@ai-agent-forge/agent-forge 0.85.0

package/dist/profile/role-orchestrator.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Role orchestrator (2.2e) — root-side concurrent orchestration of registered
+ * roles with bounded aggregation.
+ *
+ * Spawns one child per requested roleId through the public
+ * `AgentCompositionAPI` (create/lease/run/wait bound to the root via
+ * `parentInstanceId`), honoring the role's `RoleMetadataV1.concurrency`
+ * metadata: `parallel` roles run concurrently, `single` roles execute one at
+ * a time in stable roleId order. Aggregation reuses the multi-agent-tasks 6.3
+ * semantics — entries sorted by roleId (never completion order), a per-entry
+ * byte budget over the JSON-serialized output (`limitBytes`; over-budget
+ * entries are dropped whole with an explicit `truncated` flag, outputs that
+ * are absent carry `missing`), and `completionCriteria` metadata checked per
+ * role into a structured satisfied/unmet/unchecked list (never thrown).
+ * Child failures are collected, never swallowed: a failed child lands in its
+ * structured entry while the orchestration still resolves (fail-collect at
+ * the orchestration level, not fail-fast).
+ *
+ * Limit constants: multi-agent-tasks itself has no built-in numeric caps —
+ * its `limitBytes`/`maxResultBytes` are caller-injected and default to
+ * unbounded. This contract therefore defaults `limitBytes` to 16 KiB, the
+ * magnitude of the repo's existing `DEFAULT_MAX_RESULT_BYTES_V1` (office
+ * writer). No separate entry cap is added: the multi-agent-tasks aggregate
+ * has none either, and the entry count here is already bounded by the
+ * explicit `roleIds` list.
+ *
+ * Honest state-namespace boundary: state namespaces are partitioned per
+ * plugin owner, not per child instance. Concurrent children therefore do NOT
+ * get per-instance state isolation under this contract. The deterministic
+ * injected run callbacks of this milestone never write state, so the boundary
+ * is not exercised here; concurrent child state writes remain outside this
+ * contract.
+ */
+import type { AgentCompositionAPI } from "../core/extensions/public-api.ts";
+import type { RoleRunCallbackV1, RoleRunnerResultV1, RoleRunnerV1 } from "./role-runner.ts";
+/**
+ * Default aggregation byte budget. The multi-agent-tasks aggregate defaults
+ * to unbounded (caller-injected limits); this default anchors the contract to
+ * the repo's existing 16 KiB result-cap magnitude.
+ */
+export declare const DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES: number;
+/** Terminal instance states an orchestrated child can settle into. */
+export type RoleOrchestrationStatusV1 = "succeeded" | "failed" | "cancelled" | "disposed";
+/** One orchestrated child's aggregation entry (sorted by roleId, never completion order). */
+export interface RoleOrchestrationEntryV1 {
+    readonly roleId: string;
+    readonly definitionId: string;
+    readonly childInstanceId: string;
+    /** Terminal revision of the child instance (result reference half, see 2.2b). */
+    readonly revision: number;
+    readonly status: RoleOrchestrationStatusV1;
+    /** The entry's output exceeded the remaining byte budget and was dropped whole. */
+    readonly truncated: boolean;
+    /** No output was available (failure, cancellation, disposal, or truncation). */
+    readonly missing: boolean;
+    /** Present only for succeeded entries that fit the byte budget. */
+    readonly result?: RoleRunnerResultV1;
+    /** Structured failure text; present when the instance settled with an error. */
+    readonly error?: string;
+}
+/** Per-role completion-criteria verdict produced at aggregation time (never thrown). */
+export interface RoleCompletionCheckV1 {
+    readonly roleId: string;
+    readonly criteria: string;
+    /**
+     * `satisfied`/`unmet` come from an injected evaluator; `unchecked` means no
+     * evaluator was available or the entry had no in-budget output to judge.
+     */
+    readonly status: "satisfied" | "unmet" | "unchecked";
+}
+/**
+ * Deterministic completion evaluator. Returns `true`/`false` for a verdict or
+ * `undefined` when the criteria cannot be judged from the result.
+ */
+export type RoleCompletionEvaluatorV1 = (input: {
+    readonly roleId: string;
+    readonly criteria: string;
+    readonly result: RoleRunnerResultV1;
+}) => boolean | undefined;
+/** One orchestration request: explicit roleIds plus one shared spec string. */
+export interface RoleOrchestratorRunRequestV1 {
+    readonly roleIds: readonly string[];
+    readonly spec: string;
+    /** Per-role run overrides taking precedence for this request only. */
+    readonly runs?: readonly {
+        readonly roleId: string;
+        readonly run: RoleRunCallbackV1;
+    }[];
+    /** Aggregation byte budget for this request (defaults to the orchestrator option). */
+    readonly limitBytes?: number;
+    /** Completion evaluator for this request (defaults to the orchestrator option). */
+    readonly evaluateCompletion?: RoleCompletionEvaluatorV1;
+}
+export interface RoleOrchestratorOptionsV1 {
+    readonly composition: AgentCompositionAPI;
+    readonly runner: RoleRunnerV1;
+    /** Root instance the children are parented to via `parentInstanceId`. */
+    readonly parentInstanceId: string;
+    /** Controller-lease owner for the orchestrated children. */
+    readonly owner?: string;
+    /** Default aggregation byte budget (see {@link DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES}). */
+    readonly limitBytes?: number;
+    /** Default completion evaluator. Without one every check reports `unchecked`. */
+    readonly evaluateCompletion?: RoleCompletionEvaluatorV1;
+}
+/** Orchestration result: bounded aggregation plus completion verdicts. */
+export interface RoleOrchestrationResultV1 {
+    /** One entry per requested role, sorted by roleId (stable, never completion order). */
+    readonly entries: readonly RoleOrchestrationEntryV1[];
+    /** True when at least one entry was dropped for exceeding the byte budget. */
+    readonly truncated: boolean;
+    /** Completion verdicts per requested role, sorted by roleId. */
+    readonly completionChecks: readonly RoleCompletionCheckV1[];
+}
+export interface RoleOrchestratorV1 {
+    readonly composition: AgentCompositionAPI;
+    readonly runner: RoleRunnerV1;
+    readonly parentInstanceId: string;
+    runRoles(request: RoleOrchestratorRunRequestV1): Promise<RoleOrchestrationResultV1>;
+}
+/** Creates the root-side concurrent role orchestrator (2.2e). */
+export declare function createRoleOrchestrator(options: RoleOrchestratorOptionsV1): RoleOrchestratorV1;
+//# sourceMappingURL=role-orchestrator.d.ts.map

package/dist/profile/role-orchestrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-orchestrator.d.ts","sourceRoot":"","sources":["../../src/profile/role-orchestrator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,KAAK,EAAE,mBAAmB,EAAmB,MAAM,kCAAkC,CAAC;AAE7F,OAAO,KAAK,EAAE,iBAAiB,EAAqB,kBAAkB,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE/G;;;;GAIG;AACH,eAAO,MAAM,oCAAoC,QAAY,CAAC;AAE9D,sEAAsE;AACtE,MAAM,MAAM,yBAAyB,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,CAAC;AAE1F,6FAA6F;AAC7F,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAC;IAC3C,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IACrC,gFAAgF;IAChF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wFAAwF;AACxF,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,GAAG,WAAW,CAAC;CACrD;AAED;;;GAGG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,KAAK,EAAE;IAC/C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;CACpC,KAAK,OAAO,GAAG,SAAS,CAAC;AAE1B,+EAA+E;AAC/E,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAA;KAAE,EAAE,CAAC;IACxF,sFAAsF;IACtF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,mFAAmF;IACnF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;CACxD;AAED,MAAM,WAAW,yBAAyB;IACzC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,yEAAyE;IACzE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,CAAC,EAAE,yBAAyB,CAAC;CACxD;AAED,0EAA0E;AAC1E,MAAM,WAAW,yBAAyB;IACzC,uFAAuF;IACvF,QAAQ,CAAC,OAAO,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACtD,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC5D;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACpF;AAcD,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,GAAG,kBAAkB,CA4L7F","sourcesContent":["/**\n * Role orchestrator (2.2e) — root-side concurrent orchestration of registered\n * roles with bounded aggregation.\n *\n * Spawns one child per requested roleId through the public\n * `AgentCompositionAPI` (create/lease/run/wait bound to the root via\n * `parentInstanceId`), honoring the role's `RoleMetadataV1.concurrency`\n * metadata: `parallel` roles run concurrently, `single` roles execute one at\n * a time in stable roleId order. Aggregation reuses the multi-agent-tasks 6.3\n * semantics — entries sorted by roleId (never completion order), a per-entry\n * byte budget over the JSON-serialized output (`limitBytes`; over-budget\n * entries are dropped whole with an explicit `truncated` flag, outputs that\n * are absent carry `missing`), and `completionCriteria` metadata checked per\n * role into a structured satisfied/unmet/unchecked list (never thrown).\n * Child failures are collected, never swallowed: a failed child lands in its\n * structured entry while the orchestration still resolves (fail-collect at\n * the orchestration level, not fail-fast).\n *\n * Limit constants: multi-agent-tasks itself has no built-in numeric caps —\n * its `limitBytes`/`maxResultBytes` are caller-injected and default to\n * unbounded. This contract therefore defaults `limitBytes` to 16 KiB, the\n * magnitude of the repo's existing `DEFAULT_MAX_RESULT_BYTES_V1` (office\n * writer). No separate entry cap is added: the multi-agent-tasks aggregate\n * has none either, and the entry count here is already bounded by the\n * explicit `roleIds` list.\n *\n * Honest state-namespace boundary: state namespaces are partitioned per\n * plugin owner, not per child instance. Concurrent children therefore do NOT\n * get per-instance state isolation under this contract. The deterministic\n * injected run callbacks of this milestone never write state, so the boundary\n * is not exercised here; concurrent child state writes remain outside this\n * contract.\n */\nimport type { AgentCompositionAPI, AgentDefinition } from \"../core/extensions/public-api.ts\";\nimport type { RoleMetadataV1 } from \"./role-catalog.ts\";\nimport type { RoleRunCallbackV1, RoleRunnerInputV1, RoleRunnerResultV1, RoleRunnerV1 } from \"./role-runner.ts\";\n\n/**\n * Default aggregation byte budget. The multi-agent-tasks aggregate defaults\n * to unbounded (caller-injected limits); this default anchors the contract to\n * the repo's existing 16 KiB result-cap magnitude.\n */\nexport const DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES = 16 * 1024;\n\n/** Terminal instance states an orchestrated child can settle into. */\nexport type RoleOrchestrationStatusV1 = \"succeeded\" | \"failed\" | \"cancelled\" | \"disposed\";\n\n/** One orchestrated child's aggregation entry (sorted by roleId, never completion order). */\nexport interface RoleOrchestrationEntryV1 {\n\treadonly roleId: string;\n\treadonly definitionId: string;\n\treadonly childInstanceId: string;\n\t/** Terminal revision of the child instance (result reference half, see 2.2b). */\n\treadonly revision: number;\n\treadonly status: RoleOrchestrationStatusV1;\n\t/** The entry's output exceeded the remaining byte budget and was dropped whole. */\n\treadonly truncated: boolean;\n\t/** No output was available (failure, cancellation, disposal, or truncation). */\n\treadonly missing: boolean;\n\t/** Present only for succeeded entries that fit the byte budget. */\n\treadonly result?: RoleRunnerResultV1;\n\t/** Structured failure text; present when the instance settled with an error. */\n\treadonly error?: string;\n}\n\n/** Per-role completion-criteria verdict produced at aggregation time (never thrown). */\nexport interface RoleCompletionCheckV1 {\n\treadonly roleId: string;\n\treadonly criteria: string;\n\t/**\n\t * `satisfied`/`unmet` come from an injected evaluator; `unchecked` means no\n\t * evaluator was available or the entry had no in-budget output to judge.\n\t */\n\treadonly status: \"satisfied\" | \"unmet\" | \"unchecked\";\n}\n\n/**\n * Deterministic completion evaluator. Returns `true`/`false` for a verdict or\n * `undefined` when the criteria cannot be judged from the result.\n */\nexport type RoleCompletionEvaluatorV1 = (input: {\n\treadonly roleId: string;\n\treadonly criteria: string;\n\treadonly result: RoleRunnerResultV1;\n}) => boolean | undefined;\n\n/** One orchestration request: explicit roleIds plus one shared spec string. */\nexport interface RoleOrchestratorRunRequestV1 {\n\treadonly roleIds: readonly string[];\n\treadonly spec: string;\n\t/** Per-role run overrides taking precedence for this request only. */\n\treadonly runs?: readonly { readonly roleId: string; readonly run: RoleRunCallbackV1 }[];\n\t/** Aggregation byte budget for this request (defaults to the orchestrator option). */\n\treadonly limitBytes?: number;\n\t/** Completion evaluator for this request (defaults to the orchestrator option). */\n\treadonly evaluateCompletion?: RoleCompletionEvaluatorV1;\n}\n\nexport interface RoleOrchestratorOptionsV1 {\n\treadonly composition: AgentCompositionAPI;\n\treadonly runner: RoleRunnerV1;\n\t/** Root instance the children are parented to via `parentInstanceId`. */\n\treadonly parentInstanceId: string;\n\t/** Controller-lease owner for the orchestrated children. */\n\treadonly owner?: string;\n\t/** Default aggregation byte budget (see {@link DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES}). */\n\treadonly limitBytes?: number;\n\t/** Default completion evaluator. Without one every check reports `unchecked`. */\n\treadonly evaluateCompletion?: RoleCompletionEvaluatorV1;\n}\n\n/** Orchestration result: bounded aggregation plus completion verdicts. */\nexport interface RoleOrchestrationResultV1 {\n\t/** One entry per requested role, sorted by roleId (stable, never completion order). */\n\treadonly entries: readonly RoleOrchestrationEntryV1[];\n\t/** True when at least one entry was dropped for exceeding the byte budget. */\n\treadonly truncated: boolean;\n\t/** Completion verdicts per requested role, sorted by roleId. */\n\treadonly completionChecks: readonly RoleCompletionCheckV1[];\n}\n\nexport interface RoleOrchestratorV1 {\n\treadonly composition: AgentCompositionAPI;\n\treadonly runner: RoleRunnerV1;\n\treadonly parentInstanceId: string;\n\trunRoles(request: RoleOrchestratorRunRequestV1): Promise<RoleOrchestrationResultV1>;\n}\n\nconst DEFAULT_ORCHESTRATION_OWNER = \"role-orchestrator\";\n\ninterface SettledChildV1 {\n\treadonly roleId: string;\n\treadonly definitionId: string;\n\treadonly childInstanceId: string;\n\treadonly revision: number;\n\treadonly status: RoleOrchestrationStatusV1;\n\treadonly output?: RoleRunnerResultV1;\n\treadonly error?: string;\n}\n\n/** Creates the root-side concurrent role orchestrator (2.2e). */\nexport function createRoleOrchestrator(options: RoleOrchestratorOptionsV1): RoleOrchestratorV1 {\n\tconst owner = options.owner ?? DEFAULT_ORCHESTRATION_OWNER;\n\t// Definitions are registered once per roleId and reused across runs: a\n\t// composition instance is single-run, so every orchestration creates fresh\n\t// child instances from the same definitions.\n\tconst definitions = new Map<string, AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1>>();\n\tlet activeOverrides: ReadonlyMap<string, RoleRunCallbackV1> = new Map();\n\tlet runInFlight = false;\n\n\tfunction requireMetadata(roleId: string): RoleMetadataV1 {\n\t\tconst metadata = options.runner.catalog.get(roleId);\n\t\tif (!metadata) throw new Error(`Unknown role: ${roleId}`);\n\t\treturn metadata;\n\t}\n\n\tfunction definitionFor(roleId: string): AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1> {\n\t\tconst cached = definitions.get(roleId);\n\t\tif (cached) return cached;\n\t\tconst base = options.runner.createDefinition(roleId);\n\t\tconst definition: AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1> = {\n\t\t\t...base,\n\t\t\trun: (input, context) => {\n\t\t\t\tconst override = activeOverrides.get(roleId);\n\t\t\t\treturn override ? override(input, context) : options.runner.run(roleId, input, context);\n\t\t\t},\n\t\t};\n\t\tconst registered = options.composition.define(definition);\n\t\tdefinitions.set(roleId, registered);\n\t\treturn registered;\n\t}\n\n\tasync function runOne(roleId: string, spec: string, settled: Map<string, SettledChildV1>): Promise<void> {\n\t\tconst definition = definitionFor(roleId);\n\t\tconst instance = options.composition.create<RoleRunnerInputV1, RoleRunnerResultV1>(\n\t\t\t{ id: definition.id, version: definition.version },\n\t\t\t{ parentInstanceId: options.parentInstanceId },\n\t\t);\n\t\tconst childInstanceId = instance.id;\n\t\tconst lease = await instance.acquireControllerLease(owner);\n\t\ttry {\n\t\t\tconst operation = instance.run({ spec }, { lease });\n\t\t\ttry {\n\t\t\t\tawait operation.result;\n\t\t\t} catch {\n\t\t\t\t// run() rejects on failure/cancellation mid-flight; instance.wait()\n\t\t\t\t// below yields the terminal status and error.\n\t\t\t}\n\t\t\tconst terminal = await instance.wait();\n\t\t\tconst error =\n\t\t\t\tterminal.error === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: terminal.error instanceof Error\n\t\t\t\t\t\t? terminal.error.message\n\t\t\t\t\t\t: String(terminal.error);\n\t\t\tsettled.set(roleId, {\n\t\t\t\troleId,\n\t\t\t\tdefinitionId: definition.id,\n\t\t\t\tchildInstanceId,\n\t\t\t\trevision: terminal.revision,\n\t\t\t\tstatus: terminal.status,\n\t\t\t\t...(terminal.output !== undefined ? { output: terminal.output } : {}),\n\t\t\t\t...(error !== undefined ? { error } : {}),\n\t\t\t});\n\t\t} finally {\n\t\t\tif (lease.isActive()) await lease.release();\n\t\t}\n\t}\n\n\tasync function runRoles(request: RoleOrchestratorRunRequestV1): Promise<RoleOrchestrationResultV1> {\n\t\tif (runInFlight) throw new Error(\"Role orchestrator is already running an orchestration\");\n\t\t// Input validation fails explicitly before any child is spawned.\n\t\tconst seen = new Set<string>();\n\t\tfor (const roleId of request.roleIds) {\n\t\t\tif (typeof roleId !== \"string\" || roleId.trim().length === 0) {\n\t\t\t\tthrow new Error(\"Role id must be a non-empty string\");\n\t\t\t}\n\t\t\tif (seen.has(roleId)) throw new Error(`Duplicate roleId in orchestration request: ${roleId}`);\n\t\t\tseen.add(roleId);\n\t\t}\n\t\tconst overrides = new Map<string, RoleRunCallbackV1>();\n\t\tfor (const override of request.runs ?? []) {\n\t\t\tif (overrides.has(override.roleId)) throw new Error(`Duplicate run override for role: ${override.roleId}`);\n\t\t\toverrides.set(override.roleId, override.run);\n\t\t}\n\t\tfor (const roleId of overrides.keys()) {\n\t\t\tif (!seen.has(roleId)) throw new Error(`Run override for unrequested role: ${roleId}`);\n\t\t}\n\t\t// Stable execution order: roleId-sorted, `parallel` roles concurrent,\n\t\t// `single` roles strictly sequential. Aggregation order is independent\n\t\t// of this execution order.\n\t\tconst sorted = [...request.roleIds].sort((left, right) => left.localeCompare(right));\n\t\tfor (const roleId of sorted) {\n\t\t\trequireMetadata(roleId);\n\t\t\tdefinitionFor(roleId);\n\t\t}\n\n\t\trunInFlight = true;\n\t\ttry {\n\t\t\tactiveOverrides = overrides;\n\t\t\tconst settled = new Map<string, SettledChildV1>();\n\t\t\tif (sorted.length > 0) {\n\t\t\t\tconst parallelIds = sorted.filter((roleId) => requireMetadata(roleId).concurrency === \"parallel\");\n\t\t\t\tconst singleIds = sorted.filter((roleId) => requireMetadata(roleId).concurrency === \"single\");\n\t\t\t\tawait Promise.all(parallelIds.map((roleId) => runOne(roleId, request.spec, settled)));\n\t\t\t\tfor (const roleId of singleIds) await runOne(roleId, request.spec, settled);\n\t\t\t}\n\t\t\treturn aggregate(sorted, settled, request);\n\t\t} finally {\n\t\t\tactiveOverrides = new Map();\n\t\t\trunInFlight = false;\n\t\t}\n\t}\n\n\tfunction aggregate(\n\t\tsorted: readonly string[],\n\t\tsettled: ReadonlyMap<string, SettledChildV1>,\n\t\trequest: RoleOrchestratorRunRequestV1,\n\t): RoleOrchestrationResultV1 {\n\t\tconst limitBytes = request.limitBytes ?? options.limitBytes ?? DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES;\n\t\t// 6.3 budget semantics: a running byte total over roleId-sorted entries;\n\t\t// an entry that would exceed the budget is dropped whole (truncated),\n\t\t// never partially sliced — mirroring multi-agent-tasks aggregate().\n\t\tlet used = 0;\n\t\tlet truncated = false;\n\t\tconst frozenEntries = sorted.map((roleId): RoleOrchestrationEntryV1 => {\n\t\t\tconst outcome = settled.get(roleId);\n\t\t\tif (!outcome) throw new Error(`Orchestration outcome missing for role: ${roleId}`);\n\t\t\tconst base = {\n\t\t\t\troleId: outcome.roleId,\n\t\t\t\tdefinitionId: outcome.definitionId,\n\t\t\t\tchildInstanceId: outcome.childInstanceId,\n\t\t\t\trevision: outcome.revision,\n\t\t\t\tstatus: outcome.status,\n\t\t\t};\n\t\t\tif (outcome.status !== \"succeeded\" || outcome.output === undefined) {\n\t\t\t\treturn Object.freeze({\n\t\t\t\t\t...base,\n\t\t\t\t\ttruncated: false,\n\t\t\t\t\tmissing: true,\n\t\t\t\t\t...(outcome.error !== undefined ? { error: outcome.error } : {}),\n\t\t\t\t});\n\t\t\t}\n\t\t\tconst size = JSON.stringify(outcome.output).length;\n\t\t\tif (used + size > limitBytes) {\n\t\t\t\ttruncated = true;\n\t\t\t\treturn Object.freeze({ ...base, truncated: true, missing: false });\n\t\t\t}\n\t\t\tused += size;\n\t\t\treturn Object.freeze({ ...base, truncated: false, missing: false, result: outcome.output });\n\t\t});\n\t\tconst entryByRole = new Map(frozenEntries.map((entry) => [entry.roleId, entry]));\n\t\tconst evaluate = request.evaluateCompletion ?? options.evaluateCompletion;\n\t\tconst frozenChecks = sorted.map((roleId): RoleCompletionCheckV1 => {\n\t\t\tconst criteria = requireMetadata(roleId).completionCriteria;\n\t\t\tconst outcome = settled.get(roleId);\n\t\t\tconst entry = entryByRole.get(roleId);\n\t\t\tconst output = outcome?.output;\n\t\t\t// No evaluator, no output, or an output dropped by the byte budget:\n\t\t\t// the criteria cannot be judged, which is reported as unchecked\n\t\t\t// instead of being silently treated as satisfied or unmet.\n\t\t\tif (!evaluate || !output || entry?.truncated === true) {\n\t\t\t\treturn Object.freeze({ roleId, criteria, status: \"unchecked\" as const });\n\t\t\t}\n\t\t\tconst verdict = evaluate({ roleId, criteria, result: output });\n\t\t\treturn Object.freeze({\n\t\t\t\troleId,\n\t\t\t\tcriteria,\n\t\t\t\tstatus:\n\t\t\t\t\tverdict === true\n\t\t\t\t\t\t? (\"satisfied\" as const)\n\t\t\t\t\t\t: verdict === false\n\t\t\t\t\t\t\t? (\"unmet\" as const)\n\t\t\t\t\t\t\t: (\"unchecked\" as const),\n\t\t\t});\n\t\t});\n\t\treturn Object.freeze({\n\t\t\tentries: Object.freeze(frozenEntries),\n\t\t\ttruncated,\n\t\t\tcompletionChecks: Object.freeze(frozenChecks),\n\t\t});\n\t}\n\n\treturn {\n\t\tcomposition: options.composition,\n\t\trunner: options.runner,\n\t\tparentInstanceId: options.parentInstanceId,\n\t\trunRoles,\n\t};\n}\n"]}

package/dist/profile/role-orchestrator.js

@@ -0,0 +1,194 @@
+/**
+ * Default aggregation byte budget. The multi-agent-tasks aggregate defaults
+ * to unbounded (caller-injected limits); this default anchors the contract to
+ * the repo's existing 16 KiB result-cap magnitude.
+ */
+export const DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES = 16 * 1024;
+const DEFAULT_ORCHESTRATION_OWNER = "role-orchestrator";
+/** Creates the root-side concurrent role orchestrator (2.2e). */
+export function createRoleOrchestrator(options) {
+    const owner = options.owner ?? DEFAULT_ORCHESTRATION_OWNER;
+    // Definitions are registered once per roleId and reused across runs: a
+    // composition instance is single-run, so every orchestration creates fresh
+    // child instances from the same definitions.
+    const definitions = new Map();
+    let activeOverrides = new Map();
+    let runInFlight = false;
+    function requireMetadata(roleId) {
+        const metadata = options.runner.catalog.get(roleId);
+        if (!metadata)
+            throw new Error(`Unknown role: ${roleId}`);
+        return metadata;
+    }
+    function definitionFor(roleId) {
+        const cached = definitions.get(roleId);
+        if (cached)
+            return cached;
+        const base = options.runner.createDefinition(roleId);
+        const definition = {
+            ...base,
+            run: (input, context) => {
+                const override = activeOverrides.get(roleId);
+                return override ? override(input, context) : options.runner.run(roleId, input, context);
+            },
+        };
+        const registered = options.composition.define(definition);
+        definitions.set(roleId, registered);
+        return registered;
+    }
+    async function runOne(roleId, spec, settled) {
+        const definition = definitionFor(roleId);
+        const instance = options.composition.create({ id: definition.id, version: definition.version }, { parentInstanceId: options.parentInstanceId });
+        const childInstanceId = instance.id;
+        const lease = await instance.acquireControllerLease(owner);
+        try {
+            const operation = instance.run({ spec }, { lease });
+            try {
+                await operation.result;
+            }
+            catch {
+                // run() rejects on failure/cancellation mid-flight; instance.wait()
+                // below yields the terminal status and error.
+            }
+            const terminal = await instance.wait();
+            const error = terminal.error === undefined
+                ? undefined
+                : terminal.error instanceof Error
+                    ? terminal.error.message
+                    : String(terminal.error);
+            settled.set(roleId, {
+                roleId,
+                definitionId: definition.id,
+                childInstanceId,
+                revision: terminal.revision,
+                status: terminal.status,
+                ...(terminal.output !== undefined ? { output: terminal.output } : {}),
+                ...(error !== undefined ? { error } : {}),
+            });
+        }
+        finally {
+            if (lease.isActive())
+                await lease.release();
+        }
+    }
+    async function runRoles(request) {
+        if (runInFlight)
+            throw new Error("Role orchestrator is already running an orchestration");
+        // Input validation fails explicitly before any child is spawned.
+        const seen = new Set();
+        for (const roleId of request.roleIds) {
+            if (typeof roleId !== "string" || roleId.trim().length === 0) {
+                throw new Error("Role id must be a non-empty string");
+            }
+            if (seen.has(roleId))
+                throw new Error(`Duplicate roleId in orchestration request: ${roleId}`);
+            seen.add(roleId);
+        }
+        const overrides = new Map();
+        for (const override of request.runs ?? []) {
+            if (overrides.has(override.roleId))
+                throw new Error(`Duplicate run override for role: ${override.roleId}`);
+            overrides.set(override.roleId, override.run);
+        }
+        for (const roleId of overrides.keys()) {
+            if (!seen.has(roleId))
+                throw new Error(`Run override for unrequested role: ${roleId}`);
+        }
+        // Stable execution order: roleId-sorted, `parallel` roles concurrent,
+        // `single` roles strictly sequential. Aggregation order is independent
+        // of this execution order.
+        const sorted = [...request.roleIds].sort((left, right) => left.localeCompare(right));
+        for (const roleId of sorted) {
+            requireMetadata(roleId);
+            definitionFor(roleId);
+        }
+        runInFlight = true;
+        try {
+            activeOverrides = overrides;
+            const settled = new Map();
+            if (sorted.length > 0) {
+                const parallelIds = sorted.filter((roleId) => requireMetadata(roleId).concurrency === "parallel");
+                const singleIds = sorted.filter((roleId) => requireMetadata(roleId).concurrency === "single");
+                await Promise.all(parallelIds.map((roleId) => runOne(roleId, request.spec, settled)));
+                for (const roleId of singleIds)
+                    await runOne(roleId, request.spec, settled);
+            }
+            return aggregate(sorted, settled, request);
+        }
+        finally {
+            activeOverrides = new Map();
+            runInFlight = false;
+        }
+    }
+    function aggregate(sorted, settled, request) {
+        const limitBytes = request.limitBytes ?? options.limitBytes ?? DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES;
+        // 6.3 budget semantics: a running byte total over roleId-sorted entries;
+        // an entry that would exceed the budget is dropped whole (truncated),
+        // never partially sliced — mirroring multi-agent-tasks aggregate().
+        let used = 0;
+        let truncated = false;
+        const frozenEntries = sorted.map((roleId) => {
+            const outcome = settled.get(roleId);
+            if (!outcome)
+                throw new Error(`Orchestration outcome missing for role: ${roleId}`);
+            const base = {
+                roleId: outcome.roleId,
+                definitionId: outcome.definitionId,
+                childInstanceId: outcome.childInstanceId,
+                revision: outcome.revision,
+                status: outcome.status,
+            };
+            if (outcome.status !== "succeeded" || outcome.output === undefined) {
+                return Object.freeze({
+                    ...base,
+                    truncated: false,
+                    missing: true,
+                    ...(outcome.error !== undefined ? { error: outcome.error } : {}),
+                });
+            }
+            const size = JSON.stringify(outcome.output).length;
+            if (used + size > limitBytes) {
+                truncated = true;
+                return Object.freeze({ ...base, truncated: true, missing: false });
+            }
+            used += size;
+            return Object.freeze({ ...base, truncated: false, missing: false, result: outcome.output });
+        });
+        const entryByRole = new Map(frozenEntries.map((entry) => [entry.roleId, entry]));
+        const evaluate = request.evaluateCompletion ?? options.evaluateCompletion;
+        const frozenChecks = sorted.map((roleId) => {
+            const criteria = requireMetadata(roleId).completionCriteria;
+            const outcome = settled.get(roleId);
+            const entry = entryByRole.get(roleId);
+            const output = outcome?.output;
+            // No evaluator, no output, or an output dropped by the byte budget:
+            // the criteria cannot be judged, which is reported as unchecked
+            // instead of being silently treated as satisfied or unmet.
+            if (!evaluate || !output || entry?.truncated === true) {
+                return Object.freeze({ roleId, criteria, status: "unchecked" });
+            }
+            const verdict = evaluate({ roleId, criteria, result: output });
+            return Object.freeze({
+                roleId,
+                criteria,
+                status: verdict === true
+                    ? "satisfied"
+                    : verdict === false
+                        ? "unmet"
+                        : "unchecked",
+            });
+        });
+        return Object.freeze({
+            entries: Object.freeze(frozenEntries),
+            truncated,
+            completionChecks: Object.freeze(frozenChecks),
+        });
+    }
+    return {
+        composition: options.composition,
+        runner: options.runner,
+        parentInstanceId: options.parentInstanceId,
+        runRoles,
+    };
+}
+//# sourceMappingURL=role-orchestrator.js.map

package/dist/profile/role-orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-orchestrator.js","sourceRoot":"","sources":["../../src/profile/role-orchestrator.ts"],"names":[],"mappings":"AAqCA;;;;GAIG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,EAAE,GAAG,IAAI,CAAC;AAsF9D,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AAYxD,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CAAC,OAAkC,EAAsB;IAC9F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,2BAA2B,CAAC;IAC3D,uEAAuE;IACvE,2EAA2E;IAC3E,6CAA6C;IAC7C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkE,CAAC;IAC9F,IAAI,eAAe,GAA2C,IAAI,GAAG,EAAE,CAAC;IACxE,IAAI,WAAW,GAAG,KAAK,CAAC;IAExB,SAAS,eAAe,CAAC,MAAc,EAAkB;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC;IAAA,CAChB;IAED,SAAS,aAAa,CAAC,MAAc,EAA0D;QAC9F,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,UAAU,GAA2D;YAC1E,GAAG,IAAI;YACP,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC7C,OAAO,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YAAA,CACxF;SACD,CAAC;QACF,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpC,OAAO,UAAU,CAAC;IAAA,CAClB;IAED,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,IAAY,EAAE,OAAoC,EAAiB;QACxG,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,CAC1C,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,EAClD,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAC9C,CAAC;QACF,MAAM,eAAe,GAAG,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC3D,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACpD,IAAI,CAAC;gBACJ,MAAM,SAAS,CAAC,MAAM,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACR,oEAAoE;gBACpE,8CAA8C;YAC/C,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACvC,MAAM,KAAK,GACV,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,QAAQ,CAAC,KAAK,YAAY,KAAK;oBAChC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO;oBACxB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;gBACnB,MAAM;gBACN,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,eAAe;gBACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzC,CAAC,CAAC;QACJ,CAAC;gBAAS,CAAC;YACV,IAAI,KAAK,CAAC,QAAQ,EAAE;gBAAE,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7C,CAAC;IAAA,CACD;IAED,KAAK,UAAU,QAAQ,CAAC,OAAqC,EAAsC;QAClG,IAAI,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC1F,iEAAiE;QACjE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9D,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA6B,CAAC;QACvD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3G,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,sEAAsE;QACtE,uEAAuE;QACvE,2BAA2B;QAC3B,MAAM,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACrF,KAAK,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;YAC7B,eAAe,CAAC,MAAM,CAAC,CAAC;YACxB,aAAa,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAED,WAAW,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YACJ,eAAe,GAAG,SAAS,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAC;YAClD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;gBAClG,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC;gBAC9F,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;gBACtF,KAAK,MAAM,MAAM,IAAI,SAAS;oBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7E,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACV,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC;YAC5B,WAAW,GAAG,KAAK,CAAC;QACrB,CAAC;IAAA,CACD;IAED,SAAS,SAAS,CACjB,MAAyB,EACzB,OAA4C,EAC5C,OAAqC,EACT;QAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,oCAAoC,CAAC;QACpG,yEAAyE;QACzE,sEAAsE;QACtE,sEAAoE;QACpE,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAA4B,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,EAAE,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG;gBACZ,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,eAAe,EAAE,OAAO,CAAC,eAAe;gBACxC,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACpE,OAAO,MAAM,CAAC,MAAM,CAAC;oBACpB,GAAG,IAAI;oBACP,SAAS,EAAE,KAAK;oBAChB,OAAO,EAAE,IAAI;oBACb,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChE,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;YACnD,IAAI,IAAI,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;gBAC9B,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,IAAI,IAAI,CAAC;YACb,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAAA,CAC5F,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,CAAC;QAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAyB,EAAE,CAAC;YAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC;YAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;YAC/B,oEAAoE;YACpE,gEAAgE;YAChE,2DAA2D;YAC3D,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAoB,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/D,OAAO,MAAM,CAAC,MAAM,CAAC;gBACpB,MAAM;gBACN,QAAQ;gBACR,MAAM,EACL,OAAO,KAAK,IAAI;oBACf,CAAC,CAAE,WAAqB;oBACxB,CAAC,CAAC,OAAO,KAAK,KAAK;wBAClB,CAAC,CAAE,OAAiB;wBACpB,CAAC,CAAE,WAAqB;aAC3B,CAAC,CAAC;QAAA,CACH,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACpB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACrC,SAAS;YACT,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;SAC7C,CAAC,CAAC;IAAA,CACH;IAED,OAAO;QACN,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,QAAQ;KACR,CAAC;AAAA,CACF","sourcesContent":["/**\n * Role orchestrator (2.2e) — root-side concurrent orchestration of registered\n * roles with bounded aggregation.\n *\n * Spawns one child per requested roleId through the public\n * `AgentCompositionAPI` (create/lease/run/wait bound to the root via\n * `parentInstanceId`), honoring the role's `RoleMetadataV1.concurrency`\n * metadata: `parallel` roles run concurrently, `single` roles execute one at\n * a time in stable roleId order. Aggregation reuses the multi-agent-tasks 6.3\n * semantics — entries sorted by roleId (never completion order), a per-entry\n * byte budget over the JSON-serialized output (`limitBytes`; over-budget\n * entries are dropped whole with an explicit `truncated` flag, outputs that\n * are absent carry `missing`), and `completionCriteria` metadata checked per\n * role into a structured satisfied/unmet/unchecked list (never thrown).\n * Child failures are collected, never swallowed: a failed child lands in its\n * structured entry while the orchestration still resolves (fail-collect at\n * the orchestration level, not fail-fast).\n *\n * Limit constants: multi-agent-tasks itself has no built-in numeric caps —\n * its `limitBytes`/`maxResultBytes` are caller-injected and default to\n * unbounded. This contract therefore defaults `limitBytes` to 16 KiB, the\n * magnitude of the repo's existing `DEFAULT_MAX_RESULT_BYTES_V1` (office\n * writer). No separate entry cap is added: the multi-agent-tasks aggregate\n * has none either, and the entry count here is already bounded by the\n * explicit `roleIds` list.\n *\n * Honest state-namespace boundary: state namespaces are partitioned per\n * plugin owner, not per child instance. Concurrent children therefore do NOT\n * get per-instance state isolation under this contract. The deterministic\n * injected run callbacks of this milestone never write state, so the boundary\n * is not exercised here; concurrent child state writes remain outside this\n * contract.\n */\nimport type { AgentCompositionAPI, AgentDefinition } from \"../core/extensions/public-api.ts\";\nimport type { RoleMetadataV1 } from \"./role-catalog.ts\";\nimport type { RoleRunCallbackV1, RoleRunnerInputV1, RoleRunnerResultV1, RoleRunnerV1 } from \"./role-runner.ts\";\n\n/**\n * Default aggregation byte budget. The multi-agent-tasks aggregate defaults\n * to unbounded (caller-injected limits); this default anchors the contract to\n * the repo's existing 16 KiB result-cap magnitude.\n */\nexport const DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES = 16 * 1024;\n\n/** Terminal instance states an orchestrated child can settle into. */\nexport type RoleOrchestrationStatusV1 = \"succeeded\" | \"failed\" | \"cancelled\" | \"disposed\";\n\n/** One orchestrated child's aggregation entry (sorted by roleId, never completion order). */\nexport interface RoleOrchestrationEntryV1 {\n\treadonly roleId: string;\n\treadonly definitionId: string;\n\treadonly childInstanceId: string;\n\t/** Terminal revision of the child instance (result reference half, see 2.2b). */\n\treadonly revision: number;\n\treadonly status: RoleOrchestrationStatusV1;\n\t/** The entry's output exceeded the remaining byte budget and was dropped whole. */\n\treadonly truncated: boolean;\n\t/** No output was available (failure, cancellation, disposal, or truncation). */\n\treadonly missing: boolean;\n\t/** Present only for succeeded entries that fit the byte budget. */\n\treadonly result?: RoleRunnerResultV1;\n\t/** Structured failure text; present when the instance settled with an error. */\n\treadonly error?: string;\n}\n\n/** Per-role completion-criteria verdict produced at aggregation time (never thrown). */\nexport interface RoleCompletionCheckV1 {\n\treadonly roleId: string;\n\treadonly criteria: string;\n\t/**\n\t * `satisfied`/`unmet` come from an injected evaluator; `unchecked` means no\n\t * evaluator was available or the entry had no in-budget output to judge.\n\t */\n\treadonly status: \"satisfied\" | \"unmet\" | \"unchecked\";\n}\n\n/**\n * Deterministic completion evaluator. Returns `true`/`false` for a verdict or\n * `undefined` when the criteria cannot be judged from the result.\n */\nexport type RoleCompletionEvaluatorV1 = (input: {\n\treadonly roleId: string;\n\treadonly criteria: string;\n\treadonly result: RoleRunnerResultV1;\n}) => boolean | undefined;\n\n/** One orchestration request: explicit roleIds plus one shared spec string. */\nexport interface RoleOrchestratorRunRequestV1 {\n\treadonly roleIds: readonly string[];\n\treadonly spec: string;\n\t/** Per-role run overrides taking precedence for this request only. */\n\treadonly runs?: readonly { readonly roleId: string; readonly run: RoleRunCallbackV1 }[];\n\t/** Aggregation byte budget for this request (defaults to the orchestrator option). */\n\treadonly limitBytes?: number;\n\t/** Completion evaluator for this request (defaults to the orchestrator option). */\n\treadonly evaluateCompletion?: RoleCompletionEvaluatorV1;\n}\n\nexport interface RoleOrchestratorOptionsV1 {\n\treadonly composition: AgentCompositionAPI;\n\treadonly runner: RoleRunnerV1;\n\t/** Root instance the children are parented to via `parentInstanceId`. */\n\treadonly parentInstanceId: string;\n\t/** Controller-lease owner for the orchestrated children. */\n\treadonly owner?: string;\n\t/** Default aggregation byte budget (see {@link DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES}). */\n\treadonly limitBytes?: number;\n\t/** Default completion evaluator. Without one every check reports `unchecked`. */\n\treadonly evaluateCompletion?: RoleCompletionEvaluatorV1;\n}\n\n/** Orchestration result: bounded aggregation plus completion verdicts. */\nexport interface RoleOrchestrationResultV1 {\n\t/** One entry per requested role, sorted by roleId (stable, never completion order). */\n\treadonly entries: readonly RoleOrchestrationEntryV1[];\n\t/** True when at least one entry was dropped for exceeding the byte budget. */\n\treadonly truncated: boolean;\n\t/** Completion verdicts per requested role, sorted by roleId. */\n\treadonly completionChecks: readonly RoleCompletionCheckV1[];\n}\n\nexport interface RoleOrchestratorV1 {\n\treadonly composition: AgentCompositionAPI;\n\treadonly runner: RoleRunnerV1;\n\treadonly parentInstanceId: string;\n\trunRoles(request: RoleOrchestratorRunRequestV1): Promise<RoleOrchestrationResultV1>;\n}\n\nconst DEFAULT_ORCHESTRATION_OWNER = \"role-orchestrator\";\n\ninterface SettledChildV1 {\n\treadonly roleId: string;\n\treadonly definitionId: string;\n\treadonly childInstanceId: string;\n\treadonly revision: number;\n\treadonly status: RoleOrchestrationStatusV1;\n\treadonly output?: RoleRunnerResultV1;\n\treadonly error?: string;\n}\n\n/** Creates the root-side concurrent role orchestrator (2.2e). */\nexport function createRoleOrchestrator(options: RoleOrchestratorOptionsV1): RoleOrchestratorV1 {\n\tconst owner = options.owner ?? DEFAULT_ORCHESTRATION_OWNER;\n\t// Definitions are registered once per roleId and reused across runs: a\n\t// composition instance is single-run, so every orchestration creates fresh\n\t// child instances from the same definitions.\n\tconst definitions = new Map<string, AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1>>();\n\tlet activeOverrides: ReadonlyMap<string, RoleRunCallbackV1> = new Map();\n\tlet runInFlight = false;\n\n\tfunction requireMetadata(roleId: string): RoleMetadataV1 {\n\t\tconst metadata = options.runner.catalog.get(roleId);\n\t\tif (!metadata) throw new Error(`Unknown role: ${roleId}`);\n\t\treturn metadata;\n\t}\n\n\tfunction definitionFor(roleId: string): AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1> {\n\t\tconst cached = definitions.get(roleId);\n\t\tif (cached) return cached;\n\t\tconst base = options.runner.createDefinition(roleId);\n\t\tconst definition: AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1> = {\n\t\t\t...base,\n\t\t\trun: (input, context) => {\n\t\t\t\tconst override = activeOverrides.get(roleId);\n\t\t\t\treturn override ? override(input, context) : options.runner.run(roleId, input, context);\n\t\t\t},\n\t\t};\n\t\tconst registered = options.composition.define(definition);\n\t\tdefinitions.set(roleId, registered);\n\t\treturn registered;\n\t}\n\n\tasync function runOne(roleId: string, spec: string, settled: Map<string, SettledChildV1>): Promise<void> {\n\t\tconst definition = definitionFor(roleId);\n\t\tconst instance = options.composition.create<RoleRunnerInputV1, RoleRunnerResultV1>(\n\t\t\t{ id: definition.id, version: definition.version },\n\t\t\t{ parentInstanceId: options.parentInstanceId },\n\t\t);\n\t\tconst childInstanceId = instance.id;\n\t\tconst lease = await instance.acquireControllerLease(owner);\n\t\ttry {\n\t\t\tconst operation = instance.run({ spec }, { lease });\n\t\t\ttry {\n\t\t\t\tawait operation.result;\n\t\t\t} catch {\n\t\t\t\t// run() rejects on failure/cancellation mid-flight; instance.wait()\n\t\t\t\t// below yields the terminal status and error.\n\t\t\t}\n\t\t\tconst terminal = await instance.wait();\n\t\t\tconst error =\n\t\t\t\tterminal.error === undefined\n\t\t\t\t\t? undefined\n\t\t\t\t\t: terminal.error instanceof Error\n\t\t\t\t\t\t? terminal.error.message\n\t\t\t\t\t\t: String(terminal.error);\n\t\t\tsettled.set(roleId, {\n\t\t\t\troleId,\n\t\t\t\tdefinitionId: definition.id,\n\t\t\t\tchildInstanceId,\n\t\t\t\trevision: terminal.revision,\n\t\t\t\tstatus: terminal.status,\n\t\t\t\t...(terminal.output !== undefined ? { output: terminal.output } : {}),\n\t\t\t\t...(error !== undefined ? { error } : {}),\n\t\t\t});\n\t\t} finally {\n\t\t\tif (lease.isActive()) await lease.release();\n\t\t}\n\t}\n\n\tasync function runRoles(request: RoleOrchestratorRunRequestV1): Promise<RoleOrchestrationResultV1> {\n\t\tif (runInFlight) throw new Error(\"Role orchestrator is already running an orchestration\");\n\t\t// Input validation fails explicitly before any child is spawned.\n\t\tconst seen = new Set<string>();\n\t\tfor (const roleId of request.roleIds) {\n\t\t\tif (typeof roleId !== \"string\" || roleId.trim().length === 0) {\n\t\t\t\tthrow new Error(\"Role id must be a non-empty string\");\n\t\t\t}\n\t\t\tif (seen.has(roleId)) throw new Error(`Duplicate roleId in orchestration request: ${roleId}`);\n\t\t\tseen.add(roleId);\n\t\t}\n\t\tconst overrides = new Map<string, RoleRunCallbackV1>();\n\t\tfor (const override of request.runs ?? []) {\n\t\t\tif (overrides.has(override.roleId)) throw new Error(`Duplicate run override for role: ${override.roleId}`);\n\t\t\toverrides.set(override.roleId, override.run);\n\t\t}\n\t\tfor (const roleId of overrides.keys()) {\n\t\t\tif (!seen.has(roleId)) throw new Error(`Run override for unrequested role: ${roleId}`);\n\t\t}\n\t\t// Stable execution order: roleId-sorted, `parallel` roles concurrent,\n\t\t// `single` roles strictly sequential. Aggregation order is independent\n\t\t// of this execution order.\n\t\tconst sorted = [...request.roleIds].sort((left, right) => left.localeCompare(right));\n\t\tfor (const roleId of sorted) {\n\t\t\trequireMetadata(roleId);\n\t\t\tdefinitionFor(roleId);\n\t\t}\n\n\t\trunInFlight = true;\n\t\ttry {\n\t\t\tactiveOverrides = overrides;\n\t\t\tconst settled = new Map<string, SettledChildV1>();\n\t\t\tif (sorted.length > 0) {\n\t\t\t\tconst parallelIds = sorted.filter((roleId) => requireMetadata(roleId).concurrency === \"parallel\");\n\t\t\t\tconst singleIds = sorted.filter((roleId) => requireMetadata(roleId).concurrency === \"single\");\n\t\t\t\tawait Promise.all(parallelIds.map((roleId) => runOne(roleId, request.spec, settled)));\n\t\t\t\tfor (const roleId of singleIds) await runOne(roleId, request.spec, settled);\n\t\t\t}\n\t\t\treturn aggregate(sorted, settled, request);\n\t\t} finally {\n\t\t\tactiveOverrides = new Map();\n\t\t\trunInFlight = false;\n\t\t}\n\t}\n\n\tfunction aggregate(\n\t\tsorted: readonly string[],\n\t\tsettled: ReadonlyMap<string, SettledChildV1>,\n\t\trequest: RoleOrchestratorRunRequestV1,\n\t): RoleOrchestrationResultV1 {\n\t\tconst limitBytes = request.limitBytes ?? options.limitBytes ?? DEFAULT_ROLE_AGGREGATION_LIMIT_BYTES;\n\t\t// 6.3 budget semantics: a running byte total over roleId-sorted entries;\n\t\t// an entry that would exceed the budget is dropped whole (truncated),\n\t\t// never partially sliced — mirroring multi-agent-tasks aggregate().\n\t\tlet used = 0;\n\t\tlet truncated = false;\n\t\tconst frozenEntries = sorted.map((roleId): RoleOrchestrationEntryV1 => {\n\t\t\tconst outcome = settled.get(roleId);\n\t\t\tif (!outcome) throw new Error(`Orchestration outcome missing for role: ${roleId}`);\n\t\t\tconst base = {\n\t\t\t\troleId: outcome.roleId,\n\t\t\t\tdefinitionId: outcome.definitionId,\n\t\t\t\tchildInstanceId: outcome.childInstanceId,\n\t\t\t\trevision: outcome.revision,\n\t\t\t\tstatus: outcome.status,\n\t\t\t};\n\t\t\tif (outcome.status !== \"succeeded\" || outcome.output === undefined) {\n\t\t\t\treturn Object.freeze({\n\t\t\t\t\t...base,\n\t\t\t\t\ttruncated: false,\n\t\t\t\t\tmissing: true,\n\t\t\t\t\t...(outcome.error !== undefined ? { error: outcome.error } : {}),\n\t\t\t\t});\n\t\t\t}\n\t\t\tconst size = JSON.stringify(outcome.output).length;\n\t\t\tif (used + size > limitBytes) {\n\t\t\t\ttruncated = true;\n\t\t\t\treturn Object.freeze({ ...base, truncated: true, missing: false });\n\t\t\t}\n\t\t\tused += size;\n\t\t\treturn Object.freeze({ ...base, truncated: false, missing: false, result: outcome.output });\n\t\t});\n\t\tconst entryByRole = new Map(frozenEntries.map((entry) => [entry.roleId, entry]));\n\t\tconst evaluate = request.evaluateCompletion ?? options.evaluateCompletion;\n\t\tconst frozenChecks = sorted.map((roleId): RoleCompletionCheckV1 => {\n\t\t\tconst criteria = requireMetadata(roleId).completionCriteria;\n\t\t\tconst outcome = settled.get(roleId);\n\t\t\tconst entry = entryByRole.get(roleId);\n\t\t\tconst output = outcome?.output;\n\t\t\t// No evaluator, no output, or an output dropped by the byte budget:\n\t\t\t// the criteria cannot be judged, which is reported as unchecked\n\t\t\t// instead of being silently treated as satisfied or unmet.\n\t\t\tif (!evaluate || !output || entry?.truncated === true) {\n\t\t\t\treturn Object.freeze({ roleId, criteria, status: \"unchecked\" as const });\n\t\t\t}\n\t\t\tconst verdict = evaluate({ roleId, criteria, result: output });\n\t\t\treturn Object.freeze({\n\t\t\t\troleId,\n\t\t\t\tcriteria,\n\t\t\t\tstatus:\n\t\t\t\t\tverdict === true\n\t\t\t\t\t\t? (\"satisfied\" as const)\n\t\t\t\t\t\t: verdict === false\n\t\t\t\t\t\t\t? (\"unmet\" as const)\n\t\t\t\t\t\t\t: (\"unchecked\" as const),\n\t\t\t});\n\t\t});\n\t\treturn Object.freeze({\n\t\t\tentries: Object.freeze(frozenEntries),\n\t\t\ttruncated,\n\t\t\tcompletionChecks: Object.freeze(frozenChecks),\n\t\t});\n\t}\n\n\treturn {\n\t\tcomposition: options.composition,\n\t\trunner: options.runner,\n\t\tparentInstanceId: options.parentInstanceId,\n\t\trunRoles,\n\t};\n}\n"]}

package/dist/profile/role-runner.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Role runner binding (2.2d) — maps registered `RoleMetadataV1` roles to child
+ * `AgentDefinition`s executable through the experimental `AgentCompositionAPI`.
+ *
+ * The default run implementation is the deterministic first-batch role
+ * callbacks (architecture-analyst / implementer / test-designer, 2.2c); a
+ * caller may inject a real implementation via `run`. This slice never calls a
+ * model.
+ *
+ * Library-level use works without any guard. When used through the
+ * capability-runtime guards (`src/core/extensions/capability-runtime-guards.ts`),
+ * the produced definitions must be defined/created by a manifest that declares
+ * the `child-agent-controller` role and the `owner` must equal that manifest
+ * id — the guards enforce this at the plugin boundary; this contract does not
+ * duplicate guard logic.
+ *
+ * Required capability dependencies are checked explicitly (2.5a structured
+ * `missing` shape) before activation (create/lease); they are never silently
+ * skipped. Domain role runtimes live INSIDE the composition's child role: the
+ * root/child two-value role enum is unchanged by design.
+ */
+import type { AgentDefinition, AgentExecutionContext } from "../core/extensions/public-api.ts";
+import type { AvailableCapabilityV1 } from "./dependency-wiring.ts";
+import type { RoleCatalogV1 } from "./role-catalog.ts";
+/** Deterministic role input: a single spec string (first-batch contract). */
+export interface RoleRunnerInputV1 {
+    readonly spec: string;
+}
+/** Deterministic role output: a single result string (first-batch contract). */
+export interface RoleRunnerResultV1 {
+    readonly result: string;
+}
+/**
+ * Per-role run implementation. `context` is present when executed through
+ * `AgentCompositionAPI`; direct deterministic execution may omit it.
+ */
+export type RoleRunCallbackV1 = (input: RoleRunnerInputV1, context?: AgentExecutionContext) => RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;
+/** Runner-level run resolver; receives the roleId in addition to the callback arguments. */
+export type RoleRunResolverV1 = (roleId: string, input: RoleRunnerInputV1, context?: AgentExecutionContext) => RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;
+/**
+ * Role capability-dependency diagnostic: the 2.5a structured `missing` shape
+ * (`capabilityId`/`requestedVersion`/`availableVersion?`/`reason`) with
+ * `roleId` as the requester.
+ */
+export interface RoleMissingCapabilityV1 {
+    readonly roleId: string;
+    readonly capabilityId: string;
+    readonly requestedVersion: number;
+    /** Undefined when the capability is entirely absent from the registry. */
+    readonly availableVersion?: number;
+    readonly reason: "missing" | "version_mismatch";
+}
+/** Activation check result for one role's REQUIRED capability dependencies. */
+export interface RoleCapabilityCheckV1 {
+    readonly roleId: string;
+    readonly status: "satisfied" | "missing";
+    /** Required dependencies that are absent or version-mismatched; empty when satisfied. */
+    readonly missing: readonly RoleMissingCapabilityV1[];
+}
+export interface RoleRunnerOptionsV1 {
+    readonly catalog: RoleCatalogV1;
+    /**
+     * Owner stamped onto produced child definitions. Required to equal the
+     * declaring plugin manifest id when used behind the capability-runtime
+     * guards; plain library use may omit it.
+     */
+    readonly owner?: string;
+    /**
+     * Injected run implementation replacing the deterministic first-batch
+     * defaults entirely. Roles without any binding still fail explicitly on
+     * execution.
+     */
+    readonly run?: RoleRunResolverV1;
+}
+export interface RoleRunnerV1 {
+    readonly catalog: RoleCatalogV1;
+    /** Sorted registered roleIds. */
+    listRoleIds(): readonly string[];
+    /**
+     * Maps a registered role to a child agent definition (composition role
+     * `child-agent-controller`, id `role:<roleId>`, version 1). Run the
+     * capability check before creating/leasing an instance.
+     */
+    createDefinition(roleId: string): AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1>;
+    /**
+     * Pre-activation capability-dependency check against an exact-version
+     * registry: a required dependency is satisfied only when the registry
+     * offers the same capability id at exactly the requested version. Optional
+     * dependencies never block activation and are not reported as missing.
+     */
+    checkCapabilities(roleId: string, availableCapabilities: readonly AvailableCapabilityV1[]): RoleCapabilityCheckV1;
+    /** Direct deterministic execution (the same run a produced definition binds). */
+    run(roleId: string, input: RoleRunnerInputV1, context?: AgentExecutionContext): Promise<RoleRunnerResultV1>;
+}
+/** Default deterministic run dispatch: first-batch callbacks; explicit failure otherwise. */
+export declare function runFirstBatchRole(roleId: string, input: RoleRunnerInputV1, context?: AgentExecutionContext): RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;
+/** Binds the catalog's registered roles to child agent definitions. */
+export declare function createRoleRunner(options: RoleRunnerOptionsV1): RoleRunnerV1;
+//# sourceMappingURL=role-runner.d.ts.map

package/dist/profile/role-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-runner.d.ts","sourceRoot":"","sources":["../../src/profile/role-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,kCAAkC,CAAC;AAC/F,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEpE,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,mBAAmB,CAAC;AAEvE,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,CAC/B,KAAK,EAAE,iBAAiB,EACxB,OAAO,CAAC,EAAE,qBAAqB,KAC3B,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEtD,4FAA4F;AAC5F,MAAM,MAAM,iBAAiB,GAAG,CAC/B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,EACxB,OAAO,CAAC,EAAE,qBAAqB,KAC3B,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;AAEtD;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,kBAAkB,CAAC;CAChD;AAED,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;IACzC,yFAAyF;IACzF,QAAQ,CAAC,OAAO,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,iCAAiC;IACjC,WAAW,IAAI,SAAS,MAAM,EAAE,CAAC;IACjC;;;;OAIG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,eAAe,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,CAAC;IACzF;;;;;OAKG;IACH,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,qBAAqB,EAAE,GAAG,qBAAqB,CAAC;IAClH,iFAAiF;IACjF,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAC5G;AAQD,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,iBAAiB,EACxB,OAAO,CAAC,EAAE,qBAAqB,GAC7B,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAIlD;AAED,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAoE3E","sourcesContent":["/**\n * Role runner binding (2.2d) — maps registered `RoleMetadataV1` roles to child\n * `AgentDefinition`s executable through the experimental `AgentCompositionAPI`.\n *\n * The default run implementation is the deterministic first-batch role\n * callbacks (architecture-analyst / implementer / test-designer, 2.2c); a\n * caller may inject a real implementation via `run`. This slice never calls a\n * model.\n *\n * Library-level use works without any guard. When used through the\n * capability-runtime guards (`src/core/extensions/capability-runtime-guards.ts`),\n * the produced definitions must be defined/created by a manifest that declares\n * the `child-agent-controller` role and the `owner` must equal that manifest\n * id — the guards enforce this at the plugin boundary; this contract does not\n * duplicate guard logic.\n *\n * Required capability dependencies are checked explicitly (2.5a structured\n * `missing` shape) before activation (create/lease); they are never silently\n * skipped. Domain role runtimes live INSIDE the composition's child role: the\n * root/child two-value role enum is unchanged by design.\n */\nimport type { AgentDefinition, AgentExecutionContext } from \"../core/extensions/public-api.ts\";\nimport type { AvailableCapabilityV1 } from \"./dependency-wiring.ts\";\nimport { FIRST_BATCH_ROLES } from \"./first-roles.ts\";\nimport type { RoleCatalogV1, RoleMetadataV1 } from \"./role-catalog.ts\";\n\n/** Deterministic role input: a single spec string (first-batch contract). */\nexport interface RoleRunnerInputV1 {\n\treadonly spec: string;\n}\n\n/** Deterministic role output: a single result string (first-batch contract). */\nexport interface RoleRunnerResultV1 {\n\treadonly result: string;\n}\n\n/**\n * Per-role run implementation. `context` is present when executed through\n * `AgentCompositionAPI`; direct deterministic execution may omit it.\n */\nexport type RoleRunCallbackV1 = (\n\tinput: RoleRunnerInputV1,\n\tcontext?: AgentExecutionContext,\n) => RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;\n\n/** Runner-level run resolver; receives the roleId in addition to the callback arguments. */\nexport type RoleRunResolverV1 = (\n\troleId: string,\n\tinput: RoleRunnerInputV1,\n\tcontext?: AgentExecutionContext,\n) => RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;\n\n/**\n * Role capability-dependency diagnostic: the 2.5a structured `missing` shape\n * (`capabilityId`/`requestedVersion`/`availableVersion?`/`reason`) with\n * `roleId` as the requester.\n */\nexport interface RoleMissingCapabilityV1 {\n\treadonly roleId: string;\n\treadonly capabilityId: string;\n\treadonly requestedVersion: number;\n\t/** Undefined when the capability is entirely absent from the registry. */\n\treadonly availableVersion?: number;\n\treadonly reason: \"missing\" | \"version_mismatch\";\n}\n\n/** Activation check result for one role's REQUIRED capability dependencies. */\nexport interface RoleCapabilityCheckV1 {\n\treadonly roleId: string;\n\treadonly status: \"satisfied\" | \"missing\";\n\t/** Required dependencies that are absent or version-mismatched; empty when satisfied. */\n\treadonly missing: readonly RoleMissingCapabilityV1[];\n}\n\nexport interface RoleRunnerOptionsV1 {\n\treadonly catalog: RoleCatalogV1;\n\t/**\n\t * Owner stamped onto produced child definitions. Required to equal the\n\t * declaring plugin manifest id when used behind the capability-runtime\n\t * guards; plain library use may omit it.\n\t */\n\treadonly owner?: string;\n\t/**\n\t * Injected run implementation replacing the deterministic first-batch\n\t * defaults entirely. Roles without any binding still fail explicitly on\n\t * execution.\n\t */\n\treadonly run?: RoleRunResolverV1;\n}\n\nexport interface RoleRunnerV1 {\n\treadonly catalog: RoleCatalogV1;\n\t/** Sorted registered roleIds. */\n\tlistRoleIds(): readonly string[];\n\t/**\n\t * Maps a registered role to a child agent definition (composition role\n\t * `child-agent-controller`, id `role:<roleId>`, version 1). Run the\n\t * capability check before creating/leasing an instance.\n\t */\n\tcreateDefinition(roleId: string): AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1>;\n\t/**\n\t * Pre-activation capability-dependency check against an exact-version\n\t * registry: a required dependency is satisfied only when the registry\n\t * offers the same capability id at exactly the requested version. Optional\n\t * dependencies never block activation and are not reported as missing.\n\t */\n\tcheckCapabilities(roleId: string, availableCapabilities: readonly AvailableCapabilityV1[]): RoleCapabilityCheckV1;\n\t/** Direct deterministic execution (the same run a produced definition binds). */\n\trun(roleId: string, input: RoleRunnerInputV1, context?: AgentExecutionContext): Promise<RoleRunnerResultV1>;\n}\n\nconst DEFINITION_VERSION = 1;\n\nconst FIRST_BATCH_RUNS = new Map<string, RoleRunCallbackV1>(\n\tFIRST_BATCH_ROLES.map((role) => [role.metadata.roleId, role.run]),\n);\n\n/** Default deterministic run dispatch: first-batch callbacks; explicit failure otherwise. */\nexport function runFirstBatchRole(\n\troleId: string,\n\tinput: RoleRunnerInputV1,\n\tcontext?: AgentExecutionContext,\n): RoleRunnerResultV1 | Promise<RoleRunnerResultV1> {\n\tconst callback = FIRST_BATCH_RUNS.get(roleId);\n\tif (!callback) throw new Error(`No run binding for role: ${roleId}`);\n\treturn callback(input, context);\n}\n\n/** Binds the catalog's registered roles to child agent definitions. */\nexport function createRoleRunner(options: RoleRunnerOptionsV1): RoleRunnerV1 {\n\tconst catalog = options.catalog;\n\n\tfunction requireRole(roleId: string): RoleMetadataV1 {\n\t\tconst metadata = catalog.get(roleId);\n\t\tif (!metadata) throw new Error(`Unknown role: ${roleId}`);\n\t\treturn metadata;\n\t}\n\n\tasync function execute(\n\t\troleId: string,\n\t\tinput: RoleRunnerInputV1,\n\t\tcontext?: AgentExecutionContext,\n\t): Promise<RoleRunnerResultV1> {\n\t\trequireRole(roleId);\n\t\tif (options.run) return options.run(roleId, input, context);\n\t\treturn runFirstBatchRole(roleId, input, context);\n\t}\n\n\treturn {\n\t\tcatalog,\n\t\tlistRoleIds() {\n\t\t\treturn catalog.list().map((role) => role.roleId);\n\t\t},\n\t\tcreateDefinition(roleId) {\n\t\t\tconst metadata = requireRole(roleId);\n\t\t\treturn {\n\t\t\t\tid: `role:${metadata.roleId}`,\n\t\t\t\tversion: DEFINITION_VERSION,\n\t\t\t\trole: \"child-agent-controller\",\n\t\t\t\t...(options.owner === undefined ? {} : { owner: options.owner }),\n\t\t\t\trun: (input, context) => execute(metadata.roleId, input, context),\n\t\t\t};\n\t\t},\n\t\tcheckCapabilities(roleId, availableCapabilities) {\n\t\t\tconst metadata = requireRole(roleId);\n\t\t\tconst registry = new Map(availableCapabilities.map((capability) => [capability.id, capability.version]));\n\t\t\tconst missing: RoleMissingCapabilityV1[] = [];\n\t\t\tfor (const dependency of metadata.capabilityDependencies) {\n\t\t\t\tif (!dependency.required) continue;\n\t\t\t\tconst availableVersion = registry.get(dependency.capabilityId);\n\t\t\t\tif (availableVersion === undefined) {\n\t\t\t\t\tmissing.push({\n\t\t\t\t\t\troleId,\n\t\t\t\t\t\tcapabilityId: dependency.capabilityId,\n\t\t\t\t\t\trequestedVersion: dependency.capabilityVersion,\n\t\t\t\t\t\treason: \"missing\",\n\t\t\t\t\t});\n\t\t\t\t} else if (availableVersion !== dependency.capabilityVersion) {\n\t\t\t\t\tmissing.push({\n\t\t\t\t\t\troleId,\n\t\t\t\t\t\tcapabilityId: dependency.capabilityId,\n\t\t\t\t\t\trequestedVersion: dependency.capabilityVersion,\n\t\t\t\t\t\tavailableVersion,\n\t\t\t\t\t\treason: \"version_mismatch\",\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn {\n\t\t\t\troleId,\n\t\t\t\tstatus: missing.length > 0 ? \"missing\" : \"satisfied\",\n\t\t\t\tmissing,\n\t\t\t};\n\t\t},\n\t\trun(roleId, input, context) {\n\t\t\treturn execute(roleId, input, context);\n\t\t},\n\t};\n}\n"]}

package/dist/profile/role-runner.js

@@ -0,0 +1,78 @@
+import { FIRST_BATCH_ROLES } from "./first-roles.js";
+const DEFINITION_VERSION = 1;
+const FIRST_BATCH_RUNS = new Map(FIRST_BATCH_ROLES.map((role) => [role.metadata.roleId, role.run]));
+/** Default deterministic run dispatch: first-batch callbacks; explicit failure otherwise. */
+export function runFirstBatchRole(roleId, input, context) {
+    const callback = FIRST_BATCH_RUNS.get(roleId);
+    if (!callback)
+        throw new Error(`No run binding for role: ${roleId}`);
+    return callback(input, context);
+}
+/** Binds the catalog's registered roles to child agent definitions. */
+export function createRoleRunner(options) {
+    const catalog = options.catalog;
+    function requireRole(roleId) {
+        const metadata = catalog.get(roleId);
+        if (!metadata)
+            throw new Error(`Unknown role: ${roleId}`);
+        return metadata;
+    }
+    async function execute(roleId, input, context) {
+        requireRole(roleId);
+        if (options.run)
+            return options.run(roleId, input, context);
+        return runFirstBatchRole(roleId, input, context);
+    }
+    return {
+        catalog,
+        listRoleIds() {
+            return catalog.list().map((role) => role.roleId);
+        },
+        createDefinition(roleId) {
+            const metadata = requireRole(roleId);
+            return {
+                id: `role:${metadata.roleId}`,
+                version: DEFINITION_VERSION,
+                role: "child-agent-controller",
+                ...(options.owner === undefined ? {} : { owner: options.owner }),
+                run: (input, context) => execute(metadata.roleId, input, context),
+            };
+        },
+        checkCapabilities(roleId, availableCapabilities) {
+            const metadata = requireRole(roleId);
+            const registry = new Map(availableCapabilities.map((capability) => [capability.id, capability.version]));
+            const missing = [];
+            for (const dependency of metadata.capabilityDependencies) {
+                if (!dependency.required)
+                    continue;
+                const availableVersion = registry.get(dependency.capabilityId);
+                if (availableVersion === undefined) {
+                    missing.push({
+                        roleId,
+                        capabilityId: dependency.capabilityId,
+                        requestedVersion: dependency.capabilityVersion,
+                        reason: "missing",
+                    });
+                }
+                else if (availableVersion !== dependency.capabilityVersion) {
+                    missing.push({
+                        roleId,
+                        capabilityId: dependency.capabilityId,
+                        requestedVersion: dependency.capabilityVersion,
+                        availableVersion,
+                        reason: "version_mismatch",
+                    });
+                }
+            }
+            return {
+                roleId,
+                status: missing.length > 0 ? "missing" : "satisfied",
+                missing,
+            };
+        },
+        run(roleId, input, context) {
+            return execute(roleId, input, context);
+        },
+    };
+}
+//# sourceMappingURL=role-runner.js.map

package/dist/profile/role-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-runner.js","sourceRoot":"","sources":["../../src/profile/role-runner.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAwFrD,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC/B,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CACjE,CAAC;AAEF,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAChC,MAAc,EACd,KAAwB,EACxB,OAA+B,EACoB;IACnD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;IACrE,OAAO,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAAA,CAChC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,OAA4B,EAAgB;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAEhC,SAAS,WAAW,CAAC,MAAc,EAAkB;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,EAAE,CAAC,CAAC;QAC1D,OAAO,QAAQ,CAAC;IAAA,CAChB;IAED,KAAK,UAAU,OAAO,CACrB,MAAc,EACd,KAAwB,EACxB,OAA+B,EACD;QAC9B,WAAW,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,OAAO,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAAA,CACjD;IAED,OAAO;QACN,OAAO;QACP,WAAW,GAAG;YACb,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAAA,CACjD;QACD,gBAAgB,CAAC,MAAM,EAAE;YACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACrC,OAAO;gBACN,EAAE,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE;gBAC7B,OAAO,EAAE,kBAAkB;gBAC3B,IAAI,EAAE,wBAAwB;gBAC9B,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChE,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC;aACjE,CAAC;QAAA,CACF;QACD,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,EAAE;YAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACzG,MAAM,OAAO,GAA8B,EAAE,CAAC;YAC9C,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;gBAC1D,IAAI,CAAC,UAAU,CAAC,QAAQ;oBAAE,SAAS;gBACnC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;gBAC/D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;oBACpC,OAAO,CAAC,IAAI,CAAC;wBACZ,MAAM;wBACN,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,gBAAgB,EAAE,UAAU,CAAC,iBAAiB;wBAC9C,MAAM,EAAE,SAAS;qBACjB,CAAC,CAAC;gBACJ,CAAC;qBAAM,IAAI,gBAAgB,KAAK,UAAU,CAAC,iBAAiB,EAAE,CAAC;oBAC9D,OAAO,CAAC,IAAI,CAAC;wBACZ,MAAM;wBACN,YAAY,EAAE,UAAU,CAAC,YAAY;wBACrC,gBAAgB,EAAE,UAAU,CAAC,iBAAiB;wBAC9C,gBAAgB;wBAChB,MAAM,EAAE,kBAAkB;qBAC1B,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;YACD,OAAO;gBACN,MAAM;gBACN,MAAM,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;gBACpD,OAAO;aACP,CAAC;QAAA,CACF;QACD,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE;YAC3B,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAAA,CACvC;KACD,CAAC;AAAA,CACF","sourcesContent":["/**\n * Role runner binding (2.2d) — maps registered `RoleMetadataV1` roles to child\n * `AgentDefinition`s executable through the experimental `AgentCompositionAPI`.\n *\n * The default run implementation is the deterministic first-batch role\n * callbacks (architecture-analyst / implementer / test-designer, 2.2c); a\n * caller may inject a real implementation via `run`. This slice never calls a\n * model.\n *\n * Library-level use works without any guard. When used through the\n * capability-runtime guards (`src/core/extensions/capability-runtime-guards.ts`),\n * the produced definitions must be defined/created by a manifest that declares\n * the `child-agent-controller` role and the `owner` must equal that manifest\n * id — the guards enforce this at the plugin boundary; this contract does not\n * duplicate guard logic.\n *\n * Required capability dependencies are checked explicitly (2.5a structured\n * `missing` shape) before activation (create/lease); they are never silently\n * skipped. Domain role runtimes live INSIDE the composition's child role: the\n * root/child two-value role enum is unchanged by design.\n */\nimport type { AgentDefinition, AgentExecutionContext } from \"../core/extensions/public-api.ts\";\nimport type { AvailableCapabilityV1 } from \"./dependency-wiring.ts\";\nimport { FIRST_BATCH_ROLES } from \"./first-roles.ts\";\nimport type { RoleCatalogV1, RoleMetadataV1 } from \"./role-catalog.ts\";\n\n/** Deterministic role input: a single spec string (first-batch contract). */\nexport interface RoleRunnerInputV1 {\n\treadonly spec: string;\n}\n\n/** Deterministic role output: a single result string (first-batch contract). */\nexport interface RoleRunnerResultV1 {\n\treadonly result: string;\n}\n\n/**\n * Per-role run implementation. `context` is present when executed through\n * `AgentCompositionAPI`; direct deterministic execution may omit it.\n */\nexport type RoleRunCallbackV1 = (\n\tinput: RoleRunnerInputV1,\n\tcontext?: AgentExecutionContext,\n) => RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;\n\n/** Runner-level run resolver; receives the roleId in addition to the callback arguments. */\nexport type RoleRunResolverV1 = (\n\troleId: string,\n\tinput: RoleRunnerInputV1,\n\tcontext?: AgentExecutionContext,\n) => RoleRunnerResultV1 | Promise<RoleRunnerResultV1>;\n\n/**\n * Role capability-dependency diagnostic: the 2.5a structured `missing` shape\n * (`capabilityId`/`requestedVersion`/`availableVersion?`/`reason`) with\n * `roleId` as the requester.\n */\nexport interface RoleMissingCapabilityV1 {\n\treadonly roleId: string;\n\treadonly capabilityId: string;\n\treadonly requestedVersion: number;\n\t/** Undefined when the capability is entirely absent from the registry. */\n\treadonly availableVersion?: number;\n\treadonly reason: \"missing\" | \"version_mismatch\";\n}\n\n/** Activation check result for one role's REQUIRED capability dependencies. */\nexport interface RoleCapabilityCheckV1 {\n\treadonly roleId: string;\n\treadonly status: \"satisfied\" | \"missing\";\n\t/** Required dependencies that are absent or version-mismatched; empty when satisfied. */\n\treadonly missing: readonly RoleMissingCapabilityV1[];\n}\n\nexport interface RoleRunnerOptionsV1 {\n\treadonly catalog: RoleCatalogV1;\n\t/**\n\t * Owner stamped onto produced child definitions. Required to equal the\n\t * declaring plugin manifest id when used behind the capability-runtime\n\t * guards; plain library use may omit it.\n\t */\n\treadonly owner?: string;\n\t/**\n\t * Injected run implementation replacing the deterministic first-batch\n\t * defaults entirely. Roles without any binding still fail explicitly on\n\t * execution.\n\t */\n\treadonly run?: RoleRunResolverV1;\n}\n\nexport interface RoleRunnerV1 {\n\treadonly catalog: RoleCatalogV1;\n\t/** Sorted registered roleIds. */\n\tlistRoleIds(): readonly string[];\n\t/**\n\t * Maps a registered role to a child agent definition (composition role\n\t * `child-agent-controller`, id `role:<roleId>`, version 1). Run the\n\t * capability check before creating/leasing an instance.\n\t */\n\tcreateDefinition(roleId: string): AgentDefinition<RoleRunnerInputV1, RoleRunnerResultV1>;\n\t/**\n\t * Pre-activation capability-dependency check against an exact-version\n\t * registry: a required dependency is satisfied only when the registry\n\t * offers the same capability id at exactly the requested version. Optional\n\t * dependencies never block activation and are not reported as missing.\n\t */\n\tcheckCapabilities(roleId: string, availableCapabilities: readonly AvailableCapabilityV1[]): RoleCapabilityCheckV1;\n\t/** Direct deterministic execution (the same run a produced definition binds). */\n\trun(roleId: string, input: RoleRunnerInputV1, context?: AgentExecutionContext): Promise<RoleRunnerResultV1>;\n}\n\nconst DEFINITION_VERSION = 1;\n\nconst FIRST_BATCH_RUNS = new Map<string, RoleRunCallbackV1>(\n\tFIRST_BATCH_ROLES.map((role) => [role.metadata.roleId, role.run]),\n);\n\n/** Default deterministic run dispatch: first-batch callbacks; explicit failure otherwise. */\nexport function runFirstBatchRole(\n\troleId: string,\n\tinput: RoleRunnerInputV1,\n\tcontext?: AgentExecutionContext,\n): RoleRunnerResultV1 | Promise<RoleRunnerResultV1> {\n\tconst callback = FIRST_BATCH_RUNS.get(roleId);\n\tif (!callback) throw new Error(`No run binding for role: ${roleId}`);\n\treturn callback(input, context);\n}\n\n/** Binds the catalog's registered roles to child agent definitions. */\nexport function createRoleRunner(options: RoleRunnerOptionsV1): RoleRunnerV1 {\n\tconst catalog = options.catalog;\n\n\tfunction requireRole(roleId: string): RoleMetadataV1 {\n\t\tconst metadata = catalog.get(roleId);\n\t\tif (!metadata) throw new Error(`Unknown role: ${roleId}`);\n\t\treturn metadata;\n\t}\n\n\tasync function execute(\n\t\troleId: string,\n\t\tinput: RoleRunnerInputV1,\n\t\tcontext?: AgentExecutionContext,\n\t): Promise<RoleRunnerResultV1> {\n\t\trequireRole(roleId);\n\t\tif (options.run) return options.run(roleId, input, context);\n\t\treturn runFirstBatchRole(roleId, input, context);\n\t}\n\n\treturn {\n\t\tcatalog,\n\t\tlistRoleIds() {\n\t\t\treturn catalog.list().map((role) => role.roleId);\n\t\t},\n\t\tcreateDefinition(roleId) {\n\t\t\tconst metadata = requireRole(roleId);\n\t\t\treturn {\n\t\t\t\tid: `role:${metadata.roleId}`,\n\t\t\t\tversion: DEFINITION_VERSION,\n\t\t\t\trole: \"child-agent-controller\",\n\t\t\t\t...(options.owner === undefined ? {} : { owner: options.owner }),\n\t\t\t\trun: (input, context) => execute(metadata.roleId, input, context),\n\t\t\t};\n\t\t},\n\t\tcheckCapabilities(roleId, availableCapabilities) {\n\t\t\tconst metadata = requireRole(roleId);\n\t\t\tconst registry = new Map(availableCapabilities.map((capability) => [capability.id, capability.version]));\n\t\t\tconst missing: RoleMissingCapabilityV1[] = [];\n\t\t\tfor (const dependency of metadata.capabilityDependencies) {\n\t\t\t\tif (!dependency.required) continue;\n\t\t\t\tconst availableVersion = registry.get(dependency.capabilityId);\n\t\t\t\tif (availableVersion === undefined) {\n\t\t\t\t\tmissing.push({\n\t\t\t\t\t\troleId,\n\t\t\t\t\t\tcapabilityId: dependency.capabilityId,\n\t\t\t\t\t\trequestedVersion: dependency.capabilityVersion,\n\t\t\t\t\t\treason: \"missing\",\n\t\t\t\t\t});\n\t\t\t\t} else if (availableVersion !== dependency.capabilityVersion) {\n\t\t\t\t\tmissing.push({\n\t\t\t\t\t\troleId,\n\t\t\t\t\t\tcapabilityId: dependency.capabilityId,\n\t\t\t\t\t\trequestedVersion: dependency.capabilityVersion,\n\t\t\t\t\t\tavailableVersion,\n\t\t\t\t\t\treason: \"version_mismatch\",\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t\treturn {\n\t\t\t\troleId,\n\t\t\t\tstatus: missing.length > 0 ? \"missing\" : \"satisfied\",\n\t\t\t\tmissing,\n\t\t\t};\n\t\t},\n\t\trun(roleId, input, context) {\n\t\t\treturn execute(roleId, input, context);\n\t\t},\n\t};\n}\n"]}