sf-intelligence 0.1.22 → 0.1.23

package/dist/index.js

@@ -24806,6 +24806,73 @@ var init_intent_router = __esm({
           /\bwhat_if_remove_picklist_value\b/
         ]
       },
+      // === R3 §5b — what-if CHANGE-TYPE WHITELIST honest routes ================
+      // The what_if_* simulators cover a fixed change-type list (field type /
+      // required / picklist value, flow deactivation, trigger disable, method
+      // signature, profile merge/split). A what-if ask about a change type with
+      // NO simulator (remove a record type, change a layout assignment, change a
+      // flow variable's type) must not be absorbed by the nearest-neighbor
+      // what_if_* — these rules catch those shapes FIRST and route the honest
+      // dependency read (get_impact & friends) with an explicit no-simulator
+      // disclosure, mirroring `permission-set-deactivation-impact`.
+      {
+        intent: "record-type-removal-impact",
+        plane: "vault",
+        tools: ["sfi.resolve", "sfi.get_impact", "sfi.recordtype_availability"],
+        liveRequired: false,
+        needsResolve: true,
+        reason: "No what_if simulator exists for removing a record type, so this routes honestly to the dependency read: get_impact surfaces the flows, layouts, validation rules, and profiles referencing the record type, and recordtype_availability shows who can see it today \u2014 the truthful stand-in for a removal blast radius, not a fabricated simulation.",
+        patterns: [
+          /\b(?:remov\w+|delet\w+|dropp?\w*|consolidat\w+|retir\w+)\b[^.?!]{0,50}\brecord\s+types?\b/,
+          /\brecord\s+types?\b[^.?!]{0,50}\b(?:is|are|was|were|gets?|being)\s+(?:removed|deleted|dropped|consolidated|retired)\b/
+        ]
+      },
+      {
+        intent: "layout-assignment-change-impact",
+        plane: "vault",
+        tools: ["sfi.resolve", "sfi.layout_assignments", "sfi.get_impact"],
+        liveRequired: false,
+        needsResolve: true,
+        reason: "No what_if simulator exists for changing a page-layout assignment, so this routes honestly to the current state: layout_assignments shows the Profile \xD7 RecordType assignments the change would rewire, plus get_impact for the dependency surface \u2014 a lookup plus impact read, not a fabricated simulation.",
+        patterns: [
+          /\b(?:chang\w+|swapp?\w*|reassign\w*|switch\w*)\b[^.?!]{0,60}\blayout\s+assignments?\b/,
+          /\bwhat\s+(?:if|happens|breaks)\b[^.?!]{0,80}\blayout\s+assignments?\b/
+        ]
+      },
+      {
+        intent: "flow-variable-type-change-impact",
+        plane: "vault",
+        tools: ["sfi.resolve", "sfi.get_impact", "sfi.explain_flow"],
+        liveRequired: false,
+        needsResolve: true,
+        reason: "No what_if simulator models changing a flow variable's type (e.g. single record to collection), so this routes honestly to the callers: get_impact surfaces the flows/processes invoking it (whose passed values a type change breaks), and explain_flow the variable's uses inside \u2014 an interface-impact read, not a fabricated simulation.",
+        patterns: [
+          /\b(?:input|output)\s+variable\b[^.?!]{0,60}\btype\b/,
+          /\bvariable\s+type\b[^.?!]{0,60}\bflow\b/,
+          /\bflow\b[^.?!]{0,60}\bvariable\s+type\b/
+        ]
+      },
+      {
+        // R3 §5b — ENUMERATION-vs-ID gate: `cpq_rule_chain` and
+        // `cpq_quote_template_breakdown` REQUIRE a specific canonical id, so an
+        // org-wide ask ("map the whole CPQ rule chain", "what quote template does
+        // the org use?") must route the ENUMERATION path — the id-free dependency
+        // map plus list_components — never commit an id-required tool without an
+        // id. Hoisted ABOVE the call-graph/"map the chain" family and the generic
+        // `cpq` rule (first-match): only org-wide CPQ phrasings land here; a
+        // named rule/template still gets the per-id chain tools.
+        intent: "cpq-enumeration",
+        plane: "vault",
+        tools: ["sfi.cpq_dependency_map", "sfi.list_components"],
+        liveRequired: false,
+        needsResolve: false,
+        reason: "Org-wide CPQ enumeration: cpq_dependency_map maps the whole rule/template surface with no id needed, and list_components enumerates the CPQ rules/templates themselves. The per-id tools (cpq_rule_chain, cpq_quote_template_breakdown) need a specific named rule or template \u2014 pick one from the enumeration first.",
+        patterns: [
+          /\bmap\s+the\b[^.?!]{0,40}\bcpq\b|\bcpq\b[^.?!]{0,40}\brule\s+chain\b[^.?!]{0,60}\b(?:evaluation\s+order|all|every|org-?wide|whole)\b/,
+          /\b(?:what|which)\s+(?:cpq\s+)?quote\s+templates?\b[^.?!]{0,50}\b(?:do(?:es)?\s+(?:we|the\s+org)|org)\s*use\b/,
+          /\b(?:all|every|list)\b[^.?!]{0,30}\b(?:price|product|discount)\s+rules?\b[^.?!]{0,50}\b(?:evaluation\s+order|and\s+their)\b/
+        ]
+      },
       {
         intent: "async-chain-depth",
         plane: "vault",
@@ -26111,6 +26178,35 @@ var init_intent_router = __esm({
           /\bhighlights?\b.*\b(vs|versus|full)\b.*\blayout\b/
         ]
       },
+      {
+        // COMPONENT-TYPE CONFUSION (router-v2 R2, type-confusion trap family):
+        // "is <Name> a flow or a trigger?", "is that an Apex class or a flow?",
+        // "the name has 'Trigger' in it but is it actually a test class?", "what
+        // type is that?". The user is unsure WHAT KIND of component a name is —
+        // resolve answers the type question, and the two explainers cover
+        // whichever family it lands on (the stage-5 type guard swaps the
+        // incompatible one once the entity resolves). MUST precede
+        // automation-on-object, whose "triggers … on <object>" pattern otherwise
+        // steals "…an actual trigger on Contact?".
+        intent: "component-type",
+        plane: "vault",
+        tools: ["sfi.resolve", "sfi.explain_flow", "sfi.explain_apex_method"],
+        liveRequired: false,
+        needsResolve: true,
+        reason: "The question asks WHICH KIND of component a name is (flow vs trigger vs Apex class vs test class). Resolve the name to its actual type first; then explain it with the family-appropriate tool \u2014 the resolver output, not the name, decides which.",
+        patterns: [
+          // Two component-family nouns joined by "or" inside one clause:
+          // "is <name>/that/it (actually) a flow … or (an actual) trigger".
+          /\bis\s+(?:that|this|it|[a-z0-9_]+)\s+(?:actually\s+)?(?:an?\s+)?(?:apex(?:\s+(?:class|test\s+class|logging))?|flow|trigger|test\s+class)\b[^.?!]{0,40}\bor\s+(?:an?\s+)?(?:actual(?:ly)?\s+a?\s*)?(?:apex(?:\s+class)?|flow|trigger|test\s+class|something\s+else)/,
+          // Name-vs-nature: "…but is it actually a test class?"
+          /\bbut\s+is\s+(?:it|that)\s+(?:actually\s+)?an?\s+(?:test\s+class|trigger|flow|apex\s+class)\b/,
+          // "what type is that / what type of component is <name>" — `that/this`
+          // only (not `it`), and never when the question names a __c FIELD:
+          // "what type is it?" about CON_...__c asks the field's DATA type, not
+          // the component family (the cov3-029 negative).
+          /^(?!.*__c\b)(?=[\s\S]*\bwhat\s+type\s+(?:is\s+(?:that|this)|of\s+component\s+is)\b)/
+        ]
+      },
       {
         intent: "field-access",
         plane: "vault",
@@ -26361,6 +26457,35 @@ var init_intent_router = __esm({
           /\busers?\b[^.?!]{0,30}\bassigned\b[^.?!]{0,30}\bpermission\s+sets?\b/
         ]
       },
+      {
+        // HONEST GAP (round-2, q1948/q1559): "which PSG grants the X custom
+        // permission / the Y role" is a PermissionSetGroup COMPOSITION lookup —
+        // PSG membership/composition is not modeled (same boundary as the two PSG
+        // gaps above), and roles are not granted by PSGs at all, so substituting
+        // object_access_audit / effective_permissions would be confidently wrong.
+        // Requires the GROUP noun: "which permission SETS grant edit on X" (no
+        // `group`) stays on the real field/effective-permissions routes.
+        intent: "permset-group-grants",
+        plane: "vault",
+        tools: [],
+        liveRequired: false,
+        needsResolve: false,
+        reason: "Which permission set group grants a permission (PermissionSetGroup composition) is not modeled \u2014 capability gap.",
+        gap: {
+          category: "permset-group-grants",
+          note: 'PermissionSetGroup composition/membership modeling is not built yet, so "which PSG grants X" cannot be answered. Do not substitute effective_permissions or object_access_audit \u2014 they cover permission sets and profiles, not PSG composition. (If X is a custom permission, sfi.resolve + the permission-set reverse lookup covers PERMISSION SETS granting it.)'
+        },
+        patterns: [
+          // Tempered verb→grants gap: "which permission set groups REFERENCE a
+          // permission set that grants X" is a graph-edge read (answerable) — a
+          // reference/contain/include verb between the PSG noun and `grants`
+          // breaks the match, so only the PSG-as-grantor ask gaps. `not` breaks it
+          // too: "why would a PSG NOT grant expected access" is a troubleshooting
+          // ask that stays on its pre-round-2 route (sweep-parity pin).
+          /\b(?:which|what)\s+(?:permission\s+set\s+groups?|psgs?)\b(?:(?!\b(?:references?|referencing|contains?|containing|includes?|including|not)\b)[^.?!]){0,60}\bgrants?\b/,
+          /\b(?:permission\s+set\s+groups?|psgs?)\b(?:(?!\b(?:references?|referencing|contains?|containing|includes?|including|not)\b)[^.?!]){0,40}\bgrants?\b[^.?!]{0,60}\b(?:custom\s+permission|permission|role|access)\b/
+        ]
+      },
       {
         intent: "empty-queues-groups",
         plane: "vault",
@@ -55261,7 +55386,7 @@ var init_retrieve_blindspot_report = __esm({
 });
 
 // ../mcp/dist/src/context-resolution.js
-var PRONOUN_ANCHORS, REPARAM_ANCHORS, detectPronounAnchor, detectReparamAnchor, ANAPHOR_ONLY, isAnaphorOnly, ORDINAL_INDEX, SELECTION_SHAPE, NON_DESCRIPTOR_TOKENS, detectClarificationSelection, COMPONENT_ID_SHAPE, validatePreviousContext, CONTINUATION_TOOL_TYPES, continuationToolCompatible, REPARAM_FILLER, extractReparamTarget;
+var PRONOUN_ANCHORS, REPARAM_ANCHORS, detectPronounAnchor, detectReparamAnchor, ANAPHOR_ONLY, isAnaphorOnly, ORDINAL_INDEX, SELECTION_SHAPE, NON_DESCRIPTOR_TOKENS, detectClarificationSelection, GAP_FOLLOW_UP_SHAPES, detectGapShapedFollowUp, COMPONENT_ID_SHAPE, validatePreviousContext, CONTINUATION_TOOL_TYPES, continuationToolCompatible, REPARAM_FILLER, extractReparamTarget;
 var init_context_resolution = __esm({
   "../mcp/dist/src/context-resolution.js"() {
     "use strict";
@@ -55352,6 +55477,37 @@ var init_context_resolution = __esm({
       const containing = options.filter((option) => option.toLowerCase().includes(token));
       return containing.length === 1 ? { kind: "selected", anaphor, selection: containing[0] } : { kind: "re-ask", anaphor };
     };
+    GAP_FOLLOW_UP_SHAPES = [
+      // Normative/judgment asks — the product reads metadata, it has no opinion
+      // (q891/q30 "should they be able to?", q95 "is it normal?", q1075 "was any
+      // of it risky?", q1054 "are those considered sensitive?", q1065 "how hard
+      // is it to close?", q1060 "does that mean something's broken?", q1012 "is
+      // it doing its job?").
+      [/\bshould\s+(?:they|he|she|it)\s+(?:be\s+able|have|see)\b/i, "judgment"],
+      [/\bis\s+(?:it|that|this)\s+normal\b|\bseems?\s+like\s+a\s+lot\b/i, "judgment"],
+      [/\bwas\s+(?:any\s+of\s+)?(?:it|that|this)\s+risky\b/i, "judgment"],
+      [/\bare\s+(?:those|these|they)\s+considered\s+\w+/i, "judgment"],
+      [/\bhow\s+hard\s+(?:is|would)\s+it\b/i, "judgment"],
+      [/\bdoes\s+that\s+mean\s+something(?:'s|\s+is)\s+broken\b/i, "judgment"],
+      [/\bis\s+it\s+doing\s+its\s+job\b/i, "judgment"],
+      // Delivery/export asks (q914 "as a file rather than on screen", q882 "can
+      // it be exported…", q1939 "flag those as an audit finding").
+      [/\bas\s+a\s+file\b|\bcan\s+(?:it|this|that)\s+be\s+exported\b/i, "delivery"],
+      [/^\s*flag\s+(?:those|these|them|it)\b/i, "delivery"],
+      // Self-capability probes about the TOOL, not the org (q849 "does the tool
+      // trace transitive access like that, or is that beyond it?").
+      [/\b(?:does|can)\s+(?:the|this)\s+tool\b/i, "tool-self-capability"],
+      // Deployment-status telemetry (q1402 "was the change deployed or is it
+      // still pending?").
+      [/\bstill\s+pending\b|\bwas\s+(?:it|that|the\s+change)\s+deployed\b/i, "deployment-status"]
+    ];
+    detectGapShapedFollowUp = (question) => {
+      for (const [shape, family] of GAP_FOLLOW_UP_SHAPES) {
+        if (shape.test(question))
+          return family;
+      }
+      return null;
+    };
     COMPONENT_ID_SHAPE = /^[A-Za-z]+:.+$/;
     validatePreviousContext = (previous, isRegisteredTool) => {
       const ignored = [];
@@ -55437,7 +55593,7 @@ var init_context_resolution = __esm({
 });
 
 // ../mcp/dist/src/refusal-gates.js
-var INJECTION_PATTERNS, EXFIL_VERB, EXFIL_QUANTIFIER, EXFIL_SENSITIVE, EXFIL_VALUES, EXFIL_SINGLE_VALUE, INJECTION_DISCLOSURE, WRITE_VERB, WRITE_VERB_FILLER, WRITE_EXCLUDER, WRITE_SENTENCE_INITIAL, WRITE_LEAD_IN, WRITE_TRAILING_FRAME, WRITE_MAKE_SCHEMA, WRITE_GIVE_GRANT, WRITE_GIVE_INITIAL, WRITE_CHAINED_DUPE_DELETE, readOnlyAlternativeFor, RUNTIME_TRIGGERS, RUNTIME_WINDOW, RUNTIME_INCIDENT, runtimeDisclosure, EXTERNAL_SYSTEM, POLICY_ASK, RETENTION_POLICY_ASK, CONSENT_PROCESS_ASK, OPINION_ASK, SHOULD_WE, METADATA_NOUN, DELIVERY_ASK, WRITE_CODE_ASK, outOfScopeDisclosure, detectRefusalShape;
+var INJECTION_PATTERNS, EXFIL_VERB, EXFIL_QUANTIFIER, EXFIL_SENSITIVE, EXFIL_VALUES, EXFIL_SINGLE_VALUE, INJECTION_DISCLOSURE, WRITE_VERB, WRITE_VERB_FILLER, WRITE_EXCLUDER, SIMULATION_TAIL, WRITE_SENTENCE_INITIAL, WRITE_LEAD_IN, WRITE_TRAILING_FRAME, WRITE_MAKE_SCHEMA, WRITE_GIVE_GRANT, WRITE_GIVE_INITIAL, WRITE_CHAINED_DUPE_DELETE, RUN_VERB, RUN_TARGET, RUN_GAP, RUN_IMPERATIVE_INITIAL, RUN_IMPERATIVE_LEAD_IN, RUN_ANAPHOR, runReadOnlyAlternativeFor, readOnlyAlternativeFor, IDENTITY_IDIOM, IDENTITY_ALLOWED_MUTATE, IDENTITY_LOOK_EXCLUDER, IDENTITY_DISCLOSURE, RUNTIME_TRIGGERS, RUNTIME_WINDOW, RUNTIME_INCIDENT, runtimeDisclosure, EXTERNAL_SYSTEM, POLICY_ASK, RETENTION_POLICY_ASK, CONSENT_PROCESS_ASK, OPINION_ASK, SHOULD_WE, METADATA_NOUN, DELIVERY_ASK, WRITE_CODE_ASK, DRAFT_DOCUMENT_ASK, CAREER_ASK, outOfScopeDisclosure, detectRefusalShape;
 var init_refusal_gates = __esm({
   "../mcp/dist/src/refusal-gates.js"() {
     "use strict";
@@ -55446,7 +55602,14 @@ var init_refusal_gates = __esm({
       /\bpretend\s+the\s+(?:previous|prior)\s+rules\b/i,
       /\byou\s+are\s+now\s+(?:in\s+)?(?:admin|deploy|god)\s*[- ]?mode\b/i,
       /\byou'?re\s+actually\s+an?\b[^.?!]*\bbot\b/i,
-      /\b(?:print|reveal|show)\s+(?:me\s+)?your\s+(?:system\s+)?prompt\b/i
+      /\b(?:print|reveal|show)\s+(?:me\s+)?your\s+(?:system\s+)?prompt\b/i,
+      // Privilege-escalation asks (q1548 "sudo give me full access"): `sudo` as a
+      // command prefix, or a grant-to-SELF ("give me full/admin access"). The
+      // READ delivery ask "give me the FLS grant list" carries no privilege noun
+      // and stays routed — the escalation arm requires full/admin/elevated +
+      // access/permission.
+      /(?:^|[.!?;]\s+)sudo\b/i,
+      /\bgive\s+me\s+(?:full|admin|superuser|elevated|god[-\s]?mode)\s+(?:access|permissions?|rights?|privileges?)\b/i
     ];
     EXFIL_VERB = /\b(?:dump|export|give\s+me|tell\s+me|list|retrieve)\b/i;
     EXFIL_QUANTIFIER = /\b(?:every|all|actual|the\s+real|random)\b/i;
@@ -55456,14 +55619,33 @@ var init_refusal_gates = __esm({
     INJECTION_DISCLOSURE = "REFUSED: this request asks me to override instructions or exfiltrate record values. sf-intelligence reads metadata only; it never returns stored record values and its instructions are not overridable.";
     WRITE_VERB = "(?:create|add|delete|remove|update|change|(?<!permission\\s)set|deploy|assign|reassign|revoke|deactivate|activate|disable|enable|merge|reset|rename|fix|grant|provision|turn\\s+(?:on|off)|clean\\s+up|migrate|convert|insert|upsert|push|publish|install|uninstall|schedule|upgrade|downgrade|throttle|purge)";
     WRITE_VERB_FILLER = "(?:(?:bulk|mass|batch|just|please|go\\s+ahead\\s+and)\\s+)*";
-    WRITE_EXCLUDER = /\b(?:am\s+i|can\s+i|could\s+i|do\s+i|who\s+can|who\s+is\s+able|allowed\s+to|able\s+to|what\s+if|what\s+would|would\s+happen|is\s+it\s+safe|safe\s+to|before\s+i|if\s+i|should\s+i|how\s+do\s+i|how\s+would\s+i|what\s+happens\s+when)\b/i;
+    WRITE_EXCLUDER = /\b(?:am\s+i|can\s+i|could\s+i|do\s+i|who\s+can|who\s+is\s+able|allowed\s+to|able\s+to|what\s+if|what\s+would|would\s+happen|is\s+it\s+safe|safe\s+to|before\s+i|if\s+(?:i|we)|when\s+(?:i|we)|suppose|should\s+i|how\s+do\s+i|how\s+would\s+i|what\s+happens\s+when)\b|\bsafely\s*\?|\bwhat\s+(?:depends\s+on|breaks|would\s+break|will\s+break|stops\s+working)\b/i;
+    SIMULATION_TAIL = /\b(?:and\s+)?(?:tell|show|give)\s+me\s+(?:the\s+)?(?:impact|blast\s+radius|consequences?|every\s+conflict|conflicts|what\s+(?:breaks|happens|stops|changes))\b|[—–-]\s*(?:impact|consequences?|blast\s+radius)\s*\??\s*$|\b(?:impact|consequences)\s*\?\s*$|\bwhat(?:'s|\s+is)\s+the\s+(?:impact|blast\s+radius|fallout)\b|\bwhat\s+(?:happens|stops|breaks)\s+(?:to|if|when|after|downstream)\b/i;
     WRITE_SENTENCE_INITIAL = new RegExp(`(?:^|[.!?;]\\s+)(?:please\\s+|just\\s+)?${WRITE_VERB_FILLER}(${WRITE_VERB}\\b[^.?!;]{0,80})`, "i");
-    WRITE_LEAD_IN = new RegExp(`\\b(?:please|just|go\\s+ahead\\s+and|can\\s+(?:you|u)|could\\s+(?:you|u)|would\\s+(?:you|u)|you\\s+should|i\\s+need\\s+you\\s+to)\\s+(?:please\\s+|just\\s+)?${WRITE_VERB_FILLER}(${WRITE_VERB}\\b[^.?!;]{0,80})`, "i");
+    WRITE_LEAD_IN = new RegExp(`\\b(?:please|(?<!\\b(?:or|vs|than)\\s)just|go\\s+ahead\\s+and|can\\s+(?:you|u)|could\\s+(?:you|u)|would\\s+(?:you|u)|you\\s+should|i\\s+(?:need|want)\\s+you\\s+to)\\s+(?:please\\s+|just\\s+)?${WRITE_VERB_FILLER}(${WRITE_VERB}\\b[^.?!;]{0,80})`, "i");
     WRITE_TRAILING_FRAME = new RegExp(`\\b(${WRITE_VERB}\\b[^.?!;]{0,80}?\\b(?:for\\s+me|right\\s+now|and\\s+confirm)\\b[^.?!;]{0,20})`, "i");
     WRITE_MAKE_SCHEMA = new RegExp(`\\b(?:can|could|would)\\s+(?:you|u)\\b[^.?!;]{0,10}\\s(make\\b[^.?!;]{0,60}\\b(?:required|mandatory|optional|unique|read[-\\s]?only|editable|visible)\\b)`, "i");
     WRITE_GIVE_GRANT = new RegExp(`\\b(?:can|could|would)\\s+(?:you|u)\\b[^.?!;]{0,30}\\b(give\\s+(?!me\\b)[^.?!;]{0,60}\\b(?:profile|permission|perm\\s+set|access|user)\\b[^.?!;]{0,40})`, "i");
     WRITE_GIVE_INITIAL = /(?:^|[.!?;]\s+)(give\s+(?!me\b)[^.?!;]{0,60}\b(?:admin|access|permission|profile)\b[^.?!;]{0,30})/i;
     WRITE_CHAINED_DUPE_DELETE = /\b(?:and|then)\s+(?:just\s+)?((?:delete|remove|purge|merge)\s+(?:the\s+)?dup(?:e|licate)s?\b[^.?!;]{0,30})/i;
+    RUN_VERB = "(?:run|re-?run|execute|invoke|kick\\s+off|trigger|launch|fire\\s+off)";
+    RUN_TARGET = "(?:flows?|triggers?|batch(?:\\s+(?:jobs?|class(?:es)?|apex))?|jobs?|apex\\s+class(?:es)?|automations?|scripts?)";
+    RUN_GAP = "(?:(?!\\b(?:on|of|for|across|against|in|over|about)\\b)[^.?!;]){0,60}?";
+    RUN_IMPERATIVE_INITIAL = new RegExp(`(?:^|[.!?;]\\s+)(?:please\\s+|just\\s+)?(${RUN_VERB}\\b${RUN_GAP}\\b${RUN_TARGET}\\b[^.?!;]{0,60})`, "i");
+    RUN_IMPERATIVE_LEAD_IN = new RegExp(`\\b(?:please|just|go\\s+ahead\\s+and|can\\s+(?:you|u)|could\\s+(?:you|u)|would\\s+(?:you|u)|you\\s+should|i\\s+need\\s+you\\s+to)\\s+(?:please\\s+|just\\s+)?(${RUN_VERB}\\b${RUN_GAP}\\b${RUN_TARGET}\\b[^.?!;]{0,60})`, "i");
+    RUN_ANAPHOR = new RegExp(`(?:(?:^|[.!?;]\\s+)(?:please\\s+|just\\s+)?|\\b(?:please|just|go\\s+ahead\\s+and|can\\s+(?:you|u)|could\\s+(?:you|u)|would\\s+(?:you|u)|you\\s+should|i\\s+need\\s+you\\s+to)\\s+(?:please\\s+|just\\s+)?)(${RUN_VERB}\\s+(?:it|that|this)\\b(?!\\s+(?:by|past)\\b)[^.?!;]{0,40}|(?:kick|fire|set)\\s+(?:it|that|this)\\s+off\\b[^.?!;]{0,30})`, "i");
+    runReadOnlyAlternativeFor = (verbPhrase) => {
+      const v2 = verbPhrase.toLowerCase();
+      if (/\bflows?\b/.test(v2))
+        return "sfi.explain_flow";
+      if (/\b(?:batch|jobs?)\b/.test(v2))
+        return "sfi.scheduled_job_catalog";
+      if (/\btriggers?\b/.test(v2))
+        return "sfi.what_happens_on_save";
+      if (/\bapex|class(?:es)?\b/.test(v2))
+        return "sfi.explain_apex_method";
+      return "sfi.get_impact";
+    };
     readOnlyAlternativeFor = (verbPhrase, question) => {
       const v2 = verbPhrase.toLowerCase();
       const q2 = question.toLowerCase();
@@ -55499,14 +55681,134 @@ var init_refusal_gates = __esm({
       }
       return "sfi.get_impact";
     };
+    IDENTITY_IDIOM = /\bcan\s+i\s+be\s+trusted\s+to\b|\bwithin\s+my\s+power\b|\babove\s+my\s+(?:permission\s+level|pay\s+grade)\b|\bwhat\s+(?:am\s+i|i'?m)\s+capable\s+of\b|\bwondering\s+what\s+i'?m\s+capable\s+of\b/i;
+    IDENTITY_ALLOWED_MUTATE = /\bam\s+i\s+(?:allowed|permitted|able)\s+to\s+(?:change|delete|remove|merge|deactivate|disable|create|rename|reset|convert|reassign|modify|update)\b|\bis\s+it\s+(?:okay?|ok)\s+for\s+me\s+to\s+(?:change|delete|remove|merge|deactivate|disable|create|rename|reset|convert|reassign|modify|update)\b/i;
+    IDENTITY_LOOK_EXCLUDER = /\bam\s+i\s+(?:allowed|permitted|able)\s+to\s+(?:look|see|view|read|ask|know|check|understand|open)\b|\bis\s+it\s+(?:okay?|ok)\s+for\s+me\s+to\s+(?:look|see|view|read|ask|know|check)\b/i;
+    IDENTITY_DISCLOSURE = "HONEST GAP (identity): sf-intelligence has no session-user identity \u2014 it cannot know what YOU specifically are allowed to do. Name the user, profile, or permission set to check and I can answer from the permission metadata (sfi.effective_permissions / sfi.user_ability). Which user or profile should I check?";
     RUNTIME_TRIGGERS = [
       [/\blogin\s+history\b|\baudit\s+trail\s+of\s+logins?\b/i, "login history"],
+      // Per-user LOGIN EVENTS (hon-031/hon-036/hon-060): who logged in when,
+      // exact login timestamps, who is logged in right now, or a full per-user
+      // last-login roster. All are LoginHistory/session event data no tool reads.
+      // Precision guards, each a live_inactive_users question that must NOT gate:
+      // "which users are inactive", "who HASN'T logged in for 90 days" (the
+      // negation breaks the strict token sequence), "login IP ranges on a
+      // profile" (profile_security metadata — no logged-in/timestamp token).
+      [
+        /\b(?:which|what)\s+(?:specific\s+)?users?\s+(?:have\s+|are\s+)?logged\s+in(?:to)?\b|\bwho\s+logged\s+in(?:to)?\b/i,
+        "per-user login events (who logged in when)"
+      ],
+      [
+        /\blogin\s+timestamps?\b|\bcurrently\s+logged\s+in(?:to)?\b|\blogged\s+in(?:to)?\b[^.?!]{0,30}\bright\s+now\b/i,
+        "login sessions/timestamps"
+      ],
+      [
+        /\b(?:every|each|all)\s+(?:salesforce\s+)?users?'?s?\b[^.?!]{0,30}\blast\s+login\b/i,
+        "a full per-user last-login roster (sfi.live_inactive_users covers dormancy thresholds, not a full roster)"
+      ],
       [/\badoption\b|\bhow\s+often\s+do\s+users\s+actually\s+use\b/i, "adoption/usage telemetry"],
       [
         /\bping\s+(?:the\s+)?\S+|\bendpoints?\b[^.?!]*\bup\b|\b(?:returned|returning|throwing|threw)\s+errors?\b/i,
         "endpoint health"
       ],
-      [/\brunning[-\s]user\s+context\b/i, "the runtime running-user context"]
+      [/\brunning[-\s]user\s+context\b/i, "the runtime running-user context"],
+      // Automation EXECUTION forensics (hon-032/hon-039/hon-037): traces of what
+      // a run touched, aggregate run counts, the error message from the last
+      // failure. Static reads stay routed: "how many times is this field
+      // REFERENCED" (no run verb), "what runs when an Application is submitted"
+      // (no how-many-times/trace), "when was it last MODIFIED" (no failed/ran).
+      [
+        /\bexecution\s+trace\b|\bwhat\s+records\s+did\s+(?:it|the\s+\S+(?:\s+\S+)?)\s+touch\b/i,
+        "flow/automation execution traces"
+      ],
+      [
+        /\bhow\s+many\s+times\s+(?:has|have|did|was|were)\b[^.?!]{0,80}\b(?:executed|run|ran|fired|triggered)\b/i,
+        "aggregate automation run counts (sfi.live_automation_fired infers per-record only)"
+      ],
+      [
+        /\b(?:the\s+)?last\s+time\b[^.?!]{0,60}\b(?:failed|errored|crashed|ran)\b/i,
+        "run/failure forensics from past executions"
+      ],
+      // Apex/query RUNTIME PROFILING + debug logs (hon-040/hon-044/hon-053):
+      // CPU/heap profiles of a past run, debug logs, SOQL execution plans.
+      // Static reads stay routed: "which classes RISK hitting governor limits"
+      // (governor_limit_risks — no profile/log/plan noun), "which class contains
+      // System.debug" (code-literal search — no `debug log` bigram).
+      [
+        /\b(?:cpu\s+time|heap\s+(?:usage|size)|memory\s+(?:usage|utilization|consumption))\b[^.?!]{0,50}\bprofile\b|\bprofile\b[^.?!]{0,50}\b(?:cpu\s+time|heap\s+usage)\b/i,
+        "runtime CPU/heap profiling"
+      ],
+      [/\bmemory\s+(?:utilization|consumption)\b|\bapplication\s+servers?\b/i, "infrastructure telemetry"],
+      // Debug-LOG retrieval needs the retrieval-verb frame: "SHOW ME the debug
+      // log from yesterday's batch run" is runtime; "leftover debug logs in apex"
+      // (q522 — System.debug code artifacts, search_apex_source) and "is it in a
+      // debug log anywhere" carry no retrieval verb and stay routed. Shield
+      // EVENT-MONITORING logs (router-v2 R2, hon-057) are the same retrieval
+      // shape — runtime telemetry no vault holds; "which flows subscribe to
+      // platform events" carries no log noun and stays routed.
+      [
+        /\b(?:show|see|view|pull|get|give|retrieve|read|check|download|fetch)\b[^.?!]{0,45}\b(?:debug|event[\s-]monitoring)\s+logs?\b/i,
+        "debug / event-monitoring logs"
+      ],
+      [
+        /\b(?:query|execution|soql)\s+plans?\b|\bindexes?\s+(?:are\s+)?being\s+used\b/i,
+        "SOQL execution plans / index usage"
+      ],
+      // Message DELIVERY telemetry (hon-056/hon-041): delivered/bounce counts and
+      // the ACTUAL content of sent messages. Metadata reads stay routed: "which
+      // email templates are unused" (live_email_template_usage), "what emails go
+      // out for this approval" (sendsEmail edges — no delivered/sent-count ask).
+      [
+        /\b(?:emails?|sms|messages?|texts?)\b[^.?!]{0,50}\b(?:delivered|deliverability|bounced?|bounce\s+rate)\b/i,
+        "message delivery telemetry"
+      ],
+      [
+        /\bhow\s+many\s+(?:emails?|sms|messages?|texts?)\b[^.?!]{0,60}\b(?:sent|delivered|went\s+out)\b/i,
+        "sent-message counts"
+      ],
+      [
+        /\bactual\s+content\s+of\s+the\s+(?:emails?|messages?|texts?)\b/i,
+        "the content of individually sent messages (the TEMPLATE body is metadata \u2014 sfi.get_component reads it)"
+      ],
+      // Site/community WEB ANALYTICS (hon-050): click paths, page views.
+      [
+        /\b(?:click|page|site|web)\s*[- ]?(?:analytics|traffic)\b|\bpage\s+views?\b|\bwhich\s+pages\b[^.?!]{0,60}\bvisit/i,
+        "site/community click analytics"
+      ],
+      // RECORD-LEVEL field history (hon-054): before/after values of changed
+      // records. "Which fields HAVE history tracking enabled" is object metadata
+      // and stays routed (no before/after-values bigram).
+      [
+        /\bbefore(?:\s*\/\s*|\s*-\s*|\s+and\s+)after\b[^.?!]{0,40}\b(?:values?|data)\b/i,
+        "record-level field history (before/after values)"
+      ],
+      // RECORD-ACCESS audit (q960/q1117): who ACCESSED/viewed a record or field.
+      // "Who CAN see/access X" is a permissions read (who_can_access_object /
+      // field_access_audit) and never matches — the arm requires the past-tense
+      // accessed/viewed/opened event verb.
+      [
+        /\bwho\b[^.?!]{0,30}\b(?:accessed|viewed|opened|looked\s+at)\b[^.?!]{0,60}\b(?:records?|fields?|data)\b/i,
+        "record-access audit events (who accessed what)"
+      ],
+      // R3 §5b AUDIT-TRAIL-PLANE arms (8-question over-route cluster): Setup
+      // Audit Trail asks — who changed a SETTING (FLS, sharing, OWD, session/
+      // password policy) and when. Component lastModifiedBy IS metadata
+      // (sfi.last_modified stays routed — those asks say "who changed <component>",
+      // no settings noun); FLS/OWD/policy flips are only in the Setup Audit
+      // Trail, which neither the vault nor the live plane reads.
+      [/\bsetup\s+audit\s+trail\b/i, "Setup Audit Trail entries"],
+      [
+        /\bwho\s+(?:modified|changed|flipped|updated|edited)\b[^.?!]{0,50}\b(?:field-?level\s+security|fls|sharing\s+settings?|org-?wide\s+defaults?|owd|session\s+settings?|password\s+polic\w*|mfa)\b/i,
+        "who changed org security settings and when (Setup Audit Trail data)"
+      ],
+      // R3 §5b: report/dashboard DEFINITIONS (source object, columns, broken
+      // references) are not retrieved into the vault — "which reports are
+      // stale/unused" (live_report_usage) and "who can see the dashboard"
+      // (folder access) carry none of these definition verbs and stay routed.
+      [
+        /\b(?:reports?|dashboards?)\b[^.?!]{0,50}\b(?:built|based)\s+on\b|\breports?\b[^.?!]{0,50}\breference\b[^.?!]{0,50}\b(?:deleted|renamed|broken|missing)\b|\bdashboards?\b[^.?!]{0,40}\b(?:broken|point\s+at)\b/i,
+        "report/dashboard definitions (source object, columns, referenced fields) \u2014 not retrieved into the vault"
+      ]
     ];
     RUNTIME_WINDOW = /\b(?:this\s+week|yesterday|last\s+night|in\s+the\s+\w+\s+incident)\b/i;
     RUNTIME_INCIDENT = /\b(?:errors?|failed|failures?|incident|outage|gated)\b/i;
@@ -55520,6 +55822,8 @@ var init_refusal_gates = __esm({
     METADATA_NOUN = /\b(?:field|object|flow|trigger|class|profile|permission|layout|validation|record\s+type|apex|report|dashboard|picklist|component|rule)\b|__(?:c|mdt|e|x|b|kav)\b/i;
     DELIVERY_ASK = /\bemail\s+me\b|\bsend\s+(?:this|it)\s+to\b|\bpost\s+(?:this\s+|it\s+)?to\s+slack\b/i;
     WRITE_CODE_ASK = /\bwrite\s+(?:me\s+)?(?:an?\s+)?(?:apex|lwc|trigger|class|component)\b[^.?!]*\b(?:that|to)\b/i;
+    DRAFT_DOCUMENT_ASK = /\bdraft\s+(?:me\s+)?(?:a|an)\b[^.?!]{0,60}\b(?:agreement|contract|clause|policy|memo|press\s+release)\b/i;
+    CAREER_ASK = /\bhow\s+do\s+i\s+become\b/i;
     outOfScopeDisclosure = (topic) => `OUT OF SCOPE: sf-intelligence answers questions about this org's Salesforce metadata. ${topic} is outside that boundary (no external systems, no policy authorship, no code generation, no message delivery).`;
     detectRefusalShape = (question) => {
       const q2 = question.replace(/[‘’ʼ]/g, "'").replace(/\s+/g, " ").trim();
@@ -55530,7 +55834,8 @@ var init_refusal_gates = __esm({
         return { kind: "injection-exfiltration", disclosure: INJECTION_DISCLOSURE };
       }
       if (!WRITE_EXCLUDER.test(q2)) {
-        const verbPhrase = (WRITE_SENTENCE_INITIAL.exec(q2) ?? WRITE_LEAD_IN.exec(q2) ?? WRITE_TRAILING_FRAME.exec(q2) ?? WRITE_MAKE_SCHEMA.exec(q2) ?? WRITE_GIVE_GRANT.exec(q2) ?? WRITE_GIVE_INITIAL.exec(q2) ?? WRITE_CHAINED_DUPE_DELETE.exec(q2))?.[1]?.trim().replace(/[,;:]$/, "");
+        const simulationFrame = SIMULATION_TAIL.test(q2);
+        const verbPhrase = simulationFrame ? void 0 : (WRITE_SENTENCE_INITIAL.exec(q2) ?? WRITE_LEAD_IN.exec(q2) ?? WRITE_TRAILING_FRAME.exec(q2) ?? WRITE_MAKE_SCHEMA.exec(q2) ?? WRITE_GIVE_GRANT.exec(q2) ?? WRITE_GIVE_INITIAL.exec(q2) ?? WRITE_CHAINED_DUPE_DELETE.exec(q2))?.[1]?.trim().replace(/[,;:]$/, "");
         if (verbPhrase !== void 0 && verbPhrase.length > 0) {
           const alternative = readOnlyAlternativeFor(verbPhrase, q2);
           return {
@@ -55539,13 +55844,25 @@ var init_refusal_gates = __esm({
             readOnlyAlternative: alternative
           };
         }
+        const runPhrase = (RUN_IMPERATIVE_INITIAL.exec(q2) ?? RUN_IMPERATIVE_LEAD_IN.exec(q2) ?? RUN_ANAPHOR.exec(q2))?.[1]?.trim().replace(/[,;:]$/, "");
+        if (runPhrase !== void 0 && runPhrase.length > 0) {
+          const alternative = runReadOnlyAlternativeFor(runPhrase);
+          return {
+            kind: "write-imperative",
+            disclosure: `REFUSED (read-only boundary): sf-intelligence never executes org automation \u2014 it cannot ${runPhrase}. I can show you what it WOULD do instead: ${alternative}.`,
+            readOnlyAlternative: alternative
+          };
+        }
+      }
+      if ((IDENTITY_IDIOM.test(q2) || IDENTITY_ALLOWED_MUTATE.test(q2)) && !IDENTITY_LOOK_EXCLUDER.test(q2)) {
+        return { kind: "identity-gap", disclosure: IDENTITY_DISCLOSURE };
       }
       const runtimeTopic = RUNTIME_TRIGGERS.find(([pattern]) => pattern.test(q2))?.[1] ?? (RUNTIME_WINDOW.test(q2) && RUNTIME_INCIDENT.test(q2) ? "runtime incident forensics" : void 0);
       if (runtimeTopic !== void 0) {
         return { kind: "runtime-analytics", disclosure: runtimeDisclosure(runtimeTopic) };
       }
       const externalSystem = EXTERNAL_SYSTEM.exec(q2)?.[1];
-      const outOfScopeTopic = externalSystem !== void 0 ? `"${externalSystem}"` : RETENTION_POLICY_ASK.test(q2) ? "A data-retention policy (organizational governance, not org metadata)" : CONSENT_PROCESS_ASK.test(q2) ? "A consent process (organizational governance, not org metadata)" : POLICY_ASK.test(q2) ? "Org policy authorship" : OPINION_ASK.test(q2) ? "An opinion" : DELIVERY_ASK.test(q2) ? "Message delivery" : WRITE_CODE_ASK.test(q2) ? "Code generation" : SHOULD_WE.test(q2) && !METADATA_NOUN.test(q2) ? "An org-decision recommendation" : void 0;
+      const outOfScopeTopic = externalSystem !== void 0 ? `"${externalSystem}"` : RETENTION_POLICY_ASK.test(q2) ? "A data-retention policy (organizational governance, not org metadata)" : CONSENT_PROCESS_ASK.test(q2) ? "A consent process (organizational governance, not org metadata)" : POLICY_ASK.test(q2) ? "Org policy authorship" : OPINION_ASK.test(q2) ? "An opinion" : DELIVERY_ASK.test(q2) ? "Message delivery" : WRITE_CODE_ASK.test(q2) ? "Code generation" : DRAFT_DOCUMENT_ASK.test(q2) ? "Document authorship (agreements, policies, memos)" : CAREER_ASK.test(q2) ? "Career/self-improvement guidance" : SHOULD_WE.test(q2) && !METADATA_NOUN.test(q2) ? "An org-decision recommendation" : void 0;
       if (outOfScopeTopic !== void 0) {
         return { kind: "out-of-scope", disclosure: outOfScopeDisclosure(outOfScopeTopic) };
       }
@@ -55576,7 +55893,22 @@ var init_funnel_utterances = __esm({
         "what validation rules exist on the Order object?",
         "show me every component that references the <PermSet> permission set",
         "is there an approval process on Opportunity?",
-        "find me anything that blocks record creation when a required field is empty"
+        "find me anything that blocks record creation when a required field is empty",
+        // biz-user register (router-v2 R2): existence-check with a look-inside.
+        "does a <Object> object exist in this org? I want to see its fields",
+        // R3 custom-permission band (DIAGNOSIS-R3 §2 rank 2 — the #1 corpus
+        // family): describe-what-it-gates and bypass/guard phrasings. The tools
+        // work (0.1.19 CustomPermission exposure); the vocabulary was missing.
+        "what does the <CustomPermission> custom permission bypass exactly?",
+        "whos allowed to bypass the validation and what is that custom permission guarding?",
+        "which custom permission gates the <FlowName> screen flow?",
+        "is there a custom permission that could let someone bypass a control?",
+        "which custom permissions have descriptions that mention bypassing something?",
+        "tell me every custom permission checked by a validation rule",
+        // R3 cross-object field-existence band (same §2 row).
+        "does Amount__c exist on any object, and which ones?",
+        "do we track a completion date anywhere I could report on?",
+        "is the <RecordType> record type only on Case or is it on other objects too?"
       ],
       "sfi.resolve": [
         "pull the <vague-field-name> field \u2014 <PermSet> implies we have one",
@@ -55591,7 +55923,20 @@ var init_funnel_utterances = __esm({
         "I keep hearing about a <fuzzy-name> flow \u2014 can you find it?",
         "what's the canonical name for the field that stores the SLA deadline?",
         "look up Status__c \u2014 which object is it on?",
-        "do we have anything for tracking escalation dates on Case?"
+        "do we have anything for tracking escalation dates on Case?",
+        // biz-user register (router-v2 R2): nickname-existence and
+        // component-type-confusion phrasings ("is that a flow or a trigger").
+        "I keep calling it the '<nickname>' object \u2014 does this org have something like that?",
+        "is <ComponentName> a flow or a trigger? I can't tell from the name",
+        "what type of component is <ComponentName> \u2014 an Apex class or a flow?",
+        // R3 existence/verification/typo band (DIAGNOSIS-R3 §2 rank 1 +
+        // trap-122-a): explicit "does X exist" asks, prove-it challenges, and
+        // is-that-the-right-name verification.
+        "does <Field__c> exist on Contact or only on Lead?",
+        "is <ComponentName> even the right name? prove it actually exists",
+        "wait, is <Name__c> a field or an object?",
+        "pull up <ComponentName> \u2014 I might have the name spelled wrong",
+        "does the <ComponentName> component actually exist in this org, yes or no?"
       ],
       "sfi.capabilities": [
         "what can you actually do?",
@@ -55648,7 +55993,12 @@ var init_funnel_utterances = __esm({
         "pulse check \u2014 is this org healthy?",
         "quick status: how is the org doing right now?",
         "is there anything alarming about this org at a glance?",
-        "one-liner on org health"
+        "one-liner on org health",
+        // biz-user register (router-v2 R2): "who is changing things" asked as a
+        // people question, not a metadata question.
+        "who has been modifying things in this org the most?",
+        "who are the top contributors to changes in this org lately?",
+        "who's been making the most changes to this org lately?"
       ],
       "sfi.org_card": [
         "show me the org's basic info \u2014 edition, limits, creation date",
@@ -55680,7 +56030,13 @@ var init_funnel_utterances = __esm({
         "get me the raw component data for the Contact validation rule",
         "fetch the permission set definition for <PermSet>",
         "show me the layout metadata for Case",
-        "pull the full metadata for <FlowName>"
+        "pull the full metadata for <FlowName>",
+        // R3 show-me-the-thing band (DIAGNOSIS-R3 §2 rank 4).
+        "whats in the <PermSet> permission set?",
+        "what is the <PermSet> permission set for? the name confuses me",
+        "is the <FlowName> flow active or dormant?",
+        "can you give me the raw metadata XML for the <CustomPermission> custom permission?",
+        "pull up <ComponentName> so I can look at it"
       ],
       "sfi.list_components": [
         "whats on the Account object \u2014 give me the whole field list",
@@ -55695,7 +56051,15 @@ var init_funnel_utterances = __esm({
         "show me all the triggers on Account",
         "what approval processes are deployed?",
         "list all custom labels",
-        "give me every email template in the org"
+        "give me every email template in the org",
+        // R3 custom-permission enumeration band (DIAGNOSIS-R3 §2 rank 6) + the
+        // "can i see the validation rules" type-noun phrasings.
+        "which custom permissions exist and what do they gate?",
+        "what custom permissions are defined in this org?",
+        "pull the full custom permission inventory for the audit workpaper",
+        "can i see the validation rules on the <Object> object",
+        "is there validation on the <Object> object?",
+        "show me all the invocable apex methods"
       ],
       "sfi.get_edges": [
         "what are the edges between <ApexClass> and the objects it touches?",
@@ -55730,7 +56094,13 @@ var init_funnel_utterances = __esm({
         "find flows that call the <ApexClass> Apex class",
         "which flows have a Get Records step on the Account object?",
         "search for flows that send emails",
-        "find every flow that creates an Opportunity"
+        "find every flow that creates an Opportunity",
+        // R3 q738-class boundary recovery: custom-permission checks inside flow
+        // XML, subflow-by-name, and field-stamping searches.
+        "does any flow reference the <CustomPermission> custom permission to skip a validation rule?",
+        "which custom permissions are checked inside flows?",
+        "find the flow that fires the <SubflowName> subflow",
+        "is there a flow that stamps <Field__c> when the record closes?"
       ],
       "sfi.get_naming_convention_report": [
         "do our field names follow any consistent pattern?",
@@ -55819,7 +56189,11 @@ var init_funnel_utterances = __esm({
         "pull a random sample of Opportunity records",
         "show me what Account data actually looks like",
         "grab a handful of Order records for me to inspect",
-        "give me a sample of 10 Opportunities with Stage = Prospecting"
+        "give me a sample of 10 Opportunities with Stage = Prospecting",
+        // biz-user register (router-v2 R2): single-record lookup by an id the
+        // user has in hand, asking for every field value.
+        "can you pull up the specific record for id <RecordId>? I need to see all their field values",
+        "show me one actual record with every field value filled in"
       ],
       "sfi.live_field_population": [
         "what percentage of Contacts have the Email field filled in?",
@@ -55835,7 +56209,10 @@ var init_funnel_utterances = __esm({
         "how many people are in the queue right now?",
         "show me group sizes across all public groups",
         "how many members does the Sales territory group have?",
-        "how are Cases distributed by Status right now?"
+        "how are Cases distributed by Status right now?",
+        // biz-user register (router-v2 R2): distribution-by-field phrasing.
+        "how are <Object> records distributed by their Type field?",
+        "breakdown of records by picklist value \u2014 how many land in each bucket?"
       ],
       "sfi.live_stale_records": [
         "which Cases haven't been updated in over 90 days?",
@@ -55931,7 +56308,9 @@ var init_funnel_utterances = __esm({
         "which users can see the Executive dashboards folder?",
         "who can access the shared document library?",
         "folder-level access for the Finance reports",
-        "are any report or dashboard folders publicly accessible?"
+        "are any report or dashboard folders publicly accessible?",
+        // biz-user register (router-v2 R2): single-report ownership question.
+        "the <ReportName> report \u2014 who owns it and who can run it?"
       ],
       "sfi.live_email_template_usage": [
         "which email templates are actually being used?",
@@ -55983,7 +56362,10 @@ var init_funnel_utterances = __esm({
         "executive summary of org risk",
         "what should I be worried about before we go live?",
         "pull together the top risks I need to present to leadership",
-        "is there anything that would block a production release right now?"
+        "is there anything that would block a production release right now?",
+        // biz-user register (router-v2 R2): quality asked as a grade.
+        "is our Salesforce org well-architected? would you give it a passing grade?",
+        "if an outside expert graded this org's setup, what would they flag?"
       ],
       "sfi.field_cleanup_candidates": [
         "which fields can we safely delete?",
@@ -56061,7 +56443,18 @@ var init_funnel_utterances = __esm({
         "what's the net permission for a user with <Profile> and <PermSet>?",
         "does this user actually have delete access on Account?",
         "what objects can the <Profile> profile read?",
-        "effective read/write/delete access for <Profile> on Order"
+        "effective read/write/delete access for <Profile> on Order",
+        // R3 PSG-expansion band (DIAGNOSIS-R3 permissions family): what a member
+        // of a permission set GROUP ends up with — effective_permissions expands
+        // PSGs (verified). The genuinely-unanswerable directions stay gapped:
+        // "which USERS are in the group" (permset-user-roster) and "which PSG
+        // grants X" (permset-group-grants) are capability-gap intents, untouched.
+        "what does a user get through the <PermSetGroup> permission set group?",
+        "expand the <PermSetGroup> permission set group \u2014 every permission a member ends up with",
+        "if someone is assigned the <PermSetGroup> permission set group, do they automatically get <CustomPermission>?",
+        "what custom permissions does a new hire end up with after all their permission set group assignments?",
+        "can a user in the <PermSetGroup> permission set group edit these records?",
+        "walk me through how permission set group inheritance works here, with a real group as the example"
       ],
       "sfi.who_can_run": [
         "who can run the <Report> report?",
@@ -56085,7 +56478,12 @@ var init_funnel_utterances = __esm({
         "a user is getting access denied on Opportunity \u2014 what's wrong?",
         "why is this record invisible to a specific user?",
         "I need to figure out why a user can't open this record",
-        "user says they get a 'No access' error on a Contact record \u2014 what gives?"
+        "user says they get a 'No access' error on a Contact record \u2014 what gives?",
+        // R3 access-diagnostics band (DIAGNOSIS-R3 permissions family): symptom
+        // phrasings — greyed-out fields, blocked edits, blocked reassignment.
+        "a user cant edit the <Field__c> field on a record, they say its greyed out \u2014 why?",
+        "why cant a user with the <Profile> profile reassign the Case owner?",
+        "a user reports the record is read-only for them \u2014 which layer blocks the edit?"
       ],
       "sfi.layout_for_user": [
         "what page layout does <Profile> see on Case?",
@@ -56101,7 +56499,11 @@ var init_funnel_utterances = __esm({
         "what can a specific user actually do in the org?",
         "check if <Username> can create Opportunities",
         "what record types can this user access on Case?",
-        "what flows can users with the <Profile> profile actually run?"
+        "what flows can users with the <Profile> profile actually run?",
+        // R3 access-diagnostics band: missing-button / failing-action symptoms.
+        "a user says the Convert button is missing on a Lead \u2014 why?",
+        "why does the send action fail for one user \u2014 do they need the <PermSet> permission set?",
+        "which permission is this user missing to perform the action?"
       ],
       "sfi.profile_security": [
         "how locked down is the <Profile> profile?",
@@ -56141,7 +56543,9 @@ var init_funnel_utterances = __esm({
         "which objects have tabs hidden from the support profile?",
         "show me tab settings for the <Profile> profile",
         "which tabs are set to 'Default Off' for a specific profile?",
-        "which tabs are visible to users with the <Profile> profile?"
+        "which tabs are visible to users with the <Profile> profile?",
+        // biz-user register (router-v2 R2): imperative "list its tabs" shape.
+        "the <Profile> profile \u2014 what does it have access to? list its tabs"
       ],
       "sfi.lifecycle_process": [
         "what's the Case lifecycle \u2014 statuses and transitions?",
@@ -56149,7 +56553,11 @@ var init_funnel_utterances = __esm({
         "what are the valid Lead status transitions?",
         "describe the record lifecycle for Order",
         "what's the path an Account goes through from creation to active?",
-        "what happens when an Opportunity moves to Closed Won?"
+        "what happens when an Opportunity moves to Closed Won?",
+        // biz-user register (router-v2 R2): status-transition asked as "what
+        // kicks in when the value flips".
+        "when the Status field flips to Resolved, what processes kick in for that value transition?",
+        "what happens behind the scenes when a record moves to a new stage?"
       ],
       "sfi.layout_assignments": [
         "which layouts are assigned to which profiles on Case?",
@@ -56337,7 +56745,9 @@ var init_funnel_utterances = __esm({
         "compare the Case validation rules in two orgs",
         "what's different between the <Profile> profile in sandbox vs prod?",
         "compare the <ApexClass> class across environments",
-        "are these two record types actually different or just named differently?"
+        "are these two record types actually different or just named differently?",
+        // biz-user register (router-v2 R2): duplicate-automation confusion.
+        "why do we have two triggers on the same object \u2014 what does each one do differently?"
       ],
       "sfi.export_manifest": [
         "export the full org manifest",
@@ -56369,7 +56779,9 @@ var init_funnel_utterances = __esm({
         "who has delete access to Account?",
         "object-level permission audit for Contact",
         "show me which profiles have full CRUD on custom object <ObjectName>",
-        "which profiles have Create access on the Case object?"
+        "which profiles have Create access on the Case object?",
+        // biz-user register (router-v2 R2): group-membership create-access ask.
+        "can members of <GroupName> create <Object> records, and where does that access come from?"
       ],
       "sfi.recordtype_availability": [
         "which record types on Case are available to the Support profile?",
@@ -56391,7 +56803,10 @@ var init_funnel_utterances = __esm({
         "describe this org to me like I just joined the team",
         "how big is this org \u2014 fields, flows, classes, the works?",
         "what's the overall complexity of this org?",
-        "give me a lay of the land for this Salesforce environment"
+        "give me a lay of the land for this Salesforce environment",
+        // biz-user register (router-v2 R2): the new-joiner altitude idioms.
+        "I just joined this team \u2014 what's the 10,000-foot view of what's in this Salesforce org?",
+        "give me the bird's-eye view of this org for a newcomer"
       ],
       "sfi.domain_clusters": [
         "what functional areas does this org cover?",
@@ -56430,7 +56845,19 @@ var init_funnel_utterances = __esm({
         "before I add a new flow to Contact, what else is already running on save?",
         "which flows fire synchronously on Lead save?",
         "complete save-event automation inventory for the Account object",
-        "what happens behind the scenes when I create a new Contact?"
+        "what happens behind the scenes when I create a new Contact?",
+        // biz-user register (router-v2 R2): terse "show me its automation" shape.
+        "the <Object> object \u2014 can you show me its automation?",
+        // R3 save-cascade band (DIAGNOSIS-R3 §2 rank 7): terse "whats on save",
+        // event-split phrasings, apex-on-insert, and the automation footprint.
+        "whats on save for the <Object> object?",
+        "how many automations fire when a record gets saved?",
+        "what apex runs on Contact insert?",
+        "list the flows that run on Contact insert",
+        "which flows are triggered by Case creation vs Case update?",
+        "whats the automation footprint on the <Object> object \u2014 flows, triggers, everything together?",
+        "why did the flow not fire on my lead update \u2014 what is even wired to Lead saves?",
+        "does anything on <Object> save update a date field automatically?"
       ],
       "sfi.why_field_changed": [
         "which flows write to Contact.Status__c?",
@@ -56467,7 +56894,28 @@ var init_funnel_utterances = __esm({
         "what's the happy path through <FlowName>?",
         "does <FlowName> have any error handling?",
         "what variables does <FlowName> use?",
-        "which object does <FlowName> primarily operate on?"
+        "which object does <FlowName> primarily operate on?",
+        // biz-user register (router-v2 R2): non-technical phrasings from the
+        // business-user persona misses — purpose-of-flow asked as a business
+        // question, and the "is that a flow or a trigger" type-confusion shape.
+        "there's a flow called <FlowName> \u2014 what is it for? what business process does it support?",
+        "what does the <FlowName> flow do for the business?",
+        "<FlowName> \u2014 is that a flow or a trigger? what does it invoke?",
+        "is <ComponentName> an Apex class or a flow? I want to see what it does",
+        // R3 flow-explain band (DIAGNOSIS-R3 §2 rank 3): indirect explanation
+        // phrasings — orchestrate/breakdown/what-triggers-it/fires-on-update.
+        "before i touch the <FlowName> flow, what does it even do?",
+        "what does the <FlowName> flow orchestrate?",
+        "give me a breakdown of the <FlowName> flow",
+        "what triggers the <FlowName> flow \u2014 a record change, a schedule, or a button?",
+        "does <FlowName> fire on update too or just on insert?",
+        "which record type does the <FlowName> flow assign to the Case?",
+        "the <FlowName> screen flow \u2014 walk me through its screens and decisions",
+        // R3 flow-diagnostics band ("why did it NOT fire / not stamp"):
+        "why did the <FlowName> flow NOT fire when the record was updated?",
+        "why is the <FlowName> flow not sending the confirmation email \u2014 walk the decision branches",
+        "the flow didnt stamp the date when the stage moved \u2014 why not?",
+        "a reviewer says the <FlowName> flow is skipping records \u2014 what does it actually gate?"
       ],
       "sfi.explain_apex_method": [
         "what does the <MethodName> method in <ApexClass> do?",
@@ -56475,7 +56923,12 @@ var init_funnel_utterances = __esm({
         "walk me through the logic of <ApexClass>.<MethodName>",
         "what does this method return and what does it modify?",
         "explain the business logic in the <MethodName> method",
-        "what does the AccountController class do?"
+        "what does the AccountController class do?",
+        // biz-user register (router-v2 R2): whole-class purpose questions and the
+        // "Trigger in the name but is it a test class" type-confusion shape.
+        "we have an Apex class called <ClassName> \u2014 what does it do and what objects does it touch?",
+        "is <ClassName> an Apex test class or an actual trigger?",
+        "that class has Trigger in its name \u2014 is it actually a test class?"
       ],
       "sfi.explain_formula": [
         "what does this formula field actually calculate?",
@@ -56499,7 +56952,10 @@ var init_funnel_utterances = __esm({
         "which processes are candidates for Flow migration?",
         "what Process Builder is left that we need to retire?",
         "identify Process Builder processes that would be straightforward to convert",
-        "which Process Builders should we migrate to Flow first?"
+        "which Process Builders should we migrate to Flow first?",
+        // biz-user register (router-v2 R2): "sunset/retire" business phrasing.
+        "which automation is Salesforce going to sunset that we need to replace?",
+        "what legacy automation is being retired that we still depend on?"
       ],
       "sfi.unassigned_permission_sets": [
         "are there permission sets that aren't assigned to anyone?",
@@ -56507,7 +56963,12 @@ var init_funnel_utterances = __esm({
         "find permission sets that are effectively dead \u2014 no assignments",
         "show me unassigned permission sets we could clean up",
         "permission sets nobody has \u2014 are there any?",
-        "which permission sets aren't assigned to any user?"
+        "which permission sets aren't assigned to any user?",
+        // biz-user register (router-v2 R2): single-perm-set assignment questions
+        // ("is X assigned to anyone") — the premise-trap family phrasing.
+        "is the <PermSet> permission set assigned to anyone?",
+        "is <PermSet> assigned to any active users right now?",
+        "who has the <PermSet> permission set assigned and what does it let them do?"
       ],
       "sfi.empty_queues_and_groups": [
         "are there any queues with no members?",
@@ -56523,7 +56984,9 @@ var init_funnel_utterances = __esm({
         "give me a technical debt rating for this Salesforce org",
         "debt score breakdown \u2014 what's contributing most?",
         "quantify the technical debt in this org",
-        "what's the overall technical debt score for this org?"
+        "what's the overall technical debt score for this org?",
+        // biz-user register (router-v2 R2): quality asked as a grade.
+        "overall, is this org in good shape or carrying a lot of debt \u2014 passing grade or not?"
       ],
       "sfi.code_quality_audit": [
         "how good is our Apex code quality?",
@@ -56591,7 +57054,9 @@ var init_funnel_utterances = __esm({
         "impact of making Contact.External_Id__c required",
         "can I safely make this field required without breaking flows?",
         "what automation would break if I make this field mandatory?",
-        "what would break if I made Account.Website required?"
+        "what would break if I made Account.Website required?",
+        // biz-user register (router-v2 R2): "I want to set X to required" ask.
+        "I want to set <Field__c> to required \u2014 can you check what flows and Apex would break?"
       ],
       "sfi.what_if_deactivate_flow": [
         "what breaks if I deactivate <FlowName>?",
@@ -56599,7 +57064,22 @@ var init_funnel_utterances = __esm({
         "impact of deactivating the Case assignment flow",
         "can I safely deactivate <FlowName> without breaking anything?",
         "what would stop working if I switch off <FlowName>?",
-        "what happens if I deactivate the <FlowName> flow?"
+        "what happens if I deactivate the <FlowName> flow?",
+        // biz-user register (router-v2 R2): "can you deactivate it safely" and
+        // "impact if we turn it off" phrasings (premise-trap family).
+        "can you deactivate <FlowName> safely? I need to know what depends on it",
+        "we have a <ProcessName> process that runs on these records \u2014 what's the impact if we turn it off?",
+        // R3 what-if band (DIAGNOSIS-R3 flows family + §5c simulation frames):
+        // imperative-plus-impact phrasings the write gate now carves out.
+        "deactivate <FlowName> and tell me the impact",
+        "deactivating <FlowName> \u2014 consequences?",
+        "what happens if the <FlowName> flow is turned off during a busy period?",
+        "deactivate the <FlowName> flow \u2014 what happens to new records?",
+        "deactivate <FlowName> and tell me what stops recalculating",
+        "does deactivating <FlowName> stop the confirmation emails?",
+        "when I deactivate <FlowName>, does the review process just stall?",
+        "consequences of deactivating the <FlowName> flow?",
+        "what would happen if the <FlowName> flow were deactivated?"
       ],
       "sfi.what_if_disable_trigger": [
         "what breaks if I disable the Contact trigger?",
@@ -56641,7 +57121,10 @@ var init_funnel_utterances = __esm({
         "build a data dictionary I can share with the data team",
         "export field descriptions and types for all custom objects",
         "generate a schema reference document",
-        "generate a data dictionary for the Contact object"
+        "generate a data dictionary for the Contact object",
+        // biz-user register (router-v2 R2): "reference sheet" business phrasing.
+        "our business team needs a reference sheet for the <Object> object \u2014 field names, types, required vs optional",
+        "make a field reference sheet the business team can read"
       ],
       "sfi.generate_admin_handbook": [
         "write an admin handbook for this org",
@@ -56657,7 +57140,9 @@ var init_funnel_utterances = __esm({
         "create a high-level architecture summary for stakeholders",
         "document the overall structure of this Salesforce implementation",
         "generate an architecture diagram description for this org",
-        "write an architecture overview document for this Salesforce org"
+        "write an architecture overview document for this Salesforce org",
+        // biz-user register (router-v2 R2): altitude idiom for leadership.
+        "the leadership team wants the 10,000-foot architecture picture of our Salesforce org"
       ],
       "sfi.generate_sharing_summary": [
         "generate a sharing model summary for this org",
@@ -56698,12 +57183,18 @@ var init_funnel_utterances = __esm({
         "subflow map \u2014 which flows call other flows?"
       ],
       "sfi.downstream_effects": [
-        "what does changing <Field__c> ripple out to?",
+        "what does changing <Field__c> ripple out to downstream?",
         "show me the downstream effects of modifying <ApexClass>",
-        "if I change <FlowName>, what else is affected?",
+        "if I change <FlowName>, what else is affected downstream?",
         "downstream impact of updating the Case status picklist",
         "what does it affect if <ComponentName> changes?",
-        "what side effects does the AccountTrigger handler produce downstream?"
+        "what side effects does the AccountTrigger handler produce downstream?",
+        // self-recall reinforcement (router-v2 R2): the two paraphrase-only
+        // utterances above ("what else is affected", "what does it affect")
+        // shared no vocabulary with the tool's own name and lost the tie to
+        // get_impact — anchor the downstream/effects terms.
+        "what are the downstream effects if I change <FlowName>?",
+        "show downstream effects of a change to <ComponentName>"
       ],
       "sfi.test_coverage_for_method": [
         "what tests cover the <MethodName> method?",
@@ -56783,7 +57274,12 @@ var init_funnel_utterances = __esm({
         "what's the semantic meaning of Status__c on Order?",
         "what does Amount__c represent \u2014 is it revenue, cost, or something else?",
         "in plain English, what does this field track?",
-        "what does the External_Id__c field on Account actually mean in this org?"
+        "what does the External_Id__c field on Account actually mean in this org?",
+        // biz-user register (router-v2 R2): label-first "what is it really for /
+        // who sets it" phrasings from the business-user misses.
+        "what is the <Field__c> field really for in this org?",
+        "the bad email field \u2014 what does it represent and who sets it?",
+        "what does that field mean in context \u2014 is it set by automation or by users, and what object is it on?"
       ],
       "sfi.disambiguate_concepts": [
         "we have both Priority__c and Case.Priority \u2014 which one should I use?",
@@ -56801,7 +57297,9 @@ var init_funnel_utterances = __esm({
         "is Amount__c auto-populated or user-entered?",
         "where does the data in this field come from?",
         "is this field set by a trigger, a flow, or does a user type it in?",
-        "trace the origin of values in <Field__c>"
+        "trace the origin of values in <Field__c>",
+        // biz-user register (router-v2 R2): "how does it get its value" shape.
+        "how does the <Field__c> field get its value \u2014 is it a formula or is something writing to it?"
       ],
       "sfi.find_field_anywhere": [
         "find all objects that have a field called External_Id__c",
@@ -56985,7 +57483,18 @@ var init_funnel_utterances = __esm({
         "which layouts include the <ComponentName> component?",
         "which flows invoke <ComponentName>?",
         "where is this custom label used?",
-        "what uses the <PermSet> permission set \u2014 show me all assignments and references"
+        "what uses the <PermSet> permission set \u2014 show me all assignments and references",
+        // R3 reverse custom-permission grant band (DIAGNOSIS-R3 §2 rank 5): who
+        // holds / which perm sets turn on / which profiles enable a custom
+        // permission — the reverse lookup shipped in 0.1.19; the vocabulary here.
+        "who holds the <CustomPermission> custom permission and which perm sets grant it?",
+        "which permission sets or permission set groups turn on <CustomPermission>?",
+        "which profiles enable the <CustomPermission> custom permission directly \u2014 not perm sets?",
+        "is <CustomPermission> granted anywhere besides the <PermSet> permission set?",
+        "i need the granting perm set for the <CustomPermission> custom permission",
+        "how could a user have gotten the <CustomPermission> custom permission?",
+        "what perm set gives access to the <ComponentName> component?",
+        "who is allowed to bypass the validation \u2014 which custom permission guards it and who holds it?"
       ],
       "sfi.installed_package_catalog": [
         "what managed packages are installed in this org?",
@@ -57275,7 +57784,57 @@ var init_semantic_funnel = __esm({
       untested: ["coverage", "gaps", "test", "tests"],
       // queue / assignment routing family
       queue: ["assignment", "routing", "owner", "group"],
-      routed: ["assignment", "queue", "rule", "routing"]
+      routed: ["assignment", "queue", "rule", "routing"],
+      // ---- router-v2 R2 biz-user vocabulary bridges. Grown from the
+      // business-user persona misses on the additions-tuning set; every entry is
+      // GENERIC business English mapped to Salesforce vocabulary — no org terms.
+      // "which automation gets sunset / retired" → legacy-migration vocabulary
+      sunset: ["retire", "retired", "deprecated", "migrate", "legacy", "replace"],
+      retiring: ["sunset", "deprecated", "migrate", "legacy"],
+      // "when the status flips to X" → transition vocabulary
+      flips: ["changes", "transition", "moves", "value", "status"],
+      // "who are the top contributors" → change-activity vocabulary
+      contributors: ["changes", "modified", "activity", "churn"],
+      // "how are records distributed by X" → grouped-count vocabulary
+      distributed: ["count", "group", "grouped", "breakdown"],
+      // "would you give it a passing grade" → health/risk vocabulary
+      grade: ["risk", "health", "score", "debt"],
+      graded: ["risk", "health", "score", "debt"],
+      architected: ["architecture", "risk", "health", "design"],
+      // "the report my boss uses / the thing she made" → ownership vocabulary
+      boss: ["owner", "user"],
+      made: ["created", "built"],
+      // ---- router-v2 R3 vocabulary bridges. Grown from the v0.1.22 labeled-miss
+      // permissions/flows families (DIAGNOSIS-R3 §2); every entry is GENERIC
+      // Salesforce/business vocabulary — no org terms — and safe at
+      // EXPANSION_WEIGHT (originals always win).
+      // custom-permission family: bypass / gate / guard / unlock verbs → the
+      // permission vocabulary the tool docs actually use.
+      bypass: ["permission", "custom", "validation", "skip"],
+      bypasses: ["bypass", "permission", "custom", "validation"],
+      bypassing: ["bypass", "permission", "custom", "validation"],
+      gate: ["permission", "custom", "guard", "control"],
+      gates: ["gate", "permission", "custom", "guard"],
+      gated: ["gate", "permission", "custom"],
+      guarding: ["gate", "permission", "custom", "validation"],
+      unlock: ["grant", "permission", "access", "enable"],
+      unlocks: ["grant", "permission", "access", "enable"],
+      // PSG-expansion family: expand/inheritance → effective-permission union.
+      expand: ["effective", "permission", "group", "union"],
+      inheritance: ["group", "permission", "effective", "union"],
+      inherits: ["group", "permission", "effective", "union"],
+      // access-diagnostics family: greyed-out / read-only symptom words.
+      greyed: ["edit", "editable", "access", "security", "field"],
+      grayed: ["edit", "editable", "access", "security", "field"],
+      // flow-diagnostics family: "didn't stamp the date", "what does it
+      // orchestrate", "the flow is skipping records".
+      stamp: ["writes", "sets", "populates", "updates", "flow"],
+      stamps: ["writes", "sets", "populates", "updates", "flow"],
+      orchestrate: ["flow", "subflow", "invoke", "explain"],
+      orchestrates: ["flow", "subflow", "invoke", "explain"],
+      skipping: ["skip", "bypass", "decision", "flow"],
+      // automation-footprint family (what_happens_on_save / risk report).
+      footprint: ["automation", "inventory", "overview", "save"]
     };
     PHRASE_SYNONYMS3 = [
       ["social security number", "ssn"],
@@ -57287,7 +57846,18 @@ var init_semantic_funnel = __esm({
       // becomes 'break' (→ impact/dependency synonyms) + 'down' — the impact
       // expansion hijacks the ranking. Collapse the phrase to the single token
       // 'breakdown' (whose SYNONYMS entry bridges to explain/overview/walk).
-      ["break down", "breakdown"]
+      ["break down", "breakdown"],
+      // router-v2 R2 biz-user idioms: altitude metaphors are OVERVIEW asks
+      // ("10,000-foot view" survives tokenization as "...-foot view"), and
+      // "kicks in" is the business phrasing of "fires".
+      ["foot view", "overview"],
+      ["birds eye view", "overview"],
+      ["bird's eye view", "overview"],
+      ["big picture", "overview"],
+      ["lay of the land", "overview"],
+      ["kicks in", "fires"],
+      ["kick in", "fire"],
+      ["reference sheet", "dictionary"]
     ].sort((a2, b2) => b2[0].length - a2[0].length);
     applyPhraseSynonyms3 = (lower) => {
       let out = lower;
@@ -57311,7 +57881,7 @@ var init_semantic_funnel = __esm({
       return out;
     };
     TOOL_KEYWORDS = {
-      "sfi.list_components": "list inventory enumerate catalog all what do we have how many exist objects fields custom fields how many fields on object contact account lead opportunity case metadata count layouts list views triggers validation rules record types web links flows classes triggers profiles permission sets layouts record types validation rules approval processes reports dashboards omniscripts custom standard relationship child parent inactive active picklist values which flows are inactive active draft obsolete flows triggers rules by status enumerate components",
+      "sfi.list_components": "list inventory enumerate catalog all what do we have how many exist objects fields custom fields how many fields on object contact account lead opportunity case metadata count layouts list views triggers validation rules record types web links flows classes triggers profiles permission sets layouts record types validation rules approval processes reports dashboards omniscripts custom standard relationship child parent inactive active picklist values which flows are inactive active draft obsolete flows triggers rules by status enumerate components custom permissions defined exist inventory what do they gate",
       "sfi.capabilities": "what can you do help capabilities what can i ask how do i use",
       "sfi.automation_risk_report": "objects more than one multiple triggers per object trigger quality automation risk",
       "sfi.live_group_count": "how many users assigned to profile membership group count",
@@ -57563,7 +58133,7 @@ import { createHash as createHash7 } from "node:crypto";
 import { readFile as readFile82 } from "node:fs/promises";
 import { join as join23, resolve as resolve3 } from "node:path";
 import { z as z115 } from "zod";
-var RESOLVE_FALLBACK_MAX_TOKENS, SAVE_ORDER_INTENTS, SINGLE_ENTITY_INTENTS, COMPARISON_ASIDE, stripComparisonAside, tryResolveFallback, routeQuestionInputSchema, routeTrust, clarificationIdFor, selectedEntityArgsForRoute, extractEntityQuery, inferEntityTypes, normLiteral, refineEntityResolution, resolveParentQualifier, applyGlossaryAliases, entityAmbiguityRequiresClarification, hygienicClarificationOptions, splitCompoundQuestion, mixedInventoryAndStoragePlan, PLAN_FAMILY, ASSESSMENT_FAMILY, ROUTE_PREAMBLE_TOOLS, TOOL_COMPATIBLE_TYPES, ACCESS_FLAVORED_TOOLS, resolvedTypeForGuard, applyComponentTypeGuard, REGEX_BONUS, resolveActiveVaultAlias, buildRouteToolArgsMap, mergeRouteHintsIntoCandidates, invokeFromArgsMap, rerankForMode, MARGIN, FUNNEL_PRIMARY_MIN_SCORE, DESTRUCTIVE_TOOL, INFORMATIONAL_IMPACT_TOOL, planesDiverge, LIVE_DATA_SIGNAL, resolvePlaneTie, risksDiverge, marginClarification, LIVE_DISCLOSURE_LOOKAHEAD, liveConsentDisclosure, guidanceForMode, buildFunnelCandidates, routerMode, REFUSAL_INTENT, REFUSAL_GAP, refusalResponse, CONTEXT_SAVE_ORDER_TOOLS, CONTEXT_TOOL_ARG_KEYS, GENERIC_SCHEMA_INTENTS, contextArgsFor, buildContextContinuation, routeQuestionHandler;
+var RESOLVE_FALLBACK_MAX_TOKENS, SAVE_ORDER_INTENTS, SINGLE_ENTITY_INTENTS, COMPARISON_ASIDE, stripComparisonAside, tryResolveFallback, routeQuestionInputSchema, routeTrust, clarificationIdFor, selectedEntityArgsForRoute, isToolNameMention, extractEntityQuery, NAME_IGNORABLE_WORD, looksLikeComponentName, extractExistenceProbeToken, inferEntityTypes, normLiteral, refineEntityResolution, resolveParentQualifier, applyGlossaryAliases, questionAssertsNameMultiplicity, entityAmbiguityRequiresClarification, hygienicClarificationOptions, splitCompoundQuestion, mixedInventoryAndStoragePlan, PLAN_FAMILY, ASSESSMENT_FAMILY, ROUTE_PREAMBLE_TOOLS, TOOL_COMPATIBLE_TYPES, ACCESS_FLAVORED_TOOLS, resolvedTypeForGuard, applyComponentTypeGuard, REGEX_BONUS, resolveActiveVaultAlias, buildRouteToolArgsMap, mergeRouteHintsIntoCandidates, invokeFromArgsMap, rerankForMode, MARGIN, FUNNEL_PRIMARY_MIN_SCORE, DESTRUCTIVE_TOOL, INFORMATIONAL_IMPACT_TOOL, planesDiverge, LIVE_DATA_SIGNAL, resolvePlaneTie, isCompoundPlaneAsk, risksDiverge, marginClarification, LIVE_DISCLOSURE_LOOKAHEAD, liveConsentDisclosure, guidanceForMode, buildFunnelCandidates, routerMode, REFUSAL_INTENT, REFUSAL_GAP, refusalResponse, CONTEXT_SAVE_ORDER_TOOLS, CONTEXT_TOOL_ARG_KEYS, GENERIC_SCHEMA_INTENTS, contextArgsFor, buildContextContinuation, routeQuestionHandler;
 var init_route_question = __esm({
   "../mcp/dist/src/tools/route-question.js"() {
     "use strict";
@@ -57737,8 +58307,12 @@ var init_route_question = __esm({
       }
       return null;
     };
+    isToolNameMention = (token) => {
+      const bare = token.toLowerCase().replace(/^sfi[._]/, "");
+      return getPlaneByTool().has(`sfi.${bare}`);
+    };
     extractEntityQuery = (question, intent) => {
-      const apiReference = question.match(/\b[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)\b|\b[A-Za-z][A-Za-z0-9_]*__(?:c|mdt|e|x|b|kav)\b|\b[A-Za-z][A-Za-z0-9]*(?:_+[A-Za-z0-9]+)+\b/)?.[0];
+      const apiReference = [...question.matchAll(/\b[A-Za-z][A-Za-z0-9_]*(?:\.[A-Za-z][A-Za-z0-9_]*)\b|\b[A-Za-z][A-Za-z0-9_]*__(?:c|mdt|e|x|b|kav)\b|\b[A-Za-z][A-Za-z0-9]*(?:_+[A-Za-z0-9]+)+\b/g)].map((match) => match[0]).find((token) => !isToolNameMention(token));
       if (apiReference !== void 0) {
         if (intent === "what-if-method-signature" && apiReference.includes(".")) {
           return `${apiReference.slice(0, apiReference.indexOf("."))} class`;
@@ -57750,6 +58324,9 @@ var init_route_question = __esm({
         }
         return apiReference;
       }
+      const quotedTyped = question.match(/['"‘“]([A-Za-z][A-Za-z0-9_ ]{1,40}?)['"’”]\s+(?:field|object|profile|permission\s+set|flow|record\s+type)\b/i)?.[1];
+      if (quotedTyped !== void 0)
+        return quotedTyped.trim();
       const prefixedTypePhrase = question.match(/\b((?:validation\s+rule|permission\s+set|record\s+type|page\s+layout|object|field|flow|class|trigger|layout|profile|report|dashboard)\s+(?:named\s+)?[A-Z][A-Za-z0-9_]*(?:\s+[A-Z][A-Za-z0-9_]*){0,5})\b/)?.[1];
       if (prefixedTypePhrase !== void 0)
         return prefixedTypePhrase.trim();
@@ -57767,6 +58344,15 @@ var init_route_question = __esm({
       const parent = typedMatch?.[2];
       return parent === void 0 ? phrase : `${phrase} on ${parent}`;
     };
+    NAME_IGNORABLE_WORD = /^(?:object|field|flow|class|trigger|page|layout|profile|permission|set|record|type|validation|rule|report|dashboard|logic|named|of|and|or|the|a|an|for)$/i;
+    looksLikeComponentName = (query) => {
+      const words = query.trim().split(/\s+/);
+      if (words.length <= 1)
+        return true;
+      const nameWords = words.filter((word) => !NAME_IGNORABLE_WORD.test(word));
+      return nameWords.length > 0 && nameWords.every((word) => /^["'‘“(]?[A-Z0-9]/.test(word));
+    };
+    extractExistenceProbeToken = (question) => [...question.matchAll(/\b[A-Za-z][A-Za-z0-9_]*__(?:c|mdt|e|x|b|kav)\b|\b[A-Za-z][A-Za-z0-9]*(?:_+[A-Za-z0-9]+)+\b/g)].map((match) => match[0]).find((token) => !isToolNameMention(token) && !/^\d/.test(token)) ?? null;
     inferEntityTypes = (query, intent, question) => {
       if (intent === "what-if-method-signature")
         return ["ApexClass"];
@@ -57891,9 +58477,24 @@ var init_route_question = __esm({
         ]
       };
     };
-    entityAmbiguityRequiresClarification = (query, resolution) => {
+    questionAssertsNameMultiplicity = (question) => /\b(?:a\s+few|several|a\s+couple)\s+of\s+(?:these|those|them)\b|\b(?:two|three|four|five|\d+)\s+different\s+(?:things?|ones?|fields?|objects?|components?|versions?)\b|\bmore\s+than\s+one\s+(?:of\s+(?:these|those|them)|with\s+(?:that|this)\s+name)\b|\bwhich\s+one\s+(?:do|should|did)\s+i\b/i.test(question);
+    entityAmbiguityRequiresClarification = (query, resolution, question) => {
+      if (resolution.disposition === "exact" && resolution.candidates.length >= 2 && !/__|\./.test(query)) {
+        const [top2, second2] = resolution.candidates;
+        const sameName = top2 !== void 0 && second2 !== void 0 && top2.matchKind === "exact" && second2.matchKind === "exact" && top2.base === second2.base && top2.apiName.toLowerCase() === second2.apiName.toLowerCase() && top2.parentApiName !== second2.parentApiName;
+        if (sameName) {
+          const promoted = resolveParentQualifier(question ?? "", {
+            ...resolution,
+            disposition: "ambiguous"
+          });
+          if (promoted.disposition === "ambiguous")
+            return true;
+        }
+      }
       if (resolution.disposition !== "ambiguous" || resolution.candidates.length < 2)
         return false;
+      if (question !== void 0 && questionAssertsNameMultiplicity(question))
+        return true;
       const normalized = query.toLowerCase();
       const literalMatches = resolution.candidates.filter((candidate) => candidate.apiName.toLowerCase() === normalized || candidate.id.toLowerCase().endsWith(`:${normalized}`));
       if (literalMatches.length > 1)
@@ -58136,6 +58737,12 @@ var init_route_question = __esm({
         return [...cands];
       return [second, top, ...cands.slice(2)];
     };
+    isCompoundPlaneAsk = (question) => {
+      const liveHalf = /\b(?:actually|really)\s+(?:running|firing|executing|live)\b|\bright\s+now\b|\bin\s+production\b/i;
+      const vaultHalf = /\bwhat\s+(?:breaks?|depends|would\s+break|will\s+break)\b|\bwhat\s+does\b[^.?!]{0,60}\bdo\b|\bschema\b|\bmetadata\b|\bsafe\s+to\s+(?:disable|deactivate|delete|remove)\b|\btell\s+me\s+about\b/i;
+      const conjoined = /\b(?:and|also|plus)\b/i;
+      return liveHalf.test(question) && vaultHalf.test(question) && conjoined.test(question);
+    };
     risksDiverge = (a2, b2) => DESTRUCTIVE_TOOL.test(a2.tool) && INFORMATIONAL_IMPACT_TOOL.test(b2.tool) || DESTRUCTIVE_TOOL.test(b2.tool) && INFORMATIONAL_IMPACT_TOOL.test(a2.tool);
     marginClarification = (cands, existingClarification) => {
       if (existingClarification !== null)
@@ -58185,6 +58792,7 @@ var init_route_question = __esm({
     REFUSAL_INTENT = {
       "write-imperative": "refused-write",
       "injection-exfiltration": "refused-injection",
+      "identity-gap": "honest-gap-identity",
       "runtime-analytics": "honest-gap-runtime",
       "out-of-scope": "out-of-scope"
     };
@@ -58197,6 +58805,10 @@ var init_route_question = __esm({
         category: "injection",
         note: "prompt-injection/exfiltration shape refused"
       },
+      "identity-gap": {
+        category: "identity-gap",
+        note: "first-person capability ask; no session-user identity \u2014 declined with a which-user clarify pointer"
+      },
       "runtime-analytics": {
         category: "runtime-analytics",
         note: "runtime/ops telemetry the product does not model; honest gap disclosed"
@@ -58470,8 +59082,11 @@ ${renderContextApplied(contextApplied2)}`
         ...entityTypes.length > 0 ? { types: entityTypes } : {}
       }) : null;
       const glossaryAwareEntityResolution = entityQuery !== null && entityResolution?.ok === true ? await applyGlossaryAliases(ctx, entityQuery, entityTypes, entityResolution.value) : null;
-      const refinedEntityResolution = contextExactResolution ?? (entityQuery !== null && glossaryAwareEntityResolution !== null ? resolveParentQualifier(input2.question, refineEntityResolution(entityQuery, glossaryAwareEntityResolution)) : null);
-      const entityClarificationRequired = entityQuery !== null && refinedEntityResolution !== null && entityAmbiguityRequiresClarification(entityQuery, refinedEntityResolution);
+      let refinedEntityResolution = contextExactResolution ?? (entityQuery !== null && glossaryAwareEntityResolution !== null ? resolveParentQualifier(input2.question, refineEntityResolution(entityQuery, glossaryAwareEntityResolution)) : null);
+      const entityClarificationRequired = entityQuery !== null && refinedEntityResolution !== null && // component-type asks ("is X a flow or a trigger?") are EXEMPT: a
+      // same-name cross-type collision is the ANSWER to that question, not an
+      // obstacle — sfi.resolve enumerates the types and the host explains.
+      route.intent !== "component-type" && entityAmbiguityRequiresClarification(entityQuery, refinedEntityResolution, input2.question);
       let entityEvidence = refinedEntityResolution !== null && refinedEntityResolution.disposition !== "none" ? {
         query: entityQuery,
         typeHints: entityTypes,
@@ -58536,6 +59151,22 @@ ${renderContextApplied(contextApplied2)}`
           route = { ...route, confidence: "low", clarification: marginClar };
         }
       }
+      if (routerMode() === "hybrid" && route.clarification === null && isCompoundPlaneAsk(input2.question)) {
+        const compoundCands = buildFunnelCandidates(route, input2.question, marginRouteToolArgs, input2.mode);
+        const vaultTop = compoundCands.find((candidate) => candidate.plane === "vault");
+        const liveTop = compoundCands.find((candidate) => candidate.plane === "live" || candidate.plane === "hybrid") ?? (/\b(?:running|firing|executing|fired?|ran)\b/i.test(input2.question) ? { tool: "sfi.live_automation_fired" } : void 0);
+        if (vaultTop !== void 0 && liveTop !== void 0) {
+          route = {
+            ...route,
+            confidence: "low",
+            clarification: {
+              required: true,
+              question: `This asks for BOTH a vault-metadata answer AND a live-org verification \u2014 \`${vaultTop.tool}\` answers from the offline vault; \`${liveTop.tool}\` queries the org right now and needs the opt-in live plane. Which should lead? (Pick one; the other can run as a follow-up.)`,
+              options: [vaultTop.tool, liveTop.tool]
+            }
+          };
+        }
+      }
       let premiseFlagged = false;
       if (entityQuery !== null && refinedEntityResolution !== null && refinedEntityResolution.disposition === "none") {
         const bareQuery = entityQuery.replace(/^(?:the|a|an)\s+/i, "").replace(/\s+(?:class(?:es)?|trigger(?:s)?|field(?:s)?|object(?:s)?|flow(?:s)?|component(?:s)?|layout(?:s)?|profile(?:s)?|report(?:s)?|dashboard(?:s)?|rule(?:s)?)$/i, "");
@@ -58544,7 +59175,43 @@ ${renderContextApplied(contextApplied2)}`
           ...entityTypes.length > 0 ? { types: entityTypes } : {}
         }) : null;
         const bareResolution = bareRetry?.ok === true && bareRetry.value.disposition !== "none" ? bareRetry.value : null;
-        if (bareResolution !== null) {
+        let crossTypeResolution = null;
+        if (bareResolution === null && entityTypes.length > 0) {
+          const unscopedQuery = bareQuery.length > 0 ? bareQuery : entityQuery;
+          const unscopedRetry = await resolveComponents(ctx.graph, unscopedQuery, { limit: 5 });
+          if (unscopedRetry.ok && unscopedRetry.value.disposition !== "none" && (unscopedRetry.value.candidates[0]?.base ?? 0) >= 0.9) {
+            crossTypeResolution = unscopedRetry.value;
+          }
+        }
+        if (crossTypeResolution !== null) {
+          const real = crossTypeResolution.candidates[0];
+          const statedTypes = entityTypes.join("/");
+          const typeWarning = `TYPE CHECK: no ${statedTypes} named '${entityQuery}' exists in the vault, but the name matches ${real.id} (a ${real.type}). The question's stated component type appears to be wrong \u2014 answer about the component that actually exists, and say so.`;
+          route = {
+            ...route,
+            confidence: "low",
+            reason: `${route.reason} ${typeWarning}`
+          };
+          refinedEntityResolution = crossTypeResolution;
+          entityEvidence = {
+            query: entityQuery,
+            typeHints: entityTypes,
+            disposition: crossTypeResolution.disposition,
+            clarificationRequired: false,
+            warning: typeWarning,
+            candidates: crossTypeResolution.candidates.slice(0, 5).map((candidate) => ({
+              componentId: candidate.id,
+              type: candidate.type,
+              apiName: candidate.apiName,
+              label: candidate.label,
+              parentApiName: candidate.parentApiName,
+              score: candidate.score,
+              base: candidate.base,
+              matchKind: candidate.matchKind,
+              evidence: candidate.evidence
+            }))
+          };
+        } else if (bareResolution !== null) {
           entityEvidence = {
             query: bareQuery,
             typeHints: entityTypes,
@@ -58563,7 +59230,7 @@ ${renderContextApplied(contextApplied2)}`
               evidence: candidate.evidence
             }))
           };
-        } else {
+        } else if (looksLikeComponentName(entityQuery)) {
           premiseFlagged = true;
           const premiseWarning = `PREMISE CHECK: no component matching '${entityQuery}' exists in the vault \u2014 verify the name (a typo, or metadata newer than the last refresh; /sfi-refresh may help). The routed tool fails closed on an unknown component; do not present its error as an answer about a real component.`;
           route = {
@@ -58579,6 +59246,15 @@ ${renderContextApplied(contextApplied2)}`
             warning: premiseWarning,
             candidates: []
           };
+        } else {
+          entityEvidence = {
+            query: entityQuery,
+            typeHints: entityTypes,
+            disposition: "none",
+            clarificationRequired: false,
+            warning: null,
+            candidates: []
+          };
         }
       } else if (entityQuery !== null && refinedEntityResolution !== null && refinedEntityResolution.disposition === "ambiguous" && (/__(?:c|mdt|e|x|b|kav)\b/i.test(entityQuery) || entityQuery.includes(".")) && !refinedEntityResolution.candidates.some((candidate) => candidate.apiName.toLowerCase() === entityQuery.toLowerCase() || candidate.id.toLowerCase().endsWith(`:${entityQuery.toLowerCase()}`))) {
         premiseFlagged = true;
@@ -58609,11 +59285,77 @@ ${renderContextApplied(contextApplied2)}`
           candidates: []
         };
       }
+      if (!premiseFlagged && entityQuery === null && route.clarification === null && route.intent !== "empty" && route.intent !== "component-lookup") {
+        const probeToken = extractExistenceProbeToken(input2.question);
+        if (probeToken !== null) {
+          const probe = await resolveComponents(ctx.graph, probeToken, { limit: 5 });
+          if (probe.ok) {
+            const lowered = probeToken.toLowerCase();
+            const loose = normLiteral(probeToken);
+            const literalHit = probe.value.candidates.some((candidate) => candidate.apiName.toLowerCase() === lowered || candidate.id.toLowerCase().endsWith(`:${lowered}`) || normLiteral(candidate.apiName) === loose);
+            if (probe.value.disposition === "none" || !literalHit) {
+              premiseFlagged = true;
+              const premiseWarning = `PREMISE CHECK: no component named '${probeToken}' exists in the vault \u2014 any listed candidates are fuzzy lookalikes, not the component you named. Verify the name (a typo, or metadata newer than the last refresh; /sfi-refresh may help). The routed tool fails closed on an unknown component; do not present its error as an answer about a real component.`;
+              route = {
+                ...route,
+                confidence: "low",
+                reason: `${route.reason} ${premiseWarning}`
+              };
+              entityEvidence = {
+                query: probeToken,
+                typeHints: [],
+                disposition: "none",
+                clarificationRequired: false,
+                warning: premiseWarning,
+                candidates: probe.value.candidates.slice(0, 5).map((candidate) => ({
+                  componentId: candidate.id,
+                  type: candidate.type,
+                  apiName: candidate.apiName,
+                  label: candidate.label,
+                  parentApiName: candidate.parentApiName,
+                  score: candidate.score,
+                  base: candidate.base,
+                  matchKind: candidate.matchKind,
+                  evidence: candidate.evidence
+                }))
+              };
+            }
+          }
+        }
+      }
       let contextRouteApplied = null;
       if (validatedContext !== null && route.clarification === null && !premiseFlagged) {
         const previous = validatedContext.previous;
         const stillUnrouted = route.intent === "unrouted" && route.plane === "unknown";
-        const reparamAnchor = detectReparamAnchor(input2.question);
+        const gapFollowUpFamily = stillUnrouted ? detectGapShapedFollowUp(input2.question) : null;
+        if (gapFollowUpFamily !== null) {
+          const gapDescription = {
+            judgment: "a normative judgment (should/normal/risky) \u2014 sf-intelligence reads org metadata and has no opinion to offer",
+            delivery: "file export or message delivery, which the product does not perform",
+            "tool-self-capability": "the product's own capability boundary \u2014 sfi.capabilities answers what is and is not built",
+            "deployment-status": "deployment/pending-change status, runtime telemetry the vault does not model"
+          };
+          const carried = previous.componentId !== void 0 ? ` The component carried from the previous turn (${previous.componentId}) was noted but the previous tool was NOT inherited \u2014 inheriting it would execute a read that cannot answer this ask.` : "";
+          route = {
+            question: input2.question,
+            plane: "unknown",
+            intent: "context-gap-followup",
+            tools: [],
+            liveRequired: false,
+            needsResolve: false,
+            reason: `HONEST GAP (context follow-up): this follow-up asks for ${gapDescription[gapFollowUpFamily] ?? gapFollowUpFamily}.${carried}`,
+            gap: {
+              category: "context-gap-followup",
+              note: `gap-shaped follow-up (${gapFollowUpFamily}); context continuation suppressed rather than inheriting the previous tool`
+            },
+            confidence: "high",
+            risk: "informational",
+            alternatives: [],
+            clarification: null,
+            plan: []
+          };
+        }
+        const reparamAnchor = gapFollowUpFamily !== null ? null : detectReparamAnchor(input2.question);
         const ownRouteWeak = stillUnrouted || GENERIC_SCHEMA_INTENTS.has(route.intent) && route.confidence !== "high";
         if (reparamAnchor !== null && ownRouteWeak && previous.tool !== void 0) {
           let target = contextSubstitution === null && refinedEntityResolution?.disposition === "exact" ? refinedEntityResolution.candidates[0] : null;
@@ -58677,7 +59419,9 @@ ${renderContextApplied(contextApplied2)}`
         }
       }
       let advisoryCandidates = null;
-      if (route.intent === "unrouted" && route.plane === "unknown" && route.clarification === null && !premiseFlagged) {
+      const questionHead = input2.question.trim().split(/\s+/).slice(0, 5).join(" ");
+      const anaphorOnlyFragment = validatedContext === null && detectPronounAnchor(questionHead) !== null && (entityQuery === null || isAnaphorOnly(entityQuery));
+      if (route.intent === "unrouted" && route.plane === "unknown" && route.clarification === null && !premiseFlagged && !anaphorOnlyFragment) {
         const cands = buildFunnelCandidates(route, input2.question, marginRouteToolArgs, input2.mode);
         advisoryCandidates = cands;
         const resolvedExact = refinedEntityResolution?.disposition === "exact" ? refinedEntityResolution.candidates[0] : void 0;
@@ -72446,7 +73190,7 @@ var init_package_version = __esm({
     "use strict";
     readCliPackageVersion = () => {
       if (true)
-        return "0.1.22";
+        return "0.1.23";
       for (const rel of ["../package.json", "../../package.json"]) {
         try {
           const raw = readFileSync3(fileURLToPath(new URL(rel, import.meta.url)), "utf8");
@@ -142370,7 +143114,7 @@ var makeShutdownOnce = (ctx) => {
 
 // dist/src/commands/demo.js
 init_refresh();
-var buildVersion = () => true ? "0.1.22" : "dev";
+var buildVersion = () => true ? "0.1.23" : "dev";
 var SHUTDOWN_SIGNALS2 = ["SIGINT", "SIGTERM"];
 var resolveDemoSource = () => {
   let dir = dirname21(fileURLToPath2(import.meta.url));
@@ -143355,7 +144099,7 @@ init_vault_git();
 init_watch();
 var readVersion = () => {
   if (true)
-    return "0.1.22";
+    return "0.1.23";
   const pkgUrl = new URL("../../package.json", import.meta.url);
   const raw = readFileSync6(fileURLToPath3(pkgUrl), "utf8");
   const parsed = JSON.parse(raw);