@tangle-network/cli-agent-registry 0.14.0 → 0.15.1

package/dist/native-session-contracts.d.mts

@@ -1,16 +1,7 @@
-import { o as NativeSessionStore } from "./session-contract-BC75JdnA.mjs";
+import { o as NativeSessionStore } from "./session-contract-BhzcbPRW.mjs";
 
 //#region src/native-session-contracts.d.ts
-/**
- * The native session projection of the per-harness declarations in harness-contracts/. Each entry is
- * proven by a conformance receipt (tests/harness/receipts) for
- * its pinned CLI version, or is listed in HARNESS_CONFORMANCE_PENDING.
- *
- * CLI versions are the pins in infra/nix (agent-clis.json and flake.nix),
- * generated into harness-cli-versions.ts by the bump. The registry test
- * tests/harness-session-contract.test.ts fails when a pin, a contract or an
- * adapter's source moves without a new receipt.
- */
+/** Native session contracts. A receipt proves each pin. There is no pending list. */
 declare const NATIVE_SESSION_CONTRACTS: {
   readonly "claude-code": {
     version: 1;
@@ -130,9 +121,9 @@ declare const NATIVE_SESSION_CONTRACTS: {
     forbiddenArgs: never[];
     storeEnv: {};
     evidence: {
-      servedModel: "session-record";
+      servedModel: "none";
       usage: "per-response";
-      endingError: "none";
+      endingError: "session-record";
     };
     cliVersion: "1.49.0";
   };
@@ -167,7 +158,7 @@ declare const NATIVE_SESSION_CONTRACTS: {
       usage: "session-total";
       endingError: "none";
     };
-    cliVersion: "0.249.0";
+    cliVersion: "0.250.0";
   };
   readonly amp: {
     version: 1;
@@ -196,7 +187,7 @@ declare const NATIVE_SESSION_CONTRACTS: {
       usage: "per-response";
       endingError: "none";
     };
-    cliVersion: "0.0.1793044831-ga1b1a0";
+    cliVersion: "0.0.1793104576-gc52692";
   };
   readonly prime: {
     version: 1;
@@ -204,7 +195,7 @@ declare const NATIVE_SESSION_CONTRACTS: {
       root: string;
       files: string[];
       write: "jsonl-append";
-      shared: false;
+      shared: true;
       format: "prime.session-jsonl";
     }];
     identity: {
@@ -246,19 +237,18 @@ declare const NATIVE_SESSION_CONTRACTS: {
     };
     cliVersion: "0.22.4";
   };
-  readonly forge: {
+  readonly openclaw: {
     version: 1;
     stores: [{
       root: string;
       files: string[];
       write: "sqlite-wal";
       shared: true;
-      format: "forge.sqlite";
+      format: "openclaw.session-jsonl";
     }];
     identity: {
-      kind: "first-event";
-      event: string;
-      deadlineMs: number;
+      kind: "pre-minted";
+      args: string[];
     };
     resume: {
       kind: "args";
@@ -271,16 +261,35 @@ declare const NATIVE_SESSION_CONTRACTS: {
       usage: "per-response";
       endingError: "none";
     };
-    cliVersion: "2.14.0";
+    cliVersion: "2026.10.8";
   };
-  readonly openclaw: {
+  readonly acp: {
+    version: 1;
+    stores: [NativeSessionStore, NativeSessionStore, NativeSessionStore, NativeSessionStore, NativeSessionStore];
+    identity: {
+      kind: "api-created";
+      call: "acp session/new";
+    };
+    resume: {
+      kind: "api";
+    };
+    forbiddenArgs: never[];
+    storeEnv: {};
+    evidence: {
+      servedModel: "session-record";
+      usage: "session-total";
+      endingError: "none";
+    };
+    cliVersion: "claude-agent-acp 0.97.0; codex-acp 0.16.0; gemini-cli 0.65.0";
+  };
+  readonly grok: {
     version: 1;
     stores: [{
       root: string;
       files: string[];
       write: "jsonl-append";
       shared: false;
-      format: "openclaw.session-jsonl";
+      format: "grok.acp-session-dir";
     }];
     identity: {
       kind: "first-event";
@@ -292,63 +301,49 @@ declare const NATIVE_SESSION_CONTRACTS: {
       args: string[];
     };
     forbiddenArgs: never[];
-    storeEnv: {};
+    storeEnv: {
+      GROK_HOME: string;
+    };
     evidence: {
       servedModel: "session-record";
-      usage: "per-response";
+      usage: "none";
       endingError: "none";
     };
-    cliVersion: "2026.10.7";
+    cliVersion: "0.1.220";
   };
-  readonly acp: {
+  readonly nanoclaw: {
     version: 1;
-    stores: [NativeSessionStore, NativeSessionStore, NativeSessionStore, NativeSessionStore, NativeSessionStore];
+    stores: [{
+      root: string;
+      files: string[];
+      write: "sqlite-wal";
+      shared: false;
+      format: "nanoclaw.session-sqlite";
+    }];
     identity: {
-      kind: "api-created";
-      call: "acp session/new";
+      kind: "first-event";
+      event: string;
+      deadlineMs: number;
     };
     resume: {
       kind: "api";
     };
     forbiddenArgs: never[];
-    storeEnv: {};
+    storeEnv: {
+      NANOCLAW_RUNTIME_ROOT: string;
+    };
     evidence: {
-      servedModel: "session-record";
+      servedModel: "none";
       usage: "per-response";
       endingError: "none";
     };
-    cliVersion: "claude-agent-acp 0.97.0; codex-acp 0.16.0; gemini-cli 0.65.0";
+    cliVersion: "2.1.54";
   };
 };
-/**
- * The child environment of a harness whose contract can move every native
- * store off HOME, or undefined when it cannot.
- *
- * HOME becomes the shared agent home, so toolchains and repos the agent puts
- * under ~ persist across sessions and restarts. Each declared store env and
- * the XDG roots stay in the private runtime home, so credentials, config and
- * session records do not collide between sessions. A harness whose contract
- * declares no store env (kimi-code, factory-droids, forge, openclaw, acp,
- * prime) writes credentials straight under HOME and keeps the private HOME.
- * So does OpenCode: its warm-server pool, spare adoption, plugin dependencies
- * and correlation file all use HOME as the session's runtime identity, and a
- * shared HOME would merge those identities across sessions.
- */
+/** Store env and XDG roots under the private runtime home. Undefined when HOME itself is the store. */
 declare function configDirHomeEnv(harness: string, runtimeHome: string, agentHome: string): Record<string, string> | undefined;
-/**
- * Harnesses whose declared contract has no conformance receipt yet, with
- * the reason. They keep running with persistence-disabling flags refused,
- * but the store-location and identity-deadline checks wait for their
- * receipt. This list may only shrink: tests/harness-session-contract.test.ts
- * fails on a new entry, and on an entry whose receipt now passes.
- */
-declare const HARNESS_CONFORMANCE_PENDING: Readonly<Record<string, string>>;
-/**
- * Harnesses that cannot meet the contract at all. They stay listed until
- * their product surfaces (sandbox web launch list, CLI connect, SDK
- * placement) drop them, and no capture claims their sessions.
- */
+/** No capture claims these sessions. They stay until their product surfaces drop them. */
 declare const HARNESS_SESSION_UNSUPPORTED: Readonly<Record<string, string>>;
 //#endregion
-export { HARNESS_CONFORMANCE_PENDING, HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv };
+export { HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv };
 //# sourceMappingURL=native-session-contracts.d.mts.map

package/dist/native-session-contracts.mjs

@@ -1,2 +1,40 @@
-import { i as configDirHomeEnv, n as HARNESS_SESSION_UNSUPPORTED, r as NATIVE_SESSION_CONTRACTS, t as HARNESS_CONFORMANCE_PENDING } from "./native-session-contracts-DWFzgoye.mjs";
-export { HARNESS_CONFORMANCE_PENDING, HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv };
+import { t as HARNESSES } from "./harness-contracts-BZoECCMc.mjs";
+//#region src/native-session-contracts.ts
+/** Native session contracts. A receipt proves each pin. There is no pending list. */
+const NATIVE_SESSION_CONTRACTS = {
+	"claude-code": HARNESSES["claude-code"].session.contract,
+	codex: HARNESSES["codex"].session.contract,
+	opencode: HARNESSES["opencode"].session.contract,
+	pi: HARNESSES["pi"].session.contract,
+	"kimi-code": HARNESSES["kimi-code"].session.contract,
+	"factory-droids": HARNESSES["factory-droids"].session.contract,
+	amp: HARNESSES["amp"].session.contract,
+	prime: HARNESSES["prime"].session.contract,
+	hermes: HARNESSES["hermes"].session.contract,
+	openclaw: HARNESSES["openclaw"].session.contract,
+	acp: HARNESSES["acp"].session.contract,
+	grok: HARNESSES["grok"].session.contract,
+	nanoclaw: HARNESSES["nanoclaw"].session.contract
+};
+const HOME_KEYED_RUNTIMES = new Set(["opencode"]);
+/** Store env and XDG roots under the private runtime home. Undefined when HOME itself is the store. */
+function configDirHomeEnv(harness, runtimeHome, agentHome) {
+	const contract = NATIVE_SESSION_CONTRACTS[harness];
+	const stores = Object.entries(contract?.storeEnv ?? {}).filter(([name]) => !name.startsWith("--"));
+	if (stores.length === 0 || HOME_KEYED_RUNTIMES.has(harness)) return void 0;
+	const home = runtimeHome.replace(/\/+$/u, "");
+	return {
+		HOME: agentHome,
+		XDG_CONFIG_HOME: `${home}/.config`,
+		XDG_CACHE_HOME: `${home}/.cache`,
+		XDG_DATA_HOME: `${home}/.local/share`,
+		XDG_STATE_HOME: `${home}/.local/state`,
+		...Object.fromEntries(stores.map(([name, relative]) => [name, `${home}/${relative}`]))
+	};
+}
+/** No capture claims these sessions. They stay until their product surfaces drop them. */
+const HARNESS_SESSION_UNSUPPORTED = { cursor: HARNESSES["cursor"].session.defect.reason };
+//#endregion
+export { HARNESS_SESSION_UNSUPPORTED, NATIVE_SESSION_CONTRACTS, configDirHomeEnv };
+
+//# sourceMappingURL=native-session-contracts.mjs.map

package/dist/servable-models.d.mts

@@ -33,12 +33,11 @@ interface ManagedModelRung {
  * fail, it hangs.
  *
  * Which models a harness can run is not decided here: the capability table
- * ({@link harnessModelSupportFor}) drops the rungs a harness refuses (a vendor
- * lock, measured exclusions). claude-code and codex run the whole ladder: the
- * router translates every non-vendor model on their Messages and Responses
- * wires to chat completions, so they lead with the same cheapest rung as every
- * other Router-backed harness. A rung exists for a vendor-locked harness when
- * it is the only model that harness can run (kimi-code runs Moonshot).
+ * ({@link harnessModelSupportFor}) drops the rungs a harness refuses (measured
+ * exclusions). claude-code and codex run the whole ladder: the router
+ * translates every non-vendor model on their Messages and Responses wires to
+ * chat completions, so they lead with the same cheapest rung as every other
+ * Router-backed harness.
  */
 declare const MANAGED_MODEL_LADDER: readonly ManagedModelRung[];
 /** The bare id a provider-prefixed model id carries. */

package/dist/servable-models.mjs

@@ -1,4 +1,4 @@
-import { l as getSpec, m as harnessModelSupportFor } from "./specs-Bbiay_8K.mjs";
+import { l as getSpec, m as harnessModelSupportFor } from "./specs-BBF55TnM.mjs";
 //#region src/servable-models.ts
 /**
 * The models a managed (Tangle-funded) run may default to, most preferred
@@ -23,12 +23,11 @@ import { l as getSpec, m as harnessModelSupportFor } from "./specs-Bbiay_8K.mjs"
 * fail, it hangs.
 *
 * Which models a harness can run is not decided here: the capability table
-* ({@link harnessModelSupportFor}) drops the rungs a harness refuses (a vendor
-* lock, measured exclusions). claude-code and codex run the whole ladder: the
-* router translates every non-vendor model on their Messages and Responses
-* wires to chat completions, so they lead with the same cheapest rung as every
-* other Router-backed harness. A rung exists for a vendor-locked harness when
-* it is the only model that harness can run (kimi-code runs Moonshot).
+* ({@link harnessModelSupportFor}) drops the rungs a harness refuses (measured
+* exclusions). claude-code and codex run the whole ladder: the router
+* translates every non-vendor model on their Messages and Responses wires to
+* chat completions, so they lead with the same cheapest rung as every other
+* Router-backed harness.
 */
 const MANAGED_MODEL_LADDER = [
 	{
@@ -51,21 +50,6 @@ const MANAGED_MODEL_LADDER = [
 		reason: "routeable and priced; no recent dispatch",
 		reviewedAt: "2026-10-14"
 	},
-	{
-		id: "moonshot/kimi-k3",
-		reason: "kimi-code's first rung (Moonshot-locked); Moonshot and Together quota-exhausted when reviewed",
-		reviewedAt: "2026-10-14"
-	},
-	{
-		id: "moonshot/kimi-k2.7-code",
-		reason: "Moonshot direct coding model; quota-exhausted when reviewed",
-		reviewedAt: "2026-10-14"
-	},
-	{
-		id: "moonshotai/kimi-k2-0905",
-		reason: "served through OpenRouter; no recent dispatch",
-		reviewedAt: "2026-10-14"
-	},
 	{
 		id: "openai/gpt-6-luna",
 		reason: "the router's tangle/cheap role; no recent dispatch",

package/dist/{session-contract-BC75JdnA.d.mts → session-contract-BhzcbPRW.d.mts}

@@ -1,22 +1,6 @@
 //#region src/session-contract.d.ts
-/**
- * The harness session contract: what every registered harness promises about
- * its native session, so one capture path and one reader cover all of them.
- *
- * A harness always persists a native session. Its store sits at a declared
- * place under the execution's private runtime HOME, the sidecar knows the
- * session id for each execution before the turn's evidence is needed, and the
- * served model, usage and ending error can be read back from what it wrote.
- * A harness that cannot promise this cannot be registered.
- *
- * Data and pure functions only: this module is imported by the Worker-safe
- * `/specs` entry, so it must not import Node built-ins.
- *
- * The format ids and store shape mirror `@tangle-network/harness-sessions`,
- * which owns the readers. Where that package is installed, the registry test
- * fails when the two lists of format ids drift.
- */
-declare const SESSION_FORMAT_IDS: readonly ["claude-code.projects-jsonl", "codex.rollout-jsonl", "opencode.sqlite", "pi.session-jsonl", "kimi.session-dir", "factory.session-jsonl", "gemini.chat-json", "amp.thread-json", "forge.sqlite", "hermes.state-sqlite", "prime.session-jsonl", "openclaw.session-jsonl", "sidecar.message-json", "sidecar.session-json"];
+/** One session contract. Stores sit under the private runtime HOME. No Node built-ins. */
+declare const SESSION_FORMAT_IDS: readonly ["claude-code.projects-jsonl", "codex.rollout-jsonl", "opencode.sqlite", "pi.session-jsonl", "kimi.session-dir", "factory.session-jsonl", "gemini.chat-json", "amp.thread-json", "hermes.state-sqlite", "prime.session-jsonl", "openclaw.session-jsonl", "grok.acp-session-dir", "nanoclaw.session-sqlite", "sidecar.message-json", "sidecar.session-json"];
 type SessionFormatId = (typeof SESSION_FORMAT_IDS)[number];
 interface NativeSessionStore {
   /**
@@ -49,8 +33,8 @@ type NativeSessionIdentity = /** The sidecar mints the id and records it before
   deadlineMs: number;
 };
 interface HarnessSessionEvidence {
-  servedModel: "provider-response" | "session-record" | "turn-context";
-  usage: "per-response" | "cumulative" | "session-total";
+  servedModel: "provider-response" | "session-record" | "turn-context" | "none";
+  usage: "per-response" | "cumulative" | "session-total" | "none";
   endingError: "session-record" | "none";
 }
 interface HarnessSessionContract {
@@ -87,45 +71,27 @@ declare class HarnessSessionContractError extends Error {
 declare function substituteNativeSessionId(tokens: readonly string[], nativeSessionId: string): string[];
 /** The forbidden tokens present in `argv`, in argv order. */
 declare function forbiddenArgViolations(contract: Pick<HarnessSessionContract, "forbiddenArgs">, argv: readonly string[]): string[];
-/**
- * Refuse flags that disable persistence. Called on configured flags before a
- * turn can start, and on the built argv before spawn.
- */
+/** Refuse flags that disable persistence, on configured flags and on the built argv. */
 declare function assertFlagsHonourSessionContract(harness: string, contract: Pick<HarnessSessionContract, "forbiddenArgs">, flags: readonly string[], source: string): void;
-/**
- * Check the argv the adapter built: no forbidden token, and, for a
- * pre-minted identity on a new session, the identity args carrying the
- * minted id.
- */
+/** No forbidden argv token, and a pre-minted new session carries its minted id. */
 declare function assertArgvHonoursSessionContract(harness: string, contract: HarnessSessionContract, argv: readonly string[], session: {
   mintedId?: string;
 }): void;
 /** Normalize a POSIX path; `..` that escapes the start is kept as a leading `..`. */
 declare function normalizePosixPath(path: string): string;
-/**
- * Refuse a store location the contract does not declare. Each env value (or
- * flag value, for keys that start with `--`) must resolve to exactly
- * HOME/<declared path>; relative flag values resolve against `cwd`.
- */
+/** Each store env or `--flag` value must resolve to exactly HOME/<declared path>. */
 declare function assertStoreLocationHonoursSessionContract(harness: string, contract: Pick<HarnessSessionContract, "storeEnv">, input: {
   runtimeHome: string;
   cwd: string;
   env?: Readonly<Record<string, string | undefined>>;
   argv?: readonly string[];
 }): void;
-/**
- * A matcher for one store glob. `**` matches any number of path segments
- * (including none), `*` matches within one segment, and `{id}` is the native
- * session id (any id when omitted).
- */
+/** `**` is any number of segments, `*` is one segment, `{id}` is the session id. */
 declare function compileSessionStoreGlob(glob: string, nativeSessionId?: string): RegExp;
-/**
- * The declared store that holds `pathFromHome` for this session, or
- * undefined. A shared store's files belong to every session.
- */
+/** The store that holds `pathFromHome`, or undefined. A shared store matches every session. */
 declare function sessionStoreForPath(contract: Pick<HarnessSessionContract, "stores">, pathFromHome: string, nativeSessionId: string): NativeSessionStore | undefined;
 /** Structural checks every declared contract must pass. */
 declare function sessionContractProblems(contract: HarnessSessionContract): string[];
 //#endregion
 export { substituteNativeSessionId as _, NativeSessionIdentity as a, SessionFormatId as c, assertStoreLocationHonoursSessionContract as d, compileSessionStoreGlob as f, sessionStoreForPath as g, sessionContractProblems as h, HarnessSessionEvidence as i, assertArgvHonoursSessionContract as l, normalizePosixPath as m, HarnessSessionContractError as n, NativeSessionStore as o, forbiddenArgViolations as p, HarnessSessionContractErrorCode as r, SESSION_FORMAT_IDS as s, HarnessSessionContract as t, assertFlagsHonourSessionContract as u };
-//# sourceMappingURL=session-contract-BC75JdnA.d.mts.map
+//# sourceMappingURL=session-contract-BhzcbPRW.d.mts.map

package/dist/session-contract.d.mts

@@ -1,2 +1,2 @@
-import { _ as substituteNativeSessionId, a as NativeSessionIdentity, c as SessionFormatId, d as assertStoreLocationHonoursSessionContract, f as compileSessionStoreGlob, g as sessionStoreForPath, h as sessionContractProblems, i as HarnessSessionEvidence, l as assertArgvHonoursSessionContract, m as normalizePosixPath, n as HarnessSessionContractError, o as NativeSessionStore, p as forbiddenArgViolations, r as HarnessSessionContractErrorCode, s as SESSION_FORMAT_IDS, t as HarnessSessionContract, u as assertFlagsHonourSessionContract } from "./session-contract-BC75JdnA.mjs";
+import { _ as substituteNativeSessionId, a as NativeSessionIdentity, c as SessionFormatId, d as assertStoreLocationHonoursSessionContract, f as compileSessionStoreGlob, g as sessionStoreForPath, h as sessionContractProblems, i as HarnessSessionEvidence, l as assertArgvHonoursSessionContract, m as normalizePosixPath, n as HarnessSessionContractError, o as NativeSessionStore, p as forbiddenArgViolations, r as HarnessSessionContractErrorCode, s as SESSION_FORMAT_IDS, t as HarnessSessionContract, u as assertFlagsHonourSessionContract } from "./session-contract-BhzcbPRW.mjs";
 export { HarnessSessionContract, HarnessSessionContractError, HarnessSessionContractErrorCode, HarnessSessionEvidence, NativeSessionIdentity, NativeSessionStore, SESSION_FORMAT_IDS, SessionFormatId, assertArgvHonoursSessionContract, assertFlagsHonourSessionContract, assertStoreLocationHonoursSessionContract, compileSessionStoreGlob, forbiddenArgViolations, normalizePosixPath, sessionContractProblems, sessionStoreForPath, substituteNativeSessionId };

package/dist/session-contract.mjs

@@ -1,21 +1,5 @@
 //#region src/session-contract.ts
-/**
-* The harness session contract: what every registered harness promises about
-* its native session, so one capture path and one reader cover all of them.
-*
-* A harness always persists a native session. Its store sits at a declared
-* place under the execution's private runtime HOME, the sidecar knows the
-* session id for each execution before the turn's evidence is needed, and the
-* served model, usage and ending error can be read back from what it wrote.
-* A harness that cannot promise this cannot be registered.
-*
-* Data and pure functions only: this module is imported by the Worker-safe
-* `/specs` entry, so it must not import Node built-ins.
-*
-* The format ids and store shape mirror `@tangle-network/harness-sessions`,
-* which owns the readers. Where that package is installed, the registry test
-* fails when the two lists of format ids drift.
-*/
+/** One session contract. Stores sit under the private runtime HOME. No Node built-ins. */
 const SESSION_FORMAT_IDS = [
 	"claude-code.projects-jsonl",
 	"codex.rollout-jsonl",
@@ -25,10 +9,11 @@ const SESSION_FORMAT_IDS = [
 	"factory.session-jsonl",
 	"gemini.chat-json",
 	"amp.thread-json",
-	"forge.sqlite",
 	"hermes.state-sqlite",
 	"prime.session-jsonl",
 	"openclaw.session-jsonl",
+	"grok.acp-session-dir",
+	"nanoclaw.session-sqlite",
 	"sidecar.message-json",
 	"sidecar.session-json"
 ];
@@ -44,31 +29,21 @@ var HarnessSessionContractError = class extends Error {
 function substituteNativeSessionId(tokens, nativeSessionId) {
 	return tokens.map((token) => token.split("{id}").join(nativeSessionId));
 }
-function matchesForbidden(token, forbidden) {
-	return token === forbidden || token.startsWith(`${forbidden}=`);
-}
 /** The forbidden tokens present in `argv`, in argv order. */
 function forbiddenArgViolations(contract, argv) {
-	return argv.filter((token) => contract.forbiddenArgs.some((forbidden) => matchesForbidden(token, forbidden)));
+	return argv.filter((token) => contract.forbiddenArgs.some((forbidden) => token === forbidden || token.startsWith(`${forbidden}=`)));
 }
 function indexOfSequence(haystack, needle) {
 	if (needle.length === 0) return 0;
 	for (let index = 0; index + needle.length <= haystack.length; index++) if (needle.every((token, offset) => haystack[index + offset] === token)) return index;
 	return -1;
 }
-/**
-* Refuse flags that disable persistence. Called on configured flags before a
-* turn can start, and on the built argv before spawn.
-*/
+/** Refuse flags that disable persistence, on configured flags and on the built argv. */
 function assertFlagsHonourSessionContract(harness, contract, flags, source) {
 	const violations = forbiddenArgViolations(contract, flags);
 	if (violations.length > 0) throw new HarnessSessionContractError("harness_session_persistence_disabled", `${harness} ${source} carries ${violations.join(", ")}, which disables or redirects its native session`);
 }
-/**
-* Check the argv the adapter built: no forbidden token, and, for a
-* pre-minted identity on a new session, the identity args carrying the
-* minted id.
-*/
+/** No forbidden argv token, and a pre-minted new session carries its minted id. */
 function assertArgvHonoursSessionContract(harness, contract, argv, session) {
 	assertFlagsHonourSessionContract(harness, contract, argv, "argv");
 	if (session.mintedId === void 0) return;
@@ -94,11 +69,7 @@ function normalizePosixPath(path) {
 function resolvePosix(base, value) {
 	return normalizePosixPath(value.startsWith("/") ? value : `${base.replace(/\/+$/u, "")}/${value}`);
 }
-/**
-* Refuse a store location the contract does not declare. Each env value (or
-* flag value, for keys that start with `--`) must resolve to exactly
-* HOME/<declared path>; relative flag values resolve against `cwd`.
-*/
+/** Each store env or `--flag` value must resolve to exactly HOME/<declared path>. */
 function assertStoreLocationHonoursSessionContract(harness, contract, input) {
 	const home = normalizePosixPath(input.runtimeHome);
 	const violations = [];
@@ -123,35 +94,16 @@ function assertStoreLocationHonoursSessionContract(harness, contract, input) {
 function escapeRegExp(text) {
 	return text.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
 }
-/**
-* A matcher for one store glob. `**` matches any number of path segments
-* (including none), `*` matches within one segment, and `{id}` is the native
-* session id (any id when omitted).
-*/
+/** `**` is any number of segments, `*` is one segment, `{id}` is the session id. */
 function compileSessionStoreGlob(glob, nativeSessionId) {
-	let pattern = "";
-	for (let index = 0; index < glob.length;) if (glob.startsWith("**/", index)) {
-		pattern += "(?:[^/]+/)*";
-		index += 3;
-	} else if (glob.startsWith("**", index)) {
-		pattern += ".*";
-		index += 2;
-	} else if (glob.startsWith("{id}", index)) {
-		pattern += nativeSessionId === void 0 ? "[^/]+" : escapeRegExp(nativeSessionId);
-		index += 4;
-	} else if (glob[index] === "*") {
-		pattern += "[^/]*";
-		index += 1;
-	} else {
-		pattern += escapeRegExp(glob[index]);
-		index += 1;
-	}
+	const pattern = glob.replace(/\*\*\/|\*\*|\{id\}|\*|[\s\S]/gu, (token) => {
+		if (token === "{id}") return nativeSessionId === void 0 ? "[^/]+" : escapeRegExp(nativeSessionId);
+		if (token.startsWith("**")) return token === "**/" ? "(?:[^/]+/)*" : ".*";
+		return token === "*" ? "[^/]*" : escapeRegExp(token);
+	});
 	return new RegExp(`^${pattern}$`, "u");
 }
-/**
-* The declared store that holds `pathFromHome` for this session, or
-* undefined. A shared store's files belong to every session.
-*/
+/** The store that holds `pathFromHome`, or undefined. A shared store matches every session. */
 function sessionStoreForPath(contract, pathFromHome, nativeSessionId) {
 	const path = normalizePosixPath(pathFromHome);
 	for (const store of contract.stores) {