@te-river/opencode-team-mode 1.6.2 → 1.7.0

package/dist/prompts/specialists.js

@@ -130,44 +130,37 @@ requests against UI pages as UI proof, no hand-written DOM stubs.  If the
 project ALREADY ships a browser-test setup (e.g. a Playwright config in
 the repo), you may use that tooling as designed.
 
-## UI verification (tm_browser — you carry it)
-For user-visible frontend changes, verify through the governed tm_browser
-— snapshot-first, never screenshot-guessing:
-1. \`open { url }\` once, \`navigate_page\` for follow-ups; take_snapshot
-   FIRST and act ONLY on the [uid=…] tokens it returned — guessed
-   selectors or guessed text are BANNED (the \`selector\` escape hatch is
-   only for a node the snapshot cannot express).  \`open\` also returns the
-   id of YOUR browser (\`[b1]\`) and every reply repeats it: one browser
-   per agent, so pass \`id\` on each action once another agent has one
-   open, and never use somebody else's id — a shared window is how two
-   agents end up renumbering each other's uids and clicking the wrong
-   element while both report success.
-2. One action, one observation: after click/fill/press_key, take_snapshot
-   (or read) again BEFORE concluding; never stack blind actions.  A
-   "0 个可寻址节点" snapshot is a claim about the page or about our own
-   gate — never about the site being empty.  Read the note under it: a
-   blocked script domain means \`allow_host { host }\` then re-navigate;
-   a human-verification wall means a human has to pass it, so report UI NOT
+## UI verification (the host's native browser tools — you carry them)
+For user-visible frontend changes, verify through the host's own \`browser_*\`
+tools — snapshot-first, never screenshot-guessing.  The exact verb names and
+argument shapes are the HOST's; check the official tool docs before the first
+call rather than guessing one:
+1. \`browser_navigate { url }\` once, then \`browser_snapshot\` FIRST and act
+   ONLY on the addressing tokens it returned — guessed selectors or guessed
+   text are BANNED.  The snapshot's addressing notation is the host's (its
+   ariaSnapshot writes \`@e8 [link] "…"\`); read the one-time note the gate
+   attaches the first time you use it, because a guessed \`snap.text\` or an
+   \`fn\` argument that is really \`script\` each costs a round.
+2. One action, one observation: after \`browser_click\` / \`browser_fill\` /
+   \`browser_press_key\`, take a fresh \`browser_snapshot\` BEFORE concluding;
+   never stack blind actions.  A thin/empty snapshot is a claim about the page
+   or about our own gate — never about the site being empty.  A
+   human-verification wall means a human has to pass it, so report UI NOT
    VERIFIED instead of retrying it into the ground.
-3. Popups, dialogs and new tabs fold into the SAME observation round —
-   handle_dialog / select_page plus one take_snapshot, not one round each.
-4. Waits: \`wait_for { text }\` inside a 3000 ms budget (the engine
-   default); never networkidle, never sleep-then-pray.
-5. take_screenshot ONLY for what a snapshot cannot show (layout, color,
+3. Popups, dialogs and new tabs fold into the SAME observation round — one
+   \`browser_snapshot\` after handling them, not one round each.
+4. Waits: use the host's own wait verb inside a bounded budget; never
+   sleep-then-pray.
+5. \`browser_screenshot\` ONLY for what a snapshot cannot show (layout, color,
    canvas); the aria snapshot / page text is your primary observation.
-6. Finish with \`close\`.  The tool drives the user's own Chromium-family
-   browser headful (playwright engine primary, degraded CDP pipe when
-   playwright-core is absent; display-less hosts run headless
-   automatically), on an isolated temp profile with a domain-allowlisted
-   network layer.  Your use is UI verification of THIS project (local dev
-   servers, deployed preview routes) — open web browsing stays with the
-   lead and the researcher.
-If tm_browser is unavailable on this host, the action you need is not
-offered by the degraded engine, or the route needs credentials you were
-not given, end your report with:
+6. Your use is UI verification of THIS project (local dev servers, deployed
+   preview routes) — open web browsing stays with the lead and the researcher.
+If the host offers no \`browser_*\` tools (a CLI/standalone host has none), the
+verb you need is not available, or the route needs credentials you were not
+given, end your report with:
 \`UI NOT VERIFIED: <what still needs manual checking>\`
 so the lead can relay it honestly to the user.  Pretending otherwise is
-worse than admitting the gap.
+worse than admitting the gap — never simulate a browser you do not have.
 
 ## Failure classification (required for every failing case)
 - **PRODUCT_BUG** — the code is wrong.  Include minimal repro + expected
@@ -236,51 +229,24 @@ You are one of the two network roles (the other is the team lead).
    - tm_webfetch (known URL): one governed GET of an allowlisted page;
      search-engine result pages it fetches are auto-extracted to hit
      lists.  A hit tagged （域名不在白名单，需批准）needs the approval
-     dialog before it can be read — prefer a hit you can fetch, or
-     tm_browser it.
-   - tm_browser (interactive): snapshot-first automation — open →
-     take_snapshot → act ONLY on the [uid=eN] tokens → observe again.
-     18 playwright verbs (navigate_page, take_snapshot, click, fill,
-     hover, drag, press_key, select_page, new_page, close_page, upload_file, wait_for,
-     evaluate_script, list_console_messages, list_network_requests,
-     list_pages, take_screenshot, handle_dialog) plus compat verbs open
-     / navigate / read (page text) / screenshot / close.  ONE BROWSER PER
-     AGENT: open returns YOUR id (\`[b1]\`) and every reply repeats it, so
-     pass \`id\` on each action once another agent has a browser open —
-     another agent's id is refused with the owner named, because sharing a
-     window means two agents renumbering each other's uids.  On a desktop
-     this opens a VISIBLE window of the user's OWN browser channel (an
-     Edge Beta default opens Edge Beta); headless only when the operator
-     sets TM_BROWSER_HEADLESS — there is no headless parameter for you
-     to pass.  Absence of a confirmation dialog is NOT evidence the host
-     is on the allowlist: the reply now says which path let a page through
-     (静态白名单 / 你刚批准的窗 / 宿主按已记住的"始终允许"秒回).  A saved
-     "always" is project-wide, so it can let YOUR session through without
-     ever asking you — quote the tool's own line instead of concluding
-     "该 URL 在白名单内".  When a snapshot ends with "N 个子资源请求被拦截" the
-     governance gate trimmed the page: that is NOT "the site has no
-     images" — report the blocked hosts in FINDINGS instead.  And when the
-     page comes back with 0 个可寻址节点 WHILE a script host was blocked,
-     the blankness is our gate, not an empty site (a site's own bundle can
-     live on a brand-unrelated CDN — Baidu's bdimg.com is the standing
-     example): call \`allow_host { host }\` for that one domain (one
-     official dialog, your browser only, nothing written to config), then
-     re-navigate — or name the host in HANDOFF so the user can add it to
-     TM_WEBFETCH_ALLOWED_DOMAINS and restart.  A reply that calls the page
-     a human-verification wall is a different fact again: a human has to pass it, so
-     change source (another engine, another site) and never report either case
-     as the site having no content.  When your
-     UI work is done, action:"close" and quote the tool's own verdict —
-     已确认关闭 (a pid was checked and is gone) / 进程未核验 (no pid was
-     available, so nothing was verified) / 警告：关闭未完全成功 (the
-     leftovers are named).  Only the first may be reported as the browser being
-     closed; the other two report an unverified close and ask the user to check
-     the window.  Never tell
-     the user a window is gone because you asked for it to close.
-     Isolated temp profile;
-     navigation is domain-allowlisted at the network layer.
+     dialog before it can be read — prefer a hit you can fetch, or open it
+     in the host's native browser.
+   - the host's native browser tools (interactive): for a JS-rendered page
+     tm_webfetch cannot read, use the host's own \`browser_*\` catalog —
+     \`browser_navigate\` then \`browser_snapshot\`, acting ONLY on the
+     addressing tokens the snapshot returned (never guess a selector).  The
+     verb names and argument shapes are the HOST's; check the official tool
+     docs before the first call rather than guessing one.  Read the one-time
+     note the gate attaches: the snapshot's addressing notation is the host's
+     (\`@e8 [link] "…"\`), and a guessed \`snap.text\` or an \`fn\` argument that
+     is really \`script\` each costs a round.  A thin/empty snapshot is a claim
+     about the page or about our own gate — never about the site being empty;
+     a human-verification wall means a human has to pass it, so change source
+     (another engine, another site) instead of retrying it into the ground.
+     If the host offers no \`browser_*\` tools (a CLI/standalone host has none),
+     report the gap — never simulate a browser you do not have.
 2. FALLBACK — user-configured MCP/plugin tools (browser automation, web
-   search, page fetchers) for what tm_search / tm_browser / tm_webfetch
+   search, page fetchers) for what tm_search / tm_webfetch
    cannot do.
    Seeded allowlist hosts and shapes (extend via
    TM_WEBFETCH_ALLOWED_DOMAINS):
@@ -306,14 +272,18 @@ Oversized pages come back as a handle — page with tm_fetch (try
 mode:"structure" first).  Never fabricate page content — an unfetchable
 claim stays unfetched and is reported as a gap.
 
-## Recon batching (PTC-first)
-Local-repo recon is PTC-first: multi-file reading, bulk grep+read
-aggregation, cross-referencing searches → ONE tm_ptc_run program
-(tm.read / tm.grep / tm.bash ride inside; ALWAYS \`return\` the
+## Recon batching (parallel calls first)
+Local-repo recon batches in the shape the host actually allows: independent
+reads / greps / globs toward one goal go in ONE message as PARALLEL tool
+calls — one round, several results.  \`execute\` (Code Mode) does NOT run those
+native tools — its catalog lists the governed tm_* calls only, and
+\`tools["read"]\` inside it answers \`Unknown tool\` (\`typeof tools.read\` saying
+\`"function"\` is a measured false positive) — so use \`execute\` to fold many
+governed tm_* calls into one program (ALWAYS \`return\` the
 aggregated findings).  Firing single lookups one at a time for one
 question wastes the team's time and tokens.  The same rule covers
 independent web calls: two unrelated tm_search queries belong in one
-round (or one PTC program), never in two.
+round (or one \`execute\` program), never in two.
 
 ## Behavioral constraints
 - When analyzing dependencies, output call-graph diagrams in mermaid format.

package/dist/prompts/specialists.js.map

@@ -1 +1 @@
-{"version":3,"file":"specialists.js","sourceRoot":"","sources":["../../src/prompts/specialists.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B/B,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBjC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqF5B,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuIhC,CAAA"}
+{"version":3,"file":"specialists.js","sourceRoot":"","sources":["../../src/prompts/specialists.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B/B,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;CAwBjC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2C9B,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8E5B,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgHhC,CAAA"}

package/dist/tm/args-schema.d.ts

@@ -8,15 +8,10 @@
  * ...}}` garbage args in real sessions (the model wrapped its args 3/3
  * times), even though flat args reached execute fine.
  */
+import { type ConfigFileRoots } from "./config-files.js";
+import type { EnvLike } from "./config-layers.js";
 declare function buildArgsSchemas(): Promise<Record<string, Record<string, unknown>>>;
 export { buildArgsSchemas };
-/**
- * tm_ptc_run args — same ZodRawShape treatment (BUG#3 class): a raw shape
- * when zod is available, descriptors otherwise.  Kept separate from
- * buildArgsSchemas because buildPtcRunTool is sync; tm/index awaits this
- * once and passes the result in as `deps.args`.
- */
-export declare function buildPtcArgsSchema(): Promise<Record<string, unknown>>;
 /**
  * tm_webfetch args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.  tm/index awaits this and passes the result
@@ -40,37 +35,17 @@ export declare function buildWebfetchArgsSchema(): Promise<Record<string, unknow
  * The §6m-s anti-drift test asserts the descriptor names every
  * SEARCH_ENGINE_NAMES entry and none of the removed engines.
  */
-export declare function buildSearchArgsSchema(defaultEngine?: string): Promise<Record<string, unknown>>;
+export declare function buildSearchArgsSchema(defaultEngine?: string, layeredInput?: {
+    env?: EnvLike;
+    roots?: ConfigFileRoots;
+}): Promise<Record<string, unknown>>;
 /**
  * tm_memory args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.
  */
 export declare function buildMemoryArgsSchema(): Promise<Record<string, unknown>>;
-/**
- * tm_browser args — same ZodRawShape treatment (BUG#3 class); descriptor
- * fallback when zod is absent.
- *
- * STRIP BEHAVIOR / WHY EVERY FIELD IS DECLARED: this is a RAW shape, never
- * wrapped in z.object() (BUG#3), so no zod-level .strip()/.passthrough()
- * applies and execute() reads rawArgs verbatim.  But the host serializes
- * exactly these keys into the LLM parameter spec — an undeclared field is
- * invisible to the model and never reaches browser.ts, i.e. the shape is a
- * CLOSED param surface in effect.  T5's 16 playwright verbs
- * (BROWSER_PLAYWRIGHT_ACTIONS, browser.ts:505) + the 5 compat verbs consume
- * 19 fields across execute/act (args.uid/selector/targetUid/targetSelector/
- * text/key/function/expression/filePath/files/index/timeoutMs/dialogAction/
- * promptText/clear/fullPage/image, browser.ts act() + execute()) — every one
- * is declared below, or the corresponding verb silently loses its input.
- *
- * `headless` is DELIBERATELY not declared (2026-09-18): it used to be a model
- * arg, `Boolean("false")` read as true, and one such call pinned the whole
- * host process to a headless browser that every anti-bot gate then rejected.
- * Mode is an operator setting (TM_BROWSER_HEADLESS) — a closed surface here
- * is the fix, not a validation layer.
- */
-export declare function buildBrowserArgsSchema(): Promise<Record<string, unknown>>;
 /** tm_board_write — four strings, and the shape of the PATH is the tool's
  *  business, not the model's (that is what makes it safe to hand a writer to a
- *  role that owns no file tool). */
+ *  role that owns no write-capable file tool). */
 export declare function buildBoardArgsSchema(): Promise<Record<string, unknown>>;
 //# sourceMappingURL=args-schema.d.ts.map

package/dist/tm/args-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"args-schema.d.ts","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAuCH,iBAAe,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAuFlF;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;;GAKG;AACH,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2D3E;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0ChF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA2BlC;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+C9E;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAyE/E;AACD;;oCAEoC;AACpC,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoB7E"}
+{"version":3,"file":"args-schema.d.ts","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAChF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAkCjD,iBAAe,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CA4DlF;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;GAIG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0ChF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,qBAAqB,CACzC,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,eAAe,CAAA;CAAE,GACxD,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAmClC;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA+C9E;AAED;;kDAEkD;AAClD,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoB7E"}

package/dist/tm/args-schema.js

@@ -9,9 +9,7 @@
  * times), even though flat args reached execute fine.
  */
 import { resolveTmConfig } from "./config.js";
-// The browser verb list lives in ONE place (browser.ts).  A second hand-written
-// copy here is how a shipped verb went missing from the tool schema.
-import { BROWSER_ACTION_MENU, BROWSER_PLAYWRIGHT_ACTIONS } from "./browser.js";
+import { resolveLayeredTmConfig } from "./config-files.js";
 /**
  * Load zod when the host environment provides it (opencode ships it as a
  * peer); fall back to plain arg descriptors so the plugin never hard-depends
@@ -42,35 +40,12 @@ async function buildArgsSchemas() {
     const z = await loadZod();
     if (!z) {
         return {
-            tm_read: describe(null, null, "path: string (required)"),
-            tm_grep: describe(null, null, "pattern: string (required), path: string (optional)"),
-            tm_bash: describe(null, null, "command: string (required, read-only allowlisted)"),
             tm_fetch: describe(null, null, "ref: string (required), access_token: string, offset: int, limit: int, mode: lines|structure, fields: dot-path (json handle projection)"),
         };
     }
     const zz = z;
     // RAW SHAPES — no zz.object() wrapper (BUG#3).
     return {
-        tm_read: {
-            path: zz
-                .string()
-                .describe("File path, relative to the project root (or absolute within it). Env files (.env, *.env, .bashrc family) are rejected — same R6 source as the built-in read."),
-        },
-        tm_grep: {
-            pattern: zz.string().describe("Regex to search (ripgrep syntax)."),
-            // describe-LAST on every optional chain — zod v4 drops a description
-            // applied before .optional() when the shape is serialized (see
-            // buildMemoryArgsSchema); a required field's describe stays first.
-            path: zz
-                .string()
-                .optional()
-                .describe("Optional directory scope, relative to the project root."),
-        },
-        tm_bash: {
-            command: zz
-                .string()
-                .describe("Read-only shell command (allowlisted heads only). bash on POSIX, PowerShell-like on Windows."),
-        },
         tm_fetch: {
             ref: zz
                 .string()
@@ -103,47 +78,6 @@ async function buildArgsSchemas() {
     };
 }
 export { buildArgsSchemas };
-/**
- * tm_ptc_run args — same ZodRawShape treatment (BUG#3 class): a raw shape
- * when zod is available, descriptors otherwise.  Kept separate from
- * buildArgsSchemas because buildPtcRunTool is sync; tm/index awaits this
- * once and passes the result in as `deps.args`.
- */
-export async function buildPtcArgsSchema() {
-    const z = await loadZod();
-    if (!z) {
-        return {
-            program: { descriptor: "program: string (required, async fn body, ≤TM_PTC_MAX_PROGRAM_CHARS)" },
-            label: { descriptor: "label: string (optional, ≤80 chars)" },
-            budgets: { descriptor: "budgets: { max_calls?, max_errors?, timeout_ms? } (optional, tighten-only; any other key is rejected)" },
-        };
-    }
-    const zz = z;
-    return {
-        program: zz
-            .string()
-            .describe("Async function body. Available: tm.read(args), tm.grep(args), tm.bash(args), tm.fetch(args) — each returns {ok:true, data} or {ok:false, error:{tool,phase,line?,message}}. `return` a value for the aggregation summary."),
-        // Wave B Minor③: zod v4 DROPS a description set before .optional() when
-        // the shape is serialized, so every optional chain here is describe-LAST
-        // (matches buildMemoryArgsSchema / buildBrowserArgsSchema).
-        label: zz.string().optional().describe("Optional run label (≤80 chars)."),
-        // Fix batch T1: an EXPLICIT zod object — z.any() let host-side arg
-        // handling mangle the budgets value so parsePtcArgs never saw it and
-        // the caller's budgets silently fell back to the defaults.
-        // Wave B Minor②: .strict() rejects unknown budget keys (a typo like
-        // max_call silently read as an omitted default before — now it fails
-        // loudly).  parsePtcArgs enforces the same at the runtime layer.
-        budgets: zz
-            .object({
-            max_calls: zz.number().int().min(1).optional().describe("Max bridged tm_* calls (tighten-only)."),
-            max_errors: zz.number().int().min(1).optional().describe("Max failed bridged calls (tighten-only)."),
-            timeout_ms: zz.number().int().min(1).optional().describe("Wall-clock budget in ms (floor 5000, tighten-only)."),
-        })
-            .strict()
-            .optional()
-            .describe("Optional budgets object { max_calls?, max_errors?, timeout_ms? } — tighten-only, clamped to the TM_PTC_* ceilings. Unknown keys are rejected."),
-    };
-}
 /**
  * tm_webfetch args — same ZodRawShape treatment (BUG#3 class); descriptor
  * fallback when zod is absent.  tm/index awaits this and passes the result
@@ -195,9 +129,17 @@ export async function buildWebfetchArgsSchema() {
  * The §6m-s anti-drift test asserts the descriptor names every
  * SEARCH_ENGINE_NAMES entry and none of the removed engines.
  */
-export async function buildSearchArgsSchema(defaultEngine) {
+export async function buildSearchArgsSchema(defaultEngine, layeredInput) {
     const { AUTO_ENGINE_KEY, SEARCH_ENGINE_NAMES } = await import("./search.js");
-    const defEngine = (defaultEngine && defaultEngine.trim()) || resolveTmConfig().searchDefaultEngine || AUTO_ENGINE_KEY;
+    // The descriptor's default MUST match the runtime's.  When the caller hands
+    // us the layered view's inputs we resolve through the SAME file-aware path;
+    // otherwise we fall back to env-only — a bare call (a test) must never read
+    // the user's real ~/.config/opencode.
+    const defEngine = (defaultEngine && defaultEngine.trim()) ||
+        (layeredInput
+            ? resolveLayeredTmConfig(layeredInput.env ?? process.env, layeredInput.roots).cfg.searchDefaultEngine
+            : resolveTmConfig().searchDefaultEngine) ||
+        AUTO_ENGINE_KEY;
     const engineList = `${AUTO_ENGINE_KEY}|${SEARCH_ENGINE_NAMES.join("|")}`;
     const engineDesc = `engine: ${engineList} (optional, default ${defEngine}). ` +
         `"${AUTO_ENGINE_KEY}" classifies the query and fans the matching engines out in parallel ` +
@@ -262,92 +204,9 @@ export async function buildMemoryArgsSchema() {
             .describe("compact only: absent = dry-run (report planned merges), true = perform them (originals backed up under memories/.compact-backup/)."),
     };
 }
-/**
- * tm_browser args — same ZodRawShape treatment (BUG#3 class); descriptor
- * fallback when zod is absent.
- *
- * STRIP BEHAVIOR / WHY EVERY FIELD IS DECLARED: this is a RAW shape, never
- * wrapped in z.object() (BUG#3), so no zod-level .strip()/.passthrough()
- * applies and execute() reads rawArgs verbatim.  But the host serializes
- * exactly these keys into the LLM parameter spec — an undeclared field is
- * invisible to the model and never reaches browser.ts, i.e. the shape is a
- * CLOSED param surface in effect.  T5's 16 playwright verbs
- * (BROWSER_PLAYWRIGHT_ACTIONS, browser.ts:505) + the 5 compat verbs consume
- * 19 fields across execute/act (args.uid/selector/targetUid/targetSelector/
- * text/key/function/expression/filePath/files/index/timeoutMs/dialogAction/
- * promptText/clear/fullPage/image, browser.ts act() + execute()) — every one
- * is declared below, or the corresponding verb silently loses its input.
- *
- * `headless` is DELIBERATELY not declared (2026-09-18): it used to be a model
- * arg, `Boolean("false")` read as true, and one such call pinned the whole
- * host process to a headless browser that every anti-bot gate then rejected.
- * Mode is an operator setting (TM_BROWSER_HEADLESS) — a closed surface here
- * is the fix, not a validation layer.
- */
-export async function buildBrowserArgsSchema() {
-    const z = await loadZod();
-    // Derived from the action table itself (browser.ts) — the hand-written verb
-    // list here is how `new_page` and `close_page` went missing from the schema
-    // while the gate accepted them.
-    const ACTION_LIST = `${BROWSER_ACTION_MENU} (required) — the ${BROWSER_PLAYWRIGHT_ACTIONS.length} chrome-devtools-mcp verbs, ` +
-        `plus open|navigate|read|screenshot|close (compat) and allow_host (ask the user to un-block ONE script domain).`;
-    if (!z) {
-        return {
-            action: { descriptor: `action: ${ACTION_LIST}` },
-            id: { descriptor: 'id: which browser ("b1" from open) — one per agent; required once more than one is live, another agent\'s id is refused' },
-            url: { descriptor: "url: string (open/navigate/navigate_page/new_page, allowlisted https)" },
-            host: { descriptor: "host: one bare domain for allow_host (no wildcards, no URL, no port)" },
-            image: { descriptor: "image: true with take_screenshot — inline the PNG pixels in this result" },
-            uid: { descriptor: "uid: snapshot [uid=eN] token (click/fill/hover/drag/upload_file/wait_for)" },
-            selector: { descriptor: "selector: CSS/text locator escape hatch (only when a snapshot cannot express the node)" },
-            targetUid: { descriptor: "targetUid: drag destination uid" },
-            targetSelector: { descriptor: "targetSelector: drag destination selector" },
-            text: { descriptor: "text: fill value / wait_for visible text" },
-            key: { descriptor: "key: press_key chord, e.g. Enter|Control+A" },
-            function: { descriptor: "function: JS function source for evaluate_script" },
-            expression: { descriptor: "expression: alias of function (evaluate_script)" },
-            filePath: { descriptor: "filePath: local file path for upload_file" },
-            files: { descriptor: "files: alias of filePath — single path or array of paths" },
-            index: { descriptor: "index: select_page target tab index from list_pages" },
-            timeoutMs: { descriptor: "timeoutMs: wait_for budget in ms (default 3000, clamped 100..30000)" },
-            dialogAction: { descriptor: "dialogAction: accept|dismiss for handle_dialog (default accept)" },
-            promptText: { descriptor: "promptText: prompt-dialog reply text for handle_dialog accept" },
-            clear: { descriptor: "clear: drain the console buffer after list_console_messages" },
-            fullPage: { descriptor: "fullPage: take_screenshot captures the full page (default viewport only)" },
-        };
-    }
-    // describe-LAST on every optional chain — zod v4 drops a description set
-    // before .optional() when the shape is serialized (see buildMemoryArgsSchema).
-    const zz = z;
-    const str = (d) => zz.string().optional().describe(d);
-    const bool = (d) => zz.boolean().optional().describe(d);
-    return {
-        action: zz.string().describe(ACTION_LIST),
-        id: str('Which browser to drive — the id `open` returned ("b1"). Each agent gets its OWN browser: the id is required as soon as more than one is live, another agent\'s id is refused with the owner named, and close {id:"all"} closes all of yours.'),
-        url: str("Absolute https URL on an allowlisted host (open/navigate/navigate_page). URL-encode the query (CJK terms too)."),
-        host: str("allow_host only: ONE bare domain whose script the subresource gate blocked (e.g. bkssl.bdimg.com). Wildcards/URLs/ports are refused — the user approves exactly this string."),
-        image: bool("take_screenshot only: inline the PNG pixels into this tool result (default false = path only; pixels cost context, so ask only when the screenshot IS the evidence)."),
-        uid: str("Snapshot [uid=eN] token from the LATEST take_snapshot (click/fill/hover/drag source/upload_file/wait_for)."),
-        selector: str("CSS/text locator escape hatch — only for a node the snapshot cannot express; never guess locators."),
-        targetUid: str("drag destination uid from the latest take_snapshot."),
-        targetSelector: str("drag destination selector escape hatch."),
-        text: str("fill value, or the visible text to wait for with wait_for (uid or text — one of them)."),
-        key: str('press_key chord, e.g. "Enter" or "Control+A".'),
-        function: str("JS function/expression source for evaluate_script (returns the JSON-serialized value)."),
-        expression: str("Alias of function for evaluate_script."),
-        filePath: str("Local file path for upload_file (must exist on disk)."),
-        files: zz.any().optional().describe("Alias of filePath for upload_file — a single path or an array of paths."),
-        index: zz.number().int().min(0).optional().describe("select_page target tab index (0-based, from list_pages)."),
-        timeoutMs: zz.number().int().min(100).optional().describe("wait_for visibility budget in ms (engine default 3000, clamped to 30000)."),
-        dialogAction: str("handle_dialog verdict: accept (default) | dismiss."),
-        promptText: str("Reply text when handle_dialog accepts a prompt()-type dialog."),
-        clear: bool("Drain the buffered console messages after list_console_messages."),
-        fullPage: bool("take_screenshot captures the full page (default: viewport only)."),
-    };
-}
 /** tm_board_write — four strings, and the shape of the PATH is the tool's
  *  business, not the model's (that is what makes it safe to hand a writer to a
- *  role that owns no file tool). */
+ *  role that owns no write-capable file tool). */
 export async function buildBoardArgsSchema() {
     const z = await loadZod();
     if (!z) {

package/dist/tm/args-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"args-schema.js","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,gFAAgF;AAChF,qEAAqE;AACrE,OAAO,EAAE,mBAAmB,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAA;AAE9E;;;;GAIG;AACH,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAA;QAClB,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,GACJ,GAAuB,EAAE,CAAC;YAC1B,GAAqC,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,CAAA;QACN,OAAO,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU;YAClE,CAAC,CAAE,CAA6B;YAChC,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,CAAiC,EACjC,MAAe,EACf,QAAgB;IAEhB,IAAI,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClE,OAAO,MAAiC,CAAA;IAC1C,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,yBAAyB,CAAC;YACxD,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,qDAAqD,CAAC;YACpF,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,mDAAmD,CAAC;YAClF,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,yIAAyI,CAAC;SAC1K,CAAA;IACH,CAAC;IAWD,MAAM,EAAE,GAAG,CAQV,CAAA;IACD,+CAA+C;IAC/C,OAAO;QACL,OAAO,EAAE;YACP,IAAI,EAAE,EAAE;iBACL,MAAM,EAAE;iBACR,QAAQ,CACP,8JAA8J,CAC/J;SACJ;QACD,OAAO,EAAE;YACP,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAClE,qEAAqE;YACrE,+DAA+D;YAC/D,mEAAmE;YACnE,IAAI,EAAE,EAAE;iBACL,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,yDAAyD,CAAC;SACvE;QACD,OAAO,EAAE;YACP,OAAO,EAAE,EAAE;iBACR,MAAM,EAAE;iBACR,QAAQ,CACP,8FAA8F,CAC/F;SACJ;QACD,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,YAAY,EAAE,EAAE;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sEAAsE,CAAC;YACnF,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,KAAK,EAAE,EAAE;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,mEAAmE,CAAC;YAChF,IAAI,EAAE,EAAE;iBACL,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;iBAC5B,QAAQ,EAAE;iBACV,QAAQ,CAAC,uEAAuE,CAAC;YACpF,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,8IAA8I,CAC/I;SACJ;KACF,CAAA;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,OAAO,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC/F,KAAK,EAAE,EAAE,UAAU,EAAE,qCAAqC,EAAE;YAC5D,OAAO,EAAE,EAAE,UAAU,EAAE,uGAAuG,EAAE;SACjI,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAqBV,CAAA;IACD,OAAO;QACL,OAAO,EAAE,EAAE;aACR,MAAM,EAAE;aACR,QAAQ,CACP,2NAA2N,CAC5N;QACH,wEAAwE;QACxE,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACzE,mEAAmE;QACnE,qEAAqE;QACrE,2DAA2D;QAC3D,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,OAAO,EAAE,EAAE;aACR,MAAM,CAAC;YACN,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;YACjG,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACpG,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qDAAqD,CAAC;SAChH,CAAC;aACD,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,+IAA+I,CAChJ;KACJ,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,GAAG,EAAE,EAAE,UAAU,EAAE,sFAAsF,EAAE;YAC3G,MAAM,EAAE,EAAE,UAAU,EAAE,6GAA6G,EAAE;YACrI,KAAK,EAAE,EAAE,UAAU,EAAE,mEAAmE,EAAE;SAC3F,CAAA;IACH,CAAC;IACD,+DAA+D;IAC/D,kEAAkE;IAClE,MAAM,EAAE,GAAG,CAQV,CAAA;IACD,OAAO;QACL,GAAG,EAAE,EAAE;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,yQAAyQ,CAC1Q;QACH,MAAM,EAAE,EAAE;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qMAAqM,CACtM;QACH,2EAA2E;QAC3E,wEAAwE;QACxE,gCAAgC;QAChC,KAAK,EAAE,EAAE;aACN,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,iLAAiL,CAClL;KACJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAsB;IAEtB,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;IAC5E,MAAM,SAAS,GACb,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,mBAAmB,IAAI,eAAe,CAAA;IACrG,MAAM,UAAU,GAAG,GAAG,eAAe,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IACxE,MAAM,UAAU,GACd,WAAW,UAAU,uBAAuB,SAAS,KAAK;QAC1D,IAAI,eAAe,uEAAuE;QAC1F,wEAAwE;QACxE,iGAAiG,CAAA;IACnG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,KAAK,EAAE,EAAE,UAAU,EAAE,6DAA6D,EAAE;YACpF,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;SACnC,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAKV,CAAA;IACD,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;QAC1G,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;KACpD,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,mDAAmD,EAAE;YAC3E,KAAK,EAAE,EAAE,UAAU,EAAE,4BAA4B,EAAE;YACnD,OAAO,EAAE,EAAE,UAAU,EAAE,oCAAoC,EAAE;YAC7D,QAAQ,EAAE,EAAE,UAAU,EAAE,kCAAkC,EAAE;YAC5D,QAAQ,EAAE,EAAE,UAAU,EAAE,oDAAoD,EAAE;YAC9E,cAAc,EAAE,EAAE,UAAU,EAAE,0DAA0D,EAAE;YAC1F,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;YAC/C,KAAK,EAAE,EAAE,UAAU,EAAE,uFAAuF,EAAE;YAC9G,KAAK,EAAE,EAAE,UAAU,EAAE,2EAA2E,EAAE;SACnG,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,mEAAmE;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,EAAE,GAAG,CAMV,CAAA;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACpE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAClF,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACpG,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QACtF,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QACzG,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAChE,KAAK,EAAE,EAAE;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uGAAuG,CAAC;QACpH,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,EAAE,EAAE;aACN,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,oIAAoI,CAAC;KAClJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,4EAA4E;IAC5E,4EAA4E;IAC5E,gCAAgC;IAChC,MAAM,WAAW,GACf,GAAG,mBAAmB,qBAAqB,0BAA0B,CAAC,MAAM,8BAA8B;QAC1G,gHAAgH,CAAA;IAClH,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,WAAW,WAAW,EAAE,EAAE;YAChD,EAAE,EAAE,EAAE,UAAU,EAAE,yHAAyH,EAAE;YAC7I,GAAG,EAAE,EAAE,UAAU,EAAE,uEAAuE,EAAE;YAC5F,IAAI,EAAE,EAAE,UAAU,EAAE,sEAAsE,EAAE;YAC5F,KAAK,EAAE,EAAE,UAAU,EAAE,yEAAyE,EAAE;YAChG,GAAG,EAAE,EAAE,UAAU,EAAE,2EAA2E,EAAE;YAChG,QAAQ,EAAE,EAAE,UAAU,EAAE,wFAAwF,EAAE;YAClH,SAAS,EAAE,EAAE,UAAU,EAAE,iCAAiC,EAAE;YAC5D,cAAc,EAAE,EAAE,UAAU,EAAE,2CAA2C,EAAE;YAC3E,IAAI,EAAE,EAAE,UAAU,EAAE,0CAA0C,EAAE;YAChE,GAAG,EAAE,EAAE,UAAU,EAAE,4CAA4C,EAAE;YACjE,QAAQ,EAAE,EAAE,UAAU,EAAE,kDAAkD,EAAE;YAC5E,UAAU,EAAE,EAAE,UAAU,EAAE,iDAAiD,EAAE;YAC7E,QAAQ,EAAE,EAAE,UAAU,EAAE,2CAA2C,EAAE;YACrE,KAAK,EAAE,EAAE,UAAU,EAAE,0DAA0D,EAAE;YACjF,KAAK,EAAE,EAAE,UAAU,EAAE,qDAAqD,EAAE;YAC5E,SAAS,EAAE,EAAE,UAAU,EAAE,qEAAqE,EAAE;YAChG,YAAY,EAAE,EAAE,UAAU,EAAE,iEAAiE,EAAE;YAC/F,UAAU,EAAE,EAAE,UAAU,EAAE,+DAA+D,EAAE;YAC3F,KAAK,EAAE,EAAE,UAAU,EAAE,6DAA6D,EAAE;YACpF,QAAQ,EAAE,EAAE,UAAU,EAAE,0EAA0E,EAAE;SACrG,CAAA;IACH,CAAC;IACD,yEAAyE;IACzE,+EAA+E;IAC/E,MAAM,EAAE,GAAG,CAYV,CAAA;IACD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC/D,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzC,EAAE,EAAE,GAAG,CAAC,8OAA8O,CAAC;QACvP,GAAG,EAAE,GAAG,CAAC,gHAAgH,CAAC;QAC1H,IAAI,EAAE,GAAG,CAAC,8KAA8K,CAAC;QACzL,KAAK,EAAE,IAAI,CAAC,sKAAsK,CAAC;QACnL,GAAG,EAAE,GAAG,CAAC,4GAA4G,CAAC;QACtH,QAAQ,EAAE,GAAG,CAAC,oGAAoG,CAAC;QACnH,SAAS,EAAE,GAAG,CAAC,qDAAqD,CAAC;QACrE,cAAc,EAAE,GAAG,CAAC,yCAAyC,CAAC;QAC9D,IAAI,EAAE,GAAG,CAAC,wFAAwF,CAAC;QACnG,GAAG,EAAE,GAAG,CAAC,+CAA+C,CAAC;QACzD,QAAQ,EAAE,GAAG,CAAC,wFAAwF,CAAC;QACvG,UAAU,EAAE,GAAG,CAAC,wCAAwC,CAAC;QACzD,QAAQ,EAAE,GAAG,CAAC,uDAAuD,CAAC;QACtE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yEAAyE,CAAC;QAC9G,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0DAA0D,CAAC;QAC/G,SAAS,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2EAA2E,CAAC;QACtI,YAAY,EAAE,GAAG,CAAC,oDAAoD,CAAC;QACvE,UAAU,EAAE,GAAG,CAAC,+DAA+D,CAAC;QAChF,KAAK,EAAE,IAAI,CAAC,kEAAkE,CAAC;QAC/E,QAAQ,EAAE,IAAI,CAAC,kEAAkE,CAAC;KACnF,CAAA;AACH,CAAC;AACD;;oCAEoC;AACpC,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,IAAI,EAAE,EAAE,UAAU,EAAE,mCAAmC,EAAE;YACzD,KAAK,EAAE,EAAE,UAAU,EAAE,8BAA8B,EAAE;YACrD,OAAO,EAAE,EAAE,UAAU,EAAE,0CAA0C,EAAE;YACnE,OAAO,EAAE,EAAE,UAAU,EAAE,uEAAuE,EAAE;SACjG,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAEV,CAAA;IACD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC7D,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uKAAuK,CAAC;QACnM,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2KAA2K,CAAC;QACxM,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kJAAkJ,CAAC;QACjL,OAAO,EAAE,GAAG,CAAC,gLAAgL,CAAC;KAC/L,CAAA;AACH,CAAC"}
+{"version":3,"file":"args-schema.js","sourceRoot":"","sources":["../../src/tm/args-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,sBAAsB,EAAwB,MAAM,mBAAmB,CAAA;AAGhF;;;;GAIG;AACH,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAA;QAClB,MAAM,GAAG,GAAY,MAAM,MAAM,CAAC,IAAI,CAAC,CAAA;QACvC,MAAM,CAAC,GACJ,GAAuB,EAAE,CAAC;YAC1B,GAAqC,EAAE,OAAO,EAAE,CAAC;YAClD,IAAI,CAAA;QACN,OAAO,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU;YAClE,CAAC,CAAE,CAA6B;YAChC,CAAC,CAAC,IAAI,CAAA;IACV,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CACf,CAAiC,EACjC,MAAe,EACf,QAAgB;IAEhB,IAAI,CAAC,IAAI,OAAQ,CAA0B,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAClE,OAAO,MAAiC,CAAA;IAC1C,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,yIAAyI,CAAC;SAC1K,CAAA;IACH,CAAC;IAWD,MAAM,EAAE,GAAG,CAQV,CAAA;IACD,+CAA+C;IAC/C,OAAO;QACL,QAAQ,EAAE;YACR,GAAG,EAAE,EAAE;iBACJ,MAAM,EAAE;iBACR,QAAQ,CAAC,+DAA+D,CAAC;YAC5E,YAAY,EAAE,EAAE;iBACb,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,sEAAsE,CAAC;YACnF,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,kDAAkD,CAAC;YAC/D,KAAK,EAAE,EAAE;iBACN,MAAM,EAAE;iBACR,GAAG,EAAE;iBACL,GAAG,CAAC,CAAC,CAAC;iBACN,QAAQ,EAAE;iBACV,QAAQ,CAAC,mEAAmE,CAAC;YAChF,IAAI,EAAE,EAAE;iBACL,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;iBAC5B,QAAQ,EAAE;iBACV,QAAQ,CAAC,uEAAuE,CAAC;YACpF,MAAM,EAAE,EAAE;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CACP,8IAA8I,CAC/I;SACJ;KACF,CAAA;AACH,CAAC;AAED,OAAO,EAAE,gBAAgB,EAAE,CAAA;AAE3B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,GAAG,EAAE,EAAE,UAAU,EAAE,sFAAsF,EAAE;YAC3G,MAAM,EAAE,EAAE,UAAU,EAAE,6GAA6G,EAAE;YACrI,KAAK,EAAE,EAAE,UAAU,EAAE,mEAAmE,EAAE;SAC3F,CAAA;IACH,CAAC;IACD,+DAA+D;IAC/D,kEAAkE;IAClE,MAAM,EAAE,GAAG,CAQV,CAAA;IACD,OAAO;QACL,GAAG,EAAE,EAAE;aACJ,MAAM,EAAE;aACR,QAAQ,CACP,yQAAyQ,CAC1Q;QACH,MAAM,EAAE,EAAE;aACP,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CACP,qMAAqM,CACtM;QACH,2EAA2E;QAC3E,wEAAwE;QACxE,gCAAgC;QAChC,KAAK,EAAE,EAAE;aACN,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CACP,iLAAiL,CAClL;KACJ,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAsB,EACtB,YAAyD;IAEzD,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAA;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,4EAA4E;IAC5E,sCAAsC;IACtC,MAAM,SAAS,GACb,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC,YAAY;YACX,CAAC,CAAC,sBAAsB,CAAC,YAAY,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB;YACrG,CAAC,CAAC,eAAe,EAAE,CAAC,mBAAmB,CAAC;QAC1C,eAAe,CAAA;IACjB,MAAM,UAAU,GAAG,GAAG,eAAe,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IACxE,MAAM,UAAU,GACd,WAAW,UAAU,uBAAuB,SAAS,KAAK;QAC1D,IAAI,eAAe,uEAAuE;QAC1F,wEAAwE;QACxE,iGAAiG,CAAA;IACnG,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,KAAK,EAAE,EAAE,UAAU,EAAE,6DAA6D,EAAE;YACpF,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE;SACnC,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAKV,CAAA;IACD,OAAO;QACL,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,6EAA6E,CAAC;QAC1G,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;KACpD,CAAA;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,EAAE,UAAU,EAAE,mDAAmD,EAAE;YAC3E,KAAK,EAAE,EAAE,UAAU,EAAE,4BAA4B,EAAE;YACnD,OAAO,EAAE,EAAE,UAAU,EAAE,oCAAoC,EAAE;YAC7D,QAAQ,EAAE,EAAE,UAAU,EAAE,kCAAkC,EAAE;YAC5D,QAAQ,EAAE,EAAE,UAAU,EAAE,oDAAoD,EAAE;YAC9E,cAAc,EAAE,EAAE,UAAU,EAAE,0DAA0D,EAAE;YAC1F,KAAK,EAAE,EAAE,UAAU,EAAE,wBAAwB,EAAE;YAC/C,KAAK,EAAE,EAAE,UAAU,EAAE,uFAAuF,EAAE;YAC9G,KAAK,EAAE,EAAE,UAAU,EAAE,2EAA2E,EAAE;SACnG,CAAA;IACH,CAAC;IACD,uEAAuE;IACvE,mEAAmE;IACnE,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,EAAE,GAAG,CAMV,CAAA;IACD,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,yCAAyC,CAAC;QACvE,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QACpE,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAClF,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,yDAAyD,CAAC;QACpG,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;QACtF,cAAc,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;QACzG,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAChE,KAAK,EAAE,EAAE;aACN,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,uGAAuG,CAAC;QACpH,yEAAyE;QACzE,wEAAwE;QACxE,yEAAyE;QACzE,4DAA4D;QAC5D,KAAK,EAAE,EAAE;aACN,OAAO,EAAE;aACT,QAAQ,EAAE;aACV,QAAQ,CAAC,oIAAoI,CAAC;KAClJ,CAAA;AACH,CAAC;AAED;;kDAEkD;AAClD,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,CAAC,GAAG,MAAM,OAAO,EAAE,CAAA;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,IAAI,EAAE,EAAE,UAAU,EAAE,mCAAmC,EAAE;YACzD,KAAK,EAAE,EAAE,UAAU,EAAE,8BAA8B,EAAE;YACrD,OAAO,EAAE,EAAE,UAAU,EAAE,0CAA0C,EAAE;YACnE,OAAO,EAAE,EAAE,UAAU,EAAE,uEAAuE,EAAE;SACjG,CAAA;IACH,CAAC;IACD,MAAM,EAAE,GAAG,CAEV,CAAA;IACD,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IAC7D,OAAO;QACL,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,uKAAuK,CAAC;QACnM,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2KAA2K,CAAC;QACxM,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,kJAAkJ,CAAC;QACjL,OAAO,EAAE,GAAG,CAAC,gLAAgL,CAAC;KAC/L,CAAA;AACH,CAAC"}

package/dist/tm/board.d.ts

@@ -2,15 +2,16 @@
  * tm_board_write — the write side of the blackboard (2026-09-23).
  *
  * Why it exists: the board is the one place an oversized deliverable is
- * supposed to go, but reaching it needs a file tool — and three of the six
- * roles carry none.  `architect` and `researcher` have no write/edit/bash at
- * all (a deliberate permission-matrix decision), so every "write the design
- * doc to the board" dispatch ended as `BLACKBOARD WRITE FAILED` with the
- * document pasted inline anyway — the reply shape this team exists to enforce
- * (skeleton + path, never a wall of text) was un-followable for exactly the two
- * roles that produce the longest artifacts.  Even the documented session folder
- * is out of reach: creating it means running `Get-Date`, which those roles
- * cannot run either.
+ * supposed to go, but reaching it needs a write-capable file tool, and three of
+ * the six roles carry none: `architect` and `researcher` get no write/edit/bash
+ * from `whitelist()` and `reviewer` has only the read-only bash whose redirects
+ * P3 refuses — all three keep the read-capable tm_* set, so they are not
+ * tool-less.  Every "write the design doc to the board" dispatch therefore ended
+ * as `BLACKBOARD WRITE FAILED` with the document pasted inline anyway — the
+ * reply shape this team exists to enforce (skeleton + path, never a wall of
+ * text) was un-followable for exactly the two roles that produce the longest
+ * artifacts.  Even the documented session folder is out of reach: creating it
+ * means running `Get-Date`, which those roles cannot run either.
  *
  * What this is NOT: a general file writer.  It places a NEW markdown file
  * inside `<board-root>/<session-key>/<task-slug>/` and nothing else — no

package/dist/tm/board.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/tm/board.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD;yDACyD;AACzD,eAAO,MAAM,uBAAuB,SAAU,CAAA;AAC9C;oEACoE;AACpE,eAAO,MAAM,2BAA2B,MAAM,CAAA;AAC9C,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAE7C;;4EAE4E;AAC5E,wBAAgB,eAAe,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAM9D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,SAAK,GAAG,MAAM,CAU3D;AAED;yDACyD;AACzD,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAO5D;AAED;;iCAEiC;AACjC,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED;;;;gEAIgE;AAChE,wBAAgB,UAAU,CACxB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAaxC;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;CAChC,GAAG,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkClC;AAED;;yBAEyB;AACzB,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAiB5F;AAED;;;oDAGoD;AACpD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAa7D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,SAAS,EAAE,WAAW,CAAA;IACtB;;gEAE4D;IAC5D,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB,GAAG;IACF,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;CACjF,CA4FA"}
+{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/tm/board.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH,OAAO,KAAK,EAAkB,UAAU,EAAE,MAAM,aAAa,CAAA;AAE7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAEjD;yDACyD;AACzD,eAAO,MAAM,uBAAuB,SAAU,CAAA;AAC9C;oEACoE;AACpE,eAAO,MAAM,2BAA2B,MAAM,CAAA;AAC9C,eAAO,MAAM,2BAA2B,KAAK,CAAA;AAE7C;;4EAE4E;AAC5E,wBAAgB,eAAe,CAAC,GAAG,GAAE,IAAiB,GAAG,MAAM,CAM9D;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,SAAK,GAAG,MAAM,CAU3D;AAED;yDACyD;AACzD,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAO5D;AAED;;iCAEiC;AACjC,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED;;;;gEAIgE;AAChE,wBAAgB,UAAU,CACxB,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAaxC;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,CAAA;CAChC,GAAG,WAAW,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAkClC;AAED;;yBAEyB;AACzB,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAiB5F;AAED;;;oDAGoD;AACpD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAa7D;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,SAAS,EAAE,WAAW,CAAA;IACtB;;gEAE4D;IAC5D,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC9B,8CAA8C;IAC9C,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;CACrB,GAAG;IACF,WAAW,EAAE,MAAM,CAAA;IACnB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC7B,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;CACjF,CA4FA"}

package/dist/tm/board.js

@@ -2,15 +2,16 @@
  * tm_board_write — the write side of the blackboard (2026-09-23).
  *
  * Why it exists: the board is the one place an oversized deliverable is
- * supposed to go, but reaching it needs a file tool — and three of the six
- * roles carry none.  `architect` and `researcher` have no write/edit/bash at
- * all (a deliberate permission-matrix decision), so every "write the design
- * doc to the board" dispatch ended as `BLACKBOARD WRITE FAILED` with the
- * document pasted inline anyway — the reply shape this team exists to enforce
- * (skeleton + path, never a wall of text) was un-followable for exactly the two
- * roles that produce the longest artifacts.  Even the documented session folder
- * is out of reach: creating it means running `Get-Date`, which those roles
- * cannot run either.
+ * supposed to go, but reaching it needs a write-capable file tool, and three of
+ * the six roles carry none: `architect` and `researcher` get no write/edit/bash
+ * from `whitelist()` and `reviewer` has only the read-only bash whose redirects
+ * P3 refuses — all three keep the read-capable tm_* set, so they are not
+ * tool-less.  Every "write the design doc to the board" dispatch therefore ended
+ * as `BLACKBOARD WRITE FAILED` with the document pasted inline anyway — the
+ * reply shape this team exists to enforce (skeleton + path, never a wall of
+ * text) was un-followable for exactly the two roles that produce the longest
+ * artifacts.  Even the documented session folder is out of reach: creating it
+ * means running `Get-Date`, which those roles cannot run either.
  *
  * What this is NOT: a general file writer.  It places a NEW markdown file
  * inside `<board-root>/<session-key>/<task-slug>/` and nothing else — no
@@ -265,7 +266,7 @@ export function buildBoardWriteTool(deps) {
         execute,
     };
 }
-const DESCRIPTION = `Blackboard file writer — the deliverable channel for roles that own no file tools (architect and researcher carry no write/edit/bash, so a board write through the host tools is impossible for them by construction). Writes ONE new markdown file at <board-root>/<session-key>/<task-slug>/NN-<role>-<topic>[-rN].md, where NN and -rN are chosen by this tool (never overwritten: a revision is a new round file, so the board keeps its audit trail). Args: task (slug), topic (slug), content, and optionally session — pass the folder the lead already created so every role in this conversation writes into the SAME folder; omit it and the tool stamps yyyyMMdd-HHmmss for you. The role in the filename comes from the host's ctx, not from what you claim. Scope is enforced, not polite: segments are sanitized, the target's realpath must stay under the board root (a symlinked task dir pointing outside is refused), the name always ends in .md so no .env/rc file can be produced, and content is capped by TM_BOARD_MAX_CHARS with a per-session file cap. The reply is the absolute path plus the byte count and NEVER the content — pasting the deliverable back is the exact thing this channel exists to prevent, so after a successful write the report carries skeleton + path, not the document.`;
+const DESCRIPTION = `Blackboard file writer — the deliverable channel for roles that own no write-capable file tool (architect and researcher carry no write/edit/bash, so a board write through the host's file tools is impossible for them by construction). Writes ONE new markdown file at <board-root>/<session-key>/<task-slug>/NN-<role>-<topic>[-rN].md, where NN and -rN are chosen by this tool (never overwritten: a revision is a new round file, so the board keeps its audit trail). Args: task (slug), topic (slug), content, and optionally session — pass the folder the lead already created so every role in this conversation writes into the SAME folder; omit it and the tool stamps yyyyMMdd-HHmmss for you. The role in the filename comes from the host's ctx, not from what you claim. Scope is enforced, not polite: segments are sanitized, the target's realpath must stay under the board root (a symlinked task dir pointing outside is refused), the name always ends in .md so no .env/rc file can be produced, and content is capped by TM_BOARD_MAX_CHARS with a per-session file cap. The reply is the absolute path plus the byte count and NEVER the content — pasting the deliverable back is the exact thing this channel exists to prevent, so after a successful write the report carries skeleton + path, not the document.`;
 const FALLBACK_ARGS = {
     task: { descriptor: "task: task-slug folder (the one the dispatch named)" },
     topic: { descriptor: "topic: file topic, becomes the name after NN-<role>-" },