@nac3/forge-cli 1.24.0 → 1.25.0

package/dist/urazuke/external_audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external_audit.d.ts","sourceRoot":"","sources":["../../src/urazuke/external_audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAoBH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,0BAA0B;IACzC,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,UAAU,EAAE,MAAM,CAAC;CACpB;AA8BD;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAgGrC;AAED;;;8CAG8C;AAC9C,wBAAsB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBnF;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,4DAA4D;IAC5D,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,iEAAiE;IACjE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,KAAK,EAAE,MAAM,CAAC;CACf;AAyBD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAoFrC"}

package/dist/urazuke/external_audit.js

@@ -0,0 +1,309 @@
+/**
+ * EL CAMINO DEL AUDITOR EXTERNO (PND-258, opcion b).
+ *
+ * El peldano 13 pide que la auditoria la haga OTRA sesion, idealmente otro
+ * modelo. Forge ya sabia dos cosas: armar la consigna (`buildAuditTask`) y
+ * lanzar una sub-sesion headless (`yf urazuke audit --spawn`). Lo que faltaba
+ * es el caso que el experimento A/B encontro a la mala: quien tiene el PLAN de
+ * Claude Code y no una clave de API NO PUEDE correr el peldano 13 con un
+ * cerebro Anthropic, aunque lo tenga pagado y corriendo en la misma maquina.
+ *
+ * El hard-codeo que lo impide esta BIEN PENSADO y no se deshace: el hijo se
+ * fuerza al camino HTTP para que su alcance acotado de verbos sea real, y un
+ * subproceso del CLI trae sus propias herramientas y no pasa por nac3_invoke.
+ * Lo que estaba mal era la consecuencia: no habia NINGUN otro camino, asi que
+ * en el experimento esa auditoria hubo que armarla a mano.
+ *
+ * Entonces: el producto prepara la consigna Y EL ESPACIO DE SALIDA, el dueno
+ * lanza la sesion independiente con el cerebro que quiera -- Claude Code con
+ * su Plan, otra marca, una sesion web --, y el producto RECIBE el informe y lo
+ * evalua. Dos funciones, dos comandos, y la consigna en un archivo en vez de
+ * en la pantalla de una terminal.
+ *
+ * LA OPCION (a) QUEDA ESCRITA COMO LA EVOLUCION SIGUIENTE, con su fundamento:
+ * una sub-sesion de SOLO LECTURA podria usar el Plan, porque si el hijo no
+ * puede escribir, la razon para acotarlo por nac3_invoke se debilita mucho --
+ * el alcance ya no lo daria el dispatcher sino la ausencia de permisos de
+ * escritura. No se hace hoy porque cambia el modelo de alcance de las
+ * sub-sesiones, que es una decision de producto propia y merece su terna de
+ * recibos.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { URAZUKE_STEPS } from './catalog.js';
+/** El peldano por defecto: 13, la auditoria periodica. */
+const DEFAULT_STEP = 13;
+/** El minimo del informe cuando el catalogo no lo declara. Un esbozo no es
+ *  una auditoria, y 200 es el default del evaluador de artefactos: el numero
+ *  tiene que ser EL MISMO en las dos puertas o el dueno recibe dos respuestas
+ *  distintas sobre el mismo archivo. */
+const MIN_REPORT_BYTES_DEFAULT = 200;
+/** El respaldo de la regla de autoria, si el catalogo no la declarara. Es la
+ *  MISMA expresion que el peldano 13 lleva en su artefacto; vive aca solo para
+ *  que la funcion no se quede sin regla, nunca para reemplazarla. */
+const AUTHOR_LINE_FALLBACK = '^\\s*\\**\\s*auditor\\s*\\**\\s*:';
+function today() {
+    return new Date().toISOString().slice(0, 10);
+}
+function toPosix(p) {
+    return p.split(path.sep).join('/');
+}
+/** La regla que Forge VA A APLICAR sobre el informe, leida del catalogo y no
+ *  copiada: si manana el peldano exige otra cosa, la consigna lo dice sola.
+ *  Esto es lo que evita que la consigna y el evaluador se desincronicen -- el
+ *  defecto que este lote vio cuatro veces en cuatro lugares distintos. */
+function auditArtifactRule(step) {
+    const def = URAZUKE_STEPS.find((s) => s.num === step);
+    const art = def?.artifacts?.find((a) => /AUDIT/i.test(a.path)) ?? def?.artifacts?.[0];
+    return {
+        glob: art?.path ?? 'docs/AUDIT_*.md',
+        should: [...(art?.should_contain ?? [])],
+        must: [...(art?.must_contain ?? [])],
+        ...(art?.fresh_days !== undefined ? { fresh_days: art.fresh_days } : {}),
+        min_bytes: art?.min_bytes ?? MIN_REPORT_BYTES_DEFAULT,
+        verify: [...(def?.verify ?? [])],
+    };
+}
+/**
+ * Prepara la consigna y el espacio de salida. No lanza nada: lanzar es del
+ * dueno, que es justamente el punto de este camino.
+ */
+export async function prepareExternalAudit(input) {
+    const step = input.step ?? DEFAULT_STEP;
+    const root = input.projectRoot;
+    const date = today();
+    const rule = auditArtifactRule(step);
+    const reportPath = path.join(root, 'docs', 'AUDIT_' + date + '.md');
+    const reportRel = toPosix(path.relative(root, reportPath));
+    /* El espacio de salida existe ANTES de que el auditor arranque: una consigna
+     * que manda escribir en un directorio que no esta hace que la sesion gaste
+     * su primer turno creandolo, o que falle al final con todo el trabajo hecho
+     * (paso en el experimento: un pase murio justo al ir a escribir y se
+     * perdieron 400 mil tokens ya verificados). */
+    await fs.mkdir(path.dirname(reportPath), { recursive: true });
+    /* La consigna NO se escribe en docs/: el peldano 13 busca docs/AUDIT_*.md y
+     * un brief ahi adentro se haria pasar por el informe. Un falso verde por el
+     * nombre de un archivo es exactamente la clase de cero que este lote vino a
+     * sacar. */
+    const briefDir = path.join(root, '.forge', 'urazuke');
+    await fs.mkdir(briefDir, { recursive: true });
+    const briefPath = path.join(briefDir, 'audit-brief-' + date + '.md');
+    /* La consigna sale de buildAuditTask, que es la que ya usa
+     * `yf urazuke audit`. Un segundo texto de auditoria seria una segunda
+     * fuente de verdad sobre lo mismo. */
+    const { buildAuditTask } = await import('./retro.js');
+    const task = await buildAuditTask(root);
+    const lines = [];
+    lines.push('# Consigna de auditoria externa -- peldano ' + step);
+    lines.push('');
+    lines.push('Proyecto: ' + input.slug);
+    lines.push('Raiz: ' + root);
+    lines.push('Preparada: ' + date);
+    lines.push('');
+    lines.push('## Como se usa');
+    lines.push('');
+    lines.push('Esta consigna es para una sesion INDEPENDIENTE, con el cerebro que vos');
+    lines.push('quieras: Claude Code con tu Plan, otra marca, una sesion web. No hace');
+    lines.push('falta una clave de API, y no hace falta que sea una sub-sesion de Forge.');
+    lines.push('El peldano pide una sesion distinta de la que construye; de que');
+    lines.push('proveedor sea es tu decision, no una consecuencia de como esta cableado');
+    lines.push('el producto.');
+    lines.push('');
+    lines.push('Pasos:');
+    lines.push('');
+    lines.push('1. Abri la sesion que elijas, en la raiz del proyecto.');
+    lines.push('2. Pegale el bloque "Consigna" de abajo, tal cual.');
+    lines.push('3. Cuando termine, volve aca y corre:');
+    lines.push('');
+    lines.push('       yf urazuke audit-receive --project ' + input.slug);
+    lines.push('');
+    lines.push('   Forge lee el informe, verifica lo que se puede verificar, y te dice');
+    lines.push('   que falta antes de que el peldano lo acepte.');
+    lines.push('');
+    lines.push('## Donde va el informe');
+    lines.push('');
+    lines.push('    ' + reportRel);
+    lines.push('');
+    lines.push('Esa ruta no es decorativa: el peldano ' + step + ' busca `' + rule.glob + '`'
+        + (rule.fresh_days ? ' y exige que el mas nuevo tenga menos de ' + rule.fresh_days + ' dias' : '')
+        + '.');
+    lines.push('');
+    lines.push('## Lo que Forge va a verificar del informe');
+    lines.push('');
+    lines.push('- Que exista en esa ruta y que no sea un esbozo (minimo '
+        + rule.min_bytes + ' bytes).');
+    lines.push('- Que declare QUIEN lo escribio, en una linea propia:');
+    lines.push('');
+    lines.push('      Auditor: <la sesion y el modelo que hizo esta auditoria>');
+    lines.push('');
+    lines.push('  Sin esa linea Forge no puede distinguir una auditoria externa de un');
+    lines.push('  informe escrito por la misma sesion que construyo el codigo (D-040),');
+    lines.push('  y el peldano no lo acepta como evidencia.');
+    lines.push('- Cuantos hallazgos trae y con que prioridad, contando las lineas');
+    lines.push('  marcadas P0 / P1 / P2. Si el informe no usa esas marcas, Forge lo dice');
+    lines.push('  en vez de estimar.');
+    if (rule.verify.length) {
+        lines.push('');
+        lines.push('Y estas son las preguntas que el peldano hace sobre el resultado, que');
+        lines.push('las contesta el dueno y no la herramienta:');
+        lines.push('');
+        for (const q of rule.verify)
+            lines.push('- ' + q);
+    }
+    lines.push('');
+    lines.push('## Consigna');
+    lines.push('');
+    lines.push(task);
+    lines.push('');
+    const consigna = lines.join('\n');
+    await fs.writeFile(briefPath, consigna, 'utf8');
+    return { brief_path: briefPath, report_path: reportPath, consigna, report_rel: reportRel };
+}
+/** El informe de auditoria MAS NUEVO del proyecto, o null si no hay ninguno.
+ *  El peldano busca por glob y se queda con el mas reciente; esta funcion
+ *  resuelve lo mismo para que `audit-receive` sin argumentos lea el archivo
+ *  que el evaluador va a mirar, y no otro. */
+export async function newestAuditReport(projectRoot) {
+    const dir = path.join(projectRoot, 'docs');
+    let names = [];
+    try {
+        names = (await fs.readdir(dir)).filter((n) => /^AUDIT_.*\.md$/i.test(n));
+    }
+    catch {
+        return null;
+    }
+    if (!names.length)
+        return null;
+    const stamped = [];
+    for (const n of names) {
+        const full = path.join(dir, n);
+        try {
+            const st = await fs.stat(full);
+            stamped.push({ p: full, at: st.mtimeMs });
+        }
+        catch { /* desaparecio entre el readdir y el stat */ }
+    }
+    if (!stamped.length)
+        return null;
+    stamped.sort((a, b) => b.at - a.at);
+    return stamped[0].p;
+}
+/** Cuantos hallazgos trae y con que prioridad. Cuenta por LINEA con una marca
+ *  de prioridad, que es la forma que la consigna pide; no intenta entender
+ *  prosa. Lo que no se puede contar con certeza se informa como cero Y SE
+ *  DICE, en vez de estimarse: un numero inventado sobre una auditoria es peor
+ *  que no tener el numero. */
+function countFindings(body) {
+    const by = { p0: 0, p1: 0, p2: 0 };
+    let findings = 0;
+    for (const raw of body.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line)
+            continue;
+        /* Un titulo de seccion ("## Hallazgos P0") no es un hallazgo. */
+        if (/^#{1,6}\s/.test(line))
+            continue;
+        const m = /\bP([012])\b/.exec(line);
+        if (!m)
+            continue;
+        findings += 1;
+        if (m[1] === '0')
+            by.p0 += 1;
+        else if (m[1] === '1')
+            by.p1 += 1;
+        else
+            by.p2 += 1;
+    }
+    return { findings, by };
+}
+/**
+ * Recibe el informe del auditor externo y lo evalua con lo que se puede
+ * verificar mecanicamente. Lo que no se puede verificar queda como aviso CON
+ * SU NOMBRE: un informe admisible no significa que la auditoria sea buena,
+ * significa que sirve como evidencia del peldano. Decir mas que eso seria
+ * exactamente el cero que este lote vino a sacar.
+ */
+export async function receiveExternalAudit(input) {
+    const missing = [];
+    const warnings = [];
+    const rel = toPosix(path.relative(input.projectRoot, input.report_path)) || input.report_path;
+    let body = '';
+    try {
+        body = await fs.readFile(input.report_path, 'utf8');
+    }
+    catch {
+        return {
+            ok: false, auditor: null,
+            missing: ['el informe no esta en ' + rel + ': la sesion de auditoria no lo escribio,'
+                    + ' o lo dejo en otra ruta'],
+            warnings: [], findings: 0, by_priority: { p0: 0, p1: 0, p2: 0 }, bytes: 0,
+        };
+    }
+    const bytes = Buffer.byteLength(body, 'utf8');
+    const rule = auditArtifactRule(DEFAULT_STEP);
+    /* LA LINEA DE AUTORIA, con la MISMA expresion que el evaluador del peldano.
+     * Si aca se aceptara algo que el evaluador despues rechaza, el dueno tendria
+     * dos respuestas distintas sobre el mismo archivo -- que es el defecto de
+     * familia de este lote entero. */
+    /* POR LINEA, y no sobre el cuerpo entero. La expresion del catalogo lleva
+     * `\\s*` despues del `^`, y `\\s` incluye el salto de linea: aplicada al cuerpo
+     * con 'm' engancha en la linea VACIA anterior y se come el salto, asi que
+     * extraer 'la linea del match' devolvia la vacia. Escanear linea por linea
+     * es ademas lo que 'una linea propia' quiere decir. */
+    let auditor = null;
+    const sources = (rule.should.length ? rule.should : [AUTHOR_LINE_FALLBACK])
+        .map((src) => new RegExp(src, 'i'));
+    for (const raw of body.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line)
+            continue;
+        if (!sources.some((re) => re.test(line)))
+            continue;
+        auditor = line;
+        break;
+    }
+    if (!auditor) {
+        missing.push('el informe no dice QUIEN lo escribio. Falta una linea propia'
+            + ' "Auditor: <la sesion y el modelo>" -- sin eso no se puede distinguir una auditoria'
+            + ' externa de un informe de la misma sesion que construyo el codigo (D-040), y el'
+            + ' peldano no lo puede aceptar como evidencia');
+    }
+    if (bytes < rule.min_bytes) {
+        missing.push('el informe tiene ' + bytes + ' bytes y el minimo es ' + rule.min_bytes
+            + ': lo que hay es un esbozo, no una auditoria');
+    }
+    for (const src of rule.must) {
+        if (!new RegExp(src, 'i').test(body)) {
+            missing.push('el informe no contiene lo que el peldano exige (expresion /' + src + '/i)');
+        }
+    }
+    const { findings, by } = countFindings(body);
+    if (findings === 0) {
+        warnings.push('no encontre ninguna linea con prioridad P0 / P1 / P2. O la auditoria no hallo'
+            + ' nada -- que es un resultado, pero conviene que lo diga con esas palabras -- o no uso el'
+            + ' formato que la consigna pide, y entonces no puedo contar sus hallazgos');
+    }
+    if (by.p0 + by.p1 > 0) {
+        warnings.push('hay ' + (by.p0 + by.p1) + ' hallazgo(s) P0/P1: el peldano pide UN pendiente por'
+            + ' cada uno, citando el hallazgo. Eso no lo verifico yo -- lo contesta el dueno');
+    }
+    /* La tercera pregunta del peldano: que la auditoria vuelva a correr una
+     * muestra de los recibos de rojo. No se puede verificar leyendo el informe,
+     * pero SI se puede ver si lo menciona, y decirlo es mas util que callarlo. */
+    if (!/recibo|receipt|red_proof|rojo/i.test(body)) {
+        warnings.push('el informe no menciona los recibos. El peldano pregunta si la auditoria volvio'
+            + ' a correr una muestra de los rojos; si no lo hizo, eso tambien es parte del resultado');
+    }
+    return {
+        ok: missing.length === 0,
+        auditor,
+        missing,
+        warnings,
+        findings,
+        by_priority: by,
+        bytes,
+    };
+}
+//# sourceMappingURL=external_audit.js.map

package/dist/urazuke/external_audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external_audit.js","sourceRoot":"","sources":["../../src/urazuke/external_audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,0DAA0D;AAC1D,MAAM,YAAY,GAAG,EAAE,CAAC;AAExB;;;wCAGwC;AACxC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAErC;;qEAEqE;AACrE,MAAM,oBAAoB,GAAG,mCAAmC,CAAC;AAoBjE,SAAS,KAAK;IACZ,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED;;;0EAG0E;AAC1E,SAAS,iBAAiB,CAAC,IAAY;IAIrC,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,iBAAiB;QACpC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC;QACxC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;QACpC,GAAG,CAAC,GAAG,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,wBAAwB;QACrD,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC;IAC/B,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC;IACrB,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAE3D;;;;mDAI+C;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9D;;;gBAGY;IACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,GAAG,IAAI,GAAG,KAAK,CAAC,CAAC;IAErE;;0CAEsC;IACtC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,6CAA6C,GAAG,IAAI,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACtF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACrE,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACpD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4CAA4C,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,wCAAwC,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG;UACrF,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,2CAA2C,GAAG,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;UAChG,GAAG,CAAC,CAAC;IACT,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,0DAA0D;UACjE,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;IACvF,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;QACpF,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;QACzD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAEhD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AAC7F,CAAC;AAED;;;8CAG8C;AAC9C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC,CAAC,4CAA4C,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AACvB,CAAC;AAsBD;;;;8BAI8B;AAC9B,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACnC,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,iEAAiE;QACjE,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACrC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,QAAQ,IAAI,CAAC,CAAC;QACd,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;aACxB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;;YAC7B,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC;IAE9F,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI;YACxB,OAAO,EAAE,CAAC,wBAAwB,GAAG,GAAG,GAAG,0CAA0C;sBACjF,yBAAyB,CAAC;YAC9B,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;SAC1E,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAE7C;;;sCAGkC;IAClC;;;;2DAIuD;IACvD,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;SACxE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,SAAS;QACnD,OAAO,GAAG,IAAI,CAAC;QACf,MAAM;IACR,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,8DAA8D;cACvE,qFAAqF;cACrF,iFAAiF;cACjF,6CAA6C,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,mBAAmB,GAAG,KAAK,GAAG,wBAAwB,GAAG,IAAI,CAAC,SAAS;cAChF,6CAA6C,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,6DAA6D,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,QAAQ,CAAC,IAAI,CAAC,+EAA+E;cACzF,0FAA0F;cAC1F,yEAAyE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,sDAAsD;cAC3F,+EAA+E,CAAC,CAAC;IACvF,CAAC;IACD;;kFAE8E;IAC9E,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,gFAAgF;cAC1F,uFAAuF,CAAC,CAAC;IAC/F,CAAC;IAED,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;QACxB,OAAO;QACP,OAAO;QACP,QAAQ;QACR,QAAQ;QACR,WAAW,EAAE,EAAE;QACf,KAAK;KACN,CAAC;AACJ,CAAC"}

package/dist/version.d.ts

@@ -2,5 +2,5 @@
  * Yujin Forge CLI version. Kept in sync with package.json by the npm
  * "version" lifecycle (scripts/sync_version.mjs) so the two never drift.
  */
-export declare const VERSION = "1.24.0";
+export declare const VERSION = "1.25.0";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -2,5 +2,5 @@
  * Yujin Forge CLI version. Kept in sync with package.json by the npm
  * "version" lifecycle (scripts/sync_version.mjs) so the two never drift.
  */
-export const VERSION = '1.24.0';
+export const VERSION = '1.25.0';
 //# sourceMappingURL=version.js.map

package/docs/doctrine/session-orchestration.md

@@ -1,86 +1,91 @@
-# Doctrine: session orchestration (yujin.session.*)
-
-When it is optimal, you may launch other `yf chat` instances as
-HEADLESS AGENT sub-sessions to do orthogonal, well-scoped work in
-parallel with this conversation, and collect their results over the
-coordination bridge. This is the `yujin.session.*` verb family.
-
-This doctrine is about WHEN to spawn and how to keep it safe and
-cheap. It is distinct from `agent-orchestrator` (product-side agents
-the generated software dispatches on the user's machine).
-
-## Off by default
-
-The whole capability is gated by `multiagent.enabled` in the limits
-config (Ajustes > Limites), DEFAULT OFF. While off, the
-`yujin.session.*` verbs are hidden from the manifest, this doctrine is
-not injected, the system prompt tells you it is OFF, and the handlers
-refuse. So you only see + use these verbs when the user has explicitly
-turned multi-agent on. If the user asks for parallel sub-sessions while
-it is off, tell them to enable it in Ajustes > Limites.
-
-## The verbs
-
-- `yujin.session.spawn { task, project_root?, budget_tokens?, label? }`
-  -- launch a sub-session for one self-contained task. Returns a
-  handle immediately (NON-blocking). The user approves each spawn
-  (it spends BYOK tokens autonomously).
-- `yujin.session.collect { handle?, wait_ms? }` -- read the results
-  sub-sessions have published. `wait_ms` blocks up to that long for
-  at least one result; default 0 = return whatever has arrived.
-- `yujin.session.list` -- what you have spawned + whether each is
-  still alive.
-- `yujin.session.stop { handle }` -- terminate one.
-
-## Spawn ONLY when it pays off
-
-A sub-session boots a whole headless server and spends tokens, so the
-overhead must be justified. Spawn when ALL of these hold:
-
-1. **Orthogonal** -- the subtask is independent of the work you are
-   doing right now; it does not need the live conversation context.
-   (The child gets ONLY the `task` string you write -- be specific.)
-2. **Parallelizable** -- it can run while you keep working, and you
-   genuinely benefit from not blocking on it (e.g. a wide read /
-   research / analysis sweep over a different subsystem).
-3. **No write collision** -- it will not edit the same files you are
-   editing. If both might write, scope them to different paths or do
-   it yourself.
-4. **Fits a budget** -- set `budget_tokens` to bound the spend.
-
-Do NOT spawn for:
-
-- Trivial tasks (a single read, a one-line answer) -- the overhead
-  costs more than doing it inline.
-- Anything that needs the user's live judgement or the chat history.
-- Work you could do with one of your own verbs in this turn.
-
-Typical good uses: "map how subsystem X wires together and report the
-key files + entry points", "search the whole repo for every place
-pattern Y appears and summarise", "read these 8 docs and extract the
-constraints". Launch one per independent angle, then `collect`.
-
-## The child's scope (enforced, not advisory)
-
-A sub-session runs with a RESTRICTED verb scope (enforced in
-`nac3_invoke` via `YF_AGENT_MODE`):
-
-- CAN: read / search / write files in its project root, run SAFE
-  shell, query the graph / pendings / reader.
-- CANNOT: `git push` / `git commit`, destructive actions, `fs.move`,
-  re-anchor the project, mutate the workflow / pending / keys, run
-  lifecycle servers, or spawn its OWN sub-sessions (no grandchildren).
-
-So the child is a safe builder/analyst. Anything outward or
-irreversible stays with YOU, the parent, where the user can approve
-it. Have the child RETURN its deliverable; you surface it (pizarron,
-etc.) and you do the push/commit.
-
-## Lifecycle
-
-Sub-sessions are one-shot: a child runs its task to completion (a
-`[SESSION_DONE]` marker), publishes its result, and exits. The full
-result is written to disk; the bridge signal carries a summary + the
-path. Always `collect` what you spawn -- do not leave results
-unread. If a child is no longer useful or is burning budget, `stop`
-it.
+# Doctrine: session orchestration (yujin.session.*)
+
+When it is optimal, you may launch other `yf chat` instances as
+HEADLESS AGENT sub-sessions to do orthogonal, well-scoped work in
+parallel with this conversation, and collect their results over the
+coordination bridge. This is the `yujin.session.*` verb family.
+
+This doctrine is about WHEN to spawn and how to keep it safe and
+cheap. It is distinct from `agent-orchestrator` (product-side agents
+the generated software dispatches on the user's machine).
+
+## Off by default
+
+The whole capability is gated by `multiagent.enabled` in the limits
+config (Ajustes > Limites), DEFAULT OFF. While off, the
+`yujin.session.*` verbs are hidden from the manifest, this doctrine is
+not injected, the system prompt tells you it is OFF, and the handlers
+refuse. So you only see + use these verbs when the user has explicitly
+turned multi-agent on. If the user asks for parallel sub-sessions while
+it is off, tell them to enable it in Ajustes > Limites.
+
+## The verbs
+
+- `yujin.session.spawn { task, project_root?, budget_tokens?, label? }`
+  -- launch a sub-session for one self-contained task. Returns a
+  handle immediately (NON-blocking). The user approves each spawn
+  (it spends BYOK tokens autonomously).
+- `yujin.session.collect { handle?, wait_ms? }` -- read the results
+  sub-sessions have published. `wait_ms` blocks up to that long for
+  at least one result; default 0 = return whatever has arrived.
+- `yujin.session.list` -- what you have spawned, with TWO facts that are
+  not the same one (PND-256): `alive` is whether the process exists
+  (asked of the OS), and `registered` is whether the child already
+  published itself on the coordination bridge. A child can be alive and
+  not yet registered (booting), and a dead child can linger in the
+  roster. Reading one as the other costs either a needless relaunch or
+  an endless wait.
+- `yujin.session.stop { handle }` -- terminate one.
+
+## Spawn ONLY when it pays off
+
+A sub-session boots a whole headless server and spends tokens, so the
+overhead must be justified. Spawn when ALL of these hold:
+
+1. **Orthogonal** -- the subtask is independent of the work you are
+   doing right now; it does not need the live conversation context.
+   (The child gets ONLY the `task` string you write -- be specific.)
+2. **Parallelizable** -- it can run while you keep working, and you
+   genuinely benefit from not blocking on it (e.g. a wide read /
+   research / analysis sweep over a different subsystem).
+3. **No write collision** -- it will not edit the same files you are
+   editing. If both might write, scope them to different paths or do
+   it yourself.
+4. **Fits a budget** -- set `budget_tokens` to bound the spend.
+
+Do NOT spawn for:
+
+- Trivial tasks (a single read, a one-line answer) -- the overhead
+  costs more than doing it inline.
+- Anything that needs the user's live judgement or the chat history.
+- Work you could do with one of your own verbs in this turn.
+
+Typical good uses: "map how subsystem X wires together and report the
+key files + entry points", "search the whole repo for every place
+pattern Y appears and summarise", "read these 8 docs and extract the
+constraints". Launch one per independent angle, then `collect`.
+
+## The child's scope (enforced, not advisory)
+
+A sub-session runs with a RESTRICTED verb scope (enforced in
+`nac3_invoke` via `YF_AGENT_MODE`):
+
+- CAN: read / search / write files in its project root, run SAFE
+  shell, query the graph / pendings / reader.
+- CANNOT: `git push` / `git commit`, destructive actions, `fs.move`,
+  re-anchor the project, mutate the workflow / pending / keys, run
+  lifecycle servers, or spawn its OWN sub-sessions (no grandchildren).
+
+So the child is a safe builder/analyst. Anything outward or
+irreversible stays with YOU, the parent, where the user can approve
+it. Have the child RETURN its deliverable; you surface it (pizarron,
+etc.) and you do the push/commit.
+
+## Lifecycle
+
+Sub-sessions are one-shot: a child runs its task to completion (a
+`[SESSION_DONE]` marker), publishes its result, and exits. The full
+result is written to disk; the bridge signal carries a summary + the
+path. Always `collect` what you spawn -- do not leave results
+unread. If a child is no longer useful or is burning budget, `stop`
+it.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nac3/forge-cli",
-  "version": "1.24.0",
+  "version": "1.25.0",
   "description": "Yujin Forge -- voice-first NAC-3 React development framework. CLI + chat panel + spec ingest + 10-format document reader + voice loop.",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Pablo Kuschnirof <pablo@rpaforce.com>",
@@ -15,6 +15,29 @@
   "exports": {
     ".": "./dist/index.js"
   },
+  "scripts": {
+    "version": "node scripts/sync_version.mjs && git add src/version.ts",
+    "build": "node scripts/clean_dist.mjs && tsc && node scripts/copy_qa_assets.mjs",
+    "dev": "tsx watch src/bin/yf.ts",
+    "typecheck": "tsc --noEmit",
+    "typecheck:all": "pnpm typecheck && pnpm --filter @yujin/hito4-server typecheck && pnpm --filter @yujin/forge-mobile typecheck",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "tsc --noEmit",
+    "yf": "tsx src/bin/yf.ts",
+    "catalog:lint": "node scripts/catalog_lint.mjs",
+    "pairing:check": "node scripts/check_pairing_sync.mjs",
+    "brain-matrix:gate": "node scripts/brain_matrix_gate.mjs",
+    "hito4:lint": "node scripts/hito4_lint_bundle.mjs",
+    "docs:lint": "node scripts/doc_citations_lint.mjs",
+    "ascii:check": "node scripts/ascii_purity.mjs --push --survey",
+    "version:check": "node scripts/version_sync_check.mjs",
+    "battery:freshness": "node scripts/battery_freshness.mjs",
+    "hooks:install": "node scripts/install_hooks.mjs",
+    "publish-alpha-emergency": "node scripts/publish_alpha_emergency.mjs",
+    "prepublishOnly": "pnpm run build && pnpm run typecheck && pnpm run catalog:lint && pnpm run test && pnpm run brain-matrix:gate && pnpm run hito4:lint && node scripts/battery_freshness.mjs",
+    "prepare": "node scripts/install_hooks.mjs"
+  },
   "dependencies": {
     "@anthropic-ai/sdk": "^0.32.1",
     "@aws-sdk/client-ecs": "^3.1053.0",
@@ -52,6 +75,7 @@
     "node": ">=18.17",
     "pnpm": ">=9"
   },
+  "packageManager": "pnpm@11.3.0",
   "files": [
     "dist",
     "templates",
@@ -96,26 +120,5 @@
   "publishConfig": {
     "access": "public",
     "tag": "latest"
-  },
-  "scripts": {
-    "version": "node scripts/sync_version.mjs && git add src/version.ts",
-    "build": "node scripts/clean_dist.mjs && tsc && node scripts/copy_qa_assets.mjs",
-    "dev": "tsx watch src/bin/yf.ts",
-    "typecheck": "tsc --noEmit",
-    "typecheck:all": "pnpm typecheck && pnpm --filter @yujin/hito4-server typecheck && pnpm --filter @yujin/forge-mobile typecheck",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "lint": "tsc --noEmit",
-    "yf": "tsx src/bin/yf.ts",
-    "catalog:lint": "node scripts/catalog_lint.mjs",
-    "pairing:check": "node scripts/check_pairing_sync.mjs",
-    "brain-matrix:gate": "node scripts/brain_matrix_gate.mjs",
-    "hito4:lint": "node scripts/hito4_lint_bundle.mjs",
-    "docs:lint": "node scripts/doc_citations_lint.mjs",
-    "ascii:check": "node scripts/ascii_purity.mjs --push --survey",
-    "version:check": "node scripts/version_sync_check.mjs",
-    "battery:freshness": "node scripts/battery_freshness.mjs",
-    "hooks:install": "node scripts/install_hooks.mjs",
-    "publish-alpha-emergency": "node scripts/publish_alpha_emergency.mjs"
   }
-}
+}