tldr-experts 0.8.0 → 0.9.1

package/CHANGELOG.md

@@ -1,5 +1,218 @@
 # Changelog
 
+
+## 0.9.1 — 2026-09-06
+
+### Added
+
+- **The docs site carries the whole CLI, generated from the registry.** The site's
+  `reference/cli.md` was a curated map that named about half the flags and pointed at
+  `docs/guide/08-cli-reference.md` for the rest — a file the site never builds, because
+  `docs/` is not in its `srcDir`. So the "exhaustive version" was not on the website at all,
+  and the owner went looking for `--yolo`, the flag that drops per-tool permission prompts,
+  and found it only in the changelog. `docs-site/scripts/gen-cli.ts` now writes
+  `/reference/cli-flags` and `/es/reference/cli-flags` at build time out of
+  `src/cli/helpText.ts` — all 33 commands, every flag with its meaning, every allowed value
+  spelled out from where it is enforced, every exit code, the environment variables, and the
+  rules that hold everywhere. Generated, gitignored and never hand-edited, for the same
+  reason the changelog page is: a second copy of 180 flags drifts on its first edit. The
+  Spanish page is framed in Spanish and keeps the meanings in English, like the release notes
+  and the sample CLI strings.
+- **`test/docs-cli-coverage.test.ts` — the docs are now a gate.** Nothing asserted that a
+  declared flag was EXPLAINED anywhere a reader who is not typing `--help` would look. It now
+  asserts both surfaces: the repo guide names every flag inside its own command's section,
+  and the generated page carries every command, flag, allowed value and exit code, with
+  `--yolo` explained on each of the four commands that take it rather than left bare in a
+  usage line. It also holds the env-var table against a grep of `src/` in both directions.
+- **`tldrx facts add` — the command the drive mandate has been naming since 0.8.0 (#161).** The
+  mandate tells the driver "a fact that must outlive the turn is `tldrx facts add`, which every
+  later prompt DOES read", and no such command was dispatched. What drivers did instead was edit
+  `.tldrx/memory/facts.yml` by hand, which walks past `FactsStore.append`'s 2000-character cap,
+  past its `…` marker and its `truncated: true` flag, and past `save()`'s validation — and a
+  fact cut mid-word with no marker is a record that does not know it is incomplete. It writes
+  through the store, under the workspace lock, with `--area` and `--decided-by owner|driver`
+  both required — a driver's default is never cited as the owner's decision, so the command
+  never lets the caller skip saying which of the two it was. The underlying `source.decided_by`
+  field stays additive (rows written before it existed, or by another writer, still validate)
+  and renders in every `{{facts}}` block as `· decided by owner` / `· decided by driver`,
+  appended only when present. Without `--run` it uses the one open run and refuses to guess
+  between several, recording the absence with its reason.
+- **The provider's token split on the `run.yml` task row (#159).** `input_tokens` and `output_tokens`
+  were parsed on every provider turn and reached the event log only, so `run.yml` — the file
+  every cost report and every resumed run reads — carried a dollar figure with no token figure
+  beside it, which is a number nobody can check against a price table. Both fields are additive,
+  written only when a turn reported them and only together — a half-reported split is exactly
+  as unverifiable as an absent one, so it is dropped rather than have the parse's own zero
+  default stand in for a real count — and distinct from `tokens`, which keeps its meaning as a
+  host declaration. `version: 1` is unchanged and every older row loads.
+
+### Fixed
+
+- **Two commands the docs told you to run that do not exist.** `tldrx facts add` was
+  instructed three times, in `07-claude-code.md`, `10-unattended-mode.md` and
+  `08-cli-reference.md`, as the way to record something that must outlive a turn — measured:
+  `tldrx facts` is `unknown command 'facts'`, exit 1. A row in `.tldrx/memory/facts.yml` is
+  written by answering an open question, so all three now say `tldrx answer <Qid> "…"`. And
+  the environment-variable section told you to check that `TLDRX_CLAUDE_BIN` took with
+  `tldrx run --dry-run`; `--dry-run` is `next`'s flag, not `run`'s. The guard that found them
+  is now part of the suite: every `tldrx …` line inside a code span or a fenced block, on
+  every page of the site and the guide plus the README, is parsed and held against the
+  registry — an unknown command or a flag its command does not declare fails the build.
+- **Two flags the guide never documented**, found by that test on its first run:
+  `tldrx dashboard --serve` (the default mode, and half of the two-modes refusal that
+  `--static` is the other half of) and `tldrx run status --verbose` (the two instants behind
+  a gate row). Both were real, both were reachable, and neither appeared in the page that
+  claims to be exhaustive. The shared spawn flags — `--model`, `--effort`, `--max-usd`,
+  `--ui`, `--prepare`/`--commit`, `--yolo` — now point from `run auto`, `seed triage` and
+  `expert train` at the one place they are explained, instead of appearing as bare tokens in
+  a usage line.
+- **A turn with no provider USD figure is unmetered, not a metered `$0.00` (#159).** `interpret`
+  wrote `cost_usd: 0, metered: true` for a Claude result document that carried no
+  `total_cost_usd` — contradicting the `metered` field's own contract three lines above it, and
+  letting a stage, and then a whole run, read `$0.00` after real turns had run. `metered` is now
+  derived from the presence of the figure, so those turns reach `cost_usd: null` +
+  `metered: false` and every report that already knows how to say "LOWER BOUND, not a total"
+  says it. No new `spendBasis` word: `absent` already meant this, and the fix is to make more
+  turns reach it honestly. Codex keeps its pin — its synthesized result document carries a
+  `total_cost_usd: 0` that is a placeholder, and reading it as a measurement would be the same
+  lie under a different provider.
+- **A refusal no longer discards a cost (#159).** `tldrx next --commit` returned
+  `EXIT_AGENT_FAILED` on a `questions.md` the §2.7 parser cannot read BEFORE it recorded the
+  task — so a turn that had already been paid for left no row anywhere, and the run's own ledger
+  was short by exactly the amount nobody could see. The row lands first and the refusal exits
+  after it. Because that refusal deliberately leaves the stage `running` so the operator can fix
+  the file and re-run, the banked row is marked `banked_before_refusal`, and the re-run is
+  matched to it by session id, declared cost and outputs — against MARKED rows only, so an
+  ordinary attempt a gate sent back is never mistaken for a re-read. Two things it deliberately
+  does NOT do. A result with no `session_id` is never fingerprinted at all: a null id identifies
+  nothing, so the second turn gets its own row carrying `dedupe: "none — no session id"` and the
+  reason is in `run.yml`, not only on the console — recording it twice is a smaller lie than
+  dropping a turn that ran. And the marker is single-use: the re-run that matches it stamps the
+  row `matched by the re-run committed at <at> — the marker is spent`, because a marker left
+  armed matched every later turn of the same shape for the life of the stage, and a real retry
+  after a gate reject — same session, same outputs, the same `null` cost — was silently dropped
+  as already recorded.
+- **An oversized reviewer verdict no longer takes the whole invocation's ledger with it
+  (#160).** The 4096-byte payload cap was enforced by `EventLog.append` throwing, nothing
+  wrapped the executor call, and the reviewer's verdict prose is the field that overflows — so
+  one wordy review escaped past `recordExecutorTasks` and `store.save()`, leaving the epic merge
+  on disk and every task's cost gone from `run.yml`. The cap is honoured, never raised: at the
+  emit seam the oversized `detail` becomes `detail_omitted`, carrying its own byte count and
+  pointing at a sidecar the seam wrote FIRST — `<phase>/log/overflow/<stamp>-<n>-<type>-detail.txt`,
+  one file per omission — while the verdict itself survives. It is not the review log: that file
+  does not exist yet when the event is built, it later holds only the final verdict's prose, and
+  a story that does not settle never gets one, so pointing at it was a promise about a file that
+  might never arrive. Around all of it, the executor call is now wrapped: ANY throw out of an
+  executor exits 5 with the stage failed by name and the loss said plainly — which rows this
+  invocation could not recover — where before the throw simply escaped, leaving the stage
+  `running` in a file nobody saved. It attributes that failure to nothing it did not do, either:
+  the row it marks `failed` is one THIS invocation recorded, so a retry whose executor throws
+  leaves the previous attempt's `done` turn exactly as it was rather than repainting it with an
+  error it never produced.
+- **A cached red base is no longer trusted forever (#162).** `04-build/preflight.yml` was
+  invalidated only by a base-sha comparison that no-ops when either sha is empty, and
+  `checked_at` was written and never read — so a red measured once came back from every later
+  `--prepare` in 0 seconds, over a base a live probe would show green, and the
+  `.tldrx/workspace.yml` fix that the refusal itself asks the operator to make was the one thing
+  the cache could not see. A red is now re-probed when the command hash differs, when the row is
+  older than 30 minutes, or always under `--prepare`. The hash covers the command together with
+  the workspace's whole declared command list, because the command string was already the join
+  key and hashing it alone would have changed nothing. A cached green keeps the rule it had, and
+  both new row fields are additive — an absent one invalidates nothing.
+- **`tldrx facts add --run <id>` no longer invents an absence.** `RunStore.resolve` answers
+  `{kind: "none"}` both to "no run is open" and to "there is no run by that id", and the command
+  took the one branch for both: a typo'd `--run` wrote the fact with `source.run: null` under the
+  stdout line "no run recorded: no open run to attribute it to" — a sentence that is false
+  whenever a run IS open, over provenance the operator had asked for by name and silently did not
+  get. An id nothing in `tldrx-work/` answers to is now refused before the store is opened: exit
+  3, nothing written, no event, and the id named back. The other two branches are unchanged —
+  one open run is used, several are still never guessed between.
+- **A fix list records the canonical 40-hex sha (#163).** `Resolved: yes <sha>` accepted 7-40
+  hex, so a sha that had lost a character read as a deliberate abbreviation: git resolved it,
+  the claim verified, and the audit record kept a form no later reader can tell from a prefix of
+  a different commit. The grammar is unchanged — demanding 40 would refuse the abbreviation a
+  person legitimately types — and the full object id is written back after the verification,
+  which is strictly stronger and refuses nobody.
+
+### Changed
+
+- **A command's subcommands are declared once.** They were written in the command module AND
+  needed by the docs generator, which would have made three copies of the same list. They now
+  live in `helpText.ts` beside the flags that are scoped by them, `subcommandsOf(name)` reads
+  them, and `Command.subcommands` is gone — one derivation, one implementation, per the house
+  invariant that the rest of the repo is already held to.
+
+## 0.9.0 — 2026-09-06
+
+### Added
+
+- **`AGENTS.md` is the canonical agent context, and `CLAUDE.md` imports it.** Four days of
+  live-maintenance tribal knowledge written down where every agent — Claude Code sessions in
+  fresh windows, Codex, anything reading `AGENTS.md` — starts with it: the golden evidence
+  rules (including "never quote a CLI flag from memory"), worktree+merge-wave discipline, the
+  five gates, the `gh run list --commit` lie and the non-empty-checks assertion, CHANGELOG
+  union and release ritual, the pinned house invariants, hermetic test rules, public-surface
+  guard rules, provider facts, and the known live traps. One file; the other imports it,
+  because two rule files drifting apart is the failure mode this repo exists to kill.
+- **Stack packs — `tldrx expert packs <enable|disable|status>`.** A `<lang>-stack` expert was a
+  name-only stub: the language name was the only stack-specific token in its body, so the
+  developer built from the model's habits and the reviewer had no stack checklist to hold a
+  story against (the repo's own audit scored the experts' knowledge 6/10). Off by default,
+  behind one per-project switch: `enable` materialises four language packs (TypeScript,
+  JavaScript, Python, .NET) and thirteen manifest-detected framework overlays (`react`,
+  `next-app-router`, `vite-react-spa`, `expo-router`, `node-express`, `prisma`,
+  `aspnet-minimal-apis`, `aspnet-controllers`, `mediatr-cqrs`, `efcore-npgsql`, `fastapi`,
+  `sqlalchemy-alembic`, `postgres-testcontainers`) into `.tldrx/experts/<lang>-stack/`, kept apart
+  from `knowledge/`, which no packs command ever touches. A pack is interrogative by owner
+  decision, never prescriptive over a repo's own conventions: **Defaults** apply only where the
+  project is silent and each one names the signal that overrides it, and **Checks** are questions
+  the Build reviewer now asks under every diff, each carrying a `verify:` hint and yielding to
+  the project's own convention when it has one. `enable` replaces a body only when it is an
+  untouched stub — an edited body is `kept:` and the command says so — and a body one shipment
+  behind is `upgraded:` rather than silently frozen at the version it was first materialised
+  with, told apart by two additive front-matter keys the materialised body carries: `pack:
+  <lang>@<hash>` names the shipment and `pack_body:` names the body's own bytes, so "somebody
+  edited this" (bytes differ) and "this is one shipment behind" (bytes match, shipment differs)
+  are never the same answer. `disable` removes `overlays/` and nothing else. Overlays are
+  detected from manifests (`package.json`'s two dependency groups kept apart, `*.csproj` /
+  `Directory.Packages.props`, `pyproject.toml` and `requirements*.txt`) and never inferred from
+  the language, because two workspaces of the same language can run opposite architectures — one
+  prescriptive ".NET pack" would be wrong for whichever one it disagreed with. No new prompt
+  mechanism: every renderer already prints an expert's body, so `body + overlays` composes once
+  in `loadExpertBundles` and reaches every stage prompt and the Build developer unchanged; the
+  reviewer, which carried no expert content at all, is handed the active packs' Checks explicitly
+  under a new `## Stack checks (the repo's own conventions win)` section, rendered only when BOTH
+  the workspace switch and the story's own stage-level `stack_experts` are on — so a developer
+  turn that was never shown a stack expert is never graded against Checks it was never briefed
+  on. `workspace.yml` gains `stack_packs` and `repos[].overlays` (each with its evidence string)
+  — additive, `version: 1` unchanged, and read back on every re-init so a regenerate never
+  silently turns the switch off. For a workspace that never threw the switch, this is today's
+  bytes, byte for byte. Once `enable` has run, `disable` stops the overlays and the reviewer's
+  Checks, but a pack body already materialised into `expert.md` stays there until you delete
+  it — `disable` removes only `overlays/`, by design (fix round 2, ruled) — and `enable` re-seeds
+  a body it finds missing or still an untouched stub.
+- **Project skills are named to the developer, independent of the packs switch.** A repo's own
+  `.claude/skills/*/SKILL.md` files are detected into `repos[].skills` and rendered under
+  `## Project skills` in every stage prompt and the Build developer's — name, description, and
+  the path to read — because skills are for doing and packs are for checking: the harness runs a
+  skill, the framework only says it exists. The Build developer's allowed tools gain `Skill` only
+  when that story's repo has one (whether an agent CLI's print mode actually denies an unlisted
+  `Skill` call is unverified — the framework's job is the list, not the enforcement). A skill git
+  does not track is flagged in the prompt and warned at Build start, by name and by repo, because
+  a story worktree carries tracked files only and the path the prompt names would not exist
+  there.
+- **The context ledger separates `expert.md` bytes from overlay bytes.** `pending.json` gains
+  `overlays`/`overlay_bytes` on a stack expert's row — additive and absent (not `0` or `[]`) when
+  nothing was inlined, so a bundle the switch never touched stays byte-identical to one written
+  before packs existed — and a new `project_skills_bytes` beside the other context groups, a
+  required count like its siblings, `0` when the workspace detected no project skills rather than
+  absent. `expert_md_bytes` keeps the meaning it has always had, `expert.md`'s own bytes and never
+  the composed total, and the operator line prints the two counts separately for the same reason.
+- Two out-of-scope findings from building this: stack-expert naming has two independent
+  derivations that agree today only because a mismatch fails silently (#152), and a project's own
+  `AGENTS.md`/`CLAUDE.md`/`CONTRIBUTING.md` are detected by presence only — their content never
+  reaches a stage prompt (#153).
+
 ## 0.8.0 — 2026-09-04
 
 ### Added

package/README.md

@@ -251,7 +251,7 @@ Most run-targeting commands take the id either way, a positional `<run>` or `--r
 `cost`, `note`, `gate template`, `questions`, `budget show`, `ship`, `tickets`, and `run attend` ·
 `status` · `estimate` · `auto` · `unlock` · `cancel`. `replay` and `retro` take the positional only
 — `--run` there is an unknown flag. `approve`, `reject`, `answer`, `interview`, `plan`,
-`story reopen`, `watch` and `run gates set` take `--run <id>` only.
+`story reopen`, `facts add`, `watch` and `run gates set` take `--run <id>` only.
 
 `tldrx retro --all` goes the other way: it reads **every** run in the workspace and prints one
 table of what keeps catching you — finding class × count × how many runs × one example with its
@@ -288,7 +288,7 @@ draws before installing anything.
 The reference guide, in `docs/guide/`: [1 Quick start](docs/guide/01-quick-start.md) ·
 [2 The loop](docs/guide/02-the-loop.md) (the four steps, what a stage file controls, the two execution modes) ·
 [3 Runs and gates](docs/guide/03-runs-and-gates.md) (`run new`→`retro`, gate policy, `run auto`, unlock/cancel, dashboard, tickets) ·
-[4 Experts](docs/guide/04-experts.md) (loading rules, role experts, training, levels) ·
+[4 Experts](docs/guide/04-experts.md) (loading rules, role experts, stack packs, training, levels) ·
 [5 Seeds and triage](docs/guide/05-seeds-and-triage.md) (`--seed`, `--from`, splitting a big seed) ·
 [6 Budgets and cost](docs/guide/06-budgets-and-cost.md) · [7 Claude Code](docs/guide/07-claude-code.md) (plugin, hooks, `/tldrx`) ·
 [8 CLI reference](docs/guide/08-cli-reference.md) (every command, flag and exit code) ·
@@ -314,6 +314,8 @@ back on the registry is 0.3.0.
 
 | Version | Date | Status | Contains |
 |---|---|---|---|
+| 0.9.1 | 2026-09-06 | `beta` | records and money that do not lie: a turn without a provider USD figure is unmetered, never a metered $0.00; a refusal no longer discards the turn's cost (banked first, deduped only against marked rows); an event over the 4096-byte cap spills its text beside the run and names it instead of losing every row of the invocation; preflight rows carry `command_hash` and their own `checked_at`, so a cached red is re-probed when the command changed, after 30 minutes, or under --prepare; the fix list writes back git's canonical 40-hex sha; `tldrx facts add` exists with owner/driver attribution rendered in prompts; run.yml rows carry the provider's token split only when reported |
+| 0.9.0 | 2026-09-06 | `beta` | opt-in stack packs: four language pack bodies and thirteen framework overlays detected from manifests, interrogative by default (Defaults yield to any repo signal, Checks are questions with `verify:` hints), behind one per-project switch (`tldrx expert packs enable`) that materialises into `.tldrx/experts/<lang>-stack/` without touching trained knowledge; the Build reviewer gets `## Stack checks (the repo's own conventions win)`; every stage names the project's `.claude/skills` and the developer may invoke them; workspace.yml records overlays with evidence and skills with a tracked flag, `version: 1` unchanged |
 | 0.8.0 | 2026-09-04 | `beta` | the unattended mandate learns to keep going: a `## Do not stop` section that defines the one thing allowed to end a run early (a strict blocker, named against the work it does not block), product questions parked as **guided** ones with lettered options and a pre-declared fallback, and a budget stop that asks instead of halting — written against 26 `budget.raised` and 26 `question.answered` events on a real ten-run workspace where the owner had to re-authorise "unattended" mid-run. Plus `tldrx drive --tldr`: a reporting contract for runs nobody will audit — the `run status` block plus three bullets of delta, no operator notes, minimal gate evidence, handoffs trimmed of prose but never of the citations `claim-sources` gates on. The ask channel stays the console and the framework names no chat vendor |
 | 0.7.0 | 2026-09-03 | `beta` | Codex as a second honest automated runner: recorded JSONL contract, structured envelopes, role-based sandboxes, token/session provenance, and explicitly unmetered USD accounting; Claude remains the default and the pilot harness. Also absorbs the citation-honesty work previously staged as 0.6.2: a `file` src resolves against the branches the run RECORDED and NAMES the unmerged ref instead of passing in silence or breaking with the temp dir (#140), watcher cards name it the same way (#143), and every run close reports the questions nobody answered (#141) |
 | 0.6.1 | 2026-09-03 | `beta` | dogfooding fixes from the first fully-unattended runs: blocked stories never lose uncommitted work (rescue commits + `story.work_rescued`), a fix is only Resolved with a reachable sha, re-entered stages reconstruct their handoff from the ledger instead of degrading it, the Cost header reports the phase and names its lower bound (shared `spendBasis`), feature presets resolve their per-repo maps, Plan sees the command allowlist its gate enforces, the landing sells the unattended flow |

package/dist/hooks/answer-capture.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   FactsStore
-} from "./chunk-ecfqpeyj.js";
+} from "./chunk-f6484ykg.js";
 import {
   parseHookInput,
   readStdin
@@ -9,9 +9,9 @@ import {
 import {
   EventLog,
   PHASE_ID_RE
-} from "./chunk-b9rjx4qc.js";
+} from "./chunk-fv66tdsm.js";
 import"./chunk-5w5eg00k.js";
-import"./chunk-6405vkzk.js";
+import"./chunk-8awygmqw.js";
 import {
   MAX_FACT_CHARS,
   detectAnswered,
@@ -19,7 +19,7 @@ import {
   recordAnswer,
   replaceBlock,
   serializeQuestions
-} from "./chunk-37fwvg3x.js";
+} from "./chunk-vyvjbbmb.js";
 import"./chunk-39zh2e44.js";
 import {
   PROJECT_WORK_DIR,

package/dist/hooks/budget-gate.js

@@ -29,15 +29,15 @@ import {
   validateRunBudget,
   wouldExceed,
   wouldExceedHostTokens
-} from "./chunk-md1c7z7q.js";
+} from "./chunk-hg43zexg.js";
 import {
   EventLog
-} from "./chunk-b9rjx4qc.js";
+} from "./chunk-fv66tdsm.js";
 import"./chunk-rrkdfk7s.js";
 import"./chunk-5w5eg00k.js";
 import {
   noteDeprecations
-} from "./chunk-37fwvg3x.js";
+} from "./chunk-vyvjbbmb.js";
 import"./chunk-39zh2e44.js";
 import {
   PROJECT_WORK_DIR,

package/dist/hooks/{chunk-pf9d8ag8.js → chunk-4w03q2kj.js}

@@ -7,7 +7,7 @@ import {
   nowRfc3339,
   openRunViews,
   validateRunBudget
-} from "./chunk-md1c7z7q.js";
+} from "./chunk-hg43zexg.js";
 import {
   EventLog,
   asRunFile,
@@ -19,7 +19,7 @@ import {
   isTerminal,
   stageAt,
   validateRunFile
-} from "./chunk-b9rjx4qc.js";
+} from "./chunk-fv66tdsm.js";
 import {
   backupPathFor,
   isAlive,
@@ -28,12 +28,12 @@ import {
   workspaceRootOfRunDir,
   writeAtomic,
   yamlScalar
-} from "./chunk-6405vkzk.js";
+} from "./chunk-8awygmqw.js";
 import {
   noteDeprecations,
   openBlocks,
   parseQuestions
-} from "./chunk-37fwvg3x.js";
+} from "./chunk-vyvjbbmb.js";
 import {
   listRunDirs,
   parseYaml,
@@ -80,11 +80,15 @@ function task(t, indent) {
   const cost = t.cost_usd === null ? "null" : money(t.cost_usd);
   const metered = t.metered === false ? ", metered: false" : "";
   const tokens = t.tokens === undefined ? "" : `, tokens: ${String(t.tokens)}`;
+  const inTokens = t.input_tokens === undefined ? "" : `, input_tokens: ${String(t.input_tokens)}`;
+  const outTokens = t.output_tokens === undefined ? "" : `, output_tokens: ${String(t.output_tokens)}`;
   return [
-    `${indent} - {id: ${yamlScalar(t.id)}, status: ${yamlScalar(t.status)}, expert: ${yamlScalar(t.expert)}, ` + `model: ${yamlScalar(t.model)}, cost_usd: ${cost}${metered}${tokens},`,
+    `${indent} - {id: ${yamlScalar(t.id)}, status: ${yamlScalar(t.status)}, expert: ${yamlScalar(t.expert)}, ` + `model: ${yamlScalar(t.model)}, cost_usd: ${cost}${metered}${tokens}${inTokens}${outTokens},`,
     `${inner}error: ${yamlScalar(t.error)}, session_id: ${yamlScalar(t.session_id)},`,
     `${inner}started_at: ${yamlScalar(t.started_at)}, ended_at: ${yamlScalar(t.ended_at)},`,
     ...t.stopped_by === undefined || t.stopped_by === null ? [] : [`${inner}stopped_by: ${yamlScalar(t.stopped_by)},`],
+    ...t.banked_before_refusal === undefined ? [] : [`${inner}banked_before_refusal: true,`],
+    ...t.dedupe === undefined ? [] : [`${inner}dedupe: ${yamlScalar(t.dedupe)},`],
     `${inner}outputs: ${inlineList(t.outputs)}}`
   ].join(`
 `);

package/dist/hooks/{chunk-6405vkzk.js → chunk-8awygmqw.js}

@@ -143,6 +143,7 @@ function inlineList(values) {
 }
 function emitFact(fact, indent = "  ") {
   const inner = `${indent}  `;
+  const decidedBy = fact.source.decided_by === undefined ? "" : `, decided_by: ${yamlScalar(fact.source.decided_by)}`;
   const lines = [
     `${indent}- id: ${yamlScalar(fact.id)}`,
     `${inner}fact: ${yamlScalar(fact.fact)}`,
@@ -150,7 +151,7 @@ function emitFact(fact, indent = "  ") {
     `${inner}repos: ${inlineList(fact.repos)}`,
     `${inner}kind: ${yamlScalar(fact.kind)}`,
     `${inner}confidence: ${yamlScalar(fact.confidence)}`,
-    `${inner}source: {who: ${yamlScalar(fact.source.who)}, when: ${yamlScalar(fact.source.when)}, ` + `run: ${yamlScalar(fact.source.run)}, q: ${yamlScalar(fact.source.q)}}`,
+    `${inner}source: {who: ${yamlScalar(fact.source.who)}, when: ${yamlScalar(fact.source.when)}, ` + `run: ${yamlScalar(fact.source.run)}, q: ${yamlScalar(fact.source.q)}${decidedBy}}`,
     `${inner}supersedes: ${yamlScalar(fact.supersedes)}`,
     `${inner}superseded_by: ${yamlScalar(fact.superseded_by)}`
   ];

package/dist/hooks/{chunk-ecfqpeyj.js → chunk-f6484ykg.js}

@@ -3,7 +3,7 @@ import {
   withWorkspaceLock,
   workspaceRootOfFactsPath,
   writeAtomic
-} from "./chunk-6405vkzk.js";
+} from "./chunk-8awygmqw.js";
 import {
   FACT_CONFIDENCES,
   FACT_KINDS,
@@ -14,7 +14,7 @@ import {
   isLive,
   isRetired,
   noteDeprecations
-} from "./chunk-37fwvg3x.js";
+} from "./chunk-vyvjbbmb.js";
 import {
   asDocument,
   isRecord,
@@ -86,6 +86,13 @@ function validateFactsFile(input) {
       if (typeof q === "string" && !Q_RE.test(q)) {
         issues.push({ path: `${path}.source.q`, message: `expected ${readableSource(Q_RE)} or null` });
       }
+      const decidedBy = row.source.decided_by;
+      if (decidedBy !== undefined && decidedBy !== "owner" && decidedBy !== "driver") {
+        issues.push({
+          path: `${path}.source.decided_by`,
+          message: "expected owner, driver or absent"
+        });
+      }
     } else if (row.source !== undefined) {
       issues.push({ path: `${path}.source`, message: "expected a mapping" });
     }

package/dist/hooks/{chunk-b9rjx4qc.js → chunk-fv66tdsm.js}

@@ -698,6 +698,20 @@ function validateRunFile(input) {
           if (task.cost_usd === null && task.metered !== false) {
             issues.push({ path: `${tp}.metered`, message: "a null cost_usd must be marked `metered: false`" });
           }
+          if (task.banked_before_refusal !== undefined && task.banked_before_refusal !== true) {
+            issues.push({ path: `${tp}.banked_before_refusal`, message: "expected `true` or absent" });
+          }
+          if (task.dedupe !== undefined && typeof task.dedupe !== "string") {
+            issues.push({ path: `${tp}.dedupe`, message: "expected a string" });
+          }
+          for (const key of ["input_tokens", "output_tokens"]) {
+            const value = task[key];
+            if (value === undefined)
+              continue;
+            if (typeof value !== "number" || !Number.isFinite(value) || value < 0) {
+              issues.push({ path: `${tp}.${key}`, message: "expected a number >= 0" });
+            }
+          }
           if (typeof task.cost_usd === "number")
             spentFromTasks += task.cost_usd;
           checkOrder(task.started_at, task.ended_at, tp, issues);

package/dist/hooks/{chunk-md1c7z7q.js → chunk-hg43zexg.js}

@@ -1,7 +1,7 @@
 import {
   EVIDENCE_FILE,
   gateEvidenceRelPath
-} from "./chunk-b9rjx4qc.js";
+} from "./chunk-fv66tdsm.js";
 import {
   MAX_PLAN_STORIES,
   MAX_STORIES_PER_WAVE,
@@ -752,33 +752,50 @@ function pathsIntersect(a, b) {
 // src/core/experts/expertKnowledge.ts
 var DEFAULT_KNOWLEDGE_MAX_BYTES = 48 * 1024;
 
-// src/core/facilitator/dispatchNotes.ts
-var DISPATCH_NOTES_MAX_BYTES = 8 * 1024;
-
-// src/core/experts/stackExperts.ts
+// src/core/experts/workspaceRepos.ts
 import { existsSync as existsSync4, readFileSync as readFileSync4 } from "node:fs";
 import { join as join5 } from "node:path";
-function stackExpertNames(root, repos) {
+function readWorkspaceDocument(root) {
   const path = join5(root, PROJECT_FRAMEWORK_DIR, "workspace.yml");
   if (!existsSync4(path))
-    return [];
-  let doc;
+    return null;
   try {
-    doc = parseYaml(readFileSync4(path, "utf8"));
+    return parseYaml(readFileSync4(path, "utf8"));
   } catch {
-    return [];
+    return null;
   }
-  const list = doc?.repos;
+}
+function workspaceRepoRows(doc) {
+  if (typeof doc !== "object" || doc === null)
+    return [];
+  const list = doc.repos;
   if (!Array.isArray(list))
     return [];
-  const names = [];
+  const rows = [];
   for (const row of list) {
-    if (typeof row?.name !== "string" || !repos.includes(row.name))
+    if (typeof row !== "object" || row === null)
       continue;
-    const stack = Array.isArray(row.stack) ? row.stack : [];
-    for (const language of stack) {
-      if (typeof language !== "string" || language === "")
-        continue;
+    const record = row;
+    if (typeof record.name !== "string")
+      continue;
+    rows.push(record);
+  }
+  return rows;
+}
+function strings(value) {
+  return Array.isArray(value) ? value.filter((item) => typeof item === "string") : [];
+}
+
+// src/core/facilitator/dispatchNotes.ts
+var DISPATCH_NOTES_MAX_BYTES = 8 * 1024;
+
+// src/core/experts/stackExperts.ts
+function stackExpertNames(root, repos) {
+  const names = [];
+  for (const row of workspaceRepoRows(readWorkspaceDocument(root))) {
+    if (!repos.includes(row.name))
+      continue;
+    for (const language of strings(row.stack).filter((item) => item !== "")) {
       const expert = `${language}-stack`;
       if (!names.includes(expert))
         names.push(expert);

package/dist/hooks/no-reask.js

@@ -7,7 +7,7 @@ import {
 } from "./chunk-cf4az0j5.js";
 import {
   FactsStore
-} from "./chunk-ecfqpeyj.js";
+} from "./chunk-f6484ykg.js";
 import {
   allow,
   deny,
@@ -17,11 +17,11 @@ import {
   runHook
 } from "./chunk-2y3kwfrx.js";
 import"./chunk-x3zy7zrn.js";
-import"./chunk-6405vkzk.js";
+import"./chunk-8awygmqw.js";
 import {
   openBlocks,
   parseQuestions
-} from "./chunk-37fwvg3x.js";
+} from "./chunk-vyvjbbmb.js";
 import"./chunk-39zh2e44.js";
 import {
   factsPath,

package/dist/hooks/session-start.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import"./chunk-ecfqpeyj.js";
+import"./chunk-f6484ykg.js";
 import {
   allow,
   readPayload,
@@ -15,7 +15,7 @@ import {
   openQuestions,
   runSnapshot,
   whatIsWaiting
-} from "./chunk-pf9d8ag8.js";
+} from "./chunk-4w03q2kj.js";
 import {
   evidencePath,
   expertsDir,
@@ -25,17 +25,17 @@ import {
   pathsIntersect,
   readExpertDomain,
   stackExpertNames
-} from "./chunk-md1c7z7q.js";
+} from "./chunk-hg43zexg.js";
 import {
   parseEvidence
-} from "./chunk-b9rjx4qc.js";
+} from "./chunk-fv66tdsm.js";
 import"./chunk-rrkdfk7s.js";
 import"./chunk-5w5eg00k.js";
-import"./chunk-6405vkzk.js";
+import"./chunk-8awygmqw.js";
 import {
   openBlocks,
   parseQuestions
-} from "./chunk-37fwvg3x.js";
+} from "./chunk-vyvjbbmb.js";
 import {
   isRecord
 } from "./chunk-39zh2e44.js";
@@ -925,11 +925,19 @@ function evidenceCount(expert) {
 // src/core/experts/roleExperts.ts
 import { join as join5 } from "node:path";
 var ROLE_TEMPLATES_DIR = join5(TEMPLATES_DIR, "experts");
+// src/core/experts/packSections.ts
+var PACK_MAX_BYTES = 24 * 1024;
 // src/core/experts/domainRank.ts
 var MAX_GRAPH_BYTES = 64 * 1024 * 1024;
+// src/core/experts/packTemplates.ts
+import { join as join6 } from "node:path";
+var PACK_TEMPLATES_DIR = join6(TEMPLATES_DIR, "experts", "stack");
+var OVERLAY_TEMPLATES_DIR = join6(PACK_TEMPLATES_DIR, "overlays");
+var PACK_BODY_MAX_BYTES = 8 * 1024;
+var OVERLAY_MAX_BYTES = 6 * 1024;
 // src/core/training/mineRuns.ts
 import { existsSync as existsSync6, readFileSync as readFileSync5, readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
-import { join as join6, relative as relative2 } from "node:path";
+import { join as join7, relative as relative2 } from "node:path";
 var MAX_RUN_BYTES = 64 * 1024;
 var MINED_NAMES = ["handoff.md", "retro.md"];
 var MAX_DEPTH = 4;
@@ -953,7 +961,7 @@ function findMined(dir, depth) {
   for (const entry of [...entries].sort()) {
     if (entry.startsWith("."))
       continue;
-    const abs = join6(dir, entry);
+    const abs = join7(dir, entry);
     let isDir = false;
     try {
       isDir = statSync4(abs).isDirectory();

package/dist/hooks/statusline.js

@@ -2,13 +2,13 @@
 import {
   bar,
   runSnapshot
-} from "./chunk-pf9d8ag8.js";
-import"./chunk-md1c7z7q.js";
-import"./chunk-b9rjx4qc.js";
+} from "./chunk-4w03q2kj.js";
+import"./chunk-hg43zexg.js";
+import"./chunk-fv66tdsm.js";
 import"./chunk-rrkdfk7s.js";
 import"./chunk-5w5eg00k.js";
-import"./chunk-6405vkzk.js";
-import"./chunk-37fwvg3x.js";
+import"./chunk-8awygmqw.js";
+import"./chunk-vyvjbbmb.js";
 import"./chunk-39zh2e44.js";
 import {
   findWorkspaceRoot,