@pmelab/gtd 27.4.0 → 27.6.0

package/dist/testkit.mjs

@@ -1,7 +1,7 @@
 import { checkScript, configProblems, configure, installContext, isFactoryWorkflow, moveScript, protocolMismatch, removeScript, restoreScript, revertScript, showScript, t as flows_exports } from "./flows.mjs";
 import { E as ACCESS_REFUSAL, _ as demandOf, a as landFields, c as renderLandJson, d as renderBeatPlain, f as beatDocument, g as beatKindOf, i as judgeJson, k as renderFormat, l as renderLandPlain, m as statusOf, n as resolveSession, p as renderBeatJson, r as selectPath, s as noopText, t as globMatches } from "./chunks/wire-C12dahrH.mjs";
 import { C as headingSections, S as headingSectionBodies, a as unansweredQuestions, b as parseThreadsWithFindings, n as openThreads, r as steeringFormatFor, s as parseCodeThreads, t as BUILT_IN_MODE_NAMES, w as formatFinding } from "./chunks/steering-DVILanVf.mjs";
-import { $ as logWarning, $i as format, $n as map$5, $r as make$19, $t as provide$1, A as catchIf, Ai as get$5, An as scopeMake, Ar as flatMap$3, At as suspend$5, B as flatMap$4, Bi as isNone, Bn as get$3, Br as sync$1, Bt as unsafeMakeLatch, C as all$1, Ci as toArray, Cn as isInterrupted, Cr as exitFail, Ct as sandbox, D as async, Di as GenericTag, Dn as squash, Dr as exitZipRight, Dt as scopedWith$1, E as asVoid$1, Ei as unsafeHead, En as reduceWithContext, Er as exitVoid, Et as scoped$4, F as ensuring$2, Fi as splitAt, Fn as join$3, Fr as map$3, Ft as tryMap, G as forkIn, Gi as some, Gn as TypeId$10, Gr as whenEffect, Gt as zipLeft, H as fnUntraced, Hi as map$8, Hn as modify$1, Hr as uninterruptible, Ht as when, I as exit, Ii as filter$1, In as sequential, Ir as onInterrupt, It as tryPromise, J as ignore, Ji as match$2, Jn as all, Jr as DeferredTypeId$1, Jt as spaced$1, K as forkScoped, Ki as isLeft, Kn as Class, Kr as withFiberRuntime, Kt as zipRight$3, L as fail$5, Li as flatMap$5, Ln as bind, Lr as scopeClose, Lt as try_, M as die$2, Mi as omit, Mn as _await$2, Mr as interruptAsFiber, Mt as tap, N as dieMessage, Ni as empty$5, Nn as inheritAll$1, Nr as interruptFiber, Nt as tapErrorCause, O as catchAll$1, Oi as Tag, On as ensuring$3, Or as fiberId, Ot as serviceOption, P as either, Pi as fromIterable, Pn as interruptAllAs$1, Pr as interruptible$1, Pt as timeout, Q as isEffect, Qi as NodeInspectSymbol, Qn as isFailure, Qr as ids, Qt as mergeAll$2, R as failCause$4, Ri as fromNullable, Rn as bindTo, Rr as succeed$4, Rt as uninterruptible$1, S as addFinalizer$1, Si as takeRight, Sn as isDieType, Sr as exitAs, St as runtime, T as as, Ti as unsafeGet, Tn as map$6, Tr as exitSucceed, Tt as scopeWith, U as forEach$2, Ui as match$4, Un as set$1, Ur as uninterruptibleMask$1, Ut as withFiberRuntime$1, V as flatten$4, Vi as isSome, Vn as make$16, Vr as tap$1, Vt as unsafeMakeSemaphore$1, W as forkDaemon, Wi as none, Wn as update$1, Wr as void_$2, Wt as zip$1, X as interruptible, Xi as pipeArguments, Xn as fail$4, Xr as combine, Xt as tagged, Y as interrupt$4, Yi as right, Yn as die, Yr as empty$6, Yt as TaggedError$1, Z as intoDeferred, Zi as BaseProto, Zn as failCause$3, Zr as combineAll, Zt as fromEffect$5, _ as decodeSync, _i as of, _n as fail$3, _r as deferredIsDone, _t as raceWith, a as Literal, aa as constUndefined, ai as size$2, an as updateContext$1, ar as zipRight$2, at as matchCause, b as acquireRelease, bi as reverse, bn as interrupt$3, br as deferredUnsafeDone, bt as runPromise, c as String$, ca as identity, ci as append$1, cn as Scope, cr as asyncInterrupt, ct as negate, d as Union, di as empty$4, dn as close, dr as deferredAwait, dt as orElse, ea as toJSON, ei as none$1, en as provideMerge$1, er as mapBoth, et as makeSemaphore, f as between, fi as filter, fn as extend, fr as deferredComplete, ft as orElseSucceed, gi as map$7, gn as die$1, gr as deferredInterruptWith, gt as race, hi as isEmpty$2, hn as NoSuchElementException, hr as deferredInterrupt, ht as provideService, i as Defect, ia as constTrue, ii as has, in as unsafeRunPromiseExit, ir as zip$2, it as match$5, j as catchTag, ji as getOption, jn as scopeTag, jr as interrupt$2, jt as sync$2, k as catchAllCause, ki as add, kn as forEachConcurrentDiscard, kr as fiberRefLocally, kt as succeed$6, l as Struct, la as pipe, li as appendAll, ln as addFinalizer, lr as catchAll, lt as onError, m as optional$1, mi as isChunk, mn as make$18, mr as deferredFailCause, mt as provide$2, n as Boolean$, na as hasProperty, ni as make$17, nn as succeed$3, nr as succeed$5, nt as mapBoth$1, o as Never, oa as constVoid, oi as decode, on as forkIn$1, or as as$1, ot as matchCauseEffect, p as decodeUnknown, pi as fromIterable$1, pn as fork, pr as deferredFail, pt as promise, q as gen, qi as left, qn as spanTag, qr as zipRight$1, qt as zipWith, r as Cause, ra as constFalse, ri as set$2, rn as unsafeFork, rr as void_$3, rt as mapError, s as Number$, sa as dual, si as isFinite, sn as unsafeMakeSemaphore, sr as asVoid, st as matchEffect, t as Array$, ta as equals, ti as get$4, tn as scoped$3, tr as match$3, tt as map$4, u as TaggedError, ui as drop, un as addFinalizerExit, ur as currentContext$1, ut as orDie, v as encodeSync, vi as prepend, vn as failureOrCause, vr as deferredMake, vt as repeat, w as annotateLogs, wi as unsafeFromArray, wn as isInterruptedOnly, wr as exitFailCause, wt as scope, x as acquireUseRelease$2, xi as take$2, xn as interruptors, xr as deferredUnsafeMake, xt as runPromiseExit$1, y as _void, yi as reduce, yn as flipCauseOption, yr as deferredSucceed, yt as retry, z as fiberIdWith, zi as getOrElse, zn as sleep, zr as suspend$4, zt as uninterruptibleMask } from "./chunks/Schema-CyImoHTj.mjs";
+import { $ as logWarning, $i as NodeInspectSymbol, $n as map$5, $r as make$19, $t as provide$1, A as catchIf, Ai as add, An as scopeMake, Ar as flatMap$3, At as suspend$5, B as flatMap$4, Bi as getOrElse, Bn as get$3, Br as sync$1, Bt as unsafeMakeLatch, C as all$1, Ci as toArray, Cn as isInterrupted, Cr as exitFail, Ct as sandbox, D as async, Di as GenericTag, Dn as squash, Dr as exitZipRight, Dt as scopedWith$1, E as asVoid$1, Ei as unsafeHead, En as reduceWithContext, Er as exitVoid, Et as scoped$4, F as ensuring$2, Fi as fromIterable, Fn as join$3, Fr as map$3, Ft as tryMap, G as forkIn, Gi as none, Gn as TypeId$10, Gr as whenEffect, Gt as zipLeft, H as fnUntraced, Hi as isSome, Hn as modify$1, Hr as uninterruptible, Ht as when, I as exit, Ii as splitAt, In as sequential, Ir as onInterrupt, It as tryPromise, J as ignore, Ji as left, Jn as all, Jr as DeferredTypeId$1, Jt as spaced$1, K as forkScoped, Ki as some, Kn as Class, Kr as withFiberRuntime, Kt as zipRight$3, L as fail$5, Li as filter$1, Ln as bind, Lr as scopeClose, Lt as try_, M as die$2, Mi as getOption, Mn as _await$2, Mr as interruptAsFiber, Mt as tap, N as dieMessage, Ni as omit, Nn as inheritAll$1, Nr as interruptFiber, Nt as tapErrorCause, O as catchAll$1, Oi as Reference, On as ensuring$3, Or as fiberId, Ot as serviceOption, P as either, Pi as empty$5, Pn as interruptAllAs$1, Pr as interruptible$1, Pt as timeout, Q as isEffect, Qi as BaseProto, Qn as isFailure, Qr as ids, Qt as mergeAll$2, R as failCause$4, Ri as flatMap$5, Rn as bindTo, Rr as succeed$4, Rt as uninterruptible$1, S as addFinalizer$1, Si as takeRight, Sn as isDieType, Sr as exitAs, St as runtime, T as as, Ti as unsafeGet, Tn as map$6, Tr as exitSucceed, Tt as scopeWith, U as forEach$2, Ui as map$8, Un as set$1, Ur as uninterruptibleMask$1, Ut as withFiberRuntime$1, V as flatten$4, Vi as isNone, Vn as make$16, Vr as tap$1, Vt as unsafeMakeSemaphore$1, W as forkDaemon, Wi as match$4, Wn as update$1, Wr as void_$2, Wt as zip$1, X as interruptible, Xi as right, Xn as fail$4, Xr as combine, Xt as tagged, Y as interrupt$4, Yi as match$2, Yn as die, Yr as empty$6, Yt as TaggedError$1, Z as intoDeferred, Zi as pipeArguments, Zn as failCause$3, Zr as combineAll, Zt as fromEffect$5, _ as decodeSync, _i as of, _n as fail$3, _r as deferredIsDone, _t as raceWith, a as Literal, aa as constTrue, ai as size$2, an as updateContext$1, ar as zipRight$2, at as matchCause, b as acquireRelease, bi as reverse, bn as interrupt$3, br as deferredUnsafeDone, bt as runPromise, c as String$, ca as dual, ci as append$1, cn as Scope, cr as asyncInterrupt, ct as negate, d as Union, di as empty$4, dn as close, dr as deferredAwait, dt as orElse, ea as format, ei as none$1, en as provideMerge$1, er as mapBoth, et as makeSemaphore, f as between, fi as filter, fn as extend, fr as deferredComplete, ft as orElseSucceed, gi as map$7, gn as die$1, gr as deferredInterruptWith, gt as race, hi as isEmpty$2, hn as NoSuchElementException, hr as deferredInterrupt, ht as provideService, i as Defect, ia as constFalse, ii as has, in as unsafeRunPromiseExit, ir as zip$2, it as match$5, j as catchTag, ji as get$5, jn as scopeTag, jr as interrupt$2, jt as sync$2, k as catchAllCause, ki as Tag, kn as forEachConcurrentDiscard, kr as fiberRefLocally, kt as succeed$6, l as Struct, la as identity, li as appendAll, ln as addFinalizer, lr as catchAll, lt as onError, m as optional$1, mi as isChunk, mn as make$18, mr as deferredFailCause, mt as provide$2, n as Boolean$, na as equals, ni as make$17, nn as succeed$3, nr as succeed$5, nt as mapBoth$1, o as Never, oa as constUndefined, oi as decode, on as forkIn$1, or as as$1, ot as matchCauseEffect, p as decodeUnknown, pi as fromIterable$1, pn as fork, pr as deferredFail, pt as promise, q as gen, qi as isLeft, qn as spanTag, qr as zipRight$1, qt as zipWith, r as Cause, ra as hasProperty, ri as set$2, rn as unsafeFork, rr as void_$3, rt as mapError, s as Number$, sa as constVoid, si as isFinite, sn as unsafeMakeSemaphore, sr as asVoid, st as matchEffect, t as Array$, ta as toJSON, ti as get$4, tn as scoped$3, tr as match$3, tt as map$4, u as TaggedError, ua as pipe, ui as drop, un as addFinalizerExit, ur as currentContext$1, ut as orDie, v as encodeSync, vi as prepend, vn as failureOrCause, vr as deferredMake, vt as repeat, w as annotateLogs, wi as unsafeFromArray, wn as isInterruptedOnly, wr as exitFailCause, wt as scope, x as acquireUseRelease$2, xi as take$2, xn as interruptors, xr as deferredUnsafeMake, xt as runPromiseExit$1, y as _void, yi as reduce, yn as flipCauseOption, yr as deferredSucceed, yt as retry, z as fiberIdWith, zi as fromNullable, zn as sleep, zr as suspend$4, zt as uninterruptibleMask } from "./chunks/Schema-DO5ttJaI.mjs";
 import { createRequire } from "node:module";
 import * as Crypto from "node:crypto";
 import { createHash } from "node:crypto";
@@ -6097,13 +6097,28 @@ const restorability = (git, headHash, tipHash) => gen(function* () {
 });
 //#endregion
 //#region src/flags/index.ts
-const FLAGS$1 = [];
+const FLAGS$1 = [{
+	name: "naive_pass",
+	owner: "pmelab",
+	expiry: "2027-01-15",
+	kind: "release"
+}, {
+	name: "risk_tier",
+	owner: "pmelab",
+	expiry: "2027-01-15",
+	kind: "release"
+}];
 const BOOL = {
 	"0": false,
 	false: false,
 	"1": true,
 	true: true
 };
+/** A `flag_<name>` setting's value as the pinned `"1"`/`"0"`, or undefined when garbled. */
+const flagSettingValue = (raw) => {
+	const key = raw.toLowerCase();
+	return Object.hasOwn(BOOL, key) ? BOOL[key] ? "1" : "0" : void 0;
+};
 const resolveFlags = (env, registry = FLAGS$1) => {
 	const out = {};
 	for (const { name, defaultOn } of registry) {
@@ -6118,6 +6133,7 @@ const resolveFlags = (env, registry = FLAGS$1) => {
 	}
 	return out;
 };
+const flagSettings = (flags) => Object.fromEntries(Object.entries(flags).map(([name, on]) => [`flag_${name}`, on ? "1" : "0"]));
 //#endregion
 //#region src/install/Version.ts
 const _require = createRequire(import.meta.url);
@@ -6920,6 +6936,7 @@ const isRecordableApproval = (approval) => {
 	const back = decodeApproval(encodeApproval(approval));
 	return back !== void 0 && encodeApproval(back) === encodeApproval(approval);
 };
+const MARK_RE = /^([a-z][a-z0-9-]*)=(.+)$/;
 const FORMAT_RE = /^[1-9][0-9]*$/;
 const HASH_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
 const TRAILER_READERS = {
@@ -6933,6 +6950,13 @@ const TRAILER_READERS = {
 		const parsed = parseJson(value);
 		if (isVerdict(parsed)) into.judge.push(parsed);
 	},
+	"Gtd-Mark": (value, into) => {
+		const kv = MARK_RE.exec(value);
+		if (kv !== null && !CONTROL_CHARACTER$1.test(value)) into.marks.push({
+			name: kv[1],
+			value: kv[2]
+		});
+	},
 	"Gtd-Var": (value, into) => {
 		const kv = VAR_RE.exec(value);
 		if (kv !== null) into.vars[kv[1]] = kv[2];
@@ -6980,6 +7004,7 @@ const parseCommitMessage = (message) => {
 		kept: void 0,
 		approved: void 0,
 		judge: [],
+		marks: [],
 		vars: {},
 		config: {},
 		cost: [],
@@ -7004,6 +7029,7 @@ const formatCommitMessage = (spec) => {
 	for (const [path, hash] of sortedEntries(spec.config)) lines.push(`Gtd-Config: ${hash} ${encodePath(path)}`);
 	if (spec.cost !== void 0) lines.push(`Gtd-Cost: ${spec.cost.cost}${spec.cost.model !== void 0 ? ` ${spec.cost.model}` : ""}`);
 	for (const verdict of spec.judge ?? []) lines.push(`Gtd-Judge: ${JSON.stringify(verdict)}`);
+	for (const m of spec.marks ?? []) lines.push(`Gtd-Mark: ${m.name}=${m.value}`);
 	if (spec.approved !== void 0) lines.push(`Gtd-Approved: ${encodeApproval(spec.approved)}`);
 	if (spec.branch !== void 0) lines.push(`Gtd-Branch: ${spec.branch}`);
 	if (spec.version !== void 0) lines.push(`Gtd-Version: ${spec.version}`);
@@ -7137,6 +7163,7 @@ const replay = async (input) => {
 	const trace = [];
 	const keptTips = /* @__PURE__ */ new Map();
 	let landed;
+	const marks = [];
 	let outcome;
 	let signal;
 	const settled = new Promise((resolve) => {
@@ -7342,7 +7369,8 @@ const replay = async (input) => {
 			kind: "rest",
 			rest: step,
 			trace,
-			landed
+			landed,
+			marks
 		});
 		return landPending(step, input.pending);
 	};
@@ -7380,7 +7408,8 @@ const replay = async (input) => {
 		kind: "ended",
 		via,
 		trace,
-		landed
+		landed,
+		marks
 	};
 	const changesSince = (hash) => {
 		const tree = treeAt(hash);
@@ -7438,6 +7467,12 @@ const replay = async (input) => {
 				faults: findings.filter((f) => f.message.startsWith(`Code thread at ${c.path}:${t.line + 1}: `)).map((f) => f.message)
 			}));
 		}),
+		mark: (name, value) => {
+			if (pendingUsed) marks.push({
+				name,
+				value
+			});
+		},
 		kept: (name) => {
 			const tip = keptTips.get(scoped(name));
 			return tip === void 0 ? void 0 : {
@@ -7533,6 +7568,8 @@ const compileConfig = (value, origin) => {
 //#endregion
 //#region src/workflow/vars.ts
 const PREFIX = "GTD_";
+/** The live release flags as `flag_<name>` settings, provided by the CLI; absent means no flags. */
+var StartFlags = class extends Reference()("StartFlags", { defaultValue: () => ({}) }) {};
 /**
 * One kind of setting, later wins: the workflow's own defaults, `--var`
 * overrides (process settings only; environment settings pass `{}`), then
@@ -7552,6 +7589,18 @@ const resolveVars = (workflowVars, entryVars, env) => {
 	}
 	return merged;
 };
+/**
+* `resolveVars` for a process being STARTED: `flags` land between the workflow
+* defaults and `--var`, for already-declared names only. A running process never
+* calls this — it replays its pinned record.
+*/
+const resolveStartVars = (workflowVars, flags, entryVars, env) => {
+	const declared = Object.fromEntries(Object.entries(flags).filter(([name]) => Object.hasOwn(workflowVars, name)));
+	return resolveVars({
+		...workflowVars,
+		...declared
+	}, entryVars, env);
+};
 /** The first process setting whose value spans lines — a `Gtd-Var:` trailer cannot carry it. */
 const multilineSetting = (vars) => Object.keys(vars).sort().find((name) => /[\r\n]/.test(vars[name]));
 const SETTING_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
@@ -8480,7 +8529,7 @@ const planStart = (current, actor, start) => gen(function* () {
 	const overrideRefusal = yield* checkOverrides(commandLabel, varOverrides, Object.keys(workflow.vars), Object.keys(workflow.env));
 	if (overrideRefusal !== void 0) return overrideRefusal;
 	const baseOf = workflow.def.base;
-	const vars = resolveVars(workflow.vars, varOverrides, (yield* Host).env);
+	const vars = resolveStartVars(workflow.vars, yield* StartFlags, varOverrides, (yield* Host).env);
 	const multiline = multilineSetting(vars);
 	if (multiline !== void 0) return refusal(`${commandLabel}: process setting "${multiline}" spans several lines — a process setting is pinned in a commit trailer and must be a single line`);
 	const template = yield* try_({
@@ -8639,6 +8688,7 @@ const buildRun = (history, location, closingHash) => {
 		trace: processCommits.map((c, i) => traceEntryOf(c.hash, parsed[i])),
 		costEntries: parsed.flatMap(costEntriesOf),
 		judgeVerdicts: parsed.flatMap((m) => m.judge),
+		marks: parsed.flatMap((m) => m.marks),
 		approvals: processCommits.flatMap((c, i) => approvalEntryOf(c.hash, parsed[i])),
 		pinnedVars: { ...first?.vars },
 		pinnedConfig: pinnedConfigOf(history.slice(Math.max(location.baseIndex, 0))),
@@ -8828,9 +8878,9 @@ const pendingTree = (workspace, entries, rewrite) => {
 * are always live. `startOverrides` are `--var` values, passed only while a
 * process is being started.
 */
-const settingsFor = (workflow, pinnedVars, hostEnv, startOverrides = {}) => ({
+const settingsFor = (workflow, pinnedVars, hostEnv, startOverrides = {}, startFlags) => ({
 	vars: {
-		...resolveVars(workflow.vars, startOverrides, hostEnv),
+		...resolveStartVars(workflow.vars, startFlags, startOverrides, hostEnv),
 		...pinnedVars
 	},
 	env: resolveVars(workflow.env, {}, hostEnv)
@@ -9004,7 +9054,8 @@ const costByModel = (entries) => {
 const setupFor = (config, run, workspace, host, startOverrides = {}) => gen(function* () {
 	const resolved = yield* workflowOf(config, run);
 	const def = resolved.def;
-	const { vars, env } = settingsFor(resolved, run.pinnedVars, host.env, startOverrides);
+	const startFlags = run.trace.length === 0 ? yield* StartFlags : {};
+	const { vars, env } = settingsFor(resolved, run.pinnedVars, host.env, startOverrides, startFlags);
 	const skills = yield* resolveScopeSkills(def, vars);
 	const access = yield* resolveScopeAccess(def, skills, vars);
 	const budget = yield* try_({
@@ -9114,7 +9165,7 @@ const currentRest = restAt(void 0);
 */
 const startRefusal = (rest, resolved, startVars) => gen(function* () {
 	const host = yield* Host;
-	const { vars, env } = settingsFor(resolved, {}, host.env, startVars);
+	const { vars, env } = settingsFor(resolved, {}, host.env, startVars, yield* StartFlags);
 	const skills = yield* resolveScopeSkills(resolved.def, vars);
 	const access = yield* resolveScopeAccess(resolved.def, skills, vars);
 	const workspace = rest.setup.workspace;
@@ -9239,7 +9290,7 @@ const approvedTrailer = (rest, approver) => isSome(approver) ? { approved: {
 	step: rest.step.id,
 	...approver.value
 } } : {};
-const landingTo = (rest, to, branch, approver) => {
+const landingTo = (rest, to, branch, approver, marks) => {
 	if (isSettledNoop(rest, to)) return {
 		kind: "noop",
 		settled: true
@@ -9257,17 +9308,20 @@ const landingTo = (rest, to, branch, approver) => {
 			from: rest.state,
 			to,
 			step: rest.step.id,
+			...marks.length > 0 && { marks },
 			...approvedTrailer(rest, approver),
-			...starts ? {
-				vars: rest.vars,
-				config: rest.config
-			} : {},
+			...startTrailers(rest, starts),
 			...finishes ? closingTrailers(branch) : {}
 		},
 		...finishes ? { keepHistory: processHistoryRef(rest.run.startHash) } : {},
 		...keptTurn(rest)
 	};
 };
+const startTrailers = (rest, starts) => starts ? {
+	vars: rest.vars,
+	config: rest.config
+} : {};
+const outcomeMarks = (outcome) => outcome.kind === "rest" || outcome.kind === "ended" ? outcome.marks : [];
 /**
 * What landing the pending turn at `rest` does — a pure decision from a
 * replay with the working tree as the pending turn. The target step is
@@ -9291,7 +9345,7 @@ const decideLanding = (rest, verdicts, branch, approver) => gen(function* () {
 	}));
 	const to = yield* landingTarget(outcome, rest);
 	if (typeof to !== "string") return to;
-	return landingTo(rest, to, branch, approver);
+	return landingTo(rest, to, branch, approver, outcomeMarks(outcome));
 });
 /** Where landing the pending turn would leave the process, or `undefined` when it would land nothing. */
 const previewLanding = (rest) => decideLanding(rest, void 0, none(), none()).pipe(map$4((landing) => landing.kind === "commit" ? landing.to : void 0), catchAll$1(() => succeed$6(void 0)));
@@ -9328,7 +9382,8 @@ const summaryFor = (run) => gen(function* () {
 		})),
 		processCost: run.costEntries.reduce((sum, entry) => sum + entry.cost, 0),
 		processCostByModel: costByModel(run.costEntries),
-		...settingsFor(resolved, run.pinnedVars, host.env)
+		marks: run.marks,
+		...settingsFor(resolved, run.pinnedVars, host.env, {}, {})
 	});
 });
 /** Repository-relative paths of the config files today's config and the process's own record name; one outside the repository cannot be read at a ref, so it is left out. */
@@ -10800,6 +10855,12 @@ const FLAGS = [
 				if (/[\r\n]/.test(value)) return left(`gtd: --var ${name} must be a single-line value`);
 				if (seen.has(name)) return left(`gtd: --var ${name} specified more than once`);
 				seen.add(name);
+				if (name.startsWith("flag_")) {
+					const pinned = flagSettingValue(value);
+					if (pinned === void 0) return left(`gtd: --var ${name} must be 1, 0, true or false`);
+					vars[name] = pinned;
+					continue;
+				}
 				vars[name] = value;
 			}
 			return right(vars);
@@ -11624,7 +11685,7 @@ const runCli = (argv, io) => {
 	return flatMap$4(Host, ({ env }) => try_({
 		try: () => resolveFlags(env, io.flags),
 		catch: (e) => new GtdError(e.message)
-	})).pipe(flatMap$4(() => runCommand$1(plan.command, plan.json, out)), map$4((code) => {
+	})).pipe(flatMap$4((flags) => runCommand$1(plan.command, plan.json, out).pipe(provideService(StartFlags, flagSettings(flags)))), map$4((code) => {
 		out.flush();
 		io.exit(code);
 	}), provide$2(io.layers(plan.verbose)), sandbox, catchAll$1((cause) => isInterruptedOnly(cause) ? failCause$4(cause) : report(io, plan.json.kind !== "off")(cause)));
@@ -13376,7 +13437,8 @@ const testRepo = (options) => {
 			}
 			throw new Error(`the process did not rest within ${maxBeats} beats`);
 		},
-		subjects: () => repo.commitHistory().map(({ message }) => message.split("\n")[0] ?? "")
+		subjects: () => repo.commitHistory().map(({ message }) => message.split("\n")[0] ?? ""),
+		messages: () => repo.commitHistory().map(({ message }) => message)
 	};
 	return self;
 };

package/dist/workflows/cleanup.mjs

@@ -1,6 +1,6 @@
 import { agent, changes, glob, read, refuse, scope, start, vars } from "../flows.mjs";
-import { a as flagShipped, b as coder, c as envDefaults, i as skills, n as summary, r as access, s as defaults, t as steering } from "../chunks/reserved-BPdVZkgv.mjs";
-import { i as refusePendingHandOff, r as handOffTail } from "../chunks/tail-iLAMoigl.mjs";
+import { a as flagShipped, b as coder, c as envDefaults, i as skills, n as summary, r as access, s as defaults, t as steering } from "../chunks/reserved-Df8GeSHw.mjs";
+import { i as refusePendingHandOff, r as handOffTail } from "../chunks/tail-DmIfEAI4.mjs";
 import { i as requireFlag, r as registryEntry, t as flagReferences } from "../chunks/registry-CP3YuV9j.mjs";
 //#region src/workflows/cleanup/cleanup.ts
 const removingPrompt = (name, registry) => `Clean up the release flag "${name}", which is default-on: delete its entry in ${registry}, and remove every \`GTD_FLAG_${name.toUpperCase()}\` check from the shipped sources. Keep the flag-on path; delete code only the off path reached, including tests that pin the off path.`;

package/dist/workflows/feature.mjs

@@ -1,10 +1,60 @@
-import { answered, changes, changesSince, glob, hasThreadFor, head, human, judge, numeric, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restoreScript, revertScript, run, scope, start, vars } from "../flows.mjs";
+import { answered, changes, changesSince, glob, hasThreadFor, head, human, judge, judgeDiffShape, kept, mark, numeric, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restoreScript, revertScript, run, scope, seamGate, start, vars } from "../flows.mjs";
 import { review as review$1 } from "../workflow-kit.mjs";
-import { A as architectureAuthorPrompt, B as designGateAnswerMessage, C as fixRisks, D as reviewing, F as buildReviewCollectingPrompt, H as designTriagePrompt, I as buildReviewFixNitsPrompt, J as packagesItemFixSuitePrompt, K as idleMessage, L as buildReviewTriageMessage, M as architectureGateAnswerMessage, N as buildReviewAnswerQuestionsPrompt, O as agentWithSkills, P as buildReviewAwaitAfterDeferMessage, Q as reviewEditsCapture, R as builderSystem, T as reviewMissing, V as designSystem, X as refactorFixPrompt, Y as refactorBuildingPrompt, Z as reviewEditNotesCapture, _ as REQUIREMENTS, b as coder, c as envDefaults, d as gate, et as reviewNotesCapture, h as FEEDBACK, i as skills, it as unwindFailure, j as architectureDecomposePrompt, k as architectSystem, m as ARCHITECTURE, n as summary, nt as startGateBlockedMessage, o as shipped, p as healthy, q as packagesItemBuildingPrompt, r as access, rt as unwindFailedMessage, s as defaults, t as steering, tt as reviewerSystem, v as REVIEW, w as planner, x as fixCheck, y as awaitReview, z as deferNotesScript } from "../chunks/reserved-BPdVZkgv.mjs";
-import { a as tail, i as refusePendingHandOff, n as closeReview } from "../chunks/tail-iLAMoigl.mjs";
+import { $ as refactorFixPrompt, A as architectureAuthorPrompt, B as designGateAnswerMessage, C as fixRisks, D as reviewing, F as buildReviewCollectingPrompt, H as designTriagePrompt, I as buildReviewFixNitsPrompt, J as implementFixPrompt, K as idleMessage, L as buildReviewTriageMessage, M as architectureGateAnswerMessage, N as buildReviewAnswerQuestionsPrompt, O as agentWithSkills, P as buildReviewAwaitAfterDeferMessage, Q as refactorBuildingPrompt, R as builderSystem, T as reviewMissing, V as designSystem, X as packagesItemBuildingPrompt, Y as naivePassPrompt, Z as packagesItemFixSuitePrompt, _ as REQUIREMENTS, at as seamByHandMessage, b as coder, c as envDefaults, ct as unwindFailedMessage, d as gate, et as reviewEditNotesCapture, h as FEEDBACK, i as skills, it as reviewerSystem, j as architectureDecomposePrompt, k as architectSystem, lt as unwindFailure, m as ARCHITECTURE, n as summary, o as shipped, ot as seamSteerMessage, p as healthy, q as implementBuildingPrompt, r as access, rt as reviewNotesCapture, s as defaults, st as startGateBlockedMessage, t as steering, tt as reviewEditsCapture, v as REVIEW, w as planner, x as fixCheck, y as awaitReview, z as deferNotesScript } from "../chunks/reserved-Df8GeSHw.mjs";
+import { a as tail, i as refusePendingHandOff, n as closeReview } from "../chunks/tail-DmIfEAI4.mjs";
+//#region src/workflows/feature/tier.ts
+/** GTD_FLAG_NAIVE_PASS, GTD_FLAG_RISK_TIER: both pinned at process start, so a mid-process flip never moves a process. */
+const riskTierOn = () => vars.flag_naive_pass === "1" && vars.flag_risk_tier === "1";
+const markFenced = (text) => {
+	let fence;
+	return text.split(/\r?\n/).map((line) => {
+		const run = /^ {0,3}(`{3,}|~{3,})/.exec(line)?.[1];
+		const fenced = fence !== void 0 || run !== void 0;
+		if (fence === void 0) fence = run;
+		else if (run !== void 0 && run[0] === fence[0] && run.length >= fence.length && /^ {0,3}(`+|~+)[ \t]*$/.test(line)) fence = void 0;
+		return {
+			line,
+			fenced
+		};
+	});
+};
+const sectionLines = (text, title) => {
+	if (text === void 0) return [];
+	const heading = new RegExp(`^##[ \\t]+${title}[ \\t]*$`, "i");
+	const lines = markFenced(text);
+	const start = lines.findIndex((l) => !l.fenced && heading.test(l.line));
+	if (start < 0) return [];
+	const rest = lines.slice(start + 1);
+	const end = rest.findIndex((l) => !l.fenced && /^#{1,2}[ \t]/.test(l.line));
+	return end < 0 ? rest : rest.slice(0, end);
+};
+/** Anything but a legible `low` is `high`: under-tiering is the risky direction. */
+const readRiskTier = (requirements) => {
+	return (sectionLines(requirements, "Risk Tier").find((l) => !l.fenced && l.line.trim() !== "")?.line)?.trim().split(/\s+/)[0]?.replace(/[`*_]/g, "").toLowerCase() === "low" ? "low" : "high";
+};
+const CONTROL = /[\x00-\x1f\x7f-\x9f\u2028\u2029]/g;
+const tidy = (text) => text.replace(/\s+/g, " ").replace(CONTROL, "").trim();
+const productionSignals = (requirements) => {
+	const items = [];
+	for (const { line, fenced } of sectionLines(requirements, "Production Signals")) {
+		if (fenced) continue;
+		const top = /^[-*+][ \t]+(.*)$/.exec(line);
+		if (top !== null) items.push(top[1]);
+	}
+	return items.map(tidy).filter((item) => item !== "");
+};
+/** The tier is always marked, first, so the last `risk-tier` mark opens the current lap's marks. */
+const recordRisk = () => {
+	const requirements = read(REQUIREMENTS);
+	const tier = readRiskTier(requirements);
+	mark("risk-tier", tier);
+	for (const signal of productionSignals(requirements)) mark("production-signal", signal);
+	return tier;
+};
+//#endregion
 //#region src/workflows/feature/steps.ts
 /** Turn the sketch since `base` into `.gtd/REQUIREMENTS.md`. */
-const triage = (base) => agentWithSkills("triage", designTriagePrompt(base), {
+const triage = (base) => agentWithSkills("triage", designTriagePrompt(base, riskTierOn()), {
 	label: "Triaging the change",
 	file: REQUIREMENTS,
 	mode: "qa",
@@ -24,7 +74,7 @@ const decompose = () => agentWithSkills("decompose.decomposing", architectureDec
 	system: architectSystem()
 });
 const answerProductQuestions = () => human("gate.answer", {
-	message: designGateAnswerMessage(),
+	message: designGateAnswerMessage(riskTierOn()),
 	label: "Awaiting your product answers",
 	file: REQUIREMENTS,
 	mode: "qa",
@@ -345,66 +395,6 @@ const review = (base, escalations = { rounds: 0 }) => {
 /** The build tail: fix (when entered red), keep green unless `green`, the quality lap, then human review since `base`. */
 const buildTail = (fixFirst, base, green = false) => tail(fixFirst, (escalations) => review(base, escalations), green);
 //#endregion
-//#region src/workflows/feature/feature.ts
-/** Revert the sketch that started the process out of the working tree; its intent survives in history. */
-const unwind = () => {
-	const commit = head();
-	return run("unwind", revertScript(commit, FEEDBACK, unwindFailure(commit)), { label: "Unwinding your input" });
-};
-/**
-* Undo the human's review-round code edits. A path changed since the human
-* left it is not overwritten; requireRevert names it instead.
-*/
-const reUnwind = async (feedback) => {
-	const { base, restoreFrom, edited } = feedback;
-	await run("re-unwind", restoreScript(base, {
-		restore: edited.filter((c) => c.status !== "added").map((c) => c.path),
-		remove: edited.filter((c) => c.status === "added").map((c) => c.path)
-	}, restoreFrom), {
-		label: "Re-unwinding your review edit",
-		file: REVIEW,
-		base
-	});
-	requireRevert(edited, base);
-};
-/** Plan, build and review until a review round signs off; feedback re-plans from scratch. */
-const planAndBuild = async (firstBase) => {
-	let base = firstBase;
-	for (;;) {
-		await design(base);
-		await architecture();
-		await packages();
-		const outcome = await buildTail(false, base, true);
-		if (outcome.verdict === "signoff") return;
-		await reUnwind(outcome);
-		base = outcome.base;
-	}
-};
-/** After a tail that skipped planning: stop on sign-off, re-plan on feedback. */
-const afterTail = async (outcome) => {
-	if (outcome.verdict === "signoff") return;
-	await reUnwind(outcome);
-	await planAndBuild(outcome.base);
-};
-/** An ordinary start: wait at `idle`, unwind the sketch, check the baseline, then plan and build. */
-const ordinaryStart = async () => {
-	await human("idle", {
-		message: idleMessage(),
-		label: "Idle",
-		file: ".gtd/TODO.md"
-	});
-	refusePendingHandOff();
-	await unwind();
-	if (changes(".gtd/FEEDBACK.md").some((c) => c.status !== "deleted")) await human("unwind-failed", {
-		message: unwindFailedMessage(),
-		label: "Could not unwind your input",
-		file: FEEDBACK
-	});
-	await gate("start-gate", startGateBlockedMessage());
-	await planAndBuild(start());
-};
-const feature = shipped(ordinaryStart);
-//#endregion
 //#region src/workflows/feature/refactor.ts
 const REFACTOR_PACKAGE = ".gtd/REFACTOR.md";
 const isCode = (path) => path !== ".gtd" && !path.startsWith(".gtd/");
@@ -518,7 +508,144 @@ const refactorFirst = async (shape, options = {}) => {
 	});
 };
 //#endregion
+//#region src/workflows/feature/seam.ts
+/** Naive-pass retries after a `reject`; the next `reject` rests at `seam.steer`. */
+const NAIVE_RETRIES = 2;
+/** A change to an existing file outside the allowlist is a stray even when the task needs it: the judge decides. */
+const judgeSeam = (tip) => judgeDiffShape("judge", {
+	changes: tip.changes,
+	allow: (vars.seamAllow ?? defaults.seamAllow).split(",").map((glob) => glob.trim()).filter((glob) => glob !== ""),
+	exempt: tip.changes.filter((c) => c.status === "added").map((c) => c.path)
+});
+const naivePass = (rejection) => agentWithSkills("naive", naivePassPrompt(rejection), {
+	label: rejection === void 0 ? "Writing the naive pass" : "Rewriting the naive pass",
+	keep: true,
+	model: coder(),
+	system: builderSystem()
+});
+const implement = (reference, tier) => scope("implement", async () => {
+	await agentWithSkills("building", implementBuildingPrompt(reference, tier), {
+		label: "Implementing",
+		model: coder(),
+		system: builderSystem()
+	});
+	await healthy(() => agentWithSkills("fix.suite.fixing", implementFixPrompt(), {
+		label: "Fixing the check",
+		file: FEEDBACK,
+		model: coder(),
+		system: builderSystem()
+	}));
+	await run("closing", removeScript([REQUIREMENTS]), { label: "Closing out the implementation" });
+});
+const decide = () => scope("seam", async () => {
+	let rejection;
+	let retries = 0;
+	for (;;) {
+		await naivePass(rejection);
+		const tip = kept("naive");
+		const shape = await judgeSeam(tip);
+		if (shape.choice === "land") return { reference: tip.hash };
+		if (shape.choice === "refactor-first") {
+			await seamGate("approve", shape);
+			return {
+				reference: tip.hash,
+				shape
+			};
+		}
+		rejection = {
+			strays: shape.strays,
+			p: shape.judgment?.answers.shape?.p ?? 0
+		};
+		if (retries < NAIVE_RETRIES) {
+			retries++;
+			continue;
+		}
+		await human("steer", {
+			message: seamSteerMessage(rejection),
+			label: "Steer or overrule the rejected naive pass",
+			file: REQUIREMENTS,
+			acceptClean: true
+		});
+		if (changes().length === 0) return { reference: tip.hash };
+		rejection = void 0;
+		retries = 0;
+	}
+});
+const seamBuild = async (tier) => {
+	const { reference, shape } = await decide();
+	if (shape !== void 0 && !await refactorFirst(shape, { reference })) await scope("seam", () => human("by-hand", {
+		message: seamByHandMessage(shape.strays, shape.unreadable, reference),
+		label: "Reviewing unreadable files by hand",
+		acceptClean: true
+	}));
+	await implement(reference, tier);
+};
+//#endregion
+//#region src/workflows/feature/feature.ts
+/** Revert the sketch that started the process out of the working tree; its intent survives in history. */
+const unwind = () => {
+	const commit = head();
+	return run("unwind", revertScript(commit, FEEDBACK, unwindFailure(commit)), { label: "Unwinding your input" });
+};
+/**
+* Undo the human's review-round code edits. A path changed since the human
+* left it is not overwritten; requireRevert names it instead.
+*/
+const reUnwind = async (feedback) => {
+	const { base, restoreFrom, edited } = feedback;
+	await run("re-unwind", restoreScript(base, {
+		restore: edited.filter((c) => c.status !== "added").map((c) => c.path),
+		remove: edited.filter((c) => c.status === "added").map((c) => c.path)
+	}, restoreFrom), {
+		label: "Re-unwinding your review edit",
+		file: REVIEW,
+		base
+	});
+	requireRevert(edited, base);
+};
+/** Plan, build and review until a review round signs off; feedback re-plans from scratch. */
+const planAndBuild = async (firstBase) => {
+	let base = firstBase;
+	for (;;) {
+		await design(base);
+		const tier = riskTierOn() ? recordRisk() : void 0;
+		if (vars.flag_naive_pass === "1") await seamBuild(tier);
+		else {
+			await architecture();
+			await packages();
+		}
+		const outcome = await buildTail(false, base, true);
+		if (outcome.verdict === "signoff") return;
+		await reUnwind(outcome);
+		base = outcome.base;
+	}
+};
+/** After a tail that skipped planning: stop on sign-off, re-plan on feedback. */
+const afterTail = async (outcome) => {
+	if (outcome.verdict === "signoff") return;
+	await reUnwind(outcome);
+	await planAndBuild(outcome.base);
+};
+/** An ordinary start: wait at `idle`, unwind the sketch, check the baseline, then plan and build. */
+const ordinaryStart = async () => {
+	await human("idle", {
+		message: idleMessage(),
+		label: "Idle",
+		file: ".gtd/TODO.md"
+	});
+	refusePendingHandOff();
+	await unwind();
+	if (changes(".gtd/FEEDBACK.md").some((c) => c.status !== "deleted")) await human("unwind-failed", {
+		message: unwindFailedMessage(),
+		label: "Could not unwind your input",
+		file: FEEDBACK
+	});
+	await gate("start-gate", startGateBlockedMessage());
+	await planAndBuild(start());
+};
+const feature = shipped(ordinaryStart);
+//#endregion
 //#region src/workflows/feature/index.ts
 var feature_default = feature;
 //#endregion
-export { REFACTOR_PACKAGE, access, afterTail, answerProductQuestions, answerReviewQuestions, answerTechnicalQuestions, architecture, author, build, buildTail, collecting, declaredTests, decompose, feature_default as default, defaults, deferNotes, design, envDefaults, feature, fixNits, fixSuite, nextPackage, ordinaryStart, packageItem, packages, planAndBuild, reUnwind, refactorFirst, requireDeclaredTests, requireNoNewFlags, requireWithin, skills, steering, summary, triage, unwind };
+export { REFACTOR_PACKAGE, access, afterTail, answerProductQuestions, answerReviewQuestions, answerTechnicalQuestions, architecture, author, build, buildTail, collecting, declaredTests, decompose, feature_default as default, defaults, deferNotes, design, envDefaults, feature, fixNits, fixSuite, implement, judgeSeam, naivePass, nextPackage, ordinaryStart, packageItem, packages, planAndBuild, reUnwind, refactorFirst, requireDeclaredTests, requireNoNewFlags, requireWithin, seamBuild, skills, steering, summary, triage, unwind };

package/dist/workflows/fix.mjs

@@ -1,7 +1,7 @@
 import { read, refuse, removeScript, run, scope, start } from "../flows.mjs";
 import { d as reviewNotes, f as reviewRisks } from "../chunks/steering-DVILanVf.mjs";
-import { O as agentWithSkills, U as finisherSystem, W as fixReviewNotesPrompt, b as coder, c as envDefaults, i as skills, l as baseline, n as summary, o as shipped, r as access, s as defaults, t as steering, v as REVIEW } from "../chunks/reserved-BPdVZkgv.mjs";
-import { r as handOffTail, t as REVIEW_ORIG } from "../chunks/tail-iLAMoigl.mjs";
+import { O as agentWithSkills, U as finisherSystem, W as fixReviewNotesPrompt, b as coder, c as envDefaults, i as skills, l as baseline, n as summary, o as shipped, r as access, s as defaults, t as steering, v as REVIEW } from "../chunks/reserved-Df8GeSHw.mjs";
+import { r as handOffTail, t as REVIEW_ORIG } from "../chunks/tail-DmIfEAI4.mjs";
 //#region src/workflows/fix/fix.ts
 /**
 * Fix every note a human left in a handed-off `.gtd/REVIEW.md` and every

package/dist/workflows/review.mjs

@@ -1,6 +1,6 @@
 import { start } from "../flows.mjs";
-import { $ as reviewGateBlockedMessage, c as envDefaults, d as gate, i as skills, n as summary, o as shipped, r as access, s as defaults, t as steering } from "../chunks/reserved-BPdVZkgv.mjs";
-import { i as refusePendingHandOff, r as handOffTail } from "../chunks/tail-iLAMoigl.mjs";
+import { c as envDefaults, d as gate, i as skills, n as summary, nt as reviewGateBlockedMessage, o as shipped, r as access, s as defaults, t as steering } from "../chunks/reserved-Df8GeSHw.mjs";
+import { i as refusePendingHandOff, r as handOffTail } from "../chunks/tail-DmIfEAI4.mjs";
 //#region src/workflows/review/review.ts
 /**
 * Pure review of everything since `reviewBase`: a green gate, the quality

package/dist/workflows/rollout.mjs

@@ -1,5 +1,5 @@
 import { agent, changesSince, head, read, refuse, scope, vars } from "../flows.mjs";
-import { a as flagShipped, b as coder, c as envDefaults, d as gate, i as skills, n as summary, r as access, s as defaults, t as steering } from "../chunks/reserved-BPdVZkgv.mjs";
+import { a as flagShipped, b as coder, c as envDefaults, d as gate, i as skills, n as summary, r as access, s as defaults, t as steering } from "../chunks/reserved-Df8GeSHw.mjs";
 import { i as requireFlag, n as flipProblems } from "../chunks/registry-CP3YuV9j.mjs";
 //#region src/workflows/rollout/rollout.ts
 const flippingPrompt = (name, registry) => `Roll out the release flag "${name}": in ${registry}, set \`defaultOn: true\` on its entry. Change nothing else — no other entry, no other field, no other file, no comments.`;