@smthrs/gateway 0.35.0 → 1.0.0-rc.3

package/dist/esm/internal/NativeGateway.js

@@ -0,0 +1,268 @@
+/**
+ * Shared native gateway bind policy, credential policy,
+ * and the one composition a `smithers serve` verb hosts.
+ *
+ * Two rules decide whether a bind is allowed, and both fail closed:
+ *
+ * 1. A non-loopback host requires an explicit `listen` opt-in. Binding
+ *    `0.0.0.0` because a port was free is how a workspace gateway ends up on
+ *    a shared network by accident.
+ * 2. A non-loopback bind requires a bearer credential. The control plane can
+ *    launch runs, cancel them, and approve capability grants; reachable from
+ *    another machine, an unauthenticated one is a remote execution service.
+ *
+ * A loopback bind with no network credential allows anonymous reads; approval
+ * decisions require the session operator token. Ingress still checks Host and
+ * Origin so a web page cannot exercise the loopback endpoint.
+ *
+ * @since 1.0.0
+ */
+import { ControlRpcs, ScopedToken } from "@smthrs/control";
+import { Effect, Layer } from "effect";
+import { HttpRouter } from "effect/unstable/http";
+import { RpcSerialization } from "effect/unstable/rpc";
+import { GatewayError, settingRefusal } from "../GatewayError.js";
+import * as GatewayServer from "../GatewayServer.js";
+/**
+ * The default bind: loopback, port 7331, no credential.
+ *
+ * @since 1.0.0
+ * @category models
+ */
+export const defaultServerOptions = { host: "127.0.0.1", port: 7331 };
+/**
+ * Whether a host names this machine only.
+ *
+ * @param host the host to classify
+ * @since 1.0.0
+ * @category predicates
+ */
+export const isLoopbackHost = (host) => GatewayServer.loopbackHostNames.includes(host);
+/**
+ * The typed refusal a requested bind earns, or `undefined` when it is allowed.
+ *
+ * Every start-time rule this module enforces answers here as a `bind_failed`
+ * `GatewayError`, so a host that wants to report a refusal rather than crash on
+ * one asks this before it composes a layer. {@link listenOptions} and
+ * {@link layer} fail with exactly what this returns.
+ *
+ * @param options the requested bind
+ * @since 1.0.0
+ * @category constructors
+ */
+export const bindRefusal = (options) => {
+    const setting = settingRefusal("The gateway keepalive cadence", options.heartbeatMillis) ??
+        settingRefusal("The gateway request body limit", options.maxRequestBodyBytes);
+    if (setting !== undefined)
+        return setting;
+    // The bridge authenticates only with the bearer credential, even on
+    // loopback, so a bridge without one would answer 401 to every request.
+    if (options.runtimeBridge !== undefined && (options.credential === undefined || options.credential === "")) {
+        return new GatewayError({
+            code: "bind_failed",
+            message: "Refusing to enable the runtime bridge without a bearer credential"
+        });
+    }
+    const host = options.host ?? "127.0.0.1";
+    if (isLoopbackHost(host))
+        return undefined;
+    if (options.listen !== true) {
+        return new GatewayError({
+            code: "bind_failed",
+            message: `Refusing non-loopback gateway bind ${host} without an explicit --listen opt-in`
+        });
+    }
+    if (options.credential === undefined || options.credential === "") {
+        return new GatewayError({
+            code: "bind_failed",
+            message: `Refusing non-loopback gateway bind ${host} without a bearer credential`
+        });
+    }
+    return undefined;
+};
+/**
+ * Applies the bind policy, returning the admitted Node options or a typed
+ * `bind_failed` refusal.
+ *
+ * @param options the requested bind
+ * @since 1.0.0
+ * @category constructors
+ */
+export const listenOptions = (options) => Effect.suspend(() => {
+    const refusal = bindRefusal(options);
+    if (refusal !== undefined)
+        return Effect.fail(refusal);
+    // `credential`, `listen`, and the keepalive cadence are this module's, not
+    // `node:net`'s: they are named here so the rest is exactly a bind.
+    const { allowedHosts: _allowedHosts, credential: _credential, heartbeatMillis: _cadence, listen: _listen, maxRequestBodyBytes: _maxBody, runtimeBridge: _runtimeBridge, ...node } = options;
+    return Effect.succeed({ ...node, host: node.host ?? "127.0.0.1" });
+});
+/**
+ * The authentication both RPC mounts run under.
+ *
+ * A configured credential authenticates every request that presents it and
+ * stamps the same server-owned principal. A scoped token minted under that
+ * credential (`@smthrs/control` `ScopedToken`) authenticates only the
+ * procedures, run, or flow it names, until it expires, and stamps
+ * {@link scopedPrincipal}. With no credential the composition is
+ * loopback-only (see {@link listenOptions}) and every request runs as the
+ * anonymous read principal. A session operator token alone stamps the local
+ * operator for approval decisions; without it approvals are unauthorized.
+ *
+ * @param options the requested bind
+ * @since 1.0.0
+ * @category layers
+ */
+export const layerAuth = (options) => options.credential === undefined || options.credential === ""
+    ? ControlRpcs.layerAuth({
+        authenticate: (headers) => {
+            const token = options.operatorToken;
+            if (token === undefined || token === "") {
+                return Effect.succeed({ id: "loopback", kind: "anonymous", stampedAt: 0 });
+            }
+            return ControlRpcs.bearerAuthenticator({
+                token,
+                principal: { id: "local", kind: "operator" }
+            }).authenticate(headers).pipe(Effect.catchTag("/control/Unauthorized", () => Effect.succeed({ id: "loopback", kind: "anonymous", stampedAt: 0 })));
+        }
+    }, gatewayRunVisibility)
+    : ControlRpcs.layerAuth(credentialAuthenticator(options.credential), gatewayRunVisibility);
+/**
+ * Every identity this gateway stamps reads every run. They all stand for the
+ * one operator who holds the gateway's credential, or the machine's loopback
+ * user when there is none; a scoped token is that operator's grant, confined
+ * by the procedures, run, or flow it names rather than by who launched a run.
+ */
+const gatewayRunVisibility = { seesAllRuns: () => true };
+/**
+ * The bearer credential itself, or a scoped token minted under it.
+ *
+ * The runtime bridge deliberately does not use this: it accepts the bearer
+ * alone, because a scoped token names control procedures and the bridge's
+ * versioned commands are not those.
+ */
+const credentialAuthenticator = (credential) => ControlRpcs.anyAuthenticator([
+    ControlRpcs.bearerAuthenticator({ token: credential, principal: bearerPrincipal }),
+    ScopedToken.authenticator({ key: credential, principal: scopedPrincipal })
+]);
+/**
+ * The identity stamped only after this gateway verifies its configured token.
+ * Hosts may explicitly delegate operator decisions to this exact identity.
+ * @category constants
+ * @since 1.0.0
+ */
+export const bearerPrincipal = Object.freeze({ id: "gateway", kind: "bearer" });
+/**
+ * The protected mounts a scoped token may reach: those guarded in band by
+ * `ControlAuth`, which checks each frame's procedure against the token, and
+ * the ticket exchange that opens their sockets.
+ * @category constants
+ * @since 1.0.0
+ */
+export const scopedTokenPaths = [
+    "/rpc",
+    "/rpc/ws",
+    "/projections",
+    "/projections/ws",
+    "/auth/ticket"
+];
+/**
+ * The identity stamped after this gateway verifies a scoped token minted
+ * under its configured credential. It is its own kind so that delegating
+ * approval to {@link bearerPrincipal} does not delegate it to every token
+ * minted from the bearer; a host that wants a scoped `approve:runs` token to
+ * decide delegates to this identity explicitly.
+ * @category constants
+ * @since 1.0.0
+ */
+export const scopedPrincipal = Object.freeze({ id: "gateway", kind: "scoped" });
+/**
+ * The ingress policy a requested bind runs behind.
+ *
+ * The accepted Host names are the loopback names, the operator's
+ * `allowedHosts`, and the concrete bind host itself, so `--host 192.168.1.10`
+ * is reachable at that address without naming it twice. A wildcard bind
+ * (`0.0.0.0` or `::`) adds nothing: every interface is not a Host name, and
+ * the operator names the reachable ones. Protected paths are authenticated
+ * before any request body is read.
+ *
+ * @param options the requested bind
+ * @since 1.0.0
+ * @category constructors
+ */
+export const ingressOptions = (options) => {
+    const maxRequestBodyBytes = options.maxRequestBodyBytes;
+    const host = options.host ?? "127.0.0.1";
+    const allowedHosts = [...GatewayServer.loopbackHostHeaderNames, ...options.allowedHosts ?? []];
+    const bindAuthority = URL.parse(`http://${host.includes(":") ? `[${host}]` : host}`);
+    if (host !== "0.0.0.0" && host !== "::" && bindAuthority !== null && !allowedHosts.includes(bindAuthority.hostname)) {
+        allowedHosts.push(bindAuthority.hostname);
+    }
+    if (options.credential === undefined || options.credential === "") {
+        return {
+            loopbackOnly: true,
+            ...(maxRequestBodyBytes === undefined ? {} : { maxRequestBodyBytes }),
+            allowedHosts
+        };
+    }
+    // The edge knows no call, so a scoped token passes here on its signature
+    // and expiry, and only toward the mounts whose every frame `ControlAuth`
+    // judges in band; journal sync and the runtime bridge take the bearer alone.
+    const bearer = ControlRpcs.bearerAuthenticator({ token: options.credential, principal: bearerPrincipal });
+    const scoped = credentialAuthenticator(options.credential);
+    return {
+        allowedHosts,
+        ...(maxRequestBodyBytes === undefined ? {} : { maxRequestBodyBytes }),
+        authorize: (headers, path) => (scopedTokenPaths.includes(path) ? scoped : bearer).authenticate(headers).pipe(Effect.match({ onFailure: () => false, onSuccess: () => true }))
+    };
+};
+const bindFailure = (failure) => new GatewayError({
+    code: "bind_failed",
+    message: "The gateway socket could not be bound",
+    cause: { _tag: failure._tag }
+});
+/**
+ * Fails the layer with the sanitized refusal every bearer holder may see, after
+ * logging the operator's copy: the requested authority and the operating-system
+ * cause (`EADDRINUSE`, `EACCES`, `EADDRNOTAVAIL`), which the wire error omits.
+ */
+const mapServeError = (bind, server) => server.pipe(Layer.catch((failure) => Layer.effectContext(Effect.logError({
+    message: "The gateway socket could not be bound",
+    host: bind.host,
+    port: bind.port,
+    cause: failure
+}).pipe(Effect.andThen(Effect.fail(bindFailure(failure)))))));
+/**
+ * Hosts the assembled gateway on an injected native HTTP server.
+ *
+ * Supplies the bind policy, the shared-credential authentication both RPC
+ * mounts run under, and newline-delimited JSON as the wire serialization. The
+ * caller supplies what the mounts read through: `Control`, `Projections`,
+ * `SyncServer`, and the `SyncAuth` middleware.
+ *
+ * The returned layer retains the concrete `HttpServer` service, so a caller
+ * that bound port 0 can read the ephemeral address it got.
+ *
+ * Policy refusals and operating-system listen failures both fail the layer as
+ * sanitized `bind_failed` `GatewayError` values.
+ *
+ * @param health the identity `GET /health` answers with
+ * @param options the requested bind
+ * @since 1.0.0
+ * @category layers
+ */
+export const makeLayer = (server) => (health, options = defaultServerOptions) => Layer.unwrap(Effect.map(listenOptions(options), (nodeOptions) => HttpRouter.serve(GatewayServer.layer(health, {
+    ...(options.heartbeatMillis === undefined ? {} : { heartbeatMillis: options.heartbeatMillis }),
+    ingress: ingressOptions(options),
+    ...(options.runtimeBridge === undefined ? {} : {
+        runtimeBridge: {
+            ...options.runtimeBridge,
+            authenticate: ControlRpcs.bearerAuthenticator({
+                // listenOptions rejects a runtime bridge without a credential.
+                token: options.credential,
+                principal: bearerPrincipal
+            }).authenticate
+        }
+    })
+}).pipe(Layer.provide(layerAuth(options)), Layer.provide(RpcSerialization.layerNdjson)), { disableListenLog: true, disableLogger: true }).pipe(Layer.provideMerge(mapServeError(nodeOptions, server(nodeOptions))))));
+//# sourceMappingURL=NativeGateway.js.map

package/dist/esm/internal/NativeGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NativeGateway.js","sourceRoot":"","sources":["../../../src/internal/NativeGateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC1D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAEtD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAA;AAgCpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAkB,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAA;AAEpF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAEvG;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAsB,EAA4B,EAAE;IAC9E,MAAM,OAAO,GAAG,cAAc,CAAC,+BAA+B,EAAE,OAAO,CAAC,eAAe,CAAC;QACtF,cAAc,CAAC,gCAAgC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;IAC/E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAA;IACzC,oEAAoE;IACpE,uEAAuE;IACvE,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3G,OAAO,IAAI,YAAY,CAAC;YACtB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,mEAAmE;SAC7E,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,IAAI,cAAc,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,IAAI,YAAY,CAAC;YACtB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,sCAAsC,IAAI,sCAAsC;SAC1F,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAClE,OAAO,IAAI,YAAY,CAAC;YACtB,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,sCAAsC,IAAI,8BAA8B;SAClF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAsB,EAA8C,EAAE,CAClG,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE;IAClB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACtD,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,EACJ,YAAY,EAAE,aAAa,EAC3B,UAAU,EAAE,WAAW,EACvB,eAAe,EAAE,QAAQ,EACzB,MAAM,EAAE,OAAO,EACf,mBAAmB,EAAE,QAAQ,EAC7B,aAAa,EAAE,cAAc,EAC7B,GAAG,IAAI,EACR,GAAG,OAAO,CAAA;IACX,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAA;AACpE,CAAC,CAAC,CAAA;AAEJ;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,OAAsB,EAAwC,EAAE,CACxF,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE;IAC3D,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC;QACtB,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;YACxB,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAA;YACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;gBACxC,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5E,CAAC;YACD,OAAO,WAAW,CAAC,mBAAmB,CAAC;gBACrC,KAAK;gBACL,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE;aAC7C,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAC3B,MAAM,CAAC,QAAQ,CACb,uBAAuB,EACvB,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAC1E,CACF,CAAA;QACH,CAAC;KACF,EAAE,oBAAoB,CAAC;IACxB,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAA;AAE9F;;;;;GAKG;AACH,MAAM,oBAAoB,GAA4B,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAA;AAEjF;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG,CAAC,UAAkB,EAA6B,EAAE,CAChF,WAAW,CAAC,gBAAgB,CAAC;IAC3B,WAAW,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;IAClF,WAAW,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC;CAC3E,CAAC,CAAA;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAA0B;IACrD,MAAM;IACN,SAAS;IACT,cAAc;IACd,iBAAiB;IACjB,cAAc;CACf,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;AAE/E;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAsB,EAAgC,EAAE;IACrF,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAA;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAA;IACxC,MAAM,YAAY,GAAG,CAAC,GAAG,aAAa,CAAC,uBAAuB,EAAE,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;IAC9F,MAAM,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACpF,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,aAAa,KAAK,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpH,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC3C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAClE,OAAO;YACL,YAAY,EAAE,IAAI;YAClB,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;YACrE,YAAY;SACb,CAAA;IACH,CAAC;IACD,yEAAyE;IACzE,yEAAyE;IACzE,6EAA6E;IAC7E,MAAM,MAAM,GAAG,WAAW,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAA;IACzG,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IAC1D,OAAO;QACL,YAAY;QACZ,GAAG,CAAC,mBAAmB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC;QACrE,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAC3B,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAC5E,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAChE;KACJ,CAAA;AACH,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,OAAkC,EAAgB,EAAE,CACvE,IAAI,YAAY,CAAC;IACf,IAAI,EAAE,aAAa;IACnB,OAAO,EAAE,uCAAuC;IAChD,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;CAC9B,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,aAAa,GAAG,CACpB,IAAmB,EACnB,MAAoD,EACnB,EAAE,CACnC,MAAM,CAAC,IAAI,CACT,KAAK,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CACtB,KAAK,CAAC,aAAa,CACjB,MAAM,CAAC,QAAQ,CAAC;IACd,OAAO,EAAE,uCAAuC;IAChD,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,IAAI,EAAE,IAAI,CAAC,IAAI;IACf,KAAK,EAAE,OAAO;CACf,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAC3D,CACF,CACF,CAAA;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CACvB,MAAsF,EACtF,EAAE,CACJ,CACE,MAA4B,EAC5B,UAAyB,oBAAoB,EAC7C,EAAE,CACF,KAAK,CAAC,MAAM,CACV,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CACjD,UAAU,CAAC,KAAK,CACd,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE;IAC1B,GAAG,CAAC,OAAO,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;IAC9F,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;IAChC,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,aAAa,EAAE;YACb,GAAG,OAAO,CAAC,aAAa;YACxB,YAAY,EAAE,WAAW,CAAC,mBAAmB,CAAC;gBAC5C,+DAA+D;gBAC/D,KAAK,EAAE,OAAO,CAAC,UAAW;gBAC1B,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC,YAAY;SAChB;KACF,CAAC;CACH,CAAC,CAAC,IAAI,CACL,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACjC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAC5C,EACD,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAChD,CAAC,IAAI,CACJ,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CACpE,CAAC,CACL,CAAA","sourcesContent":["/**\n * Shared native gateway bind policy, credential policy,\n * and the one composition a `smithers serve` verb hosts.\n *\n * Two rules decide whether a bind is allowed, and both fail closed:\n *\n * 1. A non-loopback host requires an explicit `listen` opt-in. Binding\n *    `0.0.0.0` because a port was free is how a workspace gateway ends up on\n *    a shared network by accident.\n * 2. A non-loopback bind requires a bearer credential. The control plane can\n *    launch runs, cancel them, and approve capability grants; reachable from\n *    another machine, an unauthenticated one is a remote execution service.\n *\n * A loopback bind with no network credential allows anonymous reads; approval\n * decisions require the session operator token. Ingress still checks Host and\n * Origin so a web page cannot exercise the loopback endpoint.\n *\n * @since 1.0.0\n */\n\nimport { ControlRpcs, ScopedToken } from \"@smthrs/control\"\nimport { Effect, Layer } from \"effect\"\nimport { HttpRouter } from \"effect/unstable/http\"\nimport type { HttpServer } from \"effect/unstable/http/HttpServer\"\nimport type { ServeError } from \"effect/unstable/http/HttpServerError\"\nimport { RpcSerialization } from \"effect/unstable/rpc\"\nimport type { ListenOptions } from \"node:net\"\nimport { GatewayError, settingRefusal } from \"../GatewayError.ts\"\nimport * as GatewayServer from \"../GatewayServer.ts\"\nimport type * as RuntimeBridge from \"../RuntimeBridge.ts\"\n\n/**\n * Where the gateway binds, and whether a non-loopback bind was asked for.\n *\n * @since 1.0.0\n * @category models\n */\nexport interface ServerOptions extends ListenOptions {\n  /** Additional accepted Host header names (without ports), for network or proxy access. */\n  readonly allowedHosts?: ReadonlyArray<string> | undefined\n  /** The `--listen` opt-in required for a non-loopback host. */\n  readonly listen?: boolean | undefined\n  /** The shared bearer credential, required for a non-loopback bind. */\n  readonly credential?: string | undefined\n  /** Per-session approval token on credential-free loopback. Read calls remain anonymous. */\n  readonly operatorToken?: string | undefined\n  /**\n   * How often an idle followed `Watch` on `/rpc/ws` and an idle followed\n   * `Projection.Subscribe` on `/projections/ws` emit a keepalive frame. Unset,\n   * both run at `Projections.heartbeatIntervalMillis` unless the supplied\n   * `Projections` service was built with its own cadence. A relay with an idle\n   * cut shorter than that one needs a shorter cadence here.\n   */\n  readonly heartbeatMillis?: number | undefined\n  /** Maximum bytes accepted on one HTTP RPC request. Default one MiB. */\n  readonly maxRequestBodyBytes?: number | undefined\n  /** Immutable identity of an opt-in packaged Flow runtime bridge. */\n  readonly runtimeBridge?: Omit<RuntimeBridge.Config, \"authenticate\"> | undefined\n}\n\n/**\n * The default bind: loopback, port 7331, no credential.\n *\n * @since 1.0.0\n * @category models\n */\nexport const defaultServerOptions: ServerOptions = { host: \"127.0.0.1\", port: 7331 }\n\n/**\n * Whether a host names this machine only.\n *\n * @param host the host to classify\n * @since 1.0.0\n * @category predicates\n */\nexport const isLoopbackHost = (host: string): boolean => GatewayServer.loopbackHostNames.includes(host)\n\n/**\n * The typed refusal a requested bind earns, or `undefined` when it is allowed.\n *\n * Every start-time rule this module enforces answers here as a `bind_failed`\n * `GatewayError`, so a host that wants to report a refusal rather than crash on\n * one asks this before it composes a layer. {@link listenOptions} and\n * {@link layer} fail with exactly what this returns.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category constructors\n */\nexport const bindRefusal = (options: ServerOptions): GatewayError | undefined => {\n  const setting = settingRefusal(\"The gateway keepalive cadence\", options.heartbeatMillis) ??\n    settingRefusal(\"The gateway request body limit\", options.maxRequestBodyBytes)\n  if (setting !== undefined) return setting\n  // The bridge authenticates only with the bearer credential, even on\n  // loopback, so a bridge without one would answer 401 to every request.\n  if (options.runtimeBridge !== undefined && (options.credential === undefined || options.credential === \"\")) {\n    return new GatewayError({\n      code: \"bind_failed\",\n      message: \"Refusing to enable the runtime bridge without a bearer credential\"\n    })\n  }\n  const host = options.host ?? \"127.0.0.1\"\n  if (isLoopbackHost(host)) return undefined\n  if (options.listen !== true) {\n    return new GatewayError({\n      code: \"bind_failed\",\n      message: `Refusing non-loopback gateway bind ${host} without an explicit --listen opt-in`\n    })\n  }\n  if (options.credential === undefined || options.credential === \"\") {\n    return new GatewayError({\n      code: \"bind_failed\",\n      message: `Refusing non-loopback gateway bind ${host} without a bearer credential`\n    })\n  }\n  return undefined\n}\n\n/**\n * Applies the bind policy, returning the admitted Node options or a typed\n * `bind_failed` refusal.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category constructors\n */\nexport const listenOptions = (options: ServerOptions): Effect.Effect<ListenOptions, GatewayError> =>\n  Effect.suspend(() => {\n    const refusal = bindRefusal(options)\n    if (refusal !== undefined) return Effect.fail(refusal)\n    // `credential`, `listen`, and the keepalive cadence are this module's, not\n    // `node:net`'s: they are named here so the rest is exactly a bind.\n    const {\n      allowedHosts: _allowedHosts,\n      credential: _credential,\n      heartbeatMillis: _cadence,\n      listen: _listen,\n      maxRequestBodyBytes: _maxBody,\n      runtimeBridge: _runtimeBridge,\n      ...node\n    } = options\n    return Effect.succeed({ ...node, host: node.host ?? \"127.0.0.1\" })\n  })\n\n/**\n * The authentication both RPC mounts run under.\n *\n * A configured credential authenticates every request that presents it and\n * stamps the same server-owned principal. A scoped token minted under that\n * credential (`@smthrs/control` `ScopedToken`) authenticates only the\n * procedures, run, or flow it names, until it expires, and stamps\n * {@link scopedPrincipal}. With no credential the composition is\n * loopback-only (see {@link listenOptions}) and every request runs as the\n * anonymous read principal. A session operator token alone stamps the local\n * operator for approval decisions; without it approvals are unauthorized.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category layers\n */\nexport const layerAuth = (options: ServerOptions): Layer.Layer<ControlRpcs.ControlAuth> =>\n  options.credential === undefined || options.credential === \"\"\n    ? ControlRpcs.layerAuth({\n      authenticate: (headers) => {\n        const token = options.operatorToken\n        if (token === undefined || token === \"\") {\n          return Effect.succeed({ id: \"loopback\", kind: \"anonymous\", stampedAt: 0 })\n        }\n        return ControlRpcs.bearerAuthenticator({\n          token,\n          principal: { id: \"local\", kind: \"operator\" }\n        }).authenticate(headers).pipe(\n          Effect.catchTag(\n            \"/control/Unauthorized\",\n            () => Effect.succeed({ id: \"loopback\", kind: \"anonymous\", stampedAt: 0 })\n          )\n        )\n      }\n    }, gatewayRunVisibility)\n    : ControlRpcs.layerAuth(credentialAuthenticator(options.credential), gatewayRunVisibility)\n\n/**\n * Every identity this gateway stamps reads every run. They all stand for the\n * one operator who holds the gateway's credential, or the machine's loopback\n * user when there is none; a scoped token is that operator's grant, confined\n * by the procedures, run, or flow it names rather than by who launched a run.\n */\nconst gatewayRunVisibility: ControlRpcs.AuthOptions = { seesAllRuns: () => true }\n\n/**\n * The bearer credential itself, or a scoped token minted under it.\n *\n * The runtime bridge deliberately does not use this: it accepts the bearer\n * alone, because a scoped token names control procedures and the bridge's\n * versioned commands are not those.\n */\nconst credentialAuthenticator = (credential: string): ControlRpcs.Authenticator =>\n  ControlRpcs.anyAuthenticator([\n    ControlRpcs.bearerAuthenticator({ token: credential, principal: bearerPrincipal }),\n    ScopedToken.authenticator({ key: credential, principal: scopedPrincipal })\n  ])\n\n/**\n * The identity stamped only after this gateway verifies its configured token.\n * Hosts may explicitly delegate operator decisions to this exact identity.\n * @category constants\n * @since 1.0.0\n */\nexport const bearerPrincipal = Object.freeze({ id: \"gateway\", kind: \"bearer\" })\n\n/**\n * The protected mounts a scoped token may reach: those guarded in band by\n * `ControlAuth`, which checks each frame's procedure against the token, and\n * the ticket exchange that opens their sockets.\n * @category constants\n * @since 1.0.0\n */\nexport const scopedTokenPaths: ReadonlyArray<string> = [\n  \"/rpc\",\n  \"/rpc/ws\",\n  \"/projections\",\n  \"/projections/ws\",\n  \"/auth/ticket\"\n]\n\n/**\n * The identity stamped after this gateway verifies a scoped token minted\n * under its configured credential. It is its own kind so that delegating\n * approval to {@link bearerPrincipal} does not delegate it to every token\n * minted from the bearer; a host that wants a scoped `approve:runs` token to\n * decide delegates to this identity explicitly.\n * @category constants\n * @since 1.0.0\n */\nexport const scopedPrincipal = Object.freeze({ id: \"gateway\", kind: \"scoped\" })\n\n/**\n * The ingress policy a requested bind runs behind.\n *\n * The accepted Host names are the loopback names, the operator's\n * `allowedHosts`, and the concrete bind host itself, so `--host 192.168.1.10`\n * is reachable at that address without naming it twice. A wildcard bind\n * (`0.0.0.0` or `::`) adds nothing: every interface is not a Host name, and\n * the operator names the reachable ones. Protected paths are authenticated\n * before any request body is read.\n *\n * @param options the requested bind\n * @since 1.0.0\n * @category constructors\n */\nexport const ingressOptions = (options: ServerOptions): GatewayServer.IngressOptions => {\n  const maxRequestBodyBytes = options.maxRequestBodyBytes\n  const host = options.host ?? \"127.0.0.1\"\n  const allowedHosts = [...GatewayServer.loopbackHostHeaderNames, ...options.allowedHosts ?? []]\n  const bindAuthority = URL.parse(`http://${host.includes(\":\") ? `[${host}]` : host}`)\n  if (host !== \"0.0.0.0\" && host !== \"::\" && bindAuthority !== null && !allowedHosts.includes(bindAuthority.hostname)) {\n    allowedHosts.push(bindAuthority.hostname)\n  }\n  if (options.credential === undefined || options.credential === \"\") {\n    return {\n      loopbackOnly: true,\n      ...(maxRequestBodyBytes === undefined ? {} : { maxRequestBodyBytes }),\n      allowedHosts\n    }\n  }\n  // The edge knows no call, so a scoped token passes here on its signature\n  // and expiry, and only toward the mounts whose every frame `ControlAuth`\n  // judges in band; journal sync and the runtime bridge take the bearer alone.\n  const bearer = ControlRpcs.bearerAuthenticator({ token: options.credential, principal: bearerPrincipal })\n  const scoped = credentialAuthenticator(options.credential)\n  return {\n    allowedHosts,\n    ...(maxRequestBodyBytes === undefined ? {} : { maxRequestBodyBytes }),\n    authorize: (headers, path) =>\n      (scopedTokenPaths.includes(path) ? scoped : bearer).authenticate(headers).pipe(\n        Effect.match({ onFailure: () => false, onSuccess: () => true })\n      )\n  }\n}\n\nconst bindFailure = (failure: ServeError | GatewayError): GatewayError =>\n  new GatewayError({\n    code: \"bind_failed\",\n    message: \"The gateway socket could not be bound\",\n    cause: { _tag: failure._tag }\n  })\n\n/**\n * Fails the layer with the sanitized refusal every bearer holder may see, after\n * logging the operator's copy: the requested authority and the operating-system\n * cause (`EADDRINUSE`, `EACCES`, `EADDRNOTAVAIL`), which the wire error omits.\n */\nconst mapServeError = <A, R>(\n  bind: ListenOptions,\n  server: Layer.Layer<A, ServeError | GatewayError, R>\n): Layer.Layer<A, GatewayError, R> =>\n  server.pipe(\n    Layer.catch((failure) =>\n      Layer.effectContext<A, GatewayError, never>(\n        Effect.logError({\n          message: \"The gateway socket could not be bound\",\n          host: bind.host,\n          port: bind.port,\n          cause: failure\n        }).pipe(Effect.andThen(Effect.fail(bindFailure(failure))))\n      )\n    )\n  )\n\n/**\n * Hosts the assembled gateway on an injected native HTTP server.\n *\n * Supplies the bind policy, the shared-credential authentication both RPC\n * mounts run under, and newline-delimited JSON as the wire serialization. The\n * caller supplies what the mounts read through: `Control`, `Projections`,\n * `SyncServer`, and the `SyncAuth` middleware.\n *\n * The returned layer retains the concrete `HttpServer` service, so a caller\n * that bound port 0 can read the ephemeral address it got.\n *\n * Policy refusals and operating-system listen failures both fail the layer as\n * sanitized `bind_failed` `GatewayError` values.\n *\n * @param health the identity `GET /health` answers with\n * @param options the requested bind\n * @since 1.0.0\n * @category layers\n */\nexport const makeLayer = (\n  server: (options: ListenOptions) => Layer.Layer<HttpServer, ServeError | GatewayError>\n) =>\n(\n  health: GatewayServer.Health,\n  options: ServerOptions = defaultServerOptions\n) =>\n  Layer.unwrap(\n    Effect.map(listenOptions(options), (nodeOptions) =>\n      HttpRouter.serve(\n        GatewayServer.layer(health, {\n          ...(options.heartbeatMillis === undefined ? {} : { heartbeatMillis: options.heartbeatMillis }),\n          ingress: ingressOptions(options),\n          ...(options.runtimeBridge === undefined ? {} : {\n            runtimeBridge: {\n              ...options.runtimeBridge,\n              authenticate: ControlRpcs.bearerAuthenticator({\n                // listenOptions rejects a runtime bridge without a credential.\n                token: options.credential!,\n                principal: bearerPrincipal\n              }).authenticate\n            }\n          })\n        }).pipe(\n          Layer.provide(layerAuth(options)),\n          Layer.provide(RpcSerialization.layerNdjson)\n        ),\n        { disableListenLog: true, disableLogger: true }\n      ).pipe(\n        Layer.provideMerge(mapServeError(nodeOptions, server(nodeOptions)))\n      ))\n  )\n"]}

package/dist/esm/internal/actionRenderings.d.ts

@@ -0,0 +1,2 @@
+export declare const ACTION_RENDERINGS: Readonly<Record<string, string | null>>;
+//# sourceMappingURL=actionRenderings.d.ts.map

package/dist/esm/internal/actionRenderings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionRenderings.d.ts","sourceRoot":"","sources":["../../../src/internal/actionRenderings.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAuMrE,CAAA"}

package/dist/esm/internal/actionRenderings.js

@@ -0,0 +1,202 @@
+// Generated by scripts/catalog-mvp.ts from Appendix C; do not edit.
+export const ACTION_RENDERINGS = {
+    "<boundary:name>": null,
+    "<park>/parked": null,
+    "<quota-park>/<session>": null,
+    "<seal-step>": null,
+    "<structured-output-count>/<name>": null,
+    "agent/capacity/<seat>/cool/<n>": "Waiting for a model",
+    "agent/opening-instructions": "Read the instructions",
+    "agent/opening-memory": "Loaded context",
+    "agent/route-seat": "Chose a model",
+    "agent/run": "Worked a turn",
+    "agent/send (stamp)": null,
+    "agent/trace/checkpoint": null,
+    "apply_patch": "An attributed edit in the File and Diff cards",
+    "ask": "Needs you",
+    "bash": "Terminal card (agent session). Missing: no terminal today",
+    "checks/lint": "Linted the change",
+    "checks/review": "Reviewed the change",
+    "checks/security": "Reviewed security",
+    "checks/wiki": "Checked the wiki",
+    "coding/AdmitVibe": "Opened the change for landing",
+    "coding/ApplyNative": "Applied the changes",
+    "coding/CleanVibeHistory": "Tidied the history",
+    "coding/CommandCheck": "Ran checks",
+    "coding/CoordinateRequest": "Worked the TODO",
+    "coding/CorrectPlan": "Fixed review findings",
+    "coding/CorrectionRound": "Fixed review findings",
+    "coding/DescribeFinalAtom": "Wrote the commit message",
+    "coding/Dispatch": "Ran an agent turn",
+    "coding/FlowLoad": "Validated the flows",
+    "coding/ImplementAtom": "Implemented one step",
+    "coding/ImplementAtoms": "Implemented the plan",
+    "coding/ImplementPlan": "Implemented the plan",
+    "coding/JevCheck": "Checked rules",
+    "coding/LandVibe": "Landed the change",
+    "coding/ObservePlan": "Tracked progress",
+    "coding/Poc": "Drafted a prototype",
+    "coding/PreparePlan": "Planned the change",
+    "coding/PrepareRequest": "Prepared the request",
+    "coding/ProposeFinalHistory": "Reviewed the history",
+    "coding/Prototype": "Drafted a prototype",
+    "coding/PublishVibeSource": "Published the change",
+    "coding/ReadNative": "Read the changes",
+    "coding/RecheckCorrected": "Re-checked the fix",
+    "coding/RecheckFinalHistory": "Re-checked the history",
+    "coding/RefreshWiki": "Refreshed wiki pages",
+    "coding/RepairPass": "Repaired the change",
+    "coding/ReviewCapturedChange": "Reviewed the change",
+    "coding/ReviewCapturedWiki": "Checked the wiki",
+    "coding/ReviewCheck": "Reviewed the change",
+    "coding/RewriteFinalHistory": "Tidied the history",
+    "coding/SecurityAudit": "Audited security",
+    "coding/SecurityReviewCheck": "Reviewed security",
+    "coding/VerifyVibe": "Verified before landing",
+    "coding/Wiki": "Refreshed the wiki",
+    "coding/WikiCheck": "Checked the wiki",
+    "coding/admit-retained-source": "Opened the source",
+    "coding/admit-verify-source": "Opened the candidate",
+    "coding/assess": "Assessed the change",
+    "coding/audit-security": "Audited security",
+    "coding/begin-correction": "Started a fix round",
+    "coding/capture-poc-source": "Captured the source",
+    "coding/capture-review-check": "Captured the change",
+    "coding/capture-wiki-check": "Captured the wiki",
+    "coding/check": "Ran checks",
+    "coding/check-command": "Ran checks",
+    "coding/check-jev-rules": "Checked rules",
+    "coding/configure-planning-wiki": "Chose wiki pages",
+    "coding/confirm-final-description": "Confirmed the commit message",
+    "coding/create-stack-base": "Created the stack base",
+    "coding/create-vibe-landing": "Added to the stack",
+    "coding/decline-request": "Declined the request",
+    "coding/dispatch-turn": "Worked a turn",
+    "coding/draft-plan": "Drafted the plan",
+    "coding/draft-poc": "Drafted a prototype",
+    "coding/edit-atom": "Edited the files",
+    "coding/fast-forward-vibe": "Moved the branch forward",
+    "coding/fast-gate": "Ran quick checks",
+    "coding/fence-vibe-source": "Pinned the change",
+    "coding/finalize-plan": "Finalized the plan",
+    "coding/find-planning-wiki-review": "Found wiki notes",
+    "coding/finish-correction": "Finished the fix round",
+    "coding/finish-final-history": "Finished the history",
+    "coding/finish-review-check": "Collected review findings",
+    "coding/finish-wiki-check": "Checked the wiki",
+    "coding/gather-planning-context": "Gathered context",
+    "coding/implement-change": "Implemented the change",
+    "coding/import-dependency-docs": "Imported dependency docs",
+    "coding/install-dependency-pages": "Added dependency pages",
+    "coding/load-flows": "Validated the flows",
+    "coding/materialize-poc": "Applied the prototype",
+    "coding/merge-request-feedback": "Took in your steer",
+    "coding/merge-vibe-local-pull": "Merged the change",
+    "coding/observe-atom": "Saved the edit",
+    "coding/observe-dispatch": "Saved the turn",
+    "coding/observe-vibe-append": "Added to the stack",
+    "coding/observe-vibe-pull-checks": "Watched PR checks",
+    "coding/open-vibe-local-pull": "Opened the pull request",
+    "coding/open-vibe-pull": "Opened the pull request",
+    "coding/prepare-atom": "Opened the working copy",
+    "coding/prepare-atom-mutation": "Prepared to edit",
+    "coding/prepare-final-description": "Drafted the commit message",
+    "coding/prepare-owner-repair": "Prepared the repair",
+    "coding/prepare-repair-context": "Gathered repair context",
+    "coding/prepare-return-mythical-tip": "Returned to the stack tip",
+    "coding/prepare-stack-base": "Prepared the stack",
+    "coding/prepare-vibe-append": "Prepared to add to the stack",
+    "coding/prepare-vibe-candidate": "Prepared the change",
+    "coding/publish-vibe-source": "Published the change",
+    "coding/queue-vibe-append": "Queued for the stack",
+    "coding/read-correction-history": "Read earlier fixes",
+    "coding/read-feedback-cancellation": "Read your steer",
+    "coding/read-published-wiki": "Read the wiki",
+    "coding/read-vibe-delivery": "Read delivery status",
+    "coding/read-vibe-lander": "Read landing state",
+    "coding/read-vibe-request": "Read the request",
+    "coding/read-vibe-stack": "Read the stack",
+    "coding/receive-request-feedback": "Waited for your steer",
+    "coding/record-fast-gated-progress": "Recorded progress",
+    "coding/record-learning": "Saved a lesson",
+    "coding/record-slow-feedback": "Recorded feedback",
+    "coding/refresh-final-history": "Refreshed the history",
+    "coding/refresh-planning-wiki": "Refreshed wiki pages",
+    "coding/refresh-restacked-evidence": "Refreshed evidence",
+    "coding/refuse-plan-approval": "Refused a plan approval",
+    "coding/repair-final-history": "Corrected the history",
+    "coding/retain-poc": "Saved the prototype",
+    "coding/review-final-history": "Reviewed the history",
+    "coding/review-lens": "Reviewed through one lens",
+    "coding/review-poc": "Reviewed the prototype",
+    "coding/review-request": "Reviewed the request",
+    "coding/review-security": "Reviewed security",
+    "coding/run-correction-round": "Fixed review findings",
+    "coding/select-owner-repair": "Chose what to fix",
+    "coding/submit-vibe-lane": "Queued the change",
+    "coding/todo-boundary": null,
+    "coding/todo-delivery": "Prepared the delivery",
+    "coding/todo-pause-requested": null,
+    "coding/todo-resume": null,
+    "coding/todo-review": null,
+    "coding/todo-review-input": null,
+    "coding/validate-final-history": "Checked the history",
+    "coding/validate-plan": "Checked the plan",
+    "coding/verify-planning-context": "Checked the context",
+    "coding/verify-vibe-landed": "Confirmed it landed",
+    "create-flow": "Created a flow",
+    "create-flow/clarify": "Asked what the flow should do",
+    "create-flow/design": "Designed the flow",
+    "create-flow/document": "Documented the flow",
+    "create-flow/fix": "Fixed the flow",
+    "create-flow/provision": "Set up the flow",
+    "create-flow/scaffold": "Wrote the flow",
+    "edit": "An attributed edit in the File and Diff cards",
+    "factory/Todo": "Routed the TODO",
+    "factory/route-todo": "Chose how to start",
+    "factory/stamp-route": "Declined the TODO",
+    "glob": "A \"read\" line in branch activity, opening the File card",
+    "grep": "A \"read\" line in branch activity, opening the File card",
+    "jev": "Inspect only: \"Decided <question>\"",
+    "ls": "A \"read\" line in branch activity, opening the File card",
+    "memory": "The \"Context\" line and the preflight cell in Inspect",
+    "memory/mine": "Saved lessons",
+    "memory/mine/run": "Saved lessons",
+    "read": "A \"read\" line in branch activity, opening the File card",
+    "recall": "The \"Context\" line and the preflight cell in Inspect",
+    "recall (namespaced)": "The \"Context\" line and the preflight cell in Inspect",
+    "remember": "Learning receipt",
+    "review": "Reviewed the change",
+    "smithers-review/ApplyVerdicts": "Settled findings",
+    "smithers-review/FinalizeReview": "Finished the review",
+    "smithers-review/MergeFileBatch": "Collected findings",
+    "smithers-review/NarrateChanges": "Wrote the walkthrough",
+    "smithers-review/NarrateReview": "Wrote the walkthrough",
+    "smithers-review/PrepareReview": "Prepared the review",
+    "smithers-review/RenderWalkthrough": "Rendered the walkthrough",
+    "smithers-review/ReviewFile": "Reviewed one file",
+    "smithers-review/ReviewFiles": "Reviewed the files",
+    "smithers-review/VerifyFindings": "Verified findings",
+    "smithers-review/VerifyReview": "Verified findings",
+    "smithers/IncrementalWiki": "Refreshed the wiki",
+    "smithers/Wiki": "Refreshed the wiki",
+    "stack.candidate": "Saved the candidate",
+    "stack.propose": "Proposed the candidate",
+    "system/human-task": "Waited for your answer",
+    "system/sleep": null,
+    "system/wait-for": null,
+    "test": "Terminal card plus checks. Missing: needs SMITHERS_TEST_COMMAND",
+    "wait": "Waited",
+    "wiki/assess-review": "Assessed a wiki page",
+    "wiki/bind-review-provenance": "Linked a review to its source",
+    "wiki/check-citations": "Checked citations",
+    "wiki/collect-page": "Collected sources for a page",
+    "wiki/load-recorded-reviews": "Found earlier reviews",
+    "wiki/publish-recorded-reviews": "Saved wiki pages",
+    "wiki/review-page": "Reviewed a wiki page",
+    "wiki/select-recorded-review": "Reused a review",
+    "wiki/validate-review": "Checked a wiki page",
+    "wiki/write-snapshot": "Saved wiki pages",
+    "write": "An attributed edit in the File and Diff cards"
+};
+//# sourceMappingURL=actionRenderings.js.map

package/dist/esm/internal/actionRenderings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actionRenderings.js","sourceRoot":"","sources":["../../../src/internal/actionRenderings.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,MAAM,CAAC,MAAM,iBAAiB,GAA4C;IACxE,iBAAiB,EAAE,IAAI;IACvB,eAAe,EAAE,IAAI;IACrB,wBAAwB,EAAE,IAAI;IAC9B,aAAa,EAAE,IAAI;IACnB,kCAAkC,EAAE,IAAI;IACxC,gCAAgC,EAAE,qBAAqB;IACvD,4BAA4B,EAAE,uBAAuB;IACrD,sBAAsB,EAAE,gBAAgB;IACxC,kBAAkB,EAAE,eAAe;IACnC,WAAW,EAAE,eAAe;IAC5B,oBAAoB,EAAE,IAAI;IAC1B,wBAAwB,EAAE,IAAI;IAC9B,aAAa,EAAE,+CAA+C;IAC9D,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,2DAA2D;IACnE,aAAa,EAAE,mBAAmB;IAClC,eAAe,EAAE,qBAAqB;IACtC,iBAAiB,EAAE,mBAAmB;IACtC,aAAa,EAAE,kBAAkB;IACjC,kBAAkB,EAAE,+BAA+B;IACnD,oBAAoB,EAAE,qBAAqB;IAC3C,yBAAyB,EAAE,oBAAoB;IAC/C,qBAAqB,EAAE,YAAY;IACnC,0BAA0B,EAAE,iBAAiB;IAC7C,oBAAoB,EAAE,uBAAuB;IAC7C,wBAAwB,EAAE,uBAAuB;IACjD,0BAA0B,EAAE,0BAA0B;IACtD,iBAAiB,EAAE,mBAAmB;IACtC,iBAAiB,EAAE,qBAAqB;IACxC,sBAAsB,EAAE,sBAAsB;IAC9C,uBAAuB,EAAE,sBAAsB;IAC/C,sBAAsB,EAAE,sBAAsB;IAC9C,iBAAiB,EAAE,eAAe;IAClC,iBAAiB,EAAE,mBAAmB;IACtC,oBAAoB,EAAE,kBAAkB;IACxC,YAAY,EAAE,qBAAqB;IACnC,oBAAoB,EAAE,oBAAoB;IAC1C,uBAAuB,EAAE,sBAAsB;IAC/C,4BAA4B,EAAE,sBAAsB;IACpD,kBAAkB,EAAE,qBAAqB;IACzC,0BAA0B,EAAE,sBAAsB;IAClD,mBAAmB,EAAE,kBAAkB;IACvC,yBAAyB,EAAE,oBAAoB;IAC/C,4BAA4B,EAAE,wBAAwB;IACtD,oBAAoB,EAAE,sBAAsB;IAC5C,mBAAmB,EAAE,qBAAqB;IAC1C,6BAA6B,EAAE,qBAAqB;IACpD,2BAA2B,EAAE,kBAAkB;IAC/C,oBAAoB,EAAE,qBAAqB;IAC3C,4BAA4B,EAAE,oBAAoB;IAClD,sBAAsB,EAAE,kBAAkB;IAC1C,4BAA4B,EAAE,mBAAmB;IACjD,mBAAmB,EAAE,yBAAyB;IAC9C,aAAa,EAAE,oBAAoB;IACnC,kBAAkB,EAAE,kBAAkB;IACtC,8BAA8B,EAAE,mBAAmB;IACnD,4BAA4B,EAAE,sBAAsB;IACpD,eAAe,EAAE,qBAAqB;IACtC,uBAAuB,EAAE,kBAAkB;IAC3C,yBAAyB,EAAE,qBAAqB;IAChD,2BAA2B,EAAE,qBAAqB;IAClD,6BAA6B,EAAE,qBAAqB;IACpD,2BAA2B,EAAE,mBAAmB;IAChD,cAAc,EAAE,YAAY;IAC5B,sBAAsB,EAAE,YAAY;IACpC,wBAAwB,EAAE,eAAe;IACzC,gCAAgC,EAAE,kBAAkB;IACpD,kCAAkC,EAAE,8BAA8B;IAClE,0BAA0B,EAAE,wBAAwB;IACpD,4BAA4B,EAAE,oBAAoB;IAClD,wBAAwB,EAAE,sBAAsB;IAChD,sBAAsB,EAAE,eAAe;IACvC,mBAAmB,EAAE,kBAAkB;IACvC,kBAAkB,EAAE,qBAAqB;IACzC,kBAAkB,EAAE,kBAAkB;IACtC,0BAA0B,EAAE,0BAA0B;IACtD,kBAAkB,EAAE,kBAAkB;IACtC,0BAA0B,EAAE,mBAAmB;IAC/C,sBAAsB,EAAE,oBAAoB;IAC5C,kCAAkC,EAAE,kBAAkB;IACtD,0BAA0B,EAAE,wBAAwB;IACpD,6BAA6B,EAAE,sBAAsB;IACrD,4BAA4B,EAAE,2BAA2B;IACzD,0BAA0B,EAAE,kBAAkB;IAC9C,gCAAgC,EAAE,kBAAkB;IACpD,yBAAyB,EAAE,wBAAwB;IACnD,+BAA+B,EAAE,0BAA0B;IAC3D,iCAAiC,EAAE,wBAAwB;IAC3D,mBAAmB,EAAE,qBAAqB;IAC1C,wBAAwB,EAAE,uBAAuB;IACjD,+BAA+B,EAAE,oBAAoB;IACrD,8BAA8B,EAAE,mBAAmB;IACnD,qBAAqB,EAAE,gBAAgB;IACvC,yBAAyB,EAAE,gBAAgB;IAC3C,4BAA4B,EAAE,oBAAoB;IAClD,iCAAiC,EAAE,mBAAmB;IACtD,6BAA6B,EAAE,yBAAyB;IACxD,uBAAuB,EAAE,yBAAyB;IAClD,qBAAqB,EAAE,yBAAyB;IAChD,8BAA8B,EAAE,kBAAkB;IAClD,kCAAkC,EAAE,4BAA4B;IAChE,6BAA6B,EAAE,qBAAqB;IACpD,+BAA+B,EAAE,yBAAyB;IAC1D,oCAAoC,EAAE,2BAA2B;IACjE,2BAA2B,EAAE,oBAAoB;IACjD,4BAA4B,EAAE,8BAA8B;IAC5D,+BAA+B,EAAE,qBAAqB;IACtD,4BAA4B,EAAE,sBAAsB;IACpD,0BAA0B,EAAE,sBAAsB;IAClD,gCAAgC,EAAE,oBAAoB;IACtD,mCAAmC,EAAE,iBAAiB;IACtD,4BAA4B,EAAE,eAAe;IAC7C,2BAA2B,EAAE,sBAAsB;IACnD,yBAAyB,EAAE,oBAAoB;IAC/C,0BAA0B,EAAE,kBAAkB;IAC9C,wBAAwB,EAAE,gBAAgB;IAC1C,iCAAiC,EAAE,uBAAuB;IAC1D,mCAAmC,EAAE,mBAAmB;IACxD,wBAAwB,EAAE,gBAAgB;IAC1C,6BAA6B,EAAE,mBAAmB;IAClD,8BAA8B,EAAE,uBAAuB;IACvD,8BAA8B,EAAE,sBAAsB;IACtD,mCAAmC,EAAE,oBAAoB;IACzD,6BAA6B,EAAE,yBAAyB;IACxD,6BAA6B,EAAE,uBAAuB;IACtD,mBAAmB,EAAE,qBAAqB;IAC1C,6BAA6B,EAAE,sBAAsB;IACrD,oBAAoB,EAAE,2BAA2B;IACjD,mBAAmB,EAAE,wBAAwB;IAC7C,uBAAuB,EAAE,sBAAsB;IAC/C,wBAAwB,EAAE,mBAAmB;IAC7C,6BAA6B,EAAE,uBAAuB;IACtD,4BAA4B,EAAE,mBAAmB;IACjD,yBAAyB,EAAE,mBAAmB;IAC9C,sBAAsB,EAAE,IAAI;IAC5B,sBAAsB,EAAE,uBAAuB;IAC/C,6BAA6B,EAAE,IAAI;IACnC,oBAAoB,EAAE,IAAI;IAC1B,oBAAoB,EAAE,IAAI;IAC1B,0BAA0B,EAAE,IAAI;IAChC,+BAA+B,EAAE,qBAAqB;IACtD,sBAAsB,EAAE,kBAAkB;IAC1C,gCAAgC,EAAE,qBAAqB;IACvD,2BAA2B,EAAE,qBAAqB;IAClD,aAAa,EAAE,gBAAgB;IAC/B,qBAAqB,EAAE,+BAA+B;IACtD,oBAAoB,EAAE,mBAAmB;IACzC,sBAAsB,EAAE,qBAAqB;IAC7C,iBAAiB,EAAE,gBAAgB;IACnC,uBAAuB,EAAE,iBAAiB;IAC1C,sBAAsB,EAAE,gBAAgB;IACxC,MAAM,EAAE,+CAA+C;IACvD,cAAc,EAAE,iBAAiB;IACjC,oBAAoB,EAAE,oBAAoB;IAC1C,qBAAqB,EAAE,mBAAmB;IAC1C,MAAM,EAAE,2DAA2D;IACnE,MAAM,EAAE,2DAA2D;IACnE,KAAK,EAAE,sCAAsC;IAC7C,IAAI,EAAE,2DAA2D;IACjE,QAAQ,EAAE,wDAAwD;IAClE,aAAa,EAAE,eAAe;IAC9B,iBAAiB,EAAE,eAAe;IAClC,MAAM,EAAE,2DAA2D;IACnE,QAAQ,EAAE,wDAAwD;IAClE,qBAAqB,EAAE,wDAAwD;IAC/E,UAAU,EAAE,kBAAkB;IAC9B,QAAQ,EAAE,qBAAqB;IAC/B,+BAA+B,EAAE,kBAAkB;IACnD,gCAAgC,EAAE,qBAAqB;IACvD,gCAAgC,EAAE,oBAAoB;IACtD,gCAAgC,EAAE,uBAAuB;IACzD,+BAA+B,EAAE,uBAAuB;IACxD,+BAA+B,EAAE,qBAAqB;IACtD,mCAAmC,EAAE,0BAA0B;IAC/D,4BAA4B,EAAE,mBAAmB;IACjD,6BAA6B,EAAE,oBAAoB;IACnD,gCAAgC,EAAE,mBAAmB;IACrD,8BAA8B,EAAE,mBAAmB;IACnD,0BAA0B,EAAE,oBAAoB;IAChD,eAAe,EAAE,oBAAoB;IACrC,iBAAiB,EAAE,qBAAqB;IACxC,eAAe,EAAE,wBAAwB;IACzC,mBAAmB,EAAE,wBAAwB;IAC7C,cAAc,EAAE,IAAI;IACpB,iBAAiB,EAAE,IAAI;IACvB,MAAM,EAAE,iEAAiE;IACzE,MAAM,EAAE,QAAQ;IAChB,oBAAoB,EAAE,sBAAsB;IAC5C,6BAA6B,EAAE,+BAA+B;IAC9D,sBAAsB,EAAE,mBAAmB;IAC3C,mBAAmB,EAAE,8BAA8B;IACnD,4BAA4B,EAAE,uBAAuB;IACrD,+BAA+B,EAAE,kBAAkB;IACnD,kBAAkB,EAAE,sBAAsB;IAC1C,6BAA6B,EAAE,iBAAiB;IAChD,sBAAsB,EAAE,qBAAqB;IAC7C,qBAAqB,EAAE,kBAAkB;IACzC,OAAO,EAAE,+CAA+C;CACzD,CAAA","sourcesContent":["// Generated by scripts/catalog-mvp.ts from Appendix C; do not edit.\nexport const ACTION_RENDERINGS: Readonly<Record<string, string | null>> = {\n  \"<boundary:name>\": null,\n  \"<park>/parked\": null,\n  \"<quota-park>/<session>\": null,\n  \"<seal-step>\": null,\n  \"<structured-output-count>/<name>\": null,\n  \"agent/capacity/<seat>/cool/<n>\": \"Waiting for a model\",\n  \"agent/opening-instructions\": \"Read the instructions\",\n  \"agent/opening-memory\": \"Loaded context\",\n  \"agent/route-seat\": \"Chose a model\",\n  \"agent/run\": \"Worked a turn\",\n  \"agent/send (stamp)\": null,\n  \"agent/trace/checkpoint\": null,\n  \"apply_patch\": \"An attributed edit in the File and Diff cards\",\n  \"ask\": \"Needs you\",\n  \"bash\": \"Terminal card (agent session). Missing: no terminal today\",\n  \"checks/lint\": \"Linted the change\",\n  \"checks/review\": \"Reviewed the change\",\n  \"checks/security\": \"Reviewed security\",\n  \"checks/wiki\": \"Checked the wiki\",\n  \"coding/AdmitVibe\": \"Opened the change for landing\",\n  \"coding/ApplyNative\": \"Applied the changes\",\n  \"coding/CleanVibeHistory\": \"Tidied the history\",\n  \"coding/CommandCheck\": \"Ran checks\",\n  \"coding/CoordinateRequest\": \"Worked the TODO\",\n  \"coding/CorrectPlan\": \"Fixed review findings\",\n  \"coding/CorrectionRound\": \"Fixed review findings\",\n  \"coding/DescribeFinalAtom\": \"Wrote the commit message\",\n  \"coding/Dispatch\": \"Ran an agent turn\",\n  \"coding/FlowLoad\": \"Validated the flows\",\n  \"coding/ImplementAtom\": \"Implemented one step\",\n  \"coding/ImplementAtoms\": \"Implemented the plan\",\n  \"coding/ImplementPlan\": \"Implemented the plan\",\n  \"coding/JevCheck\": \"Checked rules\",\n  \"coding/LandVibe\": \"Landed the change\",\n  \"coding/ObservePlan\": \"Tracked progress\",\n  \"coding/Poc\": \"Drafted a prototype\",\n  \"coding/PreparePlan\": \"Planned the change\",\n  \"coding/PrepareRequest\": \"Prepared the request\",\n  \"coding/ProposeFinalHistory\": \"Reviewed the history\",\n  \"coding/Prototype\": \"Drafted a prototype\",\n  \"coding/PublishVibeSource\": \"Published the change\",\n  \"coding/ReadNative\": \"Read the changes\",\n  \"coding/RecheckCorrected\": \"Re-checked the fix\",\n  \"coding/RecheckFinalHistory\": \"Re-checked the history\",\n  \"coding/RefreshWiki\": \"Refreshed wiki pages\",\n  \"coding/RepairPass\": \"Repaired the change\",\n  \"coding/ReviewCapturedChange\": \"Reviewed the change\",\n  \"coding/ReviewCapturedWiki\": \"Checked the wiki\",\n  \"coding/ReviewCheck\": \"Reviewed the change\",\n  \"coding/RewriteFinalHistory\": \"Tidied the history\",\n  \"coding/SecurityAudit\": \"Audited security\",\n  \"coding/SecurityReviewCheck\": \"Reviewed security\",\n  \"coding/VerifyVibe\": \"Verified before landing\",\n  \"coding/Wiki\": \"Refreshed the wiki\",\n  \"coding/WikiCheck\": \"Checked the wiki\",\n  \"coding/admit-retained-source\": \"Opened the source\",\n  \"coding/admit-verify-source\": \"Opened the candidate\",\n  \"coding/assess\": \"Assessed the change\",\n  \"coding/audit-security\": \"Audited security\",\n  \"coding/begin-correction\": \"Started a fix round\",\n  \"coding/capture-poc-source\": \"Captured the source\",\n  \"coding/capture-review-check\": \"Captured the change\",\n  \"coding/capture-wiki-check\": \"Captured the wiki\",\n  \"coding/check\": \"Ran checks\",\n  \"coding/check-command\": \"Ran checks\",\n  \"coding/check-jev-rules\": \"Checked rules\",\n  \"coding/configure-planning-wiki\": \"Chose wiki pages\",\n  \"coding/confirm-final-description\": \"Confirmed the commit message\",\n  \"coding/create-stack-base\": \"Created the stack base\",\n  \"coding/create-vibe-landing\": \"Added to the stack\",\n  \"coding/decline-request\": \"Declined the request\",\n  \"coding/dispatch-turn\": \"Worked a turn\",\n  \"coding/draft-plan\": \"Drafted the plan\",\n  \"coding/draft-poc\": \"Drafted a prototype\",\n  \"coding/edit-atom\": \"Edited the files\",\n  \"coding/fast-forward-vibe\": \"Moved the branch forward\",\n  \"coding/fast-gate\": \"Ran quick checks\",\n  \"coding/fence-vibe-source\": \"Pinned the change\",\n  \"coding/finalize-plan\": \"Finalized the plan\",\n  \"coding/find-planning-wiki-review\": \"Found wiki notes\",\n  \"coding/finish-correction\": \"Finished the fix round\",\n  \"coding/finish-final-history\": \"Finished the history\",\n  \"coding/finish-review-check\": \"Collected review findings\",\n  \"coding/finish-wiki-check\": \"Checked the wiki\",\n  \"coding/gather-planning-context\": \"Gathered context\",\n  \"coding/implement-change\": \"Implemented the change\",\n  \"coding/import-dependency-docs\": \"Imported dependency docs\",\n  \"coding/install-dependency-pages\": \"Added dependency pages\",\n  \"coding/load-flows\": \"Validated the flows\",\n  \"coding/materialize-poc\": \"Applied the prototype\",\n  \"coding/merge-request-feedback\": \"Took in your steer\",\n  \"coding/merge-vibe-local-pull\": \"Merged the change\",\n  \"coding/observe-atom\": \"Saved the edit\",\n  \"coding/observe-dispatch\": \"Saved the turn\",\n  \"coding/observe-vibe-append\": \"Added to the stack\",\n  \"coding/observe-vibe-pull-checks\": \"Watched PR checks\",\n  \"coding/open-vibe-local-pull\": \"Opened the pull request\",\n  \"coding/open-vibe-pull\": \"Opened the pull request\",\n  \"coding/prepare-atom\": \"Opened the working copy\",\n  \"coding/prepare-atom-mutation\": \"Prepared to edit\",\n  \"coding/prepare-final-description\": \"Drafted the commit message\",\n  \"coding/prepare-owner-repair\": \"Prepared the repair\",\n  \"coding/prepare-repair-context\": \"Gathered repair context\",\n  \"coding/prepare-return-mythical-tip\": \"Returned to the stack tip\",\n  \"coding/prepare-stack-base\": \"Prepared the stack\",\n  \"coding/prepare-vibe-append\": \"Prepared to add to the stack\",\n  \"coding/prepare-vibe-candidate\": \"Prepared the change\",\n  \"coding/publish-vibe-source\": \"Published the change\",\n  \"coding/queue-vibe-append\": \"Queued for the stack\",\n  \"coding/read-correction-history\": \"Read earlier fixes\",\n  \"coding/read-feedback-cancellation\": \"Read your steer\",\n  \"coding/read-published-wiki\": \"Read the wiki\",\n  \"coding/read-vibe-delivery\": \"Read delivery status\",\n  \"coding/read-vibe-lander\": \"Read landing state\",\n  \"coding/read-vibe-request\": \"Read the request\",\n  \"coding/read-vibe-stack\": \"Read the stack\",\n  \"coding/receive-request-feedback\": \"Waited for your steer\",\n  \"coding/record-fast-gated-progress\": \"Recorded progress\",\n  \"coding/record-learning\": \"Saved a lesson\",\n  \"coding/record-slow-feedback\": \"Recorded feedback\",\n  \"coding/refresh-final-history\": \"Refreshed the history\",\n  \"coding/refresh-planning-wiki\": \"Refreshed wiki pages\",\n  \"coding/refresh-restacked-evidence\": \"Refreshed evidence\",\n  \"coding/refuse-plan-approval\": \"Refused a plan approval\",\n  \"coding/repair-final-history\": \"Corrected the history\",\n  \"coding/retain-poc\": \"Saved the prototype\",\n  \"coding/review-final-history\": \"Reviewed the history\",\n  \"coding/review-lens\": \"Reviewed through one lens\",\n  \"coding/review-poc\": \"Reviewed the prototype\",\n  \"coding/review-request\": \"Reviewed the request\",\n  \"coding/review-security\": \"Reviewed security\",\n  \"coding/run-correction-round\": \"Fixed review findings\",\n  \"coding/select-owner-repair\": \"Chose what to fix\",\n  \"coding/submit-vibe-lane\": \"Queued the change\",\n  \"coding/todo-boundary\": null,\n  \"coding/todo-delivery\": \"Prepared the delivery\",\n  \"coding/todo-pause-requested\": null,\n  \"coding/todo-resume\": null,\n  \"coding/todo-review\": null,\n  \"coding/todo-review-input\": null,\n  \"coding/validate-final-history\": \"Checked the history\",\n  \"coding/validate-plan\": \"Checked the plan\",\n  \"coding/verify-planning-context\": \"Checked the context\",\n  \"coding/verify-vibe-landed\": \"Confirmed it landed\",\n  \"create-flow\": \"Created a flow\",\n  \"create-flow/clarify\": \"Asked what the flow should do\",\n  \"create-flow/design\": \"Designed the flow\",\n  \"create-flow/document\": \"Documented the flow\",\n  \"create-flow/fix\": \"Fixed the flow\",\n  \"create-flow/provision\": \"Set up the flow\",\n  \"create-flow/scaffold\": \"Wrote the flow\",\n  \"edit\": \"An attributed edit in the File and Diff cards\",\n  \"factory/Todo\": \"Routed the TODO\",\n  \"factory/route-todo\": \"Chose how to start\",\n  \"factory/stamp-route\": \"Declined the TODO\",\n  \"glob\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"grep\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"jev\": \"Inspect only: \\\"Decided <question>\\\"\",\n  \"ls\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"memory\": \"The \\\"Context\\\" line and the preflight cell in Inspect\",\n  \"memory/mine\": \"Saved lessons\",\n  \"memory/mine/run\": \"Saved lessons\",\n  \"read\": \"A \\\"read\\\" line in branch activity, opening the File card\",\n  \"recall\": \"The \\\"Context\\\" line and the preflight cell in Inspect\",\n  \"recall (namespaced)\": \"The \\\"Context\\\" line and the preflight cell in Inspect\",\n  \"remember\": \"Learning receipt\",\n  \"review\": \"Reviewed the change\",\n  \"smithers-review/ApplyVerdicts\": \"Settled findings\",\n  \"smithers-review/FinalizeReview\": \"Finished the review\",\n  \"smithers-review/MergeFileBatch\": \"Collected findings\",\n  \"smithers-review/NarrateChanges\": \"Wrote the walkthrough\",\n  \"smithers-review/NarrateReview\": \"Wrote the walkthrough\",\n  \"smithers-review/PrepareReview\": \"Prepared the review\",\n  \"smithers-review/RenderWalkthrough\": \"Rendered the walkthrough\",\n  \"smithers-review/ReviewFile\": \"Reviewed one file\",\n  \"smithers-review/ReviewFiles\": \"Reviewed the files\",\n  \"smithers-review/VerifyFindings\": \"Verified findings\",\n  \"smithers-review/VerifyReview\": \"Verified findings\",\n  \"smithers/IncrementalWiki\": \"Refreshed the wiki\",\n  \"smithers/Wiki\": \"Refreshed the wiki\",\n  \"stack.candidate\": \"Saved the candidate\",\n  \"stack.propose\": \"Proposed the candidate\",\n  \"system/human-task\": \"Waited for your answer\",\n  \"system/sleep\": null,\n  \"system/wait-for\": null,\n  \"test\": \"Terminal card plus checks. Missing: needs SMITHERS_TEST_COMMAND\",\n  \"wait\": \"Waited\",\n  \"wiki/assess-review\": \"Assessed a wiki page\",\n  \"wiki/bind-review-provenance\": \"Linked a review to its source\",\n  \"wiki/check-citations\": \"Checked citations\",\n  \"wiki/collect-page\": \"Collected sources for a page\",\n  \"wiki/load-recorded-reviews\": \"Found earlier reviews\",\n  \"wiki/publish-recorded-reviews\": \"Saved wiki pages\",\n  \"wiki/review-page\": \"Reviewed a wiki page\",\n  \"wiki/select-recorded-review\": \"Reused a review\",\n  \"wiki/validate-review\": \"Checked a wiki page\",\n  \"wiki/write-snapshot\": \"Saved wiki pages\",\n  \"write\": \"An attributed edit in the File and Diff cards\"\n}\n"]}