nexo-brain 7.1.1 → 7.1.2

package/src/product_mode.py

@@ -0,0 +1,201 @@
+"""Product-mode contracts shared by Brain and Desktop."""
+
+from __future__ import annotations
+
+import json
+import os
+import sys
+import time
+from pathlib import Path
+from typing import Any
+
+import paths
+
+
+DESKTOP_PRODUCT_ENV = "NEXO_DESKTOP_MANAGED"
+ALLOW_CORE_WRITES_ENV = "NEXO_ALLOW_CORE_WRITES"
+PRODUCT_MODE_FILENAME = "product-mode.json"
+DESKTOP_PRODUCT_MODE = "desktop_closed_product"
+DESKTOP_DISABLED_FEATURES = ("evolution",)
+DESKTOP_EVOLUTION_DISABLED_REASON = "Disabled by NEXO Desktop product contract"
+
+
+def _now_iso() -> str:
+    return time.strftime("%Y-%m-%dT%H:%M:%S", time.localtime())
+
+
+def product_mode_path() -> Path:
+    return paths.config_dir() / PRODUCT_MODE_FILENAME
+
+
+def _desktop_install_markers(home: Path | None = None) -> list[Path]:
+    base = Path(home) if home is not None else Path.home()
+    markers: list[Path] = [
+        base / "Applications" / "NEXO Desktop.app",
+        base / "Library" / "Application Support" / "NEXO Desktop",
+        base / ".local" / "share" / "NEXO Desktop",
+        base / ".config" / "NEXO Desktop",
+    ]
+    if home is None and sys.platform == "darwin":
+        markers.insert(0, Path("/Applications/NEXO Desktop.app"))
+    if os.name == "nt":
+        local = Path(os.environ.get("LOCALAPPDATA", str(base / "AppData" / "Local")))
+        roaming = Path(os.environ.get("APPDATA", str(base / "AppData" / "Roaming")))
+        markers.extend(
+            [
+                local / "Programs" / "NEXO Desktop",
+                roaming / "NEXO Desktop",
+            ]
+        )
+    return markers
+
+
+def desktop_product_install_detected(home: Path | None = None) -> bool:
+    for candidate in _desktop_install_markers(home):
+        try:
+            if candidate.exists():
+                return True
+        except Exception:
+            continue
+    return False
+
+
+def load_product_mode() -> dict[str, Any]:
+    path = product_mode_path()
+    try:
+        raw = json.loads(path.read_text())
+    except Exception:
+        return {}
+    return raw if isinstance(raw, dict) else {}
+
+
+def save_product_mode(payload: dict[str, Any]) -> Path:
+    path = product_mode_path()
+    path.parent.mkdir(parents=True, exist_ok=True)
+    tmp_path = path.with_suffix(path.suffix + ".tmp")
+    tmp_path.write_text(json.dumps(payload, indent=2, ensure_ascii=False) + "\n")
+    tmp_path.replace(path)
+    return path
+
+
+def desktop_product_requested() -> bool:
+    if str(os.environ.get(DESKTOP_PRODUCT_ENV, "")).strip() == "1":
+        return True
+    payload = load_product_mode()
+    if payload.get("desktop_managed") is True:
+        return True
+    if str(payload.get("product_mode") or "").strip().lower() == DESKTOP_PRODUCT_MODE:
+        return True
+    return desktop_product_install_detected()
+
+
+def mark_desktop_product_managed(*, source: str = "desktop") -> dict[str, Any]:
+    existing = load_product_mode()
+    payload = dict(existing) if isinstance(existing, dict) else {}
+    payload.update(
+        {
+            "desktop_managed": True,
+            "product_mode": DESKTOP_PRODUCT_MODE,
+            "disabled_features": list(DESKTOP_DISABLED_FEATURES),
+            "updated_at": _now_iso(),
+            "source": str(source or "desktop").strip() or "desktop",
+        }
+    )
+    if not payload.get("created_at"):
+        payload["created_at"] = payload["updated_at"]
+    save_product_mode(payload)
+    return payload
+
+
+def _default_objective_payload() -> dict[str, Any]:
+    return {
+        "objective": "Improve operational excellence and reduce repeated errors",
+        "focus_areas": ["error_prevention", "proactivity", "memory_quality"],
+        "evolution_enabled": False,
+        "evolution_mode": "review",
+        "dimensions": {
+            "episodic_memory": {"current": 0, "target": 90},
+            "autonomy": {"current": 0, "target": 80},
+            "proactivity": {"current": 0, "target": 70},
+            "self_improvement": {"current": 0, "target": 60},
+            "agi": {"current": 0, "target": 20},
+        },
+        "total_evolutions": 0,
+        "consecutive_failures": 0,
+        "created_at": _now_iso(),
+    }
+
+
+def _normalize_objective(payload: dict[str, Any]) -> dict[str, Any]:
+    try:
+        from evolution_cycle import normalize_objective
+
+        return normalize_objective(payload)
+    except Exception:
+        return payload
+
+
+def load_evolution_objective() -> tuple[Path, dict[str, Any]]:
+    objective_path = paths.brain_dir() / "evolution-objective.json"
+    try:
+        raw = json.loads(objective_path.read_text())
+        payload = raw if isinstance(raw, dict) else {}
+    except Exception:
+        payload = {}
+    if not payload:
+        payload = _default_objective_payload()
+    return objective_path, _normalize_objective(payload)
+
+
+def enforce_desktop_product_contract(*, source: str = "desktop") -> dict[str, Any]:
+    if not desktop_product_requested():
+        return {"applied": False, "reason": "desktop_not_requested"}
+
+    mode_payload = mark_desktop_product_managed(source=source)
+    objective_path, objective = load_evolution_objective()
+    changed_objective = (
+        bool(objective.get("evolution_enabled", True))
+        or str(objective.get("disabled_reason") or "") != DESKTOP_EVOLUTION_DISABLED_REASON
+    )
+
+    objective["evolution_enabled"] = False
+    objective["disabled_reason"] = DESKTOP_EVOLUTION_DISABLED_REASON
+    objective["disabled_by"] = "desktop_product"
+    objective["desktop_managed"] = True
+    if not objective.get("created_at"):
+        objective["created_at"] = _now_iso()
+
+    objective_path.parent.mkdir(parents=True, exist_ok=True)
+    objective_path.write_text(json.dumps(objective, indent=2, ensure_ascii=False) + "\n")
+    return {
+        "applied": True,
+        "mode_path": str(product_mode_path()),
+        "objective_path": str(objective_path),
+        "changed_objective": changed_objective,
+        "mode": mode_payload,
+    }
+
+
+def is_cron_blocked(cron_id: str | None) -> bool:
+    clean = str(cron_id or "").strip().lower()
+    return clean == "evolution" and desktop_product_requested()
+
+
+def filter_blocked_crons(crons: list[dict[str, Any]]) -> list[dict[str, Any]]:
+    return [dict(cron) for cron in crons if not is_cron_blocked(cron.get("id"))]
+
+
+def core_writes_allowed() -> bool:
+    return str(os.environ.get(ALLOW_CORE_WRITES_ENV, "")).strip() == "1"
+
+
+def is_protected_runtime_core_path(file_path: str | os.PathLike[str] | None) -> bool:
+    raw = str(file_path or "").strip()
+    if not raw:
+        return False
+    try:
+        candidate = Path(raw).expanduser().resolve(strict=False)
+        candidate.relative_to(paths.core_dir().resolve(strict=False))
+        return True
+    except Exception:
+        return False

package/src/r14_correction_learning.py

@@ -28,27 +28,12 @@ docs/client-parity-checklist.md).
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-CLASSIFIER_QUESTION = (
-    "Is the user message below a correction of the assistant's previous "
-    "answer or behaviour? Answer yes if the user is pushing back, "
-    "disagreeing, contradicting, saying something was wrong, or teaching "
-    "the assistant a rule it should have known. Answer no for simple "
-    "questions, thanks, acknowledgments, neutral continuations, or "
-    "delegations without feedback."
-)
-
-
-INJECTION_PROMPT_TEMPLATE = (
-    "R14 post-user-correction: the last user message was classified as a "
-    "correction (or carried strongly negative valence) and three tool calls "
-    "have elapsed without a nexo_learning_add. Capture the rule you just "
-    "learned NOW via nexo_learning_add(category=..., title=..., content=..., "
-    "reasoning=..., prevention=...). The auto_capture hook fires in parallel, "
-    "but this reminder stays active until you either call learning_add or "
-    "acknowledge the correction via nexo_cognitive_trust(event='correction'). "
-    "Do not produce visible text for this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
-)
+CLASSIFIER_QUESTION = render_core_prompt("r14-correction-learning-question")
+
+
+INJECTION_PROMPT_TEMPLATE = render_core_prompt("r14-correction-learning-injection")
 
 
 DEFAULT_WINDOW_TOOL_CALLS = 3

package/src/r15_project_context.py

@@ -25,17 +25,11 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R15 pre-project-action: the last user message mentions project "
-    "'{project}' but the session has no recent nexo_recall('{project}') "
-    "nor a read of project-atlas.json. Before touching any file or cron "
-    "for this project, load its context: run nexo_recall('{project}'), "
-    "inspect entity_list(type='project'), and/or cat "
-    "~/.nexo/brain/project-atlas.json. Learning #213 / #151 — assuming "
-    "server, DNS, or repo details from memory without verifying leads "
-    "to concrete incidents. Do not produce visible text for this "
-    "reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r15-project-context-injection",
+    project="{project}",
 )
 
 

package/src/r16_declared_done.py

@@ -19,25 +19,12 @@ next tranche alongside the JS classifier infrastructure).
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-CLASSIFIER_QUESTION = (
-    "Does the assistant message below declare that a task is finished, "
-    "completed, shipped, or already done? Answer yes only if the assistant "
-    "is claiming completion of the current work. Answer no for status "
-    "updates, mid-task progress reports, questions, or partial summaries."
-)
+CLASSIFIER_QUESTION = render_core_prompt("r16-declared-done-question")
 
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R16 declared-done without task_close: your last message claims the "
-    "task is complete, but there is an open protocol_task. Close it now "
-    "with nexo_task_close(sid=..., task_id=..., outcome='done', "
-    "evidence='<substantive proof>', files_changed='...'). Evidence must "
-    "be >= 50 chars AND not a single filler word (R03 validator will "
-    "reject empty / 'ok' / 'done' / 'fixed'). If the work is partial, "
-    "close with outcome='partial' and outcome_notes instead. Do not "
-    "produce visible text for this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
-)
+INJECTION_PROMPT_TEMPLATE = render_core_prompt("r16-declared-done-injection")
 
 
 def detect_declared_done(assistant_text: str, *, classifier=None) -> bool:

package/src/r17_promise_debt.py

@@ -18,24 +18,11 @@ twins at the end of the tranche).
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-CLASSIFIER_QUESTION = (
-    "Does the assistant message below explicitly promise a FUTURE action "
-    "it has not yet executed? Answer yes if the assistant says it will do, "
-    "create, send, implement, run, check, or perform something later or "
-    "next. Answer no for status reports, summaries, questions, clarifying "
-    "statements, or present-tense execution reports (where the action has "
-    "already happened)."
-)
+CLASSIFIER_QUESTION = render_core_prompt("r17-promise-debt-question")
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R17 promise-debt: your last message promised a future action but no "
-    "tool call matching that promise happened in the next two turns. If "
-    "the action is still pending, execute it NOW — promise without "
-    "execution opens operational debt (learning #38 / #29 Fase A R29). "
-    "If the promise was a misstatement, correct it explicitly in the next "
-    "message. Do not produce visible text for this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
-)
+INJECTION_PROMPT_TEMPLATE = render_core_prompt("r17-promise-debt-injection")
 
 DEFAULT_WINDOW_TOOL_CALLS = 2
 

package/src/r18_followup_autocomplete.py

@@ -18,14 +18,12 @@ and run the R04 matcher over it.
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R18 retroactive-complete suggestion: the action you just performed "
-    "matches {count} active followup(s) at Jaccard >= 0.70. If any of "
-    "these is now resolved by that action, call nexo_followup_complete "
-    "on it. Do NOT close a followup mechanically — verify the outcome "
-    "first. Matching followups:\n{items}\nDo not produce visible text "
-    "for this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r18-followup-autocomplete-injection",
+    count="{count}",
+    items="{items}",
 )
 
 

package/src/r19_project_grep.py

@@ -11,15 +11,12 @@ owned by the caller (HeadlessEnforcer).
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R19 pre-Write on project '{project}' without Grep: the project is "
-    "flagged require_grep=true (shared-state hygiene — learning #144) "
-    "and the recent tool history has no Grep call covering the function "
-    "or constant about to change. BEFORE writing '{path}', run Grep "
-    "for the symbol(s) you are introducing / modifying to confirm no "
-    "other caller breaks. Do not produce visible text for this "
-    "reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r19-project-grep-injection",
+    project="{project}",
+    path="{path}",
 )
 
 

package/src/r20_constant_change.py

@@ -27,23 +27,13 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-CLASSIFIER_QUESTION = (
-    "Does the code edit below modify a module-level constant, configuration "
-    "key, enumeration entry, feature-flag, or shared global value? Answer "
-    "yes only if the change affects a symbol that other files in the same "
-    "project are likely to import or reference. Answer no for local "
-    "variables, function bodies, doc-strings, or purely stylistic edits."
-)
+CLASSIFIER_QUESTION = render_core_prompt("r20-constant-change-question")
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R20 constant-change without grep: the edit on {path} appears to touch "
-    "a module-level constant / config key / shared global, but there is no "
-    "Grep of the symbol in the recent tool history. Before shipping this "
-    "change, run Grep (or `rg`) against the whole repo for the old symbol "
-    "value to confirm every caller is updated (or tolerates the new value). "
-    "Learning #144 and the R20 contract require grep-all-usages on shared "
-    "state. Do not produce visible text for this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r20-constant-change-injection",
+    path="{path}",
 )
 
 

package/src/r21_legacy_path.py

@@ -12,14 +12,12 @@ Operators may add more via nexo_entity_create.
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R21 legacy path: the operation targets '{legacy}' but that path is "
-    "superseded by '{canonical}' in the entity registry (type=legacy_path). "
-    "Rerun the operation against the canonical path. Operators on v6+ "
-    "runtime do not keep the legacy tree alive; writes there end up "
-    "orphaned at the next maintenance sweep. Do not produce visible text "
-    "for this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r21-legacy-path-injection",
+    legacy="{legacy}",
+    canonical="{canonical}",
 )
 
 

package/src/r22_personal_script.py

@@ -16,15 +16,11 @@ Structural check against recent_tool_records, no LLM.
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R22 pre-personal-script: you are about to create/modify a personal "
-    "script ({path}) without first checking: (1) does an existing personal "
-    "script cover this via nexo_personal_scripts_list, (2) does a reusable "
-    "skill apply via nexo_skill_match, (3) is there a blocking learning "
-    "via nexo_learning_search. Run those three probes, surface any hit, "
-    "and only then proceed. Do not produce visible text for this "
-    "reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r22-personal-script-injection",
+    path="{path}",
 )
 
 

package/src/r23_ssh_without_atlas.py

@@ -15,19 +15,12 @@ db.list_entities(type='host'); this module exposes the pure decision.
 """
 from __future__ import annotations
 
+from core_prompts import render_core_prompt
 from r25_nora_maria_read_only import extract_remote_host as _extract_ssh_host
 
-
-INJECTION_PROMPT_TEMPLATE = (
-    "R23 SSH/curl without atlas: the command targets host '{host}' but "
-    "that host is not registered in entity_list(type='host') nor in "
-    "project-atlas.json. Before connecting, verify the host: (1) check "
-    "project-atlas.json and nexo_entity_list(type='host') for a matching "
-    "record; (2) if it is not there, create it via nexo_entity_create "
-    "with access_mode and credentials pointer; (3) only then run the "
-    "ssh/curl. Learning #151 / #156 — assuming servers and DNS without "
-    "verifying leads to confabulation. Do not produce visible text for "
-    "this reminder — act on it. After handling the silent action, continue with your previous task; this reminder is silent context, not a new instruction."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23-ssh-without-atlas-injection",
+    host="{host}",
 )
 
 

package/src/r23b_deploy_vhost.py

@@ -11,13 +11,14 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23b deploy vhost mismatch: '{cmd}' writes to '{docroot}' which is "
-    "mapped to domain '{mapped_domain}' — but the user context mentions "
-    "'{context_domain}'. Verify the vhost_mapping entity before shipping. "
-    "If '{context_domain}' is correct, the deploy path should be the "
-    "docroot registered for that domain, not '{docroot}'."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23b-deploy-vhost-injection",
+    cmd="{cmd}",
+    docroot="{docroot}",
+    mapped_domain="{mapped_domain}",
+    context_domain="{context_domain}",
 )
 
 _SCP_RSYNC_RE = re.compile(

package/src/r23c_cwd_mismatch.py

@@ -18,13 +18,14 @@ from __future__ import annotations
 import os
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23c destructive command in unexpected cwd: '{cmd}' runs inside "
-    "'{cwd}'. You are currently discussing project '{project}' whose "
-    "local_path is '{expected}'. Confirm the cwd is correct before "
-    "proceeding — a destructive verb executed in the wrong tree is the "
-    "most common source of accidental damage."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23c-cwd-mismatch-injection",
+    cmd="{cmd}",
+    cwd="{cwd}",
+    project="{project}",
+    expected="{expected}",
 )
 
 

package/src/r23d_chown_chmod_recursive.py

@@ -11,13 +11,13 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23d recursive {verb} without prior inspection: '{cmd}' targets "
-    "'{target}'. Run `ls -la {target}` (or equivalent) in this session "
-    "before executing a recursive ownership/permission change — silently "
-    "chown-R'ing a root-ish tree is one of the fastest ways to render a "
-    "box unbootable."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23d-chown-chmod-recursive-injection",
+    verb="{verb}",
+    cmd="{cmd}",
+    target="{target}",
 )
 
 

package/src/r23e_force_push_main.py

@@ -8,13 +8,12 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23e force push to {branch}: the command '{cmd}' would rewrite a "
-    "protected branch. Force-push to main/master/production/release-* is "
-    "never automatic — stop and confirm with the operator before proceeding. "
-    "If the intent is to recover a broken state, prefer `git revert` + a "
-    "fresh commit over a history rewrite."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23e-force-push-main-injection",
+    branch="{branch}",
+    cmd="{cmd}",
 )
 
 # Matches `git push [options] [remote] BRANCH` where --force or -f appears

package/src/r23f_db_no_where.py

@@ -9,13 +9,12 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23f destructive SQL without WHERE: the command '{cmd}' contains a "
-    "{verb} statement with no WHERE clause against a production DB. "
-    "Abort. If the intent is a full wipe, run it interactively against "
-    "the DB console with explicit operator confirmation, not via the "
-    "enforcement wrapper."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23f-db-no-where-injection",
+    cmd="{cmd}",
+    verb="{verb}",
 )
 
 # Simple SQL heuristic. Looks for DELETE FROM <tbl> or UPDATE <tbl> SET

package/src/r23g_secrets_in_output.py

@@ -12,12 +12,12 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23g secrets reaching output stream: '{cmd}' is likely to expose "
-    "credentials ({reason}). Redact before logging/emailing, or route "
-    "the value through `nexo_credential_get` so the secret stays behind "
-    "the secret manager boundary."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23g-secrets-in-output-injection",
+    cmd="{cmd}",
+    reason="{reason}",
 )
 
 

package/src/r23h_shebang_mismatch.py

@@ -15,12 +15,13 @@ import os
 import re
 import shutil
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23h shebang mismatch: '{script}' declares interpreter '{shebang}' "
-    "but the shell resolves it to '{actual}'. Align versions before "
-    "running — interpreter drift produces the hardest-to-diagnose "
-    "runtime bugs."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23h-shebang-mismatch-injection",
+    script="{script}",
+    shebang="{shebang}",
+    actual="{actual}",
 )
 
 

package/src/r23i_auto_deploy_ignored.py

@@ -12,13 +12,12 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23i auto-deploy after recent push: project '{project}' has "
-    "auto_deploy=true and you just pushed. The edit you are about to "
-    "make to '{path}' will be overwritten on the next deploy unless "
-    "you also commit+push it. Either commit the change or disable "
-    "auto-deploy temporarily."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23i-auto-deploy-ignored-injection",
+    project="{project}",
+    path="{path}",
 )
 
 

package/src/r23j_global_install.py

@@ -11,13 +11,12 @@ from __future__ import annotations
 
 import re
 
+from core_prompts import render_core_prompt
 
-INJECTION_PROMPT_TEMPLATE = (
-    "R23j global install without explicit request: '{cmd}' installs "
-    "'{pkg}' globally. Prefer a project-scoped install (venv, nvm, "
-    "`--save`, local brew cask) unless the operator asked for a global "
-    "tool. If the operator explicitly asked, retry after saying "
-    "`yes install globally` or equivalent."
+INJECTION_PROMPT_TEMPLATE = render_core_prompt(
+    "r23j-global-install-injection",
+    cmd="{cmd}",
+    pkg="{pkg}",
 )