@plurnk/plurnk-service 1.7.0 → 1.8.0

package/dist/core/OperatorConfig.js

@@ -0,0 +1,92 @@
+import { constants } from "node:fs";
+import { access, mkdir, readFile, rmdir, unlink, writeFile } from "node:fs/promises";
+const exists = async (path) => access(path, constants.F_OK)
+    .then(() => true)
+    .catch(() => false);
+// {§operator-config-discovery} — the user owns this one ordinary dotenv file.
+// Package defaults remain package-owned and are projected on demand.
+export default class OperatorConfig {
+    static renderSeed() {
+        return [
+            "# Plurnk user configuration. This file is yours and is never overwritten.",
+            "# Full installed options: plurnk-service config defaults",
+            "# Validate this cascade: plurnk-service config check",
+            "#",
+            "# Choose one model profile by uncommenting its complete block.",
+            "",
+            "# PLURNK.AI — the proprietary Plurnk endpoint.",
+            "# PLURNK_MODEL_plurnk=\"plurnk/plurnk\"",
+            "# PLURNK_API_KEY=\"...\"",
+            "# PLURNK_MODEL=plurnk",
+            "",
+            "# OPENROUTER — bring any supported OpenRouter model.",
+            "# PLURNK_MODEL_openrouter=\"openrouter/qwen/qwen3-coder\"",
+            "# OPENROUTER_API_KEY=\"...\"",
+            "# PLURNK_MODEL=openrouter",
+            "",
+            "# LOCAL QWEN — an OpenAI-compatible llama-server with the Qwen GBNF rail.",
+            "# PLURNK_MODEL_local=\"openai/qwen\"",
+            "# PLURNK_BASEURL_local=http://127.0.0.1:8080/v1",
+            "# PLURNK_PROVIDERS_GBNF_local=plurnk.qwen.gbnf",
+            "# PLURNK_MODEL=local",
+            "",
+            "# FIND-SKILLS ships enabled inside Plurnk. Project skills live in",
+            "# .agents/skills; user-global skills live in ~/.agents/skills.",
+            "",
+            "# OPTIONAL BRAVE SEARCH MCP — uncomment the complete block and provide the key.",
+            "# BRAVE_API_KEY=\"...\"",
+            "# PLURNK_MCP_BRAVE=npx",
+            "# PLURNK_MCP_BRAVE_ARGS=[\"-y\",\"@brave/brave-search-mcp-server@2.1.0\"]",
+            "# PLURNK_MCP_BRAVE_ENV={\"BRAVE_API_KEY\":\"${BRAVE_API_KEY}\"}",
+            "# PLURNK_MCP_BRAVE_TOOLS=[\"brave_web_search\",\"brave_news_search\"]",
+            "# PLURNK_MCP_BRAVE_READ=[\"brave_web_search\",\"brave_news_search\"]",
+            "# PLURNK_MCP_ENABLED=[\"brave\"]",
+            "",
+            "# OPTIONAL TAVILY HTML MATERIALIZATION — install",
+            "# @plurnk/plurnk-schemes-http-tavily, then uncomment both lines.",
+            "# TAVILY_API_KEY=\"...\"",
+            "# PLURNK_SCHEMES_HTTP_MATERIALIZER=tavily-extract",
+            "",
+        ].join("\n");
+    }
+    static async ensure(paths, policySource) {
+        if (await exists(paths.configDir))
+            return false;
+        const policy = await readFile(policySource, "utf8");
+        const firstCreated = await mkdir(paths.configDir, { recursive: true, mode: 0o700 });
+        const createdFiles = [];
+        try {
+            await writeFile(paths.configFile, OperatorConfig.renderSeed(), { encoding: "utf8", flag: "wx", mode: 0o600 });
+            createdFiles.push(paths.configFile);
+            await writeFile(paths.policyFile, policy, { encoding: "utf8", flag: "wx", mode: 0o600 });
+            createdFiles.push(paths.policyFile);
+            return true;
+        }
+        catch (cause) {
+            const rollbackErrors = [];
+            for (const file of createdFiles.toReversed()) {
+                try {
+                    await unlink(file);
+                }
+                catch (rollbackCause) {
+                    if (rollbackCause.code !== "ENOENT")
+                        rollbackErrors.push(rollbackCause);
+                }
+            }
+            if (firstCreated !== undefined) {
+                try {
+                    await rmdir(paths.configDir);
+                }
+                catch (rollbackCause) {
+                    if (rollbackCause.code !== "ENOENT")
+                        rollbackErrors.push(rollbackCause);
+                }
+            }
+            if (rollbackErrors.length > 0) {
+                throw new AggregateError([cause, ...rollbackErrors], "operator config bootstrap failed and rollback was incomplete");
+            }
+            throw cause;
+        }
+    }
+}
+//# sourceMappingURL=OperatorConfig.js.map

package/dist/core/OperatorConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OperatorConfig.js","sourceRoot":"","sources":["../../src/core/OperatorConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAGrF,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAoB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;KAChF,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;KAChB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;AAExB,8EAA8E;AAC9E,qEAAqE;AACrE,MAAM,CAAC,OAAO,OAAO,cAAc;IAC/B,MAAM,CAAC,UAAU;QACb,OAAO;YACH,2EAA2E;YAC3E,0DAA0D;YAC1D,sDAAsD;YACtD,GAAG;YACH,gEAAgE;YAChE,EAAE;YACF,gDAAgD;YAChD,yCAAyC;YACzC,0BAA0B;YAC1B,uBAAuB;YACvB,EAAE;YACF,sDAAsD;YACtD,2DAA2D;YAC3D,8BAA8B;YAC9B,2BAA2B;YAC3B,EAAE;YACF,2EAA2E;YAC3E,sCAAsC;YACtC,iDAAiD;YACjD,gDAAgD;YAChD,sBAAsB;YACtB,EAAE;YACF,mEAAmE;YACnE,gEAAgE;YAChE,EAAE;YACF,iFAAiF;YACjF,yBAAyB;YACzB,wBAAwB;YACxB,2EAA2E;YAC3E,iEAAiE;YACjE,uEAAuE;YACvE,sEAAsE;YACtE,kCAAkC;YAClC,EAAE;YACF,kDAAkD;YAClD,kEAAkE;YAClE,0BAA0B;YAC1B,mDAAmD;YACnD,EAAE;SACL,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAgB,EAAE,YAAoB;QACtD,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpF,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,IAAI,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9G,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,SAAS,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzF,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,cAAc,GAAc,EAAE,CAAC;YACrC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,UAAU,EAAE,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAC3B,OAAO,aAAa,EAAE,CAAC;oBACnB,IAAK,aAAuC,CAAC,IAAI,KAAK,QAAQ;wBAAE,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACvG,CAAC;YACL,CAAC;YACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,CAAC;oBAAC,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;gBACrC,OAAO,aAAa,EAAE,CAAC;oBACnB,IAAK,aAAuC,CAAC,IAAI,KAAK,QAAQ;wBAAE,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACvG,CAAC;YACL,CAAC;YACD,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,GAAG,cAAc,CAAC,EAAE,8DAA8D,CAAC,CAAC;YACzH,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;CACJ"}

package/dist/core/OverflowTurn.d.ts

@@ -0,0 +1,11 @@
+import { type FoldStatement, type PlanStatement, type SendStatement } from "@plurnk/plurnk-contracts";
+import type { Db } from "./Db.ts";
+export type OverflowFold = {
+    readonly statement: FoldStatement;
+};
+export default class OverflowTurn {
+    static plan(db: Db, loopId: number, turnId: number): Promise<OverflowFold[]>;
+    static planStatement(): PlanStatement;
+    static sendStatement(): SendStatement;
+}
+//# sourceMappingURL=OverflowTurn.d.ts.map

package/dist/core/OverflowTurn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OverflowTurn.d.ts","sourceRoot":"","sources":["../../src/core/OverflowTurn.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAErB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAkBlC,MAAM,MAAM,YAAY,GAAG;IACvB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;CACrC,CAAC;AAoCF,MAAM,CAAC,OAAO,OAAO,YAAY;IAC7B,OAAa,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAmBjF;IAED,MAAM,CAAC,aAAa,IAAI,aAAa,CAOpC;IAED,MAAM,CAAC,aAAa,IAAI,aAAa,CAUpC;CACJ"}

package/dist/core/OverflowTurn.js

@@ -0,0 +1,77 @@
+import { UNKNOWN_POSITION, } from "@plurnk/plurnk-contracts";
+import LogBody from "./LogBody.js";
+import LogEntryProjection from "./LogEntryProjection.js";
+import LogVisibility from "./LogVisibility.js";
+const OVERFLOW_PLAN = "Automatically FOLD log bodies newly active at token-budget overflow.";
+const OVERFLOW_SEND = "Next: YOU MUST ONLY FOLD, KILL, or trim ALL superseded, stale, or irrelevant log content in bulk in the next turn.";
+const targetFor = (coordinate) => ({
+    kind: "url",
+    raw: `log:///${coordinate}`,
+    scheme: "log",
+    username: null,
+    password: null,
+    hostname: null,
+    port: null,
+    pathname: `/${coordinate}`,
+    query: null,
+    fragment: null,
+});
+const foldFor = (row) => {
+    const coordinate = LogEntryProjection.coordinate(row.coordinate, row);
+    const statement = {
+        op: "FOLD",
+        annotation: null,
+        delimiter: "",
+        signal: ["+_plurnk", "+overflow"],
+        target: targetFor(coordinate),
+        lineMarker: { marks: [1, -1] },
+        body: null,
+        position: UNKNOWN_POSITION,
+    };
+    return { statement };
+};
+// {§overflow-turn-curation} — deterministic selection only. Execution remains
+// ordinary Dispatcher FOLD, so Log owns the visibility transaction and effect
+// evidence exactly as it does for model-authored curation.
+export default class OverflowTurn {
+    static async plan(db, loopId, turnId) {
+        const causalRows = await db.overflow_turn_causal_rows.all({
+            loop_id: loopId,
+            turn_id: turnId,
+        });
+        return causalRows.flatMap((row) => {
+            const body = LogBody.resolve({
+                op: row.op,
+                attrs: row.attrs,
+                tx: row.tx,
+                rx: row.rx,
+                mimetypeTx: row.mimetype_tx,
+                mimetypeRx: row.mimetype_rx,
+            });
+            const lines = LogVisibility.lineCount(body.content);
+            return lines === 0 || LogVisibility.fullyFolded(LogVisibility.parse(row.folded), lines)
+                ? []
+                : [foldFor(row)];
+        });
+    }
+    static planStatement() {
+        return {
+            op: "PLAN", delimiter: "", annotation: null,
+            signal: null, target: null, lineMarker: null,
+            body: OVERFLOW_PLAN,
+            position: UNKNOWN_POSITION,
+        };
+    }
+    static sendStatement() {
+        return {
+            op: "SEND", delimiter: "", annotation: null,
+            signal: 102, target: null, lineMarker: null,
+            body: {
+                raw: OVERFLOW_SEND,
+                json: null,
+            },
+            position: UNKNOWN_POSITION,
+        };
+    }
+}
+//# sourceMappingURL=OverflowTurn.js.map

package/dist/core/OverflowTurn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OverflowTurn.js","sourceRoot":"","sources":["../../src/core/OverflowTurn.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,gBAAgB,GAKnB,MAAM,0BAA0B,CAAC;AAElC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,kBAAkB,MAAM,yBAAyB,CAAC;AACzD,OAAO,aAAa,MAAM,oBAAoB,CAAC;AAmB/C,MAAM,aAAa,GAAG,sEAAsE,CAAC;AAC7F,MAAM,aAAa,GAAG,oHAAoH,CAAC;AAE3I,MAAM,SAAS,GAAG,CAAC,UAAkB,EAAW,EAAE,CAAC,CAAC;IAChD,IAAI,EAAE,KAAK;IACX,GAAG,EAAE,UAAU,UAAU,EAAE;IAC3B,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,IAAI;IACV,QAAQ,EAAE,IAAI,UAAU,EAAE;IAC1B,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;CACjB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,GAAgB,EAAgB,EAAE;IAC/C,MAAM,UAAU,GAAG,kBAAkB,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACtE,MAAM,SAAS,GAAkB;QAC7B,EAAE,EAAE,MAAM;QACV,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;QACjC,MAAM,EAAE,SAAS,CAAC,UAAU,CAAC;QAC7B,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAC9B,IAAI,EAAE,IAAI;QACV,QAAQ,EAAE,gBAAgB;KAC7B,CAAC;IACF,OAAO,EAAE,SAAS,EAAE,CAAC;AACzB,CAAC,CAAC;AAEF,8EAA8E;AAC9E,8EAA8E;AAC9E,2DAA2D;AAC3D,MAAM,CAAC,OAAO,OAAO,YAAY;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAM,EAAE,MAAc,EAAE,MAAc;QACpD,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAc;YACnE,OAAO,EAAE,MAAM;YACf,OAAO,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;gBACzB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,UAAU,EAAE,GAAG,CAAC,WAAW;gBAC3B,UAAU,EAAE,GAAG,CAAC,WAAW;aAC9B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,OAAO,KAAK,KAAK,CAAC,IAAI,aAAa,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC;gBACnF,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,OAAO;YACH,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI;YAC3C,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;YAC5C,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,gBAAgB;SAC7B,CAAC;IACN,CAAC;IAED,MAAM,CAAC,aAAa;QAChB,OAAO;YACH,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI;YAC3C,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;YAC3C,IAAI,EAAE;gBACF,GAAG,EAAE,aAAa;gBAClB,IAAI,EAAE,IAAI;aACb;YACD,QAAQ,EAAE,gBAAgB;SAC7B,CAAC;IACN,CAAC;CACJ"}

package/dist/core/Owner.js

@@ -11,7 +11,7 @@ export default class Owner {
         const existing = await db.envelope_get_worker_by_name.get({ workspace_id: workspaceId, name: "commons" });
         if (existing !== undefined)
             return existing.id;
-        const created = await db.envelope_insert_worker.get({ workspace_id: workspaceId, name: "commons", origin: "plurnk" });
+        const created = await db.envelope_insert_worker.get({ workspace_id: workspaceId, name: "commons", origin: "_plurnk" });
         if (created === undefined)
             throw new Error("Owner.commonsId: commons worker insert returned no row");
         return created.id;
@@ -21,7 +21,7 @@ export default class Owner {
         const existing = await db.envelope_get_worker_by_name.get({ workspace_id: workspaceId, name: "plurnk" });
         if (existing !== undefined)
             return existing.id;
-        const created = await db.envelope_insert_worker.get({ workspace_id: workspaceId, name: "plurnk", origin: "plurnk" });
+        const created = await db.envelope_insert_worker.get({ workspace_id: workspaceId, name: "plurnk", origin: "_plurnk" });
         if (created === undefined)
             throw new Error("Owner.kernelId: kernel worker insert returned no row");
         return created.id;

package/dist/core/Owner.js.map

@@ -1 +1 @@
-{"version":3,"file":"Owner.js","sourceRoot":"","sources":["../../src/core/Owner.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,0FAA0F;AAC1F,MAAM,CAAC,OAAO,OAAO,KAAK;IACtB,0FAA0F;IAC1F,yFAAyF;IACzF,uEAAuE;IACvE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAM,EAAE,WAAmB;QAC9C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1H,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtI,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACrG,OAAO,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC;IAED,2FAA2F;IAC3F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,WAAmB;QAC7C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzH,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrI,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACnG,OAAO,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC;IAED,yFAAyF;IACzF,2FAA2F;IAC3F,wFAAwF;IACxF,yFAAyF;IACzF,kCAAkC;IAClC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAmC,EAAE,GAAwB;QACzF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC;QACxF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAwB,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrI,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACrD,CAAC;CACJ"}
+{"version":3,"file":"Owner.js","sourceRoot":"","sources":["../../src/core/Owner.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,gGAAgG;AAChG,iGAAiG;AACjG,iGAAiG;AACjG,0FAA0F;AAC1F,MAAM,CAAC,OAAO,OAAO,KAAK;IACtB,0FAA0F;IAC1F,yFAAyF;IACzF,uEAAuE;IACvE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EAAM,EAAE,WAAmB;QAC9C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1H,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvI,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACrG,OAAO,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC;IAED,2FAA2F;IAC3F,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAM,EAAE,WAAmB;QAC7C,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,2BAA2B,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzH,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtI,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACnG,OAAO,OAAO,CAAC,EAAE,CAAC;IACtB,CAAC;IAED,yFAAyF;IACzF,2FAA2F;IAC3F,wFAAwF;IACxF,yFAAyF;IACzF,kCAAkC;IAClC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,QAAmC,EAAE,GAAwB;QACzF,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC;QACxF,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,sBAAsB,CAAC,GAAG,CAAiB,EAAE,YAAY,EAAE,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACzH,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,yBAAyB,CAAC,GAAG,CAAwB,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrI,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACrD,CAAC;CACJ"}

package/dist/core/PacketBuilder.d.ts

@@ -32,23 +32,11 @@ export default class PacketBuilder {
         transientOpenLogEntryId?: number | null;
         promptProjection?: "automatic" | "withheld";
     }): Promise<RequestPacket>;
-    docEntries(workspaceId: number): Promise<Array<{
-        name: string;
+    referenceEntries(workspaceId: number): Promise<Array<{
+        pathname: string;
         content: string;
     }>>;
-    enforceBudget({ packet, provider, loopId, turnId, recordOverflow, rebuild }: {
-        packet: RequestPacket;
-        provider: Provider;
-        loopId: number;
-        turnId: number;
-        recordOverflow: (overflow: CurationOverflow) => Promise<void>;
-        rebuild: () => Promise<RequestPacket>;
-    }): Promise<{
-        packet: RequestPacket;
-        fit: boolean;
-        boundaryRolledBack: boolean;
-    }>;
-    rollbackNewestBoundary(loopId: number, turnId: number): Promise<void>;
+    curationOverflow(packet: RequestPacket, provider: Provider): CurationOverflow | null;
     buildFailurePointers(loopId: number, currentTurnSeq: number): Promise<Array<{
         status: number;
         coordinate: string;

package/dist/core/PacketBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PacketBuilder.d.ts","sourceRoot":"","sources":["../../src/core/PacketBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAiBhD,OAAO,KAAK,EAAE,aAAa,EAAuB,MAAM,mBAAmB,CAAC;AAG5E,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAyFtE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAID,MAAM,CAAC,OAAO,OAAO,aAAa;;IAU9B,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;QACpC,EAAE,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,cAAc,CAAC;QACxB,SAAS,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;KACjD,EAQA;IAiCD,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAEnD;IAIK,kBAAkB,CAAC,EACrB,eAAe,EAAE,YAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAY,EACpH,uBAA8B,EAC9B,gBAA8B,GACjC,EAAE;QACC,eAAe,EAAE,WAAW,EAAE,CAAC;QAE/B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAEtD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,QAAQ,CAAC;QAInB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAG5B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAGxC,gBAAgB,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC;KAC/C,GAAG,OAAO,CAAC,aAAa,CAAC,CAuIzB;IAsEK,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAsBvF;IASK,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,EAAE;QAC/E,MAAM,EAAE,aAAa,CAAC;QAAC,QAAQ,EAAE,QAAQ,CAAC;QAC1C,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAC/B,cAAc,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;KACzC,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,GAAG,EAAE,OAAO,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAA;KAAE,CAAC,CAgBhF;IAEK,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1E;IAKK,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9E,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC,CASF;CAmFJ"}
+{"version":3,"file":"PacketBuilder.d.ts","sourceRoot":"","sources":["../../src/core/PacketBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,KAAK,cAAc,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,gBAAgB,MAAM,uBAAuB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAgBhD,OAAO,KAAK,EAAE,aAAa,EAAuB,MAAM,mBAAmB,CAAC;AAG5E,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AA0FtE,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B;AAID,MAAM,CAAC,OAAO,OAAO,aAAa;;IAU9B,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;QACpC,EAAE,EAAE,EAAE,CAAC;QACP,OAAO,EAAE,cAAc,CAAC;QACxB,SAAS,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;KACjD,EAQA;IAiCD,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAEnD;IAIK,kBAAkB,CAAC,EACrB,eAAe,EAAE,YAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAY,EACpH,uBAA8B,EAC9B,gBAA8B,GACjC,EAAE;QACC,eAAe,EAAE,WAAW,EAAE,CAAC;QAE/B,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAEtD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,EAAE,QAAQ,CAAC;QAInB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAG5B,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAGxC,gBAAgB,CAAC,EAAE,WAAW,GAAG,UAAU,CAAC;KAC/C,GAAG,OAAO,CAAC,aAAa,CAAC,CA2HzB;IAYK,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAuBjG;IAKD,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,GAAG,gBAAgB,GAAG,IAAI,CAInF;IAKK,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9E,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC,CASF;CAqFJ"}

package/dist/core/PacketBuilder.js

@@ -1,11 +1,10 @@
 var _a;
 import { renderAddress, promptLoopPrefix } from "./plurnk-uri.js";
 import { contentWeight } from "./content-weight.js";
-import { docsExcludeSet } from "./teaching.js";
 import { Policy } from "@plurnk/plurnk-execs";
 import WorkspaceSettings from "./workspace-settings.js";
 import LoopFlagsReader from "./LoopFlagsReader.js";
-import { readPacketInject, readSystemPolicy, readProjectPolicy } from "./packet-inject.js";
+import { readPacketInject, readSystemPolicy } from "./packet-inject.js";
 import { readFile } from "node:fs/promises";
 import Paths from "../Paths.js";
 import { readTeachingSource } from "./teaching-corpus.js";
@@ -14,11 +13,12 @@ import { readTeachingSource } from "./teaching-corpus.js";
 // drift between wire and digest possible.
 import PacketWire from "./packet-wire.js";
 import LogEntryProjection from "./LogEntryProjection.js";
-import { scopeEnvToAlias, resolveActiveAlias } from "@plurnk/plurnk-providers";
+import { scopeEnvToAlias, resolveActiveRoute } from "@plurnk/plurnk-providers";
 import ProviderInstantiate from "./ProviderInstantiate.js";
 import BudgetReadout from "./BudgetReadout.js";
-import ExecutableTools from "./ExecutableTools.js";
 import LineAnchors from "../content/line-anchors.js";
+import ToolResources from "./ToolResources.js";
+import LogVisibility from "./LogVisibility.js";
 const trimHorizontal = (value) => value.replace(/^[\t ]+|[\t ]+$/gu, "");
 const tableCells = (line) => {
     if (!line.startsWith("|") || !line.endsWith("|"))
@@ -99,8 +99,8 @@ const readRequiredPercentFrom = (env, name) => {
     }
     return percent / 100;
 };
-// Packet assembly (SPEC {§packet-assembly}) + the budget grinder ({§grinder}):
-// builds the spec'd request packet, measures it, and reclaims window on overflow.
+// Packet assembly ({§packet-assembly}) and model-facing budget admission
+// ({§overflow-turn}). Visibility changes stay in the ordinary FOLD owner.
 class PacketBuilder {
     #db;
     #schemes;
@@ -114,7 +114,7 @@ class PacketBuilder {
         this.#schemes = schemes;
         this.#executors = executors;
         // Retired capacity knobs fail at boot rather than silently becoming inert.
-        const bootAlias = resolveActiveAlias(process.env)?.alias ?? "";
+        const bootAlias = resolveActiveRoute(process.env)?.alias ?? "";
         this.#shedRetiredCapacityKnobs();
         this.#promptProjectionFor(bootAlias);
     }
@@ -154,9 +154,12 @@ class PacketBuilder {
     // {§packet-stored-shape} — assemble the system/user request before the
     // provider call; complete the same record with the provider response.
     async buildRequestPacket({ initialMessages, requirements = "", workspaceId, workerId, loopId, currentTurnSeq, provider, gitStatus, notices = [], transientOpenLogEntryId = null, promptProjection = "automatic", }) {
+        // {§loop-flags-effective-read} Validate active-loop policy before any
+        // packet assembly or provider spend, independently of its presentation.
+        await LoopFlagsReader.read(this.#db, loopId);
         const byRole = (role) => initialMessages.filter((m) => m.role === role).map((m) => m.content).join("\n\n");
         // plurnk.md (grammar/dialects) ONLY — the definition is the hot-path grammar.
-        // The resource catalogue is its own `schemes` section below tools ({§schemes-directory}),
+        // The resource catalogue is its own `schemes` section ({§schemes-directory}),
         // NOT appended here: the language teaching is scheme-agnostic, so the service advertises
         // the installed scheme set at packet-time via SchemeRegistry.teach().
         const system_definition = compactDefinitionTables(byRole("system"));
@@ -189,11 +192,8 @@ class PacketBuilder {
         const log = await this.#buildLog(workerId, transientOpenLogEntryId);
         const failures = await this.buildFailurePointers(loopId, currentTurnSeq);
         const weighContent = contentWeight;
-        // {§tools-loop-affinity}: teaching and dispatch resolve the same loop flags.
-        const activeSchemes = this.#schemes.resolveForLoop(await LoopFlagsReader.read(this.#db, loopId), workspaceId);
-        const tools = this.#collectTools(workspaceId, await this.#workspaceEnabled(workspaceId), await WorkspaceSettings.questionsEnabled(this.#db, workspaceId), activeSchemes);
         const curationBudget = this.curationBudgetFor(provider);
-        const alias = ProviderInstantiate.aliasOf(provider) ?? resolveActiveAlias(process.env)?.alias ?? "";
+        const alias = ProviderInstantiate.configurationAliasOf(provider) ?? "";
         const promptProjectionWeight = promptProjection === "withheld"
             ? 0
             : curationBudget === null
@@ -204,9 +204,9 @@ class PacketBuilder {
         // specified at {§packet-cache-monotone}. Budget placeholders resolve only
         // after trusted whole-list transforms establish the packet being measured.
         const inject = await readPacketInject(); // {§packet-inject} — per-turn; a broken configured path fails hard
-        const workspaceRoot = (await this.#db.envelope_get_workspace.get({ id: workspaceId }))?.project_root ?? null;
-        const systemPolicy = await readSystemPolicy(); // ~/.plurnk/AGENTS.md (or PLURNK_SERVICE_POLICY)
-        const projectPolicy = await readProjectPolicy(workspaceRoot); // <projectRoot>/AGENTS.md (or PLURNK_SERVICE_PROJECT)
+        const systemPolicy = await readSystemPolicy(); // XDG config AGENTS.md (or PLURNK_SERVICE_POLICY)
+        // {§turn0-agents-stunt} — the PROJECT AGENTS.md rides turn 0 as a foisted
+        // READ (LoopDocs → worker://plurnk/agents.md), not the system prompt.
         // {§packet-git-status}/{§worker-branch-batch-return} — only the direct,
         // currently running branch-batch child receives the transaction's
         // commit-and-clean return condition. Ordinary Git state remains purely
@@ -222,14 +222,9 @@ class PacketBuilder {
             .map((r) => ({ status: r.status, path: `worker://${r.name}` }));
         const defaults = [
             { name: "definition", slot: "system", header: null, content: system_definition },
-            // Stable privileged policy leads loop-dependent capabilities for
+            // Stable privileged policy leads capability teaching for
             // prefix-cache locality. Empty policy sections simply disappear.
             { name: "system-policy", slot: "system", header: "Policy", content: systemPolicy ?? "" },
-            { name: "project-policy", slot: "system", header: "Project Policy", content: projectPolicy ?? "" },
-            { name: "tools", slot: "system", header: "Registered Tools", content: tools.executors },
-            ...(tools.optionalOperations.length > 0
-                ? [{ name: "optional-operations", slot: "system", header: "Enabled Optional Operations", content: tools.optionalOperations }]
-                : []),
             { name: "schemes", slot: "system", header: "Resources", content: this.#schemes.teach(workspaceId) },
             ...(inject !== null ? [{ name: "inject", slot: "system", header: "Operator Notes", content: inject }] : []),
             // The append-mostly log leads volatile user status ({§packet-cache-monotone}).
@@ -249,7 +244,7 @@ class PacketBuilder {
             { name: "git", slot: "user", header: "Git Status", content: PacketWire.renderGit(gitStatus, branchAssignment?.branch ?? null) },
             // Familiar token language is a deliberate final model projection;
             // internally this is curation weight, never provider admission.
-            { name: "budget", slot: "user", header: "Budget", content: budgetReadout },
+            { name: "budget", slot: "user", header: "Context Token Budget", content: budgetReadout },
             // The prompts section closes the status clump as a paths-only list;
             // bodies arrive through first-class prompt rows.
             { name: "prompt", slot: "user", header: "Active User Prompts", content: prompt },
@@ -275,120 +270,50 @@ class PacketBuilder {
         const renderWeight = weighContent(PacketWire.renderSlot(sections, "system")) + weighContent(PacketWire.renderSlot(sections, "user"));
         return { weight: renderWeight, sections, attributions: [] };
     }
-    // {§operator-config-workspace-execs} — the capability sheet and executor
-    // documents share one workspace predicate with dispatch.
+    // {§operator-config-workspace-execs} — tool resources and dispatch share one
+    // workspace predicate.
     async #workspaceEnabled(workspaceId) {
         const { execs } = await WorkspaceSettings.read(this.#db, workspaceId);
         if (execs === null)
             return () => true;
         return (tag) => Policy.isEnabled(tag, execs);
     }
-    // The complete ## Registered Tools contract table. {§tools-capability-sheet}
-    #collectTools(workspaceId, workspaceEnabled, questionsOn = false, activeSchemes) {
-        // Registered executors and optional operations remain distinct sheets.
-        // The former is a contract table; only the latter is an operation example fence.
-        // {§tools-capability-sheet} {§packet-operation-fences}
-        const executorTools = [];
-        const notices = [];
-        // {§send-300-choices} — the one-liner rides ONLY where questions are enabled (allowed +
-        // client-requested); the fuller questions.md doc injects through docEntries the same way.
-        const optionalOperations = questionsOn
-            ? "```plurnk\n## SEND0 [300]\nDeploy where?;staging;production\n```"
-            : "";
-        const executors = this.#executors();
-        if (executors !== undefined) {
-            const excluded = docsExcludeSet();
-            const runtimes = executors.availableRuntimes(workspaceId);
-            // {§tools-capability-sheet} The table is keyed on the exec scheme (the op face,
-            // excludedInAsk). When inactive, say so positively: plurnk.md
-            // still teaches EXEC as language, and silent absence measurably invites confabulated runtimes.
-            const execActive = activeSchemes === undefined || activeSchemes.has("exec");
-            if (runtimes.length > 0 && !execActive) {
-                notices.push("EXEC operations are disabled for this loop — do not run commands; answer or advise directly");
-            }
-            else {
-                for (const tag of runtimes) {
-                    if (excluded.has(tag))
-                        continue; // {§tools-capability-sheet} — exclude drops the row and doc
-                    if (!workspaceEnabled(tag))
-                        continue; // {§operator-config-workspace-execs}
-                    const entry = executors.entry(tag, workspaceId);
-                    if (entry !== undefined) {
-                        const registry = executors.toolRegistry(tag, workspaceId);
-                        if (registry === null) {
-                            executorTools.push({ runtime: tag, invocation: entry.invocation });
-                        }
-                        else {
-                            executorTools.push(...registry.tools.map((tool) => ({
-                                runtime: tag,
-                                invocation: tool.invocation,
-                                exactTarget: tool.target,
-                            })));
-                        }
-                    }
-                }
-            }
-        }
-        const parts = [...notices];
-        const directory = ExecutableTools.render(executorTools);
-        if (directory !== "")
-            parts.push(directory);
-        return { executors: parts.join("\n\n"), optionalOperations };
-    }
-    // #note12 — the plugin-provided reference docs (schemes' + execs' `documentation`),
-    // materialized at worker://plurnk/docs/<name>.md by LoopDocs (like operator
-    // docs) so the catalog can expose each doc's curation weight.
-    async docEntries(workspaceId) {
-        const out = await this.#schemes.docs(workspaceId); // scheme docs already drop PLURNK_SERVICE_DOCS_EXCLUDE names
-        // {§send-300-choices} {§teaching-corpus} — the conditional teaching: questions.md
-        // materializes ONLY for enabled workspaces — the same conditional-doc mechanism as the EXEC
-        // plugin docs below. An un-enabled workspace is never taught the op it can't use.
-        if (await WorkspaceSettings.questionsEnabled(this.#db, workspaceId)) {
-            const q = await this.#schemes.questionsDoc();
-            if (q.length > 0)
-                out.push({ name: "questions", content: q });
-        }
+    // {§schemes-self-doc-materialization} {§tools-resource-materialization} —
+    // one reserved reference set, materialized by LoopDocs.
+    async referenceEntries(workspaceId) {
+        const out = (await this.#schemes.docs(workspaceId)).map(({ name, content }) => ({
+            pathname: `/skills/plurnk/${name}.md`,
+            content,
+        }));
         const executors = this.#executors();
         if (executors !== undefined) {
-            const excluded = docsExcludeSet();
             const workspaceEnabled = await this.#workspaceEnabled(workspaceId); // {§operator-config-workspace-execs}
             for (const tag of executors.availableRuntimes(workspaceId)) {
-                if (excluded.has(tag))
-                    continue; // {§tools-capability-sheet} — exec docs honor the same exclude
                 if (!workspaceEnabled(tag))
                     continue;
                 const entry = executors.entry(tag, workspaceId);
-                const doc = executors.toolRegistry(tag, workspaceId)?.documentation ?? entry?.documentation;
-                if (doc !== undefined && doc.length > 0)
-                    out.push({ name: tag, content: doc });
+                if (entry === undefined)
+                    continue;
+                out.push(...ToolResources.render({
+                    runtime: tag,
+                    summary: entry.summary,
+                    invocation: entry.invocation,
+                    details: entry.details,
+                    registry: executors.toolRegistry(tag, workspaceId),
+                    ...(entry.resourcesPath === undefined ? {} : { resourcesPath: entry.resourcesPath }),
+                }));
             }
         }
-        return out;
+        return out.toSorted((left, right) => left.pathname.localeCompare(right.pathname));
     }
-    // SPEC {§grinder} — the budget grinder. Runs pre-LLM (in runTurn, after the packet
-    // is built, before provider.generate); fires only when curation weight exceeds
-    // the provider-derived curation budget. One
-    // reversible rule: roll back context introduced by the NEWEST turn boundary —
-    // rows born there plus exact older rows it transitioned folded→open — then
-    // rebuild and re-measure.
-    // {§grinder-overflow-only} — fires only on actual overflow, never speculatively
-    async enforceBudget({ packet, provider, loopId, turnId, recordOverflow, rebuild }) {
+    // {§overflow-turn-only} — a pure admission fact. TurnRunner owns the
+    // producer-neutral recovery transition; PacketBuilder never mutates log
+    // visibility while measuring a candidate request.
+    curationOverflow(packet, provider) {
         const budget = this.curationBudgetFor(provider);
-        const measure = (p) => p.weight;
-        if (budget === null || measure(packet) <= budget) {
-            return { packet, fit: true, boundaryRolledBack: false };
-        }
-        const weight = measure(packet);
-        await recordOverflow({ weight, budget, excess: weight - budget });
-        // ONE rule, every turn ({§grinder-layer1-rollback}): atomically fold/tag
-        // context introduced by the newest boundary. Other older history remains
-        // model-owned; remaining curation debt is neither failure nor strike.
-        await this.#db.engine_grinder_fold_newest_turn({ loop_id: loopId, turn_id: turnId });
-        const current = await rebuild();
-        return { packet: current, fit: measure(current) <= budget, boundaryRolledBack: true };
-    }
-    async rollbackNewestBoundary(loopId, turnId) {
-        await this.#db.engine_grinder_fold_newest_turn({ loop_id: loopId, turn_id: turnId });
+        if (budget === null || packet.weight <= budget)
+            return null;
+        return { weight: packet.weight, budget, excess: packet.weight - budget };
     }
     // Every prior-turn operation failure is durable before packet assembly.
     // The model-facing Errors section is only a terse projection of those rows;
@@ -446,7 +371,7 @@ class PacketBuilder {
                 coordinate: `${r.loop_seq}/${r.turn_seq}/${r.sequence}`,
                 origin: r.origin,
                 op: r.op,
-                suffix: r.suffix,
+                delimiter: r.delimiter,
                 signal: r.signal === null ? null : JSON.parse(r.signal),
                 target: {
                     scheme: r.scheme,
@@ -461,7 +386,9 @@ class PacketBuilder {
                 mimetype_rx: r.mimetype_rx,
                 tx,
                 mimetype_tx: r.mimetype_tx,
-                folded: r.expanded === 0 && r.id !== transientOpenLogEntryId,
+                folded: r.id === transientOpenLogEntryId
+                    ? LogVisibility.OPEN
+                    : LogVisibility.parse(r.folded),
                 source: r.source,
                 attrs: r.attrs === null ? null : JSON.parse(r.attrs),
                 tags: JSON.parse(r.tags),