@sylad/cadence 1.26.0 → 1.28.0

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
     {
       "name": "cadence",
       "description": "Session start and close rituals driven by a versioned plan (raf), and deliveries proven by their effect. Needs the cadence CLI (npm i -g @sylad/cadence).",
-      "version": "1.26.0",
+      "version": "1.28.0",
       "source": "./",
       "author": {
         "name": "Sylvain Ladoire"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "cadence",
   "description": "A repo-native working method: session start and close rituals driven by a versioned plan (raf), deliveries proven by their effect, and three reviewer agents (UX, code, QA).",
-  "version": "1.26.0",
+  "version": "1.28.0",
   "author": { "name": "Sylvain Ladoire" },
   "homepage": "https://github.com/Sylad/cadence",
   "repository": "https://github.com/Sylad/cadence",

package/agents/doc-keeper.md

@@ -17,3 +17,20 @@ Follow the brief you are given. The method:
 5. **A document outside the repository** is yours only when the configuration says so: the brief then lists the entries of `docs.articles` (the cadence.yaml of the project: « this project is also described by this file of that repository », with the absolute path of the repository, open to you for reading). Never guess such a file, never go looking for one. Do not edit it, and never write to the plan of that repository (no `raf add`, no edit of its plan file): write a proposed lot instead — a title and a body that name the repository, the file, the passage and the sentence to change — and put it in the `resume` of your report, starting with « lot proposé ». The lead decides whether it enters that repository's plan.
 
 Never push, deliver, or run `raf done|start|note|review|ux`. Never run `git checkout` or `git switch` to another commit or branch in this repository. Do not launch subagents. Do not stop to ask: an interpretation you settle yourself goes under "choix" with the alternative you did not take. A document you could not check against the code goes under "nonVerifie". Give the report in the structured output the brief asks for.
+
+## Short reply
+
+Only when the brief carries a line `Report file: <absolute path>` (the lead, which keeps its context
+small by reading a report only when it needs to). That line is the only trigger; an orchestrated
+session and a call by hand without it have none.
+
+- The full report, with its measurements, is written to that file with Bash. Use the path the brief gives
+  and no other: it is outside the repository, so the working tree stays as you found it. The
+  verdict is the last line of the file. Write the file before you reply.
+- Reply to the caller with 15 lines at most, and nothing before or after them:
+  `Verdict: <the one-line verdict>`; `Findings:` one line per finding, most severe first, with its rank and the rule or the
+  measure it rests on (e.g. `README.md:12 — still says the old flag, `git show <sha>` line 40`); `Not verified: <what could not be run or seen>`
+  (`Not verified: none` when nothing); `Sub-tasks: <n> — <the lines to add to the plan, by their first words>`; `Report: <the path>`. A « lot proposé » for a document outside the repository goes in `Sub-tasks:` (title first), its body in the file.
+- If you cannot write the file, say so on the first line of the reply and give the whole report in the reply, as if
+  the brief had no report file: a verdict whose evidence nobody can read is lost.
+- With no `Report file:` line in the brief, give the complete report in your reply.

package/agents/spec-writer.md

@@ -10,6 +10,7 @@ Follow the brief you are given. The method:
 
 1. **Read the charter first.** The project's CLAUDE.md, its CSS and variables, the neighbouring components and pages, `docs/qa/expectations.md`, the routes and API contracts already present. The mockup must look like the product: reuse what exists, invent nothing when an equivalent exists.
 2. **List the states before drawing**: empty, loading, error, and loaded when there is data. Each is an addressable section `#etat-<état>` of one static `maquette.html` (HTML + CSS, no business JavaScript). Each field of the sheet carries `data-testid="<field id>"`.
+   **Write the texts before drawing and render them in the mockup**, with the structure the reviewer will check: an error message says what, why, how to fix; an empty or loading state says what it is, why it is empty, how to start; an action label is a verb that names the result, never “OK” or “Validate” alone; the confirmation of a destructive action names the object and the consequence and its buttons are named by the action; one word per notion, in the sheet and in the mockup. Draw one primary element per state, one visible label per field, and take every colour, size and spacing from the product’s CSS variables (a product with no CSS variables has none to take: follow its existing values). A word or a message already in the product is kept as it is (reuse what exists).
 3. **Render and look.** Capture each state at **1440 px** and **390 px** wide with the browser tool (Playwright), named `maquette-<état>-<largeur>.png`, with the absolute capture-directory path your brief gives in front of the name (a bare name lands in the repository), and look at every capture before keeping it: a mockup you did not look at is not checked. Copy the kept captures into the spec folder.
    Before keeping a state, check its sample data: compute the weekday of every date shown (`date -d`), never write it from memory.
 4. **Write the sheet** in the format of the template of the brief, and run `cadence spec check` on it until it passes. Every rule is `sourcee` (say where it comes from) or `hypothese` (say what would change if it were wrong, in `si_faux`). Never dress a guess as a source.

package/agents/ux-reviewer.md

@@ -24,7 +24,36 @@ On top of the usability and accessibility checks, check the **consistency mockup
 - every state of `etats` has its section `#etat-<état>`; the `masque` of an empty-state rule really hides the fields it names;
 - the units, formats and wording the sheet declares are those shown.
 
-**Sweep everything in the first review**, and render it as a checklist in the text of your report (one line per item, ticked or not): every state of the sheet at 1440 px and at 390 px; every rule of the sheet; contrast (WCAG 2.2 AA, measured); the real envelope of the app (usable width, side bar, header — measured in the neighbouring pages, not assumed); gutters; empty or stretched panels; holes in the layout. What you cannot verify (a state you cannot capture, an ambiguous rule) goes in `nonVerifie`, not ticked. Report ALL the blocking and major findings in the first report: the mockup is reviewed up to `orchestrate.maquetteReviews` times (3 by default), but a later review that finds a major on a point nobody changed counts as a review defect in the wave journal. From the second review on, check the points of the previous one first, run the sweep again, and set `inchange: true` on each blocking or major finding about a point the spec writer did not change and the previous review had not raised (leave the field out otherwise).
+**Criteria added in mockup mode** — in this mode only (conformity mode and the review of an existing screen keep their text). Each one carries its named rule or the value to count; the checks of the method below (contrast, targets, keyboard, focus, alternatives, colour, reflow, data display) are already written there and are not repeated here.
+
+**Family: visual hierarchy**
+
+- one primary element per state: count the primary actions of each state, more than one is a finding (Nielsen 8);
+
+**Family: consistency with the product tokens**
+
+- colour, size and spacing values of `maquette.html` that do not come from the product’s CSS variables: report the count as one finding, not one per value (Nielsen 4); a product with no CSS variables gets no finding, write it in `nonVerifie`;
+
+**Family: quality of the texts**
+
+- an error message says what, why, how to fix (Nielsen 9);
+- an empty or loading state says what it is, why it is empty, how to start (Nielsen 1);
+- an action label is a verb that names the result, never “OK” or “Validate” alone (Nielsen 2 and 4);
+- the confirmation of a destructive action names the object and the consequence, and its buttons are named by the action (Nielsen 5);
+- one word per notion: count of distinct labels used for one notion across the states and the sheet (Nielsen 4);
+
+**Family: complementary accessibility**
+
+- focus order follows the reading order (WCAG 2.4.3);
+- name, role, value and a visible label for every field (WCAG 4.1.2, 3.3.2, 1.3.1);
+- an error is identified by text, not by colour or an icon alone (WCAG 3.3.1);
+- text enlarged to 200 % loses no content or function (WCAG 1.4.4);
+
+What a static mockup cannot show, such as what a real screen reader announces, goes in `nonVerifie`, not ticked, and is never replaced by a finding.
+
+Severity keeps the scale below: an accessibility (WCAG) gap is blocking or major as before; a text, hierarchy or token defect is major only if it misleads or slows the task (an error message without the fix, two primary actions, an off-token value that changes the identity), otherwise minor.
+
+**Sweep everything in the first review**, and render it as a checklist in the text of your report (one line per item, ticked or not): every state of the sheet at 1440 px and at 390 px; one line per family of the added criteria, per state at 1440 px and 390 px; every rule of the sheet; contrast (WCAG 2.2 AA, measured); the real envelope of the app (usable width, side bar, header — measured in the neighbouring pages, not assumed); gutters; empty or stretched panels; holes in the layout. What you cannot verify (a state you cannot capture, an ambiguous rule) goes in `nonVerifie`, not ticked. Report ALL the blocking and major findings in the first report: the mockup is reviewed up to `orchestrate.maquetteReviews` times (3 by default), but a later review that finds a major on a point nobody changed counts as a review defect in the wave journal. From the second review on, check the points of the previous one first, run the sweep again, and set `inchange: true` on each blocking or major finding about a point the spec writer did not change and the previous review had not raised (leave the field out otherwise).
 
 Check the **sample data** too: recompute the weekday of every date shown (a command such as `date -d`), do not trust the one written. A wrong sample datum (weekday, date, figure that does not add up) is **minor**, never major: it changes no field, rule or state of the sheet, so it does not send the mockup back to the spec writer.
 
@@ -69,3 +98,21 @@ A short report:
 - Judge on taste, or propose a new visual identity.
 - Report a finding you have not seen in a capture or measured.
 - Edit code, commit, or record `raf ux` yourself: the session that owns the lot does it.
+
+## Short reply
+
+Only when the brief carries a line `Report file: <absolute path>` (the lead, which keeps its context
+small by reading a report only when it needs to). That line is the only trigger; an orchestrated
+session and a call by hand without it have none.
+
+- The full report, with its measurements, is written to that file with Bash. Use the path the brief gives
+  and no other: it is outside the repository, so the working tree stays as you found it. The
+  verdict is the last line of the file. Write the file before you reply.
+- Reply to the caller with 15 lines at most, and nothing before or after them:
+  `Verdict: <the one-line verdict>`; `Findings:` one line per finding, most severe first, with its rank and the rule or the
+  measure it rests on (e.g. `major — /players: target 18×18 px, WCAG 2.5.8`); `Not verified: <what could not be run or seen>`
+  (`Not verified: none` when nothing); `Sub-tasks: <n> — <the lines to add to the plan, by their first words>`; `Report: <the path>`.
+  Add a last line `Captures: <the absolute path of the capture folder>` (the folder the brief names): the report file does not replace the captures, which the lead opens itself.
+- If you cannot write the file, say so on the first line of the reply and give the whole report in the reply, as if
+  the brief had no report file: a verdict whose evidence nobody can read is lost.
+- With no `Report file:` line in the brief, give the complete report in your reply.

package/dist/cli.js

@@ -22,14 +22,15 @@ import { dueLine, isRecurring, recurringByDue } from './recurring.js';
 import { schedule } from './schedule.js';
 import { AGENTS_DIR, installAgents, installSkills, SKILLS_DIR } from './skills.js';
 import { configSet } from './config-set.js';
-import { findProjects, readDepth, leadTour, readLeadUx, tourFreeLine, tourLine, tourNoTestLines, tourWorktreeLines } from './lead.js';
+import { movePriority } from './priority.js';
+import { findProjects, readDepth, leadTour, TITLE_MAX, truncate, readLeadUx, tourFreeLine, readLeadContextThreshold, tourLine, tourNoTestLines, tourWorktreeLines } from './lead.js';
 import { configuredCap, expiredHoldLines, slotsLine, orchestrate, realOrchestrateDeps } from './orchestrate/command.js';
 import { addHold, releaseHold } from './orchestrate/registry.js';
 import { activeLock, REPO_LOCK } from './orchestrate/lock.js';
 import { INTEGRATION_LOCK } from './orchestrate/integrate.js';
 import { cadenceHome, liveWaves, openLotsIn, openWavesIn, waveLotsIn } from './orchestrate/registry.js';
 import { blockingLots, LABEL, resumeCommand } from './orchestrate/table.js';
-import { classifyAll, measure, ollamaClassifier, readCache, readJournals, readRuns, renderReport, sampleKeys, serializeCache } from './corrections.js';
+import { bugCodeOf, bugCodePasses, classifyAll, classifySous, measure, ollamaClassifier, ollamaSousClassifier, readCache, readJournals, readRuns, readSousCache, renderReport, sampleKeys, serializeCache, serializeSousCache } from './corrections.js';
 import { computePerf, perfHeader, perfWindows, readPlans, readProjectDeliveries, readProjectFailedEntries, renderPerf } from './perf.js';
 import { findAcceptation, parseAcceptation, redAcceptations, resealAcceptation, resealForGreen, runAcceptation, setVert } from './orchestrate/accept.js';
 import { refCommand } from './ref/command.js';
@@ -53,6 +54,7 @@ const HELP = `raf — plan « reste à faire » versionné dans le dépôt, reli
   raf start <id>        raf done <id> [--force]        raf drop <id> [--reason texte]
   raf todo <id> [--reason texte]   remet en attente un lot démarré sans commit de travail (doing → todo, started retiré, note datée) ; refusé s'il a des commits ; rouvre un lot done ou dropped (→ todo, finished retiré, note « rouvert ») — la seule façon de rouvrir, archivé compris (il revient dans le fichier du plan)
   raf note <id> "texte"
+  --verbose             avec done, ux, review, note, move ou public : imprime la ligne « id  état  titre entier » du lot touché ; avec hook post-commit : le titre entier (sinon 60 caractères au plus)
   raf title <id> "nouveau titre"   remplace le titre d'un lot, de tout statut (done compris), et note l'ancien dans une note datée
   raf did <id> ["texte"]   un lot récurrent (--every) a été refait : le « dû depuis N j » repart de aujourd'hui
   raf ux enable         revue UX obligatoire avant « done » pour les lots --visible
@@ -74,8 +76,9 @@ const HELP = `raf — plan « reste à faire » versionné dans le dépôt, reli
   cadence orchestrate <projet>:<lot>[@modèle]… [--budget 2M] [--goal "…"] [--dry-run] [--wave nom] [--continue [--until HH:MM] [--priority a,b]]   une session claude neuve par étape ; --status [vague] [--watch [--interval s]] ; --resume [vague | --wave vague] [--budget 1M] [--budget projet:lot=+300k] [--answer projet:lot "réponse"] [--drop projet:lot] ; --drop projet:lot [--wave vague] ; --stop-after-current [--wave vague] ; --waits [--since AAAA-MM-JJ]
                         mode worktree par lot (orchestrate.worktrees: true)  (activé par défaut dans cadence, désactivé ailleurs tant que la clé est absente) ; ses options : --resume --wave <vague> --integrate projet:lot (rejoue un lot rendu à l'intégration) · --resume --wave <vague> --replay projet:lot (idem, et après une écriture de plan refusée) · --remove-worktree projet:lot [--abandon-commits] (retire le worktree et la branche conservés) ; la liste des worktrees conservés : orchestrate --status et lead tour
   cadence lead tour [dossier] [--idle 3] [--depth n] [--json]   le tableau du lead, sans modèle : une ligne par sous-dossier qui a un plan, ou la ligne du dossier seul s'il est lui-même un projet (en cours, dérive, notes de clôture, prochain lot prêt, dépôt), précédées de l'en-tête perf : une ligne par ⚠ de cadence perf, rien si tout est stable
+  cadence lead priority <projet> --before|--after <projet> [dossier] [--depth n]   range un projet dans la liste priority: du cadence.yaml du dossier (ordre du tour, de orchestrate --continue et du panneau des lots), commentaires gardés ; ne commite pas
   cadence lead hold <étiquette> [--ttl minutes] | lead release <étiquette>   déclare (60 min par défaut), puis rend, une session lancée à la main par le lead : elle est soustraite des créneaux libres de orchestrate --status et de lead tour ; au TTL échu, les deux la signalent en ⚠ jusqu'au release
-  cadence corrections [dossier] [--classify [--model m]] [--cache fichier] [--sample n] [--until date] [--since date] [--json]   mesure des passes de correction des journaux dossier/.cadence/runs : lots à ≥1 et ≥2 corrections, par projet, visibles ou non, passes par cause (classées par Ollama avec --classify, hors quota)
+  cadence corrections [dossier] [--classify [--model m]] [--cache fichier] [--cache-sous-causes fichier] [--sample n] [--until date] [--since date] [--json]   mesure des passes de correction des journaux dossier/.cadence/runs : lots à ≥1 et ≥2 corrections, par projet, visibles ou non, passes par cause (classées par Ollama avec --classify, hors quota)
   cadence perf [dossier] [--since date] [--json]   tableau de bord du workflow, sans modèle : deux fenêtres (7 derniers jours contre les 7 précédents) lues dans dossier/.cadence/runs et les plans, chaque vitesse à côté de sa qualité, ⚠ au-delà de 25 % de dégradation ; tokens par lot selon l'estimate, part de la revue, délais création → done → livraison, durée de mur par étape, coût en euros par lot livré (grille cadence.yaml perf.prices) ; --since est un jour qui tronque les fenêtres
   cadence ref add <document.pdf> [--sections 3-5,9] [--slug nom]   enregistre un document de référence hors du dépôt (references.dir de cadence.yaml, sinon $XDG_DATA_HOME/cadence/references) : pages rendues à 200 dpi, texte positionné, images incluses, index des figures et des passages qui les citent ; exige poppler, ImageMagick et tesseract (outil absent nommé avec sa commande, code 2)
   cadence ref analyse <document.pdf> [--sections 3-5,9] [--slug nom] [--model sonnet|opus|haiku] [--model-b sonnet|opus|haiku] [--seuil 30] [--double]   la chaîne : add, puis UNE lecture (une session de l'agent reference-analyst, lectures/a.json, le programme relit le fichier : ref check, document et genre) ; --double : deux lectures indépendantes (A sur --model, B sur --model-b, lectures/a.json et b.json), ref diff, le troisième regard (agent reference-verifier : confirme ou écarte ce qu'une seule lecture porte, d'après une découpe) et l'inventaire réconcilié (inventaire.json, usage.tokens = les trois sessions) — option dont la mesure n'a pas montré de gain (docs/mesures/ref-double-lecture-2026-10-25.md) ; --model-b et --seuil n'ont de sens qu'avec --double ; plafond déclaré : 20 pages par lecture ; code 1 lecture refusée ou (--double) trop d'éléments non appariés (--seuil, 30 %), 2 refus (plafond, modèle, session en échec), 3 quota
@@ -197,9 +200,11 @@ function dispatch(argv, io) {
             ignored: { type: 'boolean' },
             notes: { type: 'boolean' },
             json: { type: 'boolean' },
+            verbose: { type: 'boolean' },
             classify: { type: 'boolean' },
             model: { type: 'string' },
             cache: { type: 'string' },
+            'cache-sous-causes': { type: 'string' },
             sample: { type: 'string' },
             sections: { type: 'string' },
             slug: { type: 'string' },
@@ -229,10 +234,12 @@ function dispatch(argv, io) {
     if (command === 'lead') {
         if (rest[0] === 'hold' || rest[0] === 'release')
             return leadHold(rest, values.ttl, io, today);
+        if (rest[0] === 'priority')
+            return leadPriority(rest, values.before, values.after, values.depth, io);
         if (values.ttl !== undefined)
             throw new RafError('--ttl ne va qu\'avec lead hold');
         if (rest[0] !== 'tour' || rest.length > 2)
-            throw new RafError('usage : cadence lead tour [dossier] [--idle 3] [--depth n] [--json] | lead hold <étiquette> [--ttl minutes] | lead release <étiquette>');
+            throw new RafError('usage : cadence lead tour [dossier] [--idle 3] [--depth n] [--json] | lead priority <projet> --before|--after <projet> [dossier] | lead hold <étiquette> [--ttl minutes] | lead release <étiquette>');
         const idle = values.idle === undefined ? undefined : Number(values.idle);
         if (idle !== undefined && !(Number.isInteger(idle) && idle >= 0))
             throw new RafError(`--idle invalide : ${values.idle}`);
@@ -459,6 +466,7 @@ function dispatch(argv, io) {
             io.out(`${rest[0]} → ${status}`);
             if (status === 'done')
                 warnIntegrating(root, io.err);
+            touchedLot(plan, rest[0], values.verbose, io);
             if (status === 'done' && !rest[0].includes('/')) {
                 const lot = plan.lot(rest[0]);
                 if (lot.visible && !loadEntries(newsDir).some((e) => e.lots.includes(lot.id))) {
@@ -514,6 +522,7 @@ function dispatch(argv, io) {
             plan.note(rest[0], rest.slice(1).join(' '), today);
             plan.save();
             warnIntegrating(root, io.err);
+            touchedLot(plan, rest[0], values.verbose, io);
             return 0;
         }
         case 'did': {
@@ -550,6 +559,7 @@ function dispatch(argv, io) {
             if (holding)
                 throw new RafError(`move : orchestration en cours (vague ${holding.wave}, pid ${holding.pid}) — attendre que les lots de ce dépôt soient finis (le verrou tombe dès que tous sont prêts ou rendus), puis relancer`);
             plan.save();
+            touchedLot(plan, rest[0], values.verbose, io);
             return 0;
         }
         case 'public': {
@@ -561,6 +571,7 @@ function dispatch(argv, io) {
                 refuseLongTitle(rest.slice(1).join(' '));
             plan.setPublic(rest[0], values.clear ? null : rest.slice(1).join(' '));
             plan.save();
+            touchedLot(plan, rest[0], values.verbose, io);
             return 0;
         }
         case 'screen': {
@@ -599,7 +610,7 @@ function dispatch(argv, io) {
         }
         case 'ux':
         case 'review':
-            return gate(command, rest, loadPlan, root, today, io);
+            return gate(command, rest, loadPlan, root, today, io, !!values.verbose);
         case 'commits': {
             need(1, 'commits <lot>');
             const plan = loadPlan();
@@ -748,7 +759,7 @@ function dispatch(argv, io) {
                 return 0;
             }
             if (rest[0] === 'post-commit')
-                return postCommit(existsSync(planPath) ? loadPlan : null, newsDir, root, today, io, readHookConfig(configPath).autostart);
+                return postCommit(existsSync(planPath) ? loadPlan : null, newsDir, root, today, io, readHookConfig(configPath).autostart, !!values.verbose);
             if (rest[0] === 'pre-commit')
                 return preCommit(existsSync(planPath) ? loadPlan : null, readHookConfig(configPath).autostart, root, today, io);
             if (rest[0] === 'pre-push')
@@ -853,7 +864,7 @@ const GATES = {
     review: { on: 'revue de code obligatoire pour les lots à commits', already: 'revue de code déjà active' },
 };
 /** « raf ux … » et « raf review … » ont la même forme : activer la porte, ou noter le verdict d'un lot. */
-function gate(kind, rest, loadPlan, root, today, io) {
+function gate(kind, rest, loadPlan, root, today, io, verbose) {
     if (rest.length < 1)
         throw new RafError(`usage : raf ${kind} enable | ${kind} <lot> "verdict"`);
     const plan = loadPlan();
@@ -878,8 +889,19 @@ function gate(kind, rest, loadPlan, root, today, io) {
         plan.recordReview(rest[0], verdict, today, plan.readonly ? null : (lotWork(plan, root, rest[0])[0]?.sha ?? null), neighbours?.repos.length ? repoShas(plan, neighbours.repos, rest[0]) : undefined);
     }
     plan.save();
+    touchedLot(plan, rest[0], verbose, io);
     return 0;
 }
+/** Un titre de lot n'est jamais rendu en entier par défaut (L453) : ~300 caractères répétés à chaque commande, chaque commit de plan. */
+function shortTitle(title, verbose) {
+    return verbose ? title : truncate(title, TITLE_MAX);
+}
+/** `--verbose` (L453) : la ligne `id  état  titre entier` du lot touché par `done`, `ux`, `review`, `note`, `move`, `public` ; sans lui, rien de plus (une sous-tâche n'a pas de ligne). */
+function touchedLot(plan, id, verbose, io) {
+    const lot = verbose ? plan.lots().find((l) => l.id === id) : undefined;
+    if (lot)
+        io.out(`${lot.id}  ${lot.status}  ${lot.title}`);
+}
 function knownLot(plan, id, subtask) {
     const lot = plan.lots().find((l) => l.id === id);
     if (!lot)
@@ -1020,7 +1042,7 @@ function preCommit(load, mode, root, today, io) {
     }
     return 0;
 }
-function postCommit(load, newsDir, root, today, io, mode) {
+function postCommit(load, newsDir, root, today, io, mode, verbose) {
     if (!load)
         return 0;
     try {
@@ -1049,7 +1071,7 @@ function postCommit(load, newsDir, root, today, io, mode) {
             else if (lot.status === 'todo' && !planning)
                 io.err(`raf: ${r.lot} est encore todo${plan.readonly ? '' : ` — raf start ${r.lot}`}`);
             else
-                io.err(`raf: ${r.lot} (${lot.status}) ${lot.title}`);
+                io.err(`raf: ${r.lot} (${lot.status}) ${shortTitle(lot.title, verbose)}`);
         }
         const entries = loadEntries(newsDir);
         for (const id of new Set(refs.map((r) => r.lot))) {
@@ -1444,6 +1466,23 @@ function specReseal(args, reason, porteur, ctx, io) {
 const HOLD_TTL_MINUTES = 60;
 /** Longueur maximale de l'étiquette encodée : un nom de fichier tient en 255 octets, `.json.tmp` en prend 9. */
 const HOLD_LABEL_MAX = 200;
+/** `cadence lead priority <projet> --before|--after <projet> [dossier]` (L449) : range un projet dans la liste `priority:` du cadence.yaml du dossier (celui du tour), sans modèle ni commit. */
+function leadPriority(rest, before, after, depth, io) {
+    const usage = 'usage : cadence lead priority <projet> --before|--after <projet> [dossier] [--depth n]';
+    if (rest.length < 2 || rest.length > 3 || (before === undefined) === (after === undefined))
+        throw new RafError(usage);
+    const place = before !== undefined ? 'before' : 'after';
+    const levels = depth === undefined ? undefined : Number(depth);
+    if (levels !== undefined && !(Number.isInteger(levels) && levels >= 1))
+        throw new RafError(`--depth invalide : ${depth} (un entier ≥ 1)`);
+    const parent = resolve(io.cwd, rest[2] ?? '.');
+    if (!existsSync(parent))
+        throw new RafError(`lead priority : dossier introuvable : ${parent}`);
+    const target = (before ?? after);
+    const moved = movePriority(parent, rest[1], place, target, levels);
+    io.out(moved.changed ? `${rest[1]} placé ${place === 'before' ? 'avant' : 'après'} ${target} dans priority: de ${join(parent, 'cadence.yaml')} (ordre : ${moved.order.join(' > ')}) — le fichier est modifié, à commiter` : `${rest[1]} est déjà ${place === 'before' ? 'avant' : 'après'} ${target} : rien à changer`);
+    return 0;
+}
 /** `cadence lead hold <étiquette> [--ttl minutes]` / `lead release <étiquette>` (L255) : inscrit, ou rend, une session lancée à la main par le lead, qui compte dans les créneaux libres. */
 function leadHold(rest, ttl, io, today) {
     const [verb, label] = rest;
@@ -1502,7 +1541,7 @@ function spec(rest, io) {
 /** `cadence corrections` (L165) : la mesure de référence des passes de correction d'une vague, lue dans <dossier>/.cadence/runs. */
 async function corrections(rest, values, io) {
     if (rest.length > 1)
-        throw new RafError('usage : cadence corrections [dossier] [--classify [--model m]] [--cache fichier] [--sample n] [--until date] [--since date] [--json]');
+        throw new RafError('usage : cadence corrections [dossier] [--classify [--model m]] [--cache fichier] [--cache-sous-causes fichier] [--sample n] [--until date] [--since date] [--json]');
     const parent = resolve(io.cwd, rest[0] ?? '.');
     const runsDir = join(parent, '.cadence', 'runs');
     if (!existsSync(runsDir))
@@ -1517,14 +1556,33 @@ async function corrections(rest, values, io) {
     const model = values.model ?? 'mistral-small3.2:24b';
     const cacheFile = resolve(io.cwd, values.cache ?? join(parent, '.cadence', 'corrections.json'));
     const data = readRuns(runsDir, values.until, values.since);
+    const sousFile = resolve(io.cwd, values['cache-sous-causes'] ?? join(parent, '.cadence', 'corrections-sous-causes.json'));
     const cache = readCache(cacheFile);
+    // R5 (L447) : le cache des sous-causes illisible sort avec le code 1 de la fiche (corrections.json illisible sort avec 2, par `failure`).
+    let sousCache;
+    try {
+        sousCache = readSousCache(sousFile);
+    }
+    catch (e) {
+        if (!(e instanceof RafError))
+            throw e;
+        io.err(`raf: ${e.message}`);
+        return 1;
+    }
     if (values.classify) {
-        const classify = ollamaClassifier({ url: io.env.OLLAMA_HOST ?? 'http://localhost:11434', model });
-        await classifyAll(data.passes, cache, classify, model, (done, total) => {
+        const url = io.env.OLLAMA_HOST ?? 'http://localhost:11434';
+        await classifyAll(data.passes, cache, ollamaClassifier({ url, model }), model, (done, total) => {
             if (done % 25 === 0 || done === total)
                 io.err(`classement : ${done}/${total}`);
         }, { every: 10, save: () => writeFileSync(cacheFile, serializeCache(cache)) });
         writeFileSync(cacheFile, serializeCache(cache));
+        const saveSous = () => writeFileSync(sousFile, serializeSousCache(sousCache));
+        const added = await classifySous(data.passes, cache, sousCache, ollamaSousClassifier({ url, model }), model, (done, total) => {
+            if (done % 25 === 0 || done === total)
+                io.err(`sous-causes : ${done}/${total}`);
+        }, { every: 10, save: saveSous });
+        if (added > 0)
+            saveSous();
     }
     if (sample !== undefined) {
         const byKey = new Map(data.passes.map((p) => [p.key, p]));
@@ -1541,7 +1599,8 @@ async function corrections(rest, values, io) {
         return 0;
     }
     const m = measure(data, cache);
-    io.out(values.json ? JSON.stringify(m, null, 2) : renderReport(m));
+    const bugCode = bugCodeOf(bugCodePasses(data.passes, cache), sousCache);
+    io.out(values.json ? JSON.stringify(bugCode ? { ...m, bugCode } : m, null, 2) : renderReport(m, bugCode));
     return 0;
 }
 /**
@@ -1558,17 +1617,31 @@ function readPerf(parent, today, since, warn) {
     const cache = readCache(join(parent, '.cadence', 'corrections.json'));
     const journals = readJournals(runsDir);
     const warnings = [];
+    // Les sous-causes (L447) n'arrêtent pas perf : un cache illisible avertit et la ligne est omise.
+    const sousFile = join(parent, '.cadence', 'corrections-sous-causes.json');
+    let sousCache;
+    let sousWarning;
+    try {
+        sousCache = readSousCache(sousFile);
+    }
+    catch (e) {
+        if (!(e instanceof RafError))
+            throw e;
+        sousWarning = `perf : ${sousFile} illisible, sous-causes n/d`;
+    }
     const plans = readPlans(parent, (l) => warnings.push(l));
     if (plans.size === 0 && warnings.length === 0)
         warnings.push(`perf : aucun plan sous ${parent}, indicateurs du plan n/d`);
     const deliveries = readProjectDeliveries(parent, [...plans.keys()]);
     const failures = readProjectFailedEntries(parent, [...plans.keys()]);
     const failedDeliveries = new Map([...failures].map(([name, entries]) => [name, entries.map((e) => e.day)]));
-    const result = computePerf({ journals, plans, cache, deliveries, failedDeliveries, failures, prices, windows: perfWindows(today, since), today, since });
+    const result = computePerf({ journals, plans, cache, ...(sousCache ? { sousCache } : {}), deliveries, failedDeliveries, failures, prices, windows: perfWindows(today, since), today, since });
     if (!prices)
         warnings.push('perf : aucune grille de prix (cadence.yaml perf.prices), coût en euros n/d');
     for (const [model, lots] of Object.entries(result.cost.withoutPrice))
         warnings.push(`perf : modèle sans prix dans perf.prices : ${model}, coût n/d pour ${lots} lot(s)`);
+    if (sousWarning)
+        warnings.push(sousWarning);
     warnings.forEach(warn);
     return result;
 }
@@ -1667,12 +1740,14 @@ async function sessionAll(rest, values, io) {
     }
     return worst;
 }
-/** Le contexte de la session de `--session <id>`, sinon de `CLAUDE_CODE_SESSION_ID`, sinon (variable absente) de la seule session du dossier courant, tel que la bande cadence-hud le publie ; illisible = code 2, à lire comme « au seuil ». */
+/** Le contexte (et sa position par rapport à `lead.contextThreshold`, en tokens) de la session de `--session <id>`, sinon de `CLAUDE_CODE_SESSION_ID`, sinon (variable absente) de la seule session du dossier courant, tel que la bande cadence-hud le publie ; illisible = code 2, à lire comme « au seuil ». */
 function sessionContext(io, session) {
     const r = readHudContext(io.env, io.now().getTime(), { cwd: io.cwd, session });
     if (!r.ok)
         throw new RafError(`session context : contexte illisible — ${r.reason} ; à traiter comme au seuil`);
     io.out(`ctx ${Math.round(r.ctx.percent)} % (${r.ctx.tokens}/${r.ctx.window})`);
+    const threshold = readLeadContextThreshold(io.cwd);
+    io.out(`seuil ${threshold} tokens : ${r.ctx.tokens >= threshold ? 'atteint' : 'sous le seuil'}`);
     return 0;
 }
 function session([sub, ...args], ctx, values) {

package/dist/config-set.js

@@ -6,7 +6,7 @@ import { isNode, isScalar, parse, parseDocument } from 'yaml';
 import { defaultPlan, readDocsConfig, readHookConfig, readMigrateConfig, readNewsConfig, readOrchestrateConfig, readPerfConfig, readPlanConfig, readReferencesConfig, readSessionConfig } from './config.js';
 import { parseDeliverConfig } from './deliver.js';
 import { commitPaths, dirtyPaths, gitRoot, restorePaths } from './git.js';
-import { findProjects, isProject, readDepth, readLeadUx } from './lead.js';
+import { findProjects, isProject, readDepth, readLeadContextThreshold, readLeadUx } from './lead.js';
 import { readPriority } from './orchestrate/continue.js';
 import { Plan, RafError } from './plan.js';
 const KEY = /^[A-Za-z0-9_-]+(\.[A-Za-z0-9_-]+)*$/;
@@ -26,6 +26,7 @@ export function validateConfig(file, root) {
     readReferencesConfig(file);
     readMigrateConfig(file);
     readLeadUx(dirname(file));
+    readLeadContextThreshold(dirname(file));
     readDepth(dirname(file));
     readPriority(dirname(file));
     const text = readFileSync(file, 'utf8');

package/dist/config.js

@@ -338,7 +338,7 @@ export function readVerifyConfig(file) {
     return { inPlace: v.inPlace };
 }
 const REVIEW_KEYS = ['threshold', 'light', 'full'];
-const ORCH_KEYS = ['start', 'verdict', 'test', 'testReplay', 'build', 'worktreeDeps', 'accept', 'maquette', 'maquetteReviews', 'fiche', 'ux', 'precheck', 'prodAccess', 'worktrees', 'testGate', 'spec', 'review', 'escalation', 'continue', 'effort', 'permissionMode', 'addDirs', 'timeouts'];
+const ORCH_KEYS = ['start', 'verdict', 'test', 'testReplay', 'build', 'worktreeDeps', 'gate', 'accept', 'maquette', 'maquetteReviews', 'fiche', 'ux', 'precheck', 'prodAccess', 'worktrees', 'testGate', 'spec', 'review', 'escalation', 'continue', 'effort', 'permissionMode', 'addDirs', 'timeouts'];
 /** Clé `orchestrate:` de cadence.yaml. Absente : les défauts (auto, 45 min d'implémentation, 25 min de revue). */
 export function readOrchestrateConfig(file) {
     const config = { precheck: true, maquette: true, maquetteReviews: 3, fiche: true, precheckLocal: false, prodAccess: false, worktrees: false, spec: { dir: 'docs/specs' }, review: { threshold: 0.25, light: 'sonnet', full: 'opus' }, effort: { precheck: 'low', spec: 'medium', maquette: 'high', fiche: 'medium', accept: 'medium', implement: 'medium', fix: 'medium', review: 'high', ux: 'high' }, permissionMode: 'auto', addDirs: [], timeouts: { work: 45 * 60_000, review: 25 * 60_000 } };
@@ -392,6 +392,21 @@ export function readOrchestrateConfig(file) {
             throw bad('worktreeDeps : liste de chemins relatifs au dépôt, sans « .. » (node_modules, .venv…)');
         config.worktreeDeps = deps.map((x) => x.trim().replace(/\/$/, ''));
     }
+    if (o.gate != null) {
+        if (!isObject(o.gate))
+            throw bad('gate : objet attendu (gate: { readsPlan: true })');
+        for (const k of Object.keys(o.gate))
+            if (k !== 'readsPlan')
+                throw bad(`gate.${k} inconnu (attendu : readsPlan)`);
+        const r = o.gate.readsPlan;
+        const msg = 'gate.readsPlan : true, false ou liste de chemins de tests relatifs au dépôt, sans « .. »';
+        if (r === true)
+            config.gate = { readsPlan: true };
+        else if (Array.isArray(r) && r.length && r.every((x) => typeof x === 'string' && x.trim() && !isAbsolute(x) && !x.split(/[\\/]/).includes('..')))
+            config.gate = { readsPlan: r.map((x) => x.trim()) };
+        else if (r !== false)
+            throw bad(msg);
+    }
     if (o.maquette != null) {
         if (typeof o.maquette !== 'boolean')
             throw bad('maquette : true ou false attendu');