agent-nuvira 3.3.13 → 3.3.15

package/dist/learning/catalog-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-feed.js","sourceRoot":"","sources":["../../src/learning/catalog-feed.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,sGAAsG;AACtG,4CAA4C;AAC5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAEtE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAG,CAAC;AAC9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,CAAC;AAmClD;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC/D,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,CACT,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,CAAC,EAC5D,mBAAmB,CACpB,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,OAAgB,EAAE,SAAiB;IACvE,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,MAAM,IAAI,GAAI,OAA8B,EAAE,IAAI,CAAC;IACnD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAsC,EAAE,CAAC;YACzD,MAAM,EAAE,GAAG,OAAO,GAAG,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,+FAA+F;YAC/F,gGAAgG;YAChG,iDAAiD;YACjD,MAAM,MAAM,GAAG,MAAM,CAAE,GAAG,CAAC,OAA+C,EAAE,MAAM,CAAC,CAAC;YACpF,MAAM,UAAU,GAAG,MAAM,CAAE,GAAG,CAAC,OAA+C,EAAE,UAAU,CAAC,CAAC;YAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;gBACpD,CAAC,CAAE,GAAG,CAAC,oBAAkC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAC3F,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,CAAC,EAAE,CAAC,GAAG;gBACX,EAAE;gBACF,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,mBAAmB,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC;AAC5G,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc,IAAI,CAAC,GAAG,EAAE;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAoB,CAAC;QAC1E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9E,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC3D,MAAM,GAAG,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAClF,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,GAAG;YAAE,OAAO,SAAS,CAAC;QACnD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAyB;IAC3D,MAAM,IAAI,GAAG,mBAAmB,EAAE,CAAC;IACnC,gBAAgB,CAAC,GAAG,IAAI,OAAO,EAAE,GAAG,EAAE;QACpC,mBAAmB,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAA0B,KAAK,EAC/B,MAAoB,IAAI,CAAC,GAAG;IAE5B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QAClD,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC9E,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACpF,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,aAAa,CAC3B,QAAgB,EAChB,KAAa,EACb,QAAQ,GAAG,mBAAmB,EAAE;IAEhC,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,kGAAkG;IAClG,iGAAiG;IACjG,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjD,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,KAAa,EACb,OAA8E,EAAE;IAEhF,qGAAqG;IACrG,oGAAoG;IACpG,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAEvF,iGAAiG;IACjG,0FAA0F;IAC1F,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC9E,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,EAAE;YAC3C,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,IAAI;YACP,SAAS,EAAE,MAAM;YACjB,KAAK;YACL,KAAK,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACpF,CAAC,CAAC;IACL,CAAC;IAED,qGAAqG;IACrG,sGAAsG;IACtG,gEAAgE;IAChE,IAAI,GAAG,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,aAAa,CAAC,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,IAAI;YACP,SAAS,EAAE,WAAW;YACtB,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,6BAA6B;YAC5E,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,sCAAsC;SAC/F,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/learning/cli-intent-effects.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Effect declarations for nuvira's OWN confirmation-gated CLI intents.
+ *
+ * WHY THIS REPLACES THREE SETS. `autonomy-policy.ts` carried
+ * `IRREVERSIBLE_CLI_INTENTS`, `RECOVERABLE_CLI_INTENTS` and
+ * `EXTERNAL_CLI_INTENTS`. Membership was the ONLY fact each set carried, so "is it
+ * reversible", "does its effect leave the machine" and "may a grant cover it" all
+ * had to be re-derived by whoever read the call site.
+ *
+ * The two halves now agree BY CONSTRUCTION: this table declares each intent, and a
+ * test asserts the declarations and the manifest's confirmation-gated intents are
+ * the SAME set — so a newly gated command cannot ship without an effect, and a
+ * removed one cannot leave a ghost.
+ *
+ * THE TRAP THE GUARD EXISTS FOR. `command-manifest.json` expresses gating in TWO
+ * places: an intent's own `confirmation`, and `resolutions[].confirmation` for a
+ * specific resolution of an intent. `contacts.remove` is gated ONLY through the
+ * second, so a reader (or a parity check) that looks at the top-level flag alone
+ * concludes it is a ghost and deletes it — which is what nearly happened while
+ * building this table. The guard checks both forms.
+ *
+ * NOT A POLICY CHANGE. This moves an existing decision into one table; every
+ * `grantCategory` and `reversible` below is what `run_cli` already computed
+ * (external for publish, terminal for the recoverable system intents, nothing for
+ * the irreversible local ones). Anything that would genuinely change gating
+ * belongs in its own commit, not folded into a refactor.
+ */
+import type { EffectClass, GrantCategory } from './capability-types.js';
+export interface CliIntentEffect {
+    /** Matches an intent in `command-manifest.json` exactly. */
+    intent: string;
+    effectClass: EffectClass;
+    /** Can re-running the agent undo it? */
+    reversible: boolean;
+    /** The session grant that may cover it (absent = NO grant can). */
+    grantCategory?: GrantCategory;
+    /** One sentence for a reader: why this verdict is what it is. */
+    why: string;
+}
+export declare const CLI_INTENT_EFFECTS: readonly CliIntentEffect[];
+/** The declaration for an intent, or undefined when it is not declared. */
+export declare function cliIntentEffect(intent: string): CliIntentEffect | undefined;
+/**
+ * The derived gate facts for an intent — computed in ONE place so `run_cli`, the
+ * policy and the consent picture cannot each derive them differently.
+ */
+export interface CliIntentGateFacts {
+    /** The declaration, when the intent has one. */
+    effect?: CliIntentEffect;
+    /** A local-state change the envelope may cover and a `terminal` grant may cover. */
+    recoverable: boolean;
+    /** An off-machine effect, coverable only by the `external` grant. */
+    external: boolean;
+    /** The grant category that may cover it, when one can. */
+    grantCategory?: GrantCategory;
+}
+export declare function cliIntentGateFacts(intent: string): CliIntentGateFacts;
+/** The declared intents, for the manifest parity guard and the consent picture. */
+export declare function declaredCliIntents(): string[];
+//# sourceMappingURL=cli-intent-effects.d.ts.map

package/dist/learning/cli-intent-effects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-intent-effects.d.ts","sourceRoot":"","sources":["../../src/learning/cli-intent-effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAExE,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,WAAW,CAAC;IACzB,wCAAwC;IACxC,UAAU,EAAE,OAAO,CAAC;IACpB,mEAAmE;IACnE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,iEAAiE;IACjE,GAAG,EAAE,MAAM,CAAC;CACb;AAID,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAoGxD,CAAC;AAIF,2EAA2E;AAC3E,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAE3E;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,gDAAgD;IAChD,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oFAAoF;IACpF,WAAW,EAAE,OAAO,CAAC;IACrB,qEAAqE;IACrE,QAAQ,EAAE,OAAO,CAAC;IAClB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAarE;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,IAAI,MAAM,EAAE,CAE7C"}

package/dist/learning/cli-intent-effects.js

@@ -0,0 +1,153 @@
+/**
+ * Effect declarations for nuvira's OWN confirmation-gated CLI intents.
+ *
+ * WHY THIS REPLACES THREE SETS. `autonomy-policy.ts` carried
+ * `IRREVERSIBLE_CLI_INTENTS`, `RECOVERABLE_CLI_INTENTS` and
+ * `EXTERNAL_CLI_INTENTS`. Membership was the ONLY fact each set carried, so "is it
+ * reversible", "does its effect leave the machine" and "may a grant cover it" all
+ * had to be re-derived by whoever read the call site.
+ *
+ * The two halves now agree BY CONSTRUCTION: this table declares each intent, and a
+ * test asserts the declarations and the manifest's confirmation-gated intents are
+ * the SAME set — so a newly gated command cannot ship without an effect, and a
+ * removed one cannot leave a ghost.
+ *
+ * THE TRAP THE GUARD EXISTS FOR. `command-manifest.json` expresses gating in TWO
+ * places: an intent's own `confirmation`, and `resolutions[].confirmation` for a
+ * specific resolution of an intent. `contacts.remove` is gated ONLY through the
+ * second, so a reader (or a parity check) that looks at the top-level flag alone
+ * concludes it is a ghost and deletes it — which is what nearly happened while
+ * building this table. The guard checks both forms.
+ *
+ * NOT A POLICY CHANGE. This moves an existing decision into one table; every
+ * `grantCategory` and `reversible` below is what `run_cli` already computed
+ * (external for publish, terminal for the recoverable system intents, nothing for
+ * the irreversible local ones). Anything that would genuinely change gating
+ * belongs in its own commit, not folded into a refactor.
+ */
+const T = 'terminal';
+export const CLI_INTENT_EFFECTS = [
+    // ── irreversible local: no grant may cover these, ever ──
+    {
+        intent: 'history.clear',
+        effectClass: 'local-state',
+        reversible: false,
+        why: 'the conversation history is discarded; nothing re-runs it back',
+    },
+    {
+        intent: 'memory.prune',
+        effectClass: 'local-state',
+        reversible: false,
+        why: 'memories below the threshold are gone, and re-running cannot know which they were',
+    },
+    {
+        intent: 'stats.cost.clear',
+        effectClass: 'local-state',
+        reversible: false,
+        why: 'cost history is zeroed; the spends are not re-derivable',
+    },
+    // ── off-machine: grantable ONLY by an explicit off-machine grant ──
+    {
+        intent: 'publish',
+        effectClass: 'external',
+        reversible: false,
+        grantCategory: 'external',
+        why: 'a registry release leaves this machine and cannot be un-published',
+    },
+    // ── recoverable system intents: re-running the agent can put them back ──
+    {
+        intent: 'dashboard.stop',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a stopped service starts again',
+    },
+    {
+        intent: 'gateway.stop',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a stopped gateway starts again',
+    },
+    {
+        intent: 'permissions.disallow',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a removed RBAC grant is re-added by the matching allow',
+    },
+    {
+        intent: 'platform.remove',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a removed platform is re-added from the same config',
+    },
+    {
+        intent: 'health.selfheal',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'it applies fixes the doctor already diagnosed, and re-running is idempotent',
+    },
+    {
+        intent: 'memory.optimize',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'it re-ranks and compacts memory; running it again converges',
+    },
+    {
+        intent: 'cache.clear',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a cache rebuilds itself on the next use',
+    },
+    {
+        intent: 'cron.remove',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a removed job is re-added with the same schedule',
+    },
+    {
+        intent: 'skills.uninstall',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'an uninstalled skill reinstalls from the hub',
+    },
+    {
+        // Gated through a RESOLUTION, not the intent's own flag — see the header.
+        intent: 'contacts.remove',
+        effectClass: 'local-state',
+        reversible: true,
+        grantCategory: T,
+        why: 'a removed contact is re-added from the same config',
+    },
+];
+const BY_INTENT = new Map(CLI_INTENT_EFFECTS.map((e) => [e.intent, e]));
+/** The declaration for an intent, or undefined when it is not declared. */
+export function cliIntentEffect(intent) {
+    return BY_INTENT.get(intent);
+}
+export function cliIntentGateFacts(intent) {
+    const effect = BY_INTENT.get(intent);
+    const external = effect?.grantCategory === 'external';
+    // NOTE the order: an external intent is NEVER "recoverable", even though
+    // `publish` is the one declaration that is both irreversible and off-machine.
+    // That is what keeps a blanket request from ever reaching it.
+    const recoverable = effect?.reversible === true && !external;
+    return {
+        ...(effect ? { effect } : {}),
+        recoverable,
+        external,
+        ...(effect?.grantCategory ? { grantCategory: effect.grantCategory } : {}),
+    };
+}
+/** The declared intents, for the manifest parity guard and the consent picture. */
+export function declaredCliIntents() {
+    return CLI_INTENT_EFFECTS.map((e) => e.intent);
+}
+//# sourceMappingURL=cli-intent-effects.js.map

package/dist/learning/cli-intent-effects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-intent-effects.js","sourceRoot":"","sources":["../../src/learning/cli-intent-effects.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAgBH,MAAM,CAAC,GAAG,UAAmB,CAAC;AAE9B,MAAM,CAAC,MAAM,kBAAkB,GAA+B;IAC5D,2DAA2D;IAC3D;QACE,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,KAAK;QACjB,GAAG,EAAE,gEAAgE;KACtE;IACD;QACE,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,KAAK;QACjB,GAAG,EAAE,mFAAmF;KACzF;IACD;QACE,MAAM,EAAE,kBAAkB;QAC1B,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,KAAK;QACjB,GAAG,EAAE,yDAAyD;KAC/D;IACD,qEAAqE;IACrE;QACE,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,KAAK;QACjB,aAAa,EAAE,UAAU;QACzB,GAAG,EAAE,mEAAmE;KACzE;IACD,2EAA2E;IAC3E;QACE,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,gCAAgC;KACtC;IACD;QACE,MAAM,EAAE,cAAc;QACtB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,gCAAgC;KACtC;IACD;QACE,MAAM,EAAE,sBAAsB;QAC9B,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,wDAAwD;KAC9D;IACD;QACE,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,qDAAqD;KAC3D;IACD;QACE,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,6EAA6E;KACnF;IACD;QACE,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,6DAA6D;KACnE;IACD;QACE,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,yCAAyC;KAC/C;IACD;QACE,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,kDAAkD;KACxD;IACD;QACE,MAAM,EAAE,kBAAkB;QAC1B,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,8CAA8C;KACpD;IACD;QACE,0EAA0E;QAC1E,MAAM,EAAE,iBAAiB;QACzB,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,oDAAoD;KAC1D;CACF,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAExE,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAiBD,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,MAAM,EAAE,aAAa,KAAK,UAAU,CAAC;IACtD,yEAAyE;IACzE,8EAA8E;IAC9E,8DAA8D;IAC9D,MAAM,WAAW,GAAG,MAAM,EAAE,UAAU,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC;IAC7D,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,WAAW;QACX,QAAQ;QACR,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,kBAAkB;IAChC,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC"}

package/dist/learning/command-adaptation.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Command adaptation — the "run → adapt" half of the long-tail loop.
+ *
+ * When a command fails because an executable is not on this machine, the failure
+ * is not the end of the turn: it is the point at which the model should CHOOSE a
+ * command for this machine (or check one against it) instead of assuming. These
+ * helpers turn that OS signal into a bounded, factual note appended to the tool
+ * result.
+ *
+ * KEYED ON THE SHELL'S OWN SIGNAL, not on wording in the model's prose: a missing
+ * command is exit 127 (POSIX) or 9009 (cmd.exe), and the stderr text is used only
+ * as a secondary signal. That is why this is not a phrase list — it is the shell
+ * reporting the one thing it already knows.
+ */
+import { type MachineFacts } from './machine-facts.js';
+/**
+ * The first executable-looking token of a command line, skipping env assignments
+ * (`FOO=bar`) and leading flags. Returns null when the line does not start with a
+ * plain executable (e.g. a shell builtin chain or a quoted blob).
+ */
+export declare function leadingBinary(command: string): string | null;
+/**
+ * Did this tool output describe a MISSING COMMAND? The primary signals are the
+ * shell's own exit codes (127 = POSIX "command not found", 9009 = cmd.exe); the
+ * stderr wordings are a fallback for shells that exit otherwise.
+ */
+export declare function isMissingBinaryFailure(output: string): boolean;
+/**
+ * The install command to suggest for `tool`, using the FIRST package manager
+ * that is ACTUALLY PRESENT here (machine facts lists only present managers, in
+ * OS-native-first order). Returns null when nothing present can install it.
+ *
+ * This is why `resolve` prefers a present manager rather than naming a manager
+ * the machine does not have: the suggestion is buildable from what exists.
+ */
+export declare function suggestInstallCommand(facts: MachineFacts, tool: string): {
+    manager: string;
+    command: string;
+} | null;
+export declare function buildMissingBinaryNote(command?: string): string;
+//# sourceMappingURL=command-adaptation.d.ts.map

package/dist/learning/command-adaptation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-adaptation.d.ts","sourceRoot":"","sources":["../../src/learning/command-adaptation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE3E;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS5D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAO9D;AA2CD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,MAAM,GACX;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAQ7C;AAED,wBAAgB,sBAAsB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAY/D"}

package/dist/learning/command-adaptation.js

@@ -0,0 +1,122 @@
+/**
+ * Command adaptation — the "run → adapt" half of the long-tail loop.
+ *
+ * When a command fails because an executable is not on this machine, the failure
+ * is not the end of the turn: it is the point at which the model should CHOOSE a
+ * command for this machine (or check one against it) instead of assuming. These
+ * helpers turn that OS signal into a bounded, factual note appended to the tool
+ * result.
+ *
+ * KEYED ON THE SHELL'S OWN SIGNAL, not on wording in the model's prose: a missing
+ * command is exit 127 (POSIX) or 9009 (cmd.exe), and the stderr text is used only
+ * as a secondary signal. That is why this is not a phrase list — it is the shell
+ * reporting the one thing it already knows.
+ */
+import { detectMachineFacts } from './machine-facts.js';
+/**
+ * The first executable-looking token of a command line, skipping env assignments
+ * (`FOO=bar`) and leading flags. Returns null when the line does not start with a
+ * plain executable (e.g. a shell builtin chain or a quoted blob).
+ */
+export function leadingBinary(command) {
+    const tokens = String(command ?? '').trim().split(/\s+/);
+    for (const token of tokens) {
+        if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(token))
+            continue; // FOO=bar
+        if (token.startsWith('-'))
+            continue;
+        const name = token.replace(/^["']|["']$/g, '');
+        return /^[A-Za-z0-9._/\\-]+$/.test(name) ? name : null;
+    }
+    return null;
+}
+/**
+ * Did this tool output describe a MISSING COMMAND? The primary signals are the
+ * shell's own exit codes (127 = POSIX "command not found", 9009 = cmd.exe); the
+ * stderr wordings are a fallback for shells that exit otherwise.
+ */
+export function isMissingBinaryFailure(output) {
+    const text = String(output ?? '');
+    if (/\(exit 127\)/.test(text))
+        return true;
+    if (/\(exit 9009\)/.test(text))
+        return true;
+    if (/command not found/i.test(text))
+        return true;
+    if (/is not recognized as an internal or external command/i.test(text))
+        return true;
+    return false;
+}
+/**
+ * A bounded note telling the model WHERE it is and what is present, so it can
+ * adapt the command itself. Names the likely executable when the command line
+ * makes it obvious; otherwise stays general, because guessing the wrong token
+ * would be its own false claim.
+ */
+/**
+ * How each package manager INSTALLS a tool. This is a fact about the manager
+ * (like `npm install` being the same everywhere), not an OS mapping — which is
+ * why it lives here and not in the per-OS table.
+ */
+const INSTALL_TEMPLATE = {
+    winget: 'winget install <tool>',
+    choco: 'choco install <tool>',
+    scoop: 'scoop install <tool>',
+    brew: 'brew install <tool>',
+    port: 'port install <tool>',
+    apt: 'apt-get install -y <tool>',
+    'apt-get': 'apt-get install -y <tool>',
+    dnf: 'dnf install -y <tool>',
+    yum: 'yum install -y <tool>',
+    pacman: 'pacman -S <tool>',
+    zypper: 'zypper install -y <tool>',
+    apk: 'apk add <tool>',
+    snap: 'snap install <tool>',
+    flatpak: 'flatpak install <tool>',
+    uv: 'uv tool install <tool>',
+    poetry: 'poetry add <tool>',
+    pip: 'pip install <tool>',
+    pip3: 'pip3 install <tool>',
+    npm: 'npm install -g <tool>',
+    pnpm: 'pnpm add -g <tool>',
+    yarn: 'yarn global add <tool>',
+    bun: 'bun add -g <tool>',
+    cargo: 'cargo install <tool>',
+    go: 'go install <tool>@latest',
+    gem: 'gem install <tool>',
+    composer: 'composer require <tool>',
+    dotnet: 'dotnet tool install -g <tool>',
+};
+/**
+ * The install command to suggest for `tool`, using the FIRST package manager
+ * that is ACTUALLY PRESENT here (machine facts lists only present managers, in
+ * OS-native-first order). Returns null when nothing present can install it.
+ *
+ * This is why `resolve` prefers a present manager rather than naming a manager
+ * the machine does not have: the suggestion is buildable from what exists.
+ */
+export function suggestInstallCommand(facts, tool) {
+    const name = String(tool ?? '').trim();
+    if (!name)
+        return null;
+    for (const manager of facts.packageManagers) {
+        const template = INSTALL_TEMPLATE[manager];
+        if (template)
+            return { manager, command: template.replace('<tool>', name) };
+    }
+    return null;
+}
+export function buildMissingBinaryNote(command) {
+    const facts = detectMachineFacts();
+    const bin = command ? leadingBinary(command) : null;
+    const managers = facts.packageManagers.length > 0 ? facts.packageManagers.join(', ') : '(none detected)';
+    return [
+        '',
+        '⚠️ A command here was not found on this machine.',
+        ...(bin ? [`\`${bin}\` is not on PATH.`] : []),
+        `This machine: ${facts.osName} · shell ${facts.shellName ?? 'unknown'}.`,
+        `Package managers present: ${managers}.`,
+        'Choose the command for THIS machine from these facts. Check one against the machine with tool_search (action "resolve") before re-running, and record a working one with action "record" so it is known next time.',
+    ].join('\n');
+}
+//# sourceMappingURL=command-adaptation.js.map

package/dist/learning/command-adaptation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-adaptation.js","sourceRoot":"","sources":["../../src/learning/command-adaptation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAE3E;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS,CAAC,UAAU;QAChE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAClC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,IAAI,uDAAuD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH;;;;GAIG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,uBAAuB;IAC/B,KAAK,EAAE,sBAAsB;IAC7B,KAAK,EAAE,sBAAsB;IAC7B,IAAI,EAAE,qBAAqB;IAC3B,IAAI,EAAE,qBAAqB;IAC3B,GAAG,EAAE,2BAA2B;IAChC,SAAS,EAAE,2BAA2B;IACtC,GAAG,EAAE,uBAAuB;IAC5B,GAAG,EAAE,uBAAuB;IAC5B,MAAM,EAAE,kBAAkB;IAC1B,MAAM,EAAE,0BAA0B;IAClC,GAAG,EAAE,gBAAgB;IACrB,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,wBAAwB;IACjC,EAAE,EAAE,wBAAwB;IAC5B,MAAM,EAAE,mBAAmB;IAC3B,GAAG,EAAE,oBAAoB;IACzB,IAAI,EAAE,qBAAqB;IAC3B,GAAG,EAAE,uBAAuB;IAC5B,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,wBAAwB;IAC9B,GAAG,EAAE,mBAAmB;IACxB,KAAK,EAAE,sBAAsB;IAC7B,EAAE,EAAE,0BAA0B;IAC9B,GAAG,EAAE,oBAAoB;IACzB,QAAQ,EAAE,yBAAyB;IACnC,MAAM,EAAE,+BAA+B;CACxC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAmB,EACnB,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC;IACzG,OAAO;QACL,EAAE;QACF,kDAAkD;QAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,iBAAiB,KAAK,CAAC,MAAM,YAAY,KAAK,CAAC,SAAS,IAAI,SAAS,GAAG;QACxE,6BAA6B,QAAQ,GAAG;QACxC,oNAAoN;KACrN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/learning/consent-picture.d.ts

@@ -0,0 +1,42 @@
+/**
+ * The consent picture — ONE place that says, for every state-changing action,
+ * whether it is denied, grantable, or decided by evidence.
+ *
+ * WHY THIS EXISTS. The rules are already enforced (`autonomy-policy.ts`,
+ * `run-terminal.ts`, `intent-envelope.ts`, `session-grant.ts`), but they lived
+ * in six files and several refusal messages, so neither the user nor the model
+ * had a single view of them. When the user asks "why is this asking / why won't
+ * this run", the answer should be one table, not an archaeology of gates.
+ *
+ * The categories are stable and code-owned — this module DERIVES nothing and
+ * changes nothing; it renders the policy that is already in force. A rule that
+ * moves in the policy should move here in the same change (the dashboard shows
+ * this, so drift is visible).
+ */
+export interface ConsentExample {
+    action: string;
+    /** The evidence the gate actually consults, in one line. */
+    evidence: string;
+}
+export interface ConsentPicture {
+    /** Never runs, grant or no grant. The hard floor. */
+    denied: {
+        title: string;
+        note: string;
+        examples: ConsentExample[];
+    };
+    /** Runs after ONE explicit, session-scoped grant the user picks. */
+    grantable: {
+        title: string;
+        note: string;
+        examples: ConsentExample[];
+    };
+    /** Runs on its own when the user's OWN request names it (or it is recoverable). */
+    decided: {
+        title: string;
+        note: string;
+        examples: ConsentExample[];
+    };
+}
+export declare function consentPicture(): ConsentPicture;
+//# sourceMappingURL=consent-picture.d.ts.map

package/dist/learning/consent-picture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-picture.d.ts","sourceRoot":"","sources":["../../src/learning/consent-picture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC;IACpE,oEAAoE;IACpE,SAAS,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC;IACvE,mFAAmF;IACnF,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC;CACtE;AAED,wBAAgB,cAAc,IAAI,cAAc,CAoC/C"}

package/dist/learning/consent-picture.js

@@ -0,0 +1,53 @@
+/**
+ * The consent picture — ONE place that says, for every state-changing action,
+ * whether it is denied, grantable, or decided by evidence.
+ *
+ * WHY THIS EXISTS. The rules are already enforced (`autonomy-policy.ts`,
+ * `run-terminal.ts`, `intent-envelope.ts`, `session-grant.ts`), but they lived
+ * in six files and several refusal messages, so neither the user nor the model
+ * had a single view of them. When the user asks "why is this asking / why won't
+ * this run", the answer should be one table, not an archaeology of gates.
+ *
+ * The categories are stable and code-owned — this module DERIVES nothing and
+ * changes nothing; it renders the policy that is already in force. A rule that
+ * moves in the policy should move here in the same change (the dashboard shows
+ * this, so drift is visible).
+ */
+export function consentPicture() {
+    return {
+        denied: {
+            title: 'Denied — never runs',
+            note: 'The hard floor. No session grant and no request phrasing unlocks these; the DENY patterns are checked before any grant is consulted.',
+            examples: [
+                { action: 'sudo / privilege escalation', evidence: 'absolute deny pattern' },
+                { action: 'rm -rf / (roots, home, system dirs, globs)', evidence: 'absolute deny pattern' },
+                { action: 'mkfs, fdisk, dd, shutdown, kill -9, fork bombs', evidence: 'absolute deny pattern' },
+                { action: 'git reset --hard / git clean / checkout -- (working-tree destruction)', evidence: 'absolute deny pattern' },
+                { action: 'raw `git push` as a shell string', evidence: 'use the structured git tool (gated by evidence)' },
+            ],
+        },
+        grantable: {
+            title: 'Grantable — one explicit "allow for this session"',
+            note: 'Offered as one extra choice at the confirmation a tool demanded. Never inferred from prose; recorded as a revisable decision; ends with the conversation.',
+            examples: [
+                { action: 'file writes + whole-file overwrites', evidence: 'the `write` session grant' },
+                { action: 'recoverable workspace commands (install, mkdir, cp/mv, git add)', evidence: 'the `terminal` session grant' },
+                { action: 'off-machine actions: network fetches, global/system installs, publish, push', evidence: 'the `external` session grant' },
+            ],
+        },
+        decided: {
+            title: 'Decided on its own — evidence, not a round trip',
+            note: 'The user’s own request is the authorization. These proceed and REPORT what happened instead of asking again.',
+            examples: [
+                { action: 'creating a file the request asked for', evidence: 'the request names the work' },
+                { action: 'a surgical edit (small relative to the file) or a file the request names', evidence: 'requestNamesPath / isSurgicalEdit' },
+                { action: 'a command the request itself names', evidence: 'namedByRequest' },
+                { action: 'git commit / git push the request names', evidence: 'requestRequestsCommit / requestRequestsPush' },
+                { action: 'publish the request resolves to', evidence: 'the request resolves to the publish CLI intent' },
+                { action: 'recoverable CLI intents the user asked for (stop dashboard, clear cache…)', evidence: 'the intent is declared reversible in cli-intent-effects.ts + namedByRequest' },
+                { action: 'a workspace command the request authorized', evidence: 'authorizedByRequest + recoverable' },
+            ],
+        },
+    };
+}
+//# sourceMappingURL=consent-picture.js.map

package/dist/learning/consent-picture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consent-picture.js","sourceRoot":"","sources":["../../src/learning/consent-picture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,qBAAqB;YAC5B,IAAI,EAAE,sIAAsI;YAC5I,QAAQ,EAAE;gBACR,EAAE,MAAM,EAAE,6BAA6B,EAAE,QAAQ,EAAE,uBAAuB,EAAE;gBAC5E,EAAE,MAAM,EAAE,4CAA4C,EAAE,QAAQ,EAAE,uBAAuB,EAAE;gBAC3F,EAAE,MAAM,EAAE,gDAAgD,EAAE,QAAQ,EAAE,uBAAuB,EAAE;gBAC/F,EAAE,MAAM,EAAE,uEAAuE,EAAE,QAAQ,EAAE,uBAAuB,EAAE;gBACtH,EAAE,MAAM,EAAE,kCAAkC,EAAE,QAAQ,EAAE,iDAAiD,EAAE;aAC5G;SACF;QACD,SAAS,EAAE;YACT,KAAK,EAAE,mDAAmD;YAC1D,IAAI,EAAE,2JAA2J;YACjK,QAAQ,EAAE;gBACR,EAAE,MAAM,EAAE,qCAAqC,EAAE,QAAQ,EAAE,2BAA2B,EAAE;gBACxF,EAAE,MAAM,EAAE,iEAAiE,EAAE,QAAQ,EAAE,8BAA8B,EAAE;gBACvH,EAAE,MAAM,EAAE,6EAA6E,EAAE,QAAQ,EAAE,8BAA8B,EAAE;aACpI;SACF;QACD,OAAO,EAAE;YACP,KAAK,EAAE,iDAAiD;YACxD,IAAI,EAAE,8GAA8G;YACpH,QAAQ,EAAE;gBACR,EAAE,MAAM,EAAE,uCAAuC,EAAE,QAAQ,EAAE,4BAA4B,EAAE;gBAC3F,EAAE,MAAM,EAAE,0EAA0E,EAAE,QAAQ,EAAE,mCAAmC,EAAE;gBACrI,EAAE,MAAM,EAAE,oCAAoC,EAAE,QAAQ,EAAE,gBAAgB,EAAE;gBAC5E,EAAE,MAAM,EAAE,yCAAyC,EAAE,QAAQ,EAAE,6CAA6C,EAAE;gBAC9G,EAAE,MAAM,EAAE,iCAAiC,EAAE,QAAQ,EAAE,gDAAgD,EAAE;gBACzG,EAAE,MAAM,EAAE,2EAA2E,EAAE,QAAQ,EAAE,6EAA6E,EAAE;gBAChL,EAAE,MAAM,EAAE,4CAA4C,EAAE,QAAQ,EAAE,mCAAmC,EAAE;aACxG;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/learning/context-budget.d.ts

@@ -57,12 +57,38 @@ export declare const CHARS_PER_TOKEN = 4.5;
  */
 export declare const MAX_THREAD_BUDGET_CHARS = 4000000;
 /**
- * The tool-loop's own default thread budget (`DEFAULT_THREAD_BUDGET_CHARS` in
- * `tools/tool-loop.ts`). Kept here as a floor so this resolver can only ever
- * RAISE the budget: below it the caller's default is already the safer choice,
- * and shrinking it would change behavior for every small-window model.
+ * THERE IS NO UNIVERSAL NEVER-SHRINK FLOOR (C1/C5, decided with the user).
+ *
+ * This module used to export `THREAD_BUDGET_FLOOR_CHARS = 200_000` and apply it
+ * as `Math.max(FLOOR, windowDerivedChars)`, so the resolver could only ever
+ * RAISE a budget. A model whose REAL window was 32,768 tokens was therefore
+ * handed 200,000 chars (~44K tokens) of thread — **1.4× its own window**, from
+ * the very lookup that had just established that window. That is C5: the floor
+ * made a KNOWN window unenforceable, so a mid-turn handoff to a smaller model
+ * could overflow the window we already knew about. (Measured against the old
+ * rule: a 32K window returned 200,000.)
+ *
+ * The user's decision, and the reason no floor may sit above the window: the
+ * thread is fitted to the model that is ANSWERING, because what makes a model
+ * hallucinate is losing the ask. The protections that preserve perspective are
+ * RULES in `trimThreadBudget`, not a budget number — the system prompt, the
+ * FIRST user message, the last `RECENT_KEEP` messages and the work digest are
+ * never touched, and only OLD TOOL OUTPUT is ever shrunk. So a large-window
+ * model is deliberately left to use its window, and a small-window model gets a
+ * thread that fits it.
+ *
+ * The UNKNOWN case is unchanged and is still the dominant one: no window → this
+ * resolver returns `undefined` and the caller keeps its own default
+ * (`DEFAULT_THREAD_BUDGET_CHARS` in `tools/tool-loop.ts`, also 200,000).
  */
-export declare const THREAD_BUDGET_FLOOR_CHARS = 200000;
+/**
+ * The smallest thread we will ask a model to work in (~4.4K tokens at 4.5
+ * chars/token). A window recorded BELOW this is a registry error rather than a
+ * real model, and trimming a thread to near-zero would destroy the turn — so
+ * this is the one floor that survives, and it is deliberately far below the
+ * 200,000 it replaces.
+ */
+export declare const MIN_THREAD_BUDGET_CHARS = 20000;
 /** Default per-prompt file-context caps (today's constants) for unknown models. */
 export declare const DEFAULT_CONTEXT_FILES = 10;
 export declare const DEFAULT_CONTEXT_FILE_CHARS = 16000;
@@ -116,7 +142,12 @@ export declare function resolveMaxOutputTokens(input?: BudgetInput): number;
  * model. Returns `undefined` when the window is UNKNOWN so the caller keeps
  * `DEFAULT_THREAD_BUDGET_CHARS` untouched ("unknown → unchanged", the same
  * discipline as `resolveContextBudget`); a known window converts its token
- * budget to characters so a 1M-token model is not trimmed to a 128K keyhole.
+ * budget to characters so a 1M-token model is not trimmed to a 128K keyhole —
+ * and, since C1/C5, so a 32K-token model is not handed a 44K-token thread.
+ *
+ * The WINDOW decides in BOTH directions. The old `Math.max(FLOOR, chars)` is
+ * what made a known small window unenforceable; see the note on
+ * `MIN_THREAD_BUDGET_CHARS` above.
  */
 export declare function resolveThreadBudgetChars(input?: BudgetInput): number | undefined;
 /**

package/dist/learning/context-budget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-budget.d.ts","sourceRoot":"","sources":["../../src/learning/context-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH;;;GAGG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAGjD;;;;GAIG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAAY,CAAC;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,SAAU,CAAC;AAEjD,mFAAmF;AACnF,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;CACvD;AAkBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,GAAE,WAAgB,GAAG,aAAa,CAiC3E;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,GAAE,WAAgB,GAAG,MAAM,CAmBtE;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,GAAE,WAAgB,GAAG,MAAM,GAAG,SAAS,CAQpF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,GAAE,WAAgB,GAAG;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA"}
+{"version":3,"file":"context-budget.d.ts","sourceRoot":"","sources":["../../src/learning/context-budget.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH;;;GAGG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,OAAO,CAAC;AAEzC,sEAAsE;AACtE,eAAO,MAAM,kBAAkB,OAAQ,CAAC;AAExC,wEAAwE;AACxE,eAAO,MAAM,yBAAyB,OAAQ,CAAC;AAE/C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAGjD;;;;GAIG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,UAAY,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,mFAAmF;AACnF,eAAO,MAAM,qBAAqB,KAAK,CAAC;AACxC,eAAO,MAAM,0BAA0B,QAAS,CAAC;AAEjD,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,UAAY,CAAC;AAEhD,2DAA2D;AAC3D,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,OAAO,CAAC;AAEjD,MAAM,WAAW,WAAW;IAC1B,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,MAAM,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;CACvD;AAkBD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,GAAE,WAAgB,GAAG,aAAa,CAiC3E;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,GAAE,WAAgB,GAAG,MAAM,CAmBtE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,GAAE,WAAgB,GAAG,MAAM,GAAG,SAAS,CAMpF;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,GAAE,WAAgB,GAAG;IACjE,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAqBA"}