tldr-experts 0.4.0 → 0.5.0

package/README.md

@@ -1,8 +1,8 @@
 # tldr-experts
 
-[![npm](https://img.shields.io/npm/v/tldr-experts?label=npm%20tldr-experts)](https://www.npmjs.com/package/tldr-experts) [![ci](https://github.com/ederwii/tldr-experts/actions/workflows/ci.yml/badge.svg)](https://github.com/ederwii/tldr-experts/actions/workflows/ci.yml) ![status](https://img.shields.io/badge/status-alpha-orange)
+[![npm](https://img.shields.io/npm/v/tldr-experts?label=npm%20tldr-experts)](https://www.npmjs.com/package/tldr-experts) [![ci](https://github.com/ederwii/tldr-experts/actions/workflows/ci.yml/badge.svg)](https://github.com/ederwii/tldr-experts/actions/workflows/ci.yml) ![status](https://img.shields.io/badge/status-beta-blue)
 
-**A lightweight, file-based AI development workflow.** Open source, tool-agnostic in design, piloted on Claude Code. **Alpha:** every command is implemented and verified by running it; interfaces may change without notice, and `tldrx --help` is the authoritative surface.
+**An evidence-first, file-based AI development framework: five stages, a gate on every one, and every claim cited or refused.** Open source, tool-agnostic in design, piloted on Claude Code. **Beta:** every command is implemented and verified by running it, the `version: 1` file formats only grow from here, and `tldrx --help` is the authoritative command surface.
 
 One loop — *Investigate → Handoff → Interview → Gate* — five phases, **what · how · plan · build ·
 watch**, one stage per command, each stopping at a gate you own; the files ARE the state, the
@@ -21,6 +21,11 @@ tldrx init                # detect repos, map the code, write .tldrx/, ask only
 tldrx install --claude    # write the skill, hooks and status line into ./.claude/
 ```
 
+Later: **`tldrx update`** pulls the newest published version and prints the CHANGELOG between the
+one you had and the one you now have. Any command will tell you, in one line, when there is a newer
+one — off the hot path, cached for a day, silent when it cannot reach the registry, and never in
+`--json` output or during a hook. Turn it off with `TLDRX_UPDATE_CHECK=off`.
+
 **Never used it before?** `tldrx learn` teaches the loop by running it: eight chapters, ~15 minutes,
 in a throwaway sandbox with a toy repo and a stand-in agent. Every command in it is the real one —
 `init`, `run new`, `next`, `approve`, a Build that cuts a branch and runs a real DoD — so nothing it
@@ -63,7 +68,21 @@ and names the `--prepare` command instead.
 
 ### Overnight, with the checking kept
 
-Two commands and a prompt. There is no keyword for this: the mandate is prose you write.
+Two commands and a prompt — and the prompt now ships with the package:
+
+```bash
+tldrx drive --unattended        # print the mandate; paste it into the session that drives the run
+tldrx drive --attended          # the same disciplines, but every gate stays yours to sign
+```
+
+`tldrx drive` needs no workspace, opens no run and writes nothing: it prints the discipline the
+first real runs were driven by — the three-role protocol (developer → a **fresh** adversarial
+reviewer, never the author → the host verifying both in the code, not in their reports), evidence
+labelled `measured` / `inferred` / `assumed`, product questions parked rather than decided, the
+reviewer calibrated to the story's stakes, and the cost declared once. The two modes differ in
+exactly two places: who drives the turns, and who may close a gate.
+
+The rest of this section is what that mandate says, in the shape you would type it by hand.
 
 ```bash
 tldrx run new payments --scope feature --budget 25 \
@@ -138,7 +157,11 @@ Those are the shipped defaults, and every scope keeps at least one human gate. O
 signs something it should not have, `tldrx reject --stage <phase>/<stage> --note "…"` revokes it, moves
 the cursor back and marks the later stages `stale`. When it is one BUILD STORY you disagree with — a
 story two reviewers refused, which is terminal for the rest of the run —
-`tldrx story reopen <id> --note "…"` gives that one story another run of attempts and nothing else.
+`tldrx story reopen <id> --note "…"` gives that one story another run of attempts and nothing else;
+for one named defect in a story already `done`, `--for-fix` opens a fix round instead — no attempt
+consumed, the same DoD and the same reviewer, one open round at a time.
+To move who may close a gate after `run new` froze it, `tldrx run gates set <stage>:<policy> --note "…"`
+is the only sanctioned way, and it records the old→new value with your reason.
 When you fix `.tldrx/workspace.yml` mid-run and the approved stories still cite the old command strings,
 `tldrx plan sync-dod` rewrites just their dod lines — renames followed, removed commands dropped, and
 anything with no ancestor in the file's history flagged rather than guessed at.
@@ -190,7 +213,7 @@ context 83.7 KB of 160.0 KB (~23.8k tok, 12% of sonnet's ~200.0k window)
 ```
 
 Over `prompt_max_bytes` the stage is **refused** (exit 2) before anything spawns; `max_reads` stops
-the sub-agent at a read ceiling; `--effort` changes what a turn costs. What `--max-budget-usd` does is
+the sub-agent at a read ceiling; `--effort` changes what a turn costs. What `--max-usd` does is
 end a run *after* the turn it is already in — measured, one turn spent **$5.15** against a **$1.50**
 ceiling — so size the prompt for the money you are willing to lose. Afterwards `tldrx cost [--all]` adds up what was actually charged, per attempt, per stage, per
 run, read off `agent.result` events and nothing else. Retries are never merged — a retry is
@@ -200,18 +223,32 @@ Details: [`docs/guide/06-budgets-and-cost.md`](docs/guide/06-budgets-and-cost.md
 
 ## Several runs
 
-With several runs open and no id, every run-targeting command **refuses rather than guessing**,
-exits `2`, and lists them — `tldrx next: 3 runs are open — pass one:`. That means "you left off
-the id", not "it broke". Pass a positional `<run>` on `next`, `run status`, `cost`, `replay` and
-`retro`; `--run <id>` on the rest. `tldrx run status` with several open lists them all, exit `0`.
+With several runs open and no id, a run-targeting command **refuses rather than guessing** and
+lists them — `tldrx next: 3 runs are open — pass one:`. That means "you left off the id", not "it
+broke". Two of them refuse differently and it is worth knowing which: `tldrx run status` is not a
+refusal at all — it lists every open run and exits `0`, and it is the screen you read to find the
+id the others want — and `tldrx cost` refuses at exit `1`, not `2`.
+
+Most run-targeting commands take the id either way, a positional `<run>` or `--run <id>`: `next`,
+`cost`, `note`, `gate template`, `questions`, `budget show`, `ship`, `tickets`, and `run attend` ·
+`status` · `estimate` · `auto` · `unlock` · `cancel`. `replay` and `retro` take the positional only
+— `--run` there is an unknown flag. `approve`, `reject`, `answer`, `interview`, `plan`,
+`story reopen`, `watch` and `run gates set` take `--run <id>` only.
+
+`tldrx retro --all` goes the other way: it reads **every** run in the workspace and prints one
+table of what keeps catching you — finding class × count × how many runs × one example with its
+citation — mined from the review logs, the fix lists, `retro.md` and the `story.reopened` reasons.
+Strictly read-only: it writes nothing, anywhere.
 
 ## What to commit
 
 **Both `.tldrx/` and `tldrx-work/`.** The files are the state — the map, the facts, the questions and
 their answers, `run.yml`, `budget.yml`, `events.jsonl`, the handoffs, the plan — so a teammate who clones
-the repo gets the run. The block `tldrx init` appends to `.gitignore` excludes five paths and nothing
-else, because those five are machine-local or regenerated: `.tldrx/graphify-out/`, `.tldrx/cache/`,
-`.tldrx/worktrees/`, `tldrx-work/*/.lock`, `tldrx-work/*/.agent/`.
+the repo gets the run. The block `tldrx init` appends to `.gitignore` excludes eight paths and nothing
+else, because those eight are machine-local, regenerated, or a backup git already holds the history
+of: `.tldrx/graphify-out/`, `.tldrx/cache/`, `.tldrx/worktrees/`, `tldrx-work/*/.lock`,
+`tldrx-work/*/.agent/`, `tldrx-work/*/*.bak`, `.tldrx/memory/*.bak` and
+`.claude/settings.json.bak-tldrx-*`.
 
 ## Documentation
 
@@ -233,6 +270,12 @@ Design docs: [`docs/concept.md`](docs/concept.md) (why) · [`docs/spec.md`](docs
 open decisions) · [`docs/ROADMAP.md`](docs/ROADMAP.md) (next) · [`CHANGELOG.md`](CHANGELOG.md) (shipped) ·
 [`docs/dashboard-model.md`](docs/dashboard-model.md).
 
+Contributing: **[`CONTRIBUTING.md`](CONTRIBUTING.md)** — the loop a change goes through, the four gates
+and what CI actually runs, the red-first test rules, and
+[how to contribute a model-provider config](CONTRIBUTING.md#contributing-a-model-provider-config)
+(the `TLDRX_CLAUDE_BIN` seam, the `stream-json` transcript contract, and what a generic provider
+would have to supply).
+
 ## Releases and status tags
 
 Install name is **`tldr-experts`**; it installs two commands, **`tldrx`** (short) and `tldr-experts` (same binary).
@@ -242,6 +285,7 @@ back on the registry is 0.3.0.
 
 | Version | Date | Status | Contains |
 |---|---|---|---|
+| 0.5.0 | 2026-09-02 | `beta` | `tldrx drive` and its own preflight, `watch check` / `watch arm`, `questions cards`, `plan schema`, `retro --all` (with its findings fed back into every reviewer prompt) and `story reopen --for-fix`; `tldrx update` plus a cached newer-version notice; the dashboard reads `budget.yml` and `events.jsonl` — operator notes, reopens and retries, the per-phase budget panel, and a host-attended run metered in tokens against `ceiling_host_tokens`; a rejected review envelope no longer burns a story attempt; `ship` opens one PR per repo; merge-wave lock + ref guard; five golden-transcript evals, one per stage; `CONTRIBUTING.md` and a model-provider contract |
 | 0.4.0 | 2026-09-01 | `beta` | FIRST BETA — 40-issue hardening burn (DoD pre-flight + `plan sync-dod`, merge-wave lock + gated-HEAD, load-aware tests, claim-sources across all outputs), `tldrx learn` 8-chapter sandbox tutorial (cold-player QA), `tldrx ship` / `tldrx note` / `run gates set`, budget policies + dual-economy wiring, single integration branch for chained epics, epic worktrees live to run close, bilingual docs site |
 | 0.3.1 | 2026-08-31 | `alpha` | Unattended mode (gates_policy agent, review handshake, fixlist, decision cards, dual economy), 6 contact fixes from the first feature-scope runs, colored init, training repair round |
 | 0.3.0 | 2026-08-30 | `alpha` | expert training with provenance, auto gates with an undo, `tldrx status`, seed triage, the token economy (context ledger, `max_reads`, `cost`, `estimate`), `install --claude`, `interview`, the ticket mirror, `--help` with flags and exit codes |
@@ -256,6 +300,10 @@ path documented; `stable` = 1.0, semver from here on. The badge above shows the
 
 ## Releasing
 
-**One command: `scripts/release.sh X.Y.Z --tag alpha`.** It is the only sanctioned path — a Claude Code hook denies hand-made `git tag` / `npm publish`, and `publish.yml` re-runs the same checks. Checklist and judgement calls: `docs/RELEASING.md`.
+**One command: `scripts/release.sh X.Y.Z --tag beta`.** The tag is not optional in practice: omit
+`--tag` and the script writes `alpha`, which is no longer this project's status. It is the only
+sanctioned path — a Claude Code hook denies hand-made `git tag` / `npm publish`, and `publish.yml`
+runs `release-check.sh --ci` (the file checks only) plus its own typecheck, tests and build.
+Checklist and judgement calls: `docs/RELEASING.md`.
 
 MIT, © 2026 Alan Martinez — a placeholder made while scaffolding; change it freely before anything ships.

package/dist/hooks/answer-capture.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   FactsStore
-} from "./chunk-t1ywrfr4.js";
+} from "./chunk-889tybxc.js";
 import {
   parseHookInput,
   readStdin
-} from "./chunk-b8kxzna2.js";
+} from "./chunk-v1c1hpb8.js";
 import {
   EventLog
-} from "./chunk-rz541e2b.js";
-import"./chunk-c6t5nx0r.js";
+} from "./chunk-sae7sqty.js";
+import"./chunk-qw73rdbr.js";
 import {
   MAX_FACT_CHARS,
   detectAnswered,
@@ -17,13 +17,12 @@ import {
   recordAnswer,
   replaceBlock,
   serializeQuestions
-} from "./chunk-rpcxsqh3.js";
-import"./chunk-m3mewgnw.js";
+} from "./chunk-nadqsr3w.js";
 import"./chunk-39zh2e44.js";
 import {
   PROJECT_WORK_DIR,
   factsPath
-} from "./chunk-sq44k6g2.js";
+} from "./chunk-a6rpj2cp.js";
 
 // src/hooks/answer-capture.ts
 import { existsSync as existsSync2 } from "fs";

package/dist/hooks/budget-gate.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   budgetGateDeny
-} from "./chunk-9gb21660.js";
+} from "./chunk-a5dq2dcp.js";
 import {
   allow,
   deny,
   readPayload,
   runHook,
   toolInput
-} from "./chunk-tzzwddct.js";
-import"./chunk-b8kxzna2.js";
+} from "./chunk-bvm6vjrt.js";
+import"./chunk-v1c1hpb8.js";
 import {
   asRunBudget,
   currentActor,
@@ -29,24 +29,23 @@ import {
   validateRunBudget,
   wouldExceed,
   wouldExceedHostTokens
-} from "./chunk-4cp363kv.js";
+} from "./chunk-14zn51kh.js";
 import {
   EventLog
-} from "./chunk-rz541e2b.js";
-import"./chunk-9zsqxr6y.js";
-import"./chunk-phmdk72a.js";
+} from "./chunk-sae7sqty.js";
+import"./chunk-hcrbr430.js";
 import {
   noteDeprecations
-} from "./chunk-rpcxsqh3.js";
-import"./chunk-m3mewgnw.js";
+} from "./chunk-nadqsr3w.js";
 import"./chunk-39zh2e44.js";
+import"./chunk-q8d3sff9.js";
 import {
   PROJECT_WORK_DIR,
   findWorkspaceRoot,
   locateWork,
   parseYaml,
   stageYamlPath
-} from "./chunk-sq44k6g2.js";
+} from "./chunk-a6rpj2cp.js";
 
 // src/hooks/budget-gate.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, statSync } from "node:fs";
@@ -74,7 +73,9 @@ function loadRunBudget(runDir) {
 var SPAWN_RE = /^(claude -p|tldrx next|tldrx run auto|tldrx expert train|tldrx seed triage)\b/;
 var RUN_ARG_RE = /--run[= ]([\w.-]+)/;
 var DEFAULT_TRAIN_USD = 2;
+var DEFAULT_FULL_TRAIN_USD = 3;
 var DEFAULT_TRIAGE_USD = 1;
+var FULL_MODE_RE = /--mode[= ]full\b/;
 var MAX_USD_RE = /--max-usd[= ]([0-9]+(?:\.[0-9]+)?)/;
 var MAX_BUDGET_RE = /--max-budget-usd[= ]([0-9]+(?:\.[0-9]+)?)/;
 await runHook("budget-gate", async () => {
@@ -216,7 +217,9 @@ function estimateFor(command, stageBudget) {
     return Number.isFinite(flagged) ? flagged : stageBudget ?? 0;
   }
   if (/^tldrx expert train\b/.test(command)) {
-    return Number.isFinite(flagged) ? flagged : DEFAULT_TRAIN_USD;
+    if (Number.isFinite(flagged))
+      return flagged;
+    return FULL_MODE_RE.test(command) ? DEFAULT_FULL_TRAIN_USD : DEFAULT_TRAIN_USD;
   }
   if (/^tldrx seed triage\b/.test(command)) {
     return Number.isFinite(flagged) ? flagged : DEFAULT_TRIAGE_USD;

package/dist/hooks/{chunk-4cp363kv.js → chunk-14zn51kh.js}

@@ -1,6 +1,3 @@
-import {
-  parseHandoff
-} from "./chunk-9zsqxr6y.js";
 import {
   MAX_PLAN_STORIES,
   MAX_STORIES_PER_WAVE,
@@ -11,10 +8,7 @@ import {
   requirePattern,
   requireStringList,
   requireVersion1
-} from "./chunk-phmdk72a.js";
-import {
-  classifySrc
-} from "./chunk-m3mewgnw.js";
+} from "./chunk-hcrbr430.js";
 import {
   asDocument,
   isRecord,
@@ -27,11 +21,17 @@ import {
   requireVersion,
   result
 } from "./chunk-39zh2e44.js";
+import {
+  parseHandoff
+} from "./chunk-q8d3sff9.js";
 import {
   PROJECT_FRAMEWORK_DIR,
+  SRC_PATTERNS,
+  classifySrc,
   listRunDirs,
-  parseYaml
-} from "./chunk-sq44k6g2.js";
+  parseYaml,
+  readableSource
+} from "./chunk-a6rpj2cp.js";
 
 // src/hooks/lib/runFile.ts
 import { existsSync, readFileSync } from "node:fs";
@@ -223,6 +223,9 @@ function validateRunBudget(input) {
   if (doc.on_host_tokens_exceed !== undefined && doc.on_host_tokens_exceed !== null) {
     requireEnum(doc.on_host_tokens_exceed, ON_HOST_TOKENS_EXCEED, "on_host_tokens_exceed", issues);
   }
+  if (doc.ceiling_host_tokens !== undefined && doc.ceiling_host_tokens !== null) {
+    requireNumber(doc.ceiling_host_tokens, "ceiling_host_tokens", issues);
+  }
   if (doc.warn_at_pct !== undefined) {
     requireNumber(doc.warn_at_pct, "warn_at_pct", issues);
     const pct = doc.warn_at_pct;
@@ -236,7 +239,9 @@ function validateRunBudget(input) {
   if (phases.length > MAX_PHASES) {
     issues.push({ path: "phases", message: `${phases.length} phases exceeds the ${MAX_PHASES} cap` });
   }
+  const runEconomy = ECONOMIES.includes(doc.economy) ? doc.economy : DEFAULT_ECONOMY;
   let sum = 0;
+  let tokenSum = 0;
   phases.forEach((phase, i) => {
     const path = `phases[${i}]`;
     if (!isRecord(phase)) {
@@ -250,12 +255,27 @@ function validateRunBudget(input) {
     if (phase.economy !== undefined && phase.economy !== null) {
       requireEnum(phase.economy, ECONOMIES, `${path}.economy`, issues);
     }
+    if (phase.ceiling_host_tokens !== undefined && phase.ceiling_host_tokens !== null) {
+      requireNumber(phase.ceiling_host_tokens, `${path}.ceiling_host_tokens`, issues);
+    }
+    const economy = ECONOMIES.includes(phase.economy) ? phase.economy : runEconomy;
+    if (economy === "host-tokens") {
+      const tokens = typeof phase.ceiling_host_tokens === "number" ? phase.ceiling_host_tokens : typeof phase.ceiling_usd === "number" ? phase.ceiling_usd : 0;
+      tokenSum += tokens;
+      return;
+    }
     if (typeof phase.ceiling_usd === "number")
       sum += phase.ceiling_usd;
   });
   if (typeof doc.ceiling_usd === "number" && sum > doc.ceiling_usd + 0.000000001) {
     issues.push({ path: "phases", message: `phase ceilings sum to ${sum} > ceiling_usd ${doc.ceiling_usd}` });
   }
+  if (typeof doc.ceiling_host_tokens === "number" && tokenSum > doc.ceiling_host_tokens + 0.000000001) {
+    issues.push({
+      path: "phases",
+      message: `phase host-token ceilings sum to ${tokenSum} > ceiling_host_tokens ${doc.ceiling_host_tokens}`
+    });
+  }
   return result(issues, deprecations);
 }
 function asRunBudget(input) {
@@ -269,11 +289,13 @@ function asRunBudget(input) {
     on_exceed: doc.on_exceed ?? "block",
     economy: doc.economy ?? DEFAULT_ECONOMY,
     on_host_tokens_exceed: doc.on_host_tokens_exceed ?? DEFAULT_ON_HOST_TOKENS_EXCEED,
+    ceiling_host_tokens: doc.ceiling_host_tokens ?? null,
     phases: (doc.phases ?? []).map((phase) => ({
       id: phase.id,
       ceiling_usd: phase.ceiling_usd,
       spent_usd: phase.spent_usd,
-      economy: phase.economy ?? null
+      economy: phase.economy ?? null,
+      ceiling_host_tokens: phase.ceiling_host_tokens ?? null
     }))
   };
 }
@@ -283,9 +305,9 @@ function hostTokenCeiling(budget, phaseId) {
   if (phaseId !== undefined && phaseId !== null) {
     const phase = budget.phases.find((entry) => entry.id === phaseId);
     if (phase !== undefined)
-      return phase.ceiling_usd;
+      return phase.ceiling_host_tokens ?? phase.ceiling_usd;
   }
-  return budget.ceiling_usd;
+  return budget.ceiling_host_tokens ?? budget.ceiling_usd;
 }
 
 // src/core/budget/remainingWork.ts
@@ -971,6 +993,21 @@ function stackExpertNames(root, repos) {
   return names;
 }
 
+// src/core/text/srcGrammarContract.ts
+var KINDS = {
+  file: { shape: "`[repo:]path:line[-line]`", example: "api:src/Selector.ts:241" },
+  doc: { shape: "`https://` + a non-space URL", example: "https://example.com/spec" },
+  answer: { shape: `\`Q<n>\` (${readableSource(SRC_PATTERNS.answer)})`, example: "Q3" },
+  fact: { shape: `\`F<nnn>\` (${readableSource(SRC_PATTERNS.fact)})`, example: "F102" },
+  cmd: { shape: `\`$ <command> → exit <n>\` (${readableSource(SRC_PATTERNS.cmd)})`, example: "$ bun test → exit 0" },
+  graph: { shape: "`graph:<node id>`", example: "graph:hunt-engine" },
+  absent: { shape: "`absent:<the path you looked at>`", example: "absent:docs/retention.md" },
+  aidlc: {
+    shape: `\`aidlc:<file>:<line>\` or \`aidlc:<file>#Q<n>\` (${readableSource(SRC_PATTERNS.aidlcLine)})`,
+    example: "aidlc:intents/260821/design.md:14"
+  }
+};
+
 // src/core/build/prompts.ts
 var MAX_TOUCHED_BYTES = 64 * 1024;
 
@@ -1180,6 +1217,9 @@ function looksLikeSpawnError(detail) {
 var MAX_ATTEMPTS = 2;
 var REVIEWER_SHARE = 0.25;
 var REVIEWER_FLOOR_USD = 1;
+function developerPriceDivisor(attempt) {
+  return attempt <= 1 ? 1 + REVIEWER_SHARE : MAX_ATTEMPTS * (1 + REVIEWER_SHARE);
+}
 function remainingWork(input) {
   try {
     return measure(input);
@@ -1244,9 +1284,12 @@ function measure(input) {
     if (attemptsLeft === 0)
       continue;
     const developerTurns = Math.max(attemptsLeft - (story.status === "review" ? 1 : 0), 0);
-    const developerCapUsd = hostPaysDeveloper ? 0 : caps.developer(story.id);
+    const firstTurn = MAX_ATTEMPTS - developerTurns + 1;
+    const developerCapsUsd = Array.from({ length: developerTurns }, (_unused, i) => hostPaysDeveloper ? 0 : caps.developer(story.id, firstTurn + i));
+    const developerCapUsd = developerCapsUsd[0] ?? 0;
     const reviewerCapUsd = caps.reviewer(story.id);
-    const usd = round2(developerCapUsd * developerTurns + reviewerCapUsd * attemptsLeft);
+    const developerUsd = developerCapsUsd.reduce((sum, cap) => sum + cap, 0);
+    const usd = round2(developerUsd + reviewerCapUsd * attemptsLeft);
     if (usd <= 0 && developerTurns === 0 && attemptsLeft === 0)
       continue;
     stories.push({
@@ -1255,6 +1298,7 @@ function measure(input) {
       developerTurns,
       reviews: attemptsLeft,
       developerCapUsd,
+      developerCapsUsd,
       reviewerCapUsd,
       usd
     });
@@ -1294,11 +1338,11 @@ class CapMath {
     this.scale = input.stageBudgetUsd <= 0 || sum <= input.stageBudgetUsd ? 1 : input.stageBudgetUsd / sum;
     this.maxBudgetUsd = this.agentCap(1);
   }
-  developer(storyId) {
+  developer(storyId, attempt) {
     const price = this.priceOf(storyId);
     if (price === null)
       return this.agentCap(1 / this.worstCaseShares());
-    return this.agentCap(this.shareOf(price / (MAX_ATTEMPTS * (1 + REVIEWER_SHARE))));
+    return this.agentCap(this.shareOf(price / developerPriceDivisor(attempt)));
   }
   reviewer(storyId) {
     const price = this.priceOf(storyId);

package/dist/hooks/{chunk-s1c5h7yx.js → chunk-3w55tp71.js}

@@ -16,10 +16,10 @@ import {
   stageAt,
   validateRunBudget,
   validateRunFile
-} from "./chunk-4cp363kv.js";
+} from "./chunk-14zn51kh.js";
 import {
   EventLog
-} from "./chunk-rz541e2b.js";
+} from "./chunk-sae7sqty.js";
 import {
   backupPathFor,
   isAlive,
@@ -28,17 +28,17 @@ import {
   workspaceRootOfRunDir,
   writeAtomic,
   yamlScalar
-} from "./chunk-c6t5nx0r.js";
+} from "./chunk-qw73rdbr.js";
 import {
   noteDeprecations,
   openBlocks,
   parseQuestions
-} from "./chunk-rpcxsqh3.js";
+} from "./chunk-nadqsr3w.js";
 import {
   listRunDirs,
   parseYaml,
   parseYamlRepairing
-} from "./chunk-sq44k6g2.js";
+} from "./chunk-a6rpj2cp.js";
 
 // src/core/statusline/runSnapshot.ts
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "node:fs";
@@ -169,16 +169,21 @@ function emitBudgetYaml(budget) {
     `on_exceed: ${yamlScalar(budget.on_exceed)}`,
     ...budget.economy === DEFAULT_ECONOMY ? [] : [`economy: ${yamlScalar(budget.economy)}`],
     ...budget.on_host_tokens_exceed === DEFAULT_ON_HOST_TOKENS_EXCEED ? [] : [`on_host_tokens_exceed: ${yamlScalar(budget.on_host_tokens_exceed)}`],
+    ...budget.ceiling_host_tokens === null ? [] : [`ceiling_host_tokens: ${tokens(budget.ceiling_host_tokens)}`],
     "phases:"
   ];
   for (const phase of budget.phases) {
     const economy = phase.economy === null ? "" : `, economy: ${yamlScalar(phase.economy)}`;
-    lines.push(`  - {id: ${yamlScalar(phase.id)}, ceiling_usd: ${money(phase.ceiling_usd)}, ` + `spent_usd: ${money(phase.spent_usd)}${economy}}`);
+    const hostTokens = phase.ceiling_host_tokens === null ? "" : `, ceiling_host_tokens: ${tokens(phase.ceiling_host_tokens)}`;
+    lines.push(`  - {id: ${yamlScalar(phase.id)}, ceiling_usd: ${money(phase.ceiling_usd)}, ` + `spent_usd: ${money(phase.spent_usd)}${economy}${hostTokens}}`);
   }
   return `${lines.join(`
 `)}
 `;
 }
+function tokens(value) {
+  return String(Math.trunc(value));
+}
 
 // src/core/run/RunStore.ts
 class RunStoreError extends Error {
@@ -335,7 +340,12 @@ class RunStore {
         ...onDisk,
         phases: this.currentBudget.phases.map((mine) => {
           const theirs = onDisk.phases.find((p) => p.id === mine.id);
-          return theirs === undefined ? mine : { ...mine, ceiling_usd: theirs.ceiling_usd };
+          return theirs === undefined ? mine : {
+            ...mine,
+            ceiling_usd: theirs.ceiling_usd,
+            ceiling_host_tokens: theirs.ceiling_host_tokens,
+            economy: theirs.economy
+          };
         })
       };
     } catch {
@@ -571,6 +581,9 @@ function stageAtCursor(run, cursor) {
   return null;
 }
 function waitingFor(run, runDir) {
+  if (run.cancelled !== undefined && run.cancelled !== null) {
+    return { kind: "cancelled", message: cancelledMessage(run.cancelled), questions: [] };
+  }
   const cursor = run.cursor;
   if (cursor === null) {
     return { kind: "blocked", message: "run.yml records no cursor, so nothing can say where it is", questions: [] };
@@ -641,6 +654,12 @@ function waitingFor(run, runDir) {
       };
   }
 }
+function cancelledMessage(cancelled) {
+  const by = cancelled.by.trim() === "" ? "someone" : cancelled.by.trim();
+  const when = cancelled.at.trim() === "" ? "" : ` at ${cancelled.at.trim()}`;
+  const note = cancelled.note.trim();
+  return `run cancelled by ${by}${when}${note === "" ? "" : ` — ${note}`}`;
+}
 function openQuestionIds2(path) {
   if (!existsSync5(path))
     return [];

package/dist/hooks/{chunk-7y2dq0pj.js → chunk-5556vjt5.js}

@@ -1,6 +1,6 @@
 import {
   toolInput
-} from "./chunk-tzzwddct.js";
+} from "./chunk-bvm6vjrt.js";
 
 // src/hooks/lib/wouldBe.ts
 import { existsSync, readFileSync } from "node:fs";

package/dist/hooks/{chunk-t1ywrfr4.js → chunk-889tybxc.js}

@@ -3,7 +3,7 @@ import {
   withWorkspaceLock,
   workspaceRootOfFactsPath,
   writeAtomic
-} from "./chunk-c6t5nx0r.js";
+} from "./chunk-qw73rdbr.js";
 import {
   FACT_CONFIDENCES,
   FACT_KINDS,
@@ -14,7 +14,7 @@ import {
   isLive,
   isRetired,
   noteDeprecations
-} from "./chunk-rpcxsqh3.js";
+} from "./chunk-nadqsr3w.js";
 import {
   asDocument,
   isRecord,
@@ -26,15 +26,17 @@ import {
   result
 } from "./chunk-39zh2e44.js";
 import {
-  parseYaml
-} from "./chunk-sq44k6g2.js";
+  SRC_PATTERNS,
+  parseYaml,
+  readableSource
+} from "./chunk-a6rpj2cp.js";
 
 // src/core/facts/FactsStore.ts
 import { existsSync, readFileSync } from "node:fs";
 
 // src/core/facts/validateFactsFile.ts
-var ID_RE = /^F\d{3,6}$/;
-var Q_RE = /^Q\d{1,6}$/;
+var ID_RE = SRC_PATTERNS.fact;
+var Q_RE = SRC_PATTERNS.answer;
 function validateFactsFile(input) {
   const issues = [];
   const deprecations = [];
@@ -60,7 +62,7 @@ function validateFactsFile(input) {
     requireKeys(row, ["id", "fact", "area", "repos", "kind", "confidence", "source", "supersedes", "superseded_by", "retired"], path, issues);
     const id = typeof row.id === "string" ? row.id : "";
     if (!ID_RE.test(id))
-      issues.push({ path: `${path}.id`, message: "id must match ^F\\d{3,6}$" });
+      issues.push({ path: `${path}.id`, message: `id must match ${readableSource(ID_RE)}` });
     else if (byId.has(id))
       issues.push({ path: `${path}.id`, message: `duplicate fact id ${id}` });
     else {
@@ -82,7 +84,7 @@ function validateFactsFile(input) {
       requireKeys(row.source, ["who", "when", "run", "q"], `${path}.source`, issues);
       const q = row.source.q;
       if (typeof q === "string" && !Q_RE.test(q)) {
-        issues.push({ path: `${path}.source.q`, message: "expected ^Q\\d+$ or null" });
+        issues.push({ path: `${path}.source.q`, message: `expected ${readableSource(Q_RE)} or null` });
       }
     } else if (row.source !== undefined) {
       issues.push({ path: `${path}.source`, message: "expected a mapping" });