acuvo-code 0.4.2 → 0.4.4

package/ENTERPRISE.md

@@ -189,7 +189,7 @@ are the numbers to quote. Counting is the first thing a reviewer does.
 
 ⚠️ **This said "18 shipped files", then "41", then "90", then "101", then "108", and every
 one went stale in turn.** The package ships **120 files — 118 in `lib/`, 2 in
-`bin/` — about 77954 lines**, with **236 test files** beside them (counted 2026-08-22).
+`bin/` — about 78091 lines**, with **237 test files** beside them (counted 2026-08-22).
 
 ⭐ **AND THE 108 WENT STALE IN THE MOST INSTRUCTIVE WAY POSSIBLE: THREE OF THE FILES IT
 MISSED WERE REACHABLE FROM NOTHING.** `wiring-reach.test.mjs` was naming

package/bin/acuvo.mjs

@@ -1511,6 +1511,13 @@ ${formatBoard(listed)}
     billing,
     canRun: mode,
     interactive: false,
+    /**
+     * ⚠️ THE PAINTER IS BUILT HERE, WHERE THE STREAM IS KNOWN. `colourEnabled`
+     * owns NO_COLOR, FORCE_COLOR, TERM=dumb and TTY detection — so a redirected
+     * run gets a plain banner and nobody has to remember an `if` at the call
+     * site.
+     */
+    paint: createPainter(colourEnabled()),
   });
   if (opts.json) process.stderr.write(banner);
   else process.stdout.write(banner);

package/lib/banner.mjs

@@ -1,125 +1,155 @@
-/**
- * ── ⭐⭐⭐ WHAT YOU SEE WHEN YOU TYPE `acuvo` ────────────────────────────────
- *
- * Roman, 2026-08-22, having typed it: *"it's not opening as a typable terminal,
- * with acuvo logo top left and details up top etc, like how claude code opens.
- * have you actually designed the page?"* — and then: *"no we want OUR logo"*.
- *
- * So this is the real mark, not letters spelling the name. It is
- * `console/public/brand/acuvo-mark.png` — the angular A — resampled to
- * half-blocks at 14x14 and embedded as text.
- *
- * ── ⚠️ WHY IT IS EMBEDDED RATHER THAN DECODED AT RUNTIME ────────────────────
- *
- * This package has ZERO dependencies, deliberately, and Node cannot decode a
- * PNG without one. Converting at build time and pasting the result keeps that
- * promise and costs nothing at startup. If the mark ever changes, re-run the
- * conversion — the logo is DERIVED from the brand asset, not drawn by hand, so
- * it stays honest to it.
- *
- * ── ⚠️ THE CONSTRAINTS, WHICH ARE NOT PREFERENCES ───────────────────────────
- *
- * · **Half-block glyphs only** (▀ ▄ █). Braille and box-drawing render as tofu
- *   in cmd.exe and in many CI log viewers, and a logo that renders as question
- *   marks is worse than no logo — on the exact platform this is developed on.
- * · **No colour escapes here.** The caller owns colour and honours NO_COLOR; a
- *   module that hard-codes them emits garbage the moment output is piped.
- * · **Every line under 80 columns.** The narrowest terminal in real use is 80,
- *   and a wrapped banner does not read as dense, it reads as broken.
- *
- * ⭐ A NOTE ON DOING BETTER: `lib/terminal-graphics.mjs` can send a real PNG
- * inline on Kitty and iTerm2. It is deliberately NOT used here — Windows
- * Terminal speaks neither protocol, so the block art is what most users would
- * see anyway, and one rendering that is the same everywhere beats two that
- * disagree.
- */
-
-/**
- * The Acuvo mark, resampled from the brand PNG. Seven rows: tall enough to be
- * the mark rather than a smudge, short enough for something run forty times a
- * day rather than opened once.
- */
-const MARK = [
-  '      ▄█',
-  '     ▄███',
-  '    ▄█▀▀██',
-  '   ▄█▀  ▀██',
-  '  ▄█▀ ██ ▀██',
-  ' ▄████▀▀█████',
-  '█▀      █▀  ▀█',
-];
-
-const MARK_WIDTH = Math.max(...MARK.map((l) => l.length));
-const GUTTER = 2;
-export const MAX_BANNER_COLUMNS = 80;
-
-/** Columns left for the detail rows once the mark and gutter are placed. */
-const TEXT_COLUMNS = MAX_BANNER_COLUMNS - MARK_WIDTH - GUTTER;
-
-/**
- * Build the opening screen: mark on the left, facts on the right.
- *
- * @param {object} o
- * @param {string} o.version
- * @param {string} o.workspace   already shortened by the caller
- * @param {string} o.model
- * @param {string} o.billing     who this run will charge
- * @param {string} o.canRun      what it may execute, or that it may not
- * @param {boolean} [o.interactive] whether a prompt follows
- * @returns {string}
- */
-export function openingScreen({ version, workspace, model, billing, canRun, interactive = false }) {
-  /**
-   * ── ⚠️⚠️ ELIDED, BECAUSE THE VALUES ARE NOT OURS ────────────────────────────
-   *
-   * Every value arrives at runtime: a deep monorepo path, a long model id, the
-   * shell-mode warning. The first version assumed they would be short and its
-   * own test caught it wrapping at 80 columns on ordinary inputs.
-   *
-   * ⭐ ELIDED IN THE MIDDLE, NOT THE END. The informative parts of a path are
-   * the drive and the leaf; chopping the tail leaves
-   * `C:\Users\somebody\Projects\a-`, which identifies nothing. Same for a model
-   * id, where the family is at the front and the variant at the back.
-   */
-  const room = TEXT_COLUMNS - 11;
-  const fit = (v) => {
-    const s = String(v ?? '');
-    if (s.length <= room) return s;
-    const head = Math.ceil((room - 1) / 2);
-    return `${s.slice(0, head)}…${s.slice(s.length - (room - 1 - head))}`;
-  };
-
-  const right = [
-    `ACUVO CODE${version ? `  ${version}` : ''}`,
-    '',
-    `workspace  ${fit(workspace)}`,
-    `model      ${fit(model)}`,
-    `billing    ${fit(billing)}`,
-    `can run    ${fit(canRun)}`,
-    '',
-  ];
-
-  /**
-   * ⚠️ THE TWO COLUMNS ARE ZIPPED, NOT CONCATENATED, and the row counts are
-   * allowed to differ — whichever is shorter simply runs out. Assuming they
-   * match would break the layout the first time a row is added to either side.
-   */
-  const rows = Math.max(MARK.length, right.length);
-  const lines = [''];
-  for (let i = 0; i < rows; i += 1) {
-    const mark = (MARK[i] ?? '').padEnd(MARK_WIDTH + GUTTER);
-    const text = right[i] ?? '';
-    lines.push(`${mark}${text}`.trimEnd());
-  }
-  lines.push('');
-
-  /**
-   * ⚠️ ONLY WHEN A PROMPT ACTUALLY FOLLOWS. Printing "type what you want done"
-   * above a one-shot run that has already been given its task is an instruction
-   * for something the user cannot do, on the screen of a thing already working.
-   */
-  if (interactive) {
-    lines.push('  Type what you want done.   /help for commands  ·  exit to leave', '');
-  }
-  return lines.join('\n');
-}
+/**
+ * ── ⭐⭐⭐ WHAT YOU SEE WHEN YOU TYPE `acuvo` ────────────────────────────────
+ *
+ * Roman, 2026-08-22, having typed it: *"it's not opening as a typable terminal,
+ * with acuvo logo top left and details up top etc, like how claude code opens.
+ * have you actually designed the page?"* — and then: *"no we want OUR logo"*.
+ *
+ * So this is the real mark, not letters spelling the name. It is
+ * `console/public/brand/acuvo-mark.png` — the angular A — resampled to
+ * half-blocks at 14x14 and embedded as text.
+ *
+ * ── ⚠️ WHY IT IS EMBEDDED RATHER THAN DECODED AT RUNTIME ────────────────────
+ *
+ * This package has ZERO dependencies, deliberately, and Node cannot decode a
+ * PNG without one. Converting at build time and pasting the result keeps that
+ * promise and costs nothing at startup. If the mark ever changes, re-run the
+ * conversion — the logo is DERIVED from the brand asset, not drawn by hand, so
+ * it stays honest to it.
+ *
+ * ── ⚠️ THE CONSTRAINTS, WHICH ARE NOT PREFERENCES ───────────────────────────
+ *
+ * · **Half-block glyphs only** (▀ ▄ █). Braille and box-drawing render as tofu
+ *   in cmd.exe and in many CI log viewers, and a logo that renders as question
+ *   marks is worse than no logo — on the exact platform this is developed on.
+ * · **No colour escapes here.** The caller owns colour and honours NO_COLOR; a
+ *   module that hard-codes them emits garbage the moment output is piped.
+ * · **Every line under 80 columns.** The narrowest terminal in real use is 80,
+ *   and a wrapped banner does not read as dense, it reads as broken.
+ *
+ * ⭐ A NOTE ON DOING BETTER: `lib/terminal-graphics.mjs` can send a real PNG
+ * inline on Kitty and iTerm2. It is deliberately NOT used here — Windows
+ * Terminal speaks neither protocol, so the block art is what most users would
+ * see anyway, and one rendering that is the same everywhere beats two that
+ * disagree.
+ */
+
+/**
+ * The Acuvo mark, resampled from the brand PNG. Seven rows: tall enough to be
+ * the mark rather than a smudge, short enough for something run forty times a
+ * day rather than opened once.
+ */
+const MARK = [
+  '      ▄█',
+  '     ▄███',
+  '    ▄█▀▀██',
+  '   ▄█▀  ▀██',
+  '  ▄█▀ ██ ▀██',
+  ' ▄████▀▀█████',
+  '█▀      █▀  ▀█',
+];
+
+const MARK_WIDTH = Math.max(...MARK.map((l) => l.length));
+const GUTTER = 2;
+export const MAX_BANNER_COLUMNS = 80;
+
+/** Columns left for the detail rows once the mark and gutter are placed. */
+const TEXT_COLUMNS = MAX_BANNER_COLUMNS - MARK_WIDTH - GUTTER;
+
+/**
+ * Build the opening screen: mark on the left, facts on the right.
+ *
+ * @param {object} o
+ * @param {string} o.version
+ * @param {string} o.workspace   already shortened by the caller
+ * @param {string} o.model
+ * @param {string} o.billing     who this run will charge
+ * @param {string} o.canRun      what it may execute, or that it may not
+ * @param {boolean} [o.interactive] whether a prompt follows
+ * @returns {string}
+ */
+export function openingScreen({ version, workspace, model, billing, canRun, interactive = false, paint = null }) {
+  /**
+   * ── ⭐ THE MARK IS BRAND GREEN, AND ONLY THE MARK ────────────────────────────
+   *
+   * Roman: *"can you colour our logo green in the terminal?"* #C8E91E, sampled
+   * from the brand PNG rather than picked by eye.
+   *
+   * ⚠️ THE PAINTER IS INJECTED, NOT IMPORTED. The caller already decided whether
+   * this stream can take colour — it owns NO_COLOR, FORCE_COLOR, TERM=dumb and
+   * TTY detection. A module that reaches for colour itself will eventually
+   * disagree with that decision and write escapes into somebody's redirected
+   * file.
+   *
+   * ⚠️ AND ONLY THE LOGO. Colouring the detail rows would make the one line that
+   * must be read as a warning — `billing: YOUR OWN OpenRouter key` — compete
+   * with decoration.
+   */
+  const brand = paint?.brand ?? ((s) => s);
+  /**
+   * ── ⚠️⚠️ ELIDED, BECAUSE THE VALUES ARE NOT OURS ────────────────────────────
+   *
+   * Every value arrives at runtime: a deep monorepo path, a long model id, the
+   * shell-mode warning. The first version assumed they would be short and its
+   * own test caught it wrapping at 80 columns on ordinary inputs.
+   *
+   * ⭐ ELIDED IN THE MIDDLE, NOT THE END. The informative parts of a path are
+   * the drive and the leaf; chopping the tail leaves
+   * `C:\Users\somebody\Projects\a-`, which identifies nothing. Same for a model
+   * id, where the family is at the front and the variant at the back.
+   */
+  const room = TEXT_COLUMNS - 11;
+  const fit = (v) => {
+    const s = String(v ?? '');
+    if (s.length <= room) return s;
+    const head = Math.ceil((room - 1) / 2);
+    return `${s.slice(0, head)}…${s.slice(s.length - (room - 1 - head))}`;
+  };
+
+  const right = [
+    `ACUVO CODE${version ? `  ${version}` : ''}`,
+    '',
+    `workspace  ${fit(workspace)}`,
+    `model      ${fit(model)}`,
+    `billing    ${fit(billing)}`,
+    `can run    ${fit(canRun)}`,
+    '',
+  ];
+
+  /**
+   * ⚠️ THE TWO COLUMNS ARE ZIPPED, NOT CONCATENATED, and the row counts are
+   * allowed to differ — whichever is shorter simply runs out. Assuming they
+   * match would break the layout the first time a row is added to either side.
+   */
+  const rows = Math.max(MARK.length, right.length);
+  const lines = [''];
+  for (let i = 0; i < rows; i += 1) {
+    const text = right[i] ?? '';
+    /**
+     * ⚠️ PADDED FIRST, PAINTED SECOND — escape codes have no width, so padding a
+     * coloured string aligns the text against invisible bytes and the whole
+     * right-hand column drifts.
+     *
+     * ⚠️⚠️ AND PADDED ONLY WHEN SOMETHING FOLLOWS. On a mark-only row the
+     * padding sits INSIDE the colour, before the reset, where the `trimEnd`
+     * below cannot reach it — so the coloured banner carried trailing
+     * whitespace the plain one did not. Invisible, but it means colour changed
+     * the layout, which is exactly what the guard forbids.
+     */
+    const rawMark = MARK[i] ?? '';
+    const padded = text ? rawMark.padEnd(MARK_WIDTH + GUTTER) : rawMark;
+    const mark = MARK[i] ? brand(padded) : padded;
+    lines.push(`${mark}${text}`.trimEnd());
+  }
+  lines.push('');
+
+  /**
+   * ⚠️ ONLY WHEN A PROMPT ACTUALLY FOLLOWS. Printing "type what you want done"
+   * above a one-shot run that has already been given its task is an instruction
+   * for something the user cannot do, on the screen of a thing already working.
+   */
+  if (interactive) {
+    lines.push('  Type what you want done.   /help for commands  ·  exit to leave', '');
+  }
+  return lines.join('\n');
+}

package/lib/colour.mjs

@@ -32,6 +32,21 @@ const CODES = {
   green: '\x1b[32m',   // it worked
   red: '\x1b[31m',     // it failed or was refused
   cyan: '\x1b[36m',    // a remote thing: MCP, a service
+  /**
+   * ── ⭐ THE BRAND GREEN, SAMPLED FROM THE MARK ITSELF ───────────────────────
+   *
+   * #C8E91E — the most common opaque pixel in
+   * `console/public/brand/acuvo-mark.png`, read rather than eyeballed, so the
+   * logo in a terminal is the same green as the one on the website.
+   *
+   * ⚠️ TRUECOLOR WITH A 256-COLOUR FALLBACK. `ESC[38;2;R;G;Bm` is exact and
+   * widely supported (Windows Terminal, iTerm2, kitty, modern VS Code) — but a
+   * terminal that does not speak it renders the sequence as LITERAL TEXT across
+   * the logo. Index 190 is the nearest lime in the 256-colour cube and is
+   * understood almost everywhere, so it ships unless truecolor is advertised.
+   */
+  brand: '\x1b[38;5;190m',
+  brandTrue: '\x1b[38;2;200;233;30m',
 };
 
 /**
@@ -66,6 +81,16 @@ export function createPainter(enabled = colourEnabled()) {
     green: wrap(CODES.green),
     red: wrap(CODES.red),
     cyan: wrap(CODES.cyan),
+    /**
+     * ⚠️ TRUECOLOR ONLY WHEN THE TERMINAL SAYS SO. `COLORTERM=truecolor` is the
+     * signal every emitter uses; without it a 24-bit sequence can print as raw
+     * text, which would smear escape codes across the first thing a user sees.
+     */
+    brand: wrap(
+      (process.env.COLORTERM === 'truecolor' || process.env.COLORTERM === '24bit')
+        ? CODES.brandTrue
+        : CODES.brand,
+    ),
   };
 }
 

package/lib/turn.mjs

@@ -5135,8 +5135,54 @@ function providerPinWarning(outcome) {
  * and no file on disk. The counted lines below come from the executor's return
  * values, which is the only place that knows.
  */
+/**
+ * ── ⭐⭐⭐ A CONVERSATION IS NOT A BUILD, AND MUST NOT REPORT LIKE ONE ────────
+ *
+ * Roman asked "hi how are you" and got back: a round header, the answer twice,
+ * "No files changed", "⚠ NOTHING WAS RUN, so nothing here is verified", a token
+ * count, a cache percentage and a budget ledger. *"it shouldn't say that stuff."*
+ *
+ * ⭐ HE IS RIGHT, AND EVERY ONE OF THOSE LINES IS CORRECT. They exist because a
+ * BUILD that silently changed nothing, or claimed a test passed without running
+ * it, is a real and expensive failure — those lines are the honesty machinery.
+ * But honesty machinery aimed at a greeting is just noise, and noise is how a
+ * user learns to stop reading the warnings that matter.
+ *
+ * ⚠️ THE RULE IS NOT "BE QUIET", IT IS "REPORT WHAT HAPPENED". A turn that wrote
+ * nothing and ran nothing has nothing to verify, so the verification notice is
+ * answering a question nobody asked. The moment a file is written or a command
+ * runs, every line comes back — including on the same session's next turn.
+ *
+ * ⚠️ ERRORS, WARNINGS AND STOP REASONS ARE NEVER SUPPRESSED. Quiet applies only
+ * to the accounting of a turn that did nothing; a turn that FAILED did something
+ * and says so.
+ */
+export function isConversationalTurn(outcome) {
+  if (!outcome?.ok) return false;
+  /**
+   * ── ⚠️ ZERO TOOL CALLS, NOT "WROTE NOTHING" — MY FIRST RULE WAS TOO BROAD ──
+   *
+   * It asked "did it write or run anything", which made a turn that READ a file
+   * conversational. That is wrong: the user asked it to look at something, it
+   * did, and "No files changed" is a real answer to a real question. An existing
+   * guard caught it — *"a run that truly did nothing still says so plainly"*,
+   * driven with a single `read_file`.
+   *
+   * ⭐ The line is between USING A TOOL and answering from the conversation. A
+   * greeting calls nothing at all, and that is the only case with no work to
+   * account for.
+   */
+  return (outcome.executed ?? []).length === 0;
+}
+
 export function formatSummary(outcome) {
   const lines = [];
+  /**
+   * Computed once, up here, so every gate below reads the same fact — the shape
+   * where two call sites recompute "did anything happen" and quietly disagree is
+   * one this codebase has paid for repeatedly.
+   */
+  const quiet = isConversationalTurn(outcome);
 
   if (!outcome.ok) {
     lines.push('');
@@ -5216,7 +5262,12 @@ export function formatSummary(outcome) {
      * ours to make.
      */
     const ranAProcess = outcome.executed.some((e) => PROCESS_STARTING_VERBS.has(e.name) && e.result?.ok === true);
-    lines.push(ranAProcess
+    /**
+     * ⚠️ NOT ON A CONVERSATIONAL TURN. "No files changed" answers "did the build
+     * do anything?" — a question nobody asked by saying hello. The sentence is
+     * correct and, aimed at a greeting, it is noise.
+     */
+    if (!quiet) lines.push(ranAProcess
       ? 'No files were written through the file tools — but a command ran, and a command can '
         + 'change files this count cannot see. Check `git status` if that matters.'
       : 'No files changed.');
@@ -5350,7 +5401,17 @@ export function formatSummary(outcome) {
           for (const f of p.findings.slice(0, 4)) lines.push(`    ${f}`);
         }
       }
-    } else if (outcome.allowRun && (outcome.maxRounds ?? 1) > 1) {
+    } else if (outcome.allowRun && (outcome.maxRounds ?? 1) > 1 && !quiet) {
+      /**
+       * ⚠️ `!quiet` — A TURN THAT WROTE NOTHING HAS NOTHING TO VERIFY. This
+       * warning exists because a BUILD that claims a test passed without running
+       * it is an expensive lie. Printed under a greeting it is answering a
+       * question nobody asked, and a warning that fires when it does not apply
+       * is how people learn to stop reading warnings.
+       *
+       * ⚠️ IT COMES STRAIGHT BACK the moment a file is written or a command
+       * runs — including on the very next turn of the same session.
+       */
       /**
        * ⚠️ IT NAMES THE CATEGORY, NOT ONE TOOL. This line used to end "the model
        * never called run_command", and by the time three separate verbs could
@@ -5476,7 +5537,8 @@ export function formatSummary(outcome) {
   }
 
   const cost = outcome.usage?.cost;
-  if (typeof cost === 'number') {
+  // ⚠️ A greeting does not need a token count, a cache percentage and a price.
+  if (typeof cost === 'number' && !quiet) {
     const tokens = outcome.usage?.total_tokens;
     const roundsPart = outcome.roundsUsed > 1 ? ` · ${outcome.roundsUsed} rounds` : '';
     lines.push('');
@@ -5512,7 +5574,12 @@ export function formatSummary(outcome) {
    * cost, so the total is an estimate" clause, and a second copy of that
    * arithmetic is how the two would disagree.
    */
-  if (typeof outcome.budgetReport === 'string' && outcome.budgetReport) {
+  /**
+   * ⚠️ `!quiet` — a budget ledger under a greeting is the same noise as the
+   * token count above it. `/cost` exists for anyone who wants the number, and a
+   * turn that spends anything real prints it unprompted.
+   */
+  if (typeof outcome.budgetReport === 'string' && outcome.budgetReport && !quiet) {
     lines.push('');
     lines.push(outcome.budgetReport);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acuvo-code",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "Acuvo Code — the terminal client for the Acuvo capability registry. Zero dependencies, by design.",
   "type": "module",
   "bin": {