agentera 3.0.0-dev.26 → 3.0.0-dev.28

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -74,14 +74,24 @@ details.
 
 Requires Node.js 22+ and pnpm 10.30.3.
 
+### Generated-output ownership and recovery
+
+The canonical producer, reader, packing, retention, and recovery contract is
+[v3 npm packaging and verification](../../docs/packaging/v3-packaging.md).
+Generated generations are disposable; source files and the package registry
+remain authoritative. Use its recovery matrix rather than deleting uncertain
+state.
+
 ```bash
 pnpm -C packages/cli test
 pnpm -C packages/cli run verify:package
 pnpm -C packages/cli run typecheck
 pnpm -C packages/cli build
+pnpm -C packages/cli run verify:generated-overlap
+pnpm -C packages/cli run generated:cleanup -- --dry-run --json
 pnpm -C packages/cli run lint
 ```
 
-Use `npm pack --dry-run --json --ignore-scripts` after `build` and
-`bundle:data` to inspect the exact publication surface. Do not publish from a
-normal development or capability cycle.
+Use `pnpm -C packages/cli run pack:dry-run` to inspect the exact isolated
+publication surface. Do not publish from a normal development or capability
+cycle.

package/bundle/CHANGELOG.md

@@ -4,6 +4,15 @@
 
 ### Changed
 
+- `agentera route receipt` now requires the phase-one `semantic_capsule_sha256` as well as `request_sha256`; it fails closed when the current trigger-intent capsule differs, preventing startup from a receipt classified against stale routing authority.
+- Defined the portable routing boundary: `agentera route request` deterministically resolves bare `/agentera`, explicit capability names or aliases, and curated leading phrases to a capability; every other request remains host-owned open-ended semantic classification. `agentera route receipt` validates the host result before authorizing startup, while `agentera route evaluate` and `agentera check verify eval routing` gate implementation with the frozen offline synthetic corpus; Agentera ships no built-in model service or live benchmark.
+- Added ordinary progress, decision, and health reads plus startup handling for
+  immutable v2-compaction summaries. Summary-only history now remains explicitly
+  degraded with source provenance and caveats instead of appearing as current
+  detail. Migration preview now separates corrupt source roots from generated
+  relationship dependents, and a Git-backed lifecycle proof covers interrupted
+  retry without changing aggregate source bytes. The contract excludes
+  reconstruction, dual authority, and repair/import commands.
 - Changed the v2-to-v3 development upgrade to one full Git-backed command that converts unchanged tracked input directly into canonical entities, accepts exact partial targets on retry, validates the complete graph, and activates entity authority last. Runtime blockers are reported as post-activation action-required work without modifying the blocked resource. The optional dry-run is read-only; cross-major apply is one-way and has no staging graph, recovery journal, rollback, restore, non-Git, or partial workflow.
 - Cut ordinary project state over to one canonical writer-owned file per entity. Public records now use only bare `id` and `artifact` identity, bounded `list` and exact `get --id` reads, and typed writers discovered through `agentera state <artifact> explain`; aggregate state files and ordinal selectors remain migration or historical evidence only.
 - Split lifecycle validation orchestration from the public validation facade while preserving its import surface and validation behavior.
@@ -38,7 +47,7 @@
 - Retained runtime lifecycle contracts only as migration evidence and for explicit `agentera upgrade --legacy-cleanup claude --dry-run|--yes`, which can remove only the ownership-proven legacy Agentera skill link and excludes user data.
 - Added typed artifact writes under `agentera state`: progress/decision/audit appends, decision satisfaction updates, plan create/task/status/archive lifecycle operations, schema-derived `explain`, server-assigned identifiers, exact retry replay, dry-run diffs, project locking, strict mapped-path safety, staged 10/40/50 compaction, final-byte validation, and atomic publication.
 - Added `install_track` to `prime --format json` (`app_home.install_track`) and `doctor --format json`. Values are `v2`, `v3`, `source`, and `unknown`.
-- Added the TypeScript CLI on the npm development channel (`npx -y agentera@next`), bundling app data at pack time via `prepack` (`tsc` + `scripts/copy-bundle.mjs`) and the `.agentera-npx-bundle.json` sentinel checked by `packages/cli/test/packaging/prepack.test.ts`.
+- Added the TypeScript CLI on the npm development channel (`npx -y agentera@next`) as a self-contained package whose governed isolated construction stages compiled commands, registry-owned app data, and the `.agentera-npx-bundle.json` sentinel before packing with lifecycle scripts disabled.
 - Added `packages/cli/src/migrate/v2HandoffManifest.ts` to read `v3-handoff.json` during v2→v3 cleanup preflight per `references/cli/v3-handoff-manifest.schema.yaml`.
 - Added v3 `agentera doctor` coexistence detection in `packages/cli/src/upgrade/coexistenceProbe.ts` with regression coverage in `packages/cli/test/cli/coexistenceProbe.test.ts`.
 - Added maintainer gates under `agentera check` (`validate`, `verify`, `lint`, `compact`) with JSON parity oracles for validate families, verify eval targets, invalid-input envelopes, and `source_contract` emissions on `prime`, `prime --context`, `state plan`, and `state query --list-artifacts`.
@@ -74,6 +83,10 @@
 
 ### Fixed
 
+- Fixed natural-language capability routing to select from the user's expressed intent and trigger metadata before capability startup; status `next_action` now remains an orientation readiness suggestion rather than a classifier for non-status requests.
+- Fixed overlapping source, build, and package verification to use isolated construction and one atomically selected `dist` + `bundle` generation; clean source no longer requires checkout output, package proof still runs from an extracted tarball, and `pnpm -C packages/cli run pack:dry-run` replaces direct checkout `npm pack`.
+- Fixed `agentera prime --context status` to report severity totals across every open TODO while keeping attention and routing detail bounded with explicit omission recovery.
+- Fixed `agentera prime --context status` to exclude resolved entity TODOs before bounded pagination, so severity counts, attention, and next-action routing reflect only open work.
 - Fixed overlapping `upgrade --yes` runs to hold separate exclusive project and shared-runtime locks, reject stale or malformed lock state with bounded manual recovery, and release only a matching ownership token.
 - Fixed migration-required recovery commands to shell-quote project paths so shell substitutions remain literal and the intended project receives the v2-to-v3 cutover.
 - Fixed marker-absent v2 projects to select the entity cutover from project state under npm or source v3 execution, so the recovery command emitted by `prime` can complete the forward migration instead of reporting an unrelated no-op.

package/bundle/DESIGN.md

@@ -1,18 +1,14 @@
 # Agentera
 
-Visual identity system for Agentera. Terminal-native tokens for CLI and agent-rendered Markdown; mobile UI tokens live in [`packages/mobile/DESIGN.md`](./packages/mobile/DESIGN.md).
+Visual identity system for Agentera's CLI and agent-rendered Markdown.
 
 ## Surface register
 
-One brand (Agentera), three register layers: terminal/mobile surfaces (below), brand-vs-product output registers, and suite-vs-project design authorities.
+One brand (Agentera), with brand-vs-product output registers and suite-vs-project design authorities.
 
 | Surface | Authority | Renders |
 | --- | --- | --- |
 | `terminal` | This file (`DESIGN.md`) | CLI dashboard, capability introductions, structured artifact headers in Markdown |
-| `mobile` | `packages/mobile/DESIGN.md` | Touch UI, smart bar, sidebar, chat composer, responsive layouts |
-
-Shared across surfaces: product name, capability glyphs, sharp-colleague voice.
-Not shared: box-drawing logo usage (terminal key moments only), terminal severity arrows in mobile UI, Tailwind touch targets in terminal output.
 
 ## Output Registers
 
@@ -65,7 +61,7 @@ Governs the **host repository's own product** — web UI, the user's coding-agen
 - Design in a host project writes **project** `DESIGN.md` only; never merge suite design sources into it.
 - Status reads project design for **status metadata** (exists, stale, missing) — not to style suite chrome.
 - When both authorities apply in one session, suite chrome follows suite sources; the host product follows project `DESIGN.md`.
-- In the Agentera repository, root `DESIGN.md` is suite terminal dogfood plus brand register; `packages/mobile/DESIGN.md` is the mobile surface register.
+- In the Agentera repository, root `DESIGN.md` is the suite terminal dogfood and brand register.
 
 ## Philosophy
 

package/bundle/README.md

@@ -117,13 +117,11 @@ The intentional singleton project state is:
 | ♾ | profile | Reusable decision profile |
 | ⎈ | orchestrate | Autonomous plan execution with evaluation |
 
-## Monorepo
+## Package
 
 | Package | Role |
 | --- | --- |
 | `packages/cli` (`agentera`) | Primary TypeScript CLI and bundled runtime data |
-| `packages/web` (`@agentera/web`) | Marketing and Starlight documentation site |
-| `packages/mobile` (`@agentera/mobile`) | Docs-only mobile product stub |
 
 Contributor commands and repository rules live in [AGENTS.md](./AGENTS.md).
 Migration and recovery details live in [UPGRADE.md](./UPGRADE.md).
@@ -132,7 +130,6 @@ Migration and recovery details live in [UPGRADE.md](./UPGRADE.md).
 pnpm -C packages/cli test
 pnpm -C packages/cli run typecheck
 pnpm -C packages/cli build
-vp run web:check
 ```
 
 License: [Apache-2.0](./LICENSE) · Author: Jonathan Gabor

package/bundle/UPGRADE.md

@@ -112,6 +112,39 @@ Forward migration is one-way. Returning to the Python 2.x line is unsupported,
 and cross-major apply has no rollback, restore, non-Git, or partial workflow.
 If apply is interrupted, rerun the same full apply command.
 
+### Compacted v2 summaries
+
+Entity-cutover publication for valid v2 compaction output is implemented for
+`progress`, `decisions`, and `health`. Each valid summary becomes one immutable,
+read-only canonical
+`progress_summary`, `decision_summary`, or `health_summary` entity. The entity
+requires `summary`, preserves every source-retained field except forbidden
+identity aliases, and records the source path plus source-record SHA-256.
+
+Ordinary summary readers and startup projection are implemented. Reads report
+`detail_availability: summary`, `compatibility: degraded`, record-level source
+provenance, and applicable caveats; startup presents summary-only history as
+degraded history rather than current detail. Full records retain their existing
+temporal order; the degraded-summary segment follows in deterministic canonical-ID
+order and makes no chronology claim. Retained decision-summary satisfaction is
+inline and read-only, may be absent, and never creates a standalone satisfaction
+ target. Preview reports independent source roots separately from generated
+ relationship dependents: `root_blockers + dependent_blockers = blockers`, and
+ each dependent names its stable `root_source_identity`. A Git-backed regression
+ copies the supported `progress`, `decisions`, and `health` sources from pinned
+ v2.7.11 compaction output; its protected experiment evidence remains unchanged
+ and excluded. It verifies preview bindings and target hashes, marker-last
+ publication and interrupted exact-target retry, canonical validation, ordinary
+ list/get reads for retained full and summary entries, human/JSON prime, and
+ repeated no-change upgrade behavior while aggregate source hashes remain stable.
+Inherited full-decision `high`, `medium`, and `low` confidence remains readable
+with a legacy caveat; newly supplied or amended confidence remains strict.
+
+Protected objective experiments, runtime-local session state, and compacted TODO
+rows that already satisfy the canonical TODO shape are outside this summary
+scope. This contract does not reconstruct Git history, normalize source records,
+create dual authority, or add a repair or import command.
+
 ## Unsupported legacy state
 
 Pending v1 Markdown state and unknown marker-absent state are not automatic

package/bundle/fixtures/routing/hybrid-corpus.yaml

@@ -0,0 +1,154 @@
+schema_version: agentera.hybrid_routing_corpus.v3
+status: frozen
+text_provenance: All request text in this fixture is synthetic and authored for conformance testing.
+retention_policy: >-
+  This fixture may contain only synthetic or explicitly consented text. Evaluation
+  reports retain case IDs and aggregate metrics, never private request strings.
+freeze_policy: >-
+  Development and adversarial entries are the sole frozen synthetic implementation
+  corpus. Additions or expectation changes require a new schema_version and a new
+  corpus file; no hidden, sealed, or vendor-host corpus is required.
+partitions:
+  development: { status: frozen, purpose: phrase inventory and structural contract development }
+  adversarial: { status: frozen, purpose: "abstention, separator, and invalid-receipt safety" }
+
+route_cases:
+  - { id: DEV-PHRASE-STATUS, partition: development, request: "show project briefing for the checkout", expected: { phase1: deterministic_selection, tier: phrase, capability: status } }
+  - { id: DEV-PHRASE-VISION, partition: development, request: "define product direction for collaboration", expected: { phase1: deterministic_selection, tier: phrase, capability: vision } }
+  - { id: DEV-PHRASE-DISCUSS, partition: development, request: "help me decide: cache or queue", expected: { phase1: deterministic_selection, tier: phrase, capability: discuss, topic: ": cache or queue" } }
+  - { id: DEV-PHRASE-RESEARCH, partition: development, request: "study external patterns for durable jobs", expected: { phase1: deterministic_selection, tier: phrase, capability: research } }
+  - { id: DEV-PHRASE-PLAN, partition: development, request: "make an implementation plan for import safety", expected: { phase1: deterministic_selection, tier: phrase, capability: plan } }
+  - { id: DEV-PHRASE-BUILD, partition: development, request: "implement the approved plan for task one", expected: { phase1: deterministic_selection, tier: phrase, capability: build } }
+  - { id: DEV-PHRASE-OPTIMIZE, partition: development, request: "improve a measured bottleneck in startup", expected: { phase1: deterministic_selection, tier: phrase, capability: optimize } }
+  - { id: DEV-PHRASE-AUDIT, partition: development, request: "check codebase health before release", expected: { phase1: deterministic_selection, tier: phrase, capability: audit } }
+  - { id: DEV-PHRASE-DOCUMENT, partition: development, request: "refresh project documentation for setup", expected: { phase1: deterministic_selection, tier: phrase, capability: document } }
+  - { id: DEV-PHRASE-PROFILE, partition: development, request: "save a decision profile for local work", expected: { phase1: deterministic_selection, tier: phrase, capability: profile } }
+  - { id: DEV-PHRASE-DESIGN, partition: development, request: "shape the interface for review", expected: { phase1: deterministic_selection, tier: phrase, capability: design } }
+  - { id: DEV-PHRASE-ORCHESTRATE, partition: development, request: "execute the approved plan for phase two", expected: { phase1: deterministic_selection, tier: phrase, capability: orchestrate } }
+  - { id: DEV-ABSTAIN-STATUS, partition: development, request: "show project briefings", expected: { phase1: semantic_required, reason: literal_abstention, boundary: status } }
+  - { id: DEV-ABSTAIN-VISION, partition: development, request: "define our product direction", expected: { phase1: semantic_required, reason: literal_abstention, boundary: vision } }
+  - { id: DEV-ABSTAIN-DISCUSS, partition: development, request: "help us decide", expected: { phase1: semantic_required, reason: literal_abstention, boundary: discuss } }
+  - { id: DEV-ABSTAIN-RESEARCH, partition: development, request: "research patterns", expected: { phase1: semantic_required, reason: literal_abstention, boundary: research } }
+  - { id: DEV-ABSTAIN-PLAN, partition: development, request: "make implementation plan", expected: { phase1: semantic_required, reason: literal_abstention, boundary: plan } }
+  - { id: DEV-ABSTAIN-BUILD, partition: development, request: "implement approved plan", expected: { phase1: semantic_required, reason: literal_abstention, boundary: build } }
+  - { id: DEV-ABSTAIN-OPTIMIZE, partition: development, request: "optimize measured bottleneck", expected: { phase1: semantic_required, reason: literal_abstention, boundary: optimize } }
+  - { id: DEV-ABSTAIN-AUDIT, partition: development, request: "audit the codebase health", expected: { phase1: semantic_required, reason: literal_abstention, boundary: audit } }
+  - { id: DEV-ABSTAIN-DOCUMENT, partition: development, request: "update documentation", expected: { phase1: semantic_required, reason: literal_abstention, boundary: document } }
+  - { id: DEV-ABSTAIN-PROFILE, partition: development, request: "save decision profile", expected: { phase1: semantic_required, reason: literal_abstention, boundary: profile } }
+  - { id: DEV-ABSTAIN-DESIGN, partition: development, request: "design an interface", expected: { phase1: semantic_required, reason: literal_abstention, boundary: design } }
+  - { id: DEV-ABSTAIN-ORCHESTRATE, partition: development, request: "execute approved plan", expected: { phase1: semantic_required, reason: literal_abstention, boundary: orchestrate } }
+  - { id: DEV-BARE, partition: development, request: "/agentera", expected: { phase1: deterministic_selection, tier: bare, capability: status } }
+  - { id: DEV-DIRECT, partition: development, request: "/agentera plan import safety", expected: { phase1: deterministic_selection, tier: direct, capability: plan } }
+  - { id: ADV-BARE-WITH-TEXT, partition: adversarial, request: "/agentera what time is it", expected: { phase1: semantic_required, reason: nonbare_request, boundary: bare } }
+  - { id: ADV-DIRECT-PARTIAL, partition: adversarial, request: "/agentera planner import safety", expected: { phase1: semantic_required, reason: invalid_direct_name, boundary: direct } }
+  - { id: ADV-QUOTED-PHRASE, partition: adversarial, request: 'The words "help me decide" appear in this quote.', expected: { phase1: semantic_required, reason: nonleading_phrase } }
+  - { id: ADV-NEGATED-PHRASE, partition: adversarial, request: "Do not help me decide; just show alternatives.", expected: { phase1: semantic_required, reason: nonleading_phrase } }
+  - { id: ADV-PUNCTUATED-PHRASE, partition: adversarial, request: "help me decide: now", expected: { phase1: deterministic_selection, tier: phrase, capability: discuss, topic: ": now" } }
+  - { id: ADV-EMDASH-SEPARATOR, partition: adversarial, request: "help me decide—now", expected: { phase1: deterministic_selection, tier: phrase, capability: discuss, topic: "—now" } }
+  - { id: ADV-FULLWIDTH-PHRASE, partition: adversarial, request: "ＨＥＬＰ　ＭＥ　ＤＥＣＩＤＥ： cache", expected: { phase1: deterministic_selection, tier: phrase, capability: discuss, topic: "： cache" } }
+  - { id: ADV-REPEATED-WHITESPACE, partition: adversarial, request: "help\t\tme   decide\ncache", expected: { phase1: deterministic_selection, tier: phrase, capability: discuss, topic: "\ncache" } }
+  - { id: ADV-PARTIAL-PHRASE, partition: adversarial, request: "help me deciding now", expected: { phase1: semantic_required, reason: partial_token } }
+  - { id: ADV-UNSUPPORTED-PUNCTUATION, partition: adversarial, request: "help me decide! now", expected: { phase1: semantic_required, reason: unsupported_separator } }
+
+receipt_cases:
+  - id: DEV-RECEIPT-SELECT-PASS
+    partition: development
+    valid: true
+    request: "How should we divide the import work?"
+    expected_terminal: selected
+    receipt: { version: agentera.route_receipt.v1, request_sha256: c28396095a91d6b3f0f6485f8cc4a898f7d012a1d01d000653786fa869626b70, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: plan, compound: none }
+  - id: ADV-RECEIPT-SELECT-MISSING-CAPABILITY
+    partition: adversarial
+    valid: false
+    request: "How should we divide the import work?"
+    expected_terminal: invalid_receipt
+    error: required.capability
+    receipt: { version: agentera.route_receipt.v1, request_sha256: c28396095a91d6b3f0f6485f8cc4a898f7d012a1d01d000653786fa869626b70, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, compound: none }
+  - id: DEV-RECEIPT-CLARIFY-PASS
+    partition: development
+    valid: true
+    request: "Make it better"
+    expected_terminal: clarification
+    receipt: { version: agentera.route_receipt.v1, request_sha256: d71e91121b85d9e84a5dea968dc995878667e4b631b92f8742622427a23cdaa6, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: clarify, question: "Do you want a plan or implementation?" }
+  - id: ADV-RECEIPT-CLARIFY-MISSING-QUESTION
+    partition: adversarial
+    valid: false
+    request: "Make it better"
+    expected_terminal: invalid_receipt
+    error: required.question
+    receipt: { version: agentera.route_receipt.v1, request_sha256: d71e91121b85d9e84a5dea968dc995878667e4b631b92f8742622427a23cdaa6, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: clarify }
+  - id: DEV-RECEIPT-NO-MATCH-PASS
+    partition: development
+    valid: true
+    request: "What time is the train?"
+    expected_terminal: status_fallback
+    receipt: { version: agentera.route_receipt.v1, request_sha256: b712acb8d881cc37a94f06c8ec9efb91f6ce24fa4e7349883dbbb36b57c5d7bc, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: no_match }
+  - id: ADV-RECEIPT-NO-MATCH-FORBIDDEN-CAPABILITY
+    partition: adversarial
+    valid: false
+    request: "What time is the train?"
+    expected_terminal: invalid_receipt
+    error: not
+    receipt: { version: agentera.route_receipt.v1, request_sha256: b712acb8d881cc37a94f06c8ec9efb91f6ce24fa4e7349883dbbb36b57c5d7bc, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: no_match, capability: plan }
+  - id: DEV-RECEIPT-COMPOUND-PRESERVE-PASS
+    partition: development
+    valid: true
+    request: "Plan the migration and then implement it"
+    expected_terminal: selected
+    receipt: { version: agentera.route_receipt.v1, request_sha256: f26da5835071b706a176032b263b0131817a56dcd2965f4198e57e2e23b0ac60, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: plan, compound: preserve, remainder_span: { start: 4, end: 40 } }
+  - id: ADV-RECEIPT-COMPOUND-INVALID
+    partition: adversarial
+    valid: false
+    request: "Plan the migration and then implement it"
+    expected_terminal: invalid_receipt
+    error: compound.enum
+    receipt: { version: agentera.route_receipt.v1, request_sha256: f26da5835071b706a176032b263b0131817a56dcd2965f4198e57e2e23b0ac60, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: plan, compound: clarify }
+  - id: ADV-RECEIPT-MISSING-VERSION
+    partition: adversarial
+    valid: false
+    request: "Map the migration before implementation."
+    expected_terminal: invalid_receipt
+    error: required.version
+    receipt: { request_sha256: fc8dfdefc423ea7c375669b044a01c443b48be880e0c4e769579d296ef048f74, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: plan, compound: none }
+  - id: ADV-RECEIPT-INVALID-DIGEST
+    partition: adversarial
+    valid: false
+    request: "Which capability should handle this?"
+    expected_terminal: invalid_receipt
+    error: request_sha256.pattern
+    receipt: { version: agentera.route_receipt.v1, request_sha256: not-a-digest, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: plan, compound: none }
+  - id: ADV-RECEIPT-UNKNOWN-CAPABILITY
+    partition: adversarial
+    valid: false
+    request: "Which capability should handle this?"
+    expected_terminal: invalid_receipt
+    error: binding.capability
+    receipt: { version: agentera.route_receipt.v1, request_sha256: 9516783492db2d389ec305dfea5f60d23e6d136c7cd27e236bbc29daeca427df, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: unknown, compound: none }
+  - id: ADV-RECEIPT-OUT-OF-BOUNDS-SPAN
+    partition: adversarial
+    valid: false
+    request: "Keep the second request deferred."
+    expected_terminal: invalid_receipt
+    error: binding.remainder_span
+    receipt: { version: agentera.route_receipt.v1, request_sha256: 8b5ea821ff9831f5d5c9a87e2b5a2eefbfbbce54032d2f1bc160ada48eb82180, semantic_capsule_sha256: f885d882a3d08a59aac28cebbb9a3270a28096b6f411f55f99e8772c3ce7637e, outcome: select, capability: plan, compound: preserve, remainder_span: { start: 0, end: 999 } }
+  - id: ADV-RECEIPT-MISSING-CAPSULE-DIGEST
+    partition: adversarial
+    valid: false
+    request: "Which capability should handle this?"
+    expected_terminal: invalid_receipt
+    error: required.semantic_capsule_sha256
+    receipt: { version: agentera.route_receipt.v1, request_sha256: 9516783492db2d389ec305dfea5f60d23e6d136c7cd27e236bbc29daeca427df, outcome: select, capability: plan, compound: none }
+  - id: ADV-RECEIPT-INVALID-CAPSULE-DIGEST
+    partition: adversarial
+    valid: false
+    request: "Which capability should handle this?"
+    expected_terminal: invalid_receipt
+    error: semantic_capsule_sha256.pattern
+    receipt: { version: agentera.route_receipt.v1, request_sha256: 9516783492db2d389ec305dfea5f60d23e6d136c7cd27e236bbc29daeca427df, semantic_capsule_sha256: not-a-digest, outcome: select, capability: plan, compound: none }
+  - id: ADV-RECEIPT-STALE-CAPSULE-DIGEST
+    partition: adversarial
+    valid: false
+    request: "Which capability should handle this?"
+    expected_terminal: invalid_receipt
+    error: binding.semantic_capsule_sha256
+    receipt: { version: agentera.route_receipt.v1, request_sha256: 9516783492db2d389ec305dfea5f60d23e6d136c7cd27e236bbc29daeca427df, semantic_capsule_sha256: "0000000000000000000000000000000000000000000000000000000000000000", outcome: select, capability: plan, compound: none }

package/bundle/references/adapters/package-registry.yaml

@@ -45,6 +45,8 @@ records:
           path: LICENSE
         - id: registry
           path: registry.json
+        - id: routing-evaluation-corpus
+          path: fixtures/routing/hybrid-corpus.yaml
       generated_files:
         - id: npx-bundle-marker
           path: .agentera-npx-bundle.json

package/bundle/references/adapters/package-surface-characterization.md

@@ -25,15 +25,20 @@ implementing this check are excluded, avoiding a circular source reference.
 
 ## npm bundle
 
+Contributor construction, checkout-generation, and recovery behavior is owned
+by [`docs/packaging/v3-packaging.md`](../../docs/packaging/v3-packaging.md).
+
 The self-contained npm package ships `dist/` plus `bundle/`. Bundle data
 includes the canonical `skills/` tree, required `references/`, `registry.json`,
-and package guidance. Compiled commands ship in `dist/`. The shared-skill tree
-includes its capability schemas, artifact schemas, and canonical
+the frozen routing evaluation corpus, and package guidance. Compiled commands
+ship in `dist/`. The shared-skill tree includes its capability schemas, artifact schemas, and canonical
 `skills/agentera/agents/*.toml` descriptors.
 
-Packaging tests inspect `npm pack --dry-run --json --ignore-scripts` and fail if
-the CLI or required bundle data disappears, or if a current host-native
-descriptor/runtime path enters the package.
+The package lane's isolated package fixture invokes `npm pack --json
+--ignore-scripts` after governed construction and fails if the CLI or required
+bundle data disappears, or if a current host-native descriptor/runtime path
+enters the package. Contributors use `pnpm -C packages/cli run pack:dry-run`;
+direct checkout packing remains rejected by the canonical packaging authority.
 
 ## Native package boundary
 

package/bundle/references/analysis/benchmark.md

@@ -23,6 +23,10 @@ contract validators, and runtime smoke checks.
 | --- | --- | --- | --- |
 | Startup state benchmark | `mage bench:startupState` | Measures how often Agentera CLI state reads are followed by raw artifact access during startup/state gathering. | Manual only; forbidden in normal CI. |
 
+Verification ownership, independent owner commands, mixed-file separation
+markers, conservative routing, and named execution-policy compositions live in
+[`verification-policy.yaml`](./verification-policy.yaml).
+
 The startup benchmark is an optimization signal for Decision 51 and Decision 52.
 It does not implement a startup state envelope or change runtime behavior.