brainclaw 1.9.0 → 1.10.0

package/dist/core/default-profiles/doctor.yaml

@@ -1,11 +1,11 @@
-name: doctor
-description: Run diagnostics and fix issues automatically
-trust_level: trusted
-trigger: manual
-prompt: >-
-  Run bclaw_doctor, analyze the findings, and fix what can be fixed
-  automatically. For issues requiring human judgment, create plans.
-invoke: codex exec --full-auto "{prompt}"
-tags:
-  - diagnostics
-  - built-in
+name: doctor
+description: Run diagnostics and fix issues automatically
+trust_level: trusted
+trigger: manual
+prompt: >-
+  Run bclaw_doctor, analyze the findings, and fix what can be fixed
+  automatically. For issues requiring human judgment, create plans.
+invoke: codex exec --full-auto "{prompt}"
+tags:
+  - diagnostics
+  - built-in

package/dist/core/default-profiles/janitor.yaml

@@ -1,11 +1,11 @@
-name: janitor
-description: Clean up stale claims, archive old notes, check for orphaned files
-trust_level: contributor
-trigger: manual
-prompt: >-
-  Clean up this project: prune stale claims, archive old runtime notes, check
-  for orphaned files. Use bclaw_doctor, prune, and release-claims.
-invoke: codex exec --full-auto "{prompt}"
-tags:
-  - maintenance
-  - built-in
+name: janitor
+description: Clean up stale claims, archive old notes, check for orphaned files
+trust_level: contributor
+trigger: manual
+prompt: >-
+  Clean up this project: prune stale claims, archive old runtime notes, check
+  for orphaned files. Use bclaw_doctor, prune, and release-claims.
+invoke: codex exec --full-auto "{prompt}"
+tags:
+  - maintenance
+  - built-in

package/dist/core/default-profiles/onboarder.yaml

@@ -1,11 +1,11 @@
-name: onboarder
-description: Generate a project summary for new team members
-trust_level: observer
-trigger: manual
-prompt: >-
-  Generate a project summary for a new team member. Read the board, plans,
-  decisions, constraints, and produce a concise onboarding document.
-invoke: claude -p "{prompt}" --allowedTools "Edit,Write,Bash,Read,Glob,Grep"
-tags:
-  - onboarding
-  - built-in
+name: onboarder
+description: Generate a project summary for new team members
+trust_level: observer
+trigger: manual
+prompt: >-
+  Generate a project summary for a new team member. Read the board, plans,
+  decisions, constraints, and produce a concise onboarding document.
+invoke: claude -p "{prompt}" --allowedTools "Edit,Write,Bash,Read,Glob,Grep"
+tags:
+  - onboarding
+  - built-in

package/dist/core/default-profiles/reviewer.yaml

@@ -1,13 +1,13 @@
-name: reviewer
-description: Review pending candidates and give structured opinions
-trust_level: trusted
-trigger: manual
-prompt: >-
-  Review pending candidates in this project. For each, give a structured
-  opinion (approve/reject with reasons). Use
-  bclaw_find(entity: "candidate", filter: {status: "pending"}) and
-  bclaw_transition(entity: "candidate", id, to: "accepted" | "rejected").
-invoke: claude -p "{prompt}" --allowedTools "Edit,Write,Bash,Read,Glob,Grep"
-tags:
-  - review
-  - built-in
+name: reviewer
+description: Review pending candidates and give structured opinions
+trust_level: trusted
+trigger: manual
+prompt: >-
+  Review pending candidates in this project. For each, give a structured
+  opinion (approve/reject with reasons). Use
+  bclaw_find(entity: "candidate", filter: {status: "pending"}) and
+  bclaw_transition(entity: "candidate", id, to: "accepted" | "rejected").
+invoke: claude -p "{prompt}" --allowedTools "Edit,Write,Bash,Read,Glob,Grep"
+tags:
+  - review
+  - built-in

package/dist/core/dispatcher.js

@@ -469,7 +469,7 @@ export function generateBrief(plan, item, cwd, briefMode, options) {
     if (mode === 'full') {
         parts.push(buildProtocolSection(options));
     }
-    // pln#528 — transport-aware addendum (debrief LeaseUp P1#2). When the agent is
+    // pln#528 — transport-aware addendum (field debrief P1#2). When the agent is
     // spawned sandboxed (no MCP + no git commit — e.g. codex --sandbox
     // workspace-write), the MCP lifecycle lines in the Protocol section do NOT
     // apply. Say so explicitly and make the FILE protocol authoritative, so the

package/dist/core/entity-operations.js

@@ -62,6 +62,18 @@ function passesProvenanceFilter(item, filter) {
     }
     return true;
 }
+function isLegacyProvenance(item) {
+    return item.provenance?.kind === 'legacy';
+}
+function isLowConfidenceAutoReflect(item, filter) {
+    const provenance = item.provenance;
+    if (provenance?.kind !== 'auto_reflect')
+        return false;
+    const threshold = typeof filter.minAutoReflectConfidence === 'number'
+        ? filter.minAutoReflectConfidence
+        : DEFAULT_MIN_AUTO_REFLECT_CONFIDENCE;
+    return (provenance.confidence ?? 0) < threshold;
+}
 /** Thrown when a verb is not yet wired for a given entity. */
 export class EntityOperationUnsupportedError extends Error {
     constructor(entity, verb, hint) {
@@ -129,9 +141,21 @@ function loadAgentRunsWithReconciliation(cwd) {
 }
 export function listEntities(name, cwd, filter = {}) {
     const all = loadAll(name, cwd);
-    const filtered = applyFilter(all, filter);
+    const fieldFiltered = applyFieldFilter(all, filter);
+    const excludedLegacy = filter.includeLegacy === true
+        ? 0
+        : fieldFiltered.filter((item) => isLegacyProvenance(item)).length;
+    const excludedLowConfidenceAutoReflect = fieldFiltered.filter((item) => isLowConfidenceAutoReflect(item, filter)).length;
+    const filtered = fieldFiltered.filter((item) => passesProvenanceFilter(item, filter));
     const paged = applyPaging(filtered, filter);
-    return { entity: name, total: filtered.length, items: paged };
+    return {
+        entity: name,
+        total: filtered.length,
+        items: paged,
+        excluded_legacy: excludedLegacy,
+        excluded_low_confidence_auto_reflect: excludedLowConfidenceAutoReflect,
+        total_before_provenance_filter: fieldFiltered.length,
+    };
 }
 /** Default serialized-items budget (chars) — keeps a bclaw_find payload well under the ~25k-token MCP cap (trp#449). */
 export const DEFAULT_FIND_CHAR_BUDGET = 40000;
@@ -189,8 +213,10 @@ function loadAll(name, cwd) {
     }
 }
 function applyFilter(items, filter) {
+    return applyFieldFilter(items, filter).filter((item) => passesProvenanceFilter(item, filter));
+}
+function applyFieldFilter(items, filter) {
     let result = items;
-    result = result.filter((item) => passesProvenanceFilter(item, filter));
     if (filter.status) {
         result = result.filter((item) => item.status === filter.status);
     }

package/dist/core/execution-adapters.js

@@ -1,7 +1,7 @@
 import { spawn, execFileSync } from 'node:child_process';
 import fs from 'node:fs';
 import path from 'node:path';
-import { buildClaimEnvPrefix } from './execution-profile.js';
+import { buildClaimEnvPrefix, buildWorkerIdentityEnv } from './execution-profile.js';
 import { getCapabilityProfile } from './agent-capability.js';
 import { nowISO } from './ids.js';
 import { ensureRuntimeDirs, getRuntimeLogPath, getRuntimeSignalPath, } from './runtime-signals.js';
@@ -97,15 +97,16 @@ export class CliExecutionAdapter {
     }
     start(invoke, options) {
         const isWin32 = process.platform === 'win32';
-        const env = {
-            ...process.env,
-            // pln#562 step 5 — truthful attribution: every commit a dispatched
-            // worker makes is authored as the AGENT, not as the human whose
-            // git config happens to be on the machine. invoke.env may override.
-            ...buildGitAttributionEnv(options.agent),
-            ...(invoke.env ?? {}),
-            ...(options.claimId ? { BRAINCLAW_CLAIM_ID: options.claimId } : {}),
-        };
+        // F7 (trp_0e5150d3): route worker env through buildWorkerIdentityEnv so the
+        // worker is an independent agent — coordinator identity (BRAINCLAW_AGENT*,
+        // SESSION_ID, PROJECT) is scrubbed LAST and cannot be reintroduced by
+        // invoke.env. pln#562 step 5 — truthful git attribution (worker authors its
+        // own commits) is merged before the scrub. BRAINCLAW_CWD is preserved (D1a).
+        const env = buildWorkerIdentityEnv(process.env, {
+            agent: options.agent,
+            claimId: options.claimId,
+            extraEnv: { ...buildGitAttributionEnv(options.agent), ...(invoke.env ?? {}) },
+        });
         if (invoke.promptDelivery === 'temp_file' && invoke.tempFilePath && invoke.promptText) {
             const dir = path.dirname(invoke.tempFilePath);
             if (!fs.existsSync(dir))

package/dist/core/execution-profile.js

@@ -247,6 +247,64 @@ export function buildClaimEnvPrefix(claimId, options) {
         default: return `BRAINCLAW_CLAIM_ID=${claimId} `;
     }
 }
+/**
+ * F7 (trp_0e5150d3): build the env for a SPAWNED worker so it is an INDEPENDENT
+ * agent, not a clone of the coordinator. The coordinator's process.env carries
+ * identity-bearing state (BRAINCLAW_AGENT*, BRAINCLAW_SESSION_ID, BRAINCLAW_PROJECT);
+ * inherited by an MCP-capable worker it would make the worker read/mutate the
+ * coordinator's session-scoped active project and identify AS the coordinator.
+ *
+ * Merge order (Codex cadrage review — batch 2): baseEnv → extraEnv (git
+ * attribution + invoke.env) → worker identity (agent name, claim) → SCRUB the
+ * forbidden coordinator keys LAST, so a deliberate or accidental extraEnv cannot
+ * reintroduce them. This helper is the SINGLE place worker env is built; every
+ * agent-spawn site must route through it.
+ *
+ * BRAINCLAW_CWD is intentionally PRESERVED (D1 = (a)): a worker's worktree lives
+ * outside the monorepo and has no .brainclaw, so it must anchor to the shared
+ * monorepo-root store the coordinator pointed at; the claim scopes the work. A
+ * caller override via extraEnv.BRAINCLAW_CWD is honoured (deliberate, not leaked).
+ */
+export function buildWorkerIdentityEnv(baseEnv, options = {}) {
+    const env = {};
+    for (const [key, value] of Object.entries(baseEnv)) {
+        if (typeof value === 'string')
+            env[key] = value;
+    }
+    if (options.extraEnv) {
+        for (const [key, value] of Object.entries(options.extraEnv)) {
+            if (typeof value === 'string')
+                env[key] = value;
+        }
+    }
+    // Worker identity — truthful attribution, mirrors buildGitAttributionEnv.
+    const agent = options.agent?.trim();
+    if (agent) {
+        env.BRAINCLAW_AGENT = agent;
+        env.BRAINCLAW_AGENT_NAME = agent;
+    }
+    else {
+        // No target agent → don't leak the coordinator's identity either.
+        delete env.BRAINCLAW_AGENT;
+        delete env.BRAINCLAW_AGENT_NAME;
+    }
+    // Claim ownership is explicit: adopt the supplied claim, otherwise DELETE any
+    // inherited parent BRAINCLAW_CLAIM_ID so an unclaimed/dry-run worker (e.g. the
+    // codev/codev-rounds call sites that pass only { agent }) never adopts the
+    // coordinator's claim (Codex final review F7 finding).
+    if (options.claimId && options.claimId !== '(dry-run)') {
+        env.BRAINCLAW_CLAIM_ID = options.claimId;
+    }
+    else {
+        delete env.BRAINCLAW_CLAIM_ID;
+    }
+    // SCRUB LAST — coordinator identity must never survive into the worker, even if
+    // baseEnv or extraEnv set it. (BRAINCLAW_CWD is deliberately NOT scrubbed.)
+    delete env.BRAINCLAW_AGENT_ID;
+    delete env.BRAINCLAW_SESSION_ID;
+    delete env.BRAINCLAW_PROJECT;
+    return env;
+}
 // ── Verification helper (used by setup / doctor) ───────────────────────────
 /**
  * Try `node --version` from the resolved profile's `node_path` to confirm

package/dist/core/execution.js

@@ -161,7 +161,7 @@ export async function attemptExecution(invoke, options) {
     // claim was reused/re-dispatched without one), REFUSE to spawn instead of
     // falling back to options.cwd — which is the integration repo, where the
     // worker would edit the main tree directly (dangerous for an autonomous fleet,
-    // debrief LeaseUp). Return the command for manual, isolated execution.
+    // a cross-project field debrief). Return the command for manual, isolated execution.
     if (options.requireWorktree && !options.worktreePath) {
         appendAuditEntry({
             actor: options.dispatcherAgent,

package/dist/core/facade-schema.js

@@ -196,5 +196,14 @@ export const FacadeResponseSchema = z.object({
      * remains for the bootstrap hint; new consumers should read this array.
      */
     next_actions: z.array(NextActionSchema).optional(),
+    /**
+     * Code Map P0 (spec §10): opt-in, present ONLY when the project's Code Map
+     * manifest carries `code_map_enabled: true`. Absent for every project that
+     * has not turned Code Map on (the P0 default), so existing bclaw_work callers
+     * are unaffected and the off-path adds no work. Shape mirrors
+     * CodeMapWorkSection: { enabled, matches, freshness_badge, missing_index?,
+     * lock_wait_ms? }. Passthrough so the section can evolve without a schema bump.
+     */
+    code_map: z.object({}).passthrough().optional(),
 });
 //# sourceMappingURL=facade-schema.js.map

package/dist/core/instruction-templates.js

@@ -233,6 +233,7 @@ function renderSessionProtocol() {
         '1. Call `bclaw_work(intent)` (consult|execute|resume|review) — one call handles session, context, and claim (execute). Every response carries `next_actions` with the exact follow-up calls: follow those instead of memorizing the API.',
         '2. Canonical grammar for memory objects: `bclaw_find` / `bclaw_get` / `bclaw_create` / `bclaw_update` / `bclaw_remove` / `bclaw_transition` (entity, …).',
         '3. Do not assume project state without reading brainclaw context first.',
+        '4. Before editing unfamiliar code, orient with the **Code Map**: `bclaw_code_brief(target=<symbol|path>)` for a ranked reading list + related decisions/traps, `bclaw_code_find(query=<name>)` to locate a symbol/class/component. Don\'t grep the repo blind when a symbol index already answers "where is X / what should I read first". A `missing_index`/stale badge means run `bclaw_code_refresh` first.',
         '',
         'Escalation (only when orchestrating other agents): `bclaw_coordinate(intent=review|consult|assign)`. Verify any dispatch with `bclaw_dispatch_status(target_id)` — trust its sentinel-based verdict, not the tracked pid. Details: `docs/concepts/dispatch-lifecycle.md`.',
     ].join('\n');
@@ -322,6 +323,7 @@ function renderAvailableTools() {
         '**Session/claims:** `bclaw_session_start`, `bclaw_session_end`, `bclaw_claim`, `bclaw_release_claim` · **steps:** `bclaw_add_step`, `bclaw_complete_step`, `bclaw_update_step`, `bclaw_delete_step` · **sequences:** `bclaw_list_sequences`, `bclaw_create_sequence`, `bclaw_update_sequence`, `bclaw_delete_sequence`',
         '**Inbox:** `bclaw_read_inbox`, `bclaw_ack_message`, `bclaw_send_message`, `bclaw_correct_handoff` · **capture:** `bclaw_write_note`, `bclaw_quick_capture(text, type?)` · **search:** `bclaw_search` · **setup:** `bclaw_setup`, `bclaw_bootstrap`, `bclaw_switch`, `bclaw_release_notes`',
         '**Escalation (orchestrators):** `bclaw_coordinate(intent=review|consult|assign|ideate)` · `bclaw_dispatch(intent=execute)` on an active sequence · `bclaw_loop(intent=turn|complete_turn|advance|close)` to drive turns · `bclaw_dispatch_status(target_id)` to verify',
+        '**Code discovery (Code Map):** `bclaw_code_find(query)` locate a symbol/class/component · `bclaw_code_brief(target)` ranked reading list + related memory before editing · `bclaw_code_status` / `bclaw_code_refresh` check freshness / rebuild the symbol+import index. Use it before grepping unfamiliar code — see `docs/code-map.md`.',
         '',
         'Responses are self-teaching — follow their `next_actions`. Full catalog + stability contract: `docs/integrations/mcp.md`, `docs/concepts/mcp-governance.md`.',
     ].join('\n');

package/dist/core/loops/verbs.js

@@ -653,7 +653,6 @@ function assertOpenQuestionsInvariant(thread, intent) {
         const message = `[brainclaw/loops/fsm] ${intent}: open_questions drift on loop ${thread.id} ` +
             `— persisted=${JSON.stringify([...persisted])} canonical=${JSON.stringify([...canonical])}`;
         // Log in prod so drift is visible without taking down the engine.
-        // eslint-disable-next-line no-console
         console.warn(message);
         if (fsmAssertsEnabled()) {
             throw new Error(message);

package/dist/core/mcp-command-resolution.js

@@ -216,7 +216,9 @@ export function brainclawMcpEntry(agentName, existing, workspacePath) {
 export function quoteShellArg(arg) {
     if (/^[A-Za-z0-9_./:=+-]+$/.test(arg))
         return arg;
-    return `"${arg.replace(/"/g, '\\"')}"`;
+    // Escape backslashes before quotes — otherwise an input like `\"` would
+    // collapse to a quote that breaks out of the quoted argument.
+    return `"${arg.replace(/\\/g, '\\\\').replace(/"/g, '\\"')}"`;
 }
 /**
  * Resolve the brainclaw CLI invocation for hook configs.

package/dist/core/messaging.js

@@ -108,7 +108,7 @@ export function readInbox(input, cwd) {
     if (input.markAsRead) {
         return mutate({ cwd }, () => {
             // Fresh read inside lock
-            let messages = applyInboxFilters(loadMessagesFromDir(dir), input);
+            const messages = applyInboxFilters(loadMessagesFromDir(dir), input);
             const total = messages.length;
             const offset = input.offset ?? 0;
             const limit = input.limit ?? 20;
@@ -127,7 +127,7 @@ export function readInbox(input, cwd) {
         });
     }
     // Read-only path: no lock needed
-    let messages = applyInboxFilters(loadMessagesFromDir(dir), input);
+    const messages = applyInboxFilters(loadMessagesFromDir(dir), input);
     const total = messages.length;
     const offset = input.offset ?? 0;
     const limit = input.limit ?? 20;