@starci/hfs 4.0.10 → 4.2.0

package/runtime/modules/kernel/failure-codes.yaml

@@ -1337,7 +1337,7 @@ HFS_APP_LAYOUT_INVALID:
 HFS_ARCH_CONFIG_UNREAD:
   title: "The machine reads `hfs.json`; zero files analysed is red"
   title_vi: "Máy kiến trúc không đọc được hfs.json"
-  meaning_vi: "Kiểm tra kiến trúc không đọc được `hfs.json` phân tích 0 tệp, hoặc repo còn một tệp cấu hình mà máy không đọc nữa (`architecture.json`) — đây là đỏ, không phải 'chưa có dữ liệu'."
+  meaning_vi: "Kiểm tra kiến trúc không đọc được `hfs.json` phân tích 0 tệp — đây là đỏ, không phải 'chưa có dữ liệu'."
   causes_vi:
     - "Vi phạm luật R24: Máy kiến trúc tự đọc `hfs.json`; phân tích 0 tệp hay `unavailable` cho một profile đã khai = thất bại."
   nextStep_vi: "Op vừa tạo ra bản này sẽ được chạy lại để sửa theo lời nhắn của bộ kiểm tra; không cần ai can thiệp thêm."
@@ -1642,46 +1642,6 @@ HFS_LITE_SECRET_CUSTODY:
   owner: owner
   kind: check-finding
 
-kernel-caller-stale:
-  title: "Kernel incarnation does not own this mutation"
-  title_vi: "Phiên Kernel không còn sở hữu thao tác"
-  meaning_vi: "Quyền hiện tại đã đổi trước khi ghi dữ liệu hoặc thực hiện tác động."
-  causes_vi:
-    - "Terminal, Dispatch, thế hệ, lượt khởi động hoặc singleton token đã bị thay thế."
-  nextStep_vi: "Giữ nguyên quyền đang tranh chấp; Supervisor kiểm tra phiên hiện tại trước khi thử lại."
-  owner: supervisor
-  kind: verb-refusal
-
-kernel-caller-unknown:
-  title: "Managed caller custody is unavailable"
-  title_vi: "Không xác minh được quyền của caller"
-  meaning_vi: "Lịch sử hoặc binding của caller không đọc được hoặc mâu thuẫn; không suy ra quyền owner."
-  causes_vi:
-    - "Kho ledger hoặc machine không đọc được; binding sai, cũ hoặc thuộc workflow khác."
-  nextStep_vi: "Khôi phục khả năng đọc và xác minh caller thực tế; không dùng biến môi trường để giả quyền."
-  owner: supervisor
-  kind: verb-refusal
-
-kernel-caller-actor:
-  title: "Actor claim contradicts native caller"
-  title_vi: "Actor khai báo mâu thuẫn với caller"
-  meaning_vi: "Giá trị --by không khớp với quyền caller mà owner hiện có xác minh."
-  causes_vi:
-    - "Caller dùng tên Kernel, Op hoặc Supervisor khác với phiên thực tế."
-  nextStep_vi: "Bỏ khai báo giả và dùng đúng caller; chuỗi actor không cấp quyền."
-  owner: supervisor
-  kind: verb-refusal
-
-kernel-read-unverified:
-  title: "Current Kernel READ attestation is incomplete"
-  title_vi: "READ của Kernel hiện tại chưa đầy đủ"
-  meaning_vi: "Manifest READ không chứng minh toàn bộ bytes cần đọc cho phiên Kernel hiện tại."
-  causes_vi:
-    - "File thiếu, hash sai, bytes dirty, descriptor sai hoặc lượt Kernel đã thay đổi."
-  nextStep_vi: "Lấy --plan, đọc đủ từng file và gửi manifest nguyên vẹn với --read-manifest từ Kernel hiện tại."
-  owner: supervisor
-  kind: verb-refusal
-
 HFS_MANAGED_FILE_DRIFT:
   title: "A managed file equals its template render"
   title_vi: "Tệp do .claude quản lý bị lệch"

package/runtime/modules/kernel/removed-vocabulary.yaml

@@ -0,0 +1,268 @@
+# Every spelling the runtime refuses by name, each with what replaced it. engine/removed-vocabulary.mjs reads this file:
+# the config and routing-bias refusals take their names and replacements from it, and the `removed-vocabulary` self-check
+# refuses any of these spellings in text an agent or the owner reads, outside this file, CHANGELOG.md and a block marked
+# `[removed-list]` (CONTRIBUTING.md, "Removing or renaming a spelling").
+# Fields: id; kind (config-key | bias-field | verb | flag | code | vocabulary | file; a file is named by its base name); name (the removed spelling); use (the
+# replacement, worded to finish the sentence "<name> is removed (<use>)"); since (the release that removed it);
+# match (optional regular expression the scan uses instead of the literal name); scan (false when the name is too common
+# a word to scan for).
+kinds: [config-key, bias-field, verb, flag, code, vocabulary, file]
+removed:
+  - id: bias-require
+    kind: bias-field
+    name: require
+    use: 'a requirement is now `only`, which keeps just the named members of the tier chain: write each as "<agent>", "<agent>/<model>" or a {pool, provider, model} selector, e.g. {"only":["claude"]}'
+    since: 1.0.0-alpha.6
+    match: '\brequire\s*:\s*[\[{]|"require"\s*:|\brequire bias\b|\bbias[^\n.]{0,30}`require`'
+  - id: config-models-pools
+    kind: config-key
+    name: models.pools
+    use: 'tiers are ordered member chains in modules/models/tiers.yaml; override one with models.tiers'
+    since: 1.0.0-alpha.6
+  - id: config-models-nonoperation
+    kind: config-key
+    name: models.nonOperation
+    use: 'planner, validator and kernelManager take the frontier tier (modules/models/tiers.yaml seats); remap with models.seats'
+    since: 1.0.0-alpha.6
+  - id: config-models-selection
+    kind: config-key
+    name: models.selection
+    use: 'selection is always quota-aware; there is no key'
+    since: 1.0.0-alpha.6
+  - id: config-allocation-shares
+    kind: config-key
+    name: allocation.shares
+    use: 'the picker balances by models.balance (maxStreak, maxSharePercent); there are no per-provider weights'
+    since: 1.0.0-alpha.6
+    match: 'allocation[. ]shares'
+  - id: config-allocation-windowhours
+    kind: config-key
+    name: allocation.windowHours
+    use: 'balance reads the recent picks of one tier (models.balance); there is no window'
+    since: 1.0.0-alpha.6
+  - id: config-allocation-preferredprovider
+    kind: config-key
+    name: allocation.preferredProvider
+    use: 'an owner preference is a goal routing bias (prefer <agent>)'
+    since: 1.0.0-alpha.6
+    match: 'preferredProvider'
+  - id: config-allocation-policy
+    kind: config-key
+    name: allocation.policy
+    use: 'the picker is the one policy; there is no key'
+    since: 1.0.0-alpha.6
+  - id: config-allocation-mode
+    kind: config-key
+    name: allocation.mode
+    use: 'allocation holds grants only'
+    since: 1.0.0-alpha.6
+  - id: config-kernel-group
+    kind: config-key
+    name: kernel.group
+    use: 'the Kernel takes the high tier; pin with kernel.agent / kernel.model (an `only` bias)'
+    since: 1.0.0-alpha.6
+  - id: config-supervisor-kernel-group
+    kind: config-key
+    name: supervisor.kernel.group
+    use: 'the Supervisor takes the frontier tier; pin with supervisor.kernel.agent / .model (an `only` bias)'
+    since: 1.0.0-alpha.6
+  - id: config-coredebug
+    kind: config-key
+    name: coreDebug
+    use: 'the debug watcher is a /loop of the calling chat, not a seat; the cadence and the worktree alert limit are debugLoop.interval and debugLoop.worktreeLimit'
+    since: 1.0.0-alpha.6
+  - id: config-debug
+    kind: config-key
+    name: debug
+    use: 'the debug watcher is started by the /starci skill in the calling chat; there is no switch (debugLoop.interval sets its cadence)'
+    since: 1.0.0-alpha.6
+    scan: false
+  - id: vocabulary-sol-opus
+    kind: vocabulary
+    name: sol-opus
+    use: 'a pool of two providers is a tier chain of members (modules/models/tiers.yaml)'
+    since: 1.0.0-alpha.6
+  - id: seat-core-debug
+    kind: vocabulary
+    name: core-debug seat
+    use: 'the debug watcher is a /loop of the calling chat running `starci debug digest`'
+    since: 1.0.0-alpha.6
+    match: '\bcore-debug\s+(?:seat|watcher|worker|pass)\b'
+  - id: verb-debug-pass
+    kind: verb
+    name: debug pass
+    use: '`starci debug digest` (read-only) and `starci debug run <probe>`'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])debug pass\b'
+  - id: config-supervisor-landgate-push
+    kind: config-key
+    name: supervisor.landGate.push
+    use: 'a land fast-forwards local main only and never pushes; the remote main of the runtime moves once per release, through starci release cut'
+    since: 1.0.0-alpha.7
+    match: 'landGate\.push\b'
+  - id: flag-land-no-push
+    kind: flag
+    name: --no-push
+    use: 'a land never pushes, so there is nothing to leave unpushed'
+    since: 1.0.0-alpha.7
+  - id: code-landed-push-owed
+    kind: code
+    name: landed-push-owed
+    use: 'a land has no push step; the outcome is landed'
+    since: 1.0.0-alpha.7
+  - id: flag-caller-agent
+    kind: flag
+    name: --caller-agent
+    use: 'the debug digest runs in the calling chat; it takes no caller flag'
+    since: 1.0.0-alpha.6
+  - id: flag-caller-model
+    kind: flag
+    name: --caller-model
+    use: 'the debug digest runs in the calling chat; it takes no caller flag'
+    since: 1.0.0-alpha.6
+  - id: flag-caller-effort
+    kind: flag
+    name: --caller-effort
+    use: 'the debug digest runs in the calling chat; it takes no caller flag'
+    since: 1.0.0-alpha.6
+  - id: code-workflow-debug-not-ready
+    kind: code
+    name: workflow-debug-not-ready
+    use: 'there is no debug seat to be ready; the digest reads the ledger directly'
+    since: 1.0.0-alpha.6
+  - id: file-core-debug
+    kind: file
+    name: core-debug.mjs
+    use: 'the debug watcher is a /loop of the calling chat running `starci debug digest`; the core-watch probe is scripts/reconciler/core-watch.mjs'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])core-debug\.mjs\b'
+  - id: file-debug-pass
+    kind: file
+    name: debug-pass.mjs
+    use: '`starci debug digest` (read-only)'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])debug-pass\.mjs\b'
+  - id: file-caller-context
+    kind: file
+    name: caller-context.mjs
+    use: 'there is no declared caller context; the debug digest runs in the calling chat'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])caller-context\b'
+  - id: file-host-maintenance
+    kind: file
+    name: host-maintenance.md
+    use: 'skills/starci/references/host-startup.md'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])host-maintenance\b'
+  - id: config-drawloop-critic
+    kind: config-key
+    name: allocation.drawLoop.critic
+    use: 'the Critic is picked from its tier (modules/models/tiers.yaml seats.critic, modules/kernel/critic.yaml) with provider independence as a hard filter; its wall bound is allocation.drawLoop.criticTimeoutMs'
+    since: 1.0.0-alpha.9
+    match: 'allocation\.drawLoop\.critic(?![A-Za-z])'
+  - id: config-drawloop-criticwhendrawer
+    kind: config-key
+    name: allocation.drawLoop.criticWhenDrawer
+    use: 'the Critic tier holds a member of every provider and the picker removes the provider of the maker; there is no per-drawer table'
+    since: 1.0.0-alpha.9
+    match: 'criticWhenDrawer'
+  - id: registry-critic-coverage-define-architecture
+    kind: vocabulary
+    name: critic-coverage-define-architecture
+    use: 'the edge-case registry entry is critic-coverage-decision-legs'
+    since: 1.0.0-alpha.9
+  - id: supervisor-grammar-release
+    kind: vocabulary
+    name: grammarRelease
+    use: 'the owner publishes @starci/grammar through starci release publish; the Supervisor changes no runtime code'
+    since: 1.0.0-alpha.9
+  - id: supervise-yaml-worker-land-blocks
+    kind: vocabulary
+    name: supervise.yaml workers
+    use: 'the Supervisor spawns no fix workers and lands nothing: it answers its menu (starci supervisor status) and records runtime defects for Debug'
+    since: 1.0.0-alpha.9
+    match: 'supervise\.yaml\s+(?:workers|landGate)\b|supervise\.yaml\s+kernelSeat/workers'
+  - id: supervisor-fixes-through-lanes
+    kind: vocabulary
+    name: the Supervisor fixes through lanes
+    use: 'the Supervisor records a runtime defect (starci supervisor actions record --item runtime-defect:<cause>) and Debug changes .claude'
+    since: 1.0.0-alpha.9
+    match: 'Supervisor[^\n.]{0,60}\bfix(?:es)?\s+through\s+(?:its\s+own\s+)?(?:staged\s+)?lanes?\b'
+  - id: kernel-ranked-actions
+    kind: vocabulary
+    name: ranked actions
+    use: "the Kernel's menu: the Decide section of starci kernel status, answered with starci kernel decide"
+    since: 1.0.0-alpha.9
+    match: '[Ww]ork the ranked actions|[Ff]irst rca\.actions entry'
+  - id: kernel-run-next-actions
+    kind: vocabulary
+    name: run nextActions
+    use: "the Kernel answers the items of its menu; the runtime performs the mechanical next actions"
+    since: 1.0.0-alpha.9
+    match: 'run nextActions|run each\s+in order and never choose'
+  - id: event-op-reported
+    kind: vocabulary
+    name: op-reported
+    use: 'the event a filed report records is report-filed; no event named op-reported was ever emitted'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])op-reported(?![\w-])'
+  - id: file-sonar-secrets-keys
+    kind: file
+    name: KEYS.md
+    use: 'secret.env.example lists the names of the host secrets; ext/sonar/README.md describes the stack'
+    since: 1.0.0-alpha.7
+    match: '(?<![\w/.-])secrets/KEYS\.md'
+  - id: vocab-example-sonar-token-member
+    kind: vocabulary
+    name: per-example Sonar token custody
+    use: 'the examples are analysed on SonarCloud with the SONAR_TOKEN of the runtime secret.env (runtimeSecrets in their services.sonar declaration)'
+    since: 1.0.0-alpha.7
+    match: 'sonarqube-(?:lite-app|shape-slot|starci-ecommerce-app)-token'
+  - id: vocab-menu-kinds-moved-to-controllers
+    kind: vocabulary
+    name: the menu kinds of the origins the controllers now move
+    use: 'the Job controller enqueues a red node, a stale proof or attempt, the asset leg and the credential ask itself (scripts/kernel/next-moves.mjs); the Kernel menu keeps leg-ready, draw-redraw, seam-duty and move-unbuilt'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:node-rework|stale-redispatch|enqueue-asset-leg|enqueue-credential-ask|rework-node)(?![\w-])'
+  - id: vocab-sonar-stack-sealed-members
+    kind: vocabulary
+    name: ext/sonar secrets custody
+    use: 'the stack secrets are the secret.env variables SONARQUBE_DB_PASSWORD, SONARQUBE_ADMIN_PASSWORD, SONARQUBE_ADMIN_TOKEN and CLOUDFLARE_TUNNEL_TOKEN, passed by starci gate sonar up; ext/sonar tracks no sealed member'
+    since: 1.0.0-alpha.9
+    match: 'ext/sonar/secrets/(?:sonarqube-(?:db|admin|analysis)-(?:password|token)|cloudflare-starci-local-services-tunnel-token)'
+  - id: vocab-ecommerce-sealed-demo-secrets
+    kind: vocabulary
+    name: ecommerce sealed demo secrets
+    use: 'the ecommerce example carries demo-only defaults in its compose files and declares no sealed secret (secrets: [])'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:keycloak|minio)-env(?:\.enc)?(?![\w-])'
+  - id: vocab-handover-step-mechanical-pending
+    kind: vocabulary
+    name: the handover-step menu mode mechanical-pending and its choice rerun-handover-review
+    use: 'the Job controller enqueues handover.review itself when the handover is due or its ask was answered approve or question (next action handover-review, scripts/kernel/handover-move.mjs); the handover-step item holds only the typed routing of a reported defect'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:mechanical-pending|rerun-handover-review)(?![\w-])'
+  - id: vocab-card-delivery-bound
+    kind: vocabulary
+    name: the agent card delivery keys maxInlineChars, fileName and fileDirectory
+    use: 'one bound, one directory and one cleanup serve every card: allocation.promptFile in modules/models/runtimes.yaml (scripts/agent/prompt-file.mjs); a card keeps delivery.mode and delivery.prompt'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:maxInlineChars|fileDirectory)(?![\w-])'
+  - id: vocab-backoff-factor-keys
+    kind: vocabulary
+    name: the growth factor of allocation.dispatchRefusal and of the backoff of modules/reconciler/host.yaml
+    use: 'every backoff is the one retry budget (scripts/lib/retry-budget.mjs), which doubles its interval up to a cap: declare baseMs/capMs or minMs/maxMs only'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:dispatchRefusal|backoff):\s*\{[^}\n]*\bfactor\b'
+  - id: vocab-wake-terminal-bound
+    kind: vocabulary
+    name: the independent wake character bound
+    use: 'allocation.promptFile.maxChars is the terminal bound owned by scripts/agent/prompt-file.mjs'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:allocation\.)?wake\.maxChars|\bwake:\s*\{\s*maxChars\b'
+  - id: vocab-draft-probe-mutations
+    kind: vocabulary
+    name: draft probe mutation fields
+    use: 'probeDraft reads only and returns verdict, draft and sends; a foreign draft receives no keys'
+    since: 1.0.0-alpha.9
+    match: '\b(?:draftProbe|probeDraft)\.(?:restore|restored|removed|after)\b'