@plurnk/plurnk-execs 0.4.43 → 0.4.44

package/.env.defaults

@@ -0,0 +1,12 @@
+# --- @plurnk/plurnk-execs : runtime registration policy (SPEC §3.3) ---
+# Purely subtractive: these only ever REMOVE tags from the registered set — there
+# is no force-enable verb. Unset ⇒ every discovered runtime is registered. This
+# package sets no operative default; the comments below ARE the operator docs.
+
+# Allowlist: register ONLY these tags (comma-separated); every other tag is off.
+# PLURNK_EXECS_ONLY=sh,jq,search
+
+# Per-tag kill-switch (case-insensitive): set any registered tag to 0 to drop it.
+# Absent ⇒ the runtime stays enabled. e.g.:
+# PLURNK_EXECS_PYTHON=0
+# PLURNK_EXECS_BC=0

package/SPEC.md

@@ -218,11 +218,11 @@ Framework surface: **`Policy.isEnabled(tag, env?)`** (one layer, defaults to `pr
 
 ### §3.4 The empty-set notice (the legible no)
 
-When a loop leaves **zero** EXEC runtimes in the §3.2 *Active* bucket, the capability sheet must carry a positive statement — **"No EXEC runtimes are active"** — not silent absence. The grammar still teaches `EXEC` as a valid op (the GBNF permits it); with no availability signal either way, the model reads the bare op mention as *unknown* and confabulates runtimes, burning its strikes on a gate that correctly refuses them (execs#24). The negative line closes that window: a legible *no* where silence invited a guess.
+When a loop leaves **zero** EXEC runtimes in the §3.2 *Active* bucket, the capability sheet must carry a positive statement — **"No EXEC operations permitted"** — not silent absence. The grammar still teaches `EXEC` as a valid op (the GBNF permits it); with no availability signal either way, the model reads the bare op mention as *unknown* and confabulates runtimes, burning its strikes on a gate that correctly refuses them (execs#24). The negative line closes that window: a legible *no* where silence invited a guess.
 
 **One contributor, both cases.** `Advertise.contribute(registry, isPermitted)` returns the permitted runtimes **and** the notice from the *same* filter — a non-empty result never carries a notice, so the N-runtime sheet and the 0-runtime line cannot drift out of sync.
 
-**Cause-agnostic.** `isPermitted` resolves whether a registered tag survives *this* loop's gates: execs supplies the §3.3 policy cascade as the baseline predicate, and the consumer composes stricter gates into it — the effect-typed **host bar** by which a loop mode (ask-mode) bars host-effecting ops. But *why* the set is empty — policy zeroing every tag, or the host bar catching them all — is never execs' business. Execs owns the §2.3 `effect()` classification and the count; the consumer owns the loop-mode decision and reduces it to the effect-typed bar it composes into the predicate. Nothing about the mode reaches execs. The line states a factual **state** (`… are active`), never a permission — `permitted`/`forbidden`/`disabled` reads as a behavioral prohibition a confused model over-applies, and also leaks a cause the line must stay agnostic to. The exact wording is validated by the consumer's ask-mode probe, not asserted here.
+**Cause-agnostic.** `isPermitted` resolves whether a registered tag survives *this* loop's gates: execs supplies the §3.3 policy cascade as the baseline predicate, and the consumer composes stricter gates into it — the effect-typed **host bar** by which a loop mode (ask-mode) bars host-effecting ops. But *why* the set is empty — policy zeroing every tag, or the host bar catching them all — is never execs' business. Execs owns the §2.3 `effect()` classification and the count; the consumer owns the loop-mode decision and reduces it to the effect-typed bar it composes into the predicate. Nothing about the mode reaches execs. The line is short and **EXEC-scoped** — it names the op, so the model reads a bounded "no EXEC here", not a general rule — and cause-agnostic. Exact wording is the consumer's ask-mode probe to validate, not asserted here.
 
 Execs owns the notice content and the tally. It does **not** own the mode, the sheet's rendering, or the decision of when a loop bars host effects — only the single line spoken when its own count of surviving runtimes reaches zero.
 

package/dist/advertise.d.ts

@@ -1,6 +1,6 @@
 import type { ExecInfo, ExecRegistry } from "./types.ts";
 export default class Advertise {
-    static readonly NO_EXECS_NOTICE = "No EXEC runtimes are active";
+    static readonly NO_EXECS_NOTICE = "No EXEC operations permitted";
     static contribute(registry: ExecRegistry, isPermitted: (tag: string) => boolean): {
         permitted: ExecInfo[];
         notice: string | null;

package/dist/advertise.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"advertise.d.ts","sourceRoot":"","sources":["../src/advertise.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGzD,MAAM,CAAC,OAAO,OAAO,SAAS;IAG1B,MAAM,CAAC,QAAQ,CAAC,eAAe,iCAAiC;IAEhE,MAAM,CAAC,UAAU,CACb,QAAQ,EAAE,YAAY,EACtB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACtC;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAGlD;CACJ"}
+{"version":3,"file":"advertise.d.ts","sourceRoot":"","sources":["../src/advertise.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAGzD,MAAM,CAAC,OAAO,OAAO,SAAS;IAE1B,MAAM,CAAC,QAAQ,CAAC,eAAe,kCAAkC;IAEjE,MAAM,CAAC,UAAU,CACb,QAAQ,EAAE,YAAY,EACtB,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,GACtC;QAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAGlD;CACJ"}

package/dist/advertise.js

@@ -1,8 +1,7 @@
 // The EXEC family's per-loop capability contribution (SPEC §3.4, execs#24).
 export default class Advertise {
-    // A factual state, not a permission verb — "permitted"/"forbidden" reads as a
-    // behavioral prohibition the model over-applies (SPEC §3.4).
-    static NO_EXECS_NOTICE = "No EXEC runtimes are active";
+    // Deliberate wording — validated by the consumer probe, not free to edit (SPEC §3.4).
+    static NO_EXECS_NOTICE = "No EXEC operations permitted";
     static contribute(registry, isPermitted) {
         const permitted = [...registry.values()].filter(({ runtime }) => isPermitted(runtime));
         return { permitted, notice: permitted.length === 0 ? Advertise.NO_EXECS_NOTICE : null };

package/dist/advertise.js.map

@@ -1 +1 @@
-{"version":3,"file":"advertise.js","sourceRoot":"","sources":["../src/advertise.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,MAAM,CAAC,OAAO,OAAO,SAAS;IAC1B,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,CAAU,eAAe,GAAG,6BAA6B,CAAC;IAEhE,MAAM,CAAC,UAAU,CACb,QAAsB,EACtB,WAAqC;QAErC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,CAAC;CACJ"}
+{"version":3,"file":"advertise.js","sourceRoot":"","sources":["../src/advertise.ts"],"names":[],"mappings":"AAEA,4EAA4E;AAC5E,MAAM,CAAC,OAAO,OAAO,SAAS;IAC1B,sFAAsF;IACtF,MAAM,CAAU,eAAe,GAAG,8BAA8B,CAAC;IAEjE,MAAM,CAAC,UAAU,CACb,QAAsB,EACtB,WAAqC;QAErC,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC;QACvF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,CAAC;CACJ"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@plurnk/plurnk-execs",
-    "version": "0.4.43",
+    "version": "0.4.44",
     "description": "Framework + contract for the @plurnk/plurnk-execs-* runtime executor family.",
     "keywords": [
         "plurnk",
@@ -35,7 +35,8 @@
     "files": [
         "dist/**/*",
         "README.md",
-        "SPEC.md"
+        "SPEC.md",
+        ".env.defaults"
     ],
     "scripts": {
         "test:lint": "tsc --noEmit",
@@ -46,7 +47,7 @@
         "prepare": "npm run build"
     },
     "dependencies": {
-        "@plurnk/plurnk-schemes": "0.33.19"
+        "@plurnk/plurnk-schemes": "0.33.21"
     },
     "devDependencies": {
         "@types/node": "^26.0.1",