@sentropic/h2a 0.85.25 → 0.87.0

package/focus-app/server/chunks/manifest.js-CXJqSHHn.js

@@ -0,0 +1,78 @@
+const manifest = (() => {
+function __memo(fn) {
+	let value;
+	return () => value ??= (value = fn());
+}
+
+return {
+	appDir: "_app",
+	appPath: "_app",
+	assets: new Set([]),
+	mimeTypes: {},
+	_: {
+		client: {start:"_app/immutable/entry/start.X3j_A5RN.js",app:"_app/immutable/entry/app.C1sDdCg5.js",imports:["_app/immutable/entry/start.X3j_A5RN.js","_app/immutable/chunks/iXQate3J.js","_app/immutable/chunks/x-hq5fDG.js","_app/immutable/chunks/1NK_OeRJ.js","_app/immutable/entry/app.C1sDdCg5.js","_app/immutable/chunks/x-hq5fDG.js","_app/immutable/chunks/B1veta3r.js","_app/immutable/chunks/kCE9wz0g.js","_app/immutable/chunks/1NK_OeRJ.js","_app/immutable/chunks/C6KhNEX3.js","_app/immutable/chunks/BZ4lcC0v.js"],stylesheets:[],fonts:[],uses_env_dynamic_public:false},
+		nodes: [
+			__memo(() => import('./nodes/0.js-leU6sfRR.js')),
+			__memo(() => import('./nodes/1.js-os6QXm6B.js')),
+			__memo(() => import('./nodes/2.js-DAaLjh93.js')),
+			__memo(() => import('./nodes/3.js-Cmgi6Uy0.js'))
+		],
+		remotes: {
+			
+		},
+		routes: [
+			{
+				id: "/",
+				pattern: /^\/$/,
+				params: [],
+				page: { layouts: [0,], errors: [1,], leaf: 2 },
+				endpoint: null
+			},
+			{
+				id: "/api/actions/launch",
+				pattern: /^\/api\/actions\/launch\/?$/,
+				params: [],
+				page: null,
+				endpoint: __memo(() => import('./entries/endpoints/api/actions/launch/_server.ts.js-DUQcf9xd.js'))
+			},
+			{
+				id: "/api/decisions/inject",
+				pattern: /^\/api\/decisions\/inject\/?$/,
+				params: [],
+				page: null,
+				endpoint: __memo(() => import('./entries/endpoints/api/decisions/inject/_server.ts.js-hrbMnsV0.js'))
+			},
+			{
+				id: "/api/dossiers/agent-memory/include",
+				pattern: /^\/api\/dossiers\/agent-memory\/include\/?$/,
+				params: [],
+				page: null,
+				endpoint: __memo(() => import('./entries/endpoints/api/dossiers/agent-memory/include/_server.ts.js-Dw4odGdV.js'))
+			},
+			{
+				id: "/api/h2a/targets",
+				pattern: /^\/api\/h2a\/targets\/?$/,
+				params: [],
+				page: null,
+				endpoint: __memo(() => import('./entries/endpoints/api/h2a/targets/_server.ts.js-BLjYv7vg.js'))
+			},
+			{
+				id: "/dossier/agent-memory",
+				pattern: /^\/dossier\/agent-memory\/?$/,
+				params: [],
+				page: { layouts: [0,], errors: [1,], leaf: 3 },
+				endpoint: null
+			}
+		],
+		prerendered_routes: new Set([]),
+		matchers: async () => {
+			
+			return {  };
+		},
+		server_assets: {}
+	}
+}
+})();
+
+export { manifest as m };
+//# sourceMappingURL=manifest.js-CXJqSHHn.js.map

package/focus-app/server/chunks/manifest.js-CXJqSHHn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js-CXJqSHHn.js","sources":["../../../.svelte-kit/output/server/manifest.js"],"sourcesContent":["export const manifest = (() => {\nfunction __memo(fn) {\n\tlet value;\n\treturn () => value ??= (value = fn());\n}\n\nreturn {\n\tappDir: \"_app\",\n\tappPath: \"_app\",\n\tassets: new Set([]),\n\tmimeTypes: {},\n\t_: {\n\t\tclient: {start:\"_app/immutable/entry/start.X3j_A5RN.js\",app:\"_app/immutable/entry/app.C1sDdCg5.js\",imports:[\"_app/immutable/entry/start.X3j_A5RN.js\",\"_app/immutable/chunks/iXQate3J.js\",\"_app/immutable/chunks/x-hq5fDG.js\",\"_app/immutable/chunks/1NK_OeRJ.js\",\"_app/immutable/entry/app.C1sDdCg5.js\",\"_app/immutable/chunks/x-hq5fDG.js\",\"_app/immutable/chunks/B1veta3r.js\",\"_app/immutable/chunks/kCE9wz0g.js\",\"_app/immutable/chunks/1NK_OeRJ.js\",\"_app/immutable/chunks/C6KhNEX3.js\",\"_app/immutable/chunks/BZ4lcC0v.js\"],stylesheets:[],fonts:[],uses_env_dynamic_public:false},\n\t\tnodes: [\n\t\t\t__memo(() => import('./nodes/0.js')),\n\t\t\t__memo(() => import('./nodes/1.js')),\n\t\t\t__memo(() => import('./nodes/2.js')),\n\t\t\t__memo(() => import('./nodes/3.js'))\n\t\t],\n\t\tremotes: {\n\t\t\t\n\t\t},\n\t\troutes: [\n\t\t\t{\n\t\t\t\tid: \"/\",\n\t\t\t\tpattern: /^\\/$/,\n\t\t\t\tparams: [],\n\t\t\t\tpage: { layouts: [0,], errors: [1,], leaf: 2 },\n\t\t\t\tendpoint: null\n\t\t\t},\n\t\t\t{\n\t\t\t\tid: \"/api/actions/launch\",\n\t\t\t\tpattern: /^\\/api\\/actions\\/launch\\/?$/,\n\t\t\t\tparams: [],\n\t\t\t\tpage: null,\n\t\t\t\tendpoint: __memo(() => import('./entries/endpoints/api/actions/launch/_server.ts.js'))\n\t\t\t},\n\t\t\t{\n\t\t\t\tid: \"/api/decisions/inject\",\n\t\t\t\tpattern: /^\\/api\\/decisions\\/inject\\/?$/,\n\t\t\t\tparams: [],\n\t\t\t\tpage: null,\n\t\t\t\tendpoint: __memo(() => import('./entries/endpoints/api/decisions/inject/_server.ts.js'))\n\t\t\t},\n\t\t\t{\n\t\t\t\tid: \"/api/dossiers/agent-memory/include\",\n\t\t\t\tpattern: /^\\/api\\/dossiers\\/agent-memory\\/include\\/?$/,\n\t\t\t\tparams: [],\n\t\t\t\tpage: null,\n\t\t\t\tendpoint: __memo(() => import('./entries/endpoints/api/dossiers/agent-memory/include/_server.ts.js'))\n\t\t\t},\n\t\t\t{\n\t\t\t\tid: \"/api/h2a/targets\",\n\t\t\t\tpattern: /^\\/api\\/h2a\\/targets\\/?$/,\n\t\t\t\tparams: [],\n\t\t\t\tpage: null,\n\t\t\t\tendpoint: __memo(() => import('./entries/endpoints/api/h2a/targets/_server.ts.js'))\n\t\t\t},\n\t\t\t{\n\t\t\t\tid: \"/dossier/agent-memory\",\n\t\t\t\tpattern: /^\\/dossier\\/agent-memory\\/?$/,\n\t\t\t\tparams: [],\n\t\t\t\tpage: { layouts: [0,], errors: [1,], leaf: 3 },\n\t\t\t\tendpoint: null\n\t\t\t}\n\t\t],\n\t\tprerendered_routes: new Set([]),\n\t\tmatchers: async () => {\n\t\t\t\n\t\t\treturn {  };\n\t\t},\n\t\tserver_assets: {}\n\t}\n}\n})();\n"],"names":[],"mappings":"AAAY,MAAC,QAAQ,GAAG,CAAC,MAAM;AAC/B,SAAS,MAAM,CAAC,EAAE,EAAE;AACpB,CAAC,IAAI,KAAK;AACV,CAAC,OAAO,MAAM,KAAK,MAAM,KAAK,GAAG,EAAE,EAAE,CAAC;AACtC;;AAEA,OAAO;AACP,CAAC,MAAM,EAAE,MAAM;AACf,CAAC,OAAO,EAAE,MAAM;AAChB,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;AACpB,CAAC,SAAS,EAAE,EAAE;AACd,CAAC,CAAC,EAAE;AACJ,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,wCAAwC,CAAC,GAAG,CAAC,sCAAsC,CAAC,OAAO,CAAC,CAAC,wCAAwC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,sCAAsC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC;AACzjB,EAAE,KAAK,EAAE;AACT,GAAG,MAAM,CAAC,MAAM,OAAO,0BAAc,CAAC,CAAC;AACvC,GAAG,MAAM,CAAC,MAAM,OAAO,0BAAc,CAAC,CAAC;AACvC,GAAG,MAAM,CAAC,MAAM,OAAO,0BAAc,CAAC,CAAC;AACvC,GAAG,MAAM,CAAC,MAAM,OAAO,0BAAc,CAAC;AACtC,GAAG;AACH,EAAE,OAAO,EAAE;AACX;AACA,GAAG;AACH,EAAE,MAAM,EAAE;AACV,GAAG;AACH,IAAI,EAAE,EAAE,GAAG;AACX,IAAI,OAAO,EAAE,MAAM;AACnB,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;AAClD,IAAI,QAAQ,EAAE;AACd,IAAI;AACJ,GAAG;AACH,IAAI,EAAE,EAAE,qBAAqB;AAC7B,IAAI,OAAO,EAAE,6BAA6B;AAC1C,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,IAAI,EAAE,IAAI;AACd,IAAI,QAAQ,EAAE,MAAM,CAAC,MAAM,OAAO,kEAAsD,CAAC;AACzF,IAAI;AACJ,GAAG;AACH,IAAI,EAAE,EAAE,uBAAuB;AAC/B,IAAI,OAAO,EAAE,+BAA+B;AAC5C,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,IAAI,EAAE,IAAI;AACd,IAAI,QAAQ,EAAE,MAAM,CAAC,MAAM,OAAO,oEAAwD,CAAC;AAC3F,IAAI;AACJ,GAAG;AACH,IAAI,EAAE,EAAE,oCAAoC;AAC5C,IAAI,OAAO,EAAE,6CAA6C;AAC1D,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,IAAI,EAAE,IAAI;AACd,IAAI,QAAQ,EAAE,MAAM,CAAC,MAAM,OAAO,iFAAqE,CAAC;AACxG,IAAI;AACJ,GAAG;AACH,IAAI,EAAE,EAAE,kBAAkB;AAC1B,IAAI,OAAO,EAAE,0BAA0B;AACvC,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,IAAI,EAAE,IAAI;AACd,IAAI,QAAQ,EAAE,MAAM,CAAC,MAAM,OAAO,+DAAmD,CAAC;AACtF,IAAI;AACJ,GAAG;AACH,IAAI,EAAE,EAAE,uBAAuB;AAC/B,IAAI,OAAO,EAAE,8BAA8B;AAC3C,IAAI,MAAM,EAAE,EAAE;AACd,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;AAClD,IAAI,QAAQ,EAAE;AACd;AACA,GAAG;AACH,EAAE,kBAAkB,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;AACjC,EAAE,QAAQ,EAAE,YAAY;AACxB;AACA,GAAG,OAAO,IAAI;AACd,EAAE,CAAC;AACH,EAAE,aAAa,EAAE;AACjB;AACA;AACA,CAAC;;;;"}

package/focus-app/server/chunks/nodes/0.js-leU6sfRR.js

@@ -0,0 +1,9 @@
+const index = 0;
+let component_cache;
+const component = async () => component_cache ??= (await import('../entries/pages/_layout.svelte.js-e1E_I04z.js')).default;
+const imports = ["_app/immutable/nodes/0.gLl44WzG.js","_app/immutable/chunks/kCE9wz0g.js","_app/immutable/chunks/x-hq5fDG.js","_app/immutable/chunks/Bu7F9NOv.js","_app/immutable/chunks/BZ4lcC0v.js"];
+const stylesheets = ["_app/immutable/assets/0.CgEVz9YW.css"];
+const fonts = [];
+
+export { component, fonts, imports, index, stylesheets };
+//# sourceMappingURL=0.js-leU6sfRR.js.map

package/focus-app/server/chunks/nodes/{0.js-4wlmdsk8.js.map → 0.js-leU6sfRR.js.map}

@@ -1 +1 @@
-{"version":3,"file":"0.js-4wlmdsk8.js","sources":["../../../../.svelte-kit/output/server/nodes/0.js"],"sourcesContent":["\n\nexport const index = 0;\nlet component_cache;\nexport const component = async () => component_cache ??= (await import('../entries/pages/_layout.svelte.js')).default;\nexport const imports = [\"_app/immutable/nodes/0.CuSOF0Of.js\",\"_app/immutable/chunks/ZxFklh9T.js\",\"_app/immutable/chunks/Bv8OL8ib.js\",\"_app/immutable/chunks/DQIRXgdC.js\",\"_app/immutable/chunks/DEmooz0s.js\"];\nexport const stylesheets = [\"_app/immutable/assets/0.BdzHFb9q.css\"];\nexport const fonts = [];\n"],"names":[],"mappings":"AAEY,MAAC,KAAK,GAAG;AACrB,IAAI,eAAe;AACP,MAAC,SAAS,GAAG,YAAY,eAAe,KAAK,CAAC,MAAM,OAAO,gDAAoC,CAAC,EAAE;AAClG,MAAC,OAAO,GAAG,CAAC,oCAAoC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC;AAChM,MAAC,WAAW,GAAG,CAAC,sCAAsC;AACtD,MAAC,KAAK,GAAG;;;;"}
+{"version":3,"file":"0.js-leU6sfRR.js","sources":["../../../../.svelte-kit/output/server/nodes/0.js"],"sourcesContent":["\n\nexport const index = 0;\nlet component_cache;\nexport const component = async () => component_cache ??= (await import('../entries/pages/_layout.svelte.js')).default;\nexport const imports = [\"_app/immutable/nodes/0.gLl44WzG.js\",\"_app/immutable/chunks/kCE9wz0g.js\",\"_app/immutable/chunks/x-hq5fDG.js\",\"_app/immutable/chunks/Bu7F9NOv.js\",\"_app/immutable/chunks/BZ4lcC0v.js\"];\nexport const stylesheets = [\"_app/immutable/assets/0.CgEVz9YW.css\"];\nexport const fonts = [];\n"],"names":[],"mappings":"AAEY,MAAC,KAAK,GAAG;AACrB,IAAI,eAAe;AACP,MAAC,SAAS,GAAG,YAAY,eAAe,KAAK,CAAC,MAAM,OAAO,gDAAoC,CAAC,EAAE;AAClG,MAAC,OAAO,GAAG,CAAC,oCAAoC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC;AAChM,MAAC,WAAW,GAAG,CAAC,sCAAsC;AACtD,MAAC,KAAK,GAAG;;;;"}

package/focus-app/server/chunks/nodes/1.js-os6QXm6B.js

@@ -0,0 +1,9 @@
+const index = 1;
+let component_cache;
+const component = async () => component_cache ??= (await import('../entries/fallbacks/error.svelte.js-RbeaNF5a.js')).default;
+const imports = ["_app/immutable/nodes/1.DUrghq2x.js","_app/immutable/chunks/kCE9wz0g.js","_app/immutable/chunks/x-hq5fDG.js","_app/immutable/chunks/B1veta3r.js","_app/immutable/chunks/iXQate3J.js","_app/immutable/chunks/1NK_OeRJ.js"];
+const stylesheets = [];
+const fonts = [];
+
+export { component, fonts, imports, index, stylesheets };
+//# sourceMappingURL=1.js-os6QXm6B.js.map

package/focus-app/server/chunks/nodes/{1.js-B-LpY-lC.js.map → 1.js-os6QXm6B.js.map}

@@ -1 +1 @@
-{"version":3,"file":"1.js-B-LpY-lC.js","sources":["../../../../.svelte-kit/output/server/nodes/1.js"],"sourcesContent":["\n\nexport const index = 1;\nlet component_cache;\nexport const component = async () => component_cache ??= (await import('../entries/fallbacks/error.svelte.js')).default;\nexport const imports = [\"_app/immutable/nodes/1.D39jdnqm.js\",\"_app/immutable/chunks/ZxFklh9T.js\",\"_app/immutable/chunks/Bv8OL8ib.js\",\"_app/immutable/chunks/Bs3f1UbD.js\",\"_app/immutable/chunks/CVq_IFFr.js\",\"_app/immutable/chunks/Cj6wo28J.js\"];\nexport const stylesheets = [];\nexport const fonts = [];\n"],"names":[],"mappings":"AAEY,MAAC,KAAK,GAAG;AACrB,IAAI,eAAe;AACP,MAAC,SAAS,GAAG,YAAY,eAAe,KAAK,CAAC,MAAM,OAAO,kDAAsC,CAAC,EAAE;AACpG,MAAC,OAAO,GAAG,CAAC,oCAAoC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC;AACpO,MAAC,WAAW,GAAG;AACf,MAAC,KAAK,GAAG;;;;"}
+{"version":3,"file":"1.js-os6QXm6B.js","sources":["../../../../.svelte-kit/output/server/nodes/1.js"],"sourcesContent":["\n\nexport const index = 1;\nlet component_cache;\nexport const component = async () => component_cache ??= (await import('../entries/fallbacks/error.svelte.js')).default;\nexport const imports = [\"_app/immutable/nodes/1.DUrghq2x.js\",\"_app/immutable/chunks/kCE9wz0g.js\",\"_app/immutable/chunks/x-hq5fDG.js\",\"_app/immutable/chunks/B1veta3r.js\",\"_app/immutable/chunks/iXQate3J.js\",\"_app/immutable/chunks/1NK_OeRJ.js\"];\nexport const stylesheets = [];\nexport const fonts = [];\n"],"names":[],"mappings":"AAEY,MAAC,KAAK,GAAG;AACrB,IAAI,eAAe;AACP,MAAC,SAAS,GAAG,YAAY,eAAe,KAAK,CAAC,MAAM,OAAO,kDAAsC,CAAC,EAAE;AACpG,MAAC,OAAO,GAAG,CAAC,oCAAoC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC;AACpO,MAAC,WAAW,GAAG;AACf,MAAC,KAAK,GAAG;;;;"}

package/focus-app/server/chunks/nodes/2.js-DAaLjh93.js

@@ -0,0 +1,19 @@
+export { _ as server } from '../entries/pages/_page.server.ts.js-ChRBj_xK.js';
+import '../chunks/friendly.js-D4fjovnZ.js';
+import 'node:child_process';
+import 'node:fs';
+import 'node:path';
+import 'node:url';
+import 'node:crypto';
+import 'node:os';
+
+const index = 2;
+let component_cache;
+const component = async () => component_cache ??= (await import('../entries/pages/_page.svelte.js-DbaEG23x.js')).default;
+const server_id = "src/routes/+page.server.ts";
+const imports = ["_app/immutable/nodes/2.Bp7JE7Pz.js","_app/immutable/chunks/kCE9wz0g.js","_app/immutable/chunks/x-hq5fDG.js","_app/immutable/chunks/B1veta3r.js","_app/immutable/chunks/C6KhNEX3.js","_app/immutable/chunks/BZ4lcC0v.js","_app/immutable/chunks/DIljKPJN.js","_app/immutable/chunks/Bu7F9NOv.js"];
+const stylesheets = ["_app/immutable/assets/AppShell.CDPwj3zU.css","_app/immutable/assets/2.DaTmt6o7.css"];
+const fonts = [];
+
+export { component, fonts, imports, index, server_id, stylesheets };
+//# sourceMappingURL=2.js-DAaLjh93.js.map

package/focus-app/server/chunks/nodes/2.js-DAaLjh93.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"2.js-DAaLjh93.js","sources":["../../../../.svelte-kit/output/server/nodes/2.js"],"sourcesContent":["import * as server from '../entries/pages/_page.server.ts.js';\n\nexport const index = 2;\nlet component_cache;\nexport const component = async () => component_cache ??= (await import('../entries/pages/_page.svelte.js')).default;\nexport { server };\nexport const server_id = \"src/routes/+page.server.ts\";\nexport const imports = [\"_app/immutable/nodes/2.Bp7JE7Pz.js\",\"_app/immutable/chunks/kCE9wz0g.js\",\"_app/immutable/chunks/x-hq5fDG.js\",\"_app/immutable/chunks/B1veta3r.js\",\"_app/immutable/chunks/C6KhNEX3.js\",\"_app/immutable/chunks/BZ4lcC0v.js\",\"_app/immutable/chunks/DIljKPJN.js\",\"_app/immutable/chunks/Bu7F9NOv.js\"];\nexport const stylesheets = [\"_app/immutable/assets/AppShell.CDPwj3zU.css\",\"_app/immutable/assets/2.DaTmt6o7.css\"];\nexport const fonts = [];\n"],"names":[],"mappings":";;;;;;;;;AAEY,MAAC,KAAK,GAAG;AACrB,IAAI,eAAe;AACP,MAAC,SAAS,GAAG,YAAY,eAAe,KAAK,CAAC,MAAM,OAAO,8CAAkC,CAAC,EAAE;AAEhG,MAAC,SAAS,GAAG;AACb,MAAC,OAAO,GAAG,CAAC,oCAAoC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC;AAC5S,MAAC,WAAW,GAAG,CAAC,6CAA6C,CAAC,sCAAsC;AACpG,MAAC,KAAK,GAAG;;;;"}

package/focus-app/server/chunks/nodes/3.js-Cmgi6Uy0.js

@@ -0,0 +1,18 @@
+export { _ as server } from '../entries/pages/dossier/agent-memory/_page.server.ts.js-CFC-wn6U.js';
+import 'node:fs';
+import 'node:path';
+import '../chunks/h2a-bus.js-bLEJ_Adi.js';
+import 'node:child_process';
+import 'node:os';
+import '../chunks/agent-memory-dossier.js-nmFG_rgx.js';
+
+const index = 3;
+let component_cache;
+const component = async () => component_cache ??= (await import('../entries/pages/dossier/agent-memory/_page.svelte.js-BpR26NMa.js')).default;
+const server_id = "src/routes/dossier/agent-memory/+page.server.ts";
+const imports = ["_app/immutable/nodes/3.Cml8enOG.js","_app/immutable/chunks/kCE9wz0g.js","_app/immutable/chunks/x-hq5fDG.js","_app/immutable/chunks/1NK_OeRJ.js","_app/immutable/chunks/B1veta3r.js","_app/immutable/chunks/C6KhNEX3.js","_app/immutable/chunks/BZ4lcC0v.js","_app/immutable/chunks/DIljKPJN.js","_app/immutable/chunks/Bu7F9NOv.js"];
+const stylesheets = ["_app/immutable/assets/AppShell.CDPwj3zU.css","_app/immutable/assets/3.vWQUAHjz.css"];
+const fonts = [];
+
+export { component, fonts, imports, index, server_id, stylesheets };
+//# sourceMappingURL=3.js-Cmgi6Uy0.js.map

package/focus-app/server/chunks/nodes/3.js-Cmgi6Uy0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"3.js-Cmgi6Uy0.js","sources":["../../../../.svelte-kit/output/server/nodes/3.js"],"sourcesContent":["import * as server from '../entries/pages/dossier/agent-memory/_page.server.ts.js';\n\nexport const index = 3;\nlet component_cache;\nexport const component = async () => component_cache ??= (await import('../entries/pages/dossier/agent-memory/_page.svelte.js')).default;\nexport { server };\nexport const server_id = \"src/routes/dossier/agent-memory/+page.server.ts\";\nexport const imports = [\"_app/immutable/nodes/3.Cml8enOG.js\",\"_app/immutable/chunks/kCE9wz0g.js\",\"_app/immutable/chunks/x-hq5fDG.js\",\"_app/immutable/chunks/1NK_OeRJ.js\",\"_app/immutable/chunks/B1veta3r.js\",\"_app/immutable/chunks/C6KhNEX3.js\",\"_app/immutable/chunks/BZ4lcC0v.js\",\"_app/immutable/chunks/DIljKPJN.js\",\"_app/immutable/chunks/Bu7F9NOv.js\"];\nexport const stylesheets = [\"_app/immutable/assets/AppShell.CDPwj3zU.css\",\"_app/immutable/assets/3.vWQUAHjz.css\"];\nexport const fonts = [];\n"],"names":[],"mappings":";;;;;;;;AAEY,MAAC,KAAK,GAAG;AACrB,IAAI,eAAe;AACP,MAAC,SAAS,GAAG,YAAY,eAAe,KAAK,CAAC,MAAM,OAAO,mEAAuD,CAAC,EAAE;AAErH,MAAC,SAAS,GAAG;AACb,MAAC,OAAO,GAAG,CAAC,oCAAoC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC,CAAC,mCAAmC;AAChV,MAAC,WAAW,GAAG,CAAC,6CAA6C,CAAC,sCAAsC;AACpG,MAAC,KAAK,GAAG;;;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sentropic/h2a",
-  "version": "0.85.25",
+  "version": "0.87.0",
   "description": "h2a — the unified CLI + core for human-to-agent coordination.",
   "license": "MIT",
   "type": "module",
@@ -49,10 +49,10 @@
   },
   "dependencies": {
     "@hono/mcp": "^0.3.0",
-    "@hono/node-server": "^2.0.4",
-    "@modelcontextprotocol/sdk": "^1.29.0",
-    "@sentropic/track": "^0.85.25",
-    "hono": "^4.12.23"
+    "@hono/node-server": "^2.0.12",
+    "@modelcontextprotocol/sdk": "^1.30.0",
+    "@sentropic/track": "^0.87.0",
+    "hono": "^4.12.32"
   },
   "peerDependencies": {
     "@sentropic/h2a-runtime": "*"

package/skills/h2a-run/SKILL.md

@@ -0,0 +1,100 @@
+---
+name: h2a-run
+description: Translate a friendly launch intent ("terra 5.6 xhigh", "codex sol high effort", "relance en max") into the exact `h2a run` CLI invocation or `h2a_run` MCP call — model, effort, gateway on/off, naming, resume. Use whenever the user wants to launch or relaunch an h2a session and only knows a nickname/effort word, not the exact --model id or MCP parameter shape. Does not decide model routing (see the SoT note below) — launch ergonomics only.
+---
+
+# h2a-run
+
+## When to use this
+
+- The user names a launch by nickname + effort ("terra 5.6 xhigh", "sol en max", "relance codex en xhigh") instead of a provider model id.
+- The user wants a background or interactive Claude/Codex session with a specific reasoning effort, with or without the llm-mesh gateway, and needs the exact CLI flags or MCP parameters.
+- **Not** for deciding *which* flavor is best for a task (that is a human/model-delegation call, not this skill's job), and **not** for resolving alias→upstream-provider routing — that table is owned by the llm-mesh gateway, not this skill (see Step 2).
+
+## Hard rule: never call the raw `h2a` binary from Bash
+
+This plugin's PreToolUse hook (`packages/h2a/hooks/deny-manual-h2a-cli.mjs`) blocks any Bash command that invokes `h2a` — it prints *"Blocked manual `h2a` CLI use..."* and exits non-zero. As a Claude agent, always launch through the **`h2a_run` MCP tool**, never `h2a run` in Bash. The `h2a run` CLI form below exists for reference (a human at a real terminal, or a host without this guard) and to explain what the MCP tool does under the hood — do not run it yourself from Bash.
+
+## Step 1 — decode the intent into three independent axes
+
+None of these require knowing a provider model id up front:
+
+1. **Profile** — `claude` or `codex` (which CLI to launch). Default to whichever CLI the user is already in if unstated; ask if genuinely ambiguous.
+2. **Model flavor** — a nickname like *terra*, *sol* (aka *fable*), *luna*, or unstated (→ the CLI's own default model). Resolves to a `--model` / `model` value (Step 2).
+3. **Effort** — `low | medium | high | xhigh`. "max" said by the user means `xhigh` — there is no higher tier for `h2a run` / `h2a_run` today.
+
+## Step 2 — resolve the model flavor (source-of-truth caveat)
+
+**The canonical model catalog belongs to the llm-mesh gateway**, not this skill: today it lives at `packages/h2a-runtime/src/llm-gateway-runtime/model-catalog.ts` (moving under `@sentropic/llm-gateway`). This skill must never be treated as ground truth for routing, and the hint table below is a minimal, best-effort convenience — it can drift or be wrong. There is an **open track item** ("Terra xhigh launch preset" bug) about exactly this kind of drift: a `claude-*`-branded alias can silently resolve to a *different* catalog entry than its nickname implies. Before trusting a mapping below:
+
+- if a gateway is already running for this session, query `GET <ANTHROPIC_BASE_URL>/v1/models` (the mesh's own live catalog) and match the flavor there;
+- otherwise, read the catalog source file above fresh — do not copy it verbatim into a durable prompt/skill, it moves.
+
+Known flavors as of this writing (verify before relying on them for anything consequential):
+
+| User says | Catalog id — pass this to `--model`/`model` | Pool |
+|---|---|---|
+| "terra", "5.6 terra" | `gpt-5.6-terra` | codex |
+| "sol", "fable", "fable 5" | `gpt-5.6-sol` | codex |
+| "luna" | `gpt-5.6-luna` | codex |
+| "5.5" (codex default) | `gpt-5.5` | codex |
+| "gemini flash", "3.5 flash" | `gemini-3.5-flash` | google |
+| "gemini pro", "3.1 pro" | `gemini-3.1-pro` | google |
+
+Prefer the **catalog id** (right column) over a `claude-*`-branded alias — the aliases are exactly where the current drift/collision risk lives. If the user names a flavor not in this table, do not invent an id: query the live catalog (above) rather than guessing.
+
+## Step 3 — gateway on/off
+
+Any non-default flavor needs the llm-mesh gateway to translate the Anthropic-shaped request to the real upstream. Default to the gateway **on** for a named flavor, off for the CLI's native default model:
+
+- CLI: `--gw` (alias `--llm-gateway`) forces it on, `--no-gw` (alias `--no-llm-gateway`) forces it off, omit for the CLI's own default.
+- MCP `h2a_run`: `gateway: "required"` forces it on, `"off"` forces it off, `"auto"` (default) decides. **`"required"` is rejected when `profile` is `"codex"`** — codex already talks to llm-mesh over an Anthropic-compatible surface, use `"auto"` there.
+
+## Step 4 — compose the call
+
+### `h2a_run` MCP tool (what this agent must use)
+
+Required: `profile` (`"claude"|"codex"`), `name` (`^[A-Za-z0-9_-]{1,64}$`), `workspace` (absolute path, must exist, must stay inside the MCP server's startup workspace root), `prompt` (1–65536 UTF-8 bytes, sent on stdin — never put it in argv), `background` (must be literal `true`). Optional: `model` (free-text, format-checked only — see Step 2 for the value), `effort` (`"low"|"medium"|"high"|"xhigh"`), `gateway` (`"auto"|"required"|"off"`, default `"auto"`), `headless` (default `false`), `h2aSidecar` (default `!headless`; cannot be `true` together with `headless: true`).
+
+Example — "terra, xhigh, headless, on this repo":
+
+```json
+{
+  "profile": "codex",
+  "name": "terra-review",
+  "workspace": "/abs/path/to/repo",
+  "prompt": "<initial instructions>",
+  "background": true,
+  "model": "gpt-5.6-terra",
+  "effort": "xhigh",
+  "gateway": "auto",
+  "headless": true
+}
+```
+
+The tool returns an `h2a.run.result` contract with `session.tmuxSession`, `session.pane`, `session.gateway` (`"gateway"|"direct"`). Read those fields back to confirm what actually launched — do not assume the request was honored silently.
+
+### `h2a run` CLI (reference only — non-Claude-Code hosts / humans at a terminal)
+
+```
+h2a run codex /abs/path/to/repo --model gpt-5.6-terra --effort xhigh --gw --name terra-review --no-attach --background --json --prompt-stdin
+```
+
+Interactive/attached form (drop the background-launch flags, add nothing else):
+
+```
+h2a run claude . --model gpt-5.6-terra --effort xhigh --gw --name terra-review
+```
+
+Other `h2a run` flags worth knowing:
+
+- `-r, --resume <convId>` — continue a conversation; combine with `--model`/`--effort` to relaunch the same conversation at a different flavor/effort.
+- `--headless` — run once, record output under `.h2a/runs/<name>`, then exit (cannot combine with `--h2a`).
+- `--count <n>` — fan out N fresh sessions; incompatible with `--model`/`--effort`/`--resume`/any structured launch (each fanned session is a fresh conversation).
+- `--h2a` / `--no-h2a` — start (or skip) the side-window h2a MCP server; defaults on unless `--headless`.
+- `--name <label>` — tmux slug + tab label; defaults to the workspace dirname. Pick one deliberately when launching more than one session against the same repo.
+
+## Related
+
+- `h2a delegate <type> <task>` accepts the same `--model`/`--effort` flags for a queued/background job (plus `--account <id>` to pin a specific pooled account) — Step 2's resolution rule applies there too.
+- For the actual routing/alias table, defer to the llm-mesh/gateway catalog — this skill never freezes a copy of it beyond the "known as of this writing" hint in Step 2.

package/skills/harness/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: harness
-description: Route repository work through the sentropic harness method. Use in a sentropic repo for branch scope, brainstorming, planning, debugging, testing, review, or adopting harness conventions in a new repo.
+description: Route repository work through the sentropic harness method. Use in a sentropic repo for branch scope, brainstorming, planning, debugging, testing, review, security debt, track reporting, or adopting harness conventions in a new repo.
 ---
 
 # Harness
@@ -12,6 +12,8 @@ Read `using-harness/SKILL.md` first in a sentropic repository. Then read only th
 - `debug/SKILL.md` before diagnosing a defect or unexpected behavior.
 - `test/SKILL.md` when adding or changing tests.
 - `review/SKILL.md` before completion or merge.
+- `security/SKILL.md` for dependency, vulnerability, and supply-chain debt.
+- `track-report/SKILL.md` for a track report, status, or advancement report — rendered in session, no AI subprocess.
 - `adopt/SKILL.md` when bringing the method to a new repository.
 
 Follow the selected workflow completely. Repository-local `AGENTS.md` and explicit user instructions take precedence.

package/skills/harness/review/SKILL.md

@@ -9,16 +9,99 @@ Native sentropic code/design review. Stronger than a single review: **≥2 indep
 lenses, reconciled. Open it with `harness review "<target>" --consensus [--peers <n>]` (records a
 WorkEvent).
 
+## Author-complementary selection
+
+Before selecting a reviewer, create a repo-local Markdown review dossier tied to the target's exact
+commit/path and, for a working-tree target, the SHA-256 of the bytes from
+`git diff HEAD --no-ext-diff`. It MUST record the author's `host`, exact `model`, and `effort`. Host means
+`claude` or `codex`, the profiles the launch operation actually accepts. **Unknown author means no
+acceptable review:** write `status: selection-failed` and `observed-failure` to that dossier, then stop;
+never infer missing metadata from the current CLI.
+
+```yaml
+review-author:
+  host: codex
+  model: <exact-model-id>
+  effort: <low|medium|high|xhigh>
+target-ref: <commit/path>
+target-diff-sha256: <required for a working-tree target>
+```
+
+Build candidates as `(profile, model, effort, lens)` from the currently reachable h2a/llm-mesh set. Resolve
+model ids through the `h2a-run` skill/live mesh; never freeze a routing table here. Mechanically keep a
+candidate only when:
+
+```
+candidate.profile != author.host && candidate.model != author.model
+```
+
+Deduplicate surviving `(profile, model)` pairs and require ≥2. Complementarity is on the **host**, not
+only the model: Codex authors get Claude-hosted legs; Claude authors get Codex-hosted legs. If fewer than
+two eligible legs remain, write `status: selection-failed` and `observed-failure` to the dossier; do not
+claim consensus.
+
+## Dispatch through h2a
+
+Keep legs blind and give each the same target plus a distinct adversarial lens. Launch only through the
+installed h2a MCP server's `h2a_run` tool — that is how a skill user reaches the `h2a run` operation.
+The packaged Claude Code hook also refuses direct `h2a` CLI calls from Bash.
+
+The MCP call requires `profile: "claude"|"codex"`, a unique `name`, `prompt`, `background: true`, and an
+absolute existing directory `workspace` that realpaths inside the MCP startup root and outside the OS temp
+directory. It optionally accepts `model`, `effort: low|medium|high|xhigh`, `gateway: auto|required|off`,
+`headless`, and `h2aSidecar`; `required` is Claude-only, so Codex uses `auto|off`.
+Use no other profile or field. Never embed an endpoint or credential: h2a and the llm-mesh own accounts,
+reachability, routing, and fallback.
+
+The selector compares the exact **declared/requested** model ids. Today's launch receipt does not attest
+the effective post-routing model or effort, so it cannot expose an unreported fallback. Never describe the
+request, receipt, or reviewer's self-report as proof of effective identity.
+
+## One readable artefact per leg
+
+Create a readable Markdown stub at a unique repo-local path before dispatch and put that exact path in the
+prompt. Use a machine-readable header:
+
+```yaml
+status: dispatched|completed|failed
+reviewer-host: claude|codex
+reviewer-model: <declared/requested-model-id>
+reviewer-effort: <low|medium|high|xhigh>
+target-ref: <commit/path>
+target-diff-sha256: <required for a working-tree target>
+lens: <assigned-adversarial-lens>
+observed-failure: <required when failed>
+```
+
+A completed leg adds readable reasoning, findings, and a verdict. A failed leg has no verdict. A launch
+result proves only that a session started; a table saying `GO` is not a leg artefact.
+
+Launch rejection, agent error, timeout, missing/unreadable file, or mismatch among selected/requested/
+declared metadata is the leg's `FAILED` result. The coordinator writes the observed failure to the stub;
+never report the verdict the tool would have produced and never hide a failed leg behind an unrecorded
+retry.
+
 ## Consensus protocol
 
-1. **Dispatch ≥2 independent peers** on the SAME diff/design — ideally different models or angles
-   (e.g. Opus 4.8 + Codex 5.5-xhigh), each blind to the others.
-2. **Distinct lenses** when a finding can fail in more than one way: correctness · security · performance ·
-   does-it-actually-reproduce. Diversity catches what redundancy can't.
-3. **Refute by default** — each peer tries to REFUTE the change / a claimed finding. A finding survives
-   only if it withstands the skeptics; a kill needs a majority.
-4. **Reconcile** — merge findings, surface disagreements explicitly, classify accept / reject / defer with
-   a one-line rationale each. Don't average; adjudicate.
+1. Dispatch ≥2 eligible independent peers on the SAME diff/design, each blind to the others.
+2. Use distinct lenses where a finding can fail in more than one way: correctness · security · performance
+   · does-it-actually-reproduce.
+3. Refute by default. A finding survives only if it withstands the skeptics; a kill needs a majority.
+4. Reconcile only completed leg artefacts. Preserve disagreements and classify accept / reject / defer
+   with a one-line rationale; do not average.
+5. Write the aggregate result to the review dossier with links to every leg, using:
+
+   ```yaml
+   status: completed|incomplete|selection-failed
+   legs:
+     - path: <repo-local-leg-path>
+       status: completed|failed
+   consensus-verdict: <required only when status is completed; omit otherwise>
+   observed-failure: <required when status is incomplete or selection-failed; omit otherwise>
+   ```
+
+   `completed` requires ≥2 eligible completed legs and no failed dispatched leg. Any dispatched leg that
+   fails makes the dossier `incomplete`; selection failure and incomplete review have no consensus verdict.
 
 ## Receiving review (technical rigor, not performative agreement)
 
@@ -31,3 +114,11 @@ ambiguous.
 Findings that gate a lot escalate to a `VerificationRun` (`harness verify --category static`). Narrative
 findings stay a `WorkEvent`. Blocking findings must be resolved before merge; non-blocking are logged in
 `BRANCH.md` `## Feedback Loop` with owner + status.
+
+## Enforcement boundary
+
+**Structural > test > spec line > habit.** The MCP schema and Claude Code Bash guard are structural for
+launch shape only. This skill states the metadata, selector, artefact, and failure contract (spec line),
+but an agent still applies the predicate, trusts declared identities, and checks outputs (habit). No code
+in this design enforces author exclusion or attests the effective model; do not present either as
+structural or test-backed.

package/skills/harness/security/SKILL.md

@@ -0,0 +1,55 @@
+---
+name: security
+description: Use for dependency, vulnerability, and supply-chain debt — maps scanner coverage, makes exceptions expire, and wires enforceable gates.
+---
+
+# harness/security
+
+Native vulnerability-debt discipline. Load it before accepting findings, changing dependency policy, or
+shipping an artifact. It is not a claim that one scanner covers a repo.
+
+## Map the coverage boundary
+
+Inventory each shipped/runnable surface: resolved dependency trees, container image/base OS, vendored
+code, and packaged/generated artefacts. A coverage map records component, embedded path, delivery form,
+stack-appropriate scanner, and CI gate. Choose from the lockfile/package manager, image builder, and
+artifact format; do not hardcode an ecosystem command into a portable repo.
+
+A dependency scanner sees only its resolved package tree, not image layers, vendored artefacts, packaged
+builds, or another ecosystem's tree. An unscanned surface is a visible coverage gap, never an exception;
+use an SBOM or artifact/image scanner at the appropriate boundary.
+
+## Triage and record exceptions
+
+Fix a HIGH finding on its own dedicated branch; do not wait for a dependency batch. An accepted finding in
+`.security/vulnerability-register.yaml` has stable advisory/scanner identity, scanner-native affected
+identifier/version or digest, component, embedded path, severity/source, rationale, owner, accepted date,
+`review_by: YYYY-MM-DD` (UTC), and removal plan with target. Match identity, affected item, component,
+and path exactly: no package-wide, glob, or expiry-free suppression.
+
+`review_by` is the last valid UTC date, not a reminder. The gate validates every row on every run; when
+the current UTC date is later, it emits advisory, owner, component, path, and date, then fails until the
+finding is fixed or a new explicit decision renews it. Missing, malformed, or non-matching rows suppress
+nothing.
+
+## Gate and threshold
+
+CI scans first, consults the checked-in register, then suppresses only exact, unexpired accepted findings.
+Never blanket-disable a scanner or globally ignore results to unblock release. Give dependency-tree, image,
+and artifact gates separate results so their coverage cannot be confused.
+
+Choose the threshold from scanner signal, exposure, exploitability, patch burden, and triage capacity.
+Failing on LOW commonly creates noise that gets the gate disabled; failing on nothing is theatre. Many
+repos initially fail HIGH/CRITICAL and report MEDIUM/LOW with an owner/SLA; that is a reasoned starting
+point, not a harness default.
+
+## Enforceability ladder
+
+**Structural > test > spec line > habit.** CI matching, expiry failure, and separate surface gates are
+structural. Fixture/contract tests for threshold, exact match, expiry, and malformed rows are test. This
+skill, the repository's documented register fields, and coverage map are spec line. Triage, ownership, and
+keeping removal plans/review dates current are habit, so insufficient alone.
+
+The H2A reference implementation — `.security/vulnerability-register.yaml`, `audit:security`, and its CI
+gate — is delivered separately. This skill specifies that contract; it neither creates the gate nor proves
+an unobserved platform result.

package/skills/harness/track-report/SKILL.md

@@ -0,0 +1,103 @@
+---
+name: track-report
+description: Use when asked for a track report, status, or advancement report. Read the deterministic conductor first; any contextual synthesis is advisory conversation work.
+---
+
+# harness/track-report
+
+The agent already in the conversation supplies the contextual prose. `track` supplies complete,
+deterministic facts. Do not call a model, adapter, gateway, or network-backed report path. Every command
+below is a local, read-only projection of the folded log.
+
+## Read the deterministic layer
+
+Run these commands from the repository root, in this order:
+
+```bash
+track report --raw --format json
+track report --wp --decisions --format json
+track decision ls --outcome pending --format json
+```
+
+- The first command is the factual snapshot: all buckets, their raw total, recent events, decision
+  `structure`, `outsideRollup`, and a reconciled `wpTotals`.
+- The second is the complete conductor projection. Its `wpTree` and `view` are the only source for WP
+  identity, per-WP percentages, directives, and their deterministic order. It never truncates rows.
+- The third lists every pending decision without a renderer cap. Each row carries its exact `workspace`,
+  `options`, `recommendation`, and `structure` (`structured` or `unstructured`).
+
+Do not use `track report --flat` to recover omitted conductor rows: it is a deterministic flat diagnostic,
+not an emergency route. The conductor projection above is complete. Do not use `track report --level wp`
+to label WPs for this report; it is a different status projection. If it is useful as a diagnostic, its
+labels now match the conductor, but the conductor remains the report's single source.
+
+If `outsideRollup` is non-empty, render a visible **HORS ROLLUP** group with every row. `wpId` absent means
+the item has no WP ancestor; a present `wpId` means an intermediate non-WP item is outside the leaf-only
+rollup. Neither may disappear from the report. Check that `DONE + TO-DO + AWAITED + DROPPED` equals
+`wpTotals.done + (wpTotals.active - wpTotals.done) + wpTotals.dropped`; if it does not, report the mismatch
+as a tool defect rather than silently selecting a denominator.
+
+## Inspect decisions safely
+
+Never infer choices by parsing a prose `context` field.
+
+- A `structured` decision has at least two stored `options` and a stored `recommendation`; render those
+  choices, their stored titles/summaries, and the recommendation in **DÉCISIONS**. Do not invent an effect:
+  no separate machine-readable effect field is exposed.
+- An `unstructured` decision has no machine-readable choice set, even if its prose happens to contain
+  “Choix A”. Put it in **À INSTRUIRE** as “dossier à structurer”; say explicitly that alternatives are not
+  recorded. Do not present it as an owner choice with invented alternatives.
+
+For a single structured dossier, use the exact workspace from `decision ls`:
+
+```bash
+track focus <decision-id> --workspace <workspace-from-decision-ls>
+```
+
+`--workspace` is required. A mismatched workspace is an error; never substitute `track workspace-id` or a
+workspace inferred from the current directory. Number only structured decisions `D1…Dn`, in their relative
+`decision ls` order, and retain each decision id alongside the number. Unstructured dossiers do not reserve
+a D-number: list them in À INSTRUIRE as “dossier à structurer”.
+
+This skill is **advisory**. No command, hook, MCP tool, or validator executes it
+or proves that a synthesis followed it. Do not describe this guidance as an
+enforcement mechanism.
+
+**FAIT** — `scope · avancement · dernières actions`. State the period you used (last report, baseline
+commit, or explicit session boundary) and synthesize accomplishments, not inventory. Keep the raw and
+conductor total distinction honest: they should now reconcile; mention HORS ROLLUP when it is non-empty.
+
+**À-FAIRE** — `WP · av. · à faire · bloqué · prochaine action`. Render every WP from `view.tables`, then
+the HORS ROLLUP rows when present. Start with the deterministic `view.directives` order: it combines the
+recorded gate/acceptance/WIP ladder with stored WSJF where one exists. Do not call that subjective
+“priority” when `facts.wsjf` is absent. A `priority-missing` directive means the log has no assessment;
+only an owner-authorized write such as
+`track priority assess <item-id> --ubv <n> --tc <n> --rr <n> --js <n>` can add one.
+
+`prochaine action` must name an executor. The log does **not** record a model or reasoning effort. Use a
+model/effort only when owner/session context supplied it; otherwise write exactly that the executor is
+owner context required, for example: `exécuteur: contexte owner requis (modèle/effort non présents dans le
+journal)`. Do not invent `sol xhigh` or similar conventions, and do not leave the field blank.
+
+**DÉCISIONS** — only structured, genuine native dossiers (pending or settled). Render their stored alternatives,
+recommendation, and a durable selected option when present. `formatWpConductor` uses ordinary
+drawn tables and does not add a fence; add one only when the destination requires it. Rule-derived
+blocker prompts stay in À-FAIRE; unstructured dossiers stay in À INSTRUIRE.
+
+**RECOMMANDATION** — an executable plan conditioned on those decisions: name lanes that can start now,
+what each answer unblocks, and where executor context is still required. The owner must be able to reply
+`vas y` or `D1 A · D2 B` without the report pretending an unrecorded choice exists.
+
+`track report --inline` is a compact terminal summary, not the complete report route: it may summarize a
+tail with an explicit count. Do not use it to satisfy the four sections above or to recover HORS ROLLUP rows.
+
+## Honesty rules
+
+- Every conductor row, pending decision, and outside-rollup item appears. Never summarize a hidden tail as
+  “+N autres”.
+- A rule-derived prompt is not a decision. It belongs in À-FAIRE as a dossier/action to prepare.
+- Prefer named items and concrete acceptance debt over generic counts.
+- The deterministic layer proves structure and order; contextual wording remains the agent's responsibility.
+  State uncertainty instead of promoting a missing stored fact to a conclusion.
+
+Spec: `docs/specs/2026-07-28-track-report-contextual-rendering.md`.

package/skills/harness/using-harness/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: using-harness
-description: Load FIRST in any sentropic repo — establishes the harness method (branch/scope/test/debug/review/brainstorm/plan) and replaces legacy superpowers for those acts.
+description: Load FIRST in any sentropic repo — establishes the harness method (branch/scope/test/debug/review/security/track-report/brainstorm/plan) and replaces legacy superpowers for those acts.
 ---
 
 # Using harness
@@ -20,6 +20,8 @@ compatibility only. Do NOT invoke superpowers for acts covered here — use the
 | tests | `harness/test` | superpowers:test-driven-development |
 | debugging | `harness/debug` | superpowers:systematic-debugging |
 | code review | `harness/review` | superpowers:requesting/receiving-code-review |
+| dependency / vulnerability debt | `harness/security` | — |
+| track report / status / advancement | `harness/track-report` | — |
 | planning | `harness/plan` | superpowers:writing-plans / executing-plans |
 | branch lifecycle | `harness branch init|close` | superpowers:using-git-worktrees / finishing-a-development-branch |
 | scope / verification | `harness verify` · `harness check scope|branch` | superpowers:verification-before-completion |

package/focus-app/client/_app/immutable/assets/0.BdzHFb9q.css.br

@@ -1,2 +0,0 @@
-o
���8F���-��W_I�MLq
-R5���$cf�Q��?