@roomi-fields/grillhouse 0.23.0 → 0.24.0

package/scripts/composants-affectes.mjs

@@ -1,21 +1,16 @@
 #!/usr/bin/env node
 // The components a realisation ticket touches, surveyed from its text, as the « affected
 // components » of a design document (an RFC of Rust, a design doc of Chromium) and the dependents
-// of a package in Turborepo (`--filter=...<paquet>`). The explorateur runs it on the draft of a
-// ticket, whose title then names these components and whose section « Architecture » says the
-// survey; the circuit (scripts/circuit.mjs) runs it again before the testwriter of the first
-// component, and stops on a component the title does not name.
+// of a package in Turborepo (`--filter=...<paquet>`). The explorateur runs it when it writes the
+// plan of a ticket (step 1 of the circuit, scripts/etapes.mjs), or on the draft of an exploration's
+// ticket: the packages of its plan name these components, the readers it changes, and its section
+// « Architecture » says the survey.
 //
 //   npx grillhouse composants-affectes <ticket>                 the ticket `bd show` gives
 //   npx grillhouse composants-affectes --description <fichier>  a draft of its description
-//   npx grillhouse composants-affectes <ticket> --admettre <composant> --raison <texte>
 //
 // prints the survey (`texteDuReleve`), from the repository root; for a ticket, then the components
-// its title misses, exit 1 when there is one. `--admettre` admits out of the title a component the
-// survey finds and the ticket does not change (the explorateur at the creation of the ticket, or
-// the supervisor): kept in the ticket's record, its reason written at the ticket
-// (`Composants · <composant> admis hors du titre : <raison>`); a component the repository does not
-// hold, or no reason, is refused, exit 2.
+// its title misses, exit 1 when there is one.
 //
 // - The text read is the ticket's section « Architecture » and its section of criteria (a `##`
 //   heading that begins with « Critères »), each up to the next `##` heading; the rest of the
@@ -44,7 +39,7 @@
 //   package it changes. A survey by the types that cannot run says why, and the survey stands on
 //   the names; a name the types resolve is no longer set apart.
 // - By the paths read (`lit`): each component whose tests declare they read a path
-//   (`grillhouse.lit` of its package.json, `cheminsLus` of scripts/enveloppe/enveloppe.mjs) that a
+//   (`grillhouse.lit` of its package.json and the `lit` of its traces, `cheminsLus`) that a
 //   path the ticket changes holds or lies in: a path of the repository the sections write (its
 //   `:<line>` left out), or the folder of a component they name.
 // - By the architecture: the items of the « Rend » of the `docs/CADRE.md` of each component that
@@ -54,11 +49,7 @@
 // - The components of the survey go in the title's order, the provider first: each one after
 //   every component it reads among them (its imports, the providers of the elements it reads), in
 //   the order of their names otherwise.
-// - The record of a ticket's survey, beside its copy (`.claude/worktrees/<ticket>.composants.json`
-//   under the main tree), holds the missing components of the circuit's last check and the
-//   components admitted out of the title, by `--admettre` or by the supervisor's answer to a stop
-//   (`repondre`): an admitted component is no longer missing.
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { existsSync, readFileSync } from 'node:fs';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { spawnSync } from 'node:child_process';
@@ -71,11 +62,28 @@ import {
   parcourir,
   utilise,
 } from './consommateurs.mjs';
-import { cheminsLus } from './enveloppe/enveloppe.mjs';
 import { lire } from './index-interfaces.mjs';
 import { elementsEcrits, parLesTypes } from './references-par-les-types.mjs';
 
 const DOSSIERS_DE_TEST = new Set(['test', 'tests', '__tests__']);
+
+/**
+ * The paths that the tests of the package at <dir> declare they read: its `grillhouse.lit`, then
+ * the `lit` of each trace it declares (`grillhouse.traces`), each path from the root; none without
+ * a package.json or a declaration.
+ * @param {string} dir the directory of the package
+ * @returns {string[]}
+ */
+export function cheminsLus(dir) {
+  const manifeste = path.join(dir, 'package.json');
+  if (!existsSync(manifeste)) return [];
+  const { grillhouse } = JSON.parse(readFileSync(manifeste, 'utf8'));
+  const liste = v => (Array.isArray(v) ? v.filter(l => typeof l === 'string') : []);
+  return [
+    ...liste(grillhouse?.lit),
+    ...Object.values(grillhouse?.traces ?? {}).flatMap(t => liste(t?.lit)),
+  ];
+}
 const SAUTES = new Set(['node_modules', 'dist', 'build', 'coverage']);
 const SOURCE = /\.[cm]?[jt]sx?$/;
 
@@ -384,42 +392,11 @@ function rendus(c) {
   return out;
 }
 
-// The record of a ticket's survey beside its copy (<fichier>): `{ manquants, admis, reponses }`,
-// the components the last survey found missing, those the supervisor answered for, and his
-// answers; empty without it.
-function lireGarde(fichier) {
-  try {
-    const g = JSON.parse(readFileSync(fichier, 'utf8'));
-    return { manquants: g.manquants ?? [], admis: g.admis ?? [], reponses: g.reponses ?? [] };
-  } catch {
-    return { manquants: [], admis: [], reponses: [] };
-  }
-}
-function ecrireGarde(fichier, g) {
-  mkdirSync(path.dirname(fichier), { recursive: true });
-  writeFileSync(fichier, `${JSON.stringify(g, null, 2)}\n`);
-}
-
-// The components the supervisor answered for, kept in <fichier>.
-const admis = fichier => lireGarde(fichier).admis;
-
-// Keeps in <fichier> the components <liste> the supervisor answered for, with his answer.
-export function admettre(fichier, liste, reponse) {
-  const g = lireGarde(fichier);
-  ecrireGarde(fichier, {
-    ...g,
-    manquants: g.manquants.filter(c => !liste.includes(c)),
-    admis: [...new Set([...g.admis, ...liste])],
-    reponses: [...g.reponses, { date: new Date().toISOString(), composants: liste, reponse }],
-  });
-}
-
 // The components of the survey <r> the title <titre> does not name (its components as written,
-// package names or paths, or `.`), nor the answers kept in <fichier>, in the survey's order.
-export function manquants(racine, r, titre, fichier = null) {
+// package names or paths, or `.`), in the survey's order.
+export function manquants(racine, r, titre) {
   if (titre.includes('.')) return [];
   const tous = lesComposants(racine);
-  const garde = new Set(fichier ? admis(fichier) : []);
   const couvre = c => {
     const rel = path.relative(racine, c.dir).split(path.sep).join('/');
     return titre.some(t => {
@@ -428,39 +405,11 @@ export function manquants(racine, r, titre, fichier = null) {
     });
   };
   return r.composants.filter(nom => {
-    if (garde.has(nom)) return false;
     const c = tous.find(x => nomAuTitre(racine, x) === nom);
     return !c || !couvre(c);
   });
 }
 
-// The check of the circuit before the testwriter of the first component: the survey of
-// <description> in <racine> against the title's components <titre>, the missing ones kept in
-// <fichier>. `{ manquants, rapport, releve }`, the report opening on the missing components (null
-// without one), the survey as the section « Architecture » says it, which the questionneur reads.
-export function verifierLeTitre({ racine, ticket, description, titre, fichier }) {
-  const r = releve(racine, description);
-  const liste = manquants(racine, r, titre, fichier);
-  ecrireGarde(fichier, { ...lireGarde(fichier), manquants: liste });
-  if (!liste.length) return { manquants: [], rapport: null, releve: texteDuReleve(r) };
-  const rapport = [
-    `Composants manquants au titre : ${liste.join(', ')}.`,
-    '',
-    texteDuReleve(r),
-    '',
-    `Le superviseur ajoute chacun au titre, le fournisseur d'abord (\`bd update ${ticket} --title "…"\`), puis relance le circuit ; ou il répond pourquoi il reste dehors : \`npx grillhouse circuit ${ticket} --reponse "<texte>"\`.`,
-  ].join('\n');
-  return { manquants: liste, rapport, releve: texteDuReleve(r) };
-}
-
-// The supervisor's answer <reponse> to the missing components kept in <fichier>: they pass from
-// then on. The components answered for, in their order.
-export function repondre(fichier, reponse) {
-  const { manquants: liste } = lireGarde(fichier);
-  admettre(fichier, liste, reponse);
-  return liste;
-}
-
 // The survey <r> as the section « Architecture » says it, in Markdown.
 export function texteDuReleve(r) {
   const out = [
@@ -515,34 +464,6 @@ export function texteDuReleve(r) {
   return out.join('\n');
 }
 
-// The admission of <nom> out of the title of <ticket>, its reason after `--raison` in <args>: its
-// exit code.
-function admettreAuTicket(racine, ticket, nom, args) {
-  const r = args.indexOf('--raison');
-  const raison = r >= 0 ? args[r + 1]?.trim() : '';
-  const c = lesComposants(racine).find(
-    x => x.paquet === nom || path.relative(racine, x.dir) === path.normalize(nom ?? '')
-  );
-  if (!c || !raison) {
-    process.stderr.write(
-      `⛔ ${!c ? `${nom ?? '(aucun)'} : aucun composant de ce nom` : '--raison manque'}.\n` +
-        'usage: npx grillhouse composants-affectes <ticket> --admettre <composant> --raison <texte>\n'
-    );
-    return 2;
-  }
-  const titre = nomAuTitre(racine, c);
-  admettre(path.join(racine, '.claude', 'worktrees', `${ticket}.composants.json`), [titre], raison);
-  const texte = `Composants · ${titre} admis hors du titre : ${raison}`;
-  const bd = spawnSync('bd', ['comments', 'add', ticket, texte], {
-    cwd: racine,
-    encoding: 'utf8',
-    maxBuffer: 256 * 1024 * 1024,
-  });
-  if (bd.status !== 0) process.stderr.write(`⚠️  ligne non écrite au ticket : ${bd.stderr}\n`);
-  process.stdout.write(`${texte}\n`);
-  return 0;
-}
-
 // The command: its exit code.
 function commande(racine, args) {
   const i = args.indexOf('--description');
@@ -556,8 +477,6 @@ function commande(racine, args) {
     return 0;
   }
   const [ticket] = args;
-  const a = args.indexOf('--admettre');
-  if (ticket && a >= 0) return admettreAuTicket(racine, ticket, args[a + 1], args);
   if (!ticket) {
     process.stderr.write(
       'usage: npx grillhouse composants-affectes <ticket> | --description <fichier>\n'

package/scripts/consommateurs-arbitres.mjs

@@ -6,16 +6,16 @@
 //   npx grillhouse consommateurs-arbitres   run from the repository root (a guard of grillhouse:gardes)
 //
 // - It judges the copy it runs in, on the branch `agent/<ticket>`: for each component the guards
-//   judge (`aVerifier` of scripts/interfaces-contre-code.mjs; in the envelope of a component,
-//   `GRILLHOUSE_ENVELOPPE`, that component alone), each list line (`- …`) of the `## Consommateurs`
-//   section of its `docs/INTERFACE.md` in the working tree that the section of HEAD does not hold
-//   is a changed line (an interface absent from HEAD: all its lines). Out of a branch `agent/…`
-//   (main, the detached copy of the integration, the CI, the night), there is no lot: nothing is
-//   judged.
+//   judge (`aVerifier` of scripts/interfaces-contre-code.mjs; in an envelope,
+//   `GRILLHOUSE_ENVELOPPE`, the components of its plan), each list line (`- …`) of the
+//   `## Consommateurs` section of its `docs/INTERFACE.md` in the working tree that the section of
+//   HEAD does not hold is a changed line (an interface absent from HEAD: all its lines). Out of a
+//   branch `agent/…` (main, the detached copy of the integration, the CI, the night), there is no
+//   lot: nothing is judged.
 // - With a changed line, the comments of the ticket are read (`bd comments <ticket> --json`, run
 //   from the main tree, the parent of git's common directory). A changed line passes when an
-//   arbitrage that is settled (`arbitrageTranche`: a « ## Arbitrage… » comment, or the regulator's,
-//   that the circuit writes from its sheet, `estArbitrage`) names its consumer, the first
+//   arbitrage of the supervisor that is settled (`arbitrageTranche`: a « ## Arbitrage… » comment,
+//   `estArbitrage`, its verdict « tranché » or the owner's answer after it) names its consumer, the first
 //   name between backquotes of the line, found as it is in the comment's text. Without a changed
 //   line, bd is not called.
 // - A changed line no arbitrage settles passes too when the section « Architecture » of the
@@ -35,21 +35,15 @@ import { aVerifier } from './interfaces-contre-code.mjs';
 
 const REGLE = 'consommateur-sans-arbitrage';
 
-// The regulator's arbitrage as the circuit writes it at the ticket, from the `arbitrage` of its
-// sheet (scripts/circuit.mjs): `Circuit · <composant> · regulateur : arbitrage — <texte>`.
-const DU_REGULATEUR = /^Circuit · [^\n]* · regulateur : arbitrage — /;
+// True when the text <text> of a comment is an arbitrage: a « ## Arbitrage… » comment, as the
+// supervisor writes it (the skill pitmaster, « Une question de conception se tranche par les
+// règles »).
+export const estArbitrage = text => /^\s*## Arbitrage\b/.test(String(text ?? ''));
 
-// True when the text <text> of a comment is an arbitrage: a « ## Arbitrage… » comment, or the
-// regulator's, as the circuit writes it.
-export const estArbitrage = text =>
-  /^\s*## Arbitrage\b/.test(String(text ?? '')) || DU_REGULATEUR.test(String(text ?? ''));
-
-// True when the arbitrage <a> of <comments> (Beads' JSON, in their order) is settled: the
-// regulator's (it settles only what the letter of a criterion, a written precedent or a rule of
-// the frame settles), a line `### Verdict — tranché`, or a « ## Réponse du responsable » comment
-// after it.
+// True when the arbitrage <a> of <comments> (Beads' JSON, in their order) is settled: a line
+// `### Verdict — tranché`, or a « ## Réponse du responsable » comment after it.
 export function arbitrageTranche(comments, a) {
-  const tranche = DU_REGULATEUR.test(a.text) || /^### Verdict\s*—\s*tranché/m.test(a.text);
+  const tranche = /^### Verdict\s*—\s*tranché/m.test(a.text);
   return (
     tranche ||
     comments

package/scripts/consommateurs.d.ts

@@ -0,0 +1,8 @@
+// The types of ./consommateurs.mjs as the entry `@roomi-fields/grillhouse/consommateurs`
+// publishes it, for a project's guard over the shared test material.
+
+/**
+ * The components of `racine` whose `package.json` exports `./test-fixtures`, a package out of the
+ * frame never one: the packages of the shared test material.
+ */
+export function matieres(racine: string): { nom: string; dir: string; paquet: string | null }[];

package/scripts/consommateurs.mjs

@@ -27,6 +27,10 @@
 // The identity of a component is its name: two directories of the same name, one under `packages/`
 // and one under `src/`, are refused, both paths named (the way npm workspaces, Nx and Cargo refuse
 // two projects of one name). Names differing by case are two names.
+//
+// A project's guard imports `matieres` by the package's entry
+// `@roomi-fields/grillhouse/consommateurs`, its types in ./consommateurs.d.ts (docs/ARCHITECTURE.md,
+// the package's named entries).
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
@@ -303,7 +307,7 @@ if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
   for (const l of lignes) process.stderr.write(`${l}\n`);
   if (refus.length) {
     process.stderr.write(
-      "Une consommation nouvelle se décide (la section « Architecture » du ticket qui la nomme, sinon le référent technique), puis entre dans la section « Consommateurs » de l'interface du fournisseur.\n"
+      "Une consommation nouvelle se décide (la section « Architecture » du ticket qui la nomme, sinon l'arbitrage du superviseur), puis entre dans la section « Consommateurs » de l'interface du fournisseur.\n"
     );
     process.exitCode = 1;
   }

package/scripts/dette.d.ts

@@ -0,0 +1,23 @@
+// The types of ./dette.mjs as the entry `@roomi-fields/grillhouse/dette` publishes it, for a
+// project's guard that judges its findings against the project's known debt.
+
+/** A finding of a guard: inscribed in the debt only with its `fichier` and its `regle`. */
+export type Constat = {
+  fichier?: string;
+  regle?: string;
+  message: string;
+  ligne?: number;
+};
+
+/**
+ * Judges the findings of `garde` at `racine` against `grillhouse-dette.json`, in the mode `mode`
+ * (`GRILLHOUSE_DETTE` by default): `refus` the findings to print as refusals, `lignes` the lines
+ * to print after them.
+ */
+export function trancher(
+  racine: string,
+  garde: string,
+  constats: Constat[],
+  mode?: string,
+  env?: Record<string, string | undefined>
+): { refus: Constat[]; lignes: string[] };

package/scripts/dette.mjs

@@ -23,9 +23,13 @@
 //   drops the keys at zero, never raising a count nor adding a key. Each guard then judges against
 //   the file it wrote. The npm scripts `grillhouse:dette:inscrire` and `grillhouse:dette:elaguer`
 //   run every guard so.
+//
+// A project's guard imports `trancher` by the package's entry `@roomi-fields/grillhouse/dette`,
+// its types in ./dette.d.ts (docs/ARCHITECTURE.md, the package's named entries).
 import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import path from 'node:path';
-import { ecrireSarif } from './resultats.mjs';
+import { pathToFileURL } from 'node:url';
+import { A_ELAGUER, ecrireSarif } from './resultats.mjs';
 
 export const FICHIER = 'grillhouse-dette.json';
 // The environment variable that names the mode of a run: `inscrire` or `elaguer`.
@@ -129,13 +133,57 @@ export function juger(dette, garde, constats) {
 // (the keys beyond their count, the keys to prune, what the run wrote). An unknown mode, or a file
 // that is not JSON, refuses every finding, behind a refusal that says why. The refusals are the
 // guard's findings in SARIF too, under the results directory <env> names (scripts/resultats.mjs),
-// each with its file, its line when the guard gives one, and its rule.
+// each with its file, its line when the guard gives one, and its rule; beside them, each key
+// inscribed above what the guard finds is a note (`a-elaguer`, level `note`), no red, by which the
+// circuit lowers the debt d'office at the final pass (scripts/circuit.mjs, 4.2).
 export function trancher(racine, garde, constats, mode = process.env[MODE] || undefined, env) {
-  const { refus, lignes } = juge(racine, garde, constats, mode);
-  ecrireSarif({ garde, constats: refus, racine, env: env ?? process.env });
+  const { refus, lignes, corriges } = juge(racine, garde, constats, mode);
+  const notes = corriges.map(c => ({
+    fichier: c.fichier,
+    regle: c.regle,
+    niveau: 'note',
+    genre: A_ELAGUER,
+    trouve: c.trouve,
+    message: `${c.trouve} constat(s) pour ${c.inscrit} inscrit(s) dans ${FICHIER} : la dette s'abaisse.`,
+  }));
+  ecrireSarif({ garde, constats: [...refus, ...notes], racine, env: env ?? process.env });
   return { refus, lignes };
 }
 
+// Writes <dette> at <racine>, its guards sorted.
+function ecrire(racine, dette) {
+  const triee = Object.fromEntries(
+    Object.keys(dette)
+      .sort()
+      .map(g => [g, dette[g]])
+  );
+  writeFileSync(path.join(racine, FICHIER), `${JSON.stringify(triee, null, 2)}\n`);
+}
+
+// The debt at <racine> lowered by <notes>, each `{ garde, fichier, regle, trouve }` (the notes
+// `a-elaguer` of a pass, scripts/resultats.mjs): each key named comes down to what its guard
+// found, and leaves at zero; a count never rises, no key is added. Written when it changes;
+// returns whether it did.
+function abaisser(racine, notes) {
+  const avant = lire(racine);
+  const dette = JSON.parse(JSON.stringify(avant));
+  for (const { garde, fichier, regle, trouve } of notes) {
+    const parRegle = dette[garde]?.[fichier];
+    const cle = parRegle?.[regle];
+    if (!cle || !Number.isInteger(trouve) || trouve >= cle.count) continue;
+    if (trouve > 0) {
+      cle.count = trouve;
+      continue;
+    }
+    delete parRegle[regle];
+    if (!Object.keys(parRegle).length) delete dette[garde][fichier];
+    if (!Object.keys(dette[garde]).length) delete dette[garde];
+  }
+  const change = JSON.stringify(dette) !== JSON.stringify(avant);
+  if (change) ecrire(racine, dette);
+  return change;
+}
+
 function juge(racine, garde, constats, mode) {
   let avant;
   try {
@@ -144,21 +192,15 @@ function juge(racine, garde, constats, mode) {
     }
     avant = lire(racine);
   } catch (e) {
-    return { refus: [{ message: e.message }, ...constats], lignes: [] };
+    return { refus: [{ message: e.message }, ...constats], lignes: [], corriges: [] };
   }
   let dette = avant;
   const lignes = [];
   if (mode) {
     dette =
       mode === 'inscrire' ? inscrire(avant, garde, constats) : elaguer(avant, garde, constats);
-    const f = path.join(racine, FICHIER);
     if (JSON.stringify(dette) !== JSON.stringify(avant)) {
-      const triee = Object.fromEntries(
-        Object.keys(dette)
-          .sort()
-          .map(g => [g, dette[g]])
-      );
-      writeFileSync(f, `${JSON.stringify(triee, null, 2)}\n`);
+      ecrire(racine, dette);
       lignes.push(
         `📝 ${FICHIER} : la dette de ${garde} est ${mode === 'inscrire' ? 'inscrite' : 'élaguée'}.`
       );
@@ -177,5 +219,26 @@ function juge(racine, garde, constats, mode) {
   }
   if (tus > 0)
     lignes.push(`ℹ️  ${garde} : ${tus} constat(s) connu(s), inscrit(s) dans ${FICHIER}.`);
-  return { refus, lignes };
+  return { refus, lignes, corriges };
+}
+
+// `node dette.mjs --abaisser <notes.json>`: the debt of the working directory lowered by the notes
+// of a pass, a JSON list (abaisser), as `prettier --write` writes and judges nothing: 0 once
+// written or left as it is, 1 only on a real failure (a file it cannot read).
+if (import.meta.url === pathToFileURL(process.argv[1] ?? '').href) {
+  const [option, notes] = process.argv.slice(2);
+  if (option !== '--abaisser' || !notes) {
+    process.stderr.write('Usage : node dette.mjs --abaisser <notes.json>\n');
+    process.exitCode = 2;
+  } else {
+    try {
+      const fait = abaisser(process.cwd(), JSON.parse(readFileSync(notes, 'utf8')));
+      process.stdout.write(
+        `${fait ? `📝 ${FICHIER} : la dette est abaissée.` : `${FICHIER} : rien à abaisser.`}\n`
+      );
+    } catch (e) {
+      process.stderr.write(`${e instanceof Error ? e.message : e}\n`);
+      process.exitCode = 1;
+    }
+  }
 }

package/scripts/droits.mjs

@@ -1,14 +1,12 @@
 #!/usr/bin/env node
 // The rights and the context of each role session the circuit launches, from one source (ROLES):
-// the testwriter and the developpeur in the envelope of their component (scripts/enveloppe/lancer.sh),
-// the reviewer, the regulator, the questionneur and the technical referent out of it
-// (scripts/circuit.mjs). As a task of CI receives its
+// the testwriter and the developpeur in the envelope of their plan (scripts/enveloppe/lancer.sh),
+// the explorateur, the questionneur and the reviewer out of it (scripts/circuit.mjs). As a task of CI receives its
 // rights from its steps and runs on an image of its own, not on the workstation of its author
 // (GitHub Actions `permissions:` per job, the hermetic actions of Bazel), a session receives the
 // rights the commands of its skill name, and the context its work reads.
 //
 //   npx grillhouse droits <rôle> --racine <arbre principal> --copie <copie> --ticket <ticket>
-//                           [--journal <fichier> --preuves <motif>]
 //
 // prints the options of claude for that session, one per line (`optionsDuRole`):
 //
@@ -20,7 +18,7 @@
 //   change): its permissions (`allow`, the commands its skill names; `deny`, the change of its
 //   author at the ticket, AUTEUR_FIXE, for a role that writes the editing by script, the test
 //   tool run directly and the reading again of the ticket its instruction carries, and for a role
-//   that writes nothing at the ticket, the questionneur and the regulator, every write of bd,
+//   that writes nothing at the ticket, the explorateur and the questionneur, every write of bd,
 //   ECRIRE_AU_TICKET); the
 //   automatic memory off; the skills of Claude Code off (`disableBundledSkills`, and the few it keeps,
 //   INTEGREES), and the project's own skills (`.claude/skills/` of the copy) off
@@ -109,6 +107,14 @@ const INTEGREES = ['design', 'doctor', 'plugin-authoring'];
 const GREFFON_DU_CADRE = 'grillhouse@';
 // The servers of the index (charter, « L'index d'abord »).
 const INDEX = ['codegraph', 'rtfm'];
+// The reads of the index by a role that writes: codegraph for the calls, rtfm for the search and
+// the reading of a result whole.
+const LIRE_L_INDEX = [
+  'Bash(codegraph explore *)',
+  'mcp__codegraph__codegraph_explore',
+  'mcp__rtfm__rtfm_search',
+  'mcp__rtfm__rtfm_expand',
+];
 // The tools of every role, and of a role that writes.
 const LIRE = ['Bash', 'Read', 'Skill'];
 const ECRIRE = ['Edit', 'Write'];
@@ -117,18 +123,39 @@ const ECRIRE = ['Edit', 'Write'];
 // `ecritAuTicket` is false), whether it uses the index, and the commands its skill names (the
 // frame's plugin, `mods/grillhouse/skills/<rôle>/`), as permission rules.
 export const ROLES = {
+  // It writes no file and nothing at the ticket: it surveys the components and reads the code by
+  // the index, and ends on the plan in its sheet, which the circuit writes at the ticket.
+  explorateur: {
+    index: true,
+    ecritAuTicket: false,
+    commandes: [
+      'Bash(bd show *)',
+      'Bash(bd comments *)',
+      'Bash(npx grillhouse composants-affectes *)',
+      'Bash(codegraph explore *)',
+      'mcp__codegraph__codegraph_explore',
+      'mcp__rtfm__rtfm_search',
+    ],
+  },
+  // It writes the tests of the whole ticket, in the envelope of its plan, and reads the whole copy
+  // by the index (charter, « L'index d'abord »).
   testwriter: {
     ecrit: true,
+    index: true,
     commandes: [
       'Bash(bd update * --claim)',
       'Bash(bd comments add *)',
       'Bash(npm test *)',
       // The removal of a file of its tests, by a script of its temporary directory.
       'Bash(node $TMPDIR/*)',
+      ...LIRE_L_INDEX,
     ],
   },
+  // It writes the code of the whole ticket, in the envelope of its plan, and reads the whole copy
+  // by the index.
   developpeur: {
     ecrit: true,
+    index: true,
     commandes: [
       'Bash(bd update * --claim)',
       'Bash(bd update * --notes*)',
@@ -137,6 +164,7 @@ export const ROLES = {
       'Bash(git -C * diff*)',
       'Bash(npm test *)',
       'Bash(npm run api*)',
+      ...LIRE_L_INDEX,
     ],
   },
   relecteur: {
@@ -151,19 +179,6 @@ export const ROLES = {
       'mcp__rtfm__rtfm_search',
     ],
   },
-  // It writes nothing at the ticket: the circuit writes its decision, its arbitrage and the
-  // criterion it adds, from its sheet. It reads the circuit's state by its command, the ticket's
-  // log and its proofs by their paths, a precedent by bd, the copy by git.
-  regulateur: {
-    lit: ['journal', 'preuves'],
-    ecritAuTicket: false,
-    commandes: [
-      'Bash(npx grillhouse etat-du-circuit *)',
-      'Bash(bd search *)',
-      'Bash(bd comments *)',
-      ...LIRE_GIT,
-    ],
-  },
   // It asks, and decides nothing: it reads the proposal its instruction carries and the code by
   // the index; the circuit writes its questions at the ticket.
   questionneur: {
@@ -175,19 +190,6 @@ export const ROLES = {
       'mcp__rtfm__rtfm_search',
     ],
   },
-  // On the questions to a plan, it answers for the plan; the circuit writes its changes to the
-  // ticket and its answers at the ticket.
-  'referent-technique': {
-    index: true,
-    commandes: [
-      'Bash(bd show *)',
-      'Bash(bd comments add *)',
-      'Bash(npx grillhouse ticket *)',
-      'Bash(codegraph explore *)',
-      'mcp__codegraph__codegraph_explore',
-      'mcp__rtfm__rtfm_search',
-    ],
-  },
 };
 
 const lireJson = f => {
@@ -239,13 +241,10 @@ function serveursDeLIndex(racine, home) {
 }
 
 // The settings of the session of <role>, for the ticket <ticket>, its copy <copie> (where the
-// project's own skills are read) and the main tree <racine>; `lit` names the files the regulator reads.
-function reglagesDuRole(role, { racine, copie = racine, ticket, journal, preuves }) {
+// project's own skills are read) and the main tree <racine>.
+function reglagesDuRole(role, { racine, copie = racine, ticket }) {
   const r = ROLES[role];
   if (!r) throw new Error(`rôle sans droits : ${role}`);
-  const fichiers = { journal, preuves };
-  // An absolute path of the machine opens on `//`.
-  const lectures = (r.lit ?? []).filter(k => fichiers[k]).map(k => `Read(/${fichiers[k]})`);
   const deny = [...AUTEUR_FIXE, ...(r.ecritAuTicket === false ? ECRIRE_AU_TICKET : [])];
   if (r.ecrit) {
     deny.push(...ECRIRE_PAR_SCRIPT, ...TEST_DIRECT);
@@ -264,7 +263,7 @@ function reglagesDuRole(role, { racine, copie = racine, ticket, journal, preuves
       : []),
   ];
   const reglages = {
-    permissions: { allow: [...r.commandes, ...lectures], deny },
+    permissions: { allow: [...r.commandes], deny },
     autoMemoryEnabled: false,
     disableBundledSkills: true,
     skillOverrides: Object.fromEntries(autres.map(s => [s, 'off'])),
@@ -328,13 +327,8 @@ function commande(argv) {
   const o = {};
   for (let i = 0; i < reste.length; i += 2) {
     const cle = reste[i]?.replace(/^--/, '');
-    if (
-      !['racine', 'copie', 'ticket', 'journal', 'preuves'].includes(cle) ||
-      i + 1 >= reste.length
-    ) {
-      process.stderr.write(
-        `usage : droits.mjs <rôle> --racine <r> --copie <c> --ticket <t> [--journal <f> --preuves <m>]\n`
-      );
+    if (!['racine', 'copie', 'ticket'].includes(cle) || i + 1 >= reste.length) {
+      process.stderr.write(`usage : droits.mjs <rôle> --racine <r> --copie <c> --ticket <t>\n`);
       return 2;
     }
     o[cle] = reste[i + 1];