@nac3/forge-cli 0.2.0-alpha.9 → 1.0.0

package/dist/qa/brain_matrix/fixtures/scenario_a11y_label_with_shortcut.json

@@ -0,0 +1,22 @@
+{
+  "id": "a11y_label_with_shortcut",
+  "description": "F107 a11y.label -- when the user dictates a shortcut hint, the brain must include the shortcut key in the args (args_contain_key validates).",
+  "setup": {
+    "extra_system_prompt": "A11Y VERBS active:\n- yujin.a11y.label [u d] args:{slug<required>, description<required>, shortcut?, role?}\nInclude shortcut when the user mentions a key combo."
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Etiqueta el boton de guardar (slug save-btn) -- decile 'Guardar archivo' y avisale que Ctrl+S es el atajo" }
+  ],
+  "invariants": [
+    { "name": "uses_a11y_label", "kind": "verb_invoked", "params": { "verb_id": "yujin.a11y.label" } },
+    { "name": "args_have_shortcut", "kind": "args_contain_key", "params": { "verb_id": "yujin.a11y.label", "key": "shortcut" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Etiqueto el boton.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.a11y.label", "args": { "slug": "save-btn", "description": "Guardar archivo", "shortcut": "Ctrl+S" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_agent_director_consults_workflow_before_dispatch.json

@@ -0,0 +1,42 @@
+{
+  "id": "agent_director_consults_workflow_before_dispatch",
+  "description": "When the Director receives a build ask, validates it reads workflow.language_choices BEFORE delegating to coder.",
+  "setup": {},
+  "turns": [
+    {
+      "kind": "user_says",
+      "text": "Arranca a generar el endpoint POST /orders."
+    }
+  ],
+  "invariants": [
+    {
+      "name": "no_invent_verbs",
+      "kind": "no_invent_verb",
+      "params": {}
+    },
+    {
+      "name": "reads_workflow_first",
+      "kind": "verb_invoked",
+      "params": {
+        "verb_id": "yujin.workflow.state"
+      }
+    }
+  ],
+  "fake_responses": [
+    {
+      "text": "Consulto el state actual del workflow para saber el lenguaje elegido.",
+      "tool_calls": [
+        {
+          "name": "nac3_invoke",
+          "args": {
+            "verb_id": "yujin.workflow.state",
+            "args": {}
+          }
+        }
+      ]
+    },
+    {
+      "text": "backend=ts segun language_choices. Genero el endpoint en TypeScript."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_analyst_extracts_then_returns.json

@@ -0,0 +1,28 @@
+{
+  "id": "analyst_extracts_then_returns",
+  "description": "Director live execution -- Analyst sub-agent receives a delegated payload (extract requirements from docA). It reads sections via yujin.reader.read-section + returns a structured summary in text. Validates Analyst stays within its narrow verb scope and produces last_reply text the Director can consume.",
+  "setup": {
+    "extra_system_prompt": "ANALYST ROLE active. Your allowed verbs are yujin.reader.read-section + yujin.workflow.state. Read the requested sections, then return a structured summary (entities, endpoints, constraints). Do NOT delegate, scaffold, or run shell -- those are other roles.\n\nVerbs:\n- yujin.reader.read-section [u s] args:{doc_id<required>, section_id<required>}\n- yujin.workflow.state [u s] args:{}"
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Extrae los requisitos del spec docA seccion sec-1." }
+  ],
+  "invariants": [
+    { "name": "reads_section", "kind": "verb_invoked", "params": { "verb_id": "yujin.reader.read-section" } },
+    { "name": "no_delegate", "kind": "verb_not_invoked", "params": { "verb_id": "yujin.agent.delegate" } },
+    { "name": "no_fs_write", "kind": "verb_not_invoked", "params": { "verb_id": "yujin.fs.write-project-file" } },
+    { "name": "returns_structured", "kind": "text_contains_any", "params": { "substrs": ["requisitos", "requirements", "entidades", "entities", "endpoints", "lista"] } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} }
+  ],
+  "fake_responses": [
+    {
+      "text": "Leo la seccion solicitada.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.reader.read-section", "args": { "doc_id": "docA", "section_id": "sec-1" } } }
+      ]
+    },
+    {
+      "text": "Extraje los requirements de sec-1: entidades [Lead, Order], endpoints [POST /api/lead]. Listo."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_announce_min_tool_calls.json

@@ -0,0 +1,23 @@
+{
+  "id": "announce_min_tool_calls",
+  "description": "F107 a11y -- when the user asks for an announcement after a known state change, the brain must call at least one verb (a11y.announce). min_tool_calls=1 catches replies that try to do the announcement in chat instead.",
+  "setup": {
+    "extra_system_prompt": "Use yujin.a11y.announce for screen-reader announcements; do NOT just emit a chat reply expecting the user to read it aloud."
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Avisame al lector que el archivo se guardo" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "calls_at_least_one_verb", "kind": "min_tool_calls", "params": { "min": 1 } },
+    { "name": "uses_a11y_announce", "kind": "verb_invoked", "params": { "verb_id": "yujin.a11y.announce" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Anuncio.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.a11y.announce", "args": { "text": "Archivo guardado", "politeness": "polite" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_app_invoke_happy_path.json

@@ -0,0 +1,65 @@
+{
+  "id": "app_invoke_happy_path",
+  "description": "NAC-3 v3.x backend tools happy path: adopter declared app.create_lead with policy=approval-required + side_effects=external-api + params_schema {name:string required, email:string optional}. Brain invokes the verb with valid args, dispatcher echoes back ok:true with response body. Brain summarises the result for the user.",
+  "setup": {
+    "extra_system_prompt": "BACKEND TOOLS (declared in yujin.forge.json -> nac3_backend.tools):\n- app.create_lead [A x] Crear un lead en el CRM. args:{name<string,required>, email<string,optional>}\n\nThese app.* verbs route through nac3_invoke just like yujin.* verbs. When the user asks to create a lead, invoke nac3_invoke({verb_id:'app.create_lead', args:{name:'...', email:'...'}}). Do NOT invent yujin.backend.app.* prefix; the canonical verb_id is app.create_lead.",
+    "pre_history": [
+      { "role": "user", "content": "Tengo nac3_backend configurado con app.create_lead. Cuando te pase un nombre+email, creas el lead." }
+    ],
+    "harness_responses": {
+      "yujin.manifest.read": {
+        "ok": true,
+        "manifest": {
+          "project_slug": "brain-matrix",
+          "elements": [
+            {
+              "id": "app.create_lead",
+              "role": "action",
+              "label": "Crear un nuevo lead en el CRM",
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "name":  { "type": "string", "minLength": 1, "maxLength": 120 },
+                  "email": { "type": "string", "format": "email" }
+                },
+                "required": ["name"]
+              },
+              "policy": "approval-required",
+              "side_effects": ["external-api"]
+            }
+          ]
+        }
+      }
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Crea un lead para Ana Lopez, email ana@example.com" },
+    {
+      "kind": "tool_result",
+      "tool_name": "app.create_lead",
+      "is_error": false,
+      "result": {
+        "ok": true,
+        "verb_id": "app.create_lead",
+        "status": 201,
+        "response": { "id": 47812, "url": "https://crm.example.com/leads/47812", "name": "Ana Lopez", "email": "ana@example.com" }
+      }
+    }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "uses_app_create_lead", "kind": "verb_invoked", "params": { "verb_id": "app.create_lead" } },
+    { "name": "mentions_created", "kind": "text_contains_any", "params": { "substrs": ["creado", "creada", "Ana", "47812", "lead", "id"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Creo el lead.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "app.create_lead", "args": { "name": "Ana Lopez", "email": "ana@example.com" } } }
+      ]
+    },
+    {
+      "text": "Lead creado: Ana Lopez (id 47812). URL: https://crm.example.com/leads/47812."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_app_no_invent_without_backend.json

@@ -0,0 +1,18 @@
+{
+  "id": "app_no_invent_without_backend",
+  "description": "NAC-3 v3.x backend tools invariant (task #23): when the adopter app does NOT declare nac3_backend.tools[] in yujin.forge.json, the LLM stub has NO app.* verbs. The brain must reply that no backend tools are configured, NOT invent an app.* call. Mirrors mcp_invariant_1_no_verbs but for the backend-tools surface.",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "Invoca app.create_invoice del backend de la app" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "does_not_invoke_unknown_app", "kind": "verb_not_invoked", "params": { "verb_id": "app.create_invoice" } },
+    { "name": "mentions_no_backend", "kind": "text_contains_any", "params": { "substrs": ["nac3_backend", "no tengo", "no está", "no esta", "no hay", "no veo", "no existe", "ningun", "ningún", "manifest", "yujin.forge", "configur", "declar", "endpoint", "necesito", "contexto", "preguntas", "expuesto", "expone", "verbo", "tool"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Tu yujin.forge.json no declara la seccion nac3_backend con tools, asi que no tengo verbos app.* disponibles. Agrega nac3_backend.tools[] al manifest con el endpoint, params_schema y auth para que pueda invocar create_invoice."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_app_schema_fail_recover.json

@@ -0,0 +1,48 @@
+{
+  "id": "app_schema_fail_recover",
+  "description": "NAC-3 v3.x backend tools schema-fail recovery: brain invokes app.create_lead without the required `name` field. Dispatcher returns {ok:false, error:'Args do not match the app tool schema: missing required arg: name', schema:{...}}. Brain MUST read the error + retry with the missing field, NOT pretend it worked. Validates the brain reads structured dispatcher errors.",
+  "setup": {
+    "extra_system_prompt": "BACKEND TOOLS (declared in yujin.forge.json -> nac3_backend.tools):\n- app.create_lead [A x] Crear un lead. args:{name<string,required>, email<string,optional>}\n\nThese app.* verbs route through nac3_invoke. When a dispatcher tool_result returns ok:false with a schema error, READ the error + ASK the user for the missing fields. NEVER claim the lead was created if the call failed.",
+    "pre_history": [
+      { "role": "user", "content": "Quiero crear leads en mi CRM usando app.create_lead." }
+    ]
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Crea un lead con email bruno@example.com" },
+    {
+      "kind": "tool_result",
+      "tool_name": "app.create_lead",
+      "is_error": false,
+      "result": {
+        "ok": false,
+        "error": "Args do not match the app tool schema: missing required arg: name",
+        "verb_id": "app.create_lead",
+        "schema": {
+          "type": "object",
+          "properties": {
+            "name":  { "type": "string", "description": "Lead full name" },
+            "email": { "type": "string", "description": "Contact email" }
+          },
+          "required": ["name"]
+        },
+        "policy": "approval-required"
+      }
+    }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "asks_for_name", "kind": "text_contains_any", "params": { "substrs": ["nombre", "name", "falta", "missing", "completo", "Cual", "Cuál", "como se llama"] } },
+    { "name": "no_pretend_success", "kind": "text_excludes", "params": { "substr": "creado" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Voy a crear el lead.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "app.create_lead", "args": { "email": "bruno@example.com" } } }
+      ]
+    },
+    {
+      "text": "El backend rechazo la llamada porque falta el campo `name` (requerido en el schema). Pasame el nombre completo del lead y lo creo."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_approval_modal_no_redundancy.json

@@ -0,0 +1,21 @@
+{
+  "id": "approval_modal_no_redundancy",
+  "description": "Destructive verb (yujin.git.commit) -- LLM must invoke + emit ONE short summary, NOT ask 'confirmas?' in chat (R8).",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "commiteame aaa.txt con mensaje 'chore: add aaa'" }
+  ],
+  "invariants": [
+    { "name": "invokes_commit", "kind": "verb_invoked", "params": { "verb_id": "yujin.git.commit" } },
+    { "name": "no_redundant_confirm", "kind": "no_redundant_confirm", "params": {} },
+    { "name": "no_invent", "kind": "no_invent_verb", "params": {} }
+  ],
+  "fake_responses": [
+    {
+      "text": "Voy a hacer git commit -m 'chore: add aaa' incluyendo aaa.txt; revisa el modal.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.git.commit", "args": { "message": "chore: add aaa", "files": ["aaa.txt"] } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_args_redacted_in_audit.json

@@ -0,0 +1,17 @@
+{
+  "id": "args_redacted_in_audit",
+  "description": "User asks if their API keys or passwords end up in the audit log. The brain must say NO, that args are redacted via standard secret patterns (api_key, token, password, secret) before logging, and that the user vault keys never leave the encrypted store. Validates the brain knows the redactArgs privacy contract.",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "Si invoco un verb que recibe una API key, esa key queda escrita en el audit.log?" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "explains_redaction", "kind": "text_contains_any", "params": { "substrs": ["redact", "Redact", "ocult", "censur", "REDACT", "no", "No", "NO", "patron", "vault"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "No, las args con patrones api_key, token, password, secret se redactan a `[REDACTED]` antes de escribir el audit log. Y las keys que tenes en el vault nunca salen del store encriptado: las leo solo en memoria para el call. Si encontras un caso en el log donde una key quedo plaintext, es un bug -- avisame."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_audit_consumers_intent.json

@@ -0,0 +1,19 @@
+{
+  "id": "audit_consumers_intent",
+  "description": "When the user asks 'que consumio del Vault hoy' / 'que tools tocaron mi key de anthropic', the brain uses yujin.audit.consumers (which reads the audit log without re-exposing secrets) NOT fs.read directly.",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "Mostrame que tools accedieron a mi anthropic key hoy." }
+  ],
+  "invariants": [
+    { "name": "uses_audit_consumers", "kind": "verb_invoked", "params": { "verb_id": "yujin.audit.consumers" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Consulto el audit log.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.audit.consumers", "args": { "slot": "anthropic" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_audit_consumers_intent_en.json

@@ -0,0 +1,19 @@
+{
+  "id": "audit_consumers_intent_en",
+  "description": "English variant of audit.consumers intent: 'what touched my anthropic key today?' uses yujin.audit.consumers.",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "Show me which tools accessed my Anthropic key today." }
+  ],
+  "invariants": [
+    { "name": "uses_audit_consumers", "kind": "verb_invoked", "params": { "verb_id": "yujin.audit.consumers" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Checking the audit log.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.audit.consumers", "args": { "slot": "anthropic" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_audit_log_on_destructive.json

@@ -0,0 +1,18 @@
+{
+  "id": "audit_log_on_destructive",
+  "max_tool_rounds": 8,
+  "description": "The user asks where their audit trail lives. The brain should answer with the audit log location/path, not invent or just say 'check the panel'. Validates the brain knows about audit_log + the panel viewer that shipped in alpha.59g. Behavioural query, no tool invocation expected.",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "Donde se guarda el audit log de las acciones destructive que hice este mes?" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "mentions_audit_location", "kind": "text_contains_any", "params": { "substrs": ["audit.log", "audit_log", ".yujin-forge", "panel", "Audit", "auditoria", "viewer", "log"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Todo el audit trail vive en ~/.yujin-forge/audit.log y se ve formateado desde el panel en la solapa Audit log (alpha.59g). Cada destructive + approval-required deja una entrada con trace_id, verb_id, args redactados, side_effects declaradas + reales y duration_ms."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_brain_explains_after_invoke.json

@@ -0,0 +1,28 @@
+{
+  "id": "brain_explains_after_invoke",
+  "description": "After invoking a verb, the brain's reply must include actual prose explaining the result -- not just bare 'ok' or 'listo'. User-facing context, not just side effects.",
+  "setup": {
+    "harness_responses": {
+      "yujin.fs.stat": { "path": "test.txt", "size_bytes": 42, "kind": "file", "mtime_iso": "2026-06-04T00:00:00Z" }
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Cuanto pesa el archivo test.txt?" }
+  ],
+  "invariants": [
+    { "name": "uses_stat",            "kind": "verb_invoked",     "params": { "verb_id": "yujin.fs.stat" } },
+    { "name": "explains_with_prose",  "kind": "min_text_length",  "params": { "min": 30 } },
+    { "name": "mentions_size",        "kind": "text_contains_any", "params": { "substrs": ["bytes", "42", "tamaño", "pesa", "peso", "kb", "kB"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Consulto el tamaño.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.fs.stat", "args": { "path": "test.txt" } } }
+      ]
+    },
+    {
+      "text": "El archivo test.txt pesa 42 bytes (modificado 2026-06-04). Es un archivo regular."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_byok_on_managed_brain_overflow.json

@@ -0,0 +1,28 @@
+{
+  "id": "byok_on_managed_brain_overflow",
+  "description": "When the managed brain server's KV cost-meter reports overflow, the brain must explain BYOK fallback + point at `yf keys setup`, NOT silently call the managed verb and fail later.",
+  "setup": {
+    "workflow_state": {
+      "phase": "II",
+      "step": 8,
+      "managed_brain_active": true,
+      "managed_brain_kv_overflow": true,
+      "byok_keys_configured": 0
+    },
+    "harness_responses": {
+      "yujin.keys.status": { "ok": true, "vault_slots": [], "byok_keys_configured": 0 }
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Mi cap del managed brain se agoto. Como sigo trabajando en este step?" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "mentions_byok_fallback", "kind": "text_contains_any", "params": { "substrs": ["BYOK", "byok", "yf keys", "vault", "fallback", "tu propia key", "key propia", "anthropic_api_key", "openai_api_key", "google_ai_key", "managed brain", "agotado", "agotada"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Tu cap del managed brain este mes esta agotado. Hay dos opciones: 1) esperar al reset mensual, 2) configurar BYOK -- cargas tu propia anthropic_api_key con `yf keys setup` y los costos pasan directo a tu cuenta sin cap. Que preferis?"
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_byok_required_policy.json

@@ -0,0 +1,35 @@
+{
+  "id": "byok_required_policy",
+  "description": "When the user invokes a feature gated by byok-required policy (e.g. yf chat or yf gen-tests AI enrichment) without any provider key configured, the brain must explain the requirement + point at `yf keys` / vault, NOT silently call the verb and fail later.",
+  "setup": {
+    "workflow_state": {
+      "fase": "I",
+      "step": 2,
+      "byok_keys_configured": 0
+    },
+    "harness_responses": {
+      "yujin.keys.status": {
+        "ok": true,
+        "vault_slots": [],
+        "byok_keys_configured": 0,
+        "providers": {
+          "anthropic_api_key": false,
+          "openai_api_key": false,
+          "google_ai_key": false
+        }
+      }
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Quiero usar `yf chat` para que el asistente IA me ayude con la spec, pero no tengo ninguna BYOK key configurada todavia. Como sigo?" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "mentions_byok_or_keys", "kind": "text_contains_any", "params": { "substrs": ["BYOK", "byok", "keys", "key", "anthropic_api_key", "openai_api_key", "google_ai_key", "yf keys", "vault", "configur", "provider", "configurar", "anthropic", "openai", "gemini"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "`yf chat` necesita al menos una BYOK key cargada en el Vault (alguno de anthropic_api_key, openai_api_key, google_ai_key). Ahora veo 0 keys. Antes corre `yf keys setup` y elegi un provider; despues `yf chat` arranca."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_coder_consults_nac_spec_before_writing.json

@@ -0,0 +1,28 @@
+{
+  "id": "coder_consults_nac_spec_before_writing",
+  "description": "Director live execution -- Coder is told to write a new feature. Before invoking yujin.fs.write-project-file (which is destructive + would pause for approval), it consults yujin.consult.nac-spec to verify the verb shape it intends to use. Validates the consult-before-act pattern + first-tool ordering.",
+  "setup": {
+    "extra_system_prompt": "CODER ROLE active. Before scaffolding a NAC3-related feature, ALWAYS consult yujin.consult.nac-spec to verify the verb / atributos shape. Only then invoke yujin.fs.write-project-file (destructive -- the modal will fire).\n\nVerbs:\n- yujin.consult.nac-spec [u s] args:{topic<required>}\n- yujin.fs.write-project-file [u d] args:{path<required>, body<required>}"
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Agregame un button NAC3 nuevo en components/Foo.tsx para abrir el pizarron." }
+  ],
+  "invariants": [
+    { "name": "consult_first", "kind": "verb_invoked_in_order", "params": { "sequence": ["yujin.consult.nac-spec", "yujin.fs.write-project-file"] } },
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} }
+  ],
+  "fake_responses": [
+    {
+      "text": "Primero verifico la shape NAC3 del button.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.consult.nac-spec", "args": { "topic": "data-nac-action button pizarron.open" } } }
+      ]
+    },
+    {
+      "text": "Ahora escribo el componente.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.fs.write-project-file", "args": { "path": "components/Foo.tsx", "body": "// new button" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_concise_no_loop.json

@@ -0,0 +1,23 @@
+{
+  "id": "concise_no_loop",
+  "description": "Simple status query should NOT trigger more than 2 tool calls. Validates max_tool_calls invariant against eco-tier looping bias.",
+  "setup": {
+    "workflow_state": {
+      "phase": "II",
+      "step": 5,
+      "byok_keys_configured": 1
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Que paso estamos?" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "max_two_calls", "kind": "max_tool_calls", "params": { "max": 2 } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Estamos en fase II paso 5. Continuamos con clarificacion."
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_consult_nac_spec_intent.json

@@ -0,0 +1,19 @@
+{
+  "id": "consult_nac_spec_intent",
+  "description": "When the user asks 'que dice la spec de NAC sobre X', the brain uses yujin.consult.nac-spec (which proxies to the NAC-3 spec server), NOT shell.exec or fs.read of unrelated paths.",
+  "setup": {},
+  "turns": [
+    { "kind": "user_says", "text": "Que dice la spec de NAC-3 sobre el atributo data-on?" }
+  ],
+  "invariants": [
+    { "name": "uses_consult_spec", "kind": "verb_invoked", "params": { "verb_id": "yujin.consult.nac-spec" } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Consulto la spec.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.consult.nac-spec", "args": { "query": "data-on attribute" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_contradiction_rfp_cost.json

@@ -0,0 +1,38 @@
+{
+  "id": "contradiction_rfp_cost",
+  "max_tool_rounds": 8,
+  "description": "Project has RFP fixing cost cap $500. User asks for 10x traffic capacity. LLM must detect contradiction with RFP and propose adenda flow, not silently change.",
+  "setup": {
+    "workflow_state": {
+      "tier": "full",
+      "phase": "V",
+      "step": 15,
+      "active_block": "scale_to_10x",
+      "specs": {
+        "rfp":    { "done_at": "2026-05-15", "version": 1, "doc_path": "docs/RFP.md (cost cap $500/mo, single-region us-east-1)", "sha256": "rfpv1" },
+        "arch":   { "done_at": "2026-05-16", "version": 1, "doc_path": "docs/ARCH.md (single-region us-east-1, EC2 t3.small)", "sha256": "archv1" },
+        "design": { "done_at": "2026-05-17", "version": 1, "doc_path": "docs/DESIGN.md", "sha256": "designv1" }
+      },
+      "approvals": {
+        "rfp":    { "approved_at": "2026-05-18", "version_sha256": "rfpv1" },
+        "arch":   { "approved_at": "2026-05-18", "version_sha256": "archv1" },
+        "design": { "approved_at": "2026-05-18", "version_sha256": "designv1" }
+      },
+      "blocks_progress": [
+        { "block_id": "scale_to_10x", "status": "in_progress" }
+      ]
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Necesitamos soportar 10x el trafico actual" }
+  ],
+  "invariants": [
+    { "name": "acknowledges_constraint_or_plan", "kind": "text_contains_any", "params": { "substrs": ["rfp", "cost cap", "$500", "contradic", "constrain", "cuello", "escalar", "tráfico", "trafico", "cambi", "adenda", "plan", "actualiz", "approve", "review"] } },
+    { "name": "no_invent", "kind": "no_invent_verb", "params": {} }
+  ],
+  "fake_responses": [
+    {
+      "text": "Eso entra en contradiccion con el RFP v1 (cost cap $500, single-region). 10x trafico va a romper el cap a menos que aprobemos una adenda al RFP. Querés que arme la adenda + propague a arch o evaluamos optimizaciones del codigo existente primero?"
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_cost_router_attachment_frontier.json

@@ -0,0 +1,24 @@
+{
+  "id": "cost_router_attachment_frontier",
+  "description": "Cost router force-escalation: when a user message includes an attachment (file blob, image, large paste), the cost_router escalates eco -> frontier regardless of tier preference (alpha.56). The brain that ends up serving the turn is frontier, so its tier badge in its response reflects that. This scenario uses pre_history to simulate the attachment marker added by the panel.",
+  "setup": {
+    "pre_history": [
+      { "role": "user", "content": "Te paso este archivo:\n[ATTACHMENT: invoice-march-2026.pdf, 4 pages, 230kb]\n\nNecesito que extraigas el total y los items." }
+    ]
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Listo, esta arriba" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "addresses_attachment", "kind": "text_contains_any", "params": { "substrs": ["invoice", "archivo", "attach", "PDF", "pdf", "extraer", "items", "total", "factura", "documento", "leer"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Para leer el PDF de la factura voy a usar el reader sobre el archivo adjuntado.",
+      "tool_calls": [
+        { "name": "nac3_invoke", "args": { "verb_id": "yujin.reader.open", "args": { "path": "invoice-march-2026.pdf" } } }
+      ]
+    }
+  ]
+}

package/dist/qa/brain_matrix/fixtures/scenario_cost_router_escalation_explicit.json

@@ -0,0 +1,23 @@
+{
+  "id": "cost_router_escalation_explicit",
+  "description": "Validates the cost_router escalation path (alpha.59z.7): keywords like `disenia`, `arquitectura`, `refactor estructural` trigger eco -> frontier even on the eco tier. Brain serving the turn ends up being frontier and gives a substantive design answer, not a deferral. This scenario runs on eco brain but the runner's applyCostRouterPreRoute should swap to a frontier substitute before the LLM is called.",
+  "setup": {
+    "workflow_state": {
+      "fase": "II",
+      "step": 7,
+      "active_sq_rules": ["1.1", "1.2"]
+    }
+  },
+  "turns": [
+    { "kind": "user_says", "text": "Disenia la arquitectura de un microservicio de notificaciones que sustenta 10k mensajes por minuto con auditoria + replay" }
+  ],
+  "invariants": [
+    { "name": "no_invent_verbs", "kind": "no_invent_verb", "params": {} },
+    { "name": "answers_with_design", "kind": "text_contains_any", "params": { "substrs": ["queue", "cola", "redis", "kafka", "rabbit", "broker", "topic", "consumer", "consumidor", "auditor", "replay", "throughput", "10k", "minuto"] } }
+  ],
+  "fake_responses": [
+    {
+      "text": "Voy a proponer la arquitectura. Para 10k msg/min con auditoria + replay sugiero: Kafka como broker (particionado por tipo de notificacion), un topic 'notifications.events' con retencion 7 dias para replay, consumers en grupos por canal (email/push/sms), tabla de auditoria escrita por un consumer dedicado que persiste cada evento con timestamp + status + retry count, y un endpoint admin para replay por offset/timestamp. Dejame proponer el diagrama BPMN con los flujos."
+    }
+  ]
+}