chati-dev 4.5.4 → 4.5.6

package/node_modules/@chati/tracking-clickup/src/index.js

@@ -200,6 +200,28 @@ export class TrackingClickUp {
     return Object.freeze(canonicalize(projection));
   }
 
+  /** Records a receipt produced by an independently authorized MCP boundary. */
+  confirmExternalDelivery({ projection_id, receipt_ref } = {}) {
+    const projection = this.#find(projection_id);
+    string(receipt_ref, 'INVALID_TRANSPORT_RECEIPT', 'receipt_ref');
+    if (this.#verifyReference(receipt_ref, 'receipt') !== true) {
+      fail('UNVERIFIED_RECEIPT', 'external delivery receipt must be an immutable verified reference');
+    }
+    if (projection.delivery_state === 'permanent_failure') fail('PERMANENT_FAILURE', 'permanently failed projection cannot be confirmed');
+    if (projection.delivery_state === 'confirmed') {
+      if (projection.receipt_ref !== receipt_ref) fail('RECEIPT_CONFLICT', 'projection is already confirmed by a different receipt');
+      return Object.freeze(canonicalize(projection));
+    }
+    projection.delivery_state = 'confirmed';
+    projection.receipt_ref = receipt_ref;
+    projection.reconciliation_state = 'pending';
+    projection.last_attempt_at = timestamp(this.#clock);
+    projection.attempts += 1;
+    this.#setEvolution(projection);
+    this.#persist();
+    return Object.freeze(canonicalize(projection));
+  }
+
   reconcile({ projection_id } = {}) {
     const projection = this.#find(projection_id);
     if (!this.#transport || typeof this.#transport.reconcile !== 'function') fail('RECONCILIATION_NOT_CONFIGURED', 'no authorized reconciliation transport is configured');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "chati-dev",
-  "version": "4.5.4",
+  "version": "4.5.6",
   "description": "AI-Powered Multi-Agent Orchestration System - Structured vibe coding for Full Stack Development",
   "type": "module",
   "bin": {

package/src/config/gemini-hooks-generator.js

@@ -9,7 +9,7 @@
  * Constitution Article XIX — hooks are generated at install time, zero runtime overhead.
  *
  * Gemini CLI Hook Events (used by chati.dev):
- * - BeforeModel: runs before model inference (PRISM injection, model advisory)
+ * - BeforeModel: runs before model inference (PRISM injection, legacy model advisory)
  * - BeforeTool: runs before tool execution (mode governance, constitution guard, read protection)
  * - PreCompress: runs before context compression (session digest)
  */
@@ -27,7 +27,7 @@ export const HOOK_MAP = {
   // indefinitely from a long-running session.
   'license-guard': { event: 'BeforeModel', description: 'Validate license on every turn (chati.dev governance)' },
   'prism-engine': { event: 'BeforeModel', description: 'Inject PRISM context into model prompt' },
-  'model-governance': { event: 'BeforeModel', description: 'Advisory: recommended model per agent' },
+  'model-governance': { event: 'BeforeModel', description: 'Legacy advisory for pre-v2 installations' },
   'mode-governance': { event: 'BeforeTool', description: 'Block writes outside current mode scope' },
   'constitution-guard': { event: 'BeforeTool', description: 'Block destructive commands and secret writes' },
   'read-protection': { event: 'BeforeTool', description: 'Block reads of sensitive files' },
@@ -121,13 +121,14 @@ main();
 
 /**
  * Generate the model governance hook for Gemini CLI.
- * BeforeModel event — advisory about recommended model per agent.
+ * BeforeModel event — legacy advisory for pre-v2 installations.
  */
 function generateModelGovernance() {
   return `${HOOK_HEADER}
 /**
  * Model Governance — BeforeModel
- * Advisory: logs recommended model for current agent.
+ * V2 routing is automatic and invisible. This wrapper only supports legacy
+ * installations that do not have a v2 installation contract.
  */
 async function main() {
   let input = '';
@@ -139,6 +140,11 @@ async function main() {
     const event = JSON.parse(input);
     const cwd = event.cwd || process.cwd();
 
+    if (existsSync(join(cwd, '.chati', 'v2', 'installation.json'))) {
+      console.log(JSON.stringify({}));
+      return;
+    }
+
     const sessionPath = join(cwd, '.chati', 'session.yaml');
     if (!existsSync(sessionPath)) {
       console.log(JSON.stringify({}));

package/src/dashboard/layout.js

@@ -65,14 +65,16 @@ export function buildProjectInfo(data) {
   const rawMode = session.execution_mode;
   const mode = formatMode(rawMode && typeof rawMode === 'object' ? rawMode.mode : rawMode);
   const lang = session.language || 'en';
-  // Show the provider-specific IDE (last in the list) rather than always claude-code
-  const ides = session.ides || [];
-  const ide = ides[ides.length - 1] || 'unknown';
+  const providers = Array.isArray(session.providers_enabled) && session.providers_enabled.length > 0
+    ? session.providers_enabled.join('/')
+    : 'unknown';
+  const languageVisibleWidth = 12 + lang.length;
+  const providersVisibleWidth = 11 + providers.length;
 
   return [
     brand('│') + `  ${dim('Project:')} ${name}` + ' '.repeat(Math.max(1, 30 - name.length)) + `${dim('Type:')} ${type}` + ' '.repeat(Math.max(1, 18 - type.length)) + brand('│'),
     brand('│') + `  ${dim('Phase:')}   ${state}` + ' '.repeat(Math.max(1, 28)) + `${dim('Mode:')} ${mode}` + ' '.repeat(Math.max(1, 10)) + brand('│'),
-    brand('│') + `  ${dim('Language:')} ${lang}` + ' '.repeat(Math.max(1, 30 - lang.length)) + `${dim('IDE:')}  ${ide}` + ' '.repeat(Math.max(1, 18 - ide.length)) + brand('│'),
+    brand('│') + `  ${dim('Language:')} ${lang}` + ' '.repeat(Math.max(1, 28 - languageVisibleWidth)) + `${dim('Providers:')} ${providers}` + ' '.repeat(Math.max(1, 31 - providersVisibleWidth)) + brand('│'),
   ];
 }
 

package/src/installer/core.js

@@ -1,4 +1,5 @@
 import { mkdirSync, writeFileSync, copyFileSync, existsSync, readFileSync, readdirSync, statSync } from 'fs';
+import { execFileSync } from 'child_process';
 import { join, dirname, basename } from 'path';
 import { fileURLToPath } from 'url';
 import { createRequire } from 'module';
@@ -215,6 +216,21 @@ export async function installFramework(config) {
 
   // 7. Update .gitignore with runtime session lock files
   updateGitignore(targetDir, selectedIDEs);
+
+  // RAIL evidence and release lanes require a Git worktree. For a genuinely
+  // new project, initialize it automatically. Nested projects already covered
+  // by a parent worktree are left untouched.
+  ensureGitRepository(targetDir);
+}
+
+export function ensureGitRepository(targetDir) {
+  try {
+    execFileSync('git', ['-C', targetDir, 'rev-parse', '--show-toplevel'], { stdio: 'ignore' });
+    return { initialized: false };
+  } catch {
+    execFileSync('git', ['-C', targetDir, 'init', '-q'], { stdio: 'ignore' });
+    return { initialized: true };
+  }
 }
 
 /**

package/src/installer/templates.js

@@ -9,7 +9,7 @@ export function generateSessionYaml(config) {
   // Schema MUST match session-manager.js DEFAULT_SESSION fields,
   // otherwise validateSession() rejects installer-generated sessions.
   const session = {
-    schema_version: '1.0',
+    schema_version: '1.2',
     version: '1.0',
     mode: 'discover',
     project: {
@@ -35,6 +35,26 @@ export function generateSessionYaml(config) {
     agents: {},
     backlog: [],
     last_handoff: '',
+    scaffold_candidates: [],
+    scaffold_signals: {},
+    scaffold_applied: [],
+    active_model: null,
+    active_provider: null,
+    context_tokens_used: 0,
+    context_window_tokens: null,
+    context_last_bracket: null,
+    decision_trail: [],
+    teams: [],
+    team_events: [],
+    preview: {
+      status: 'inactive',
+      url: null,
+      port: null,
+      framework: null,
+      logs_captured: 0,
+      adjustment_count: 0,
+    },
+    model_selections: [],
     // Article XXIII — Reasoning Tier Governance.
     // Tier starts at 'standard' and is promoted by reasoning-escalator.js
     // in response to friction signals. See chati.dev/hooks/reasoning-escalator.js.

package/src/installer-v2/clickup-preflight.js

@@ -0,0 +1,32 @@
+import { execFileSync } from 'node:child_process';
+
+const COMMANDS = Object.freeze({ claude: 'claude', codex: 'codex', grok: 'grok' });
+
+export function outputHasConnectedClickUp(output) {
+  if (typeof output !== 'string') return false;
+  return output.split(/\r?\n/).some((line) => {
+    if (!/\bclickup\b/i.test(line)) return false;
+    return !/\b(disabled|failed|error|not configured|unhealthy|unauthorized|disconnected)\b|authentication required/i.test(line);
+  });
+}
+
+/** Read-only preflight. It never writes provider config or reads credentials. */
+export function checkClickUpMcp(selectedProviders, { exec = execFileSync } = {}) {
+  const providers = [...new Set(selectedProviders || [])].filter((provider) => COMMANDS[provider]);
+  const checks = providers.map((provider) => {
+    try {
+      const output = exec(COMMANDS[provider], ['mcp', 'list'], {
+        encoding: 'utf8', timeout: 15_000, stdio: ['ignore', 'pipe', 'pipe'],
+      });
+      return { provider, connected: outputHasConnectedClickUp(output) };
+    } catch {
+      return { provider, connected: false };
+    }
+  });
+  const connectedProviders = checks.filter((check) => check.connected).map((check) => check.provider);
+  return Object.freeze({
+    passed: connectedProviders.length > 0,
+    connected_providers: connectedProviders,
+    checks,
+  });
+}

package/src/installer-v2/model-catalog-envelope.json

@@ -1,12 +1,12 @@
 {
   "catalog": {
-    "snapshot_id": "chati-model-catalog-2026-08-27",
-    "published_at": "2026-08-27T00:00:00.000Z",
+    "snapshot_id": "chati-model-catalog-2026-08-27-v3",
+    "published_at": "2026-08-27T12:00:00.000Z",
     "expires_at": "2026-11-25T00:00:00.000Z",
     "models": [
       {
         "provider_id": "anthropic",
-        "model_id": "fable",
+        "model_id": "claude-fable-5",
         "actions": [
           "discovery",
           "planning",
@@ -17,13 +17,12 @@
         "tier": "frontier",
         "natural_role": "architecture and design",
         "routing_priority": {
-          "discovery": 95,
-          "planning": 100,
+          "discovery": 78,
+          "planning": 94,
           "build": 45,
           "review": 90,
           "adjudication": 95,
           "architect": 100,
-          "detail": 100,
           "ux": 100
         },
         "adjudication_priority": 95,
@@ -31,7 +30,7 @@
       },
       {
         "provider_id": "anthropic",
-        "model_id": "claude-opus-4-8",
+        "model_id": "claude-opus-5",
         "actions": [
           "discovery",
           "planning",
@@ -42,11 +41,13 @@
         "tier": "frontier",
         "natural_role": "quality rules and judgment-heavy work",
         "routing_priority": {
-          "discovery": 90,
-          "planning": 95,
+          "discovery": 92,
+          "planning": 96,
           "build": 75,
           "review": 95,
           "adjudication": 100,
+          "brownfield-wu": 100,
+          "detail": 100,
           "qa-planning": 97,
           "qa-implementation": 97
         },
@@ -65,13 +66,14 @@
         "tier": "workhorse",
         "natural_role": "daily implementation and planning craft",
         "routing_priority": {
-          "discovery": 85,
-          "planning": 88,
+          "discovery": 90,
+          "planning": 92,
           "build": 98,
           "review": 80,
-          "brief": 95,
-          "phases": 95,
-          "tasks": 95,
+          "greenfield-wu": 100,
+          "brief": 100,
+          "phases": 100,
+          "tasks": 100,
           "dev": 98
         },
         "adjudication_priority": 60
@@ -122,7 +124,7 @@
       },
       {
         "provider_id": "openai",
-        "model_id": "terra",
+        "model_id": "gpt-5.6-terra",
         "actions": [
           "discovery",
           "planning",
@@ -146,7 +148,7 @@
       },
       {
         "provider_id": "openai",
-        "model_id": "luna",
+        "model_id": "gpt-5.6-luna",
         "actions": [
           "discovery",
           "planning",
@@ -163,21 +165,6 @@
         },
         "adjudication_priority": 30
       },
-      {
-        "provider_id": "openai",
-        "model_id": "nano",
-        "actions": [
-          "discovery",
-          "build"
-        ],
-        "tier": "utility",
-        "natural_role": "classification, extraction and cleanup",
-        "routing_priority": {
-          "discovery": 35,
-          "build": 40
-        },
-        "adjudication_priority": 5
-      },
       {
         "provider_id": "xai",
         "model_id": "grok-4.6",
@@ -223,56 +210,8 @@
         },
         "adjudication_priority": 70,
         "highest_reasoning_configuration": "xhigh"
-      },
-      {
-        "provider_id": "xai",
-        "model_id": "grok-4.3",
-        "actions": [
-          "discovery",
-          "planning",
-          "build",
-          "review"
-        ],
-        "tier": "worker",
-        "natural_role": "cost-efficient parallel execution",
-        "routing_priority": {
-          "discovery": 65,
-          "planning": 60,
-          "build": 78,
-          "review": 60
-        },
-        "adjudication_priority": 35
-      },
-      {
-        "provider_id": "xai",
-        "model_id": "grok-4.20",
-        "actions": [
-          "discovery",
-          "build"
-        ],
-        "tier": "worker",
-        "natural_role": "high-volume structured tasks",
-        "routing_priority": {
-          "discovery": 55,
-          "build": 70
-        },
-        "adjudication_priority": 20
-      },
-      {
-        "provider_id": "xai",
-        "model_id": "grok-build-0.1",
-        "actions": [
-          "build"
-        ],
-        "tier": "specialist",
-        "natural_role": "speed-first implementation in Grok Build",
-        "routing_priority": {
-          "build": 90,
-          "dev": 92
-        },
-        "adjudication_priority": 10
       }
     ]
   },
-  "signature": "rNiDCOiVFtrfGUrQWXw3dqR1cYAh/xZElyt0AfLXjhgykWzcw4o0NygK0ciHNXMDwhJUqhsp5fKIPpwli/YdDA=="
+  "signature": "tL1JS1RkPfOBDE6rcctrEPN98oQ6FjLurwZnzYglMvrsvvceRbS19INcxmPYQjT+NJv507Vuo/HIkm+J0nQ1Cw=="
 }

package/src/installer-v2/model-catalog.json

@@ -1,25 +1,25 @@
 {
-  "snapshot_id": "chati-model-catalog-2026-08-27",
-  "published_at": "2026-08-27T00:00:00.000Z",
+  "snapshot_id": "chati-model-catalog-2026-08-27-v3",
+  "published_at": "2026-08-27T12:00:00.000Z",
   "expires_at": "2026-11-25T00:00:00.000Z",
   "models": [
     {
       "provider_id": "anthropic",
-      "model_id": "fable",
+      "model_id": "claude-fable-5",
       "actions": ["discovery", "planning", "build", "review", "adjudication"],
       "tier": "frontier",
       "natural_role": "architecture and design",
-      "routing_priority": { "discovery": 95, "planning": 100, "build": 45, "review": 90, "adjudication": 95, "architect": 100, "detail": 100, "ux": 100 },
+      "routing_priority": { "discovery": 78, "planning": 94, "build": 45, "review": 90, "adjudication": 95, "architect": 100, "ux": 100 },
       "adjudication_priority": 95,
       "highest_reasoning_configuration": "xhigh"
     },
     {
       "provider_id": "anthropic",
-      "model_id": "claude-opus-4-8",
+      "model_id": "claude-opus-5",
       "actions": ["discovery", "planning", "build", "review", "adjudication"],
       "tier": "frontier",
       "natural_role": "quality rules and judgment-heavy work",
-      "routing_priority": { "discovery": 90, "planning": 95, "build": 75, "review": 95, "adjudication": 100, "qa-planning": 97, "qa-implementation": 97 },
+      "routing_priority": { "discovery": 92, "planning": 96, "build": 75, "review": 95, "adjudication": 100, "brownfield-wu": 100, "detail": 100, "qa-planning": 97, "qa-implementation": 97 },
       "adjudication_priority": 100,
       "highest_reasoning_configuration": "xhigh"
     },
@@ -29,7 +29,7 @@
       "actions": ["discovery", "planning", "build", "review"],
       "tier": "workhorse",
       "natural_role": "daily implementation and planning craft",
-      "routing_priority": { "discovery": 85, "planning": 88, "build": 98, "review": 80, "brief": 95, "phases": 95, "tasks": 95, "dev": 98 },
+      "routing_priority": { "discovery": 90, "planning": 92, "build": 98, "review": 80, "greenfield-wu": 100, "brief": 100, "phases": 100, "tasks": 100, "dev": 98 },
       "adjudication_priority": 60
     },
     {
@@ -53,7 +53,7 @@
     },
     {
       "provider_id": "openai",
-      "model_id": "terra",
+      "model_id": "gpt-5.6-terra",
       "actions": ["discovery", "planning", "build", "review", "adjudication"],
       "tier": "workhorse",
       "natural_role": "scoped implementation and efficient review",
@@ -63,22 +63,13 @@
     },
     {
       "provider_id": "openai",
-      "model_id": "luna",
+      "model_id": "gpt-5.6-luna",
       "actions": ["discovery", "planning", "build", "review"],
       "tier": "worker",
       "natural_role": "low-cost workers and routine tasks",
       "routing_priority": { "discovery": 60, "planning": 55, "build": 72, "review": 60 },
       "adjudication_priority": 30
     },
-    {
-      "provider_id": "openai",
-      "model_id": "nano",
-      "actions": ["discovery", "build"],
-      "tier": "utility",
-      "natural_role": "classification, extraction and cleanup",
-      "routing_priority": { "discovery": 35, "build": 40 },
-      "adjudication_priority": 5
-    },
     {
       "provider_id": "xai",
       "model_id": "grok-4.6",
@@ -98,33 +89,6 @@
       "routing_priority": { "discovery": 82, "planning": 84, "build": 98, "review": 82, "adjudication": 70, "dev": 98 },
       "adjudication_priority": 70,
       "highest_reasoning_configuration": "xhigh"
-    },
-    {
-      "provider_id": "xai",
-      "model_id": "grok-4.3",
-      "actions": ["discovery", "planning", "build", "review"],
-      "tier": "worker",
-      "natural_role": "cost-efficient parallel execution",
-      "routing_priority": { "discovery": 65, "planning": 60, "build": 78, "review": 60 },
-      "adjudication_priority": 35
-    },
-    {
-      "provider_id": "xai",
-      "model_id": "grok-4.20",
-      "actions": ["discovery", "build"],
-      "tier": "worker",
-      "natural_role": "high-volume structured tasks",
-      "routing_priority": { "discovery": 55, "build": 70 },
-      "adjudication_priority": 20
-    },
-    {
-      "provider_id": "xai",
-      "model_id": "grok-build-0.1",
-      "actions": ["build"],
-      "tier": "specialist",
-      "natural_role": "speed-first implementation in Grok Build",
-      "routing_priority": { "build": 90, "dev": 92 },
-      "adjudication_priority": 10
     }
   ]
 }

package/src/installer-v2/model-catalog.sig

@@ -1 +1 @@
-rNiDCOiVFtrfGUrQWXw3dqR1cYAh/xZElyt0AfLXjhgykWzcw4o0NygK0ciHNXMDwhJUqhsp5fKIPpwli/YdDA==
+tL1JS1RkPfOBDE6rcctrEPN98oQ6FjLurwZnzYglMvrsvvceRbS19INcxmPYQjT+NJv507Vuo/HIkm+J0nQ1Cw==

package/src/installer-v2/wizard-installation.js

@@ -1,7 +1,7 @@
 import { sha256 } from '@chati/core';
 
 const PROVIDER_BINDINGS = Object.freeze({
-  claude: Object.freeze({ provider_id: 'anthropic', harness_id: 'claude', default_model: 'fable' }),
+  claude: Object.freeze({ provider_id: 'anthropic', harness_id: 'claude', default_model: 'claude-fable-5' }),
   codex: Object.freeze({ provider_id: 'openai', harness_id: 'codex', default_model: 'gpt-5.6-sol' }),
   grok: Object.freeze({ provider_id: 'xai', harness_id: 'grok', default_model: 'grok-4.6' }),
 });
@@ -100,7 +100,7 @@ export function buildWizardV2InstallationInput({
   const projectSlug = projectName.trim().toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/(^-|-$)/g, '') || 'project';
   const installation = {
     installation_id: `wizard-${projectSlug}`,
-    profile: installationMode === 'internal' ? 'focus-ai-internal' : 'other-supported-profile',
+    profile: installationMode === 'internal' ? 'authorized-internal' : 'open',
     enabled_providers,
     capability_snapshot_ref: snapshotId,
     policy_ref: `policy://installation/${snapshotId}`,

package/src/intelligence/registry-manager.js

@@ -36,8 +36,15 @@ export function checkRegistry(targetDir) {
   // Check each registered entity exists on disk
   const entities = flattenEntitiesMap(registry.entities);
   for (const entity of entities) {
-    const filePath = join(targetDir, entity.path);
-    if (existsSync(filePath)) {
+    // Registry entries describe the monorepo source layout. Installed projects
+    // bundle the CLI source under .chati.dev/_cli, so health must resolve both
+    // layouts instead of reporting bundled runtime files as missing.
+    const candidates = [join(targetDir, entity.path)];
+    const bundledSourcePrefix = 'packages/chati-dev/src/';
+    if (entity.path.startsWith(bundledSourcePrefix)) {
+      candidates.push(join(targetDir, resolveFrameworkDir(targetDir), '_cli', entity.path.slice(bundledSourcePrefix.length)));
+    }
+    if (candidates.some((filePath) => existsSync(filePath))) {
       found.push(entity);
     } else {
       missing.push(entity);
@@ -193,4 +200,3 @@ function loadRegistry(registryPath) {
     return null;
   }
 }
-