atris 3.57.4 → 3.58.5

package/lib/permission-grants.js

@@ -123,7 +123,7 @@ function revokeGrant(grantId, file) {
   let grant = store.grants.find(g => g.grant_id === ref);
   if (!grant && ref) {
     // Prefix refs are a convenience, but an ambiguous prefix must never
-    // revoke an arbitrary grant — require exactly one match.
+    // revoke an arbitrary grant, require exactly one match.
     const matches = store.grants.filter(g => String(g.grant_id).startsWith(ref));
     if (matches.length > 1) return { ok: false, reason: `"${ref}" matches ${matches.length} grants; use more characters` };
     grant = matches[0];
@@ -258,7 +258,7 @@ function mergeRemoteGrants(store, remoteGrants = [], now = new Date()) {
 // Push the local grants to the backend and merge back the authoritative set.
 // apiRequestJson is injected (utils/api) so this stays offline-testable. The
 // call is best-effort: on any transport/HTTP failure the local store is left
-// untouched and { ok: false, reason } is returned — grants keep working locally.
+// untouched and { ok: false, reason } is returned, grants keep working locally.
 async function syncGrants({ apiRequestJson, token, file, endpoint = GRANTS_SYNC_ENDPOINT, now = new Date() } = {}) {
   if (typeof apiRequestJson !== 'function') {
     return { ok: false, reason: 'no api client' };

package/lib/policy-lessons.js

@@ -3,8 +3,8 @@
 // The workspace already records its own history: career XP receipts (human
 // accepts), task episodes (every review turn with an RL label), and
 // scorecards (improve/brain ticks). This module mines that history into a
-// small set of deterministic policy lessons — each one carries the evidence
-// counts it was computed from — and surfaces them at the moment an agent
+// small set of deterministic policy lessons, each one carries the evidence
+// counts it was computed from, and surfaces them at the moment an agent
 // submits proof (`atris task ready`), so the next submission behaves
 // differently than the last. No LLM calls; re-mining refreshes the numbers.
 const fs = require('fs');
@@ -23,7 +23,7 @@ const DAY_MS = 24 * 60 * 60 * 1000;
 // Review actors that are agents, not the human gate. Mining must split the
 // two: agent self-review churn and human accept/bounce are different signals.
 const AGENT_ACTOR_PATTERN = /review|validator|certifier|auto|codex|claude|devin|droid|improver|second-pass|agent|bot/i;
-// "Names a runnable verify command" — the check a reviewer could replay.
+// "Names a runnable verify command": the check a reviewer could replay.
 const VERIFY_COMMAND_PATTERN = /\b(npm (run )?test|node --test|node --check|node bin\/|pytest|cargo test|go test|make test|atris verify|grep\s+-[A-Za-z]*q[A-Za-z]*|rg\s+(?:-\S+\s+)*(?:"[^"]+"|'[^']+'|\S+)\s+(?:\.{0,2}\/|~\/|\/|[\w.-]+\/|[\w.-]+\.[A-Za-z0-9]|\b(?:atris|bin|commands|lib|scripts|src|test)\b)|git diff --(?:check|exit-code|quiet)|diff (?:-u|--brief)|cmp -s|test -[fs])\b|--verify\b|\bverify:\s/;
 const COMMIT_REF_PATTERN = /\bcommit\s+[0-9a-f]{7,40}\b/i;
 
@@ -87,7 +87,7 @@ function acceptRate(withCount, againstCount) {
 }
 
 // True when proofs carrying the feature get accepted at a higher rate than
-// proofs without it — the bar for emitting a feature lesson at all.
+// proofs without it, the bar for emitting a feature lesson at all.
 function featureHelps(counts) {
   const withRate = acceptRate(counts.accepted_with, counts.revised_with);
   const withoutRate = acceptRate(counts.accepted_without, counts.revised_without);
@@ -366,7 +366,7 @@ function syncLessonsMd(root, mined) {
   const today = (mined.mined_at || new Date().toISOString()).split('T')[0];
   const lines = (mined.lessons || []).map((lesson) => ({
     id: lesson.id,
-    line: `- **[${today}] policy-${lesson.id}** — ${lesson.status || 'pass'} — ${lesson.lesson} (mined from ${mined.sources.career_xp_receipts} receipts / ${mined.sources.task_episodes} episodes / ${mined.sources.scorecards} scorecards)`,
+    line: `- **[${today}] policy-${lesson.id}** \u2014 ${lesson.status || 'pass'} \u2014 ${lesson.lesson} (mined from ${mined.sources.career_xp_receipts} receipts / ${mined.sources.task_episodes} episodes / ${mined.sources.scorecards} scorecards)`,
   }));
   if (!lines.length) return { path: lessonsPath, written: [] };
 
@@ -374,7 +374,7 @@ function syncLessonsMd(root, mined) {
   try {
     content = fs.readFileSync(lessonsPath, 'utf8');
   } catch {
-    content = '# lessons.md — What We Learned\n\n> Append-only. One line per lesson.\n\n---\n';
+    content = '# lessons.md: What We Learned\n\n> Append-only. One line per lesson.\n\n---\n';
   }
   const written = [];
   for (const { id, line } of lines) {

package/lib/pulse.js

@@ -4,7 +4,7 @@
 //
 // The /loop skill schedules a heartbeat via Claude Code's CronCreate, but that
 // only fires while Claude Code is open and idle and dies with the session. The
-// proven overnight pattern is an OS cron (see the commander tick.sh template) —
+// proven overnight pattern is an OS cron (see the commander tick.sh template),
 // it fires regardless of whether Claude Code is running. `atris pulse` brings
 // that pattern home: one OS-cron tick that runs the existing mission engine,
 // verifies, and writes BOTH a pulse receipt (revives the Pulse AGI loop-health
@@ -32,7 +32,7 @@ const DEFAULT_CADENCE_CRON = '23 * * * *';
 const STALE_TICK_MS = 30 * 60 * 1000;
 // Liveness timeout: how long since the last finished tick before the loop reads
 // as "stale" (stopped firing). Must exceed the cadence or it flaps stale between
-// every tick — default cadence is hourly, so allow ~2 missed ticks before alarm.
+// every tick, default cadence is hourly, so allow ~2 missed ticks before alarm.
 const LIVENESS_STALE_MS = 150 * 60 * 1000;
 
 function stateDir(root) {
@@ -273,7 +273,7 @@ function buildInterruptedPulseReceipt(input = {}) {
 
 // The heartbeat's full composition (mirrors the /loop skill): run the due
 // mission to continue an existing goal; if none is due, fall back to an
-// autopilot tick — that path is where proposeCandidateHorizons AUTHORS a new
+// autopilot tick, that path is where proposeCandidateHorizons AUTHORS a new
 // goal at an endgame boundary. The fallback needs a worker, so skip it under
 // --no-claude (goal-authoring can't happen without the model in the loop).
 function shouldFallbackToAutopilot({ missionReason, autopilotFallback = true, noClaude = false } = {}) {
@@ -285,12 +285,12 @@ function shouldFallbackToAutopilot({ missionReason, autopilotFallback = true, no
 // Reward gating mirrors the improve.js tick-5 lesson: only verified,
 // work-producing ticks earn positive reward; verify failure is punished;
 // a tick that produced no work scores 0. `producedWork` MUST be the tick's
-// actual delta (new commit or newly-dirtied files), never the whole dirty tree —
+// actual delta (new commit or newly-dirtied files), never the whole dirty tree.
 // crediting pre-existing dirt re-rewards the same change every tick (the reward
 // inflation bug). The caller computes producedWork from a before/after snapshot.
 //
 // A crashed engine must also score -1. Before this, a hard `mission error` tick
-// produced no work and ran no verifier, so it scored 0 — indistinguishable from
+// produced no work and ran no verifier, so it scored 0, indistinguishable from
 // a healthy idle tick. The 2026-07-16 heartbeat death proved the cost: 25
 // consecutive error ticks left reward_sum flat, nothing escalated, and the loop
 // stopped with a ledger that still read green. `actorReason: 'error'` is a
@@ -312,7 +312,7 @@ function shouldWriteScorecard({ reward } = {}) {
 //
 // A workspace without .git made producedWork permanently false (git snapshots
 // return an empty delta), so every tick scored 0 regardless of what the engine
-// wrote — the loop was blind, not idle. When git is absent, pulse falls back to
+// wrote, the loop was blind, not idle. When git is absent, pulse falls back to
 // a filesystem snapshot: path → mtime+size, excluding churn dirs.
 
 const FS_SNAPSHOT_SKIP = new Set(['.git', 'node_modules', '.atris']);
@@ -346,7 +346,7 @@ function fsSnapshot(root) {
   return entries;
 }
 
-// New or modified files between two fsSnapshots. Deletions are ignored — the
+// New or modified files between two fsSnapshots. Deletions are ignored, the
 // signal we need is "did the tick author anything", not a full diff.
 function diffFsSnapshots(before, after) {
   const changed = [];
@@ -373,7 +373,7 @@ function defaultVerifyCmd(root) {
 // --- ghost / stale detection (pure) ---
 
 // Pair started+finished by tick_index; any 'started' with no 'finished' partner
-// is a tick that crashed mid-run — exactly the silent-runner-death failure mode.
+// is a tick that crashed mid-run, exactly the silent-runner-death failure mode.
 function findOrphanStarts(receipts) {
   if (!Array.isArray(receipts)) return [];
   const finished = new Set();

package/lib/receipt-evidence.js

@@ -4,7 +4,7 @@
 // atris/runs/. Validating those paths on disk turns "trust the prose" into
 // "read the verifier state": the queue and accept surfaces show whether the
 // receipts named in a proof exist and whether their verifiers passed. This
-// informs the human gate — it never blocks it.
+// informs the human gate, it never blocks it.
 const fs = require('fs');
 const path = require('path');
 

package/lib/reel.js

@@ -1,4 +1,4 @@
-// atris reel — a card, animated. A reel is the card from lib/card.js rendered at
+// atris reel, a card, animated. A reel is the card from lib/card.js rendered at
 // progress t in [0,1]: each element fades and rises in on a staggered schedule.
 // Pure: (spec, t) -> HTML for that single frame. commands/reel.js screenshots the
 // frames (same Chrome as card) and ffmpeg-encodes them. No new dependency.

package/lib/review-integrity.js

@@ -67,7 +67,7 @@ function independentReviewActors(task) {
 
 // True when at least one review pass came from someone other than the
 // builder. When the builder cannot be resolved at all, fall back to
-// requiring two distinct actors — independence cannot be proven from one.
+// requiring two distinct actors. Independence cannot be proven from one.
 function hasIndependentReview(task) {
   const builder = taskBuilder(task);
   if (!builder) return reviewEventActors(task).size >= 2;

package/lib/runner-command.js

@@ -24,7 +24,7 @@ const RUNNER_PROFILE_DEFS = Object.freeze({
     commandTemplate: '{bin} --fast {prompt}',
   }),
   // Guest engines: any installed headless coding CLI is a swappable worker.
-  // No commandTemplate on claude — the default spawn shape is already
+  // No commandTemplate on claude, the default spawn shape is already
   // claude-compatible (bin -p prompt --model X --allowedTools ...).
   claude: Object.freeze({
     bin: 'claude',
@@ -70,8 +70,26 @@ const RUNNER_PROFILE_DEFS = Object.freeze({
   }),
   agy: Object.freeze({
     bin: 'agy',
-    model: 'gemini-3.7-flash-high',
-    commandTemplate: '{bin} --mode accept-edits {modelFlag} -p {prompt}',
+    // gemini 3.8 flash is the 2026-09-04 bake-off pick beside opencode muse.
+    // --add-dir or agy edits its own scratch folder; the headless note or
+    // gemini stops to ask "may I edit?" and exits 0 having changed nothing.
+    model: 'gemini-3.8-flash-high',
+    commandTemplate: '{bin} --mode accept-edits --dangerously-skip-permissions --add-dir "$PWD" {modelFlag} -p "You are running headless with edit permission already granted. Apply changes directly and never ask for confirmation. "{prompt}',
+  }),
+  opencode: Object.freeze({
+    bin: 'opencode',
+    model: '',
+    commandTemplate: '{bin} run {prompt}',
+  }),
+  // Private engine: fully functional (routable, selectable, probeable) but
+  // kept out of every operator-facing list. For engines an operator wants to
+  // use without advertising them on the roster. No pinned model: headless
+  // print mode rides whatever this machine's Command Code default is.
+  commandcode: Object.freeze({
+    bin: 'cmd',
+    model: '',
+    commandTemplate: '{bin} -p {prompt}',
+    hidden: true,
   }),
 });
 
@@ -94,8 +112,19 @@ const RUNNER_PROFILES = Object.freeze(
   ])
 );
 
-// Operator-facing list: canonical profile names only (no alias noise).
-const RUNNER_PROFILE_NAMES = Object.freeze(Object.keys(RUNNER_PROFILE_DEFS));
+// Operator-facing list: canonical profile names only (no alias noise), and no
+// hidden profiles. Hidden profiles stay resolvable through RUNNER_PROFILES and
+// canonicalEngineName; they just never appear in help text, error hints, or
+// rosters.
+const HIDDEN_PROFILE_NAMES = Object.freeze(
+  Object.entries(RUNNER_PROFILE_DEFS)
+    .filter(([, def]) => def.hidden === true)
+    .map(([name]) => name)
+);
+
+const RUNNER_PROFILE_NAMES = Object.freeze(
+  Object.keys(RUNNER_PROFILE_DEFS).filter((name) => !HIDDEN_PROFILE_NAMES.includes(name))
+);
 
 function shellWord(value) {
   const s = String(value || '');
@@ -227,6 +256,7 @@ module.exports = {
   RUNNER_PROFILE_DEFS,
   RUNNER_PROFILE_ALIASES,
   RUNNER_PROFILE_NAMES,
+  HIDDEN_PROFILE_NAMES,
   resolveRunnerProfile,
   resolveClaudeRunnerModel,
   resolveClaudeRunnerBin,

package/lib/scorecard.js

@@ -245,14 +245,14 @@ function writeScorecard(atrisDir, data) {
 
   // Ensure scorecards.md exists
   if (!fs.existsSync(scorecardsPath)) {
-    const template = `# scorecards.md — Endgame Results\n\n> Append-only. One line per closed endgame. Records outcome metrics from the horizon.\n\n---\n\n`;
+    const template = `# scorecards.md \u2014 Endgame Results\n\n> Append-only. One line per closed endgame. Records outcome metrics from the horizon.\n\n---\n\n`;
     fs.writeFileSync(scorecardsPath, template, 'utf8');
   }
 
-  // Format: - **[date] slug** — shipped: X/Y — wall-clock: Nh — halt: Z% — reward: total — lessons: N
+  // Format: - **[date] slug**, shipped: X/Y, wall-clock: Nh, halt: Z%, reward: total, lessons: N
   const haltPercent = Math.round(haltRatio * 100);
   const wallClockStr = wallClockHours < 1 ? `${Math.round(wallClockHours * 60)}m` : `${wallClockHours.toFixed(1)}h`;
-  const line = `- **[${endDate}] ${slug}** — shipped: ${tasksShipped}/${tasksAttempted} — wall-clock: ${wallClockStr} — halt: ${haltPercent}% — reward: ${totalReward} — lessons: ${lessonsGenerated}\n`;
+  const line = `- **[${endDate}] ${slug}** \u2014 shipped: ${tasksShipped}/${tasksAttempted} \u2014 wall-clock: ${wallClockStr} \u2014 halt: ${haltPercent}% \u2014 reward: ${totalReward} \u2014 lessons: ${lessonsGenerated}\n`;
 
   // Append to file
   fs.appendFileSync(scorecardsPath, line, 'utf8');
@@ -302,7 +302,7 @@ function readScorecards(atrisDir) {
   const scorecards = [];
 
   for (const line of content.split('\n')) {
-    const match = line.match(/^- \*\*\[(.+?)\]\s+(.+?)\*\*\s*—\s*shipped:\s*(\d+)\/(\d+)\s*—\s*wall-clock:\s*(.+?)\s*—\s*halt:\s*(\d+)%\s*—\s*reward:\s*(-?\d+)\s*—\s*lessons:\s*(\d+)$/);
+    const match = line.match(/^- \*\*\[(.+?)\]\s+(.+?)\*\*\s*\u2014\s*shipped:\s*(\d+)\/(\d+)\s*\u2014\s*wall-clock:\s*(.+?)\s*\u2014\s*halt:\s*(\d+)%\s*\u2014\s*reward:\s*(-?\d+)\s*\u2014\s*lessons:\s*(\d+)$/);
     if (!match) continue;
 
     const [, endDate, slug, shipped, attempted, wallClockStr, haltPercent, reward, lessons] = match;

package/lib/security-scan.js

@@ -1,13 +1,13 @@
 'use strict';
 
-// atris security scan — deterministic secrets / PII / privacy detectors (no LLM).
+// atris security scan: deterministic secrets / PII / privacy detectors (no LLM).
 //
 // A finding is a fact (file:line + rule + severity), so it drops straight into a
 // loop / mission / CI gate and doubles as a SOC 2 evidence artifact (machine
 // JSON). Precision over recall: a noisy gate gets muted, and a muted gate is dead.
 // Suppress a single line with a trailing `atris-allow-secret` comment.
 //
-// Zero external deps (Node built-ins only) — repo contract.
+// Zero external deps (Node built-ins only). Repo contract.
 
 const fs = require('fs');
 const path = require('path');
@@ -77,7 +77,7 @@ const PII_RULES = [
 // Code-execution risks. For an AI CLI that runs autonomous loops and shells out,
 // these are the "are we actually safe" checks beyond data exposure. eval/Function
 // are almost never legitimate (HIGH); shelling out with interpolated input is the
-// command-injection class (MEDIUM — common and sometimes safe, so it asks for a
+// command-injection class (MEDIUM, common and sometimes safe, so it asks for a
 // human look rather than hard-failing the gate).
 const CODE_RULES = [
   { id: 'eval-call', sev: 'medium', cat: 'code', re: /(?<![.\w])eval\((?!\s*\))/, why: 'eval() can run untrusted code' },
@@ -271,7 +271,7 @@ function scanText(text, rules = RULES) {
   return out;
 }
 
-// Code-execution rules only make sense in actual code files — `eval(` written in
+// Code-execution rules only make sense in actual code files, `eval(` written in
 // a markdown doc is prose, not a vuln.
 const CODE_EXTS = new Set(['.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx', '.py', '.rb', '.go', '.java', '.php', '.sh', '.bash', '.zsh']);
 const DOC_EXTS = new Set(['.md', '.mdx', '.txt', '.patch']);
@@ -359,7 +359,7 @@ function resolveTargets({ root = process.cwd(), paths = [], staged = false } = {
 
 // Full scan: line-level findings across files + repo hygiene findings.
 // The scanner's own pattern database and its fixtures necessarily contain the
-// very strings it detects — never scan them (a tool that flags itself is noise).
+// very strings it detects. Never scan them (a tool that flags itself is noise).
 const SELF_FILES = new Set(['lib/security-scan.js', 'commands/security-review.js', 'test/security-scan.test.js']);
 
 function runScan({ root = process.cwd(), paths = [], staged = false } = {}) {

package/lib/self-drive.js

@@ -66,7 +66,7 @@ function postBlockerToFleet({ task, blockerClass, stopReason, mission }, injecte
     const apiKey = loadKey();
     if (!apiKey) return { posted: false, channel };
     const ref = taskRef(task);
-    const content = `Mission blocker filed with no local engine ready: ${ref} — ${String(stopReason || blockerClass).trim()}. Mission: ${String(mission?.objective || mission?.id || '').trim()}.`;
+    const content = `Mission blocker filed with no local engine ready: ${ref}: ${String(stopReason || blockerClass).trim()}. Mission: ${String(mission?.objective || mission?.id || '').trim()}.`;
     const response = httpPost(`${SWARLO_HUB}/api/${SWARLO_HUB_ID}/channels/${channel}/posts`, {
       headers: {
         'Content-Type': 'application/json',