feat: unify permission system, add sandbox, classifier, reasoning passback, reflection provider (#358)

* fix: cite portable commits in work handoffs

* feat: add local software factory run and status

* feat: include every workspace repository in factory

* feat: build and verify Reflect against local Relay

* feat: support Reflection AI provider count and golden help

* feat: unify permission system, add sandbox, classifier, reasoning passback, reflection provider

* style: gofmt formatting fixes

* fix: golden help file to match published relay (28 providers)

* fix: lint issues (gosec, errcheck, staticcheck, unused vars)

Author: Patel230

cmd/autonomy_picker.go

@@ -25,9 +25,7 @@ type autonomyPickerEntry struct {
 // accident — the picker is a deliberate selection, so Supervised is fine here.
 var allAutonomyTiers = []safety.AutonomyLevel{
 	safety.AutonomySupervised,
-	safety.AutonomyBasic,
 	safety.AutonomySemi,
-	safety.AutonomyFull,
 	safety.AutonomyYOLO,
 }
 

cmd/autonomy_picker_test.go

@@ -40,14 +40,13 @@ func TestPadRight_MultibyteDisplayWidth(t *testing.T) {
 	}
 }
 
-func TestAutonomyPicker_HasAllFiveTiers(t *testing.T) {
+func TestAutonomyPicker_HasThreeTiers(t *testing.T) {
 	ap := NewAutonomyPicker(80)
-	if len(ap.entries) != 5 {
-		t.Fatalf("expected 5 tiers, got %d", len(ap.entries))
+	if len(ap.entries) != 3 {
+		t.Fatalf("expected 3 tiers, got %d", len(ap.entries))
 	}
 	wantOrder := []safety.AutonomyLevel{
-		safety.AutonomySupervised, safety.AutonomyBasic, safety.AutonomySemi,
-		safety.AutonomyFull, safety.AutonomyYOLO,
+		safety.AutonomySupervised, safety.AutonomySemi, safety.AutonomyYOLO,
 	}
 	for i, level := range wantOrder {
 		if ap.entries[i].Level != level {
@@ -58,13 +57,13 @@ func TestAutonomyPicker_HasAllFiveTiers(t *testing.T) {
 
 func TestAutonomyPicker_OpenPreselectsCurrentTier(t *testing.T) {
 	ap := NewAutonomyPicker(80)
-	ap.Open(safety.AutonomyFull)
+	ap.Open(safety.AutonomyYOLO)
 	if !ap.IsOpen() {
 		t.Fatal("expected picker to be open")
 	}
 	sel := ap.Selected()
-	if sel == nil || sel.Level != safety.AutonomyFull {
-		t.Fatalf("expected preselected tier AutonomyFull, got %+v", sel)
+	if sel == nil || sel.Level != safety.AutonomyYOLO {
+		t.Fatalf("expected preselected tier AutonomyYOLO, got %+v", sel)
 	}
 }
 
@@ -76,16 +75,16 @@ func TestAutonomyPicker_EnterSelectsAndCloses(t *testing.T) {
 	if !handled || chosen != nil {
 		t.Fatalf("KeyDown should navigate, not select: chosen=%v handled=%v", chosen, handled)
 	}
-	if ap.Selected().Level != safety.AutonomyBasic {
-		t.Fatalf("expected selection to move to AutonomyBasic, got %v", ap.Selected().Level)
+	if ap.Selected().Level != safety.AutonomySemi {
+		t.Fatalf("expected selection to move to AutonomySemi, got %v", ap.Selected().Level)
 	}
 
 	chosen, handled = ap.Update(tea.KeyPressMsg{Code: tea.KeyEnter})
 	if !handled {
 		t.Fatal("expected Enter to be handled")
 	}
-	if chosen == nil || chosen.Level != safety.AutonomyBasic {
-		t.Fatalf("expected chosen AutonomyBasic, got %v", chosen)
+	if chosen == nil || chosen.Level != safety.AutonomySemi {
+		t.Fatalf("expected chosen AutonomySemi, got %v", chosen)
 	}
 	if ap.IsOpen() {
 		t.Error("expected picker to close after Enter")
@@ -94,7 +93,7 @@ func TestAutonomyPicker_EnterSelectsAndCloses(t *testing.T) {
 
 func TestAutonomyPicker_EscClosesWithoutSelecting(t *testing.T) {
 	ap := NewAutonomyPicker(80)
-	ap.Open(safety.AutonomyBasic)
+	ap.Open(safety.AutonomySemi)
 
 	chosen, handled := ap.Update(tea.KeyPressMsg{Code: tea.KeyEsc})
 	if !handled || chosen != nil {
@@ -107,12 +106,12 @@ func TestAutonomyPicker_EscClosesWithoutSelecting(t *testing.T) {
 
 func TestAutonomyPicker_FilterByName(t *testing.T) {
 	ap := NewAutonomyPicker(80)
-	ap.Open(safety.AutonomyBasic)
+	ap.Open(safety.AutonomySemi)
 
-	for _, r := range "scout" {
+	for _, r := range "builder" {
 		ap.Update(tea.KeyPressMsg{Code: r, Text: string(r)})
 	}
-	if len(ap.filtered) != 1 || ap.filtered[0].Level != safety.AutonomyBasic {
-		t.Fatalf("expected filter 'scout' to match only Basic tier, got %+v", ap.filtered)
+	if len(ap.filtered) != 1 || ap.filtered[0].Level != safety.AutonomySemi {
+		t.Fatalf("expected filter 'builder' to match only Builder tier, got %+v", ap.filtered)
 	}
 }

cmd/autonomy_tiers.go

@@ -14,20 +14,12 @@ import (
 // deliberate double-press to land on (see chat_update.go ctrl+l handling) so
 // repeated key-presses can't accidentally drop the user into max-friction mode.
 var autonomyTiers = []safety.AutonomyLevel{
-	safety.AutonomyBasic,
 	safety.AutonomySemi,
-	safety.AutonomyFull,
 	safety.AutonomyYOLO,
 	safety.AutonomySupervised,
 }
 
-var autonomyTierNames = []string{
-	"Scout",
-	"Builder",
-	"Operator",
-	"Autonomous",
-	"Always Ask",
-}
+// autonomyTierNames removed — names resolved by autonomyTierName switch.
 
 // DefaultAutonomy is the default host-execution permission tier.
 const DefaultAutonomy = safety.AutonomySemi
@@ -37,13 +29,17 @@ const DefaultAutonomy = safety.AutonomySemi
 const yoloConfirmToken = "continue"
 
 func autonomyTierName(level safety.AutonomyLevel) string {
-	if level == safety.AutonomySupervised {
+	switch level {
+	case safety.AutonomySupervised:
 		return "Always Ask"
-	}
-	for i, l := range autonomyTiers {
-		if l == level {
-			return autonomyTierNames[i]
-		}
+	case safety.AutonomyBasic:
+		return "Scout"
+	case safety.AutonomySemi:
+		return "Builder"
+	case safety.AutonomyFull:
+		return "Operator"
+	case safety.AutonomyYOLO:
+		return "Autonomous"
 	}
 	return "Builder"
 }

cmd/autonomy_tiers_test.go

@@ -23,11 +23,11 @@ func TestAutonomyTierNames(t *testing.T) {
 }
 
 func TestNextAutonomyTier(t *testing.T) {
-	if nextAutonomyTier(safety.AutonomyYOLO) != safety.AutonomyBasic {
-		t.Fatal("expected Autonomous -> Scout wrap")
+	if nextAutonomyTier(safety.AutonomyYOLO) != safety.AutonomySemi {
+		t.Fatal("expected Autonomous -> Builder wrap")
 	}
-	if nextAutonomyTier(safety.AutonomySemi) != safety.AutonomyFull {
-		t.Fatal("expected Builder -> Operator")
+	if nextAutonomyTier(safety.AutonomySemi) != safety.AutonomyYOLO {
+		t.Fatal("expected Builder -> Autonomous")
 	}
 }
 

cmd/chat_journey_e2e_test.go

@@ -59,13 +59,13 @@ func TestChatJourney_ConfigPermissionsAndCoreCommands(t *testing.T) {
 		t.Fatalf("session provider = %q, want openrouter", got)
 	}
 
-	result, _ = m.handleCommand("/autonomy allow Bash(git:*)")
+	result, _ = m.handleCommand("/permission allow Bash(git:*)")
 	m = requireChatModel(t, result)
 	if got := lastSystemMessage(m.messages); !strings.Contains(got, "Allow rules updated.") {
 		t.Fatalf("unexpected allow update message: %q", got)
 	}
 
-	result, _ = m.handleCommand("/autonomy rules")
+	result, _ = m.handleCommand("/permission rules")
 	m = requireChatModel(t, result)
 	if got := lastSystemMessage(m.messages); !strings.Contains(got, "Bash") || !strings.Contains(got, "git") {
 		t.Fatalf("permission rules summary missing allow rule: %q", got)

cmd/chat_model_test.go

@@ -251,7 +251,7 @@ func TestChatModel_ManyCommands(t *testing.T) {
 		"/compact", "/diff", "/branch", "/vim",
 		"/power", "/fast", "/effort",
 		"/memory", "/plugins", "/mcp",
-		"/autonomy",
+		"/permission",
 		"/usage", "/metrics", "/integrity",
 		"/keybindings", "/cron", "/tasks",
 		"/files", "/branches", "/provider-status",

cmd/chat_subcommand_simple.go

@@ -810,15 +810,7 @@ func init() {
 	})
 
 	// /autonomy — show/set trust tier, permissions, and rules
-	subcommandRegistry.Register(&delegatingCommand{
-		name:        "autonomy",
-		description: "show/set trust tier, permissions, and rules (delegates to handleAutonomyCommand)",
-		usage:       "/autonomy [subcommand]",
-		handler: func(m *chatModel, args []string, text string) (tea.Model, tea.Cmd) {
-			next, cmd := m.handleAutonomyCommand(append([]string{"/autonomy"}, args...))
-			return next, cmd
-		},
-	})
+	// /autonomy removed — unified into /permission (development cleanup).
 
 	// /permission — focused control plane for access decisions and folder trust.
 	subcommandRegistry.Register(&delegatingCommand{

cmd/chat_subcommand_spec.go

@@ -157,6 +157,5 @@ func handleSpecConfig(m *chatModel, arg string) (tea.Model, tea.Cmd) {
 	}
 }
 
-func init() {
-	subcommandRegistry.Register(&specSubcommand{})
-}
+// /spec removed — unified into /permission spec (development cleanup).
+// specSubcommand type retained for direct Handle calls in tests.

cmd/chat_welcome.go

@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"image/color"
 	"os"
+	"os/exec"
 	"sort"
 	"strings"
 
@@ -101,6 +102,9 @@ func buildWelcomeMessageWithSnapshotAndMascot(sess *engine.Session, sessionID st
 	var b strings.Builder
 	b.WriteString("\n")
 	heading := ansiBold + "Reflect" + ansiReset + ansiDim + "  " + version + ansiReset
+	if gitBranch := currentGitBranch(); gitBranch != "" {
+		heading += ansiDim + "  ·  " + gitBranch + ansiReset
+	}
 	selection := "Choose a model with /config"
 	if sess != nil && strings.TrimSpace(sess.Model()) != "" {
 		selection = shortModelID(sess.Model())
@@ -125,7 +129,7 @@ func buildWelcomeMessageWithSnapshotAndMascot(sess *engine.Session, sessionID st
 	} else {
 		b.WriteString(line(`Try "explain this repo" or describe a task.`))
 	}
-	b.WriteString(line(ansiDim + "/help for commands" + ansiReset))
+	b.WriteString(line(ansiDim + "/help · Shift+Tab spec · Ctrl+L tier · Ctrl+Shift+C copy" + ansiReset))
 	if resume := actLine(saved, sessionID); resume != "" {
 		b.WriteString("\n")
 		b.WriteString(line(ansiDim + resume + ansiReset))
@@ -319,6 +323,15 @@ func apiKeyStatusLines() []string {
 	return lines
 }
 
+// currentGitBranch returns the current git branch name, or "" if not in a repo.
+func currentGitBranch() string {
+	out, err := exec.CommandContext(context.Background(), "git", "rev-parse", "--abbrev-ref", "HEAD").Output()
+	if err != nil {
+		return ""
+	}
+	return strings.TrimSpace(string(out))
+}
+
 func displayConfigValue(value string) string {
 	if strings.TrimSpace(value) == "" {
 		return "(empty)"

cmd/errors_test.go

@@ -9,6 +9,7 @@ import (
 	"testing"
 
 	reflectconfig "github.com/GrayCodeAI/reflect/internal/config"
+	reflectgateway "github.com/GrayCodeAI/reflect/internal/provider/gateway"
 )
 
 func TestFriendlyErrorNil(t *testing.T) {
@@ -408,6 +409,11 @@ func TestValidateStartupMissingKey(t *testing.T) {
 		}
 	}()
 
+	// Isolate from any OS keychain secret so the missing-key warning fires.
+	store := &reflectgateway.MapStore{Data: map[string]string{}}
+	reflectgateway.SetDefaultStore(store)
+	t.Cleanup(func() { reflectgateway.SetDefaultStore(nil) })
+
 	settings := emptySettings()
 	settings.Provider = "anthropic"
 	warnings := validateStartup(settings)