madarx 2.13.0 → 2.15.0

package/.next/static/tMcPS9JR5cRXSe0u5ne95/_buildManifest.js

@@ -0,0 +1 @@
+self.__BUILD_MANIFEST=function(e,r,t,_){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},__routerFilterStatic:{numItems:140,errorRate:1e-4,numBits:2684,numHashes:14,bitArray:[0,1,1,e,e,0,e,r,r,e,r,r,e,r,r,r,e,e,r,r,r,r,e,e,e,e,e,e,r,r,e,e,e,e,e,r,r,r,e,e,r,e,r,e,e,r,r,e,r,r,r,r,e,e,e,r,r,r,e,e,r,e,e,e,r,r,e,r,e,e,e,r,e,e,r,e,e,r,e,e,e,e,e,e,r,e,r,r,r,r,r,r,r,e,e,e,r,r,e,r,r,r,r,r,e,r,e,r,e,r,e,e,e,r,r,r,e,r,r,r,r,e,r,e,e,e,e,r,e,r,r,e,r,e,e,e,e,r,e,e,r,e,e,r,e,e,e,e,r,r,e,e,e,e,r,e,e,r,e,e,e,e,e,r,e,e,r,e,r,e,e,e,r,r,r,e,r,e,e,e,e,r,e,r,r,e,r,r,r,r,e,r,e,r,r,e,r,r,e,r,r,r,r,r,e,r,e,r,r,r,r,e,e,e,e,e,r,e,e,e,e,e,e,e,e,r,e,e,e,r,e,e,e,r,r,r,e,e,r,e,e,e,e,r,e,r,e,e,e,r,e,r,r,e,e,r,r,r,r,r,e,r,r,e,e,e,r,r,e,e,r,r,r,e,r,r,e,e,e,e,e,e,e,r,r,e,r,r,r,e,e,r,r,e,e,e,e,e,r,e,r,e,e,e,e,e,e,e,e,e,r,r,e,e,e,e,e,r,r,e,r,e,r,e,e,r,r,r,e,e,r,e,r,r,r,r,r,e,e,r,e,e,r,e,r,e,r,r,r,r,e,r,e,r,r,r,r,r,e,r,r,r,e,e,r,r,r,e,r,e,r,e,e,r,r,r,r,r,e,e,r,e,r,r,r,e,r,r,r,e,e,e,r,e,r,e,r,e,r,r,r,e,e,e,r,e,r,e,r,e,e,e,e,e,e,r,e,e,e,r,e,r,e,r,r,e,e,r,r,r,r,r,e,e,r,r,r,r,r,e,e,r,r,r,e,r,r,e,r,r,e,e,e,r,e,r,e,e,e,e,e,e,r,e,r,r,e,e,r,r,r,r,r,e,e,e,e,r,r,e,e,e,r,r,r,e,e,e,r,r,e,r,r,r,r,e,r,r,r,r,e,r,r,r,r,e,e,e,e,r,r,e,e,e,e,r,e,e,r,r,e,r,e,e,e,r,e,e,r,e,r,r,r,r,r,e,e,r,r,e,r,e,e,r,e,e,e,r,r,e,r,e,e,e,e,e,e,e,e,r,r,e,r,r,r,e,r,r,r,r,r,r,r,e,r,e,e,r,e,e,e,r,e,r,r,e,e,r,r,e,e,e,e,e,e,r,r,e,e,r,e,r,e,e,r,r,e,r,e,r,r,r,r,r,e,r,e,r,r,r,r,e,e,e,e,e,r,r,r,r,e,r,e,e,e,r,e,e,e,r,e,r,r,e,e,r,e,e,r,r,r,e,e,r,r,e,r,e,r,r,r,r,e,e,r,e,r,e,e,e,r,r,e,r,e,r,e,e,r,r,r,e,r,r,e,e,e,e,e,r,r,e,e,e,r,e,r,e,r,r,r,r,r,e,r,r,r,r,e,r,e,r,r,e,r,e,e,r,r,e,e,r,e,r,r,e,e,r,r,r,r,e,e,e,r,r,r,e,r,r,e,r,r,e,r,r,r,r,r,r,r,r,r,r,e,e,e,e,e,r,e,r,r,r,e,e,r,r,r,e,r,e,r,e,e,r,e,r,e,r,e,r,e,e,r,e,r,r,e,r,e,r,r,r,r,r,e,r,r,r,e,r,e,e,r,r,e,e,r,r,r,e,r,e,e,r,r,e,e,r,e,r,r,r,r,r,e,r,e,e,e,r,r,r,r,r,e,r,e,e,e,r,e,e,r,e,r,e,e,r,r,r,e,r,r,r,r,r,r,e,e,r,e,r,e,e,e,r,e,r,r,e,e,e,e,r,e,r,r,r,e,r,e,e,r,e,e,e,r,r,e,r,r,e,e,e,e,e,e,e,e,r,r,e,e,e,e,e,r,r,r,r,e,r,e,e,r,r,r,e,r,e,r,e,e,e,e,e,e,e,e,e,e,r,r,e,e,r,e,e,e,e,r,r,e,e,e,e,r,r,r,e,e,r,e,e,e,r,e,r,e,r,r,e,r,r,e,e,e,e,r,r,e,r,r,r,e,e,r,e,r,r,r,e,e,r,e,r,e,r,e,e,e,e,r,e,r,r,e,r,r,r,r,e,e,r,e,e,r,r,e,r,e,e,r,r,e,r,e,r,e,e,e,e,r,e,r,r,e,e,r,e,e,e,e,e,e,e,e,r,r,e,r,r,e,r,r,e,r,e,r,r,r,r,e,r,e,r,e,e,r,r,e,r,r,r,r,e,r,e,e,r,e,e,r,r,r,r,e,e,r,e,e,r,r,e,r,e,r,e,r,e,r,e,e,e,e,e,e,e,e,e,e,e,e,e,r,e,e,r,e,e,r,e,e,e,r,r,e,e,r,r,r,e,e,e,e,r,e,e,r,r,r,e,e,r,e,e,e,r,e,e,e,e,e,r,r,e,e,r,e,r,r,e,e,e,e,e,e,r,e,r,e,r,e,e,r,e,e,e,e,r,e,r,r,e,e,r,r,e,e,r,e,r,e,r,e,e,e,r,e,e,r,e,r,e,r,r,e,r,r,e,e,r,r,e,e,r,e,e,e,r,e,r,r,e,r,e,r,r,e,r,r,e,e,r,e,e,e,e,r,e,e,e,e,e,r,r,e,e,e,r,r,r,e,e,e,r,r,e,r,e,r,r,r,e,e,e,r,e,e,e,r,r,r,r,e,r,e,r,r,e,r,r,e,r,e,r,r,r,e,r,r,r,r,r,e,e,r,e,r,e,r,e,e,e,e,e,e,r,r,r,r,e,e,r,r,r,e,r,r,e,e,r,e,e,r,e,e,r,r,r,r,r,r,e,e,r,e,e,e,r,e,r,r,r,r,e,r,r,e,e,r,e,e,e,e,e,e,r,r,r,e,e,e,r,r,e,e,e,r,e,e,e,e,e,r,r,r,r,e,e,e,r,r,e,r,r,e,e,r,r,e,r,e,r,r,e,e,r,r,r,e,e,r,r,r,e,e,e,e,r,e,e,e,e,r,r,r,r,e,r,r,r,e,r,r,e,r,r,r,e,r,e,e,e,r,e,r,e,r,e,r,e,r,r,e,e,r,e,e,r,r,r,e,e,e,e,e,e,r,r,e,r,r,r,r,r,e,r,r,e,r,e,r,e,r,r,e,r,e,e,e,e,r,e,r,r,r,e,r,e,r,r,e,e,e,r,r,r,e,r,e,r,e,e,e,e,e,r,r,r,r,e,e,r,r,r,e,r,r,e,r,r,r,e,r,r,r,r,r,r,r,r,e,e,e,r,r,r,e,e,e,e,e,r,r,e,r,r,r,e,r,r,e,r,e,e,e,e,e,r,e,e,r,e,r,r,e,r,e,r,r,r,r,r,r,e,e,r,r,r,r,r,r,r,e,r,e,e,r,r,e,r,e,e,r,e,r,r,r,e,e,r,e,r,r,r,r,r,e,e,e,e,r,r,r,e,e,e,r,e,r,e,e,r,e,r,e,r,r,r,e,e,r,r,e,e,r,r,e,r,r,e,e,e,e,e,r,e,e,e,e,r,r,e,r,r,e,e,e,r,r,e,r,r,r,e,r,r,r,r,r,e,e,r,e,e,r,e,r,e,r,e,r,e,r,e,e,r,r,r,r,e,r,r,e,e,r,r,e,r,r,e,r,r,r,r,r,e,e,e,r,r,e,e,r,r,e,r,r,e,e,r,r,e,e,r,e,r,r,r,r,e,e,e,r,e,r,e,e,r,r,r,r,e,r,r,e,e,e,r,e,e,e,r,e,e,r,e,e,e,e,e,r,e,r,e,r,e,r,e,r,r,e,e,e,r,e,r,e,r,r,r,e,e,e,e,e,e,r,e,e,r,e,r,e,e,e,r,r,r,e,e,e,r,e,e,r,r,e,e,r,e,r,e,e,e,e,e,r,r,e,e,r,r,e,e,r,e,r,r,e,e,r,r,r,r,e,r,r,e,e,e,e,r,r,e,e,e,e,e,e,r,e,e,e,e,r,e,r,r,r,e,e,e,e,e,r,e,e,e,r,e,r,e,e,r,r,e,e,r,r,r,e,r,e,r,e,e,e,r,r,r,e,e,r,e,r,r,e,e,e,r,e,r,r,r,r,e,e,r,r,e,r,r,r,r,r,e,e,e,e,e,r,e,r,e,e,e,r,r,e,r,e,e,e,r,r,r,e,r,e,e,r,r,r,r,r,e,r,e,r,e,e,r,e,e,e,r,r,r,r,r,r,e,r,e,r,r,e,e,e,e,r,e,e,e,r,e,e,r,e,r,r,e,r,r,r,r,r,e,r,r,e,r,r,e,r,e,r,e,r,e,e,e,e,r,r,e,r,e,r,r,r,e,e,r,r,e,r,e,r,e,e,r,r,e,e,e,e,e,r,e,r,r,r,r,r,r,e,e,r,r,e,e,e,r,r,e,r,e,r,r,r,r,r,e,e,e,r,r,e,e,r,r,e,r,e,e,e,r,r,r,r,r,r,r,r,e,r,r,r,r,r,r,e,e,r,e,r,e,r,e,r,e,e,e,e,r,r,e,r,r,e,e,r,r,e,e,e,r,e,e,e,r,r,e,e,e,r,e,e,r,e,e,e,e,e,r,r,e,r,e,r,r,r,r,r,e,e,r,r,e,e,r,e,r,r,r,r,r,r,r,e,r,e,e,e,e,r,e,e,r,e,r,e,e,e,r,e,e,e,e,r,e,e,r,r,e,r,r,r,e,e,r,e,r,r,e,e,e,e,r,e,e,r,r,r,e,r,e,e,r,r,e,e,r,r,r,e,r,e,e,r,r,e,e,e,e,r,r,e,e,r,e,r,r,e,e,r,e,e,r,e,r,e,r,r,r,e,r,r,e,e,r,e,e,e,r,r,r,r,e,e,e,r,r,e,e,e,e,r,e,r,e,r,e,r,r,r,r,r,e,r,r,r,e,r,r,e,e,r,r,r,e,e,r,e,r,r,r,r,e,e,e,r,e,e,e,r,r,r,e,r,e,r,e,r,r,e,r,e,e,e,e,r,r,r,r,r,r,r,e,e,e,e,e,e,r,r,r,e,r,r,e,e,r,e,e,e,e,e,r,r,r,r,r,e,r,r,r,r,r,r,e,e,e,r,r,e,e,e,r,e,e,r,e,e,r,e,r,e,e,e,e,e,e,e,r,e,e,e,e,r,e,r,e,e,r,r,e,r,r,e,r,r,r,e,e,e,e,e,r,e,r,r,e,e,e,r,e,e,r,e,e,r,r,r,e,e,e,e,e,r,r,e,e,r,r,e,r,e,e,r,r,e,r,r,e,e,e,e,r,e,e,e,r,e,e,r,r,r,r,r,r,e,e,r,e,r,e,r,r,r,e,r,e,e,e,e,e,r,e,r,e,e,r,r,e,r,r,r,r,r,e,e,r,e,r,e,r,e,r,e,e,e,e,r,r,e,e,r,e,e,e,r,e,r,r,e,e,r,r,e,r,r,r,r,r,e,e,e,r,r,r,e,r,r,r,e,r,e,e,e,r,e,r,e,e,e,r,e,r,e,e,e,e,r,e,r,e,r,r,e,e,r,r,r,r,r,r,e,e,e,r,e,r,e,e,e,r,e,e,r,e,e,r,r,e,r,r,e,e,e,e,e,r,r,e,e,r,r,r,e,e,r,e,e,e,e,e,r,r,e,r,e,e,r,r,e,r,e,e,r,e,r,r,e,e,e,e,r,e,r,e,r,e,e,e,e,e,e,r,e,e,r,r,e,e,e,r,r,e,e,e,e,e,e,r,r,e,r,r,r,r,r,r,r,e,e,r,e,r,e,r,r,e,e,e,e,e,e,e,r,r,r,r,e,r,e,e,e,e,e,e,e,e,e,r,r,r,e,r]},__routerFilterDynamic:{numItems:39,errorRate:1e-4,numBits:748,numHashes:14,bitArray:[r,e,r,r,e,e,e,e,r,r,r,e,r,r,e,r,e,r,e,r,e,e,r,e,e,r,e,e,e,e,r,r,e,r,e,r,e,r,e,r,e,e,e,r,r,r,r,r,e,r,r,r,e,e,r,e,e,r,r,r,r,r,e,e,r,r,r,e,e,r,r,e,r,e,e,r,r,e,r,e,e,e,e,e,e,r,e,e,r,r,r,e,e,e,r,e,r,e,r,r,e,r,e,r,e,e,e,r,e,e,e,e,r,r,e,e,r,r,e,r,r,r,r,e,e,r,e,e,e,r,e,e,e,r,r,r,r,r,e,r,r,r,r,e,r,e,e,r,r,e,e,r,e,r,e,r,r,r,r,r,e,r,r,e,r,e,r,r,e,r,r,e,e,e,e,e,r,r,r,e,r,r,e,e,r,r,e,e,e,r,r,e,r,e,e,e,r,r,e,e,r,e,r,r,e,r,e,e,e,e,e,r,r,r,e,r,r,r,e,r,e,e,e,r,e,e,e,e,r,e,r,e,e,r,e,e,r,e,e,r,r,r,r,e,e,r,e,r,r,r,e,e,r,r,r,r,e,e,r,r,e,r,r,r,e,e,e,r,r,e,e,r,e,e,e,e,e,e,e,r,r,e,r,e,r,e,e,r,r,r,r,r,r,r,e,r,r,e,r,r,e,r,e,e,r,e,e,e,e,r,r,e,r,e,e,r,r,r,e,e,e,r,e,e,r,r,e,r,e,r,r,r,r,r,r,e,r,e,e,e,r,r,e,r,e,r,r,e,r,e,r,e,e,e,r,e,e,r,r,r,r,r,r,r,r,e,e,e,e,r,r,e,r,e,e,r,r,e,e,r,e,e,r,e,e,e,e,e,e,e,r,r,e,e,e,r,r,e,e,r,r,e,e,r,r,r,r,r,r,r,r,e,e,r,r,r,e,e,r,r,e,e,e,e,r,r,e,r,r,r,r,r,r,e,r,e,r,e,e,e,e,e,e,r,e,r,r,e,r,r,e,e,r,e,e,r,e,e,r,r,r,r,e,r,r,e,r,r,r,e,e,e,e,r,e,e,e,e,r,r,r,r,r,e,e,e,r,e,e,e,e,r,r,e,r,r,r,e,r,r,e,e,r,r,r,e,e,e,r,r,r,e,r,e,r,r,e,r,e,e,e,e,e,r,r,e,r,r,e,r,e,r,e,r,e,r,e,r,r,r,e,r,e,e,r,r,e,e,r,r,e,e,e,e,r,r,r,e,r,r,e,e,e,e,e,e,e,r,e,r,e,e,r,e,r,e,r,r,e,r,e,e,e,e,e,e,r,r,e,e,r,r,e,e,e,e,e,e,r,e,r,e,e,r,r,r,r,e,r,e,e,e,e,r,r,r,r,e,e,e,r,e,r,r,r,r,e,e,r,e,r,r,r,e,r,e,e,r,e,r,r,e,e,e,r,r,r,r,e,r,r,r,e,r,e,e,r,e,e,r,e,r,r,r,e,r,r,e,e,e,r,e,r,e,e,e,e,r,e,e,e,e,e,e,e,e,r,e,e,r,r,r,r,e,r,e,e,e,r,r,e,r,e,e,r,e,e,e,e,r,e,r,e,e,r,e,e,e,e,e,r,e,e,e,r,e,r,r,e,r,e,e,e,e,r,r,r,e,e,r,e,e,r,e,r,e,r,r]},"/_error":["static/chunks/pages/_error-c970d8b55ace1b48.js"],sortedPages:["/_app","/_error"]}}(1,0,1e-4,14),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 All notable changes to Madarx OS. Newest first.
 
+## [2.15.0] - 2026-06-04
+
+### Added
+
+- **Guided `madarx setup` wizard.** Setup is now an arrow-key experience (↑/↓ or j/k, Enter, number keys) that decides what shapes the whole install up front: **usage mode** — Personal (local-only) or Team (Supabase shared layer, with credential capture) — then the **main agent model** and the **default sub-agent model**, chosen from the engines actually available on your machine (it probes the Claude Code and Codex CLIs and a running Ollama, and always lists the Anthropic models). It then walks the secrets-vault master key, API keys (masked, and only flags Anthropic as *required* when your selected engine needs it), folder permissions, the WhatsApp toggle, and the auto-update policy. Re-running is safe — every step shows your current value as the default. New zero-dependency `lib/cli/prompt.js` (`select`/`confirm`).
+- The sub-agent default model picked at setup is honored at runtime: `createAgent` now falls back to the `default_agent_engine` / `default_agent_model` config when a caller doesn't specify one.
+
+### Fixed
+
+- **WhatsApp could get stuck "logged out" with no way to re-pair.** When WhatsApp unlinked the device server-side (you removed it from Linked Devices, the number got flagged, or its anti-unofficial-client sweep caught a fresh Baileys session), the bridge left the now-invalid credentials on disk and stopped — which silently blocked a new pairing QR (Baileys only offers a QR on an empty session). The Pairing screen sat on "Waiting for QR" forever, and the only recovery control lived in the *paired* branch of the UI, so there was no visible button to reset. The logged-out state now shows a **Reset session** button (with a confirm step) that wipes the dead session and brings up a fresh QR — the same recovery the dashboard already offered after a deliberate disconnect.
+- **`npm run whatsapp:reset` wiped the wrong directory on global installs.** It hardcoded `<cwd>/data/whatsapp/session`, so for a `npm i -g madarx` install (whose data lives under `$MADARX_HOME`, default `~/.madarx`) it deleted a repo-relative path that didn't exist and never touched the real session. It now resolves the session directory from `lib/paths.js`, honoring `MADARX_HOME` / `MADARX_DATA_DIR`, via the new `scripts/whatsapp-reset.mjs`.
+
+## [2.14.0] - 2026-06-04
+
+### Changed
+
+- **One intake form, branded by default.** Starting a workflow case now always opens the branded, interactive intake artifact — a self-contained page with real form controls that submits straight to the engine. The old bare React intake form and its route are gone, and the `MADARX_BRANDED_INTAKE` feature flag is removed (branded is no longer optional). The Start button, the Share link, and direct case links all lead to the same single intake surface, so there is no longer a "two forms running side by side" split to reason about. Share links keep working exactly as before. (Workflow simplification Phase 3.)
+- **Policy gates are now JSON, not a custom mini-language.** Workflow `policy_gate` rules move from a hand-written string expression grammar (`intake.x == 'y' && prior_stage('kyc').score < 0.5`) to a declarative JSON predicate tree (`{ "op": "and", "rules": [ { "op": "eq", "path": "intake.x", "value": "y" }, … ] }`). This removes a bespoke tokenizer/parser from a security-sensitive path, makes rules validatable at authoring time, and eliminates string-escaping edge cases. Operators: `and`/`or`/`not` and `eq`/`neq`/`lt`/`lte`/`gt`/`gte`/`in`/`nin`, over `intake.*`, `prior_stage.<slug>.*`, and `context.*` paths. New `lib/process/policy-predicates.js` with a 55-case unit test. The seeded mine workflows are migrated to the new format. (Workflow simplification Phase 4.)
+
+### Deprecated
+
+- **Legacy policy-gate string expressions.** The old string DSL still evaluates for one release (isolated in `lib/process/stages/policy-dsl-legacy.js`) so existing definitions keep working, but it is on a removal track. Author new gates as JSON predicates; the spec validator and `ai-docs/process-engine.md` document the canonical shape.
+
+### Notes
+
+- `process_definitions.intake_form_schema_json` is intentionally retained — it is the live storage the engine reads to render the intake form. Dropping it is deferred to a future migration that first relocates the schema onto the first stage's config; intake stays backward compatible.
+- Optional Phases 6 (settings-drawer preview endpoint) and 7 (audit-writer unification) are deliberately deferred — see `specs/active/simplification-dev-plan.md` for the reasons (cosmetic-vs-fragility for 6; the canonical writer the plan assumed doesn't exist and the real one is a distinct compliance channel for 7).
+
 ## [2.13.0] - 2026-06-04
 
 ### Added

package/ai-docs/process-engine.md

@@ -45,10 +45,42 @@ Implementation: `lib/process/artifacts.js`. All three flow through `lib/runtime.
 |---|---|---|
 | `intake_form` | Human submitting the form via UI or `submitIntake` API | Writes `intake_payload` onto the case |
 | `agent_run` | Agent engine (`runAgentEngine`) with the configured template | Structured JSON output |
-| `policy_gate` | Engine — evaluates declarative rules over `intake` + `context` | `{ trace, all_pass }` |
+| `policy_gate` | Engine — evaluates declarative JSON predicate rules over `intake` + `context` | `{ trace, all_pass }` |
 | `human_approval` | Approval request → `/approvals` UI or API | Approved/denied decision |
 | `package` | Engine — renders a markdown cover sheet + supporting docs into artifacts | `case_package` artifact id(s) |
 
+### `intake_form` — branded interactive artifact (only intake path as of v2.14.0)
+
+At `startCase`, the engine renders the first `intake_form` stage as a **branded interactive HTML artifact** (`createIntakeFormArtifact` → `renderIntakeFormHtml`): a self-contained document with real form controls that POSTs to `/api/processes/<id>/stages/<slug>/submit`. The artifact id is stored on `context_json.intake_form_artifact_id`.
+
+The Start button on `/workflows` routes through `POST /api/processes/start-and-route`, which creates the case and redirects to `/workflows/new/<case_id>` (the branded intake page) for intake-first definitions, or to `/workflows/<case_id>` for non-intake first stages. Anonymous share links (`/workflows/share/<case_id>?token=…`) render the same artifact with a one-time submit token.
+
+The legacy read-only "preview" renderer, the bare-React intake form (`app/workflows/new/page.js` + `new-case-flow.jsx`), and the `MADARX_BRANDED_INTAKE` env flag were all removed in v2.14.0 — there is exactly one intake surface. Artifact write failure is observation-only: engine state stays the source of truth and the case still advances.
+
+### `policy_gate` — JSON predicate rules
+
+`config.rules[]` is an array of rules, ALL of which must pass (implicit AND) for the gate to pass. Each rule is a **JSON predicate** (the canonical form):
+
+```json
+{
+  "op": "and",
+  "rules": [
+    { "op": "eq",  "path": "intake.country", "value": "US" },
+    { "op": "gte", "path": "prior_stage.kyc-risk.risk_score", "value": 0.3 },
+    { "op": "in",  "path": "intake.type", "value": ["MSA", "SOW", "NDA"] }
+  ]
+}
+```
+
+- **Logical ops:** `and` / `or` (with `rules[]`), `not` (with `rule`).
+- **Compare ops:** `eq` / `neq` (loose `==`/`!=`, so `neq null` is the "field must be provided" idiom), `lt` / `lte` / `gt` / `gte` (numeric coercion), `in` / `nin` (array `value`).
+- **Path resolution:** `intake.<field…>`, `prior_stage.<slug>.<field…>`, `context.<field…>`. Missing paths resolve to `undefined`. Max nesting depth 20.
+- An optional `label` on any rule is shown in the gate trace.
+
+Evaluator: `lib/process/policy-predicates.js`. Validator: `lib/process/spec-validator.js::validatePredicate` checks predicate shape at authoring time. There is no string parsing — no tokenizer, no escaping bugs.
+
+**Legacy string DSL (deprecated, one-release back-compat).** The old string-expression grammar (`intake.x == 'y' && prior_stage('kyc').score < 0.5`) still evaluates via `lib/process/stages/policy-dsl-legacy.js`, routed per-rule by the handler. Seeds, docs, and new authoring use predicate JSON only; the string path is on a removal track and should not be used in new workflows.
+
 Stage handlers live at `lib/process/stages/<kind>.js`. Each exports `executeStage({ case, stage, execution, heartbeat_task_id })` and returns an outcome envelope:
 
 ```js

package/app/api/processes/start-and-route/route.js

@@ -4,8 +4,8 @@ export const runtime = 'nodejs';
 export const dynamic = 'force-dynamic';
 
 // One-shot create — returns the case id, the intake artifact id (when the
-// first stage is intake_form), and the dashboard URL to redirect to. Saves
-// the round-trip the bare-React form needed (POST + redirect).
+// first stage is intake_form), and the dashboard URL to redirect to. The case
+// always lands on the branded interactive intake artifact page.
 //
 // Body: { definition_slug, project_id, title?, created_by_user_id? }
 export async function POST(req) {
@@ -21,7 +21,9 @@ export async function POST(req) {
     });
     const fresh = getCase(c.id);
     const intake_artifact_id = fresh?.context?.intake_form_artifact_id || null;
-    const redirect_url = process.env.MADARX_BRANDED_INTAKE === '1'
+    // Intake cases land on the branded interactive intake page; non-intake
+    // first stages go straight to the case detail view.
+    const redirect_url = fresh?.status === 'intake'
       ? `/workflows/new/${c.id}`
       : `/workflows/${c.id}`;
     return Response.json({

package/app/components/dashboard/whatsapp-section.jsx

@@ -221,23 +221,64 @@ export default function WhatsAppSection() {
             <div className="config-secrets-panel" style={{ marginTop: 0 }}>
               <div className="config-secrets-head">
                 <div>
-                  <span className="config-section-title">Pair device</span>
-                  <p>Open WhatsApp → Settings → Linked Devices → Link a Device, then scan the code.</p>
+                  <span className="config-section-title">
+                    {pairingState === 'logged_out' ? 'Session logged out' : 'Pair device'}
+                  </span>
+                  <p>
+                    {pairingState === 'logged_out'
+                      ? 'WhatsApp unlinked this device server-side, so the stale credentials block a fresh QR. Reset the session to wipe them and generate a new pairing code.'
+                      : 'Open WhatsApp → Settings → Linked Devices → Link a Device, then scan the code.'}
+                  </p>
                 </div>
+                {pairingState === 'logged_out' && (
+                  !confirmDisconnect ? (
+                    <button
+                      type="button"
+                      className="secrets-action-btn danger"
+                      onClick={() => setConfirmDisconnect(true)}
+                      disabled={disconnectBusy}
+                    >
+                      Reset session
+                    </button>
+                  ) : (
+                    <div className="wa-disconnect-confirm">
+                      <button
+                        type="button"
+                        className="secrets-action-btn danger"
+                        onClick={handleDisconnect}
+                        disabled={disconnectBusy}
+                      >
+                        {disconnectBusy ? 'Resetting…' : 'Confirm reset'}
+                      </button>
+                      <button
+                        type="button"
+                        className="secrets-action-btn"
+                        onClick={() => setConfirmDisconnect(false)}
+                        disabled={disconnectBusy}
+                      >
+                        Cancel
+                      </button>
+                    </div>
+                  )
+                )}
               </div>
-              <div className="whatsapp-pair-row">
-                {qrDataUrl ? (
-                  <div className="whatsapp-qr-box">
-                    <img src={qrDataUrl} alt="WhatsApp pairing QR code" width={220} height={220} />
+              {pairingState === 'logged_out' ? (
+                <div className="whatsapp-pair-copy">{dedicatedNumberWarning}</div>
+              ) : (
+                <div className="whatsapp-pair-row">
+                  {qrDataUrl ? (
+                    <div className="whatsapp-qr-box">
+                      <img src={qrDataUrl} alt="WhatsApp pairing QR code" width={220} height={220} />
+                    </div>
+                  ) : (
+                    <div className="whatsapp-qr-pending">Waiting for QR — make sure the daemon is running.</div>
+                  )}
+                  <div className="whatsapp-pair-copy">
+                    <p>Code rotates roughly every 20 seconds. The dashboard re-fetches automatically. The session is saved at <code>data/whatsapp/session/</code>.</p>
+                    {dedicatedNumberWarning}
                   </div>
-                ) : (
-                  <div className="whatsapp-qr-pending">Waiting for QR — make sure the daemon is running.</div>
-                )}
-                <div className="whatsapp-pair-copy">
-                  <p>Code rotates roughly every 20 seconds. The dashboard re-fetches automatically. The session is saved at <code>data/whatsapp/session/</code>.</p>
-                  {dedicatedNumberWarning}
                 </div>
-              </div>
+              )}
             </div>
           ) : (
             <div className="config-secrets-panel" style={{ marginTop: 0 }}>

package/app/workflows/[caseId]/case-detail-client.jsx

@@ -96,8 +96,8 @@ function IntakeStagePanel({ caseRow, artifacts, latestExec }) {
       {!caseRow.intake_payload ? (
         <p>
           Intake form not submitted yet. Submit via{' '}
-          <a href={`/workflows/new?definition=${caseRow.definition_slug}`}>the new-case page</a>{' '}
-          for this definition.
+          <a href={`/workflows/new/${caseRow.id}`}>the intake page</a>{' '}
+          for this case.
         </p>
       ) : null}
 

package/app/workflows/definition-card.jsx

@@ -8,10 +8,9 @@ import SettingsDrawer from './settings-drawer.jsx';
 // Workflows page definition card. Kept visually aligned with Projects and
 // Marketplace: quiet white card, small tile, minimal metadata, direct actions.
 //
-// Start either (a) calls /api/processes/start-and-route to create the case
-// immediately then routes to the branded artifact page (when
-// MADARX_BRANDED_INTAKE=1), or (b) falls back to
-// /workflows/new?definition=<slug> for the bare React form.
+// Start calls /api/processes/start-and-route to create the case immediately,
+// then routes to the branded interactive intake artifact page (the only intake
+// path as of v2.14.0).
 //
 // Configure opens a right-edge drawer (`SettingsDrawer`) for the
 // per-(definition, project) settings. Share mints + copies a share token
@@ -19,7 +18,6 @@ import SettingsDrawer from './settings-drawer.jsx';
 export default function DefinitionCard({
   definition,
   projects,
-  brandedIntake,
   defaultProjectId,
   usage = 0,
 }) {
@@ -38,23 +36,19 @@ export default function DefinitionCard({
     setError(null);
     setStarting(true);
     try {
-      if (brandedIntake) {
-        const res = await fetch('/api/processes/start-and-route', {
-          method: 'POST',
-          headers: { 'content-type': 'application/json' },
-          body: JSON.stringify({ definition_slug: definition.slug, project_id: initialProjectId }),
-        });
-        const json = await res.json();
-        if (!res.ok) throw new Error(json.error || 'start_failed');
-        router.push(json.redirect_url || `/workflows/${json.case_id}`);
-      } else {
-        router.push(`/workflows/new?definition=${definition.slug}`);
-      }
+      const res = await fetch('/api/processes/start-and-route', {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ definition_slug: definition.slug, project_id: initialProjectId }),
+      });
+      const json = await res.json();
+      if (!res.ok) throw new Error(json.error || 'start_failed');
+      router.push(json.redirect_url || `/workflows/${json.case_id}`);
     } catch (err) {
       setError(String(err?.message || err));
       setStarting(false);
     }
-  }, [brandedIntake, definition.slug, initialProjectId, router]);
+  }, [definition.slug, initialProjectId, router]);
 
   const onShare = useCallback(async () => {
     setShareError(null);

package/app/workflows/new/[caseId]/page.js

@@ -6,13 +6,13 @@ import { getDefinition } from '../../../../lib/process/definitions.js';
 
 export const dynamic = 'force-dynamic';
 
-// Branded intake artifact page. Renders the case's intake-form artifact in
-// a sandboxed iframe — the artifact ships its own form controls and POSTs
-// directly to /api/processes/<id>/stages/<stage>/submit. The host page is
-// chrome only.
+// Branded intake artifact page — the canonical "start a case" intake surface.
+// Renders the case's intake-form artifact in a sandboxed iframe; the artifact
+// ships its own form controls and POSTs directly to
+// /api/processes/<id>/stages/<stage>/submit. The host page is chrome only.
 //
-// Reached two ways: (a) from /workflows when MADARX_BRANDED_INTAKE=1, or
-// (b) by deep link to a known case.
+// Reached from /workflows (Start) via /api/processes/start-and-route, or by
+// deep link to a known case.
 export default async function BrandedIntakePage({ params }) {
   const { caseId } = await params;
   const c = getCase(caseId);
@@ -47,8 +47,8 @@ export default async function BrandedIntakePage({ params }) {
         ) : (
           <p className="muted">
             No intake artifact was generated. Either the first stage is not an intake_form,
-            or the artifact write failed (engine state is unaffected). Use the standard form at{' '}
-            <Link href={`/workflows/new?definition=${definition?.slug || ''}`}>/workflows/new</Link>.
+            or the artifact write failed (engine state is unaffected).{' '}
+            <Link href={`/workflows/${caseId}`}>Open the case ›</Link>
           </p>
         )}
       </div>

package/app/workflows/page.js

@@ -10,10 +10,6 @@ import DefinitionCard from './definition-card.jsx';
 
 export const dynamic = 'force-dynamic';
 
-// MADARX_BRANDED_INTAKE=1: Start → /workflows/new/<case_id> (branded
-// artifact). Off: Start → /workflows/new?definition=<slug> (bare form).
-const BRANDED_INTAKE = process.env.MADARX_BRANDED_INTAKE === '1';
-
 const ACTIVE_STATES = new Set(['intake', 'running', 'awaiting_approval']);
 
 function formatRelative(iso) {
@@ -94,7 +90,6 @@ export default function WorkflowsPage() {
                   key={def.id}
                   definition={def}
                   projects={projects}
-                  brandedIntake={BRANDED_INTAKE}
                   defaultProjectId={defaultProjectId}
                   usage={usage.get(def.slug) || 0}
                 />

package/app/workflows/share/[caseId]/page.js

@@ -56,7 +56,6 @@ export default async function ShareLinkPage({ params, searchParams }) {
     schema,
     caseRow: c,
     settings,
-    mode: 'interactive',
     submit_endpoint: `/api/processes/${c.id}/stages/${stage.slug}/submit`,
     submit_token: token,
   });

package/lib/cli/prompt.js

@@ -0,0 +1,110 @@
+/**
+ * Interactive terminal prompts for the madarX CLI wizard.
+ *
+ * Zero dependencies — node builtins + the brand stylers in ./banner.js only.
+ * The headline piece is `select()`: an arrow-key menu (↑/↓ or j/k, number keys,
+ * Enter to choose) in the Sovereign-Mono palette with a single Mars cursor.
+ *
+ * Degrades safely: with no TTY it returns the default option without drawing.
+ */
+
+import { emitKeypressEvents } from 'node:readline';
+import { _palette as P, fg, bold, dim } from './banner.js';
+
+const isTTY = () => Boolean(process.stdin.isTTY && process.stdout.isTTY);
+const write = (s) => process.stdout.write(s);
+const hideCursor = () => write('\x1b[?25l');
+const showCursor = () => write('\x1b[?25h');
+
+/**
+ * Render one menu option line.
+ * @param {{label:string, hint?:string, tag?:string}} opt
+ * @param {boolean} active
+ */
+function optionLine(opt, active) {
+  const cursor = active ? fg(P.mars, '→ ') : '  ';
+  const label = active ? bold(fg(P.mars, opt.label)) : fg(P.bone, opt.label);
+  const tag = opt.tag ? ' ' + fg(opt.tag === 'recommended' ? P.platinum : P.muted, `(${opt.tag})`) : '';
+  const hint = opt.hint ? '  ' + dim(fg(P.muted, opt.hint)) : '';
+  return `  ${cursor}${label}${tag}${hint}`;
+}
+
+/**
+ * Arrow-key single-select menu.
+ *
+ * @param {string} title    bold Mars header (e.g. "Select default model")
+ * @param {Array<{label:string, value:any, hint?:string, tag?:string}>} options
+ * @param {object} [opts]
+ * @param {number} [opts.default=0]  initially highlighted index
+ * @param {string} [opts.help]       a dim help line under the title
+ * @returns {Promise<any>} the chosen option's `value`
+ */
+export function select(title, options, opts = {}) {
+  const def = Math.max(0, Math.min(opts.default ?? 0, options.length - 1));
+  if (!isTTY() || options.length === 0) {
+    return Promise.resolve(options[def]?.value);
+  }
+
+  return new Promise((resolve) => {
+    let idx = def;
+    const headerLines = [
+      fg(P.mars, bold(title)),
+      ...(opts.help ? [dim(fg(P.muted, opts.help))] : []),
+      '',
+    ];
+    const total = headerLines.length + options.length + 1; // +1 footer
+
+    const footer = dim(fg(P.muted, '↑/↓ move · enter select · ⌃C cancel'));
+
+    const draw = (first) => {
+      if (!first) write(`\x1b[${total}A`); // jump to top of the block
+      const lines = [
+        ...headerLines,
+        ...options.map((o, i) => optionLine(o, i === idx)),
+        footer,
+      ];
+      write('\r' + lines.map((l) => '\x1b[2K' + l).join('\n') + '\n');
+    };
+
+    emitKeypressEvents(process.stdin);
+    const wasRaw = process.stdin.isRaw;
+    process.stdin.setRawMode(true);
+    process.stdin.resume();
+    hideCursor();
+    draw(true);
+
+    const cleanup = () => {
+      process.stdin.removeListener('keypress', onKey);
+      process.stdin.setRawMode(wasRaw);
+      process.stdin.pause();
+      showCursor();
+    };
+
+    const onKey = (str, key = {}) => {
+      if (key.name === 'up' || key.name === 'k' || (key.name === 'p' && key.ctrl)) {
+        idx = (idx - 1 + options.length) % options.length; draw(false);
+      } else if (key.name === 'down' || key.name === 'j' || (key.name === 'n' && key.ctrl)) {
+        idx = (idx + 1) % options.length; draw(false);
+      } else if (str && /^[1-9]$/.test(str) && Number(str) <= options.length) {
+        idx = Number(str) - 1; draw(false);
+      } else if (key.name === 'return' || key.name === 'enter') {
+        cleanup(); resolve(options[idx].value);
+      } else if (key.name === 'escape') {
+        cleanup(); resolve(options[def].value);
+      } else if (key.ctrl && key.name === 'c') {
+        cleanup(); write('\n'); process.exit(130);
+      }
+    };
+
+    process.stdin.on('keypress', onKey);
+  });
+}
+
+/** Yes/No as a two-item arrow menu (returns boolean). */
+export async function confirm(title, { default: dflt = true, help } = {}) {
+  const value = await select(title, [
+    { label: 'Yes', value: true },
+    { label: 'No', value: false },
+  ], { default: dflt ? 0 : 1, help });
+  return value;
+}