zelari-code 2.13.0 → 2.14.0

package/dist/cli/kraken/completionProofPersist.js

@@ -0,0 +1,219 @@
+/**
+ * completionProofPersist — t20 (§P1.B): the durability contract behind the
+ * completion proof artifact.
+ *
+ * Three responsibilities, kept out of completionProof.ts to hold every file
+ * under the 300-LOC discipline:
+ *
+ * 1. ATOMIC WRITES — tmp → fsync(file) → rename over the final name, with a
+ *    win32 fallback (EPERM/ENOTEMPTY under AV/indexer locks → rm + rename)
+ *    and a guarantee that no `.tmp` litter survives success OR failure.
+ * 2. PERSISTENCE MODE — `ZELARI_PROOF_PERSISTENCE` env override over
+ *    surface defaults (headless/mission/CI ⇒ `required`, interactive TUI ⇒
+ *    `best-effort`), mirroring safety/policyLoadMode's pure-resolver +
+ *    registered-active-surface pattern.
+ * 3. REQUIRED ENFORCEMENT — the pure gate flip: PASS + un-writable proof ⇒
+ *    BLOCKED (completionGate exit-4 family), with the failure reason
+ *    appended to the summary so NDJSON/headless surfaces see WHY.
+ */
+import { open, rename, rm } from 'node:fs/promises';
+import { randomBytes } from 'node:crypto';
+import path from 'node:path';
+import { computeProofDigest, isSha256Hex, PROOF_KIND, PROOF_VERSION, } from './completionProofAttestation.js';
+/** Env override accepted by resolveProofPersistenceMode. */
+export const PROOF_PERSISTENCE_ENV = 'ZELARI_PROOF_PERSISTENCE';
+function isTruthyFlag(v) {
+    const n = v?.trim().toLowerCase();
+    return n === '1' || n === 'true' || n === 'yes' || n === 'on';
+}
+const warnedInvalidOverrides = new Set();
+/**
+ * Emit ONE warning per distinct invalid override value (hosts surface it;
+ * repeat evaluations stay quiet).
+ */
+function warnInvalidOverride(raw, fallback) {
+    if (warnedInvalidOverrides.has(raw))
+        return;
+    warnedInvalidOverrides.add(raw);
+    try {
+        process.stderr.write(`[zelari] ignoring invalid ${PROOF_PERSISTENCE_ENV}=${JSON.stringify(raw)} ` +
+            `(expected "best-effort" or "required") — defaulting to ${fallback}\n`);
+    }
+    catch {
+        /* stderr unavailable — resolution continues */
+    }
+}
+/**
+ * Pure mode resolution — precedence mirrors safety/policyLoadMode:
+ *   1. ZELARI_PROOF_PERSISTENCE=best-effort|required (any other value is
+ *      IGNORED with a warning and falls through — no typo flips durability);
+ *   2. headless and mission surfaces default to `required`: an unattended
+ *      run without its durable witness is not verifiable-complete;
+ *   3. the interactive TUI defaults to `best-effort` (a read-only checkout
+ *      must not brick chat), tightening to `required` under ambient CI
+ *      because CI consumes proofs as a pass condition (PW §7).
+ */
+export function resolveProofPersistenceMode(env, ctx) {
+    const fallback = ctx.surface === 'headless' || ctx.surface === 'mission' || isTruthyFlag(ctx.ci) ? 'required' : 'best-effort';
+    const raw = env[PROOF_PERSISTENCE_ENV];
+    if (raw !== undefined) {
+        const v = raw.trim().toLowerCase();
+        if (v === 'best-effort')
+            return 'best-effort';
+        if (v === 'required')
+            return 'required';
+        warnInvalidOverride(raw.trim(), fallback);
+    }
+    return fallback;
+}
+// ── Active-surface seam (registered once by the host, like policyLoadMode)
+let activeSurface = 'tui';
+/** Register the host BEFORE any proof write (runHeadless pre-flight). */
+export function setActiveProofPersistenceSurface(surface) {
+    activeSurface = surface;
+}
+/** Current registration (read-mostly; exposed for tests/diagnostics). */
+export function activeProofPersistenceSurface() {
+    return activeSurface;
+}
+/**
+ * Resolve the ACTIVE persistence mode from the registered surface + env.
+ * `env` is injectable so callers/tests avoid touching process.env.
+ */
+export function activeProofPersistenceMode(env = process.env) {
+    return resolveProofPersistenceMode(env, {
+        surface: activeSurface,
+        ...(typeof env.CI === 'string' ? { ci: env.CI } : {}),
+    });
+}
+// ── Atomic file write (tmp → fsync → rename) ─────────────────────────────
+/** win32 rename-over-existing can hit transient AV/indexer locks. */
+function isWindowsRenameBlock(err) {
+    if (process.platform !== 'win32')
+        return false;
+    const code = err?.code;
+    return code === 'EPERM' || code === 'ENOTEMPTY' || code === 'EEXIST';
+}
+/**
+ * Transaction-grade replacement for writeFile: data lands in
+ * `<target>.<random>.tmp`, gets fsync'd (`fh.sync()`), closes, and is
+ * renamed over the final name — readers never observe a half-written
+ * artifact. win32 fallback: EPERM/ENOTEMPTY → rm the previous file, rename
+ * again. On ANY failure the tmp file is removed; no `.tmp` litter survives
+ * success OR failure.
+ */
+export async function writeFileAtomic(target, data) {
+    const dir = path.dirname(target);
+    const tmp = path.join(dir, `.${path.basename(target)}.${randomBytes(6).toString('hex')}.tmp`);
+    let fh = null;
+    try {
+        fh = await open(tmp, 'w');
+        await fh.writeFile(data, 'utf8');
+        await fh.sync(); // flush contents BEFORE the rename publishes them
+        await fh.close();
+        fh = null;
+        try {
+            await rename(tmp, target);
+        }
+        catch (err) {
+            if (!isWindowsRenameBlock(err))
+                throw err;
+            await rm(target, { force: true }); // drop the stale artifact, retry
+            await rename(tmp, target);
+        }
+    }
+    finally {
+        if (fh !== null) {
+            try {
+                await fh.close();
+            }
+            catch {
+                /* already closed */
+            }
+        }
+        await rm(tmp, { force: true }).catch(() => undefined);
+    }
+}
+/**
+ * t20 required-persistence contract, kept PURE so hosts wire it themselves:
+ * PASS + unwritable proof ⇒ blocked=true, with the failure reason appended
+ * to the summary (visible in NDJSON/log surfacing and any later re-render).
+ * An already-BLOCKED gate just records the extra cause. Mutates `gate` in
+ * place; returns true when enforcement fired.
+ */
+export function enforceRequiredProofPersistence(gate, outcome) {
+    if (!outcome.requiredBlockReason)
+        return false;
+    if (!gate.blocked) {
+        gate.summary = `${gate.summary} [required-proof-persist]: ${outcome.requiredBlockReason}`;
+    }
+    gate.blocked = true;
+    return true;
+}
+const ATTESTATION_KEYS = [
+    'commitSha',
+    'diffDigest',
+    'taskContractDigest',
+    'verificationPlanDigest',
+    'harnessManifestDigest',
+    'proofDigest',
+];
+/**
+ * Offline validator for a written proof — structural + integrity checks
+ * ONLY, no repo access (that is what makes it usable in CI). Re-seals the
+ * parsed proof via canonical hashing (order-insensitive) and compares the
+ * stored `proofDigest`; every present digest must be well-formed sha256
+ * hex. Never throws.
+ */
+export function validateCompletionProof(proofJson) {
+    const errors = [];
+    if (!proofJson || typeof proofJson !== 'object' || Array.isArray(proofJson)) {
+        return { valid: false, errors: ['proof must be a JSON object'] };
+    }
+    const proof = proofJson;
+    if (proof.kind !== PROOF_KIND)
+        errors.push(`kind must be "${PROOF_KIND}"`);
+    if (proof.version !== PROOF_VERSION)
+        errors.push(`version must be ${PROOF_VERSION}`);
+    if (!proof.evaluation || typeof proof.evaluation !== 'object' || Array.isArray(proof.evaluation)) {
+        errors.push('evaluation must be a JSON object');
+    }
+    if (!proof.attestation || typeof proof.attestation !== 'object' || Array.isArray(proof.attestation)) {
+        return { valid: false, errors: [...errors, 'attestation must be a JSON object'] };
+    }
+    const att = proof.attestation;
+    for (const key of Object.keys(att)) {
+        if (!ATTESTATION_KEYS.includes(key))
+            errors.push(`attestation.${key} is not a known field`);
+    }
+    for (const key of ATTESTATION_KEYS) {
+        const v = att[key];
+        if (v === undefined || v === null) {
+            if (key === 'harnessManifestDigest' || key === 'proofDigest')
+                errors.push(`attestation.${key} is required`);
+            continue;
+        }
+        if (key === 'commitSha') {
+            if (typeof v !== 'string' || v.trim().length === 0) {
+                errors.push('attestation.commitSha must be a non-empty git sha string');
+            }
+            continue;
+        }
+        if (!isSha256Hex(v))
+            errors.push(`attestation.${key} must be sha256 hex`);
+    }
+    // Integrity seal: recompute over the parsed tree and compare.
+    if (isSha256Hex(att.proofDigest) && !errors.some((e) => e.startsWith('kind') || e.startsWith('version'))) {
+        const recomputed = computeProofDigest({
+            kind: proof.kind,
+            version: proof.version,
+            evaluation: proof.evaluation,
+            attestation: att,
+        });
+        if (recomputed !== att.proofDigest) {
+            errors.push('proofDigest does not match the sealed content (tampered or stale proof)');
+        }
+    }
+    return { valid: errors.length === 0, errors };
+}
+//# sourceMappingURL=completionProofPersist.js.map

package/dist/cli/kraken/completionProofPersist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completionProofPersist.js","sourceRoot":"","sources":["../../../src/cli/kraken/completionProofPersist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAEL,kBAAkB,EAClB,WAAW,EACX,UAAU,EACV,aAAa,GAGd,MAAM,iCAAiC,CAAC;AAWzC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAWhE,SAAS,YAAY,CAAC,CAAqB;IACzC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEjD;;;GAGG;AACH,SAAS,mBAAmB,CAAC,GAAW,EAAE,QAA8B;IACtE,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5C,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,6BAA6B,qBAAqB,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG;YAC1E,0DAA0D,QAAQ,IAAI,CACzE,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,+CAA+C;IACjD,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,2BAA2B,CACzC,GAAuC,EACvC,GAAiC;IAEjC,MAAM,QAAQ,GACZ,GAAG,CAAC,OAAO,KAAK,UAAU,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC;IAC/G,MAAM,GAAG,GAAG,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,aAAa;YAAE,OAAO,aAAa,CAAC;QAC9C,IAAI,CAAC,KAAK,UAAU;YAAE,OAAO,UAAU,CAAC;QACxC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,4EAA4E;AAE5E,IAAI,aAAa,GAA4B,KAAK,CAAC;AAEnD,yEAAyE;AACzE,MAAM,UAAU,gCAAgC,CAAC,OAAgC;IAC/E,aAAa,GAAG,OAAO,CAAC;AAC1B,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,6BAA6B;IAC3C,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAA0C,OAAO,CAAC,GAAG;IAC9F,OAAO,2BAA2B,CAAC,GAAG,EAAE;QACtC,OAAO,EAAE,aAAa;QACtB,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAE5E,qEAAqE;AACrE,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAI,GAAoC,EAAE,IAAI,CAAC;IACzD,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,IAAY;IAChE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9F,IAAI,EAAE,GAAsB,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1B,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,kDAAkD;QACnE,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACjB,EAAE,GAAG,IAAI,CAAC;QACV,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC1C,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,iCAAiC;YACpE,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QACD,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAAO,EACP,OAAsE;IAEtE,IAAI,CAAC,OAAO,CAAC,mBAAmB;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,GAAG,IAAI,CAAC,OAAO,8BAA8B,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACpB,OAAO,IAAI,CAAC;AACd,CAAC;AASD,MAAM,gBAAgB,GAAG;IACvB,WAAW;IACX,YAAY;IACZ,oBAAoB;IACpB,wBAAwB;IACxB,uBAAuB;IACvB,aAAa;CACL,CAAC;AAEX;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAkB;IACxD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,6BAA6B,CAAC,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,SAAuC,CAAC;IACtD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,UAAU,GAAG,CAAC,CAAC;IAC3E,IAAI,KAAK,CAAC,OAAO,KAAK,aAAa;QAAE,MAAM,CAAC,IAAI,CAAC,mBAAmB,aAAa,EAAE,CAAC,CAAC;IACrF,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QACjG,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACpG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,mCAAmC,CAAC,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,WAAiD,CAAC;IACpE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAE,gBAAsC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,uBAAuB,CAAC,CAAC;IACrH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAClC,IAAI,GAAG,KAAK,uBAAuB,IAAI,GAAG,KAAK,aAAa;gBAAE,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC,CAAC;YAC5G,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YACxB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YAC1E,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,eAAe,GAAG,qBAAqB,CAAC,CAAC;IAC5E,CAAC;IAED,8DAA8D;IAC9D,IAAI,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,UAAU,GAAG,kBAAkB,CAAC;YACpC,IAAI,EAAE,KAAK,CAAC,IAAc;YAC1B,OAAO,EAAE,KAAK,CAAC,OAAiB;YAChC,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,GAAkC;SAChD,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC"}

package/dist/cli/kraken/completionProofProbe.js

@@ -0,0 +1,135 @@
+/**
+ * completionProofProbe — t20 (§P1.B): environment-derived attestation
+ * inputs for the completion proof. Everything here is BEST-EFFORT and
+ * read-only: a missing git binary, a non-repo cwd, a disabled criteria
+ * pack or an unreadable package.json simply omits the corresponding
+ * attestation field (they are optional by design). Kept apart from the
+ * sealing core so that core stays pure and instantly testable.
+ *
+ * Owns:
+ * - harnessManifest: deterministic harness identity (version, pack,
+ *   adapters, policy precedence/load mode) — PW §7;
+ * - gatherGitAttestation: HEAD sha + staged/unstaged `git diff` text;
+ * - defaultVerificationPlanSnapshot: the t19 adapter-resolved plan
+ *   ({packId, commands}) canonically shaped for verificationPlanDigest.
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+// t22: the active contract-scope seam feeds the live taskContractDigest.
+import { activeContractScope } from './contractCompiler.js';
+const HARNESS_VERSION_FALLBACK = '2.13.0';
+/**
+ * Mirrors verificationAdapters/index.ts REGISTRY ORDER IS CONTRACT. Kept a
+ * literal (adapters carry no id field); completionProofProbe.test.ts locks
+ * it to the live registry length so a registry extension without a mirror
+ * sync fails the suite instead of silently mis-attesting.
+ */
+const ADAPTER_IDS = ['node', 'python', 'rust', 'go', 'java', 'dotnet'];
+let cachedHarnessVersion = null;
+async function readHarnessVersion() {
+    if (cachedHarnessVersion !== null)
+        return cachedHarnessVersion;
+    try {
+        const { readFile } = await import('node:fs/promises');
+        const { fileURLToPath } = await import('node:url');
+        const pkgPath = fileURLToPath(new URL('../../../package.json', import.meta.url));
+        const parsed = JSON.parse(await readFile(pkgPath, 'utf8'));
+        if (typeof parsed.version === 'string' && parsed.version.length > 0) {
+            return (cachedHarnessVersion = parsed.version);
+        }
+    }
+    catch {
+        /* fall through to the pinned constant */
+    }
+    return (cachedHarnessVersion = HARNESS_VERSION_FALLBACK);
+}
+/**
+ * The deterministic identity of the harness that produced a proof: which
+ * binary, which criteria pack, which adapters COULD have bound, and how
+ * policies were layered/loaded. Constant per configuration — cheap, and
+ * enough to detect cross-environment drift.
+ */
+export async function harnessManifest(env = process.env) {
+    const [{ policyPrecedenceFromEnv }, { activePolicyLoadMode }, { ZELARI_CODING_PACK_ID }] = await Promise.all([
+        import('../safety/policyEngine.js'),
+        import('../safety/policyLoadMode.js'),
+        import('@zelari/core/verification'),
+    ]);
+    return {
+        harnessVersion: await readHarnessVersion(),
+        packId: ZELARI_CODING_PACK_ID,
+        adapters: ADAPTER_IDS,
+        policyPrecedence: policyPrecedenceFromEnv(),
+        policyLoadMode: activePolicyLoadMode(env),
+    };
+}
+const execFileAsync = promisify(execFile);
+/** Best-effort `git -C <cwd> <args>` → stdout | null (never throws). */
+async function git(cwd, args) {
+    try {
+        const { stdout } = await execFileAsync('git', ['-C', cwd, ...args], {
+            maxBuffer: 32 * 1024 * 1024,
+            windowsHide: true,
+        });
+        return stdout;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve commit + working-tree-diff inputs (staged + unstaged vs HEAD).
+ * Any failure omits both fields; never throws.
+ */
+export async function gatherGitAttestation(cwd = process.cwd()) {
+    const [head, stagedDiff, unstagedDiff] = await Promise.all([
+        git(cwd, ['rev-parse', 'HEAD']),
+        git(cwd, ['diff', '--cached']),
+        git(cwd, ['diff']),
+    ]);
+    const inputs = {};
+    const sha = head?.trim();
+    if (sha)
+        inputs.commitSha = sha;
+    if (stagedDiff !== null && unstagedDiff !== null) {
+        inputs.diffText = [stagedDiff, unstagedDiff].filter((s) => s.length > 0).join('\n');
+    }
+    return inputs;
+}
+/**
+ * Snapshot of the resolved native verification plan for THIS repo (t19
+ * adapters + env overrides), shaped canonically for verificationPlanDigest.
+ * undefined when the pack is disabled / nothing binds / resolution fails.
+ * Never throws.
+ */
+export async function defaultVerificationPlanSnapshot(cwd = process.cwd(), env = process.env) {
+    try {
+        const { nativePackEnabled, resolvePackCommandsForRoot } = await import('./nativeVerification.js');
+        const { ZELARI_CODING_PACK_ID } = await import('@zelari/core/verification');
+        if (!nativePackEnabled(env))
+            return undefined;
+        const commands = await resolvePackCommandsForRoot(env, cwd);
+        if (!commands.typecheckCommand && !commands.testCommand && !commands.buildCommand)
+            return undefined;
+        return { packId: ZELARI_CODING_PACK_ID, commands };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * t22 (PW §8): the LIVE TaskContract of the active turn, read from the
+ * contract-scope seam (kraken/contractCompiler.setActiveContractScope).
+ * Hosts re-register after every accepted steer, so a proof written after a
+ * steer hashes version N+1 — `taskContractDigest` always tracks the CURRENT
+ * contract. undefined when no scoped contract is registered; never throws.
+ */
+export function activeTaskContractSnapshot() {
+    try {
+        return activeContractScope()?.contract;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=completionProofProbe.js.map

package/dist/cli/kraken/completionProofProbe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completionProofProbe.js","sourceRoot":"","sources":["../../../src/cli/kraken/completionProofProbe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,yEAAyE;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAG5D,MAAM,wBAAwB,GAAG,QAAQ,CAAC;AAC1C;;;;;GAKG;AACH,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAU,CAAC;AAChF,IAAI,oBAAoB,GAAkB,IAAI,CAAC;AAE/C,KAAK,UAAU,kBAAkB;IAC/B,IAAI,oBAAoB,KAAK,IAAI;QAAE,OAAO,oBAAoB,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAA0B,CAAC;QACpF,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yCAAyC;IAC3C,CAAC;IACD,OAAO,CAAC,oBAAoB,GAAG,wBAAwB,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,CAAC,EAAE,uBAAuB,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,qBAAqB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3G,MAAM,CAAC,2BAA2B,CAAC;QACnC,MAAM,CAAC,6BAA6B,CAAC;QACrC,MAAM,CAAC,2BAA2B,CAAC;KACpC,CAAC,CAAC;IACH,OAAO;QACL,cAAc,EAAE,MAAM,kBAAkB,EAAE;QAC1C,MAAM,EAAE,qBAAqB;QAC7B,QAAQ,EAAE,WAAW;QACrB,gBAAgB,EAAE,uBAAuB,EAAE;QAC3C,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,wEAAwE;AACxE,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,IAAc;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;YAClE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc,OAAO,CAAC,GAAG,EAAE;IACpE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAC9B,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;KACnB,CAAC,CAAC;IACH,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IACzB,IAAI,GAAG;QAAE,MAAM,CAAC,SAAS,GAAG,GAAG,CAAC;IAChC,IAAI,UAAU,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QACjD,MAAM,CAAC,QAAQ,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,MAAc,OAAO,CAAC,GAAG,EAAE,EAC3B,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,CAAC;QACH,MAAM,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAClG,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QAC5E,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,QAAQ,CAAC,YAAY;YAAE,OAAO,SAAS,CAAC;QACpG,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B;IACxC,IAAI,CAAC;QACH,OAAO,mBAAmB,EAAE,EAAE,QAAQ,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/cli/kraken/contractCompiler.js

@@ -0,0 +1,142 @@
+import { LocalWorkspace, NodeShellProvider } from '@zelari/core/runtime';
+import { VerificationEngine, } from '@zelari/core/verification';
+import { EMPTY_POLICY_RULE_SET, matchAgentPolicyRule, } from '../safety/policyEngine.js';
+/** Engine packId for contract-derived checks (distinct from the coding pack). */
+export const CONTRACT_CRITERIA_PACK_ID = 'task-contract/v1';
+/** Per-command timeout for compiled criteria (mirrors the native pack default). */
+export const CONTRACT_COMMAND_TIMEOUT_MS = 600_000;
+/** Sanity cap for a hint accepted as one shell command line. */
+const MAX_COMMAND_LENGTH = 512;
+// ── Capability layer (scope → policy rules) ───────────────────────────────
+/**
+ * Compile `scope` into edit-category PolicyRules (the ACTUAL policyEngine
+ * shape: ordered list, FIRST match wins within the layer). Order encodes
+ * precedence so overlaps stay conservative:
+ *
+ *   forbidden denies → allowedPath allows → catch-all deny (`**`)
+ *
+ * RESTRICT-ONLY by construction: `deny` entries rank highest in
+ * intersectEffects; the `allow` entries exist ONLY to opt paths out of the
+ * trailing deny-all — ranked lowest they can never relax any other layer or
+ * the category decision (identical lattice to policyLayers.ts).
+ */
+export function compileCapabilityRules(contract) {
+    const scope = contract.scope;
+    if (!scope)
+        return [];
+    const rules = [];
+    for (const glob of scope.forbiddenPaths ?? []) {
+        if (glob.trim() === '')
+            continue;
+        rules.push({ match: glob, effect: 'deny', reason: 'contract:forbiddenPath' });
+    }
+    const allowed = (scope.allowedPaths ?? []).filter((g) => g.trim() !== '');
+    if (allowed.length > 0) {
+        for (const glob of allowed) {
+            rules.push({ match: glob, effect: 'allow', reason: 'contract:allowedPath' });
+        }
+        rules.push({ match: '**', effect: 'deny', reason: 'contract:outsideAllowedPaths' });
+    }
+    return rules;
+}
+/**
+ * The compiled layer as a `PolicyRuleSet` (edit-only) so callers can feed it
+ * through the SAME evaluators used for global/project layers
+ * (matchAgentPolicyRule / matchAgentPolicyRuleLayered): drop it in as an
+ * extra source and the deny>ask>allow intersection does the rest.
+ */
+export function contractCapabilityLayer(contract) {
+    return { shell: [], edit: compileCapabilityRules(contract) };
+}
+let activeScope;
+/**
+ * Register the live contract of THIS mission/turn (call at turn start and
+ * again after every accepted steer — `latestTaskContract` + the spine carry
+ * the new version). Pass `undefined` to clear. No-op-safe, idempotent.
+ */
+export function setActiveContractScope(contract) {
+    activeScope = contract ? { contract, capabilityRules: contractCapabilityLayer(contract) } : undefined;
+}
+/** Current registration (undefined when the turn has no scoped contract). */
+export function activeContractScope() {
+    return activeScope;
+}
+/**
+ * One tool invocation's CONTRACT verdict: restrict-only match of the active
+ * capability layer over the invocation args (same path normalization /
+ * candidates as the global+project layers). Null ⇒ the decision chain is
+ * untouched; non-null ⇒ intersect its effect LAST (non-overridable slot).
+ */
+export function matchContractCapabilityRule(required, args, root) {
+    return matchAgentPolicyRule(activeScope?.capabilityRules ?? EMPTY_POLICY_RULE_SET, required, args, root);
+}
+// ── Verification criteria (verificationHint → deterministic checks) ───────
+/** True when value parses as ONE sane shell command line (no CR/LF/NUL). */
+function isShellCommandLike(value) {
+    const trimmed = value.trim();
+    if (trimmed === '' || trimmed.length > MAX_COMMAND_LENGTH)
+        return false;
+    // eslint-disable-next-line no-control-regex
+    return !/[\r\n\0]/.test(trimmed);
+}
+/**
+ * Deterministic criteria from `verificationHint` commands: one Criterion per
+ * acceptance criterion whose hint parses as a shell command (`Verify:`-style
+ * lines). Required:true per user intent — these ARE the definition of done
+ * stated by the author. `unknown ≠ pass` still holds end-to-end (an
+ * unrunnable command honestly surfaces as unknown, blocking like the pack's).
+ * No hints ⇒ [] ⇒ zero contribution (no behavior change for old contracts).
+ */
+export function compileVerificationCriteria(contract, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? CONTRACT_COMMAND_TIMEOUT_MS;
+    const out = [];
+    for (const c of contract.acceptanceCriteria) {
+        const hint = c.verificationHint;
+        if (!hint || hint.kind !== 'command')
+            continue;
+        const command = hint.value?.trim();
+        if (!command || !isShellCommandLike(command))
+            continue;
+        out.push({
+            id: `contract:${c.id}`,
+            text: c.text,
+            source: 'task',
+            required: true,
+            check: { kind: 'command', command, timeoutMs },
+        });
+    }
+    return out;
+}
+/** Brief-named alias — the seam callers use when they hold the contract. */
+export function contractCriteriaFor(contract, opts = {}) {
+    return compileVerificationCriteria(contract, opts);
+}
+/**
+ * Compiled criteria straight off the ACTIVE seam — how verificationBridge
+ * pulls the current-turn contribution without threading options through
+ * every host. Empty array when nothing is registered.
+ */
+export function activeContractCriteria(opts = {}) {
+    return activeScope ? compileVerificationCriteria(activeScope.contract, opts) : [];
+}
+/**
+ * Execute the contract's compiled criteria through the SAME deterministic
+ * core engine the native pack uses. Deliberately NOT gated on
+ * ZELARI_VERIFY_PACK (user-stated Verify commands stand alone); results join
+ * the pack's inside evaluateStrictBuildGate where blockers add up.
+ */
+export async function evaluateContractCriteria(contract, deps = {}) {
+    if (!contract)
+        return null;
+    const cwd = deps.cwd ?? process.cwd();
+    const criteria = compileVerificationCriteria(contract, { timeoutMs: deps.timeoutMs });
+    if (criteria.length === 0)
+        return null;
+    const shell = deps.shell ?? new NodeShellProvider(new LocalWorkspace(cwd));
+    const engine = deps.emit
+        ? new VerificationEngine({ shell }, { emit: deps.emit })
+        : new VerificationEngine({ shell });
+    const results = await engine.evaluate(criteria, { packId: CONTRACT_CRITERIA_PACK_ID });
+    return { criteria, results };
+}
+//# sourceMappingURL=contractCompiler.js.map

package/dist/cli/kraken/contractCompiler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractCompiler.js","sourceRoot":"","sources":["../../../src/cli/kraken/contractCompiler.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGzE,OAAO,EACL,kBAAkB,GAGnB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,qBAAqB,EACrB,oBAAoB,GAGrB,MAAM,2BAA2B,CAAC;AAEnC,iFAAiF;AACjF,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D,mFAAmF;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,OAAO,CAAC;AAEnD,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,6EAA6E;AAE7E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAsB;IAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,cAAc,IAAI,EAAE,EAAE,CAAC;QAC9C,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,SAAS;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAsB;IAC5D,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,sBAAsB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC/D,CAAC;AAWD,IAAI,WAA4C,CAAC;AAEjD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAkC;IACvE,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,eAAe,EAAE,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxG,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB;IACjC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAmC,EACnC,IAAa,EACb,IAAa;IAEb,OAAO,oBAAoB,CAAC,WAAW,EAAE,eAAe,IAAI,qBAAqB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3G,CAAC;AAED,6EAA6E;AAE7E,4EAA4E;AAC5E,SAAS,kBAAkB,CAAC,KAAa;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB;QAAE,OAAO,KAAK,CAAC;IACxE,4CAA4C;IAC5C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B,CACzC,QAAsB,EACtB,OAA+B,EAAE;IAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,2BAA2B,CAAC;IAChE,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,kBAAkB,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC;YAAE,SAAS;QACvD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE;SAC/C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,QAAsB,EAAE,OAA+B,EAAE;IAC3F,OAAO,2BAA2B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA+B,EAAE;IACtE,OAAO,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACpF,CAAC;AAoBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAkC,EAClC,OAAqC,EAAE;IAEvC,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI;QACtB,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,IAAI,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACvF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC"}

package/dist/cli/kraken/delegationPolicy.js

@@ -4,9 +4,12 @@
  * Routing (`ZELARI_KRAKEN_*_MODEL`) answers *which model* a tentacle uses.
  * This policy answers *whether* the lead should create the tentacle at all.
  *
- * `automatic` (default) injects nothing: the parent prompt stays
- * byte-identical to today's Lead Playbook. Other values append a short
- * override module after the lead playbook.
+ * `automatic` (default) injects nothing. Two sources can produce a REAL
+ * policy now (t23 / P1.E):
+ *   1. this env var (explicit user/host override — WINS below),
+ *   2. a strategy-derived mapping from the v2 OrchestrationDecision:
+ *      `resolveDelegationPolicyForRun(strategy)` in the `--mode auto` path
+ *      replaces the historical no-op injection with an actual module.
  *
  * Env: `ZELARI_KRAKEN_DELEGATION=automatic|prefer|aggressive|lead-only`
  */
@@ -41,6 +44,40 @@ export function resolveDelegationPolicy(raw = process.env[KRAKEN_DELEGATION_ENV]
         return 'automatic';
     return ALIASES[v] ?? 'automatic';
 }
+/**
+ * t23 (§P1.E) — strategy → delegation mapping (replaces the `automatic`
+ * no-op when a v2 OrchestrationDecision is present). Maps onto the EXISTING
+ * three policy fragments (no new prompt prose invented):
+ *
+ *   lead-only      → 'lead-only'  (prefer-lead / no tentacles)
+ *   explore        → 'automatic'  (solo surface: delegation n/a, neutral)
+ *   lead+verify    → 'prefer'     (default WITH the verify pass)
+ *   parallel-build → 'prefer'     (tentacles preferred incl. general)
+ *   graph          → 'prefer'     (tentacles preferred incl. general)
+ *   council        → null         (n/a on the council surface)
+ */
+export const STRATEGY_DELEGATION = {
+    'lead-only': 'lead-only',
+    explore: 'automatic',
+    'lead+verify': 'prefer',
+    'parallel-build': 'prefer',
+    graph: 'prefer',
+    council: null,
+};
+/**
+ * Effective delegation policy for one run. PRECEDENCE: an explicit
+ * non-automatic `ZELARI_KRAKEN_DELEGATION` wins over any strategy-derived
+ * value; otherwise the strategy map applies; no strategy ⇒ historical
+ * default ('automatic', which still injects nothing).
+ */
+export function resolveDelegationPolicyForRun(strategy, env = process.env) {
+    const raw = env[KRAKEN_DELEGATION_ENV]?.trim().toLowerCase() ?? '';
+    const explicit = raw ? ALIASES[raw] : undefined;
+    if (explicit && explicit !== 'automatic')
+        return explicit;
+    const derived = strategy ? STRATEGY_DELEGATION[strategy] : undefined;
+    return derived ?? 'automatic';
+}
 const PREFER_CONTENT = `# Kraken Delegation Policy
 
 Current policy: **prefer tentacles**.

package/dist/cli/kraken/delegationPolicy.js.map

@@ -1 +1 @@
-{"version":3,"file":"delegationPolicy.js","sourceRoot":"","sources":["../../../src/cli/kraken/delegationPolicy.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,WAAW;CACH,CAAC;AAIX,MAAM,OAAO,GAAqC;IAChD,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,QAAQ;IAChB,kBAAkB,EAAE,QAAQ;IAC5B,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,YAAY;IACpB,WAAW,EAAE,WAAW;IACxB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAA0B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAE5D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;AACnC,CAAC;AAED,MAAM,cAAc,GAAG;;;;;;;;;;;;CAYtB,CAAC;AAEF,MAAM,kBAAkB,GAAG;;;;;;;;;;;CAW1B,CAAC;AAEF,MAAM,iBAAiB,GAAG;;;;;;;CAOzB,CAAC;AAEF,MAAM,SAAS,GAA2D;IACxE,MAAM,EAAE,cAAc;IACtB,UAAU,EAAE,kBAAkB;IAC9B,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,SAA2B,uBAAuB,EAAE;IAEpD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,0BAA0B;YACjC,mEAAmE;YACnE,oEAAoE;YACpE,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAwB;IAC5D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC;QAC5B,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC"}
+{"version":3,"file":"delegationPolicy.js","sourceRoot":"","sources":["../../../src/cli/kraken/delegationPolicy.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AAEhE,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,WAAW;CACH,CAAC;AAIX,MAAM,OAAO,GAAqC;IAChD,SAAS,EAAE,WAAW;IACtB,IAAI,EAAE,WAAW;IACjB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,QAAQ;IAChB,kBAAkB,EAAE,QAAQ;IAC5B,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,YAAY;IACpB,WAAW,EAAE,WAAW;IACxB,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,WAAW;IACrB,GAAG,EAAE,WAAW;CACjB,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,mBAAyC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC3D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAA0B,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IAE5D,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3B,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;AACnC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAE5B;IACF,WAAW,EAAE,WAAW;IACxB,OAAO,EAAE,WAAW;IACpB,aAAa,EAAE,QAAQ;IACvB,gBAAgB,EAAE,QAAQ;IAC1B,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,IAAI;CACd,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAgC,EAChC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChD,IAAI,QAAQ,IAAI,QAAQ,KAAK,WAAW;QAAE,OAAO,QAAQ,CAAC;IAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,OAAO,IAAI,WAAW,CAAC;AAChC,CAAC;AAED,MAAM,cAAc,GAAG;;;;;;;;;;;;CAYtB,CAAC;AAEF,MAAM,kBAAkB,GAAG;;;;;;;;;;;CAW1B,CAAC;AAEF,MAAM,iBAAiB,GAAG;;;;;;;CAOzB,CAAC;AAEF,MAAM,SAAS,GAA2D;IACxE,MAAM,EAAE,cAAc;IACtB,UAAU,EAAE,kBAAkB;IAC9B,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAgB,EAChB,SAA2B,uBAAuB,EAAE;IAEpD,IAAI,CAAC,OAAO,IAAI,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAClD,OAAO;QACL;YACE,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,0BAA0B;YACjC,mEAAmE;YACnE,oEAAoE;YACpE,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAwB;IAC5D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC;QAC5B,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,WAAW,CAAC;IACvB,CAAC;AACH,CAAC"}