motebit 1.11.3 → 1.12.0

package/dist/index.js

@@ -1690,10 +1690,14 @@ function modelVendorHint(model) {
     return "groq";
   if (m4.startsWith("claude"))
     return "anthropic";
+  if (m4.startsWith("gpt-oss"))
+    return "local";
   if (m4.startsWith("gpt-") || /^o[0-9]/.test(m4))
     return "openai";
   if (m4.startsWith("gemini"))
     return "google";
+  if (m4.startsWith("deepseek-r1"))
+    return "local";
   if (m4.startsWith("deepseek"))
     return "deepseek";
   if (m4.includes(":") || /^(llama|mistral|qwen|phi|gemma|smollm)/.test(m4))
@@ -1712,7 +1716,27 @@ function providerAcceptsModel(provider, model) {
     return hint === "groq" || hint === "local";
   return hint === provider;
 }
-var ANTHROPIC_MODELS, OPENAI_MODELS, GOOGLE_MODELS, DEEPSEEK_MODELS, GROQ_MODELS, LOCAL_SERVER_SUGGESTED_MODELS, OLLAMA_SUGGESTED_MODELS, PROXY_MODELS, DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL, DEFAULT_GOOGLE_MODEL, DEFAULT_DEEPSEEK_MODEL, DEFAULT_GROQ_MODEL, DEFAULT_OLLAMA_MODEL, DEFAULT_LOCAL_SERVER_MODEL, DEFAULT_PROXY_MODEL;
+function modelCapabilityTier(model) {
+  const m4 = model.trim().toLowerCase();
+  if (m4 === "")
+    return "capable";
+  const sizeTag = /[:\-_](\d+(?:\.\d+)?)b(?:[-_.:]|$)/.exec(m4);
+  if (sizeTag != null) {
+    return parseFloat(sizeTag[1]) < 7 ? "minimal" : "capable";
+  }
+  const base = m4.split(":")[0];
+  if (MINIMAL_FAMILIES.some((f7) => base.startsWith(f7))) {
+    return "minimal";
+  }
+  if (base.endsWith("-mini") || base.endsWith("-nano") || base.includes("flash")) {
+    return "capable";
+  }
+  if (FRONTIER_PREFIXES.some((p5) => base.startsWith(p5))) {
+    return "frontier";
+  }
+  return "capable";
+}
+var ANTHROPIC_MODELS, OPENAI_MODELS, GOOGLE_MODELS, DEEPSEEK_MODELS, GROQ_MODELS, LOCAL_SERVER_SUGGESTED_MODELS, OLLAMA_SUGGESTED_MODELS, PROXY_MODELS, DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL, DEFAULT_GOOGLE_MODEL, DEFAULT_DEEPSEEK_MODEL, DEFAULT_GROQ_MODEL, DEFAULT_OLLAMA_MODEL, DEFAULT_LOCAL_SERVER_MODEL, DEFAULT_PROXY_MODEL, MODEL_DEFAULT_REVIEW_BY, MINIMAL_FAMILIES, FRONTIER_PREFIXES;
 var init_models = __esm({
   "../../packages/sdk/dist/models.js"() {
     "use strict";
@@ -1739,14 +1763,20 @@ var init_models = __esm({
     DEEPSEEK_MODELS = ["deepseek-chat"];
     GROQ_MODELS = ["llama-3.3-70b-versatile", "openai/gpt-oss-120b"];
     LOCAL_SERVER_SUGGESTED_MODELS = [
-      "llama3.2",
-      "llama3.1",
-      "llama3",
-      "mistral",
-      "codellama",
-      "gemma2",
-      "phi3",
-      "qwen2"
+      "qwen3",
+      // balanced all-rounder, tool-capable — the first-run default
+      "gpt-oss",
+      // OpenAI open-weights — best small tool-use class (~16GB)
+      "gemma3",
+      // Google open family
+      "llama4",
+      // Meta current family
+      "phi4-mini",
+      // minimal-hardware tier (entry laptops, iGPU)
+      "deepseek-r1",
+      // reasoning-class open weights
+      "mistral-small3.2"
+      // Mistral current small
     ];
     OLLAMA_SUGGESTED_MODELS = LOCAL_SERVER_SUGGESTED_MODELS;
     PROXY_MODELS = [
@@ -1765,9 +1795,37 @@ var init_models = __esm({
     DEFAULT_GOOGLE_MODEL = "gemini-2.5-flash";
     DEFAULT_DEEPSEEK_MODEL = "deepseek-chat";
     DEFAULT_GROQ_MODEL = "llama-3.3-70b-versatile";
-    DEFAULT_OLLAMA_MODEL = "llama3.2";
+    DEFAULT_OLLAMA_MODEL = "qwen3";
     DEFAULT_LOCAL_SERVER_MODEL = DEFAULT_OLLAMA_MODEL;
     DEFAULT_PROXY_MODEL = "claude-sonnet-4-6";
+    MODEL_DEFAULT_REVIEW_BY = {
+      anthropic: "2026-10-31",
+      openai: "2026-10-31",
+      google: "2026-10-31",
+      deepseek: "2026-10-31",
+      groq: "2026-10-31",
+      "local-server": "2026-10-31",
+      proxy: "2026-10-31"
+    };
+    MINIMAL_FAMILIES = [
+      "llama3.2",
+      // 1B/3B family — the witnessed weak-model floor
+      "phi4-mini",
+      "phi-3",
+      "phi3",
+      "smollm",
+      "tinyllama",
+      "gpt-5.4-nano"
+    ];
+    FRONTIER_PREFIXES = [
+      "claude-fable",
+      "claude-mythos",
+      "claude-opus",
+      "claude-sonnet",
+      "gpt-5.4",
+      // bare flagship; -mini/-nano handled before this check
+      "gemini-2.5-pro"
+    ];
   }
 });
 
@@ -4403,6 +4461,7 @@ __export(dist_exports2, {
   MEMORY_SOURCE_MARKER_UNKNOWN: () => MEMORY_SOURCE_MARKER_UNKNOWN,
   MERKLE_TREE_VERSION_REGISTRY: () => MERKLE_TREE_VERSION_REGISTRY,
   MICRO: () => MICRO,
+  MODEL_DEFAULT_REVIEW_BY: () => MODEL_DEFAULT_REVIEW_BY,
   MaxProductLogSemiring: () => MaxProductLogSemiring,
   MemoryType: () => MemoryType,
   MotebitType: () => MotebitType,
@@ -4515,6 +4574,7 @@ __export(dist_exports2, {
   maxSensitivity: () => maxSensitivity,
   migrateAppearanceConfig: () => migrateAppearanceConfig,
   migrateVoiceConfig: () => migrateVoiceConfig,
+  modelCapabilityTier: () => modelCapabilityTier,
   modelVendorHint: () => modelVendorHint,
   normalizeLocalServerEndpoint: () => normalizeLocalServerEndpoint,
   oklchToRgb: () => oklchToRgb,
@@ -22572,7 +22632,15 @@ var init_sanitizer = __esm({
       /\b(?:pretend|act\s+as\s+if|roleplay)\b/i,
       /\bdo\s+not\s+(?:follow|obey|listen)\b/i,
       /\b(?:override|bypass|ignore)\s+(?:safety|policy|rules|constraints)\b/i,
-      /<\s*(?:system|prompt|instruction)/i,
+      // Exact tag shape only (`<system>`, `< prompt >`, `<instructions/>`).
+      // The old open-prefix form (`<\s*(?:system|prompt|instruction)`) fired on
+      // TypeScript generics (`Array<PromptTemplate>`), JSX components, and any
+      // docs page whose prose puts these words after a `<` — witnessed live
+      // 2026-07-31 flagging motebit's own CLI docs (#499). An attack needs the
+      // tag to CLOSE to read as chat-template framing; attribute-carrying
+      // variants fall through to the directive-density and boundary layers
+      // (the [EXTERNAL_DATA] wrap is the defense — detection is signal).
+      /<\s*(?:system|prompt|instruction)s?\s*\/?>/i,
       // --- Chat template injection ---
       /<\|im_start\|>\s*system/i,
       /<\|im_end\|>/i,
@@ -25587,7 +25655,7 @@ var init_config2 = __esm({
   "src/config.ts"() {
     "use strict";
     init_esm_shims();
-    VERSION = true ? "1.11.3" : "0.0.0-dev";
+    VERSION = true ? "1.12.0" : "0.0.0-dev";
     CONFIG_DIR = process.env["MOTEBIT_CONFIG_DIR"] ?? path2.join(os.homedir(), ".motebit");
     CONFIG_PATH = path2.join(CONFIG_DIR, "config.json");
     RELAY_DIR = path2.join(CONFIG_DIR, "relay");
@@ -59694,6 +59762,8 @@ var init_motebit_runtime = __esm({
       /** Allowed proactive capability names. Empty by default — fail-closed
        *  sovereign default. User opts in explicitly via runtime config. */
       _proactiveCapabilities;
+      /** #501 — config override: offer R4_MONEY tools to minimal-tier models. */
+      _offerMoneyToolsToMinimalModels;
       /** Auto-anchor policy; null when disabled. Stored by reference so the
        *  submitter can be rotated by the surface without re-constructing the
        *  runtime. */
@@ -59875,8 +59945,11 @@ var init_motebit_runtime = __esm({
         });
         this._proactiveCapabilities = new Set(config.proactiveCapabilities ?? []);
         this._proactiveAnchor = config.proactiveAnchor ?? null;
+        this._offerMoneyToolsToMinimalModels = config.offerMoneyToolsToMinimalModels ?? false;
         this.scopedToolRegistry = new ScopedToolRegistry(this.toolRegistry, {
           allows: (toolName) => {
+            if (!this.tierAllowsTool(toolName))
+              return false;
             const presence = this.presence.get();
             if (presence.mode === "responsive" || presence.mode === "idle")
               return true;
@@ -60285,6 +60358,39 @@ var init_motebit_runtime = __esm({
       get currentModel() {
         return this.provider?.model ?? null;
       }
+      /**
+       * Capability-tiered tool admission (#501): may the CURRENT model be
+       * offered `toolName`? True unless the model is `minimal`-tier AND the
+       * tool classifies at `R4_MONEY` AND the config override is off. Keys on
+       * the SAME `classifyTool` vocabulary the approval gate uses, so any
+       * future money tool inherits the policy at birth — and a rail-less
+       * `delegate_to_agent` (R2 without a payment builder) stays offered:
+       * the tool crosses the withholding line exactly when it can move money.
+       */
+      tierAllowsTool(toolName) {
+        if (this._offerMoneyToolsToMinimalModels)
+          return true;
+        const model = this.provider?.model ?? null;
+        if (model == null || modelCapabilityTier(model) !== "minimal")
+          return true;
+        const def = this.toolRegistry.list().find((t3) => t3.name === toolName);
+        if (def == null)
+          return true;
+        return classifyTool(def).risk < RiskLevel.R4_MONEY;
+      }
+      /**
+       * Surface-honesty readout (#501): true when the current model's tier is
+       * withholding at least one registered money tool. Surfaces render ONE
+       * calm line from this (launch / model switch) — never a toast.
+       */
+      get moneyToolsWithheld() {
+        if (this._offerMoneyToolsToMinimalModels)
+          return false;
+        const model = this.provider?.model ?? null;
+        if (model == null || modelCapabilityTier(model) !== "minimal")
+          return false;
+        return this.toolRegistry.list().some((t3) => classifyTool(t3).risk >= RiskLevel.R4_MONEY);
+      }
       setModel(model) {
         if (!this.provider)
           throw new Error("No AI provider configured");
@@ -86332,7 +86438,6 @@ function createTerminalRenderer(io) {
     if (result === "submit") {
       submit();
     } else if (result === "exit") {
-      io.write("\n");
       destroyTerminal();
       process.exit(0);
     } else {
@@ -86368,6 +86473,22 @@ function createTerminalRenderer(io) {
       reject();
     }
   }
+  function finalize2() {
+    let scrollback = "";
+    if (tail2 !== "") {
+      scrollback += tail2 + "\n";
+      tail2 = "";
+    }
+    if (inputActive) {
+      scrollback += buildInputRow().row + "\n";
+      inputResolver = null;
+      inputRejecter = null;
+      inputActive = false;
+    }
+    statusRow = null;
+    modeRow = null;
+    commit(scrollback);
+  }
   return {
     writeOutput: writeOutput2,
     writeLine: writeLine2,
@@ -86377,7 +86498,8 @@ function createTerminalRenderer(io) {
     setModeRow: setModeRow2,
     handleEvent,
     repaint: () => commit(""),
-    detach
+    detach,
+    finalize: finalize2
   };
 }
 function applyEvent(state, event) {
@@ -86593,6 +86715,7 @@ function initTerminal() {
 function destroyTerminal() {
   if (!initialized) return;
   initialized = false;
+  renderer.finalize();
   process.stdin.removeListener("data", onStdinData);
   process.stdout.removeListener("resize", onResize);
   if (process.stdin.isTTY) {
@@ -87160,6 +87283,10 @@ async function createRuntime(config, motebitId, toolRegistry, mcpServers, person
       // (enableInteractiveDelegation). Absent ⇒ delegation degrades to
       // relay-mode honestly.
       ...solanaWallet ? { solanaWallet } : {},
+      // #501 — sovereign override for capability-tiered tool admission.
+      // Default (absent/false): a minimal-tier model is never offered
+      // R4_MONEY tools; the owner can restore full exposure in config.
+      ...loadFullConfig().offer_money_tools_to_minimal_models === true ? { offerMoneyToolsToMinimalModels: true } : {},
       policy: {
         operatorMode: config.operator,
         pathAllowList: config.allowedPaths,
@@ -101753,7 +101880,7 @@ function admitModelForProvider(provider, model) {
     const flag = VENDOR_PROVIDER_FLAG[hint];
     return {
       admissible: false,
-      teach: `${model} is a hosted ${hint} model \u2014 a local server can't serve it. ` + (flag != null ? `Restart with --provider ${flag}, or pick a local model (e.g. /model llama3.2).` : `Pick a local model instead (e.g. /model llama3.2).`)
+      teach: `${model} is a hosted ${hint} model \u2014 a local server can't serve it. ` + (flag != null ? `Restart with --provider ${flag}, or pick a local model (e.g. /model ${DEFAULT_LOCAL_SERVER_MODEL}).` : `Pick a local model instead (e.g. /model ${DEFAULT_LOCAL_SERVER_MODEL}).`)
     };
   }
   if (!providerAcceptsModel(provider, model)) {
@@ -101765,6 +101892,7 @@ function admitModelForProvider(provider, model) {
   }
   return { admissible: true };
 }
+var MONEY_TOOLS_WITHHELD_NOTICE = "money tools withheld from this model (minimal tier) \u2014 set offer_money_tools_to_minimal_models in ~/.motebit/config.json if you mean it";
 
 // src/index.ts
 init_dist8();
@@ -102254,6 +102382,7 @@ function renderPreflight(pf, dim2) {
 
 // src/args.ts
 init_esm_shims();
+init_dist2();
 init_config2();
 init_colors();
 import { parseArgs } from "util";
@@ -102480,7 +102609,10 @@ var COMMANDS = [
   { usage: "/proposal <id> [accept|reject|counter]", desc: "Respond to a proposal" },
   { usage: "/operator", desc: "Show operator mode status" },
   { usage: "/invoke <cap> <prompt>", desc: "Invoke a capability deterministically (no AI loop)" },
-  { usage: "/receipt <task-id>", desc: "Re-render an archived receipt (offline-verified)" },
+  {
+    usage: "/receipt [task-id-prefix]",
+    desc: "Re-render an archived receipt (offline-verified); no arg = latest"
+  },
   { usage: "/voice [on|off]", desc: "Toggle TTS voice output (opt-in, off by default)" },
   { usage: "/say <text>", desc: "Speak text via TTS (requires voice provider)" },
   { usage: "/skills", desc: "List installed skills with provenance badges" },
@@ -102662,7 +102794,7 @@ function printVersion() {
   console.log(VERSION);
 }
 function defaultModelForProvider(provider) {
-  return provider === "local-server" ? "llama3.2" : provider === "openai" ? "gpt-5.4-mini" : provider === "google" ? "gemini-2.5-flash" : provider === "groq" ? "llama-3.3-70b-versatile" : provider === "deepseek" ? "deepseek-chat" : "claude-sonnet-4-6";
+  return provider === "local-server" ? DEFAULT_LOCAL_SERVER_MODEL : provider === "openai" ? DEFAULT_OPENAI_MODEL : provider === "google" ? DEFAULT_GOOGLE_MODEL : provider === "groq" ? DEFAULT_GROQ_MODEL : provider === "deepseek" ? DEFAULT_DEEPSEEK_MODEL : DEFAULT_ANTHROPIC_MODEL;
 }
 function printBanner(opts) {
   const W2 = 56;
@@ -102803,8 +102935,20 @@ function archiveReceipt(receipt) {
   if (!receipt.task_id) return;
   ARCHIVE.set(receipt.task_id, receipt);
 }
-function getArchivedReceipt(taskId) {
-  return ARCHIVE.get(taskId);
+function findArchivedReceipt(idOrPrefix) {
+  const prefix = idOrPrefix.replace(/…$/, "");
+  if (prefix === "") return { kind: "miss" };
+  const exact = ARCHIVE.get(prefix);
+  if (exact) return { kind: "hit", receipt: exact };
+  const matches = [...ARCHIVE.keys()].filter((id) => id.startsWith(prefix));
+  if (matches.length === 1) return { kind: "hit", receipt: ARCHIVE.get(matches[0]) };
+  if (matches.length > 1) return { kind: "ambiguous", taskIds: matches };
+  return { kind: "miss" };
+}
+function latestArchivedReceipt() {
+  let last;
+  for (const r2 of ARCHIVE.values()) last = r2;
+  return last;
 }
 var CAPABILITY_PRICES_USD = {
   review_pr: 0.01,
@@ -104564,202 +104708,6 @@ async function electAttachOrCoordinate(fullConfig, motebitId, runtimeRef) {
 init_esm_shims();
 init_colors();
 init_terminal();
-init_statusline();
-init_status_render();
-async function renderStream(stream) {
-  let pendingApproval = null;
-  let status = null;
-  let thinking = null;
-  const stopThinking = () => {
-    thinking?.stop();
-    thinking = null;
-  };
-  const stopStatus = () => {
-    stopThinking();
-    const elapsed = status?.stop() ?? 0;
-    status = null;
-    return elapsed;
-  };
-  thinking = startStatus("thinking");
-  try {
-    for await (const raw of stream) {
-      const chunk = raw;
-      switch (chunk.type) {
-        case "text":
-          stopThinking();
-          if (typeof chunk.text === "string") writeOutput(chunk.text);
-          break;
-        case "tool_status": {
-          const name = chunk.name ?? "tool";
-          if (chunk.status === "calling") {
-            if (name === "delegate_to_agent" && status) break;
-            stopThinking();
-            status = name === "delegate_to_agent" ? startStatus("delegating") : startStatus("running", name);
-          } else if (status) {
-            writeLine(
-              `  ${action("\u25CF")} ${action(name)} ${meta(`\xB7 done \xB7 ${formatElapsed(0, stopStatus())}`)}`
-            );
-            thinking = startStatus("thinking");
-          }
-          break;
-        }
-        case "approval_request":
-          pendingApproval = {
-            name: chunk.name ?? "tool",
-            args: chunk.args ?? {},
-            ...chunk.risk_level != null ? { riskLevel: chunk.risk_level } : {}
-          };
-          break;
-        case "delegation_start":
-          if (status) break;
-          stopThinking();
-          status = startStatus("delegating", chunk.tool ?? "task");
-          break;
-        case "delegation_complete":
-          stopStatus();
-          if (chunk.receipt?.task_id != null) {
-            writeLine(
-              dim(`[receipt ${chunk.receipt.task_id.slice(0, 8)} \xB7 ${chunk.receipt.status ?? ""}]`)
-            );
-          }
-          thinking = startStatus("thinking");
-          break;
-        case "injection_warning":
-          writeLine(`${warn2("\u26A0")} suspicious content in ${chunk.tool_name ?? "tool"} output`);
-          break;
-        case "approval_expired":
-          stopStatus();
-          writeLine(
-            `${warn2("[this approval expired before your answer arrived \u2014 nothing was executed]")}
-${dim(`(${chunk.tool_name ?? "the tool"} was never run; no money moved. Ask again when ready.)`)}`
-          );
-          break;
-        case "approval_voided":
-          stopStatus();
-          writeLine(
-            `${warn2("[your new message set aside the pending approval \u2014 nothing was executed]")}
-${dim(`(${chunk.tool_name ?? "the tool"} was never run; no money moved. It can be proposed again.)`)}`
-          );
-          break;
-        case "invoke_error":
-          stopStatus();
-          writeLine(
-            `${warn2(`[invoke failed${chunk.code != null ? ` \xB7 ${chunk.code}` : ""}]`)} ${chunk.message ?? ""}`
-          );
-          break;
-        case "task_step_narration":
-          if (typeof chunk.text === "string") {
-            status?.step(chunk.text.trim());
-            writeLine(`    ${meta("\xB7 " + chunk.text.trim())}`);
-          }
-          break;
-        default:
-          break;
-      }
-    }
-  } catch (err2) {
-    writeLine(`${warn2("[coordinator error]")} ${err2 instanceof Error ? err2.message : String(err2)}`);
-  } finally {
-    stopStatus();
-  }
-  return { pendingApproval };
-}
-async function renderTurn(client, motebitId, stream) {
-  let current2 = stream;
-  for (; ; ) {
-    const { pendingApproval } = await renderStream(current2);
-    if (pendingApproval === null) return;
-    for (const line of renderApprovalRequest({
-      name: pendingApproval.name,
-      args: pendingApproval.args,
-      ...pendingApproval.riskLevel != null ? { riskLevel: pendingApproval.riskLevel } : {}
-    })) {
-      writeLine(line);
-    }
-    const answer = await askQuestion(`  ${warn2("Allow?")} ${dim("(y/n)")} `);
-    const approved = answer.trim().toLowerCase() === "y";
-    current2 = client.resolveApproval(approved, motebitId);
-  }
-}
-var ATTACHED_HELP = `
-  Attached mode \u2014 the coordinator process owns the runtime; this terminal renders.
-    <text>                chat with your motebit (proxied to the coordinator)
-    /invoke <cap> <text>  invoke a capability deterministically
-    /help                 this help
-    /exit                 leave (the coordinator keeps running)
-  Other slash commands need the runtime in-process: exit, stop the coordinator, and re-run \`motebit\`.
-`;
-async function runAttachedRepl(client, motebitId) {
-  writeOutput(
-    `
-  ${dim("Attached to the machine's coordinator runtime")} ${dim(`(pid ${client.coordinatorPid})`)}
-  ${dim("This terminal renders; the coordinator acts. /help for what's available.")}
-
-`
-  );
-  setModeRow(renderModeRow({ attachedPid: client.coordinatorPid }));
-  let closed = false;
-  client.onClose(() => {
-    closed = true;
-    writeOutput(
-      `
-${warn2("Coordinator exited.")} Run \`motebit\` again to take over as coordinator.
-`
-    );
-    destroyTerminal();
-    process.exit(0);
-  });
-  for (; ; ) {
-    if (closed) return;
-    let line;
-    try {
-      line = await readInput(prompt("you>") + " ");
-    } catch {
-      break;
-    }
-    const trimmed = line.trim();
-    if (trimmed === "") continue;
-    if (trimmed === "/exit" || trimmed === "/quit" || trimmed === "exit" || trimmed === "quit") {
-      writeOutput("Goodbye! (coordinator keeps running)\n");
-      break;
-    }
-    if (trimmed === "/help") {
-      writeOutput(ATTACHED_HELP);
-      continue;
-    }
-    if (trimmed.startsWith("/invoke ")) {
-      const rest = trimmed.slice("/invoke ".length).trim();
-      const space = rest.indexOf(" ");
-      const capability = space === -1 ? rest : rest.slice(0, space);
-      const prompt2 = space === -1 ? "" : rest.slice(space + 1);
-      if (capability === "") {
-        writeOutput(`${warn2("usage:")} /invoke <capability> <prompt>
-`);
-        continue;
-      }
-      writeOutput(prompt("mote>") + " ");
-      await renderTurn(client, motebitId, client.invoke(capability, prompt2));
-      writeOutput("\n");
-      continue;
-    }
-    if (trimmed.startsWith("/")) {
-      writeOutput(
-        `${dim(`${trimmed.split(" ")[0]} needs the runtime in-process \u2014 not available in attached mode.`)}
-${dim("Stop the coordinator and re-run `motebit` to use it.")}
-`
-      );
-      continue;
-    }
-    writeOutput(prompt("mote>") + " ");
-    await renderTurn(client, motebitId, client.chat(trimmed));
-    writeOutput("\n");
-  }
-  client.close();
-  destroyTerminal();
-}
-
-// src/index.ts
-init_colors();
 
 // src/slash-commands.ts
 init_esm_shims();
@@ -106421,14 +106369,25 @@ async function handleInvokeCommand(args, deps) {
 async function handleReceiptCommand(args, deps) {
   const out = deps.out ?? ((s3) => console.log(s3));
   const taskId = args.trim();
+  let receipt;
   if (!taskId) {
-    out(error2("Usage: /receipt <task-id>"));
-    return;
-  }
-  const receipt = getArchivedReceipt(taskId);
-  if (!receipt) {
-    out(warn2(`No archived receipt for task_id=${taskId}`));
-    return;
+    receipt = latestArchivedReceipt();
+    if (!receipt) {
+      out(warn2("No receipts archived this session. Usage: /receipt [task-id-prefix]"));
+      return;
+    }
+  } else {
+    const found = findArchivedReceipt(taskId);
+    if (found.kind === "ambiguous") {
+      out(warn2(`Prefix "${taskId}" matches ${found.taskIds.length} receipts:`));
+      for (const id of found.taskIds) out(dim(`  ${id}`));
+      return;
+    }
+    if (found.kind === "miss") {
+      out(warn2(`No archived receipt matches "${taskId}" this session.`));
+      return;
+    }
+    receipt = found.receipt;
   }
   out("");
   await renderReceipt(receipt, out);
@@ -106469,6 +106428,369 @@ async function drainInvokeStream(stream, out, voice) {
   }
 }
 
+// etc/cli-surface.json
+var cli_surface_default = {
+  subcommands: {
+    approvals: [
+      "approve",
+      "deny",
+      "list",
+      "show"
+    ],
+    attest: [],
+    balance: [],
+    credentials: [],
+    delegate: [],
+    discover: [],
+    doctor: [],
+    export: [],
+    federation: [
+      "mesh",
+      "peer",
+      "peer-remove",
+      "peers",
+      "status"
+    ],
+    fund: [],
+    goal: [
+      "add",
+      "list",
+      "outcomes",
+      "pause",
+      "remove",
+      "resume"
+    ],
+    grant: [],
+    id: [],
+    init: [],
+    keychain: [],
+    ledger: [],
+    logs: [],
+    lsp: [],
+    migrate: [],
+    "migrate-keyring": [],
+    ps: [],
+    register: [],
+    relay: [
+      "up"
+    ],
+    restore: [],
+    rotate: [],
+    run: [],
+    schema: [],
+    seed: [],
+    serve: [],
+    skills: [],
+    smoke: [],
+    up: [],
+    verify: [
+      "identity"
+    ],
+    "verify-release": [],
+    wallet: [],
+    withdraw: []
+  },
+  flags: [
+    {
+      name: "address-only",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "all",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "allow-commands",
+      type: "string"
+    },
+    {
+      name: "allowed-paths",
+      type: "string"
+    },
+    {
+      name: "auto-approve",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "block-commands",
+      type: "string"
+    },
+    {
+      name: "budget",
+      type: "string"
+    },
+    {
+      name: "cadence-hours",
+      type: "string"
+    },
+    {
+      name: "capability",
+      type: "string"
+    },
+    {
+      name: "days",
+      type: "string"
+    },
+    {
+      name: "db-path",
+      type: "string"
+    },
+    {
+      name: "destination",
+      type: "string"
+    },
+    {
+      name: "direct",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "dry-run",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "event-type",
+      type: "string"
+    },
+    {
+      name: "every",
+      type: "string"
+    },
+    {
+      name: "facilitator-url",
+      type: "string"
+    },
+    {
+      name: "federation-url",
+      type: "string"
+    },
+    {
+      name: "file",
+      type: "string",
+      short: "f"
+    },
+    {
+      name: "force",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "grant",
+      type: "string"
+    },
+    {
+      name: "help",
+      type: "boolean",
+      default: false,
+      short: "h"
+    },
+    {
+      name: "identity",
+      type: "string"
+    },
+    {
+      name: "json",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "lifetime-usd",
+      type: "string"
+    },
+    {
+      name: "limit",
+      type: "string"
+    },
+    {
+      name: "max-tokens",
+      type: "string"
+    },
+    {
+      name: "model",
+      type: "string"
+    },
+    {
+      name: "network",
+      type: "string"
+    },
+    {
+      name: "no-stream",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "once",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "operator",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "output",
+      type: "string",
+      short: "o"
+    },
+    {
+      name: "passphrase",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "pay-new-agents",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "pay-to-address",
+      type: "string"
+    },
+    {
+      name: "plan",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "port",
+      type: "string"
+    },
+    {
+      name: "presentation",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "price",
+      type: "string"
+    },
+    {
+      name: "project",
+      type: "string"
+    },
+    {
+      name: "provider",
+      type: "string",
+      default: "anthropic"
+    },
+    {
+      name: "prune",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "reason",
+      type: "string"
+    },
+    {
+      name: "routing-strategy",
+      type: "string"
+    },
+    {
+      name: "scope",
+      type: "string"
+    },
+    {
+      name: "self-test",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "serve-port",
+      type: "string"
+    },
+    {
+      name: "serve-transport",
+      type: "string"
+    },
+    {
+      name: "solana-rpc-url",
+      type: "string"
+    },
+    {
+      name: "sovereign",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "subject",
+      type: "string"
+    },
+    {
+      name: "sync-token",
+      type: "string"
+    },
+    {
+      name: "sync-url",
+      type: "string"
+    },
+    {
+      name: "tail",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "target",
+      type: "string"
+    },
+    {
+      name: "tools",
+      type: "string"
+    },
+    {
+      name: "version",
+      type: "boolean",
+      default: false,
+      short: "v"
+    },
+    {
+      name: "voice",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "waive",
+      type: "boolean",
+      default: false
+    },
+    {
+      name: "wall-clock",
+      type: "string"
+    },
+    {
+      name: "window-hours",
+      type: "string"
+    },
+    {
+      name: "window-usd",
+      type: "string"
+    }
+  ],
+  exitCodes: [
+    0,
+    1,
+    2,
+    130
+  ],
+  onDiskLayout: [
+    "config.json",
+    "dev-keyring.json",
+    "identity.md",
+    "motebit.db",
+    "motebit.md",
+    "relay",
+    "relay/relay.db",
+    "smoke-x402-buyer-eoa.txt",
+    "smoke-x402-worker-eoa.txt",
+    "update-check.json"
+  ]
+};
+
 // src/slash-commands.ts
 function isSlashCommand(input) {
   return input.startsWith("/");
@@ -106491,6 +106813,17 @@ function resolveBareCommand(input) {
   if (name === "ledger" && words.length === 2) return `/ledger ${words[1]}`;
   return null;
 }
+function detectShellInvocation(input) {
+  if (input.includes("?")) return null;
+  const words = input.trim().split(/\s+/);
+  if (words.length < 2 || words[0] !== "motebit") return null;
+  const second = words[1];
+  const known = second.startsWith("--") ? CLI_FLAG_NAMES.has(second.slice(2).split("=")[0].toLowerCase()) : CLI_SUBCOMMAND_NAMES.has(second.toLowerCase());
+  if (!known) return null;
+  return "  that's a shell command \u2014 type `quit`, then run it in your terminal";
+}
+var CLI_SUBCOMMAND_NAMES = new Set(Object.keys(cli_surface_default.subcommands));
+var CLI_FLAG_NAMES = new Set(cli_surface_default.flags.map((f7) => f7.name.toLowerCase()));
 function renderProvenanceBadge(record) {
   const status = record.provenance_status;
   if (status === "verified") return success("[verified]");
@@ -106826,7 +107159,10 @@ ${summary}`);
         "gpt-5.4-mini": "gpt-5.4-mini",
         "gpt-5.4-nano": "gpt-5.4-nano",
         o3: "o3",
+        qwen3: "qwen3",
+        "gpt-oss": "gpt-oss",
         "llama3.2": "llama3.2",
+        // legacy alias — still resolvable, no longer suggested
         mistral: "mistral"
       };
       const envKey = config.provider === "openai" ? process.env["OPENAI_API_KEY"] : process.env["ANTHROPIC_API_KEY"];
@@ -106917,6 +107253,10 @@ Unknown model: ${cyan(args)}
         break;
       }
       runtime.setModel(modelId);
+      if (runtime.moneyToolsWithheld) {
+        console.log(`
+  ${dim(MONEY_TOOLS_WITHHELD_NOTICE)}`);
+      }
       if (fullConfig) {
         fullConfig.default_model = modelId;
         const persistable = ["anthropic", "openai", "google", "local-server", "proxy"];
@@ -108593,6 +108933,209 @@ Curiosity targets (${targets.length}):
   }
 }
 
+// src/attached-repl.ts
+init_statusline();
+init_status_render();
+async function renderStream(stream) {
+  let pendingApproval = null;
+  let status = null;
+  let thinking = null;
+  const stopThinking = () => {
+    thinking?.stop();
+    thinking = null;
+  };
+  const stopStatus = () => {
+    stopThinking();
+    const elapsed = status?.stop() ?? 0;
+    status = null;
+    return elapsed;
+  };
+  thinking = startStatus("thinking");
+  try {
+    for await (const raw of stream) {
+      const chunk = raw;
+      switch (chunk.type) {
+        case "text":
+          stopThinking();
+          if (typeof chunk.text === "string") writeOutput(chunk.text);
+          break;
+        case "tool_status": {
+          const name = chunk.name ?? "tool";
+          if (chunk.status === "calling") {
+            if (name === "delegate_to_agent" && status) break;
+            stopThinking();
+            status = name === "delegate_to_agent" ? startStatus("delegating") : startStatus("running", name);
+          } else if (status) {
+            writeLine(
+              `  ${action("\u25CF")} ${action(name)} ${meta(`\xB7 done \xB7 ${formatElapsed(0, stopStatus())}`)}`
+            );
+            thinking = startStatus("thinking");
+          }
+          break;
+        }
+        case "approval_request":
+          pendingApproval = {
+            name: chunk.name ?? "tool",
+            args: chunk.args ?? {},
+            ...chunk.risk_level != null ? { riskLevel: chunk.risk_level } : {}
+          };
+          break;
+        case "delegation_start":
+          if (status) break;
+          stopThinking();
+          status = startStatus("delegating", chunk.tool ?? "task");
+          break;
+        case "delegation_complete":
+          stopStatus();
+          if (chunk.receipt?.task_id != null) {
+            writeLine(
+              dim(`[receipt ${chunk.receipt.task_id.slice(0, 8)} \xB7 ${chunk.receipt.status ?? ""}]`)
+            );
+          }
+          thinking = startStatus("thinking");
+          break;
+        case "injection_warning":
+          writeLine(`${warn2("\u26A0")} suspicious content in ${chunk.tool_name ?? "tool"} output`);
+          break;
+        case "approval_expired":
+          stopStatus();
+          writeLine(
+            `${warn2("[this approval expired before your answer arrived \u2014 nothing was executed]")}
+${dim(`(${chunk.tool_name ?? "the tool"} was never run; no money moved. Ask again when ready.)`)}`
+          );
+          break;
+        case "approval_voided":
+          stopStatus();
+          writeLine(
+            `${warn2("[your new message set aside the pending approval \u2014 nothing was executed]")}
+${dim(`(${chunk.tool_name ?? "the tool"} was never run; no money moved. It can be proposed again.)`)}`
+          );
+          break;
+        case "invoke_error":
+          stopStatus();
+          writeLine(
+            `${warn2(`[invoke failed${chunk.code != null ? ` \xB7 ${chunk.code}` : ""}]`)} ${chunk.message ?? ""}`
+          );
+          break;
+        case "task_step_narration":
+          if (typeof chunk.text === "string") {
+            status?.step(chunk.text.trim());
+            writeLine(`    ${meta("\xB7 " + chunk.text.trim())}`);
+          }
+          break;
+        default:
+          break;
+      }
+    }
+  } catch (err2) {
+    writeLine(`${warn2("[coordinator error]")} ${err2 instanceof Error ? err2.message : String(err2)}`);
+  } finally {
+    stopStatus();
+  }
+  return { pendingApproval };
+}
+async function renderTurn(client, motebitId, stream) {
+  let current2 = stream;
+  for (; ; ) {
+    const { pendingApproval } = await renderStream(current2);
+    if (pendingApproval === null) return;
+    for (const line of renderApprovalRequest({
+      name: pendingApproval.name,
+      args: pendingApproval.args,
+      ...pendingApproval.riskLevel != null ? { riskLevel: pendingApproval.riskLevel } : {}
+    })) {
+      writeLine(line);
+    }
+    const answer = await askQuestion(`  ${warn2("Allow?")} ${dim("(y/n)")} `);
+    const approved = answer.trim().toLowerCase() === "y";
+    current2 = client.resolveApproval(approved, motebitId);
+  }
+}
+var ATTACHED_HELP = `
+  Attached mode \u2014 the coordinator process owns the runtime; this terminal renders.
+    <text>                chat with your motebit (proxied to the coordinator)
+    /invoke <cap> <text>  invoke a capability deterministically
+    /help                 this help
+    /exit                 leave (the coordinator keeps running)
+  Other slash commands need the runtime in-process: exit, stop the coordinator, and re-run \`motebit\`.
+`;
+async function runAttachedRepl(client, motebitId) {
+  writeOutput(
+    `
+  ${dim("Attached to the machine's coordinator runtime")} ${dim(`(pid ${client.coordinatorPid})`)}
+  ${dim("This terminal renders; the coordinator acts. /help for what's available.")}
+
+`
+  );
+  setModeRow(renderModeRow({ attachedPid: client.coordinatorPid }));
+  let closed = false;
+  client.onClose(() => {
+    closed = true;
+    writeOutput(
+      `
+${warn2("Coordinator exited.")} Run \`motebit\` again to take over as coordinator.
+`
+    );
+    destroyTerminal();
+    process.exit(0);
+  });
+  for (; ; ) {
+    if (closed) return;
+    let line;
+    try {
+      line = await readInput(prompt("you>") + " ");
+    } catch {
+      break;
+    }
+    const trimmed = line.trim();
+    if (trimmed === "") continue;
+    if (trimmed === "/exit" || trimmed === "/quit" || trimmed === "exit" || trimmed === "quit") {
+      writeOutput("Goodbye! (coordinator keeps running)\n");
+      break;
+    }
+    if (trimmed === "/help") {
+      writeOutput(ATTACHED_HELP);
+      continue;
+    }
+    if (trimmed.startsWith("/invoke ")) {
+      const rest = trimmed.slice("/invoke ".length).trim();
+      const space = rest.indexOf(" ");
+      const capability = space === -1 ? rest : rest.slice(0, space);
+      const prompt2 = space === -1 ? "" : rest.slice(space + 1);
+      if (capability === "") {
+        writeOutput(`${warn2("usage:")} /invoke <capability> <prompt>
+`);
+        continue;
+      }
+      writeOutput(prompt("mote>") + " ");
+      await renderTurn(client, motebitId, client.invoke(capability, prompt2));
+      writeOutput("\n");
+      continue;
+    }
+    if (trimmed.startsWith("/")) {
+      writeOutput(
+        `${dim(`${trimmed.split(" ")[0]} needs the runtime in-process \u2014 not available in attached mode.`)}
+${dim("Stop the coordinator and re-run `motebit` to use it.")}
+`
+      );
+      continue;
+    }
+    const shellTeach = detectShellInvocation(trimmed);
+    if (shellTeach != null) {
+      writeOutput(dim(shellTeach) + "\n\n");
+      continue;
+    }
+    writeOutput(prompt("mote>") + " ");
+    await renderTurn(client, motebitId, client.chat(trimmed));
+    writeOutput("\n");
+  }
+  client.close();
+  destroyTerminal();
+}
+
+// src/index.ts
+init_colors();
+
 // src/subcommands/index.ts
 init_esm_shims();
 
@@ -126065,13 +126608,13 @@ async function main() {
       runtimeRef
     });
   } catch (err2) {
+    destroyTerminal();
     console.error(
       `Runtime-host election failed: ${err2 instanceof Error ? err2.message : String(err2)}`
     );
     console.error(
       "Another motebit process may be coordinating with an incompatible build. Stop it and retry."
     );
-    destroyTerminal();
     process.exit(1);
   }
   if (election.role === "frontend") {
@@ -126247,7 +126790,8 @@ async function main() {
     moteDb.close();
   };
   process.on("SIGINT", () => {
-    console.log("\nGoodbye!");
+    destroyTerminal();
+    console.log("Goodbye!");
     void shutdown().then(() => process.exit(0));
   });
   const toolCount = toolRegistry.size;
@@ -126274,6 +126818,10 @@ async function main() {
     }
     refreshUpdateCheckInBackground();
   }
+  if (runtime.moneyToolsWithheld) {
+    console.log(dim(`  ${MONEY_TOOLS_WITHHELD_NOTICE}`));
+    console.log();
+  }
   if (isFirstLaunch) {
     try {
       const activationRunId = crypto.randomUUID();
@@ -126339,6 +126887,15 @@ async function main() {
     const bareSlash = resolveBareCommand(trimmed);
     const effective = bareSlash ?? trimmed;
     if (bareSlash != null) console.log(dim(`  \u2192 ${bareSlash}`));
+    if (bareSlash == null) {
+      const shellTeach = detectShellInvocation(trimmed);
+      if (shellTeach != null) {
+        console.log(dim(shellTeach));
+        console.log();
+        prompt2();
+        return;
+      }
+    }
     if (isSlashCommand(effective)) {
       const { command: command2, args } = parseSlashCommand(effective);
       await handleSlashCommand(command2, args, runtime, config, fullConfig, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "motebit",
-  "version": "1.11.3",
+  "version": "1.12.0",
   "type": "module",
   "description": "Reference runtime and operator console for sovereign AI agents — REPL, daemon, delegation, MCP server. Persistent Ed25519 identity, signed execution receipts, governance at the boundary.",
   "main": "./dist/index.js",
@@ -76,35 +76,35 @@
     "typescript": "^5.6.0",
     "vitest": "^4.1.10",
     "@motebit/ai-core": "0.0.0-private",
-    "@motebit/core-identity": "0.0.0-private",
     "@motebit/behavior-engine": "0.0.0-private",
+    "@motebit/core-identity": "0.0.0-private",
     "@motebit/crypto": "3.19.1",
     "@motebit/encryption": "0.0.0-private",
-    "@motebit/event-log": "0.0.0-private",
     "@motebit/gradient": "0.0.0-private",
-    "@motebit/mcp-server": "0.0.0-private",
-    "@motebit/memory-graph": "0.0.0-private",
+    "@motebit/event-log": "0.0.0-private",
     "@motebit/identity-file": "0.0.0-private",
-    "@motebit/persistence": "0.0.0-private",
     "@motebit/mcp-client": "0.0.0-private",
+    "@motebit/memory-graph": "0.0.0-private",
     "@motebit/protocol": "3.15.1",
-    "@motebit/policy": "0.0.0-private",
+    "@motebit/persistence": "0.0.0-private",
     "@motebit/planner": "0.0.0-private",
     "@motebit/privacy-layer": "0.0.0-private",
     "@motebit/relay": "0.0.0-private",
-    "@motebit/runtime": "0.0.0-private",
     "@motebit/relay-client": "0.0.0-private",
-    "@motebit/sdk": "2.6.0",
+    "@motebit/runtime": "0.0.0-private",
+    "@motebit/policy": "0.0.0-private",
+    "@motebit/sdk": "2.7.0",
+    "@motebit/mcp-server": "0.0.0-private",
     "@motebit/runtime-host": "0.0.0-private",
+    "@motebit/skills": "0.0.0-private",
     "@motebit/self-knowledge": "0.0.0-private",
     "@motebit/state-vector": "0.0.0-private",
-    "@motebit/skills": "0.0.0-private",
-    "@motebit/tools": "0.0.0-private",
     "@motebit/verify": "1.8.12",
-    "@motebit/voice": "0.0.0-private",
     "@motebit/sync-engine": "0.0.0-private",
+    "@motebit/tools": "0.0.0-private",
+    "@motebit/wire-schemas": "0.0.0-private",
     "@motebit/wallet-solana": "0.0.0-private",
-    "@motebit/wire-schemas": "0.0.0-private"
+    "@motebit/voice": "0.0.0-private"
   },
   "scripts": {
     "start": "tsx src/index.ts",