brainclaw 1.28.5 → 1.28.6

package/dist/core/loops/impl-bind.js

@@ -34,9 +34,28 @@ function deriveBindings(loop, sequenceId, cwd) {
     if (loop.slots.length !== lanes.length) {
         throw new Error(`impl-bind lane/slot mismatch: sequence ${sequenceId} has ${lanes.length} lane(s) (${lanes.join(', ')}) but loop has ${loop.slots.length} slot(s); open one worker slot per lane`);
     }
+    // A positional fallback is unsafe here: callers commonly attach a
+    // perspective to a slot, and silently pairing that perspective with a
+    // different alphabetically-sorted lane can invert the lane's scope policy.
+    // Single-lane sequences retain the historical default-slot convenience;
+    // multi-lane binds must carry an explicit, unique lane on every slot.
+    if (lanes.length > 1) {
+        const slotLanes = loop.slots.map((slot) => slot.lane?.trim() || '');
+        if (slotLanes.some((lane) => !lane)) {
+            throw new Error(`impl-bind requires explicit slot.lane for every lane when binding multiple lanes (${lanes.join(', ')}); positional slot order is rejected to prevent lane permutation`);
+        }
+        const uniqueSlotLanes = new Set(slotLanes);
+        if (uniqueSlotLanes.size !== slotLanes.length || uniqueSlotLanes.size !== lanes.length) {
+            throw new Error(`impl-bind requires one unique slot.lane per sequence lane; slots=${slotLanes.join(', ')}, lanes=${lanes.join(', ')}`);
+        }
+        const unknown = slotLanes.filter((lane) => !grouped.has(lane));
+        if (unknown.length > 0) {
+            throw new Error(`impl-bind slot lane(s) not present in sequence ${sequenceId}: ${unknown.join(', ')}; expected ${lanes.join(', ')}`);
+        }
+    }
     const bindings = {};
     loop.slots.forEach((slot, index) => {
-        const lane = lanes[index];
+        const lane = lanes.length > 1 ? slot.lane.trim() : (slot.lane?.trim() || lanes[index]);
         const items = grouped.get(lane);
         const scopes = [...new Set(items.map((item) => item.scope_hint?.trim()).filter((value) => Boolean(value)))];
         bindings[slot.slot_id] = {

package/dist/core/loops/store.js

@@ -62,6 +62,18 @@ function resolveProtocol(kind, mode) {
     }
     return iteration ? { iteration } : undefined;
 }
+function collectStopConditionPhases(condition) {
+    switch (condition.kind) {
+        case 'phase_reached':
+        case 'artifact_produced':
+            return [condition.phase];
+        case 'any':
+        case 'all':
+            return condition.conditions.flatMap(collectStopConditionPhases);
+        default:
+            return [];
+    }
+}
 function buildSlot(partial) {
     return {
         slot_id: partial.slot_id ?? generateSlotId(),
@@ -141,6 +153,12 @@ export function openLoop(input, cwd) {
     if (phaseNames.size !== phases.length) {
         throw new Error('openLoop: phase names must be unique');
     }
+    const stopCondition = input.stop_condition ?? protocolDefaults.stop_condition;
+    const referencedPhases = collectStopConditionPhases(stopCondition);
+    const invalidPhase = referencedPhases.find((phase) => !phaseNames.has(phase));
+    if (invalidPhase) {
+        throw new Error(`openLoop: stop_condition references unknown phase "${invalidPhase}"; expected one of ${[...phaseNames].join(', ')}`);
+    }
     const now = nowISO();
     const id = generateLoopId();
     const mutation_id = generateMutationId();
@@ -174,7 +192,7 @@ export function openLoop(input, cwd) {
         // questions; the request_input handler (step 2) appends/removes ids.
         open_questions: [],
         linked: input.linked,
-        stop_condition: input.stop_condition ?? protocolDefaults.stop_condition,
+        stop_condition: stopCondition,
         evidence_policy: evidencePolicyForNewLoop(),
         created_at: now,
         updated_at: now,

package/dist/core/loops/types.js

@@ -33,7 +33,7 @@ export const LoopLinksSchema = z.object({
     source_artifact_digest: z.string().regex(/^[a-f0-9]{64}$/).optional(),
     /** Durable, deterministic identity of the policy decision that created this loop. */
     continuation_key: z.string().regex(/^[a-f0-9]{64}$/).optional(),
-});
+}).strict();
 /**
  * Memory categories a loop phase can request via `context_filter` (pln#492).
  *

package/dist/facts.js

@@ -1,8 +1,8 @@
 // Generated by scripts/emit-site-facts.mjs at build time. Do not edit manually.
-// Source: brainclaw v1.28.5 on 2026-08-28T18:04:39.470Z
+// Source: brainclaw v1.28.6 on 2026-08-28T22:03:41.224Z
 export const FACTS = {
-  "version": "1.28.5",
-  "generated_at": "2026-08-28T18:04:39.470Z",
+  "version": "1.28.6",
+  "generated_at": "2026-08-28T22:03:41.224Z",
   "tools": {
     "count": 71,
     "published_count": 69,
@@ -479,7 +479,7 @@ export const FACTS = {
   },
   "bench": {
     "schema": "brainclaw.bench.v1",
-    "generated_at": "2026-08-28T18:04:37.892Z",
+    "generated_at": "2026-08-28T22:03:39.012Z",
     "node_version": "v24.19.0",
     "platform": "linux-x64",
     "repeats": 3,
@@ -488,7 +488,7 @@ export const FACTS = {
         "name": "cold_onboard",
         "volume": "empty",
         "description": "fresh machine → init → first useful context. Baseline for time-to-first-value.",
-        "duration_ms_median": 51,
+        "duration_ms_median": 77,
         "payload_chars_median": 1640,
         "payload_tokens_est_median": 410
       },
@@ -496,15 +496,15 @@ export const FACTS = {
         "name": "warm_work",
         "volume": "medium",
         "description": "bclaw_work consult over a real-shaped store (~200 plans / 500 handoffs / 450 claims).",
-        "duration_ms_median": 72,
-        "payload_chars_median": 2625,
-        "payload_tokens_est_median": 656
+        "duration_ms_median": 129,
+        "payload_chars_median": 2626,
+        "payload_tokens_est_median": 657
       },
       {
         "name": "first_edit",
         "volume": "medium",
         "description": "code_find + code_brief on the fresh-agent path (missing index, first touch).",
-        "duration_ms_median": 8,
+        "duration_ms_median": 12,
         "payload_chars_median": 1680,
         "payload_tokens_est_median": 420
       }

package/dist/facts.json

@@ -1,6 +1,6 @@
 {
-  "version": "1.28.5",
-  "generated_at": "2026-08-28T18:04:39.470Z",
+  "version": "1.28.6",
+  "generated_at": "2026-08-28T22:03:41.224Z",
   "tools": {
     "count": 71,
     "published_count": 69,
@@ -477,7 +477,7 @@
   },
   "bench": {
     "schema": "brainclaw.bench.v1",
-    "generated_at": "2026-08-28T18:04:37.892Z",
+    "generated_at": "2026-08-28T22:03:39.012Z",
     "node_version": "v24.19.0",
     "platform": "linux-x64",
     "repeats": 3,
@@ -486,7 +486,7 @@
         "name": "cold_onboard",
         "volume": "empty",
         "description": "fresh machine → init → first useful context. Baseline for time-to-first-value.",
-        "duration_ms_median": 51,
+        "duration_ms_median": 77,
         "payload_chars_median": 1640,
         "payload_tokens_est_median": 410
       },
@@ -494,15 +494,15 @@
         "name": "warm_work",
         "volume": "medium",
         "description": "bclaw_work consult over a real-shaped store (~200 plans / 500 handoffs / 450 claims).",
-        "duration_ms_median": 72,
-        "payload_chars_median": 2625,
-        "payload_tokens_est_median": 656
+        "duration_ms_median": 129,
+        "payload_chars_median": 2626,
+        "payload_tokens_est_median": 657
       },
       {
         "name": "first_edit",
         "volume": "medium",
         "description": "code_find + code_brief on the fresh-agent path (missing index, first touch).",
-        "duration_ms_median": 8,
+        "duration_ms_median": 12,
         "payload_chars_median": 1680,
         "payload_tokens_est_median": 420
       }

package/docs/loops/implementation.md

@@ -20,9 +20,11 @@ a worker. `execute ↔ verify` iterates until the verify command is green or
 the cycle cap is hit.
 
 Binding validates the complete graph: every sequence item must reference a
-linked, existing plan (and an existing step when `stepId` is present). Explicit
-sequence lanes are paired deterministically with worker slots, one slot per
-lane. Each slot then carries its lane, plan/step ids, and `scope_hint`.
+linked, existing plan (and an existing step when `stepId` is present). A
+multi-lane sequence requires exactly one explicitly named worker slot per lane;
+positional slots are rejected because sorting lanes could otherwise attach a
+perspective or scope policy to the wrong lane. Each slot then carries its lane,
+plan/step ids, and `scope_hint`.
 
 ## Default protocol
 
@@ -46,9 +48,13 @@ participating slot must produce its expected artifact before advance fires.
 ## Entry points
 
 - **Direct open (typical).**
-  `bclaw_loop(intent='open', kind='implementation', slots=[…], linked={plan_ids:[…], sequence_ids:[…]}, allow_orphan=true)`
-  followed by `bind`. `allow_orphan=true` acknowledges that the caller will
-  drive worker turns.
+  `bclaw_loop(intent='open', kind='implementation', slots=[{role:'implementer', lane:'api'}, …], linked={plan_ids:[…], sequence_ids:[…]}, allow_orphan=true)`
+  followed by a dry-run `bind`, then the real `bind`. `allow_orphan=true`
+  acknowledges that the caller will drive worker turns. For multiple lanes,
+  every slot must name its lane; the bind response must still be checked for
+  lane/perspective alignment. The `linked` key is exactly
+  `{sequence_ids:[…], plan_ids:[…]}`; unknown keys are rejected by the open
+  envelope, and a dry-run is the safe way to validate the complete contract.
 - **Via bind.** `bclaw_loop(intent='bind', loop_id=…)` validates the linked
   sequence and advances `bind → execute`. Historical launch options
   (`lanes`, `auto_execute`, `model`, `max_assignments`) remain accepted
@@ -59,6 +65,11 @@ participating slot must produce its expected artifact before advance fires.
   slots may be dispatched concurrently. Without `dispatch=true`, `turn` is
   state-only and never starts a process.
 
+An implementation loop has no `update` intent. If opening or binding fails,
+cancel the invalid open loop and reopen it with corrected links/slots. The
+default phases are `bind`, `execute`, `verify`, and `handoff_ready`; a custom
+`stop_condition` must reference only phases present in the loop.
+
 ## Advance gates
 
 `verify` carries an `advance_gate`:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainclaw",
-  "version": "1.28.5",
+  "version": "1.28.6",
   "description": "Shared project memory for humans and coding agents.",
   "type": "module",
   "repository": {