@stravica-ai/digital-operator-pa 0.1.13 → 0.1.14

package/dist/engineering-pa-cli/src/autonomy/envelope.mjs

@@ -1,301 +1,20 @@
-// envelope.mjs — pure functions for autonomy-envelope frontmatter parsing +
-// rendering. Zero IO. All filesystem side effects live in cli.mjs.
+// envelope.mjs — re-export shim.
 //
-// The envelope is a markdown file with a YAML frontmatter block carrying the
-// machine-readable state. We ship our own minimal YAML reader/writer here
-// (limited to the shape the schema defines) to avoid pulling in a YAML dep
-// for such a narrow surface. Any file whose frontmatter falls outside the
-// documented shape is rejected as invalid.
-
-export const VALID_STATES = ['fullyApproved', 'checkBeforeCommitting', 'needsFullSupervision'];
-
-const STATE_LABELS = {
-  fullyApproved: 'fully approved',
-  checkBeforeCommitting: 'check before committing',
-  needsFullSupervision: 'needs full supervision',
-};
-
-/**
- * Parse an autonomy-envelope markdown file. Returns
- *   { frontmatter, body }
- * where `frontmatter` matches the schema shape and `body` is the markdown
- * after the closing `---`. Throws on malformed input; the error carries an
- * `exitCode` for the CLI to propagate.
- */
-export function parseEnvelope(source) {
-  if (typeof source !== 'string' || source.length === 0) {
-    throwUsage('envelope file is empty');
-  }
-  const lines = source.split(/\r?\n/);
-  if (lines[0].trim() !== '---') {
-    throwParse('envelope must start with YAML frontmatter delimited by ---');
-  }
-  let closeIdx = -1;
-  for (let i = 1; i < lines.length; i++) {
-    if (lines[i].trim() === '---') {
-      closeIdx = i;
-      break;
-    }
-  }
-  if (closeIdx < 0) {
-    throwParse('unterminated YAML frontmatter (missing closing ---)');
-  }
-  const fmLines = lines.slice(1, closeIdx);
-  const bodyLines = lines.slice(closeIdx + 1);
-  const frontmatter = parseFrontmatter(fmLines);
-  return { frontmatter, body: bodyLines.join('\n') };
-}
-
-/**
- * Parse a limited-shape YAML block. Supports:
- *   key: value                      (string)
- *   key:                            (empty list start)
- *     - key: value                  (list item — object)
- *       key: value
- * Numbers, booleans, and nested maps beyond one level are NOT supported —
- * the schema doesn't need them. Values are always treated as strings.
- */
-function parseFrontmatter(lines) {
-  const out = {};
-  let i = 0;
-  while (i < lines.length) {
-    const raw = lines[i];
-    if (raw.trim() === '' || raw.trim().startsWith('#')) { i++; continue; }
-    const match = raw.match(/^([a-zA-Z][a-zA-Z0-9]*):(?:\s*(.*))?$/);
-    if (!match) {
-      throwParse(`could not parse frontmatter line ${i + 1}: ${raw}`);
-    }
-    const key = match[1];
-    const value = (match[2] ?? '').trim();
-    if (value === '') {
-      // Expect either a list (starts with "- " at next non-empty indented
-      // line) or an empty value.
-      const listItems = [];
-      let j = i + 1;
-      while (j < lines.length) {
-        const peek = lines[j];
-        if (peek.trim() === '' || peek.trim().startsWith('#')) { j++; continue; }
-        if (!/^\s+-\s/.test(peek)) break;
-        const item = readListItem(lines, j);
-        listItems.push(item.value);
-        j = item.next;
-      }
-      out[key] = listItems;
-      i = j;
-    } else {
-      out[key] = stripQuotes(value);
-      i++;
-    }
-  }
-  return out;
-}
-
-function readListItem(lines, start) {
-  const first = lines[start];
-  const indentMatch = first.match(/^(\s+)-\s/);
-  if (!indentMatch) {
-    throwParse(`expected list item at line ${start + 1}: ${first}`);
-  }
-  const itemIndent = indentMatch[1] + '  '; // continuation is deeper than "- "
-  const item = {};
-  // The "- key: value" first line is the first key on the item.
-  const firstBody = first.slice(indentMatch[0].length);
-  const firstMatch = firstBody.match(/^([a-zA-Z][a-zA-Z0-9]*):\s*(.*)$/);
-  if (!firstMatch) {
-    throwParse(`could not parse list item at line ${start + 1}: ${first}`);
-  }
-  item[firstMatch[1]] = stripQuotes(firstMatch[2].trim());
-  let j = start + 1;
-  while (j < lines.length) {
-    const peek = lines[j];
-    if (peek.trim() === '' || peek.trim().startsWith('#')) { j++; continue; }
-    // Terminate when indent doesn't extend the item (either new list item
-    // at the same "- " indent, or dedent back to a top-level key).
-    if (peek.startsWith(itemIndent)) {
-      const bodyLine = peek.slice(itemIndent.length);
-      const m = bodyLine.match(/^([a-zA-Z][a-zA-Z0-9]*):\s*(.*)$/);
-      if (!m) {
-        throwParse(`could not parse list item continuation at line ${j + 1}: ${peek}`);
-      }
-      item[m[1]] = stripQuotes(m[2].trim());
-      j++;
-    } else {
-      break;
-    }
-  }
-  return { value: item, next: j };
-}
-
-function stripQuotes(value) {
-  if (value.length >= 2 && value.startsWith('"') && value.endsWith('"')) {
-    return value.slice(1, -1);
-  }
-  if (value.length >= 2 && value.startsWith("'") && value.endsWith("'")) {
-    return value.slice(1, -1);
-  }
-  return value;
-}
-
-/**
- * Render an envelope object (frontmatter shape) back to markdown. Body is
- * regenerated: a current-state table + a history log preserved from prior
- * body sections. This keeps the file readable + deterministic.
- */
-export function renderEnvelope(frontmatter, history = []) {
-  const fm = renderFrontmatter(frontmatter);
-  const body = renderBody(frontmatter, history);
-  return `---\n${fm}---\n\n${body}\n`;
-}
-
-function renderFrontmatter(fm) {
-  const lines = [];
-  lines.push(`agent: ${quoteIfNeeded(fm.agent)}`);
-  lines.push(`owner: ${quoteIfNeeded(fm.owner)}`);
-  lines.push(`updated: ${quoteIfNeeded(fm.updated)}`);
-  lines.push('taskTypes:');
-  const items = fm.taskTypes ?? [];
-  for (const item of items) {
-    lines.push(`  - id: ${quoteIfNeeded(item.id)}`);
-    lines.push(`    label: ${quoteIfNeeded(item.label)}`);
-    lines.push(`    state: ${quoteIfNeeded(item.state)}`);
-    if (item.stateSince) lines.push(`    stateSince: ${quoteIfNeeded(item.stateSince)}`);
-    if (item.operatorNote) lines.push(`    operatorNote: ${quoteIfNeeded(item.operatorNote)}`);
-  }
-  return lines.join('\n') + '\n';
-}
-
-function quoteIfNeeded(value) {
-  if (value == null) return '""';
-  const str = String(value);
-  // Quote values that could be misparsed as YAML control sequences.
-  if (/^[\s"'#\-\[\{,&*!|>%@`]/.test(str)) return JSON.stringify(str);
-  if (/[:#]\s/.test(str)) return JSON.stringify(str);
-  if (str.trim() !== str) return JSON.stringify(str);
-  return str;
-}
-
-function renderBody(fm, history) {
-  const lines = [];
-  lines.push(`# Autonomy envelope — ${fm.agent}`);
-  lines.push('');
-  lines.push('## Current state');
-  lines.push('');
-  if (!fm.taskTypes || fm.taskTypes.length === 0) {
-    lines.push('_No task types configured. Use `pa autonomy set <agent> <task-type> <state>` to add one._');
-  } else {
-    lines.push('| Task type | State | Since | Note |');
-    lines.push('|---|---|---|---|');
-    for (const item of fm.taskTypes) {
-      const since = (item.stateSince ?? '').slice(0, 10);
-      const note = (item.operatorNote ?? '—').replace(/\|/g, '\\|');
-      lines.push(`| ${escapeCell(item.label)} | ${STATE_LABELS[item.state] ?? item.state} | ${since || '—'} | ${note} |`);
-    }
-  }
-  lines.push('');
-  lines.push('## History');
-  lines.push('');
-  const entries = [...history].sort((a, b) => (b.at ?? '').localeCompare(a.at ?? ''));
-  if (entries.length === 0) {
-    lines.push('_No history yet._');
-  } else {
-    for (const entry of entries) {
-      lines.push(`### ${entry.at} — ${entry.taskTypeId} → ${entry.state}`);
-      if (entry.note) {
-        lines.push('');
-        lines.push(`Operator note: ${entry.note}`);
-      }
-      lines.push('');
-    }
-  }
-  return lines.join('\n');
-}
-
-function escapeCell(str) {
-  return String(str).replace(/\|/g, '\\|');
-}
-
-/**
- * Extract history entries from a rendered body. Returns an array of
- *   { at, taskTypeId, state, note }
- * entries. Best-effort — malformed sections are skipped, not raised.
- */
-export function extractHistory(body) {
-  const entries = [];
-  if (typeof body !== 'string') return entries;
-  const lines = body.split(/\r?\n/);
-  let i = 0;
-  while (i < lines.length) {
-    const line = lines[i];
-    const match = line.match(/^###\s+(\S+)\s+—\s+([a-z0-9][a-z0-9-]*)\s+→\s+([A-Za-z]+)\s*$/);
-    if (!match) { i++; continue; }
-    const at = match[1];
-    const taskTypeId = match[2];
-    const state = match[3];
-    let note = null;
-    let j = i + 1;
-    while (j < lines.length && lines[j].trim() === '') j++;
-    if (j < lines.length && lines[j].startsWith('Operator note:')) {
-      note = lines[j].slice('Operator note:'.length).trim();
-    }
-    entries.push({ at, taskTypeId, state, note });
-    i = j + 1;
-  }
-  return entries;
-}
-
-/**
- * Validate a frontmatter object against the schema. Throws on invalid;
- * returns nothing on valid.
- */
-export function validateFrontmatter(fm) {
-  if (!fm || typeof fm !== 'object') throwParse('frontmatter must be an object');
-  requireString(fm, 'agent');
-  requireString(fm, 'owner');
-  requireString(fm, 'updated');
-  if (!Array.isArray(fm.taskTypes)) throwParse('taskTypes must be an array');
-  for (const [i, item] of fm.taskTypes.entries()) {
-    if (!item || typeof item !== 'object') throwParse(`taskTypes[${i}] must be an object`);
-    requireString(item, `taskTypes[${i}].id`, item.id);
-    if (!/^[a-z0-9][a-z0-9-]*$/.test(item.id)) throwParse(`taskTypes[${i}].id '${item.id}' must match ^[a-z0-9][a-z0-9-]*$`);
-    requireString(item, `taskTypes[${i}].label`, item.label);
-    requireString(item, `taskTypes[${i}].state`, item.state);
-    if (!VALID_STATES.includes(item.state)) {
-      throwParse(`taskTypes[${i}].state '${item.state}' must be one of ${VALID_STATES.join(', ')}`);
-    }
-  }
-}
-
-function requireString(obj, field, value) {
-  const v = value ?? obj?.[field];
-  if (typeof v !== 'string' || v.length === 0) {
-    throwParse(`${field} must be a non-empty string`);
-  }
-}
-
-function throwParse(msg) {
-  const err = new Error(msg);
-  err.exitCode = 2;
-  throw err;
-}
-
-function throwUsage(msg) {
-  const err = new Error(msg);
-  err.exitCode = 1;
-  throw err;
-}
-
-export function nowIso() {
-  return new Date().toISOString();
-}
-
-export function emptyEnvelope(agent, owner) {
-  return {
-    frontmatter: {
-      agent,
-      owner,
-      updated: nowIso(),
-      taskTypes: [],
-    },
-    history: [],
-  };
-}
+// The envelope parse/render/seed logic lives in
+// `@stravica-ai/engineering-pa-core/src/autonomy/envelope.mjs` — pure, no
+// CLI coupling, so scaffold can seed a round-trippable stub without an
+// inverted package dependency (scaffold → core, not scaffold → cli).
+//
+// This shim exists so anything that historically imported from
+// `packages/cli/src/autonomy/envelope.mjs` (tests, internal callers)
+// keeps working. New callers should import from core directly.
+
+export {
+  VALID_STATES,
+  parseEnvelope,
+  renderEnvelope,
+  extractHistory,
+  validateFrontmatter,
+  nowIso,
+  emptyEnvelope,
+} from '../../../engineering-pa-core/src/autonomy/envelope.mjs';

package/dist/engineering-pa-cli/src/pa/cli.mjs

@@ -27,6 +27,7 @@ Usage:
   pa research <verb>          Deep-research session store (run | list | show | gates | prune | mark | paths)
   pa autonomy <verb>          Per-agent per-task-type approval state (init | get | set | list)
   pa environment [verb]       Session-boot environment cache (default | refresh | extended)
+  pa agent <verb>             Agent baseline audit (audit | audit refresh)
   pa staging-alias <verb>     Canonical staging.<site> alias for CF Workers sites (set | unset | status | list)
   pa lint <verb>              Lint operator text against voice rules (linkedin)
   pa migrate-inspect [options]  Host inspection for migration planning
@@ -76,6 +77,8 @@ export async function main(argv) {
       return await doAutonomy(rest);
     case 'environment':
       return await doEnvironment(rest);
+    case 'agent':
+      return await doAgent(rest);
     case 'lint':
       return await doLint(rest);
     case 'staging-alias':
@@ -276,6 +279,11 @@ async function doEnvironment(rest) {
   return await run(rest);
 }
 
+async function doAgent(rest) {
+  const { run } = await import('../agent/cli.mjs');
+  return await run(rest);
+}
+
 async function doStagingAlias(rest) {
   const { main } = await import('../staging-alias/cli.mjs');
   return await main(rest);

package/dist/engineering-pa-core/index.mjs

@@ -19,3 +19,16 @@ export { acquireLock, DEFAULT_STALE_AFTER_MS } from './src/lock/lock.mjs';
 // Distill prereqs / prompt — also useful as a library entry point.
 export { resolvePrereqs, defaultRepoRoot as distillDefaultRepoRoot, BUNDLED_LIBRARIAN_DEF } from './src/distill/prereqs.mjs';
 export { buildDistillPrompt, DISTILL_PROMPT, claudeArgs } from './src/distill/prompt.mjs';
+
+// Agent baseline manifest — machine-readable list of capabilities every
+// operator PA must carry. Consumed by `pa agent audit` (drift detection)
+// and by `pa-init` (creation-time coverage check). Docs:
+// packages/core/knowledge/scaffold/README.md.
+export {
+  bundledManifestPath,
+  loadBundledManifest,
+  loadBundledManifestSync,
+  parseManifest,
+  expandTemplate,
+  capabilitySeverity,
+} from './src/agent-baseline/manifest.mjs';

package/dist/engineering-pa-core/knowledge/scaffold/README.md

@@ -0,0 +1,66 @@
+# scaffold — baseline manifest + scaffold seeds
+
+Machine-readable baselines that shape every fresh PA and every audit against a running one.
+
+## `agent-baseline.json`
+
+The list of capabilities every operator PA is expected to carry. Each entry is a mechanical presence-probe: `pa agent audit` (packages/cli/src/agent/) diffs an agent estate against this file and reports gaps.
+
+Two failure classes it covers, in priority order:
+
+1. **Drift** — the platform grows a capability, existing agents never adopt. This is the motivating case. Boot-slice shipped in core 0.1.7, one estate adopted, another never noticed for months. The audit turns adoption into a generated to-do instead of a memory test.
+2. **Creation-time gaps** — a new agent scaffolded by `pa-init` boots missing standard kit. `packages/scaffold/test/manifest-coverage.test.mjs` runs the manifest against the pa-init plan and fails the build if any agents-local capability with a static-path probe is uncovered.
+
+### Version-coupling convention
+
+Every capability entry carries a `sinceVersion` (the `@stravica-ai/engineering-pa-core` release that introduced it) and the manifest as a whole carries a `manifestVersion` integer.
+
+**When a new capability lands:**
+
+1. Add the entry to `agent-baseline.json`.
+2. Bump `manifestVersion` by 1.
+3. Set the entry's `sinceVersion` to the core version the change ships in.
+4. Note the manifest bump in `CHANGELOG.md` under the release (line pattern: `agent-baseline: added <capability-id> at manifestVersion N`).
+
+**When a capability is removed** (rare — retired platform feature): bump `manifestVersion` and note the removal in the changelog. Never rename an `id` — retire and add.
+
+### Probe types (v1)
+
+Each probe carries a `type` and its own required fields (see `agent-baseline.schema.json`):
+
+| Type | Purpose |
+|---|---|
+| `file-exists` | File at `path` exists. `{paName}` token substituted. |
+| `directory-exists` | Directory at `path` exists (must be a dir, not a file). |
+| `knowledge-doc-exists` | Semantic alias for `file-exists` on `operator/knowledge/**/*.md`. Kept as its own type so future extensions (graph presence, non-orphan) can enrich the check. |
+| `staging-recent-write` | Directory exists AND has a non-hidden entry younger than `maxAgeDays`. Fails only if the newest entry is older than the window. Use with `severity: warn` — a quiet week is not a broken agent. |
+| `schedule-defined` | A JSON file under `path` (typically `schedules/`) whose `command` includes ALL of `commandIncludes` and (if given) AT LEAST ONE of `commandIncludesAny`, and is not `enabled: false`. Host-pinned schedules produce `unverified-here` when the audited host doesn't match. Use with `hostDependent: true`. |
+| `json-field-includes` | Open a JSON file at `path`, check that top-level `field` is an array containing `expectedValue` (token-substituted). Optional `requiredTool` gates the probe: absent tool = `unverified-here`. |
+
+### Outcome ladder
+
+| Rendered status | When |
+|---|---|
+| `pass` | Probe matched. |
+| `warn` | Probe failed AND capability has `severity: warn` — informational, never gates `--strict`. |
+| `fail` | Probe failed AND capability has `severity: fail` (default). Gates `--strict`. |
+| `unverified-here` | Mechanically indeterminate on this host — host-pinned capability declared for another host, required tool absent from the estate, probe threw. Never a false pass, never a false fail. |
+
+### Named defaults (ratified with the operator on approval)
+
+- `pa agent audit` exit code default = 0 (informational tool). `--strict` opts into CI-gating exit 2 on any `fail`.
+- `staging-recent-write` window = 7 days, severity `warn` (quiet-week tolerance).
+- Host-dependent probes report `unverified-here`, never `fail`. Precision over noise.
+- Manifest ships in `packages/core/knowledge/scaffold/` (single-bundled via `packages/engineering-pa/build.mjs`), not a separate schema package.
+- Cache path `.session/agent-audit.json`, mirroring `pa environment`'s `.session/environment.json`.
+- `sinceVersion` is the `@stravica-ai/engineering-pa-core` version, not the platform tarball version (manifest lives in core).
+
+### Consumers
+
+- **`pa agent audit`** — session-boot drift detection. Reads the cache; auto-refreshes on stale.
+- **`pa-init`** (via `manifest-coverage.test.mjs`) — creation-time coverage guard. New capabilities that CAN be scaffolded MUST be scaffolded, or the test fails and forces the scaffold plan update at the same time as the manifest bump.
+- **Future: `boot-context`** — the session-boot hook can surface a one-liner (`3/11 capabilities need adoption`) into the injected workState block.
+
+## `domains.json`
+
+The base set of knowledge domains seeded into every fresh PA — unchanged by this pass.

package/dist/engineering-pa-core/knowledge/scaffold/agent-baseline.json

@@ -0,0 +1,132 @@
+{
+  "$schema": "./agent-baseline.schema.json",
+  "schemaVersion": "1.0",
+  "manifestVersion": 1,
+  "description": "Baseline capabilities every operator PA agent is expected to carry. Each entry is a mechanical presence-probe: `pa agent audit` diffs an agent estate against this manifest and reports gaps. New capabilities land here at the same time as the platform release that ships them, so drift becomes a generated to-do instead of a memory test. Version-coupling convention: bump `manifestVersion` whenever a new capability entry lands; set the capability's `sinceVersion` to the @stravica-ai/engineering-pa-core release that introduced it. Host-dependent probes MUST carry `hostDependent:true` so a mismatched host is reported as `unverified-here`, not a false fail.",
+  "capabilities": [
+    {
+      "id": "spawn-log",
+      "label": "Spawn-log JSON present",
+      "sinceVersion": "0.1.0",
+      "rationale": "Every dispatch must leave a trail; the spawn-log is the machine-readable record the librarian sweeps.",
+      "probe": {
+        "type": "file-exists",
+        "path": "agents/{paName}/spawn-log.json"
+      }
+    },
+    {
+      "id": "journal",
+      "label": "Self-improvement journal present",
+      "sinceVersion": "0.1.0",
+      "rationale": "Every PA keeps a journal — the substrate for the librarian's distillation pass.",
+      "probe": {
+        "type": "file-exists",
+        "path": "agents/{paName}/journal.md"
+      }
+    },
+    {
+      "id": "next-session",
+      "label": "Next-session handover file present",
+      "sinceVersion": "0.1.0",
+      "rationale": "Session-boundary continuity — the top of the file is operator-facing.",
+      "probe": {
+        "type": "file-exists",
+        "path": "agents/{paName}/next-session.md"
+      }
+    },
+    {
+      "id": "autonomy-envelope",
+      "label": "Autonomy-envelope file present",
+      "sinceVersion": "0.1.0",
+      "rationale": "Per-task-type approval state — the durable record the PA checks when the reflex is unclear.",
+      "probe": {
+        "type": "file-exists",
+        "path": "agents/{paName}/autonomy-envelope.md"
+      }
+    },
+    {
+      "id": "staging-dir",
+      "label": "Staging directory present",
+      "sinceVersion": "0.1.0",
+      "rationale": "Real-time observation staging — the librarian's inbox. Absent staging dir means the PA has no place to write in-session observations.",
+      "probe": {
+        "type": "directory-exists",
+        "path": "agents/{paName}/staging"
+      }
+    },
+    {
+      "id": "staging-recent-write",
+      "label": "Staging directory has a recent write",
+      "sinceVersion": "0.1.0",
+      "rationale": "Warns (never fails) if the staging dir has been quiet for longer than the tolerated window — a signal that real-time staging discipline has drifted, but tolerant of legitimate quiet weeks.",
+      "severity": "warn",
+      "probe": {
+        "type": "staging-recent-write",
+        "path": "agents/{paName}/staging",
+        "maxAgeDays": 7
+      }
+    },
+    {
+      "id": "session-end-sop-overlay",
+      "label": "Session-boot-and-end SOP overlay present",
+      "sinceVersion": "0.1.0",
+      "rationale": "The estate-side SOP that layers over the core session-end routine — its absence means the PA is running on the core baseline only, with no estate customisation applied.",
+      "probe": {
+        "type": "knowledge-doc-exists",
+        "path": "operator/knowledge/operator-interface/session-boot-and-end.md"
+      }
+    },
+    {
+      "id": "boot-slice-job",
+      "label": "Boot-slice schedule + output file",
+      "sinceVersion": "0.1.7",
+      "rationale": "The lightweight boot slice is what the PA loads on every session boot instead of the full profile. Its regeneration is scheduled on a profile-bearing host; the output file must exist somewhere in the estate.",
+      "hostDependent": true,
+      "probe": {
+        "type": "schedule-defined",
+        "path": "schedules",
+        "commandIncludes": ["slice generate"],
+        "outputPathHints": ["operator/profile/slices/"]
+      }
+    },
+    {
+      "id": "library-sync-up",
+      "label": "Library-sync up-path scheduled",
+      "sinceVersion": "0.1.5",
+      "rationale": "Fresh estate content must reach canonical on every device that authors it; a missing up-path is the mechanism that produced the 2026-07-14 stale-clobber family.",
+      "hostDependent": true,
+      "probe": {
+        "type": "schedule-defined",
+        "path": "schedules",
+        "commandIncludes": ["library-sync"],
+        "commandIncludesAny": ["--up", "library-sync-cycle"]
+      }
+    },
+    {
+      "id": "library-sync-down",
+      "label": "Library-sync down-path scheduled",
+      "sinceVersion": "0.1.5",
+      "rationale": "Every device must materialise the freshest canonical content. On devices that use the cycle orchestrator the down leg is embedded; standalone down-only schedules also satisfy this probe.",
+      "hostDependent": true,
+      "probe": {
+        "type": "schedule-defined",
+        "path": "schedules",
+        "commandIncludes": ["library-sync"],
+        "commandIncludesAny": ["--down", "library-sync-cycle", "library-sync-refresh"]
+      }
+    },
+    {
+      "id": "relay-agent-registration",
+      "label": "Agent id registered in claude-relay config",
+      "sinceVersion": "0.1.0",
+      "rationale": "Cross-agent transport requires the agent id to appear in `operator/extensions/tools/claude-relay/config.json:agents`; absence means no cross-machine relay traffic can address this PA.",
+      "probe": {
+        "type": "json-field-includes",
+        "path": "operator/extensions/tools/claude-relay/config.json",
+        "field": "agents",
+        "expectedValue": "{paName}",
+        "requiredTool": "claude-relay"
+      }
+    }
+  ]
+}