot":"","sources":["../../src/core/limits_config.ts"],"names":[],"mappings":"AAqDA,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,eAAe,GAAG,eAAe,GAAG,eAAe,CAAC;AAE/F,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB;;;qCAGiC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,iBAAiB;IAChC,4CAA4C;IAC5C,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,cAAc,EAAE,MAAM,CAAC;IACvB;mCAC+B;IAC/B,gBAAgB,EAAE,MAAM,CAAC;IACzB;;oCAEgC;IAChC,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAGD,MAAM,WAAW,gBAAgB;IAC/B;;gCAE4B;IAC5B,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,CAAC,CAAC;IACX,eAAe,EAAE,mBAAmB,CAAC;IACrC,kBAAkB,EAAE,qBAAqB,CAAC;IAC1C,qBAAqB,EAAE,MAAM,CAAC;IAC9B,2BAA2B,EAAE,MAAM,CAAC;IACpC,KAAK,EAAE,iBAAiB,CAAC;IACzB,WAAW,EAAE,gBAAgB,CAAC;CAC/B;AAED,wBAAgB,mBAAmB,IAAI,YAAY,CA4BlD;AA8DD;;uCAEuC;AACvC,wBAAsB,gBAAgB,CAAC,YAAY,UAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,CAalF;AAED,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CASxE;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,YAAY,CAAC,CAI/D;AAED,+DAA+D;AAC/D,wBAAgB,iBAAiB,IAAI,IAAI,CAGxC;AAqBD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAMnE;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,mBAAmB,EACxB,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAOR;AAID;mCACmC;AACnC,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAe/C,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAEpD;AAID,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAGvD,CAAC;AAEF,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAgBhG;AAED;4CAC4C;AAC5C,wBAAsB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAkBxF"}

package/dist/core/limits_config.js

@@ -0,0 +1,297 @@
+/**
+ * limits_config.ts -- runtime limits Pablo (or any operator) can
+ * tune without rebuilding the CLI (alpha.59c).
+ *
+ * Pablo rule: NADA hardcode. Every limit a turn enforces lives
+ * here and the panel + CLI expose it for editing. Defaults are
+ * conservative; the user widens them when they hit a wall (e.g.
+ * reader-heavy turn exhausts the default 5 rounds -> bump the
+ * reader_family cap).
+ *
+ * Storage:
+ *   $YF_CONFIG_DIR/limits.json (or ~/.yujin-forge/limits.json)
+ *
+ * Shape:
+ *   {
+ *     "version": 1,
+ *     "max_tool_rounds": {
+ *       "default":          5,
+ *       "reader_family":   25,
+ *       "search_family":   15,
+ *       "writer_family":   10
+ *     },
+ *     "request_timeout_ms": {
+ *       "managed_proxy":   60000,
+ *       "byok_anthropic":  60000,
+ *       "byok_openai":     60000,
+ *       "byok_gemini":     30000
+ *     },
+ *     "classifier_timeout_ms": 2500,
+ *     "managed_max_tokens_per_turn": 8192
+ *   }
+ *
+ * Verb-family detection: each turn the LLM may invoke verbs
+ * from different families. We look at the FIRST verb the LLM
+ * tries to call and the family it belongs to to pick the cap.
+ * If subsequent verbs are from different families, the cap
+ * stays at whatever the first family suggested -- this avoids
+ * mid-turn cap shifts that would surprise the model.
+ *
+ * Families:
+ *   reader_family : yujin.reader.* + yujin.fs.read-*
+ *                   + yujin.docs.read-*
+ *   search_family : yujin.reader.search + future search verbs
+ *   writer_family : yujin.fs.write-* + yujin.fs.append-*
+ *   default       : everything else (cap = 5 -- short tool
+ *                   loops, chats, single-action verbs)
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+export function defaultLimitsConfig() {
+    return {
+        version: 1,
+        max_tool_rounds: {
+            default: 5,
+            reader_family: 25,
+            search_family: 15,
+            writer_family: 10,
+            autonomous: 50,
+        },
+        request_timeout_ms: {
+            managed_proxy: 60000,
+            byok_anthropic: 60000,
+            byok_openai: 60000,
+            byok_gemini: 30000,
+        },
+        classifier_timeout_ms: 2500,
+        managed_max_tokens_per_turn: 8192,
+        shell: {
+            timeout_ms_default: 30000,
+            timeout_ms_max: 300000,
+            max_output_bytes: 1048576,
+            cwd_boundary_strict: true,
+        },
+        danger_zone: {
+            auto_approve_all: false,
+        },
+    };
+}
+function limitsConfigPath() {
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const base = process.env.YF_CONFIG_DIR || path.join(home, '.yujin-forge');
+    return path.join(base, 'limits.json');
+}
+function clamp(v, min, max, fallback) {
+    if (typeof v !== 'number' || !Number.isFinite(v))
+        return fallback;
+    if (v < min)
+        return min;
+    if (v > max)
+        return max;
+    return Math.floor(v);
+}
+/** Apply per-field validation + clamping when reading from
+ *  disk. Out-of-range values silently snap to safe bounds so a
+ *  fat-fingered edit doesn't brick the CLI. */
+function normaliseLimitsConfig(raw) {
+    const def = defaultLimitsConfig();
+    if (!raw || typeof raw !== 'object')
+        return def;
+    const j = raw;
+    const rounds = j.max_tool_rounds || {};
+    const timeouts = j.request_timeout_ms || {};
+    const shell = j.shell || {};
+    const danger = j.danger_zone || {};
+    return {
+        version: 1,
+        max_tool_rounds: {
+            default: clamp(rounds.default, 1, 100, def.max_tool_rounds.default),
+            reader_family: clamp(rounds.reader_family, 1, 100, def.max_tool_rounds.reader_family),
+            search_family: clamp(rounds.search_family, 1, 100, def.max_tool_rounds.search_family),
+            writer_family: clamp(rounds.writer_family, 1, 100, def.max_tool_rounds.writer_family),
+            autonomous: clamp(rounds.autonomous, 1, 200, def.max_tool_rounds.autonomous),
+        },
+        request_timeout_ms: {
+            managed_proxy: clamp(timeouts.managed_proxy, 1000, 300000, def.request_timeout_ms.managed_proxy),
+            byok_anthropic: clamp(timeouts.byok_anthropic, 1000, 300000, def.request_timeout_ms.byok_anthropic),
+            byok_openai: clamp(timeouts.byok_openai, 1000, 300000, def.request_timeout_ms.byok_openai),
+            byok_gemini: clamp(timeouts.byok_gemini, 1000, 300000, def.request_timeout_ms.byok_gemini),
+        },
+        classifier_timeout_ms: clamp(j.classifier_timeout_ms, 250, 30000, def.classifier_timeout_ms),
+        managed_max_tokens_per_turn: clamp(j.managed_max_tokens_per_turn, 64, 64000, def.managed_max_tokens_per_turn),
+        shell: {
+            timeout_ms_default: clamp(shell.timeout_ms_default, 1000, 600000, def.shell.timeout_ms_default),
+            timeout_ms_max: clamp(shell.timeout_ms_max, 1000, 600000, def.shell.timeout_ms_max),
+            max_output_bytes: clamp(shell.max_output_bytes, 1024, 16 * 1024 * 1024, def.shell.max_output_bytes),
+            cwd_boundary_strict: typeof shell.cwd_boundary_strict === 'boolean'
+                ? shell.cwd_boundary_strict
+                : def.shell.cwd_boundary_strict,
+        },
+        danger_zone: {
+            auto_approve_all: typeof danger.auto_approve_all === 'boolean'
+                ? danger.auto_approve_all
+                : def.danger_zone.auto_approve_all,
+        },
+    };
+}
+let _cache = null;
+let _cacheMTime = 0;
+/** Read the active config. Cached for ~3 seconds to avoid
+ *  hammering the FS on every router call. Use forceRefresh=true
+ *  in tests / CLI after a setValue. */
+export async function readLimitsConfig(forceRefresh = false) {
+    if (!forceRefresh && _cache && Date.now() - _cacheMTime < 3000) {
+        return _cache;
+    }
+    try {
+        const raw = await fs.readFile(limitsConfigPath(), 'utf-8');
+        const j = JSON.parse(raw);
+        _cache = normaliseLimitsConfig(j);
+    }
+    catch {
+        _cache = defaultLimitsConfig();
+    }
+    _cacheMTime = Date.now();
+    return _cache;
+}
+export async function writeLimitsConfig(cfg) {
+    const p = limitsConfigPath();
+    await fs.mkdir(path.dirname(p), { recursive: true });
+    const tmp = p + '.tmp';
+    const normalised = normaliseLimitsConfig(cfg);
+    await fs.writeFile(tmp, JSON.stringify(normalised, null, 2), 'utf-8');
+    await fs.rename(tmp, p);
+    _cache = normalised;
+    _cacheMTime = Date.now();
+}
+export async function resetLimitsConfig() {
+    const def = defaultLimitsConfig();
+    await writeLimitsConfig(def);
+    return def;
+}
+/** Reset the in-memory cache. Tests use this between specs. */
+export function _resetLimitsCache() {
+    _cache = null;
+    _cacheMTime = 0;
+}
+/* ----- Verb family detection ------------------------------- */
+const READER_VERB_PATTERNS = [
+    /^yujin\.reader\.(open|next-block|read-section|recap|bookmark-set|bookmark-jump|list-docs)$/,
+    /^yujin\.fs\.read-/,
+    /^yujin\.docs\.read-/,
+];
+const SEARCH_VERB_PATTERNS = [
+    /^yujin\.reader\.search$/,
+    /^yujin\.search\./,
+    /^yujin\.web\.search/,
+];
+const WRITER_VERB_PATTERNS = [
+    /^yujin\.fs\.write-/,
+    /^yujin\.fs\.append-/,
+];
+export function classifyVerbFamily(verbId) {
+    if (!verbId)
+        return 'default';
+    for (const p of READER_VERB_PATTERNS)
+        if (p.test(verbId))
+            return 'reader_family';
+    for (const p of SEARCH_VERB_PATTERNS)
+        if (p.test(verbId))
+            return 'search_family';
+    for (const p of WRITER_VERB_PATTERNS)
+        if (p.test(verbId))
+            return 'writer_family';
+    return 'default';
+}
+/**
+ * Pick the max_tool_rounds limit for a turn based on the verb
+ * family the LLM is using. The family is derived from the
+ * FIRST nac3 verb the LLM emits in this turn -- once decided,
+ * the cap stays for the rest of the turn (no mid-turn shifts).
+ *
+ * Callers track the first verb invoked + pass it here.
+ */
+export function getMaxToolRoundsForFamily(cfg, family) {
+    switch (family) {
+        case 'reader_family': return cfg.reader_family;
+        case 'search_family': return cfg.search_family;
+        case 'writer_family': return cfg.writer_family;
+        case 'default': return cfg.default;
+    }
+}
+/* ----- Field-path API for CLI setter ----------------------- */
+/** All settable field paths in dotted notation, used by `yf
+ *  limits set <field> <value>`. */
+export const LIMITS_FIELD_PATHS = [
+    'max_tool_rounds.default',
+    'max_tool_rounds.reader_family',
+    'max_tool_rounds.search_family',
+    'max_tool_rounds.writer_family',
+    'max_tool_rounds.autonomous',
+    'request_timeout_ms.managed_proxy',
+    'request_timeout_ms.byok_anthropic',
+    'request_timeout_ms.byok_openai',
+    'request_timeout_ms.byok_gemini',
+    'classifier_timeout_ms',
+    'managed_max_tokens_per_turn',
+    'shell.timeout_ms_default',
+    'shell.timeout_ms_max',
+    'shell.max_output_bytes',
+];
+export function isLimitsFieldPath(p) {
+    return LIMITS_FIELD_PATHS.includes(p);
+}
+/* alpha.59d -- boolean settings live apart so setLimitsField
+ *  can stay numeric-only. */
+export const LIMITS_BOOLEAN_FIELD_PATHS = [
+    'shell.cwd_boundary_strict',
+    'danger_zone.auto_approve_all',
+];
+export function isLimitsBooleanFieldPath(p) {
+    return LIMITS_BOOLEAN_FIELD_PATHS.includes(p);
+}
+export async function setLimitsBooleanField(field, value) {
+    if (!isLimitsBooleanFieldPath(field)) {
+        throw new Error('limits: unknown boolean field path "' + field + '"');
+    }
+    if (typeof value !== 'boolean') {
+        throw new Error('limits: boolean field value must be a boolean');
+    }
+    const cur = await readLimitsConfig(true);
+    const parts = field.split('.');
+    if (parts.length === 2 && parts[0] && parts[1]) {
+        const root = cur[parts[0]];
+        if (!root)
+            throw new Error('limits: parent field missing: ' + parts[0]);
+        root[parts[1]] = value;
+    }
+    await writeLimitsConfig(cur);
+    return cur;
+}
+/** Apply a single setValue. Returns the updated config. Throws
+ *  on invalid path or non-numeric value. */
+export async function setLimitsField(field, value) {
+    if (!isLimitsFieldPath(field)) {
+        throw new Error('limits: unknown field path "' + field + '". Run `yf limits list-fields` to see options.');
+    }
+    if (typeof value !== 'number' || !Number.isFinite(value)) {
+        throw new Error('limits: value must be a finite number, got ' + String(value));
+    }
+    const cur = await readLimitsConfig(true);
+    const parts = field.split('.');
+    if (parts.length === 1 && parts[0]) {
+        cur[parts[0]] = value;
+    }
+    else if (parts.length === 2 && parts[0] && parts[1]) {
+        const root = cur[parts[0]];
+        if (!root)
+            throw new Error('limits: parent field missing: ' + parts[0]);
+        root[parts[1]] = value;
+    }
+    await writeLimitsConfig(cur);
+    return cur;
+}
+//# sourceMappingURL=limits_config.js.map

package/dist/core/limits_config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits_config.js","sourceRoot":"","sources":["../../src/core/limits_config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AAwDzB,MAAM,UAAU,mBAAmB;IACjC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,eAAe,EAAE;YACf,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,EAAE;YACjB,aAAa,EAAE,EAAE;YACjB,aAAa,EAAE,EAAE;YACjB,UAAU,EAAE,EAAE;SACf;QACD,kBAAkB,EAAE;YAClB,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,KAAK;SACnB;QACD,qBAAqB,EAAE,IAAI;QAC3B,2BAA2B,EAAE,IAAI;QACjC,KAAK,EAAE;YACL,kBAAkB,EAAE,KAAK;YACzB,cAAc,EAAM,MAAM;YAC1B,gBAAgB,EAAI,OAAO;YAC3B,mBAAmB,EAAE,IAAI;SAC1B;QACD,WAAW,EAAE;YACX,gBAAgB,EAAE,KAAK;SACxB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,KAAK,CAAC,CAAU,EAAE,GAAW,EAAE,GAAW,EAAE,QAAgB;IACnE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAClE,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IACxB,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,GAAG,CAAC;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AAED;;+CAE+C;AAC/C,SAAS,qBAAqB,CAAC,GAAY;IACzC,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IAChD,MAAM,CAAC,GAAG,GAA4B,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,CAAC,eAAe,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;IACnC,OAAO;QACL,OAAO,EAAE,CAAC;QACV,eAAe,EAAE;YACf,OAAO,EAAS,KAAK,CAAE,MAA8B,CAAC,OAAO,EAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC;YAC1G,aAAa,EAAG,KAAK,CAAE,MAA8B,CAAC,aAAa,EAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC;YAChH,aAAa,EAAG,KAAK,CAAE,MAA8B,CAAC,aAAa,EAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC;YAChH,aAAa,EAAG,KAAK,CAAE,MAA8B,CAAC,aAAa,EAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC;YAChH,UAAU,EAAM,KAAK,CAAE,MAA8B,CAAC,UAAU,EAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,eAAe,CAAC,UAAU,CAAC;SAC9G;QACD,kBAAkB,EAAE;YAClB,aAAa,EAAG,KAAK,CAAE,QAAkC,CAAC,aAAa,EAAG,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,CAAC,aAAa,CAAC;YAC7H,cAAc,EAAE,KAAK,CAAE,QAAkC,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC;YAC9H,WAAW,EAAK,KAAK,CAAE,QAAkC,CAAC,WAAW,EAAK,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC;YAC3H,WAAW,EAAK,KAAK,CAAE,QAAkC,CAAC,WAAW,EAAK,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,kBAAkB,CAAC,WAAW,CAAC;SAC5H;QACD,qBAAqB,EAAQ,KAAK,CAAC,CAAC,CAAC,qBAAqB,EAAQ,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,qBAAqB,CAAC;QACxG,2BAA2B,EAAE,KAAK,CAAC,CAAC,CAAC,2BAA2B,EAAE,EAAE,EAAG,KAAK,EAAE,GAAG,CAAC,2BAA2B,CAAC;QAC9G,KAAK,EAAE;YACL,kBAAkB,EAAE,KAAK,CAAE,KAA2B,CAAC,kBAAkB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC;YACtH,cAAc,EAAM,KAAK,CAAE,KAA2B,CAAC,cAAc,EAAM,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC;YAClH,gBAAgB,EAAI,KAAK,CAAE,KAA2B,CAAC,gBAAgB,EAAI,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC9H,mBAAmB,EAAE,OAAQ,KAA2B,CAAC,mBAAmB,KAAK,SAAS;gBACxF,CAAC,CAAE,KAA2B,CAAC,mBAAmB;gBAClD,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB;SAClC;QACD,WAAW,EAAE;YACX,gBAAgB,EAAE,OAAQ,MAA2B,CAAC,gBAAgB,KAAK,SAAS;gBAClF,CAAC,CAAE,MAA2B,CAAC,gBAAgB;gBAC/C,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,gBAAgB;SACrC;KACF,CAAC;AACJ,CAAC;AAED,IAAI,MAAM,GAAwB,IAAI,CAAC;AACvC,IAAI,WAAW,GAAG,CAAC,CAAC;AAEpB;;uCAEuC;AACvC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,YAAY,GAAG,KAAK;IACzD,IAAI,CAAC,YAAY,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,IAAI,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,GAAG,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACjC,CAAC;IACD,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAiB;IACvD,MAAM,CAAC,GAAG,gBAAgB,EAAE,CAAC;IAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC;IACvB,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,UAAU,CAAC;IACpB,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC3B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,GAAG,GAAG,mBAAmB,EAAE,CAAC;IAClC,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,IAAI,CAAC;IACd,WAAW,GAAG,CAAC,CAAC;AAClB,CAAC;AAED,iEAAiE;AAEjE,MAAM,oBAAoB,GAAsB;IAC9C,4FAA4F;IAC5F,mBAAmB;IACnB,qBAAqB;CACtB,CAAC;AAEF,MAAM,oBAAoB,GAAsB;IAC9C,yBAAyB;IACzB,kBAAkB;IAClB,qBAAqB;CACtB,CAAC;AAEF,MAAM,oBAAoB,GAAsB;IAC9C,oBAAoB;IACpB,qBAAqB;CACtB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,oBAAoB;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,eAAe,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,oBAAoB;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,eAAe,CAAC;IACjF,KAAK,MAAM,CAAC,IAAI,oBAAoB;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,eAAe,CAAC;IACjF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAwB,EACxB,MAAwB;IAExB,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,eAAe,CAAC,CAAC,OAAO,GAAG,CAAC,aAAa,CAAC;QAC/C,KAAK,eAAe,CAAC,CAAC,OAAO,GAAG,CAAC,aAAa,CAAC;QAC/C,KAAK,eAAe,CAAC,CAAC,OAAO,GAAG,CAAC,aAAa,CAAC;QAC/C,KAAK,SAAS,CAAC,CAAO,OAAO,GAAG,CAAC,OAAO,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,iEAAiE;AAEjE;mCACmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAsB;IACnD,yBAAyB;IACzB,+BAA+B;IAC/B,+BAA+B;IAC/B,+BAA+B;IAC/B,4BAA4B;IAC5B,kCAAkC;IAClC,mCAAmC;IACnC,gCAAgC;IAChC,gCAAgC;IAChC,uBAAuB;IACvB,6BAA6B;IAC7B,0BAA0B;IAC1B,sBAAsB;IACtB,wBAAwB;CACzB,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,CAAS;IACzC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxC,CAAC;AAED;6BAC6B;AAC7B,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,2BAA2B;IAC3B,8BAA8B;CAC/B,CAAC;AAEF,MAAM,UAAU,wBAAwB,CAAC,CAAS;IAChD,OAAO,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAa,EAAE,KAAc;IACvE,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAI,GAA0D,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;4CAC4C;AAC5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAa,EAAE,KAAa;IAC/D,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,KAAK,GAAG,gDAAgD,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,GAA0C,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IAChE,CAAC;SAAM,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAI,GAA0D,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/pairing.d.ts

@@ -29,6 +29,7 @@ export interface PairingEnvelope {
 }
 export declare function generatePairingCode(): string;
 export declare function validatePairingCode(code: string): boolean;
+/** Encrypt the payload + return a transportable envelope. */
 export declare function encryptPairing(payload: PairingPayload, code: string): Promise<PairingEnvelope>;
 export declare class PairingDecryptError extends Error {
     readonly kind: 'bad_code' | 'expired' | 'malformed';

package/dist/core/pairing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/core/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAUH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACZ;AA0BD,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAeD,wBAAsB,cAAc,CAClC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GACpC,OAAO,CAAC,eAAe,CAAC,CAa1B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAChB,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW;gBAA1C,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW;CAGvE;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GACtC,OAAO,CAAC,cAAc,CAAC,CA+BzB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAE/D;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,eAAe,CAmB/D"}
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/core/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAeH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;CACZ;AA0BD,wBAAgB,mBAAmB,IAAI,MAAM,CAG5C;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzD;AAOD,6DAA6D;AAC7D,wBAAsB,cAAc,CAClC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GACpC,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED,qBAAa,mBAAoB,SAAQ,KAAK;aAChB,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW;gBAA1C,IAAI,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW;CAGvE;AAED,wBAAsB,cAAc,CAClC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GACtC,OAAO,CAAC,cAAc,CAAC,CAgCzB;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAK/D;AAED,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,MAAM,GAAG,eAAe,CAmB/D"}

package/dist/core/pairing.js

@@ -14,10 +14,14 @@
  * ASCII-only. WebCrypto-only -- runs identically on Node 20+
  * and React Native.
  */
+import { pbkdf2 } from '@noble/hashes/pbkdf2.js';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { gcm } from '@noble/ciphers/aes.js';
+import { base64urlnopad } from '@scure/base';
 const ENC = new TextEncoder();
 const DEC = new TextDecoder();
-const PBKDF2_ITERS = 200_000;
-const KEY_BITS = 256;
+const PBKDF2_ITERS = 100_000; /* PND-090 -- bajado de 200k: el pairing usa un codigo de 6 digitos con TTL 5min + teardown del server a los 3 intentos; 200k congelaba el UI de Hermes ~8s (pbkdf2 sincrono). 100k ~= 4s. CLI + mobile DEBEN coincidir. */
+const KEY_BYTES = 32; /* AES-256 */
 const IV_BYTES = 12;
 const SALT_BYTES = 16;
 function bufToHex(buf) {
@@ -51,23 +55,26 @@ export function generatePairingCode() {
 export function validatePairingCode(code) {
     return typeof code === 'string' && /^\d{6}$/.test(code);
 }
-async function deriveKey(code, salt) {
-    const baseKey = await crypto.subtle.importKey('raw', ENC.encode(code), { name: 'PBKDF2' }, false, ['deriveKey']);
-    return crypto.subtle.deriveKey({ name: 'PBKDF2', salt: salt, iterations: PBKDF2_ITERS, hash: 'SHA-256' }, baseKey, { name: 'AES-GCM', length: KEY_BITS }, false, ['encrypt', 'decrypt']);
+/** PBKDF2-SHA256 -> 32-byte AES key. Pure JS (runs on Hermes). */
+function deriveKey(code, salt) {
+    return pbkdf2(sha256, ENC.encode(code), salt, { c: PBKDF2_ITERS, dkLen: KEY_BYTES });
 }
+/** Encrypt the payload + return a transportable envelope. */
 export async function encryptPairing(payload, code) {
     if (!validatePairingCode(code))
         throw new Error('pairing: invalid code');
     const salt = randomBytes(SALT_BYTES);
     const iv = randomBytes(IV_BYTES);
-    const key = await deriveKey(code, salt);
+    const key = deriveKey(code, salt);
     const plain = ENC.encode(JSON.stringify(payload));
-    const ct = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, plain);
+    /* @noble gcm appends the 16-byte auth tag to the ciphertext --
+     * the same layout WebCrypto AES-GCM produces, so the two interop. */
+    const ct = gcm(key, iv).encrypt(plain);
     return {
         v: 1,
         salt: bufToHex(salt),
         iv: bufToHex(iv),
-        ct: bufToHex(new Uint8Array(ct)),
+        ct: bufToHex(ct),
     };
 }
 export class PairingDecryptError extends Error {
@@ -93,12 +100,13 @@ export async function decryptPairing(envelope, code) {
     catch {
         throw new PairingDecryptError('malformed');
     }
-    const key = await deriveKey(code, salt);
+    const key = deriveKey(code, salt);
     let plain;
     try {
-        plain = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, key, ct);
+        plain = gcm(key, iv).decrypt(ct);
     }
     catch {
+        /* AES-GCM tag verification fails when the code is wrong. */
         throw new PairingDecryptError('bad_code');
     }
     let parsed;
@@ -117,7 +125,10 @@ export async function decryptPairing(envelope, code) {
     return parsed;
 }
 export function envelopeToQrString(env) {
-    return 'yfpair://' + Buffer.from(JSON.stringify(env), 'utf-8').toString('base64url');
+    /* base64url (no pad) via @scure -- portable across Node, browser
+     * and Hermes; matches Node Buffer.toString('base64url') bytes, so
+     * QRs from an older CLI still decode. */
+    return 'yfpair://' + base64urlnopad.encode(ENC.encode(JSON.stringify(env)));
 }
 export function envelopeFromQrString(s) {
     if (!s.startsWith('yfpair://'))
@@ -125,7 +136,7 @@ export function envelopeFromQrString(s) {
     const b64 = s.slice('yfpair://'.length);
     let json;
     try {
-        json = Buffer.from(b64, 'base64url').toString('utf-8');
+        json = DEC.decode(base64urlnopad.decode(b64));
     }
     catch {
         throw new PairingDecryptError('malformed');

package/dist/core/pairing.js.map

@@ -1 +1 @@
-{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../src/core/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,UAAU,GAAG,EAAE,CAAC;AAiBtB,SAAS,QAAQ,CAAC,GAA6B;IAC7C,MAAM,IAAI,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,IAAgB;IACrD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC3C,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAClE,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAoB,EAAE,UAAU,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EACzF,OAAO,EACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EACrC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAuB,EAAE,IAAY;IAErC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IAC5E,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QACpB,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChB,EAAE,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,IAA0C;QACpE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;QADA,SAAI,GAAJ,IAAI,CAAsC;IAEtE,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAyB,EAAE,IAAY;IAEvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,IAAgB,CAAC;IAAC,IAAI,EAAc,CAAC;IAAC,IAAI,EAAc,CAAC;IAC7D,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7B,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,KAAkB,CAAC;IACvB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAmB,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACxE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAoB;IACrD,OAAO,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAA0B,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC"}
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../src/core/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,MAAM,YAAY,GAAG,OAAO,CAAC,CAAC,2NAA2N;AACzP,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC,aAAa;AACnC,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,UAAU,GAAG,EAAE,CAAC;AAiBtB,SAAS,QAAQ,CAAC,GAA6B;IAC7C,MAAM,IAAI,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAChD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,kEAAkE;AAClE,SAAS,SAAS,CAAC,IAAY,EAAE,IAAgB;IAC/C,OAAO,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAuB,EAAE,IAAY;IAErC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD;yEACqE;IACrE,MAAM,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC;QACpB,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChB,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAChB;IAA5B,YAA4B,IAA0C;QACpE,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;QADA,SAAI,GAAJ,IAAI,CAAsC;IAEtE,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAyB,EAAE,IAAY;IAEvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,IAAgB,CAAC;IAAC,IAAI,EAAc,CAAC;IAAC,IAAI,EAAc,CAAC;IAC7D,IAAI,CAAC;QACH,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7B,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,KAAiB,CAAC;IACtB,IAAI,CAAC;QACH,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,4DAA4D;QAC5D,MAAM,IAAI,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAmB,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACxE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAoB;IACrD;;6CAEyC;IACzC,OAAO,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,CAAS;IAC5C,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAA0B,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAyB,CAAC;AACnC,CAAC"}

package/dist/core/pilot_setup.d.ts

@@ -1,9 +1,22 @@
+export declare function detectExistingProject(projectRoot: string): Promise<boolean>;
 export interface PilotSetupState {
     pilot_completed: boolean;
     target_pending: boolean;
     mode_pending: boolean;
 }
-/** Read the current pilot setup state. */
+/** Read the current pilot setup state.
+ *
+ *  Three branches:
+ *  1. `yujin.forge.json` exists -> trust the persisted `pilot_completed`.
+ *  2. No `yujin.forge.json`, but workspace IS an existing project (has
+ *     `package.json`/`Cargo.toml`/etc) -> auto-skip warmup
+ *     (`pilot_completed: true`). The user is opening Forge against a
+ *     real codebase and wants Forge to start by discovering it, not
+ *     by asking target/mode.
+ *  3. No `yujin.forge.json` and workspace is empty / greenfield ->
+ *     trigger the warmup prompt (`pilot_completed: false`). This is
+ *     the `yf new` path.
+ */
 export declare function readPilotState(projectRoot: string): Promise<PilotSetupState>;
 /** Mark Pilot setup as completed (also bumps the persisted
  *  yujin.forge.json with default values if any are missing). */
@@ -11,10 +24,23 @@ export declare function completePilotSetup(projectRoot: string, defaults?: {
     target?: string;
     mode?: string;
 }): Promise<void>;
+export interface OutOfScopeDetection {
+    out_of_scope: boolean;
+    kind: string | null;
+    reason: string;
+}
+/** Decide whether a user's first message looks out-of-scope for the
+ *  warmup. Returns the matching category for telemetry / logging. */
+export declare function detectOutOfScope(userMessage: string): OutOfScopeDetection;
 /** System-prompt addendum that asks the user about target
  *  + mode in plain prose. Injected by buildSystemPrompt when
- *  pilot_completed is false. */
-export declare function welcomePromptSuffix(state: PilotSetupState): string;
+ *  pilot_completed is false.
+ *
+ *  PND-022: callers can pass `firstUserMessage` so the suffix is
+ *  suppressed for out-of-scope first turns (music, poetry, image,
+ *  abstract explanation, casual chat). The shape of the warmup is
+ *  unchanged for in-scope dev turns. */
+export declare function welcomePromptSuffix(state: PilotSetupState, firstUserMessage?: string): string;
 /** Decide whether to mark setup as complete after the first
  *  reply. Heuristic: if the user has answered both questions
  *  OR has skipped them by talking about something else, we

package/dist/core/pilot_setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pilot_setup.d.ts","sourceRoot":"","sources":["../../src/core/pilot_setup.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAG,OAAO,CAAC;IACzB,YAAY,EAAK,OAAO,CAAC;CAC1B;AAED,0CAA0C;AAC1C,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAgBlF;AAED;gEACgE;AAChE,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,OAAO,CAAC,IAAI,CAAC,CAef;AAED;;gCAEgC;AAChC,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAqBlE;AAED;;;;;;2DAM2D;AAC3D,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,MAAM,GAClB;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAAA;CAAE,CAkBrE"}
+{"version":3,"file":"pilot_setup.d.ts","sourceRoot":"","sources":["../../src/core/pilot_setup.ts"],"names":[],"mappings":"AAyDA,wBAAsB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAUjF;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAG,OAAO,CAAC;IACzB,YAAY,EAAK,OAAO,CAAC;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAqBlF;AAED;gEACgE;AAChE,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAO,GAChD,OAAO,CAAC,IAAI,CAAC,CAef;AA8CD,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,OAAO,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;qEACqE;AACrE,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,mBAAmB,CAUzE;AAED;;;;;;;wCAOwC;AACxC,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,eAAe,EACtB,gBAAgB,CAAC,EAAE,MAAM,GACxB,MAAM,CAyBR;AAED;;;;;;2DAM2D;AAC3D,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,eAAe,EACtB,WAAW,EAAE,MAAM,GAClB;IAAE,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAAA;CAAE,CAkBrE"}