wendkeep 0.66.4 → 0.67.0

package/packages/harness/src/sensors-core.mjs

@@ -6,6 +6,38 @@ import { existsSync, readFileSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 
 export const SENSOR_VAULT_ENV = 'WENDKEEP_SENSOR_VAULT';
+const SENSOR_OUTPUT_MAX_BUFFER = 8 * 1024 * 1024;
+const SENSOR_DIAGNOSTIC_MAX_LENGTH = 2000;
+
+function sanitizeSensorDiagnostic(value) {
+  return String(value || '')
+    .replace(/\x1B\[[0-?]*[ -/]*[@-~]/g, '')
+    .replace(/\b(gh[pousr]_[A-Za-z0-9_]{12,})\b/g, '[REDACTED_SECRET]')
+    .replace(/\b(sk-[A-Za-z0-9_-]{12,})\b/g, '[REDACTED_SECRET]')
+    .replace(/\b(whsec_[A-Za-z0-9_/-]{8,})\b/g, '[REDACTED_SECRET]')
+    .replace(/\b(xox[baprs]-[A-Za-z0-9-]{12,})\b/g, '[REDACTED_SECRET]')
+    .replace(/\b([A-Z0-9_]*(?:TOKEN|SECRET|PASSWORD|API_KEY)[A-Z0-9_]*)\s*[:=]\s*["']?[^"'\s]+/gi, '$1=[REDACTED_SECRET]')
+    .replace(/:\/\/([^:\s/@]+):([^@\s/]+)@/g, '://[REDACTED_SECRET]@')
+    .replace(/\r/g, '')
+    .trim();
+}
+
+function sensorFailureNote(result = {}) {
+  const status = result.status ?? 'null';
+  const header = [
+    `exit=${status}`,
+    ...(result.signal ? [`signal=${result.signal}`] : []),
+  ].join(' ');
+  const detail = sanitizeSensorDiagnostic([
+    result.error?.message,
+    result.stdout,
+    result.stderr,
+  ].filter(Boolean).join('\n'));
+  if (!detail) return header;
+  const room = SENSOR_DIAGNOSTIC_MAX_LENGTH - header.length - 1;
+  const bounded = detail.length > room ? `…${detail.slice(-(room - 1))}` : detail;
+  return `${header}\n${bounded}`;
+}
 
 export function sensorProcessEnv(vaultBase, inherited = process.env) {
   return {
@@ -59,8 +91,16 @@ export function runSensors(sensors, ids, { spawn = spawnSync, cwd, env, now } =
   for (const id of ids) {
     const s = byId[id];
     if (!s) { evidence.push({ id, status: 'red', ts, severity: 'critical', note: 'sensor não definido' }); continue; }
-    const r = spawn(s.command, [], { cwd, shell: true, stdio: 'ignore', ...(env ? { env } : {}) });
+    const r = spawn(s.command, [], {
+      cwd,
+      shell: true,
+      encoding: 'utf8',
+      maxBuffer: SENSOR_OUTPUT_MAX_BUFFER,
+      stdio: ['ignore', 'pipe', 'pipe'],
+      ...(env ? { env } : {}),
+    });
     const entry = { id, status: (r.status ?? 1) === 0 ? 'green' : 'red', ts, severity: s.severity || 'critical' };
+    if (entry.status === 'red') entry.note = sensorFailureNote(r);
     if (s.type === 'mutation' && s.report) {
       // Delegated mutation (Wave B): read the tool's mutation-testing-elements report and
       // attach surviving mutants so verify can turn them into fix tasks.

package/packages/integrations/src/prompt-content.mjs

@@ -18,3 +18,126 @@ export function redactSecrets(text) {
     .replace(/\b([A-Z0-9_]*(?:TOKEN|SECRET|PASSWORD|API_KEY)[A-Z0-9_]*)\s*[:=]\s*["']?[^"'\s]+/gi, '$1=[REDACTED_SECRET]')
     .replace(/:\/\/([^:\s/@]+):([^@\s/]+)@/g, '://[REDACTED_SECRET]@');
 }
+
+function metadataPayloadLine(name, line) {
+  if (name === 'citation_entries') {
+    return /\|note=\[[^\]]*\]\s*$/i.test(line)
+      || /^[^\s<>]+:\d+(?:-\d+)?(?:\|[^\s].*)?$/i.test(line);
+  }
+  if (name === 'rollout_ids') {
+    return /^(?:[0-9a-f]{8,}(?:-[0-9a-f-]+)*|019f-[A-Za-z0-9_-]+)$/i.test(line);
+  }
+  return false;
+}
+
+function consumeTruncatedMetadata(source, name, tagEnd) {
+  let cursor = tagEnd;
+  let mode = name;
+  let openingLine = true;
+
+  while (cursor < source.length) {
+    const newline = source.indexOf('\n', cursor);
+    const lineEnd = newline === -1 ? source.length : newline;
+    const line = source.slice(cursor, lineEnd).replace(/\r$/, '');
+    const clean = line.trim();
+
+    if (!clean) {
+      if (!openingLine) return cursor;
+    } else if (/^<\/?(?:oai-mem-citation|citation_entries|rollout_ids)\b/i.test(clean)) {
+      const nested = [...clean.matchAll(/<(citation_entries|rollout_ids)\b[^>]*>/gi)].at(-1);
+      if (nested) mode = nested[1].toLowerCase();
+    } else if (!(openingLine && name !== 'oai-mem-citation') && !metadataPayloadLine(mode, clean)) {
+      return cursor;
+    }
+
+    if (newline === -1) return source.length;
+    cursor = newline + 1;
+    openingLine = false;
+  }
+  return cursor;
+}
+
+function openingPayloadLooksStructural(source, opening) {
+  const name = opening[1].toLowerCase();
+  const tagEnd = opening.index + opening[0].length;
+  const rest = source.slice(tagEnd);
+  if (new RegExp(`<\/${name}\\s*>`, 'i').test(rest)) return true;
+
+  if (name === 'oai-mem-citation') {
+    const child = /^[\t\r\n ]*<(citation_entries|rollout_ids)\b[^>]*>/i.exec(rest);
+    if (!child) return !rest.trim();
+    const childRest = rest.slice(child[0].length);
+    const lineEnd = childRest.search(/\r?\n/u);
+    const sameLine = childRest.slice(0, lineEnd === -1 ? childRest.length : lineEnd);
+    if (!sameLine.trim()) return true;
+    if (!/^[\t ]/u.test(childRest)) return true;
+    if (/^<\/?(?:oai-mem-citation|citation_entries|rollout_ids)\b/i.test(sameLine.trim())) return true;
+    return metadataPayloadLine(child[1].toLowerCase(), sameLine.trim());
+  }
+
+  const lineEnd = rest.search(/\r?\n/u);
+  const sameLine = rest.slice(0, lineEnd === -1 ? rest.length : lineEnd);
+  if (!sameLine.trim()) return true;
+  if (!/^[\t ]/u.test(rest)) return true;
+  if (/^<\/?(?:oai-mem-citation|citation_entries|rollout_ids)\b/i.test(sameLine.trim())) return true;
+  return metadataPayloadLine(name, sameLine.trim());
+}
+
+function metadataStart(source, opening) {
+  const tagStart = opening.index;
+  const before = source.slice(0, tagStart);
+  const adjacentSession = /<\/session>[\t\r\n ]*$/i.exec(before);
+  if (adjacentSession) return adjacentSession.index;
+
+  if (!openingPayloadLooksStructural(source, opening)) return -1;
+
+  const lineStart = before.lastIndexOf('\n') + 1;
+  if (!before.slice(lineStart).trim()) return tagStart;
+
+  const name = opening[1].toLowerCase();
+  if (name === 'oai-mem-citation'
+    && tagStart > 0
+    && !/\s/u.test(source[tagStart - 1])) {
+    return tagStart;
+  }
+  return -1;
+}
+
+function findAssistantMetadataRemoval(source) {
+  const openings = source.matchAll(/<(oai-mem-citation|citation_entries|rollout_ids)\b[^>]*>/gi);
+  for (const opening of openings) {
+    const start = metadataStart(source, opening);
+    if (start < 0) continue;
+
+    const name = opening[1].toLowerCase();
+    const tagEnd = opening.index + opening[0].length;
+    const closing = new RegExp(`<\/${name}\\s*>`, 'i').exec(source.slice(tagEnd));
+    const end = closing
+      ? tagEnd + closing.index + closing[0].length
+      : consumeTruncatedMetadata(source, name, tagEnd);
+    return { start, end };
+  }
+  return null;
+}
+
+function removeAssistantMetadata(source, removal) {
+  const before = source.slice(0, removal.start).trimEnd();
+  const after = source.slice(removal.end).trimStart();
+  if (!before) return after;
+  if (!after) return before;
+  return `${before}\n${after}`;
+}
+
+export function sanitizeAssistantMessage(text) {
+  let source = String(text || '');
+  if (!source) return '';
+
+  while (source) {
+    const removal = findAssistantMetadataRemoval(source);
+    if (!removal) break;
+    const next = removeAssistantMetadata(source, removal);
+    if (next.length >= source.length) break;
+    source = next;
+  }
+  return source;
+}

package/packages/integrations/src/transcripts.mjs

@@ -1,4 +1,8 @@
-import { isBootstrapPrompt, redactSecrets } from './prompt-content.mjs';
+import {
+  isBootstrapPrompt,
+  redactSecrets,
+  sanitizeAssistantMessage,
+} from './prompt-content.mjs';
 import {
   addUsage,
   emptyTokenUsage,
@@ -73,6 +77,14 @@ function addConversation(turn, role, value) {
   }
 }
 
+function addAssistantMessage(result, turn, value) {
+  const text = sanitizeAssistantMessage(value);
+  if (!text) return;
+  addUnique(result.assistantMessages, text);
+  addUnique(turn.assistantMessages, text);
+  addConversation(turn, 'Assistente', text);
+}
+
 function normalizeRoot(value) {
   return String(value || '').replace(/\\+/g, '/').replace(/\/+$/, '');
 }
@@ -207,9 +219,7 @@ export function parseCodexTranscriptContent(content, options = {}) {
       const text = event.payload.message || event.payload.text || '';
       if (text) {
         const turn = ensureTurn(event.payload.turn_id || result.latestTurnId, event.timestamp);
-        addUnique(result.assistantMessages, text);
-        addUnique(turn.assistantMessages, text);
-        addConversation(turn, 'Assistente', text);
+        addAssistantMessage(result, turn, text);
       }
       continue;
     }
@@ -234,9 +244,7 @@ export function parseCodexTranscriptContent(content, options = {}) {
         addConversation(turn, 'Usuário', text);
       }
       if (payload.role === 'assistant') {
-        addUnique(result.assistantMessages, text);
-        addUnique(turn.assistantMessages, text);
-        addConversation(turn, 'Assistente', text);
+        addAssistantMessage(result, turn, text);
       }
       continue;
     }
@@ -356,9 +364,7 @@ export function parseClaudeTranscriptContent(content, options = {}) {
       const blocks = Array.isArray(event.message?.content) ? event.message.content : [];
       for (const block of blocks) {
         if (block?.type === 'text' && block.text && block.text.trim()) {
-          addUnique(result.assistantMessages, block.text);
-          addUnique(turn.assistantMessages, block.text);
-          addConversation(turn, 'Assistente', block.text);
+          addAssistantMessage(result, turn, block.text);
         } else if (block?.type === 'tool_use') {
           const name = block.name || 'tool_use';
           addUnique(result.tools, name);

package/src/cost.mjs

@@ -196,19 +196,53 @@ function opt(argv, name) {
   return eq ? eq.slice(name.length + 1) : undefined;
 }
 
+const REBUILD_LIMIT_FLAGS = [
+  ['--max-graph-nodes', 'maxGraphNodes'],
+  ['--max-fallback-days', 'maxFallbackDays'],
+  ['--max-fallback-candidates', 'maxFallbackCandidates'],
+];
+
+export function parseRebuildOptions(argv = []) {
+  const session = opt(argv, '--session') || '';
+  const overrides = {};
+  for (const [flag, key] of REBUILD_LIMIT_FLAGS) {
+    const present = argv.includes(flag) || argv.some((arg) => arg.startsWith(`${flag}=`));
+    if (!present) continue;
+    const value = Number(opt(argv, flag));
+    if (!Number.isSafeInteger(value) || value <= 0) {
+      return { ok: false, exitCode: 2, code: 'INVALID_LIMIT_OVERRIDE' };
+    }
+    overrides[key] = value;
+  }
+  if (Object.keys(overrides).length > 0 && !session) {
+    return { ok: false, exitCode: 2, code: 'TARGET_REQUIRED_FOR_LIMIT_OVERRIDE' };
+  }
+  return {
+    ok: true,
+    options: {
+      apply: argv.includes('--apply'),
+      session,
+      limit: Number(opt(argv, '--limit')) || 0,
+      limits: { ...overrides },
+      overrides: { ...overrides },
+    },
+  };
+}
+
 export function runCost(argv) {
   const vaultRaw = opt(argv, '--vault') || process.env.OBSIDIAN_VAULT_PATH;
   if (!vaultRaw) { process.stderr.write('wendkeep cost: no vault (--vault or OBSIDIAN_VAULT_PATH).\n'); process.exit(2); }
   const vaultBase = isAbsolute(vaultRaw) ? vaultRaw : resolve(process.cwd(), vaultRaw);
   if (!existsSync(vaultBase)) { process.stderr.write(`wendkeep cost: vault not found: ${vaultBase}\n`); process.exit(2); }
   if (argv[0] === 'rebuild') {
-    const report = rebuildSessionCosts(vaultBase, {
-      apply: argv.includes('--apply'),
-      session: opt(argv, '--session') || '',
-      limit: Number(opt(argv, '--limit')) || 0,
-    });
+    const parsed = parseRebuildOptions(argv);
+    if (!parsed.ok) {
+      process.stderr.write(`wendkeep cost rebuild: ${parsed.code}\n`);
+      process.exit(parsed.exitCode);
+    }
+    const report = rebuildSessionCosts(vaultBase, parsed.options);
     if (argv.includes('--json')) process.stdout.write(`${JSON.stringify(report, null, 2)}\n`);
-    else process.stdout.write(`cost rebuild (${report.mode}): ${report.scanned} lidas · ${report.changed} alteradas · ${report.unchanged} iguais · ${report.missing.length} sem fonte · ${report.errors.length} erros\n${report.mode === 'apply' ? 'Relatório: .brain/COST_REBUILD.json\n' : 'Nenhum arquivo foi alterado; use --apply para gravar.\n'}`);
+    else process.stdout.write(`cost rebuild (${report.mode}): ${report.scanned} lidas · ${report.changed} alteradas · ${report.unchanged} iguais · ${report.degraded} degradadas · ${report.stale} stale · ${report.missing} sem fonte · ${report.errors} erros\n${report.mode === 'apply' ? 'Relatório: .brain/COST_REBUILD.json\n' : 'Nenhum arquivo foi alterado; use --apply para gravar.\n'}`);
     process.exit(report.ok ? 0 : 1);
   }
   const agg = collectVaultCost(vaultBase, { since: opt(argv, '--since') });

package/src/doctor.mjs

@@ -4,7 +4,7 @@ import { spawnSync } from 'node:child_process';
 import { existsSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { checkHarness, checkVaultLinks, checkSessionActivity, checkStackedFrontmatter, renderStackedFrontmatterLines, checkUnpricedModels, renderUnpricedModelLines, checkStaleDerivedSections, renderStaleDerivedSectionLines } from '../hooks/harness-doctor.mjs';
+import { checkHarness, checkVaultLinks, checkSessionActivity, checkStackedFrontmatter, renderStackedFrontmatterLines, checkUnpricedModels, renderUnpricedModelLines, checkStaleDerivedSections, renderStaleDerivedSectionLines, checkSessionObservability, renderSessionObservabilityLines } from '../hooks/harness-doctor.mjs';
 import { checkSyncDefs } from './sync-defs.mjs';
 import { resolveProjectVault } from './project-vault.mjs';
 
@@ -79,6 +79,9 @@ export function runDoctor(argv) {
   // 3d. Seções derivadas do corpo que ficaram para trás do Encerramento (notas pré-0.53.0).
   process.stdout.write(`\n${renderStaleDerivedSectionLines(checkStaleDerivedSections(vaultBase)).join('\n')}\n`);
 
+  // 3e. Observabilidade materializada: schema vigente não basta sem frontier + manifest frescos.
+  process.stdout.write(`\n${renderSessionObservabilityLines(checkSessionObservability(vaultBase)).join('\n')}\n`);
+
   // 4. Sessão: não mente "inativa" quando há atividade recente (workflow/subagente em background).
   const act = checkSessionActivity(vaultBase);
   if (act.lastSession) {

package/src/profile.mjs

@@ -3,10 +3,12 @@
 import { mutateSessionRegistry, readSessionRegistry } from '../hooks/obsidian-common.mjs';
 import {
   DEFAULT_OPERATING_PROFILE,
+  evaluateTaskOperatingProfileLease,
   normalizeOperatingProfile,
   resolveOperatingProfile,
   setOperatingProfile,
 } from './operating-profile.mjs';
+import { setSessionTaskOperatingProfile } from '../hooks/operating-profile-task-store.mjs';
 import { resolve } from 'node:path';
 import { findProjectBinding, resolveProjectVault, updateProjectBinding } from './project-vault.mjs';
 
@@ -14,12 +16,14 @@ export const PROFILE_HELP = `wendkeep profile <subcommand>
 
   status [--session <id>]
   use <OFF|FLOW|GUIDE|GOVERN|ASSURE> [--session <id>]
+  route <FLOW|GUIDE|GOVERN|ASSURE> --session <id> --reason <text>
 
-Common options: --project <path> --vault <path> --session <id> --json
+Common options: --project <path> --vault <path> --session <id> --json --reason <text>
+route creates a task-scoped choice for the current request; it never selects OFF.
 The Keep Core (Vault, session, and memory) remains active under every profile.
 `;
 
-const VALUE_OPTIONS = new Set(['--project', '--vault', '--session']);
+const VALUE_OPTIONS = new Set(['--project', '--vault', '--session', '--reason']);
 const FLAG_OPTIONS = new Set(['--json']);
 
 function optionValue(argv, name) {
@@ -32,8 +36,8 @@ function commandArgs(argv) {
   const values = [];
   for (let index = 0; index < argv.length; index += 1) {
     const value = argv[index];
-    if (['--project', '--vault', '--session'].includes(value)) { index += 1; continue; }
-    if (value.startsWith('--project=') || value.startsWith('--vault=') || value.startsWith('--session=')) continue;
+    if (['--project', '--vault', '--session', '--reason'].includes(value)) { index += 1; continue; }
+    if (value.startsWith('--project=') || value.startsWith('--vault=') || value.startsWith('--session=') || value.startsWith('--reason=')) continue;
     if (value === '--json') continue;
     values.push(value);
   }
@@ -76,8 +80,15 @@ function canonicalPath(value) {
 function output(payload, json) {
   if (json) process.stdout.write(`${JSON.stringify(payload)}\n`);
   else {
-    const scope = payload.scope === 'session' ? `session ${payload.session_id}` : 'project';
-    process.stdout.write(`${payload.profile} (${scope}; ${payload.source})\n`);
+    const scope = payload.scope === 'task'
+      ? `task ${payload.session_id}`
+      : payload.scope === 'session' ? `session ${payload.session_id}` : 'project';
+    const details = [scope, payload.source];
+    if (payload.session_id && payload.base_profile && payload.task_lease?.state) {
+      details.push(`base=${payload.base_profile}/${payload.base_source}`);
+      details.push(`lease=${payload.task_lease.state}`);
+    }
+    process.stdout.write(`${payload.profile} (${details.join('; ')})\n`);
   }
   if (payload.binding_error) {
     const code = payload.binding_error.code || 'WENDKEEP_VAULT_CONFIG_INVALID';
@@ -129,10 +140,7 @@ export function setSessionOperatingProfile(vaultBase, sessionId, profile, { now
   });
 }
 
-function sessionProfile(vaultBase, sessionId, projectResolved) {
-  const sessions = readSessionRegistry(vaultBase).sessions || {};
-  if (!Object.hasOwn(sessions, sessionId)) throw new Error(`sessão não encontrada: ${sessionId}`);
-  const entry = sessions[sessionId];
+function sessionBaseProfile(entry, projectResolved) {
   if (Object.hasOwn(entry, 'operating_profile')) {
     try {
       return {
@@ -149,6 +157,44 @@ function sessionProfile(vaultBase, sessionId, projectResolved) {
   return { profile: projectResolved.profile, source: projectResolved.source };
 }
 
+function sessionProfile(vaultBase, sessionId, projectResolved) {
+  const sessions = readSessionRegistry(vaultBase).sessions || {};
+  if (!Object.hasOwn(sessions, sessionId)) throw new Error(`sessão não encontrada: ${sessionId}`);
+  return sessionBaseProfile(sessions[sessionId], projectResolved);
+}
+
+function sessionProfileStatus(vaultBase, sessionId, projectResolved) {
+  const sessions = readSessionRegistry(vaultBase).sessions || {};
+  if (!Object.hasOwn(sessions, sessionId)) throw new Error(`sessão não encontrada: ${sessionId}`);
+  const entry = sessions[sessionId];
+  const base = sessionBaseProfile(entry, projectResolved);
+  const taskLease = evaluateTaskOperatingProfileLease(entry.operating_profile_task, {
+    sessionId,
+    turnId: entry.last_prompt_turn_id || '',
+    turnSequence: entry.last_turn_sequence,
+  });
+  return {
+    profile: taskLease.state === 'active' ? taskLease.profile : base.profile,
+    source: taskLease.state === 'active' ? 'task-lease' : base.source,
+    scope: taskLease.state === 'active' ? 'task' : 'session',
+    baseProfile: base.profile,
+    baseSource: base.source,
+    taskLease,
+  };
+}
+
+function sessionOutputPayload(effective, sessionId) {
+  return {
+    profile: effective.profile,
+    source: effective.source,
+    scope: effective.scope,
+    session_id: sessionId,
+    base_profile: effective.baseProfile,
+    base_source: effective.baseSource,
+    task_lease: effective.taskLease,
+  };
+}
+
 export function runProfile(argv = []) {
   try { validateArgv(argv); }
   catch (error) { return fail(error.message); }
@@ -156,6 +202,8 @@ export function runProfile(argv = []) {
   const sub = args[0] || 'status';
   const json = argv.includes('--json');
   const sessionId = optionValue(argv, '--session') || '';
+  const reason = optionValue(argv, '--reason');
+  if (sub !== 'route' && reason) return fail('--reason só é aceito por profile route');
 
   let state;
   try { state = context(argv); }
@@ -166,20 +214,50 @@ export function runProfile(argv = []) {
     if (args.length > 1) return fail(`${sub} não aceita argumentos posicionais adicionais`);
     try {
       const effective = sessionId
-        ? sessionProfile(state.vaultBase, sessionId, projectResolved)
-        : { profile: projectResolved.profile, source: projectResolved.source };
+        ? sessionProfileStatus(state.vaultBase, sessionId, projectResolved)
+        : { profile: projectResolved.profile, source: projectResolved.source, scope: 'project' };
       output({
-        profile: effective.profile,
-        source: effective.source,
-        scope: sessionId ? 'session' : 'project',
-        session_id: sessionId || null,
+        ...(sessionId ? sessionOutputPayload(effective, sessionId) : {
+          profile: effective.profile,
+          source: effective.source,
+          scope: 'project',
+          session_id: null,
+        }),
         ...(state.resolved.bindingError ? { binding_error: state.resolved.bindingError } : {}),
       }, json);
       return 0;
     } catch (error) { return fail(error.message); }
   }
 
-  if (sub !== 'use' && sub !== 'set') return fail('use status | use <OFF|FLOW|GUIDE|GOVERN|ASSURE>');
+  if (sub === 'route') {
+    if (args.length !== 2) return fail('route requer exatamente um perfil');
+    if (!sessionId) return fail('route requer --session <id>');
+    if (!reason) return fail('route requer --reason <text>');
+    try {
+      const base = sessionProfile(state.vaultBase, sessionId, projectResolved);
+      const lease = setSessionTaskOperatingProfile(
+        state.vaultBase,
+        sessionId,
+        args[1],
+        { reason },
+      );
+      output({
+        profile: lease.profile,
+        source: 'task-lease',
+        scope: 'task',
+        session_id: sessionId,
+        base_profile: base.profile,
+        base_source: base.source,
+        task_lease: lease,
+        ...(state.resolved.bindingError ? { binding_error: state.resolved.bindingError } : {}),
+      }, json);
+      return 0;
+    } catch (error) { return fail(error.message); }
+  }
+
+  if (sub !== 'use' && sub !== 'set') {
+    return fail('use status | use <OFF|FLOW|GUIDE|GOVERN|ASSURE> | route <FLOW|GUIDE|GOVERN|ASSURE>');
+  }
   if (args.length !== 2) return fail(`${sub} requer exatamente um perfil`);
   let profile;
   try { profile = normalizeOperatingProfile(args[1], { strict: true }); }