@sentropic/track 0.87.0 → 0.89.0

package/dist/report/format.js

@@ -3,7 +3,13 @@ import { buildDirectives, decisionNeedsFocus, dispatchQueueOf, keystoneOf, } fro
 // Unified report presentation (spec 2026-07-11) — the SINGLE enum→French lexicon the cockpit shares, so
 // the two surfaces can never re-word apart. The terminal composes its own `<nature> (<actor>): <clause>`
 // sentence but sources the canonical action clause + scope label from here.
-import { directiveScopeLabelFr as directiveScopeLabel, stepActionFr } from './friendly.js';
+import { directiveScopeLabelFr as directiveScopeLabel, gatePhraseFr, stepActionFr } from './friendly.js';
+/** Reject stale JavaScript callers rather than treating an unsupported runtime value as text. */
+export function assertReportFormat(format) {
+    if (format !== 'json' && format !== 'text' && format !== 'md') {
+        throw new Error(`unsupported report format: ${format}`);
+    }
+}
 const BACKSLASH = String.fromCharCode(92);
 // Markdown metacharacters escaped in `md` titles so a user title can't inject formatting.
 const MD_META = new Set([
@@ -29,16 +35,53 @@ export function cleanDisplayText(s) {
     }
     return out.trim();
 }
-/** A display-safe title: control-normalized for text, plus markdown-metacharacter-escaped for md. */
-export function displayText(s, format) {
-    const t = cleanDisplayText(s);
-    if (format !== 'md')
-        return t;
+/** Backslash-escape every markdown metacharacter. Does NOT trim — the caller owns normalization. */
+function escapeMdMeta(s) {
     let out = '';
-    for (const ch of t)
+    for (const ch of s)
         out += MD_META.has(ch) ? BACKSLASH + ch : ch;
     return out;
 }
+/** A display-safe title: control-normalized for text, plus markdown-metacharacter-escaped for md. */
+export function displayText(s, format) {
+    const t = cleanDisplayText(s);
+    return format === 'md' ? escapeMdMeta(t) : t;
+}
+/**
+ * The row handle token `[n.m]` — ONE definition, three consumers: the builder emits it, the renderer
+ * keeps it OUT of the markdown-escaped span, and the parity test extracts it. It is exempt from escaping
+ * because it is MACHINE-GENERATED, never user content: `track report --resolve <handle>` is the documented
+ * path from a rendered row to an action, and a handle a machine has to unescape first is a handle that
+ * breaks that path in exactly one of the three formats.
+ *
+ * The exemption cannot become an injection route: only the literal token matches, and every other
+ * character around it — including the `(` `)` a markdown link would need — is still escaped.
+ */
+export const HANDLE_TOKEN_SOURCE = String.raw `\[\d+\.\d+\]`;
+/** Fresh instance per call: a shared `g`-flagged regex carries `lastIndex` state between callers. */
+export function handleTokenRegex() {
+    return new RegExp(HANDLE_TOKEN_SOURCE, 'gu');
+}
+/**
+ * A display-safe TABLE CELL. Same guarantee as `displayText` for every user-originated fragment, with the
+ * machine-generated handle token passed through verbatim so all three formats yield the SAME handle set.
+ */
+export function displayCell(s, format) {
+    // Criterion 27 — an explicit `\n` is an EDITORIAL break (one idea per line) and survives to the
+    // renderer; every other control character still collapses to a space.
+    return s
+        .split('\n')
+        .map((line) => {
+        const t = cleanDisplayText(line);
+        if (format !== 'md')
+            return t;
+        return t
+            .split(new RegExp(`(${HANDLE_TOKEN_SOURCE})`, 'u'))
+            .map((part, index) => (index % 2 === 1 ? part : escapeMdMeta(part)))
+            .join('');
+    })
+        .join('\n');
+}
 function clean(s) {
     return cleanDisplayText(s);
 }
@@ -128,14 +171,6 @@ function actionDisposition(r) {
         return 'terminer ou expliciter blocage';
     return 'exécuter prochain incrément';
 }
-function decisionDisposition(d) {
-    if (decisionNeedsFocus(d)) {
-        return `focus décision HTML conseillé: track focus ${d.id} --workspace ${d.workspace} --format html`;
-    }
-    if ((d.openQuestionCount ?? 0) > 0)
-        return 'répondre aux questions ouvertes puis trancher';
-    return `choisir une option enregistrée puis la régler durablement avec track decision select ${d.id} <option-id> --outcome <go|no-go>`;
-}
 function cell(s) {
     return clean(s).replaceAll('|', '¦');
 }
@@ -168,23 +203,36 @@ function wrapCell(s, width) {
         lines.push(line);
     return lines;
 }
-function table(headers, rows) {
+function defaultCap(header) {
+    const k = header.toLowerCase();
+    if (k.includes('sujet') || k.includes('items') || k.includes('à faire'))
+        return 72;
+    if (k.includes('préconisation') || k.includes('dernières actions'))
+        return 64;
+    if (k.includes('prochaine action'))
+        return 44;
+    if (k.includes('complexité') || k.includes('notes') || k.includes('dropped'))
+        return 38;
+    if (k.includes('scope'))
+        return 42;
+    if (k === 'wp')
+        return 30;
+    if (k.includes('wp'))
+        return 42;
+    if (k === 'av.')
+        return 6;
+    if (k.includes('bloqué'))
+        return 18;
+    return 24;
+}
+function table(headers, rows, capOverrides) {
     // Terminal-first padded table: aligned columns, bounded width, MULTI-LINE cells.
     // No ellipsis: long content wraps inside the column so the report stays readable and complete enough.
-    const caps = headers.map((h) => {
-        const k = h.toLowerCase();
-        if (k.includes('sujet') || k.includes('items') || k.includes('à faire'))
-            return 72;
-        if (k.includes('préconisation') || k.includes('dernières actions'))
-            return 64;
-        if (k.includes('complexité') || k.includes('notes') || k.includes('dropped'))
-            return 38;
-        if (k.includes('scope') || k.includes('wp'))
-            return 42;
-        return 24;
-    });
+    const caps = headers.map((h, i) => capOverrides?.[i] ?? defaultCap(h));
     const head = headers.map((h, i) => cell(h).slice(0, caps[i]));
-    const wrappedRows = rows.map((row) => headers.map((_, i) => wrapCell(row[i] ?? '', caps[i])));
+    // Criterion 27 — a cell is written like an editor writes: one idea per line. An explicit `\n` is a
+    // break the reader asked for; wrapping only handles what overflows a line.
+    const wrappedRows = rows.map((row) => headers.map((_, i) => (row[i] ?? '').split('\n').flatMap((line) => (line.trim() === '' ? [''] : wrapCell(line, caps[i])))));
     const widths = head.map((h, i) => Math.min(caps[i], Math.max(h.length, ...wrappedRows.flatMap((r) => r[i]).map((v) => v.length))));
     // Padding aligns interior columns; remove only terminal padding so reports and committed fixtures do not
     // carry invisible trailing whitespace.
@@ -200,9 +248,36 @@ function table(headers, rows) {
         out.pop();
     return out;
 }
+/**
+ * A BOX-DRAWN table (the shape the owner validated for DÉCISIONS). Cells may carry explicit `\n`
+ * line breaks — one alternative per line — so a recommendation can sit on the line of its own option.
+ * Deterministic: widths are derived from the content, capped per column, and long lines wrap.
+ */
+function drawTable(headers, rows, caps, center = []) {
+    const split = (value, width) => value.split('\n').flatMap((line) => (line.trim() === '' ? [''] : wrapCell(line, width)));
+    const wrapped = rows.map((row) => headers.map((_, i) => split(row[i] ?? '', caps[i])));
+    const widths = headers.map((h, i) => Math.min(caps[i], Math.max(cell(h).length, ...wrapped.flatMap((r) => r[i]).map((v) => v.length), 1)));
+    const pad = (value, i) => center[i] === true
+        ? ' '.repeat(Math.floor((widths[i] - value.length) / 2)) +
+            value +
+            ' '.repeat(widths[i] - value.length - Math.floor((widths[i] - value.length) / 2))
+        : value.padEnd(widths[i]);
+    const rule = (left, mid, right) => left + widths.map((w) => '─'.repeat(w + 2)).join(mid) + right;
+    const line = (cells) => '│ ' + cells.map((v, i) => pad(v, i)).join(' │ ') + ' │';
+    const out = [rule('┌', '┬', '┐'), line(headers.map((h) => cell(h))), rule('├', '┼', '┤')];
+    wrapped.forEach((row, index) => {
+        const height = Math.max(...row.map((cellLines) => cellLines.length));
+        for (let y = 0; y < height; y++)
+            out.push(line(row.map((cellLines) => cellLines[y] ?? '')));
+        if (index < wrapped.length - 1)
+            out.push(rule('├', '┼', '┤'));
+    });
+    out.push(rule('└', '┴', '┘'));
+    return out;
+}
 /**
  * Directive fallback for repos that have no WP containers yet. This is intentionally NOT the exhaustive
- * flat dump: it keeps the “decision/action recommendation” spirit while `--flat` remains available for
+ * flat dump: it keeps deterministic action guidance while `--flat` remains available for
  * the full bucket listing.
  */
 export function formatActionReport(report, format) {
@@ -220,20 +295,13 @@ export function formatActionReport(report, format) {
     lines.push(h('SYNTHÈSE'));
     lines.push(...table(['fait', 'à-faire', 'attendus', 'dropped', 'décisions pending'], [[String(done.length), String(todo.length), String(awaited.length), String(dropped.length), String(pendingDecisions.length)]]));
     lines.push('');
-    lines.push(h('DÉCISIONS/ACTIONS'));
+    lines.push(h('ACTIONS DÉRIVÉES'));
     const candidates = [...awaited, ...todo];
     const actionRows = [];
     const focusCount = pendingDecisions.filter(decisionNeedsFocus).length;
     if (focusCount >= 2 || pendingDecisions.length >= 4) {
         actionRows.push(['focus', 'décisions accumulées', 'focus (humain): lancer focus HTML local; régler toute option choisie avec track decision select']);
     }
-    for (const d of pendingDecisions) {
-        actionRows.push([
-            d.decisionKind,
-            title(d.title, format),
-            `décision (${d.accountable ?? 'owner'}): ${decisionDisposition(d)}`,
-        ]);
-    }
     for (const r of candidates) {
         actionRows.push([
             r.bucket,
@@ -241,14 +309,14 @@ export function formatActionReport(report, format) {
             `action (${r.engagementRef !== undefined ? 'h2a/subagent' : 'local/subagent'}): ${actionDisposition(r)}`,
         ]);
     }
-    lines.push(...table(['scope/gate', 'sujet', 'préconisation'], actionRows.length > 0 ? actionRows : [['-', 'aucune décision/action ouverte', '-']]));
+    lines.push(...table(['scope/gate', 'sujet', 'préconisation'], actionRows.length > 0 ? actionRows : [['-', 'aucune action dérivée ouverte', '-']]));
     lines.push('');
     if (structured.length > 0) {
         lines.push(h('DÉCISIONS'));
         lines.push(...table(['dossier', 'alternatives enregistrées', 'recommandation / règlement'], structured.map((d) => [
             `${d.id} — ${title(d.title, format)} (${d.outcome})`,
             d.options?.map((option) => `${option.id}: ${title(option.title, format)} — ${title(option.summary, format)}`).join(' / ') ?? '-',
-            `recommandée:${d.recommendation?.optionId ?? '-'}${d.selectedOptionId !== undefined ? `; sélectionnée:${d.selectedOptionId}` : ''}`,
+            `recommandée:${d.recommendation?.optionId ?? '-'}${d.selectedOptionId !== undefined ? `; sélectionnée:${d.selectedOptionId}` : d.outcome === 'pending' ? `; régler avec track decision select ${d.id} <option-id> --outcome <go|no-go>` : ''}`,
         ])));
         lines.push('');
     }
@@ -421,7 +489,7 @@ export function collapseLeafCohorts(leaves) {
 export function directivePhrase(d) {
     // §A6 — a directive renders a CONCRETE next move + the actor, and NAMES what blocks (the info the
     // `sujet` column does NOT already carry). All interpolated titles/refs are RAW here — the render layer
-    // (table `esc`, inline `clean`, html `escapeHtml`) escapes them (§A4). A decision surfaces as a "décision"
+    // (table `esc`, inline `clean`) escapes them (§A4). A decision surfaces as a "décision"
     // line ONLY when it genuinely blocks (mode `human-decision`); otherwise the phrase préconise a step.
     //
     // Unified presentation (spec 2026-07-11) — the action CLAUSE is the shared canonical `stepActionFr`, so
@@ -448,7 +516,280 @@ export function directivePhrase(d) {
     const suffix = d.step.code === 'resolve-external-blocker' || d.step.code === 'finish-increment' ? on() : '';
     return `action (${mode}): ${stepActionFr(d.step.code)}${suffix}`;
 }
-export function buildWpConductorView(tree, decisions = [], outsideRollup = [], totalScope = 'global') {
+// ---- the four owner-facing sections (spec 2026-07-29) ----------------------------------------------
+// FAIT · À-FAIRE · DÉCISIONS · RECOMMANDATION. Nothing else is a top-level section: what mattered in the
+// old `À-FAIRE SANS WP` / `HORS ROLLUP` / `À INSTRUIRE` / `HISTORIQUE NON STRUCTURÉ` / `ACTIONS DÉRIVÉES`
+// tables is folded INTO the four, by title — never deleted (criteria 17/18).
+/** No blockage is RECORDED. Never emitted when a gate exists (criterion 19). */
+const NO_GATE = '—';
+/** No next action, and none is owed: the row is gated on a decision (criterion 14, as scoped). */
+const NO_ACTION = '—';
+/** A gate → the SHORT token `bloqué` carries. A decision gate is replaced by its D/Q number. */
+const GATE_TOKEN = {
+    'decision-pending': 'décision',
+    'engagement-pending': 'h2a',
+    'external-dependency': 'dépendance',
+    'linked-dependency': 'dépendance',
+    'manual-blocker': 'blocage',
+    'spec-not-ready': 'spec',
+    'acceptance-failed': 'recette KO',
+    'acceptance-stale': 'recette',
+    'priority-missing': 'priorité',
+};
+/** DONE leaves under a node, most recent first (ULIDs sort by time), for FAIT's `dernières actions`. */
+function recentDoneLeaves(node) {
+    const out = [];
+    const walk = (n) => {
+        for (const l of n.leaves)
+            if (l.bucket === 'DONE')
+                out.push(l);
+        for (const c of n.children)
+            walk(c);
+    };
+    walk(node);
+    return out.sort((a, b) => (a.id < b.id ? 1 : a.id > b.id ? -1 : 0));
+}
+/**
+ * A period is a projection over the already-folded log, not a second state fold. When one is selected,
+ * FAIT names precisely the leaves that emitted `realization.transition → done` inside it. This deliberately
+ * includes a delivery subsequently reopened: the delivery happened during the asked period even though the
+ * item's current bucket is no longer DONE.
+ */
+function periodDoneLeaves(node, deliveredItemIds) {
+    if (deliveredItemIds === undefined)
+        return recentDoneLeaves(node);
+    const out = [];
+    const walk = (n) => {
+        for (const leaf of n.leaves)
+            if (deliveredItemIds.has(leaf.id))
+                out.push(leaf);
+        for (const child of n.children)
+            walk(child);
+    };
+    walk(node);
+    return out.sort((a, b) => (a.id < b.id ? 1 : a.id > b.id ? -1 : 0));
+}
+const LAST_ACTIONS_SHOWN = 3;
+/**
+ * FAIT's third column (criteria 3/4/22/26/27).
+ *
+ * When the scope's completions fit, they ARE the statement — one per line (27), not a `·`-joined block.
+ *
+ * When they do not, the renderer must NOT emit the titles: a chronological list of item titles is a
+ * commit log translated into French, which is precisely the shape criterion 26 forbids. It has no reading
+ * of them to offer, so it says what it owes and what writing it takes — three lines, one idea each. That
+ * cell is an instruction to the agent, never a result.
+ */
+function lastActionsCell(titles) {
+    if (titles.length === 0)
+        return 'aucune action enregistrée';
+    if (titles.length <= LAST_ACTIONS_SHOWN)
+        return titles.join('\n');
+    return [
+        `bilan à écrire : ${titles.length} livraisons sur la fenêtre, titres seuls dans le projeté.`,
+        'Écrire par la finalité — la capacité atteinte, la classe de problème fermée ; chiffres en appui.',
+    ].join('\n');
+}
+// ---- `prochaine action` (criterion 20) -----------------------------------------------------------
+// The gate-derived clause (`Terminer l'incrément en cours`, `Rédiger la spécification`) names the CLASS of
+// the work, never the work. Twenty rows, five distinct sentences, zero information — that is a template,
+// not a recommendation, and this renderer must stop presenting one as the other. The class is not lost: it
+// is exactly what the `bloqué` column already says, under a label that is honest about being a class.
+//
+// So the deterministic layer emits a marker that CANNOT be mistaken for a recommendation, and the skill
+// makes the agent replace it — on the focus rows only, by opening the item — with the concrete gesture.
+/** A focus row: the agent MUST open the item and name the gesture before this report is served. */
+const NEXT_ACTION_TO_INSTRUCT = 'à instruire : ouvrir l’item et nommer le geste';
+/** A non-focus row: the report says plainly that the action was not instructed, rather than faking one. */
+const NEXT_ACTION_NOT_INSTRUCTED = 'non instruite';
+/** Criterion 24 — what would make an unanswerable dossier answerable. Specific, not a gate class. */
+const NEXT_ACTION_STRUCTURE_DOSSIER = 'à structurer : enregistrer options + recommandation';
+/** How many leading rows are the focus — the same five the À-FAIRE ordering line already names. */
+const FOCUS_ROWS = 5;
+/**
+ * Criterion 25 — beyond this many days the window is LONG, and the WP is the unit of reading: a sub-WP is
+ * implementation detail that inflates the table and blurs the reading by theme. Sub-levels are aggregated
+ * into their parent, never listed beside it. They come back on a short window or on explicit owner
+ * request (`--sub-wp`).
+ */
+const LONG_WINDOW_DAYS = 14;
+/**
+ * The ordering invariant of a RENDERED period — BRANCH gate: no rendered period carries reversed bounds.
+ * `periodProjection` (read/commands.ts) holds it for every RESOLVED period, which covers every report route
+ * (CLI, MCP, library `reportText`/`reportInline`). It cannot cover a caller that BUILDS a `periodWindow`
+ * itself and hands it to the public presenter exports — so the presenter asserts the same invariant here,
+ * at the single funnel every rendered view crosses. One rule, two boundaries: a later narrowing on one side
+ * cannot re-open the other.
+ */
+export function assertOrderedPeriodWindow(meta) {
+    const window = meta.periodWindow;
+    if (window === undefined)
+        return;
+    const fromMs = window.from === undefined ? undefined : Date.parse(window.from);
+    const toMs = window.to === undefined ? undefined : Date.parse(window.to);
+    if (fromMs === undefined || toMs === undefined || Number.isNaN(fromMs) || Number.isNaN(toMs))
+        return;
+    if (fromMs > toMs) {
+        throw new Error('resolved report period must not end before it begins');
+    }
+}
+function windowDays(meta) {
+    const from = meta.periodWindow?.from ?? meta.logFrom;
+    const to = meta.periodWindow?.to ?? meta.now ?? meta.logTo;
+    if (from === undefined || to === undefined)
+        return undefined;
+    const fromMs = Date.parse(from);
+    const toMs = Date.parse(to);
+    return Number.isNaN(fromMs) || Number.isNaN(toMs) ? undefined : (toMs - fromMs) / 86_400_000;
+}
+/**
+ * How much of an item's RECORDED body the `à faire` cell shows. Tight on purpose: one clause, enough to
+ * tell the owner what the row is about, cut at a word boundary and always marked `extrait :` so nobody
+ * reads it as the full record — the same honesty the old `extrait` column applied.
+ */
+const TODO_EXCERPT_MAX = 100;
+const ULID = /[0-9A-HJKMNP-TV-Z]{26}/gu;
+/**
+ * Owner-facing conductor cells never print aggregate identifiers. This runs while the shared view is built,
+ * so JSON, text, and Markdown consume the same redacted cells. The machine-only handle-resolution block
+ * keeps its ids intact so the report remains actionable.
+ */
+function redactOwnerText(value) {
+    return value.replace(ULID, 'référence interne');
+}
+function redactOwnerTable(table) {
+    const ownerColumns = new Set(table.columns.map((column) => column.id));
+    return {
+        ...table,
+        rows: table.rows.map((row) => Object.fromEntries(Object.entries(row).map(([key, value]) => [key, ownerColumns.has(key) ? redactOwnerText(value) : value]))),
+        ...(table.lines === undefined ? {} : { lines: table.lines.map(redactOwnerText) }),
+    };
+}
+/** `undefined` for an absent/blank body — a bare title is then the HONEST render, not a gap to fill. */
+export function todoExcerpt(body) {
+    // Owner-facing excerpts can mention a record, but the record's ULID belongs in the machine-only handle block.
+    const cleaned = body === undefined ? undefined : clean(redactOwnerText(body));
+    if (cleaned === undefined || cleaned === '')
+        return undefined;
+    if (cleaned.length <= TODO_EXCERPT_MAX)
+        return cleaned;
+    const cut = cleaned.slice(0, TODO_EXCERPT_MAX);
+    const boundary = cut.lastIndexOf(' ');
+    return `${(boundary > TODO_EXCERPT_MAX / 2 ? cut.slice(0, boundary) : cut).trimEnd()}…`;
+}
+/** The `prochaine action` values this renderer may emit. A test pins that no gate clause joins them. */
+export const DETERMINISTIC_NEXT_ACTIONS = [
+    NEXT_ACTION_TO_INSTRUCT, NEXT_ACTION_NOT_INSTRUCTED, NEXT_ACTION_STRUCTURE_DOSSIER, '—',
+];
+/**
+ * Criterion 20, made checkable. The owner's judgement — is the sentence RIGHT — is out of reach of any
+ * test; these two mechanical failures are not. A contextual report passes when every focus row has been
+ * instructed AND no substantive action repeats more than twice or equals a gate clause.
+ *
+ * The renderer's own markers are counted as `uninstructed`, never as violations: they are the honest
+ * statement that the work is still owed, which is exactly what the report must say until it is done.
+ */
+export function auditNextActions(values, gateClauses) {
+    const marker = new Set(DETERMINISTIC_NEXT_ACTIONS);
+    const substantive = values.filter((value) => !marker.has(value));
+    const counts = new Map();
+    for (const value of substantive)
+        counts.set(value, (counts.get(value) ?? 0) + 1);
+    const repeated = [...counts.entries()].filter(([, n]) => n > 2).map(([value]) => value);
+    const bare = (value) => value.replace(/^(?:action|engagement|décision) \([^)]*\)\s*:\s*/u, '');
+    const gates = new Set(gateClauses);
+    const hits = substantive.filter((value) => gates.has(bare(value)));
+    const uninstructed = values.filter((value) => value === NEXT_ACTION_TO_INSTRUCT).length;
+    return { uninstructed, repeated, gateClauses: [...new Set(hits)], ok: repeated.length === 0 && hits.length === 0 };
+}
+/** `2026-07-29T11:02:03.000Z` → `2026-07-29`. UTC, so the header is TZ-independent and reproducible. */
+function isoDate(value) {
+    if (value === undefined)
+        return undefined;
+    const parsed = new Date(value);
+    return Number.isNaN(parsed.getTime()) ? undefined : parsed.toISOString().slice(0, 10);
+}
+/** Criterion 21 — the period, always bounded, always read from the log (plus the caller's clock). */
+export function reportPeriod(meta) {
+    if (meta.periodWindow !== undefined) {
+        const period = meta.periodWindow;
+        const from = isoDate(period.from);
+        const to = isoDate(period.to);
+        if (period.requested === null) {
+            const toSource = meta.now !== undefined ? 'now' : meta.logTo !== undefined ? 'last-event' : 'unknown';
+            const suffix = toSource === 'last-event' ? ' (intégralité du journal, borne haute = dernier événement)' : ' (intégralité du journal)';
+            const label = from === undefined || to === undefined
+                ? 'période : journal vide (aucun événement enregistré)'
+                : `période : ${from} → ${to}${suffix}`;
+            return { ...(from !== undefined ? { from } : {}), ...(to !== undefined ? { to } : {}), toSource, label };
+        }
+        const selector = period.requested === 'all' ? 'intégralité du journal' : `sélecteur : ${period.requested ?? 'intégralité du journal'}`;
+        const label = from === undefined || to === undefined
+            ? 'période : journal vide (aucun événement enregistré)'
+            : `période : ${from} → ${to} (${selector}; ${period.eventsInWindow}/${period.eventsTotal} événements)`;
+        return { ...(from !== undefined ? { from } : {}), ...(to !== undefined ? { to } : {}), toSource: 'unknown', label };
+    }
+    const from = isoDate(meta.logFrom);
+    const now = isoDate(meta.now);
+    const last = isoDate(meta.logTo);
+    const to = now ?? last;
+    const toSource = now !== undefined ? 'now' : last !== undefined ? 'last-event' : 'unknown';
+    const suffix = toSource === 'last-event' ? ' (intégralité du journal, borne haute = dernier événement)' : ' (intégralité du journal)';
+    const label = from === undefined || to === undefined
+        ? 'période : journal vide (aucun événement enregistré)'
+        : `période : ${from} → ${to}${suffix}`;
+    return {
+        ...(from !== undefined ? { from } : {}),
+        ...(to !== undefined ? { to } : {}),
+        toSource,
+        label,
+    };
+}
+/** The raw period payload mirrors `reportPeriod` without reducing instants to calendar dates. */
+export function reportPeriodPayload(meta) {
+    if (meta.periodWindow !== undefined)
+        return meta.periodWindow;
+    const from = meta.logFrom;
+    const to = meta.now ?? meta.logTo;
+    const events = meta.journalRevision?.events ?? 0;
+    return {
+        requested: null,
+        ...(from !== undefined ? { from } : {}),
+        ...(to !== undefined ? { to } : {}),
+        fromRef: null,
+        toRef: null,
+        eventsInWindow: events,
+        eventsTotal: events,
+    };
+}
+const OPTION_LETTERS = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ';
+const optionLetter = (index) => OPTION_LETTERS[index] ?? `#${index + 1}`;
+/**
+ * The DÉCISIONS column widths, SHARED between the builder and the renderer. The builder wraps the
+ * `alternatives` cell itself so it can emit the `préco` cell with exactly matching blank lines: that is
+ * what puts each recommendation ON THE LINE OF ITS OWN OPTION instead of on some continuation line.
+ */
+const DECISION_CAPS = [6, 40, 46, 14];
+/** `[1,2,3,5]` → `D1–D3 · D5`: the compact form the validated report uses for a run of decisions. */
+function compactRefs(refs) {
+    const uniq = [...new Set(refs)];
+    const numeric = uniq.filter((r) => /^D\d+$/u.test(r)).map((r) => Number(r.slice(1))).sort((a, b) => a - b);
+    const other = uniq.filter((r) => !/^D\d+$/u.test(r));
+    const parts = [];
+    for (let i = 0; i < numeric.length;) {
+        let j = i;
+        while (j + 1 < numeric.length && numeric[j + 1] === numeric[j] + 1)
+            j++;
+        parts.push(j - i >= 2 ? `D${numeric[i]}–D${numeric[j]}` : numeric.slice(i, j + 1).map((n) => `D${n}`).join(' · '));
+        i = j + 1;
+    }
+    return [...parts, ...other].join(' · ');
+}
+function shellArgument(value) {
+    return /^[A-Za-z0-9_./:-]+$/u.test(value) ? value : `'${value.replace(/'/gu, "'\"'\"'")}'`;
+}
+export function buildWpConductorView(tree, decisions = [], outsideRollup = [], totalScope = 'global', meta = {}) {
+    assertOrderedPeriodWindow(meta);
     const wpName = (n) => `${n.label} · ${clean(stripWpPrefix(n.title))}`;
     const totals = wpTotals(tree, outsideRollup);
     const wpNodes = [];
@@ -459,97 +800,592 @@ export function buildWpConductorView(tree, decisions = [], outsideRollup = [], t
         }
     };
     collectWpNodes(tree);
-    // preconisation-actionnable (DESIGN §4): the DÉCISIONS/ACTIONS table + generalRecommendation are now
-    // DERIVED from the directive set (each directive ⇒ one row, phrase rendered, never stored). FAIT/À-FAIRE
-    // stay the same rollup-driven tables (unchanged back-compat).
+    // ---- criterion 25: the reading unit ---------------------------------------------------------------
+    // On a long window the WP is the unit and a sub-WP is implementation detail. Sub-levels are AGGREGATED
+    // into their root — their leaves already roll up (`openLeaves`/`recentDoneLeaves` walk children), so
+    // nothing is lost; only their row disappears. The aggregation is DECLARED in the header, like every
+    // other compression in this report.
+    const period = reportPeriod(meta);
+    const days = windowDays(meta);
+    const subWpDetail = meta.subWp === true || (days !== undefined && days < LONG_WINDOW_DAYS);
+    const rowNodes = subWpDetail ? wpNodes : [...tree];
+    const subNodes = wpNodes.filter((n) => !rowNodes.includes(n));
+    /** Every node whose content merges into `n` when sub-levels are aggregated (`n` itself included). */
+    const branchOf = (n) => {
+        const out = [];
+        const walk = (node) => {
+            out.push(node);
+            for (const child of node.children)
+                walk(child);
+        };
+        walk(n);
+        return subWpDetail ? [n] : out;
+    };
     const directives = buildDirectives(tree, decisions);
     const dispatchQueue = dispatchQueueOf(directives);
     const keystone = keystoneOf(tree);
-    const { structured: structuredDecisions, legacyPending, legacySettled } = classifyDecisions(decisions);
-    const legacyIds = new Set(legacyPending.map((d) => d.id));
-    // A legacy dossier may still have a decision blocker on a leaf. Its directive is deliberately
-    // withheld from the owner-facing decision section: it belongs in À INSTRUIRE until the recorded
-    // option/recommendation model is populated by an authenticated revision.
-    const displayDirectives = directives.filter((d) => !legacyIds.has(d.gate?.ref ?? ''));
-    const humanDecisions = displayDirectives.filter((d) => d.mode === 'human-decision');
-    const focusNeeded = humanDecisions.filter((d) => d.step.code === 'focus-decision').length;
-    const generalRecommendation = focusNeeded >= 2 || humanDecisions.length >= 4
-        ? 'Prévoir un temps de focus HTML pour trancher les décisions accumulées, puis reprendre les WP par premier item ouvert.'
-        : 'Avancer par premier item ouvert, enregistrer preuve/acceptance, et escalader uniquement les décisions réellement bloquantes.';
+    const { structured: structuredDecisions, legacyPending } = classifyDecisions(decisions);
+    // ---- decision numbering (criteria 16/23/24) ------------------------------------------------------
+    // 16 — a D-number is RESERVED for a dossier whose options AND recommendation are stored and still
+    //      pending: those are the only ones an owner can answer with a letter.
+    // 23 — DÉCISIONS is the surface where the owner DECIDES. A settled dossier has nothing to answer; it
+    //      crowds out the ones still waiting and is already visible where it counts (a freed `bloqué`
+    //      cell, or FAIT if it produced something). It leaves the report and is counted among omissions.
+    // 24 — a pending dossier with no stored options cannot be answered either. It is not dressed up as a
+    //      choice: it appears in À-FAIRE as the work of making it answerable.
+    const structuredPending = structuredDecisions.filter((d) => d.outcome === 'pending');
+    const settledDecisions = decisions.filter((d) => d.outcome !== 'pending');
+    const decisionRef = new Map();
+    structuredPending.forEach((d, i) => decisionRef.set(d.id, `D${i + 1}`));
+    legacyPending.forEach((d, i) => decisionRef.set(d.id, `Q${i + 1}`));
+    const isPending = new Set(decisions.filter((d) => d.outcome === 'pending').map((d) => d.id));
+    // ---- handles (criteria 10b/10c) -----------------------------------------------------------------
+    // Handles are POSITIONAL WITHIN THIS REPORT (`[row.item]`), assigned AFTER À-FAIRE is ordered. Leg A
+    // established that no content-derived handle can be stable across runs — ordering, titles and WP
+    // membership all move — so the identifier is RELOCATED, not invented: the resolution block at the end
+    // of the page maps every emitted handle to its item id, and no ULID enters a column the owner reads.
+    const handles = [];
+    // ---- FAIT ---------------------------------------------------------------------------------------
+    const outsideDone = meta.deliveredItemIds === undefined
+        ? outsideRollup.filter((r) => r.bucket === 'DONE' || r.bucket === 'DROPPED')
+        : outsideRollup.filter((r) => meta.deliveredItemIds.has(r.id));
+    const periodLeaves = (node) => periodDoneLeaves(node, meta.deliveredItemIds);
     const doneRows = [
-        { scope: totalScope, progress: `${totals.done}/${totals.active} (${pctStr(totals.pct)})`, lastActions: `${totals.done} items faits; poursuivre les WP ouverts` },
-        ...wpNodes.filter((n) => n.pct === 100).map((n) => ({ scope: wpName(n), progress: `${n.done}/${n.active} (100%)`, lastActions: 'WP clos; preuve/acceptance enregistrée' })),
+        {
+            scope: totalScope,
+            progress: `${totals.done}/${totals.active} (${pctStr(totals.pct)})`,
+            lastActions: lastActionsCell(wpNodes
+                .flatMap((n) => meta.deliveredItemIds === undefined ? n.leaves.filter((l) => l.bucket === 'DONE') : n.leaves.filter((l) => meta.deliveredItemIds.has(l.id)))
+                .sort((a, b) => (a.id < b.id ? 1 : a.id > b.id ? -1 : 0))
+                .map((l) => clean(l.title))),
+        },
+        // Criterion 25 — one row per READING unit: the WP on a long window, the sub-level only when the
+        // window is short or the owner asked. `recentDoneLeaves` already walks children, so a root's row
+        // carries its sub-levels' deliveries rather than losing them.
+        ...rowNodes
+            .filter((n) => periodLeaves(n).length > 0)
+            .map((n) => ({
+            scope: wpName(n),
+            progress: `${n.done}/${n.active} (${pctStr(n.pct)})`,
+            lastActions: lastActionsCell(periodLeaves(n).map((l) => clean(l.title))),
+        })),
+        ...(outsideDone.length > 0
+            ? [{
+                    scope: 'hors WP',
+                    progress: (() => {
+                        const done = meta.deliveredItemIds === undefined
+                            ? outsideRollup.filter((r) => r.bucket === 'DONE').length
+                            : outsideRollup.filter((r) => meta.deliveredItemIds.has(r.id)).length;
+                        const active = outsideRollup.filter((r) => r.bucket !== 'DROPPED').length;
+                        return `${done}/${active} (${pctStr(active === 0 ? 'n/a' : Math.round((done / active) * 100))})`;
+                    })(),
+                    lastActions: outsideDone
+                        .map((r) => `${clean(r.title)}${r.bucket === 'DROPPED' ? ' (abandonné)' : ''}`)
+                        .join(' · '),
+                }]
+            : []),
     ];
-    const todoRows = wpNodes.filter((n) => n.pct !== 100).map((n) => {
-        const open = openLeaves(n);
-        const listed = open.map((l) => clean(l.title)).join(' / ');
-        return { wp: wpName(n), progress: `${n.done}/${n.active} (${pctStr(n.pct)})`, todo: listed || 'aucun item ouvert direct' };
+    // ---- À-FAIRE ------------------------------------------------------------------------------------
+    const directivesByWpId = new Map();
+    for (const directive of directives) {
+        const wpId = directive.scope.wpId;
+        if (wpId === undefined)
+            continue;
+        const attached = directivesByWpId.get(wpId);
+        if (attached === undefined)
+            directivesByWpId.set(wpId, [directive]);
+        else
+            attached.push(directive);
+    }
+    const urgencyIndex = new Map(directives.map((d, i) => [d.id, i]));
+    /**
+     * Criterion 7 + 19 — `bloqué` names the ANSWER that unblocks (a D-number) when the gate is a dossier,
+     * and a short gate token otherwise. It renders `—` ONLY when no gate is recorded at all.
+     */
+    const blockedCell = (attached) => {
+        const refs = [];
+        for (const d of attached) {
+            const gate = d.gate;
+            if (gate === undefined)
+                continue;
+            if (gate.code !== 'decision-pending') {
+                refs.push(GATE_TOKEN[gate.code] ?? 'blocage');
+                continue;
+            }
+            const ref = gate.ref ?? '';
+            const number = decisionRef.get(ref);
+            // A blocker still open against a dossier that has ALREADY been settled is an anomaly the owner
+            // should see, not a number pointing at a row this report no longer carries (criterion 23).
+            refs.push(number ?? (ref !== '' && !isPending.has(ref) ? 'décision réglée' : 'décision'));
+        }
+        return refs.length === 0 ? NO_GATE : compactRefs(refs);
+    };
+    /**
+     * Criterion 20 — the gate CLASS, kept as a machine-only property. It is what the old `prochaine action`
+     * printed; it is legitimate as a starting point for the agent's investigation and illegitimate as a
+     * recommendation, so it is carried and never rendered.
+     */
+    const gateStepClass = (attached) => [...new Set(attached.filter((d) => d.mode !== 'human-decision').map((d) => directivePhrase(d)))].join(' / ');
+    /** Does this row wait on a dossier the owner can answer? Then it owes no next action (criterion 14). */
+    const gatedOnPendingDecision = (attached) => attached.length > 0 &&
+        attached.every((d) => d.mode === 'human-decision' && isPending.has(d.gate?.ref ?? ''));
+    const directiveIds = (attached) => attached.map((d) => d.id).join(',');
+    // Machine-only audit properties (NOT declared columns, so no renderer ever prints them): the precise
+    // gate phrase the short `bloqué` token compacts, kept so nothing is lost from the projection.
+    const gateDetail = (attached) => [...new Set(attached.map((d) => gatePhraseFr(d.gate)).filter((p) => p !== undefined))].join(' / ');
+    const wpTodoDrafts = rowNodes
+        .filter((n) => openLeaves(n).length > 0 || branchOf(n).some((b) => directivesByWpId.has(b.id)))
+        .map((n) => {
+        // Criterion 25 — a sub-level's directives merge UPWARD with its leaves; they are not dropped.
+        const attached = branchOf(n).flatMap((b) => directivesByWpId.get(b.id) ?? []);
+        // The item's recorded body is ALREADY in the log; surfacing it costs no investigation and is what
+        // makes a `non instruite` row still say something (or admit that the log says nothing).
+        const items = openLeaves(n).map((l) => ({
+            id: l.id,
+            title: clean(l.title),
+            ...(todoExcerpt(l.summary) !== undefined ? { excerpt: todoExcerpt(l.summary) } : {}),
+        }));
+        // A directive may target a DONE leaf with acceptance debt: name it here (with its own handle)
+        // instead of exiling it to a `cible action` column the owner never asked for.
+        for (const d of attached) {
+            // An engagement/blockage directive points at its own actionable ref (for example a thread),
+            // while its title deliberately names the already-listed target leaf. Adding it made a title-twin
+            // sibling row. Only an item directive can introduce a missing DONE acceptance debt.
+            if (d.target.kind !== 'item' || items.some((i) => i.id === d.target.id))
+                continue;
+            const debtLeaf = wpNodes.flatMap((node) => node.leaves).find((l) => l.id === d.target.id);
+            items.push({
+                id: d.target.id,
+                title: clean(d.target.title ?? d.target.id),
+                note: d.facts.bucket.toLowerCase(),
+                ...(todoExcerpt(debtLeaf?.summary) !== undefined ? { excerpt: todoExcerpt(debtLeaf?.summary) } : {}),
+            });
+        }
+        const gated = gatedOnPendingDecision(attached);
+        return {
+            wp: wpName(n),
+            progress: pctStr(n.pct),
+            items,
+            blocked: blockedCell(attached),
+            gatedOnDecision: gated,
+            ...(gated ? { fixedNextAction: NO_ACTION } : {}),
+            directiveIds: directiveIds(attached),
+            gateDetail: gateDetail(attached),
+            gateStep: gateStepClass(attached),
+            order: String(Math.min(...attached.map((d) => urgencyIndex.get(d.id) ?? 9999), 9999)).padStart(5, '0'),
+        };
     });
-    // DÉCISIONS/ACTIONS rows — derived from the directives. Decisions first, then engagement/work directives.
-    // This is deliberately exhaustive: a conductor table is the deterministic route to every open row.
-    const actionRows = [];
-    if (focusNeeded >= 2 || humanDecisions.length >= 4) {
-        actionRows.push({ scope: '-', subject: 'décisions accumulées', recommendation: 'focus (lecture): instruire le dossier, puis enregistrer le choix avec track decision select' });
+    // Criterion 24 — a PENDING dossier with no stored options cannot be answered, so it is not offered as a
+    // choice in DÉCISIONS. It is real open work: it appears here, with what would make it answerable.
+    // A structured pending dossier needs no À-FAIRE row — DÉCISIONS is where the owner answers it.
+    const unscopedDirectives = directives.filter((d) => d.scope.wpId === undefined);
+    const toStructure = unscopedDirectives.filter((d) => {
+        const ref = d.gate?.ref ?? d.target.id;
+        return decisionRef.get(ref)?.startsWith('Q') === true;
+    });
+    const outsideOpen = outsideRollup.filter((r) => (r.bucket === 'TO-DO' || r.bucket === 'AWAITED') && !unscopedDirectives.some((d) => d.target.id === r.id));
+    const horsWpDrafts = [];
+    if (toStructure.length > 0) {
+        horsWpDrafts.push({
+            wp: 'hors WP · dossiers à structurer',
+            progress: 'n/a',
+            // A dossier with no stored options says nothing by its title alone. Its prose context is recorded:
+            // show it as an EXCERPT — never as options, which is what `unstructured` forbids (criterion 16).
+            items: toStructure.map((d) => {
+                const ref = d.gate?.ref ?? d.target.id;
+                const excerpt = todoExcerpt(decisions.find((row) => row.id === ref)?.contextExcerpt);
+                return {
+                    id: d.target.id,
+                    title: clean(d.target.title ?? d.target.id),
+                    ...(excerpt !== undefined ? { excerpt } : {}),
+                };
+            }),
+            // Criterion 19 — a gate IS recorded, so this is never `—`; and it names the actual blockage rather
+            // than pointing back at the row's own dossiers.
+            blocked: 'options non enregistrées',
+            fixedNextAction: NEXT_ACTION_STRUCTURE_DOSSIER,
+            gatedOnDecision: false,
+            directiveIds: directiveIds(toStructure),
+            gateDetail: gateDetail(toStructure),
+            gateStep: gateStepClass(toStructure),
+            order: String(Math.min(...toStructure.map((d) => urgencyIndex.get(d.id) ?? 9999))).padStart(5, '0'),
+        });
+    }
+    if (outsideOpen.length > 0) {
+        horsWpDrafts.push({
+            wp: 'hors WP · items',
+            progress: 'n/a',
+            items: outsideOpen.map((r) => ({
+                id: r.id,
+                title: clean(r.title),
+                ...(todoExcerpt(r.detail.summary) !== undefined ? { excerpt: todoExcerpt(r.detail.summary) } : {}),
+            })),
+            blocked: NO_GATE,
+            gatedOnDecision: false,
+            directiveIds: '',
+            gateDetail: '',
+            gateStep: '',
+            order: '09998',
+        });
+    }
+    const orderedDrafts = [...wpTodoDrafts, ...horsWpDrafts].sort((a, b) => a.order === b.order ? a.wp.localeCompare(b.wp) : a.order.localeCompare(b.order));
+    // Handles are assigned HERE, once the order is final: `[row.item]`, both 1-based (criterion 10b/10c).
+    // `prochaine action` is decided here too, because whether a row is FOCUS depends on that same order
+    // (criterion 20: the per-row investigation is bounded to the five rows the ordering line names).
+    const orderedTodo = orderedDrafts.map((draft, rowIndex) => {
+        const cells = draft.items.map((item, itemIndex) => {
+            const handle = `${rowIndex + 1}.${itemIndex + 1}`;
+            const wpLabel = draft.wp.split(' · ')[0];
+            handles.push({
+                handle, kind: 'item', id: item.id, title: item.title,
+                ...(wpLabel === undefined ? {} : { wpLabel }),
+            });
+            // Criterion 27 — one idea per line: the item on its line, and its recorded excerpt as a
+            // SUBORDINATE clause on its own, never a paragraph appended to the title.
+            const note = item.note === undefined ? '' : ` (${item.note})`;
+            const excerpt = item.excerpt === undefined ? '' : `\n↳ extrait : ${item.excerpt}`;
+            return `[${handle}] ${item.title}${note}${excerpt}`;
+        });
+        const nextAction = draft.fixedNextAction ??
+            (draft.items.length === 0
+                ? NO_ACTION
+                : rowIndex < FOCUS_ROWS
+                    ? NEXT_ACTION_TO_INSTRUCT
+                    : NEXT_ACTION_NOT_INSTRUCTED);
+        return {
+            wp: draft.wp,
+            progress: draft.progress,
+            todo: cells.join('\n'),
+            blocked: draft.blocked,
+            nextAction,
+            directiveIds: draft.directiveIds,
+            gateDetail: draft.gateDetail,
+            gateStep: draft.gateStep,
+            focus: rowIndex < FOCUS_ROWS ? 'true' : 'false',
+        };
+    });
+    for (const d of [...structuredPending, ...legacyPending]) {
+        handles.push({ handle: decisionRef.get(d.id), kind: 'decision', id: d.id, title: clean(d.title) });
+    }
+    const todoRows = orderedTodo.length > 0
+        ? orderedTodo
+        : [{ wp: '—', progress: 'n/a', todo: 'aucun WP ouvert', blocked: NO_GATE, nextAction: NO_ACTION, directiveIds: '' }];
+    // ---- DÉCISIONS ----------------------------------------------------------------------------------
+    // Criterion 23 — pending, answerable dossiers ONLY. Nothing else.
+    const decisionRows = [];
+    for (const d of structuredPending) {
+        const ref = decisionRef.get(d.id);
+        const options = d.options ?? [];
+        const letterOf = new Map(options.map((option, i) => [option.id, optionLetter(i)]));
+        // Criterion 16 — the recommendation sits on the LINE OF ITS OWN OPTION, and an unstructured dossier
+        // carries no letter at all rather than being dressed up as an owner choice.
+        const altLines = [];
+        const precoLines = [];
+        const recommended = d.recommendation === undefined ? undefined : letterOf.get(d.recommendation.optionId);
+        const selected = d.selectedOptionId === undefined ? undefined : letterOf.get(d.selectedOptionId);
+        options.forEach((option, i) => {
+            const letter = optionLetter(i);
+            const wrapped = wrapCell(`${letter} ${redactOwnerText(clean(option.title))} — ${redactOwnerText(clean(option.summary))}`, DECISION_CAPS[2]);
+            const marks = [];
+            if (letter === recommended)
+                marks.push(letter);
+            if (letter === selected)
+                marks.push('retenu');
+            altLines.push(...wrapped);
+            precoLines.push(marks.join(' '), ...Array(wrapped.length - 1).fill(''));
+        });
+        const alternatives = options.length > 0 ? altLines.join('\n') : 'non enregistrées';
+        let preco = precoLines.join('\n');
+        if (preco.trim() === '')
+            preco = '—';
+        decisionRows.push({ n: ref, subject: shortDecisionSubject(d.title), alternatives, preco });
     }
-    for (const d of humanDecisions) {
-        actionRows.push({ scope: directiveScopeLabel(d), subject: clean(d.target.title ?? d.target.id), recommendation: directivePhrase(d) });
+    if (decisionRows.length === 0) {
+        decisionRows.push({
+            n: '—',
+            subject: 'aucun dossier en attente que tu puisses trancher maintenant',
+            alternatives: 'non enregistrées',
+            preco: '—',
+        });
     }
-    for (const d of displayDirectives.filter((x) => x.mode !== 'human-decision')) {
-        actionRows.push({ scope: directiveScopeLabel(d), subject: clean(d.target.title ?? d.target.id), recommendation: directivePhrase(d) });
+    // ---- RECOMMANDATION ------------------------------------------------------------------------------
+    const startable = orderedTodo.filter((row) => row['nextAction'] !== NO_ACTION && !/(^|[^A-Z])D\d/u.test(row['blocked'] ?? ''));
+    // Word-boundary match: `includes('D1')` also matches `D10`, which would credit the wrong dossier.
+    const unlockedBy = (ref) => orderedTodo
+        .filter((row) => new RegExp(`(^|[^0-9A-Z])${ref}([^0-9]|$)`, 'u').test(row['blocked'] ?? ''))
+        .map((row) => (row['wp'] ?? '').split(' · ')[0]);
+    const recommendationLines = [];
+    recommendationLines.push(startable.length === 0
+        ? 'Sans décision : aucune lane exécutable sans réponse n’est attestée dans le journal.'
+        : `Sans décision : ${startable
+            .slice(0, 3)
+            .map((row) => (row['wp'] ?? '').split(' · ')[0])
+            .join(', ')} peuvent démarrer — le geste concret reste à instruire par ligne.`);
+    if (structuredPending.length === 0) {
+        recommendationLines.push('Aucun D# disponible : aucun dossier structuré sélectionnable dans le journal.');
     }
-    const outsideRows = outsideRollup.map((row) => ({
-        scope: row.wpId === undefined ? 'sans WP' : `intermédiaire · ${row.wpLabel ?? '-'}`,
-        progress: row.bucket,
-        item: clean(row.title),
-    }));
+    else {
+        for (const d of structuredPending) {
+            const ref = decisionRef.get(d.id);
+            const letter = d.recommendation === undefined
+                ? undefined
+                : optionLetter((d.options ?? []).findIndex((o) => o.id === d.recommendation.optionId));
+            const targets = unlockedBy(ref);
+            recommendationLines.push(`${ref}${letter === undefined ? '' : ` ${letter}`} → débloque ${targets.length > 0 ? [...new Set(targets)].join(', ') : 'le dossier lui-même'}.`);
+        }
+    }
+    const replyLine = structuredPending.length === 0
+        ? 'Réponds « vas y » pour lancer les lanes sans décision.'
+        : `Réponds « vas y » (les lanes sans décision) ou « ${structuredPending
+            .map((d) => {
+            const ref = decisionRef.get(d.id);
+            const letter = d.recommendation === undefined
+                ? 'A'
+                : optionLetter((d.options ?? []).findIndex((o) => o.id === d.recommendation.optionId));
+            return `${ref} ${letter}`;
+        })
+            .join(' · ')} » (tout débloquer).`;
+    recommendationLines.push(replyLine);
+    // Criteria 17/24 — compression is allowed, silence is not, and every omission NAMES ITS REASON.
+    // Criterion 18 is what keeps this safe: a WP carrying open work, and every dossier the owner can still
+    // answer, are in the rendered lists above and can never fall here.
+    const empty = (n) => n.done === 0 && openLeaves(n).length === 0 && !directivesByWpId.has(n.id);
+    // Criterion 25 — a sub-level that CARRIES something is restituted inside its parent, so it is neither
+    // rendered as a row nor omitted: it is aggregated, and the header says how many.
+    const aggregated = subNodes.filter((n) => !empty(n)).map(wpName);
+    const omitted = [
+        ...wpNodes
+            .filter(empty)
+            .map((n) => ({ label: wpName(n), reason: 'WP sans item ouvert, sans blocage et sans livraison' })),
+        ...settledDecisions.map((d) => ({
+            label: shortDecisionSubject(d.title),
+            reason: 'décision déjà tranchée (visible dans bloqué ou FAIT, plus rien à y répondre)',
+        })),
+    ];
+    // ---- coverage (criteria 17/18) --------------------------------------------------------------------
+    // 17 — the report STATES both counts, so omission is a declared act rather than a silent one. Both
+    // numbers count the SAME unit: rows of the deterministic projection. `rendered` is therefore always a
+    // subset of `projected`, and `projected - rendered === omitted.length`.
+    // 18 — the two classes that may never be omitted (a WP carrying open work, a pending dossier) are
+    // structurally in the rendered lists above, whatever the compression ratio.
+    // An unscoped directive always TARGETS a dossier already counted in `decisions`, so counting it again
+    // would inflate the denominator against itself.
+    const projectedRows = wpNodes.length + outsideRollup.length + decisions.length;
+    const coverage = {
+        projected: projectedRows,
+        rendered: projectedRows - omitted.length,
+        omitted,
+        aggregated,
+    };
+    const header = {
+        scope: totalScope,
+        ...(meta.scopeProjection !== undefined ? { scopeProjection: meta.scopeProjection } : {}),
+        ...(meta.journalRevision !== undefined ? { journalRevision: meta.journalRevision } : {}),
+        progress: `${totals.done}/${totals.active} (${pctStr(totals.pct)})`,
+        ...(meta.baselineCommit !== undefined ? { baselineCommit: meta.baselineCommit.slice(0, 12) } : {}),
+        // Criterion 21 — the window is measured in the log, so it is always stated, always with dates.
+        period,
+        sources: [
+            'projection déterministe du journal (track report --wp --decisions)',
+            ...(meta.journalRevision === undefined
+                ? []
+                : [`révision du journal : ${meta.journalRevision.events} événements ; tête : ${meta.journalRevision.head ?? 'aucune'}`]),
+            ...(meta.scopeProjection === undefined
+                ? []
+                : [
+                    `scope : ${meta.scopeProjection.label} et son sous-arbre inclus ; ${meta.scopeProjection.excludedProjectionRows} lignes hors scope exclues`,
+                ]),
+        ],
+        coverage,
+        handleCommand: meta.scopeProjection === undefined
+            ? 'track report --resolve <handle>'
+            : `track report --scope ${shellArgument(meta.scopeProjection.selector)} --resolve <handle>`,
+    };
+    const tables = [
+        {
+            id: 'done',
+            title: 'FAIT',
+            columns: [
+                { id: 'scope', label: 'scope' },
+                { id: 'progress', label: 'avancement' },
+                { id: 'lastActions', label: 'dernières actions' },
+            ],
+            rows: doneRows,
+        },
+        {
+            id: 'todo',
+            title: 'À-FAIRE',
+            columns: [
+                { id: 'wp', label: 'WP' },
+                { id: 'progress', label: 'av.' },
+                { id: 'todo', label: 'à faire' },
+                { id: 'blocked', label: 'bloqué' },
+                { id: 'nextAction', label: 'prochaine action' },
+            ],
+            rows: todoRows,
+        },
+        {
+            id: 'decisions',
+            title: 'DÉCISIONS',
+            render: 'drawn',
+            columns: [
+                { id: 'n', label: '#' },
+                { id: 'subject', label: 'sujet' },
+                { id: 'alternatives', label: 'alternatives' },
+                { id: 'preco', label: 'préco' },
+            ],
+            rows: decisionRows,
+        },
+        {
+            id: 'recommendation',
+            title: 'RECOMMANDATION',
+            render: 'prose',
+            columns: [],
+            rows: [],
+            lines: recommendationLines,
+        },
+    ];
     return {
         kind: 'wp-conductor-report',
         locale: 'fr',
-        tables: [
-            { id: 'done', title: 'FAIT', columns: [{ id: 'scope', label: 'scope' }, { id: 'progress', label: 'avancement' }, { id: 'lastActions', label: 'dernières actions' }], rows: doneRows },
-            { id: 'todo', title: 'À-FAIRE', columns: [{ id: 'wp', label: 'WP' }, { id: 'progress', label: 'avancement' }, { id: 'todo', label: 'à faire' }], rows: todoRows.length > 0 ? todoRows : [{ wp: '-', progress: '-', todo: 'aucun WP ouvert' }] },
-            ...(outsideRows.length > 0
-                ? [{ id: 'outside-rollup', title: 'HORS ROLLUP', columns: [{ id: 'scope', label: 'rattachement' }, { id: 'progress', label: 'état' }, { id: 'item', label: 'item' }], rows: outsideRows }]
-                : []),
-            ...(structuredDecisions.length > 0 ? [{ id: 'decisions', title: 'DÉCISIONS', columns: [{ id: 'decision', label: 'dossier' }, { id: 'alternatives', label: 'alternatives enregistrées' }, { id: 'recommendation', label: 'recommandation / règlement' }], rows: structuredDecisions.map((d) => ({
-                        decision: `${d.id} — ${clean(d.title)} (${d.outcome})`,
-                        alternatives: d.options.map((option) => `${option.id}: ${clean(option.title)} — ${clean(option.summary)}`).join(' / '),
-                        recommendation: `recommandée:${d.recommendation.optionId} — ${clean(d.recommendation.rationale)}${d.selectedOptionId !== undefined ? `; sélectionnée:${d.selectedOptionId}` : ''}`,
-                    })) }] : []),
-            ...(legacyPending.length > 0 ? [{ id: 'prepare', title: 'À INSTRUIRE', columns: [{ id: 'decision', label: 'dossier legacy' }, { id: 'action', label: 'disposition sûre' }], rows: legacyPending.map((d) => ({ decision: `${d.id} — ${clean(d.title)}`, action: legacyRevisionAction(d) })) }] : []),
-            ...(legacySettled.length > 0 ? [{ id: 'legacy-history', title: 'HISTORIQUE NON STRUCTURÉ', columns: [{ id: 'decision', label: 'dossier legacy' }, { id: 'record', label: 'constat' }], rows: legacySettled.map((d) => ({ decision: `${d.id} — ${clean(d.title)}`, record: legacyHistoryNote(d) })) }] : []),
-            { id: 'decisions-actions', title: 'DÉCISIONS/ACTIONS', columns: [{ id: 'scope', label: 'scope/gate' }, { id: 'subject', label: 'sujet' }, { id: 'recommendation', label: 'préconisation' }], rows: actionRows.length > 0 ? actionRows : [{ scope: '-', subject: 'aucune action ouverte dans les WP actifs', recommendation: '-' }] },
-        ],
-        generalRecommendation,
+        header,
+        tables: tables.map(redactOwnerTable),
+        handles,
+        coverage,
         directives,
+        directivesProjection: { kind: 'conductor-action-directives', order: 'canonical-urgency' },
         dispatchQueue,
+        dispatchQueueProjection: { kind: 'delegable-directive-ids', order: 'canonical-urgency', modes: ['subagent', 'local'] },
         ...(keystone !== undefined ? { keystone } : {}),
     };
 }
+/**
+ * Criterion 11 — a decision SUBJECT, not the stored title pasted verbatim. Deterministic and lossless of
+ * meaning: it drops a leading enumeration counter (`1/6 — `, `x7 — `) that carries no question. Turning
+ * the remainder into a short question is a synthesis act and belongs to the skill, not to this renderer:
+ * inventing a shorter wording here would be fabrication.
+ */
+export function shortDecisionSubject(storedTitle) {
+    return clean(storedTitle).replace(/^(?:\d+\s*\/\s*\d+|x\d+|§\d+)\s*[—–-]\s*/u, '');
+}
+/**
+ * Criteria 17/24 — both counts AND the reason for every omission, grouped so the line stays readable.
+ * "Omitted" without a why is the silence the criterion exists to forbid.
+ */
+export function coverageLine(coverage) {
+    const merged = coverage.aggregated.length > 0
+        ? ` · ${coverage.aggregated.length} sous-WP agrégés dans leur parent`
+        : '';
+    const head = `couverture : ${coverage.projected} lignes projetées · ${coverage.rendered} rendues${merged}`;
+    if (coverage.omitted.length === 0)
+        return `${head} · aucune omission`;
+    const byReason = new Map();
+    for (const omission of coverage.omitted)
+        byReason.set(omission.reason, (byReason.get(omission.reason) ?? 0) + 1);
+    const detail = [...byReason.entries()].map(([reason, count]) => `${count} ${reason}`).join(' · ');
+    return `${head} · ${coverage.omitted.length} omise${coverage.omitted.length > 1 ? 's' : ''} : ${detail}`;
+}
+/** The À-FAIRE ordering rule, printed so the owner knows why the rows are in this order (criterion 6). */
+const TODO_ORDER_NOTE = 'ordre = priorité ; les cinq premiers sont le focus';
+function headerLines(view, format) {
+    const h = view.header;
+    const em = (s) => (format === 'md' ? `*${s}*` : s);
+    const lines = [
+        format === 'md'
+            ? `# TRACK REPORT — ${h.scope} · ${h.progress}`
+            : `TRACK REPORT — ${h.scope} · ${h.progress}`,
+        em(h.period.label),
+        em(`baseline d’acceptance : ${h.baselineCommit ?? 'non résolue'}`),
+        em(coverageLine(h.coverage)),
+        em(`sources : ${h.sources.join(' ; ')}`),
+        '',
+    ];
+    return lines.map(redactOwnerText);
+}
+/**
+ * Criteria 10b/10c — the machine's half of the page. It is NOT a fifth section and NOT a table the owner
+ * reads: it is the block that makes a handle actionable, and the place the ULID is allowed to live. It
+ * states plainly that handles are positional and per-report, so a reply quoting `[3.2]` without the report
+ * it came from is not actionable.
+ */
+export const RESOLUTION_TITLE = 'RÉSOLUTION DES HANDLES (bloc machine — pas une table à lire)';
+export function resolutionLines(view) {
+    const lines = [
+        RESOLUTION_TITLE,
+        'handles positionnels, valables pour CE rapport uniquement : une réponse qui cite un handle sans son rapport n’est pas actionnable.',
+        `commande : ${view.header.handleCommand}`,
+    ];
+    for (const h of view.handles)
+        lines.push(`${h.handle}\t${h.id}\t${h.title}`);
+    if (view.handles.length === 0)
+        lines.push('(aucun handle émis)');
+    return lines;
+}
 function renderReportView(view, format) {
+    assertReportFormat(format);
     if (format === 'json')
         return JSON.stringify(view, null, 2) + '\n';
-    // User-originated cell content (titles) is escaped per-format: `md` escapes markdown metacharacters so a
-    // crafted item title cannot inject formatting (parity with the legacy `formatReport`/`title` path); `text`
-    // is clean. The view model itself stays RAW (escaping is a render-only concern).
-    const esc = (s) => title(s, format);
+    // The builder already redacts owner cells for every format. Rendering only escapes Markdown metacharacters;
+    // `displayCell` keeps the machine-generated `[n.m]` handle out of that escaped span.
+    const esc = (s) => displayCell(s, format);
     const h = (label) => (format === 'md' ? `## ${label}` : label);
-    const lines = [];
+    const lines = headerLines(view, format);
     for (const section of view.tables) {
         lines.push(h(section.title));
-        lines.push(...table(section.columns.map((c) => c.label), section.rows.map((row) => section.columns.map((c) => esc(row[c.id] ?? '')))));
+        if (section.render === 'prose') {
+            // Renderer-authored French sentences interpolating only derived labels, handles and D-numbers —
+            // never a raw user title, so there is nothing to escape and nothing to inject.
+            lines.push(...(section.lines ?? []));
+        }
+        else if (section.render === 'drawn') {
+            // The box-drawn table is emitted verbatim; `md` fences it so the alignment survives.
+            const drawn = drawTable(section.columns.map((c) => c.label), section.rows.map((row) => section.columns.map((c) => clean0(row[c.id] ?? ''))), DECISION_CAPS, [false, false, false, true]);
+            const fence = fenceFor(drawn);
+            if (format === 'md')
+                lines.push(fence);
+            lines.push(...drawn);
+            if (format === 'md')
+                lines.push(fence);
+        }
+        else {
+            if (section.id === 'todo')
+                lines.push(format === 'md' ? `*${TODO_ORDER_NOTE}*` : TODO_ORDER_NOTE);
+            lines.push(...table(section.columns.map((c) => c.label), section.rows.map((row) => section.columns.map((c) => esc(row[c.id] ?? '')))));
+        }
         lines.push('');
     }
-    lines.push(h('RECOMMANDATION'));
-    lines.push(esc(view.generalRecommendation));
+    const resolution = resolutionLines(view);
+    const resolutionFence = fenceFor(resolution);
+    if (format === 'md')
+        lines.push(resolutionFence);
+    lines.push(...resolution);
+    if (format === 'md')
+        lines.push(resolutionFence);
     return lines.join('\n').trimEnd() + '\n';
 }
-export function formatWpConductor(tree, format, decisions = [], outsideRollup = [], totalScope = 'global') {
-    return renderReportView(buildWpConductorView(tree, decisions, outsideRollup, totalScope), format);
+/**
+ * A fence long enough to contain `lines` (CommonMark: an opening fence must be longer than any backtick
+ * run inside it). Without this, a single item title carrying ``` would close the fence early and let the
+ * rest of a MACHINE block — the drawn table, the handle→id map — render as markdown.
+ */
+function fenceFor(lines) {
+    let longest = 0;
+    for (const line of lines) {
+        for (const run of line.match(/`+/gu) ?? [])
+            longest = Math.max(longest, run.length);
+    }
+    return '`'.repeat(Math.max(3, longest + 1));
+}
+/** Like `clean`, but PRESERVES the explicit `\n` line breaks a drawn cell uses to align its options. */
+function clean0(s) {
+    return s.split('\n').map((line) => cell(line)).join('\n');
+}
+export function formatWpConductor(tree, format, decisions = [], outsideRollup = [], totalScope = 'global', meta = {}) {
+    return renderReportView(buildWpConductorView(tree, decisions, outsideRollup, totalScope, meta), format);
 }
 /** Clean + hard-truncate a line to `width` with a trailing ellipsis (never a silent cut mid-report). */
 function truncateLine(s, width) {
-    const c = clean(s);
+    const c = redactOwnerText(clean(s));
     return c.length <= width ? c : `${c.slice(0, Math.max(1, width - 1))}…`;
 }
 /**
@@ -562,12 +1398,12 @@ function fitMiddle(head, mid, tail, width) {
     if (budget < 8)
         return truncateLine(head + mid + tail, width);
     const m = mid.length <= budget ? mid : `${mid.slice(0, Math.max(1, budget - 1))}…`;
-    return head + m + tail;
+    return redactOwnerText(head + m + tail);
 }
-export function formatWpConductorInline(tree, decisions = [], opts = {}, outsideRollup = []) {
+export function formatWpConductorInline(tree, decisions = [], opts = {}, outsideRollup = [], meta) {
     const width = Math.min(240, Math.max(40, opts.width ?? 80));
     const maxDir = Math.max(1, opts.maxDirectives ?? 10);
-    const view = buildWpConductorView(tree, decisions, outsideRollup);
+    const view = buildWpConductorView(tree, decisions, outsideRollup, 'global', meta);
     const totals = wpTotals(tree, outsideRollup);
     const wpName = (n) => `${n.label} · ${clean(stripWpPrefix(n.title))}`;
     const wpNodes = [];
@@ -579,6 +1415,10 @@ export function formatWpConductorInline(tree, decisions = [], opts = {}, outside
     };
     collectWpNodes(tree);
     const lines = [];
+    // INLINE is still a report rendering. The CLI supplies meta and therefore names the exact period; direct
+    // presenter callers that have no reporting context retain their existing compact-only contract.
+    if (meta !== undefined)
+        lines.push(truncateLine(view.header.period.label, width));
     // FAIT — one line: global progress + the closed WPs (by label).
     const closed = wpNodes.filter((n) => n.pct === 100).map((n) => n.label);
     lines.push(truncateLine(`FAIT${opts.totalScope !== undefined ? ` (${opts.totalScope})` : ''}  ${totals.done}/${totals.active} (${pctStr(totals.pct)})${closed.length > 0 ? `  ·  clos: ${closed.join(', ')}` : ''}${outsideRollup.length > 0 ? `  ·  hors rollup: ${outsideRollup.length}` : ''}`, width));