pi-daddy 0.35.0 → 0.37.0

package/dist/kernel/workspace.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/kernel/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE5F,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA2B1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,yGAAyG;IACzG,gDAAgD;IAChD,EAAE;IACF,0GAA0G;IAC1G,2GAA2G;IAC3G,sFAAsF;IACtF,2GAA2G;IAC3G,2GAA2G;IAC3G,uGAAuG;IACvG,oFAAoF;IACpF,4GAA4G;IAC5G,iEAAiE;IACjE,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,0BAA0B,EAAE,sBAAsB,IAAI,yBAAyB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACvG,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,yEAAyE;gBACjG,MAAM,sBAAsB,mEAAmE;gBAC/F,yCAAyC,EAC3C,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,GAAG,kBAAkB,EAAE,CAAC;YACnC,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,OAAO,IAAI,CAAC,IAAI,oBAAoB,kBAAkB,oBAAoB;gBAClG,sDAAsD,EACxD,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;QACD,iGAAiG;QACjG,sGAAsG;QACtG,0GAA0G;QAC1G,wGAAwG;QACxG,yGAAyG;QACzG,mGAAmG;QACnG,EAAE;QACF,sGAAsG;QACtG,wGAAwG;QACxG,sGAAsG;QACtG,oGAAoG;QACpG,0GAA0G;QAC1G,oGAAoG;QACpG,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC;QAC1D,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;gBAC1B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,kCAAkC,wBAAwB,OAAO;oBACzF,uEAAuE,EACzE,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YACxF,IAAI,SAAS,KAAK,CAAC;gBAAE,MAAM;YAC3B,MAAM,IAAI,SAAS,CAAC;QACtB,CAAC;QACD,IAAI,MAAM,GAAG,kBAAkB,EAAE,CAAC;YAChC,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,iBAAiB,kBAAkB,oCAAoC;gBAC/F,iEAAiE,EACnE,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QAC1G,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,QAAQ;YACN,CAAC,CAAC,sBAAsB,IAAI,0BAA0B,wBAAwB,uBAAuB;gBACjG,uDAAuD;YAC3D,CAAC,CAAC,sBAAsB,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,GAAG,EACrE,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,0BAA0B,EAAE,sBAAsB,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACrG,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAwC,CAAC;IACtD,IACE,IAAI,EAAE,OAAO,KAAK,CAAC;QACnB,CAAC,IAAI,CAAC,UAAU;QAChB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,mDAAmD,EAC7E,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,4BAA4B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,6BAA6B,EAC3E,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1C,CACF,CAAC;QACJ,CAAC;QACD,uGAAuG;QACvG,wFAAwF;QACxF,qGAAqG;QACrG,qGAAqG;QACrG,uGAAuG;QACvG,+FAA+F;QAC/F,qFAAqF;QACrF,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,oBAAoB,EACpB,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,oDAAoD;gBAC7F,cAAc,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,yBAAyB;gBAC9E,6FAA6F;gBAC7F,gGAAgG;gBAChG,0FAA0F;gBAC1F,gBAAgB,IAAI,GAAG,EACzB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1C,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC7F,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA+B,EAC/B,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,gDAAgD;YACtF,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,EACjF,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC9F,CACF,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClD,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,qCAAqC,MAAM,CAAC,KAAK,CAAC,GAAG,EACnF,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CACpC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,gBAAgB,QAAQ,iCAAiC,UAAU,EAAE,EACnG,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,CAC1F,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CACV,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CACrG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,YAAY,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,gBAAgB,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,CAChB,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE;YACxG,QAAQ,EAAE,MAAM;SACjB,CAAC,CACH,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,CACX,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CACxG,CAAC,MAAM,CAAC;QACT,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,IAAI;aACD,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1C,CAAC;QACF,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5G,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,wDAAwD,MAAM,CAAC,KAAK,CAAC,GAAG,EACtG,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CACjE,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"workspace.js","sourceRoot":"","sources":["../../src/kernel/workspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AA2B1C;;;;;;;;;;;;;;GAcG;AACH,MAAM,wBAAwB,GAAG,KAAK,CAAC;AAEvC,0FAA0F;AAC1F,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,CAAC;AAEnC,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAY;IACtD,2GAA2G;IAC3G,2GAA2G;IAC3G,2GAA2G;IAC3G,qGAAqG;IACrG,2DAA2D;IAC3D,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE;QACvC,QAAQ,EAAE,kBAAkB;QAC5B,SAAS,EAAE,wBAAwB;KACpC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,OAAO,GACX,IAAI,CAAC,GAAG,KAAK,oBAAoB;YAC/B,CAAC,CAAC,sBAAsB,IAAI,yEAAyE;gBACnG,MAAM,sBAAsB,mEAAmE;gBAC/F,yCAAyC;YAC3C,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,WAAW;gBACxB,CAAC,CAAC,sBAAsB,IAAI,OAAO,IAAI,CAAC,IAAI,oBAAoB,kBAAkB,WAAW;oBAC3F,+DAA+D;gBACjE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,oBAAoB;oBACjC,CAAC,CAAC,sBAAsB,IAAI,iBAAiB,kBAAkB,+BAA+B;wBAC5F,sEAAsE;oBACxE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,WAAW;wBACxB,CAAC,CAAC,sBAAsB,IAAI,kCAAkC,wBAAwB,OAAO;4BAC3F,uEAAuE;wBACzE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,YAAY;4BACzB,CAAC,CAAC,sBAAsB,IAAI,yBAAyB,IAAI,CAAC,MAAM,GAAG;4BACnE,CAAC,CAAC,sBAAsB,IAAI,uBAAuB,IAAI,CAAC,MAAM,GAAG,CAAC;QAC9E,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,0BAA0B,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC;IACtB,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CAAC,0BAA0B,EAAE,sBAAsB,IAAI,uBAAuB,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;YACrG,aAAa,EAAE,IAAI;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAwC,CAAC;IACtD,IACE,IAAI,EAAE,OAAO,KAAK,CAAC;QACnB,CAAC,IAAI,CAAC,UAAU;QAChB,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ;QACnC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,sBAAsB,IAAI,mDAAmD,EAC7E,EAAE,aAAa,EAAE,IAAI,EAAE,CACxB,CACF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,4BAA4B,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,6BAA6B,EAC3E,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1C,CACF,CAAC;QACJ,CAAC;QACD,uGAAuG;QACvG,wFAAwF;QACxF,qGAAqG;QACrG,qGAAqG;QACrG,uGAAuG;QACvG,+FAA+F;QAC/F,qFAAqF;QACrF,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,oBAAoB,EACpB,yBAAyB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,oDAAoD;gBAC7F,cAAc,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,yBAAyB;gBAC9E,6FAA6F;gBAC7F,gGAAgG;gBAChG,0FAA0F;gBAC1F,gBAAgB,IAAI,GAAG,EACzB,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAC1C,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAClD,SAAoC;IAEpC,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,SAAS,EAAE,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAA+B,EAC/B,WAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,gDAAgD;YACtF,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,EACjF,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAC9F,CACF,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,IAAI,UAAkB,CAAC;IACvB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAClD,QAAQ,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,qCAAqC,MAAM,CAAC,KAAK,CAAC,GAAG,EACnF,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,CACpC,CACF,CAAC;IACJ,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,gBAAgB,QAAQ,iCAAiC,UAAU,EAAE,EACnG,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,CAC1F,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CACV,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CACrG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,YAAY,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,YAAY,gBAAgB,CAAC,CAAC;QAC1G,MAAM,SAAS,GAAG,CAChB,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,wBAAwB,EAAE,kBAAkB,CAAC,EAAE;YACxG,QAAQ,EAAE,MAAM;SACjB,CAAC,CACH,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,CACX,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CACxG,CAAC,MAAM,CAAC;QACT,MAAM,mBAAmB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC3C,IAAI;aACD,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;aAC9C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1C,CAAC;QACF,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC5G,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,iBAAiB,CACzB,OAAO,CACL,0BAA0B,EAC1B,aAAa,KAAK,CAAC,WAAW,wDAAwD,MAAM,CAAC,KAAK,CAAC,GAAG,EACtG,EAAE,YAAY,EAAE,KAAK,CAAC,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,CACjE,CACF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/extensions/context-staging.ts

@@ -19,6 +19,7 @@ import { randomUUID } from "node:crypto";
 import { closeSync, mkdirSync, openSync, readSync, realpathSync, rmSync, statSync } from "node:fs";
 import { isAbsolute, relative, resolve } from "node:path";
 import {
+  CONTEXT_RANK,
   fenceContext,
   selectPrunedTurns,
   type ContextRequest,
@@ -69,14 +70,21 @@ export function createHandoffStager(input: StagingInput) {
   return (granted: ContextRequest, options: { keepTurnIds?: readonly string[] } = {}): StagedHandoff => {
     if (granted.mode === "fork") return stageFork(input);
     const sections: ContextSection[] = [];
+    /** Which entries of `sections` are parent turns, so the record can count the ones that survived the cap. */
+    const turnSectionIndices: number[] = [];
     let keptTurns: number | undefined;
     let droppedTurns: number | undefined;
     let rule: string | undefined;
 
     if (granted.mode === "summary")
-      sections.push({ label: "what your parent says you need to know", body: granted.summary ?? "" });
+      sections.push({
+        label: "what your parent says you need to know",
+        body: granted.summary ?? "",
+        keepRank: CONTEXT_RANK.summary,
+      });
     if (granted.mode === "files" || granted.mode === "pruned")
-      for (const path of granted.files ?? []) sections.push(readSection(input.cwd, path));
+      for (const path of granted.files ?? [])
+        sections.push({ ...readSection(input.cwd, path), keepRank: CONTEXT_RANK.file });
     if (granted.mode === "pruned") {
       const all = parentTurns(input.parentSession);
       const selection = selectPrunedTurns(all, {
@@ -93,20 +101,39 @@ export function createHandoffStager(input: StagingInput) {
       keptTurns = chosen.length;
       droppedTurns = all.length - chosen.length;
       rule = options.keepTurnIds === undefined ? selection.rule : `${selection.rule}+advice`;
-      for (const turn of chosen) sections.push({ label: `parent turn ${turn.id}`, body: turn.text });
+      // Two bands, then position within the band. The probe measured array-order filling losing exactly the
+      // turns nearest the task; review then measured the first fix losing the file-matched turns instead,
+      // because those sit at the FRONT of `chosen` and a bare positional rank made oldest mean least.
+      const matched = new Set(selection.fileMatched);
+      chosen.forEach((turn, index) => {
+        turnSectionIndices.push(sections.length);
+        sections.push({
+          label: `parent turn ${turn.id}`,
+          body: turn.text,
+          keepRank: (matched.has(turn.id) ? CONTEXT_RANK.fileMatchedTurn : CONTEXT_RANK.recentTurn) + index,
+        });
+      });
       if (chosen.length === 0)
         sections.push({ label: "parent turns", body: "(no turn of your parent's session matched the selection)" });
     }
 
     const fenced = fenceContext(sections);
+    // **The record counts what CROSSED, which is what this module says it does.** These were counted before
+    // the budget ran, so a handoff could record `keptTurns: 21` having sent thirteen. Review measured it, and
+    // raising the default turn count moved the cap from binding in 13% of handoffs to 60% — so the wrong
+    // number became the usual number.
+    const crossed = new Set(fenced.keptIndices);
+    const turnsCrossed = turnSectionIndices.filter((index) => crossed.has(index)).length;
     return {
       contextPrompt: fenced.text,
       record: {
         mode: granted.mode,
-        sections: sections.length,
+        sections: fenced.keptIndices.length,
         bytes: Buffer.byteLength(fenced.text),
         truncatedBytes: fenced.truncatedBytes,
-        ...(keptTurns !== undefined ? { keptTurns, droppedTurns, rule } : {}),
+        ...(keptTurns !== undefined
+          ? { keptTurns: turnsCrossed, droppedTurns: droppedTurns! + (keptTurns - turnsCrossed), rule }
+          : {}),
       },
     };
   };

package/extensions/grants-command.ts

@@ -381,6 +381,13 @@ export const grantsCommand = {
       ...(catalog.byKind("workspace").length > 0
         ? [`  routable   ${catalog.byKind("workspace").join(", ")} — held ones only are usable (ADR-0035)`]
         : []),
+      // Rule 8's loud half again. The catalog fails soft on an unreadable registry, which is right, and used
+      // to discard the reason with it, which was not: one malformed entry removed every workspace from this
+      // screen, from the catalog and from `init`, and an operator saw an empty list identical to the one a
+      // machine with no registry shows. Placed under `routable` because it explains that line's absence.
+      ...(catalog.registryRefusal
+        ? [`  routable   (none — workspace registry unreadable) ${catalog.registryRefusal}`]
+        : []),
     ];
     // Runs the REAL planner AND the real approval step over each definition, so this listing cannot
     // disagree with what a spawn would do — the R-28 lesson, kept structural rather than remembered.

package/extensions/init-command.ts

@@ -52,7 +52,13 @@ export async function runInit(
     return;
   }
 
-  const plan = planInit(packages, ctx.cwd, await registeredWorkspaceIds());
+  const plan = planInit(
+    packages,
+    ctx.cwd,
+    await registeredWorkspaceIds(undefined, (reason) =>
+      ctx.ui.notify(`grants: workspace registry unreadable, scaffolding no workspaces — ${reason}`, "warning"),
+    ),
+  );
   const outcome = await applyInit(plan);
   const lines = [
     `grants: ${plan.skills.length} definition(s) from ${packages.map((p) => `${p.name}@${p.version}`).join(", ")}`,

package/extensions/pruning-advice.ts

@@ -22,7 +22,8 @@ export const PRUNING_PURPOSE = "handoff-pruning";
 
 /**
  * How many candidates may be judged. One question per turn, and a decision a human is waiting on should not carry
- * an unbounded number of them; beyond this the rule's own selection stands, which is the safe direction.
+ * an unbounded number of them. Beyond this the OLDEST candidates go unjudged and are kept, which is the safe
+ * direction: an unjudged turn is never dropped, so the advisor can still only narrow.
  */
 export const MAX_JUDGED_TURNS = 12;
 
@@ -43,11 +44,21 @@ export async function advisePruning(input: {
     ...(input.granted.turns !== undefined ? { turns: input.granted.turns } : {}),
     ...(input.granted.files !== undefined ? { files: input.granted.files } : {}),
   }).kept;
-  // Nothing to narrow, or more than a bounded number to judge: the rule stands and no call is made.
-  if (candidates.length < 2 || candidates.length > MAX_JUDGED_TURNS) return undefined;
+  if (candidates.length < 2) return undefined;
+  // **Judge the MOST RECENT candidates, and keep the rest unjudged.** This was `> MAX_JUDGED_TURNS` → give up
+  // entirely, which was fine while the rule offered six turns and became a silent feature death the moment
+  // `DEFAULT_CONTEXT_TURNS` rose to 20: every default request would have exceeded the bound, so the pruning
+  // decision point shipped in 0.35.0 would never have fired again. Found while raising the default, which is
+  // the only reason it was found at all.
+  //
+  // Judging a SUBSET is still only narrowing — an unjudged turn is kept, never dropped — so the attenuation
+  // property is untouched. The recent end is judged because that is where the rule's own recall is
+  // concentrated, and because a turn adjacent to the task is the one a wrong answer costs most.
+  const unjudged = candidates.slice(0, Math.max(0, candidates.length - MAX_JUDGED_TURNS));
+  const judged = candidates.slice(unjudged.length);
 
   const questions: Record<string, Question> = {};
-  for (const [index, turn] of candidates.entries())
+  for (const [index, turn] of judged.entries())
     questions[`turn${index}`] = {
       kind: "noul",
       // Both bounded: the task is embedded once per candidate, so an unbounded task became a request twelve times
@@ -67,10 +78,11 @@ export async function advisePruning(input: {
   if (!advice) return undefined;
   // Every candidate or none. A response missing eleven of twelve answers would otherwise read as "drop eleven",
   // which is a narrowing nobody asked for rather than the "unrecognised response means no advice" contract.
-  if (candidates.some((_, index) => advice.answers[`turn${index}`]?.kind !== "noul")) return undefined;
-  const kept = candidates
-    .filter((_, index) => (advice.answers[`turn${index}`] as { value: boolean }).value)
-    .map((turn) => turn.id);
+  if (judged.some((_, index) => advice.answers[`turn${index}`]?.kind !== "noul")) return undefined;
+  const kept = [
+    ...unjudged.map((turn) => turn.id),
+    ...judged.filter((_, index) => (advice.answers[`turn${index}`] as { value: boolean }).value).map((turn) => turn.id),
+  ];
   // An advisor that drops everything is answering a different question from the one that was asked; the rule's
   // selection stands rather than handing a child a handoff with nothing in it.
   return kept.length === 0 ? undefined : kept;

package/extensions/session-report.ts

@@ -57,6 +57,21 @@ export async function reportSessionStart(session: GrantsSession, ctx: SessionRep
       "warning",
     );
   }
+  // **Rule 8's loud half for the two reads that discover what exists.** Both of these used to fail soft and
+  // say nothing, and review established that session start — not `/grants` — is where every other such
+  // notice lives (a malformed bound above, ledger corruption and an executor refusal below). A reason an
+  // operator has to ask for is a reason most operators never see.
+  //
+  // The definitions one matters more than it looks: the 1 MiB bound is NEW behaviour, so a definition that
+  // loaded yesterday can be absent today, and without this line the only symptom is `unknown agent "x"` at
+  // the moment somebody tries to delegate to it.
+  for (const reason of session.definitionSkips)
+    ctx.ui.notify(`grants: a definition was not loaded — ${reason}`, "warning");
+  if (session.catalog.registryRefusal)
+    ctx.ui.notify(
+      `grants: workspace registry unreadable, no workspace is routable this session — ${session.catalog.registryRefusal}`,
+      "warning",
+    );
   // ADR-0014: a pre-0.6 in-workspace approvals file is IGNORED, not migrated — importing it would
   // import exactly the entries whose trustworthiness the move exists to remove. Say so, because an
   // operator whose approvals silently stopped applying deserves to know why.

package/extensions/session.ts

@@ -186,6 +186,16 @@ export interface GrantsSession extends NativeSessionHost {
   observedTools: string[] | null;
   /** ADR-0016: `SKILL.md` definitions, keyed by name. The format this package spawns from now. */
   definitions: Map<string, SkillDefinition>;
+  /**
+   * Definitions discovery dropped, and why — reported at session start (ADR-0076, rule 8).
+   *
+   * Review found the bound shipped without this: `loadDefinitions` grew a `skipped` callback and NO
+   * production caller passed one, so an oversized or unreadable `SKILL.md` still vanished with nothing
+   * anywhere explaining it. That is worse than the `catch { continue }` it replaced, because the bound is
+   * new behaviour — a 2 MiB definition used to load. A capability that only a test can observe is not a
+   * capability.
+   */
+  definitionSkips: string[];
   catalog: Catalog;
   /**
    * The in-flight catalog build, so `delegate` can wait for it instead of racing it.
@@ -255,7 +265,9 @@ export interface GrantsSession extends NativeSessionHost {
  * about what loading means, so there is one.
  */
 export async function loadProjectDefinitions(session: GrantsSession, cwd: string): Promise<void> {
-  session.definitions = await loadDefinitions(cwd);
+  const skips: string[] = [];
+  session.definitions = await loadDefinitions(cwd, (_path, reason) => skips.push(reason));
+  session.definitionSkips = skips;
   session.catalogReady = buildCatalog({
     cwd,
     observedTools: session.observedTools,
@@ -318,6 +330,7 @@ export function createGrantsSession(
     depth,
     maxDepth,
     malformedBounds: bounds.malformed,
+    definitionSkips: [],
     // ADR-0012: `bash` is gated by DEFAULT — but only in a governed session. An ungoverned one
     // (no PI_DADDY_GRANT) still blocks nothing, so "governance is opt-in" holds exactly where it always
     // did. Inside a session the operator already chose to govern, handing a child `bash` hands it an

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-daddy",
-  "version": "0.35.0",
+  "version": "0.37.0",
   "description": "Capability governance for pi sub-agents: spawn Agent Skills (SKILL.md) definitions whose allowed-tools becomes a grant that can only narrow going down a delegation tree, enforced by pi's own --tools allowlist, with an append-only ledger.",
   "keywords": [
     "pi-package",

package/src/cli.ts

@@ -150,7 +150,15 @@ async function init(cwd: string, force: boolean): Promise<number> {
 
   let plan: InitPlan;
   try {
-    plan = planInit(packages, cwd, await registeredWorkspaceIds());
+    // A registry that cannot be read scaffolds no workspace capabilities. That was silent, so the operator
+    // saw a plan with none and no way to tell it apart from having registered none (rule 8).
+    plan = planInit(
+      packages,
+      cwd,
+      await registeredWorkspaceIds(undefined, (reason) =>
+        console.error(`pi-daddy init: workspace registry unreadable, scaffolding none — ${reason}`),
+      ),
+    );
   } catch (error) {
     // R-78's backstop reaching the surface. Nothing is written: a grant that could mean something to a
     // shell is not a grant, and half-scaffolding a project would be worse than scaffolding none of it.

package/src/kernel/bounded-read.ts

@@ -0,0 +1,125 @@
+/**
+ * One bounded reader for the operator-authored files this package reads at SESSION START.
+ *
+ * **Why this is a module rather than a pattern to copy.** `loadWorkspaceRegistry` worked out the correct
+ * shape the expensive way — R-79 hung forever on a FIFO, a `stat`-then-`readFile` rewrite reintroduced the
+ * hang through a TOCTOU, and `AbortSignal.timeout` turned out never to interrupt a libuv read. That comment
+ * block ends with "One reader is why that cannot happen again", and then a second session-start read
+ * (`loadDefinitions`, reading each `SKILL.md`) went on using a bare `readFile`. The guards were not copied
+ * because copying them correctly is exactly what the registry's own history says nobody manages.
+ *
+ * What the shape buys, restated once here so neither caller has to:
+ *
+ *  - `O_NONBLOCK` on the open. A FIFO blocks inside `open(2)` before any read starts, so a signal or a
+ *    deadline checked between chunks can never rescue it; a non-blocking open returns instead.
+ *  - every check against the HELD DESCRIPTOR. `stat` by name followed by a read by name is a TOCTOU, and the
+ *    attacker is any process at the same uid — swapping a regular file for a FIFO between the two hangs the
+ *    reader. `fstat` on a descriptor has no name left to re-resolve.
+ *  - a deadline checked BETWEEN chunks, which is all an `AbortSignal` ever managed. Its honest limit: a
+ *    stalled open or a single wedged read cannot be interrupted from in-process.
+ *  - a size bound checked twice, before the read from `fstat` and again after, because a file can grow
+ *    between the two. **The buffer is `maxBytes + 1` regardless of the file's size, and that is deliberate.**
+ *    Review proposed sizing it from `fstat` instead; that would be faster and would silently break the second
+ *    check, because a file whose reported size understates its content — anything under procfs, and any file
+ *    that grows — would fill its small buffer exactly and come back as a successful truncated read. The cost
+ *    was measured rather than assumed: 500 allocations of 1 MiB + 1 take 8.1ms for an RSS delta of 2.8 MB,
+ *    because `allocUnsafe` never touches the pages.
+ *
+ * **The clock is injected** so the deadline is forced by a test rather than by a reviewer. Before this
+ * module the registry's deadline could be deleted outright and all 876 tests still passed (measured at
+ * `7096f78`), which is rule 7's "a test that cannot fail is worse than no test" with the production change
+ * named: delete the `now() > deadline` branch below and `bounded-read.test.ts` fails.
+ */
+import { constants } from "node:fs";
+import { open, type FileHandle } from "node:fs/promises";
+
+export interface BoundedReadLimits {
+  /** Refuse anything at or over this, before allocating it. */
+  maxBytes: number;
+  /** How long the chunk loop may run before the read is a refusal rather than a wait. */
+  timeoutMs: number;
+  /** Injected only by tests; production passes nothing and gets the wall clock. */
+  now?: () => number;
+}
+
+/**
+ * Why a bounded read did not produce text.
+ *
+ * A discriminated reason rather than a thrown error, because the two callers disagree about what a failure
+ * MEANS — an unreadable registry is a governance refusal naming the file, while an unreadable `SKILL.md` is
+ * one definition that will not be offered — and a shared reader must not decide that for them.
+ */
+export type BoundedReadFailure =
+  | { why: "unopenable"; detail: string }
+  | { why: "not-a-regular-file"; detail: string }
+  | { why: "too-large"; detail: string; size: number }
+  | { why: "grew-while-reading"; detail: string }
+  | { why: "timed-out"; detail: string }
+  | { why: "unreadable"; detail: string };
+
+export type BoundedReadResult = { ok: true; text: string } | ({ ok: false } & BoundedReadFailure);
+export type BoundedReadBytes = { ok: true; bytes: Buffer } | ({ ok: false } & BoundedReadFailure);
+
+/**
+ * The same read, handing back raw bytes.
+ *
+ * `skill-packages.ts` needs the bytes rather than a string, because it asserts that a definition survives a
+ * UTF-8 round trip unchanged — a latin-1 byte that decodes to U+FFFD changes the file's digest, and that
+ * check is only possible against the original buffer. Decoding here and re-encoding there would defeat it.
+ */
+export async function readBoundedFile(path: string, limits: BoundedReadLimits): Promise<BoundedReadResult> {
+  const read = await readBoundedBytes(path, limits);
+  return read.ok ? { ok: true, text: read.bytes.toString("utf8") } : read;
+}
+
+export async function readBoundedBytes(path: string, limits: BoundedReadLimits): Promise<BoundedReadBytes> {
+  const now = limits.now ?? Date.now;
+  let handle: FileHandle;
+  try {
+    handle = await open(path, constants.O_RDONLY | constants.O_NONBLOCK);
+  } catch (error) {
+    return { ok: false, why: "unopenable", detail: String(error) };
+  }
+  try {
+    const info = await handle.stat();
+    if (!info.isFile())
+      return {
+        ok: false,
+        why: "not-a-regular-file",
+        detail: `${path} is not a regular file — a FIFO, device or socket here would block rather than fail`,
+      };
+    if (info.size > limits.maxBytes)
+      return {
+        ok: false,
+        why: "too-large",
+        size: info.size,
+        detail: `${path} is ${info.size} bytes, over the ${limits.maxBytes} limit`,
+      };
+
+    const deadline = now() + limits.timeoutMs;
+    const buffer = Buffer.allocUnsafe(limits.maxBytes + 1);
+    let filled = 0;
+    while (filled < buffer.length) {
+      if (now() > deadline)
+        return {
+          ok: false,
+          why: "timed-out",
+          detail: `${path} did not finish reading within ${limits.timeoutMs}ms`,
+        };
+      const { bytesRead } = await handle.read(buffer, filled, buffer.length - filled, filled);
+      if (bytesRead === 0) break;
+      filled += bytesRead;
+    }
+    if (filled > limits.maxBytes)
+      return {
+        ok: false,
+        why: "grew-while-reading",
+        detail: `${path} exceeded the ${limits.maxBytes} limit while being read — it grew after its size was checked`,
+      };
+    return { ok: true, bytes: buffer.subarray(0, filled) };
+  } catch (error) {
+    return { ok: false, why: "unreadable", detail: String(error) };
+  } finally {
+    await handle.close().catch(() => {});
+  }
+}

package/src/kernel/catalog.ts

@@ -44,6 +44,17 @@ export interface Catalog {
   all: Capability[];
   byKind(kind: CapabilityKind): Capability[];
   has(capability: Capability): boolean;
+  /**
+   * Why the workspace registry contributed nothing, when one was named and could not be read.
+   *
+   * The catalog fails SOFT on a bad registry — a malformed one must not stop a session starting — and the
+   * refusal used to be discarded by `() => []` at the call below. That is rule 8's silent safe-mode: one
+   * malformed entry removed every workspace from `/grants`, from the catalog and from `init`, and produced
+   * no message anywhere, so an operator saw an empty list and could not tell it apart from having
+   * registered nothing. Failing soft is still right; failing soft and SILENTLY was not. `undefined` means
+   * no registry was named, or it read cleanly.
+   */
+  registryRefusal?: string;
 }
 
 /** Split observed tool names into pi built-ins and extension-provided tools. */
@@ -107,7 +118,7 @@ export function workspaceEntries(registry: WorkspaceRegistryFile, source?: strin
 }
 
 /** Assemble a catalog from parts. Pure, so it is testable without a filesystem. */
-export function makeCatalog(entries: CatalogEntry[]): Catalog {
+export function makeCatalog(entries: CatalogEntry[], registryRefusal?: string): Catalog {
   const deduped = new Map<Capability, CatalogEntry>();
   for (const entry of entries) if (!deduped.has(entry.capability)) deduped.set(entry.capability, entry);
   const list = [...deduped.values()].sort((a, b) => a.capability.localeCompare(b.capability));
@@ -118,6 +129,7 @@ export function makeCatalog(entries: CatalogEntry[]): Catalog {
     all: ids,
     byKind: (kind) => list.filter((e) => e.kind === kind).map((e) => e.capability),
     has: (capability) => idSet.has(capability),
+    ...(registryRefusal === undefined ? {} : { registryRefusal }),
   };
 }
 
@@ -135,30 +147,39 @@ export async function buildCatalog(input: {
     // session from starting — `loadWorkspaceRegistry` throws a GovernanceRefusal naming the file, and that
     // refusal is the operator's signal at the point of USE, where routing actually depends on it. Swallowing
     // it there would be unsafe; swallowing it here costs a display list.
+    //
+    // **What the refusal is no longer allowed to do is vanish.** This handler was `() => []`, so the display
+    // list was lost AND the reason with it. The reason now rides on the catalog and `/grants` prints it.
     input.registryPath
       ? loadWorkspaceRegistry(input.registryPath).then(
-          (r) => workspaceEntries(r, input.registryPath),
-          () => [] as CatalogEntry[],
+          (r) => ({ entries: workspaceEntries(r, input.registryPath), refusal: undefined as string | undefined }),
+          (error: unknown) => ({
+            entries: [] as CatalogEntry[],
+            refusal: error instanceof Error ? error.message : String(error),
+          }),
         )
-      : Promise.resolve([] as CatalogEntry[]),
-  ]);
-  return makeCatalog([
-    // pi's built-ins are seeded unconditionally, because they are known statically and the catalog is
-    // consulted BEFORE any provider request has happened — `/grants` runs at that point. Without this,
-    // every capability looked "unknown" until the first model call, so the preview refused grants that
-    // enforcement would have allowed: R-28's failure shape (a diagnostic disagreeing with the enforcer)
-    // reappearing through a different door.
-    //
-    // The trade-off, stated plainly: in a session started with `--tools read`, this still lists `bash`
-    // as an existing capability, so a delegation naming it passes the *unknown* check and is refused by
-    // the *grant* check instead ("this session does not hold it"). That is the better error anyway, and
-    // the grant check — not this catalog — is the authority. Nothing here grants anything.
-    ...PI_BUILTIN_TOOLS.map((name) => ({ capability: `tool:${name}` as const, kind: "builtin" as const })),
-    ...(input.observedTools ? classifyToolNames(input.observedTools) : []),
-    ...skills,
-    ...definitionEntries(definitions),
-    ...workspaces,
+      : Promise.resolve({ entries: [] as CatalogEntry[], refusal: undefined as string | undefined }),
   ]);
+  return makeCatalog(
+    [
+      // pi's built-ins are seeded unconditionally, because they are known statically and the catalog is
+      // consulted BEFORE any provider request has happened — `/grants` runs at that point. Without this,
+      // every capability looked "unknown" until the first model call, so the preview refused grants that
+      // enforcement would have allowed: R-28's failure shape (a diagnostic disagreeing with the enforcer)
+      // reappearing through a different door.
+      //
+      // The trade-off, stated plainly: in a session started with `--tools read`, this still lists `bash`
+      // as an existing capability, so a delegation naming it passes the *unknown* check and is refused by
+      // the *grant* check instead ("this session does not hold it"). That is the better error anyway, and
+      // the grant check — not this catalog — is the authority. Nothing here grants anything.
+      ...PI_BUILTIN_TOOLS.map((name) => ({ capability: `tool:${name}` as const, kind: "builtin" as const })),
+      ...(input.observedTools ? classifyToolNames(input.observedTools) : []),
+      ...skills,
+      ...definitionEntries(definitions),
+      ...workspaces.entries,
+    ],
+    workspaces.refusal,
+  );
 }
 
 /**