@algosuite/vo-mcp 0.2.0-beta.17 → 0.2.0-beta.18

package/dist/runner-cli.js

@@ -3187,6 +3187,65 @@ var init_orphan_agent_reaper = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/cli-version-floor.mjs
+function parseCliVersion(output) {
+  const match = /\b(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?\b/.exec(String(output ?? ""));
+  return match ? `${match[1]}.${match[2]}.${match[3]}` : null;
+}
+function compareSemver(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0; i < 3; i += 1) {
+    if (pa[i] !== pb[i]) return pa[i] < pb[i] ? -1 : 1;
+  }
+  return 0;
+}
+function checkCliVersionFloor(versionOutput, { floor = MIN_CLAUDE_CLI_VERSION } = {}) {
+  const version = parseCliVersion(versionOutput);
+  if (!version) {
+    const seen = String(versionOutput ?? "").trim().slice(0, 120) || "<empty>";
+    return {
+      ok: false,
+      version: null,
+      floor,
+      message: `could not parse a semver from \`claude --version\` output ("${seen}") \u2014 cannot prove the CLI meets the ${floor} security floor. ${SECURITY_RATIONALE}`
+    };
+  }
+  if (compareSemver(version, floor) < 0) {
+    return {
+      ok: false,
+      version,
+      floor,
+      message: `claude CLI ${version} is BELOW the minimum security floor ${floor}. ` + SECURITY_RATIONALE
+    };
+  }
+  return {
+    ok: true,
+    version,
+    floor,
+    message: `claude CLI ${version} meets the minimum security floor ${floor}`
+  };
+}
+function applyCliVersionFloor({ versionOutput, env: env2 = process.env, log: log3 = console.error } = {}) {
+  const check = checkCliVersionFloor(versionOutput);
+  if (check.ok) return { refused: false, check, message: check.message };
+  const enforce = String(env2?.VO_CLI_FLOOR_ENFORCE ?? "") === "1";
+  const message = `[cli-version-floor] ${enforce ? "REFUSING (VO_CLI_FLOOR_ENFORCE=1)" : "WARNING (warn-only)"}: ` + check.message;
+  try {
+    log3(message);
+  } catch {
+  }
+  return { refused: enforce, check, message };
+}
+var MIN_CLAUDE_CLI_VERSION, SECURITY_RATIONALE;
+var init_cli_version_floor = __esm({
+  "../../scripts/virtual-office/code-runner/cli-version-floor.mjs"() {
+    "use strict";
+    MIN_CLAUDE_CLI_VERSION = "2.1.216";
+    SECURITY_RATIONALE = "Claude Code 2.1.211/2.1.213 fixed a PreToolUse-hook bypass on unsandboxed Bash (our destructive-fs/git/cloud tripwires DO NOT FIRE on older CLIs) and worktree-subagents mutating the main checkout. Update: npm install -g @anthropic-ai/claude-code (or the native installer).";
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/claude-runner.mjs
 import { spawn as spawn2 } from "node:child_process";
 function extractText(content) {
@@ -3409,6 +3468,7 @@ var init_claude_runner = __esm({
     init_windows_claude_launch();
     init_terminal_process_cleanup();
     init_orphan_agent_reaper();
+    init_cli_version_floor();
     ClaudeRunner = class {
       get binary() {
         return "claude";
@@ -3445,7 +3505,7 @@ var init_claude_runner = __esm({
        */
       async checkAuth() {
         try {
-          const probe = spawnClaudeSync(["--version"], { timeout: 3e3, stdio: "ignore" });
+          const probe = spawnClaudeSync(["--version"], { timeout: 3e3, encoding: "utf8" });
           if (probe.error) {
             return {
               installed: false,
@@ -3456,6 +3516,8 @@ var init_claude_runner = __esm({
           if (probe.status !== 0) {
             return { installed: true, authenticated: false, message: "claude binary exists but --version failed (auth unclear)" };
           }
+          const floorGate = applyCliVersionFloor({ versionOutput: probe.stdout, env: process.env });
+          if (floorGate.refused) return { installed: true, authenticated: false, message: floorGate.message };
           const loggedIn = probeClaudeLoginState();
           if (loggedIn === false) {
             return {
@@ -4932,6 +4994,84 @@ var init_resume_branch = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/skill-catalog.mjs
+import { readdirSync as readdirSync2, readFileSync as readFileSync3, statSync } from "node:fs";
+import { dirname as dirname3, join as join3 } from "node:path";
+import { fileURLToPath } from "node:url";
+function parseFrontmatterNameDescription(raw) {
+  const text = String(raw).replace(/\r\n/g, "\n");
+  if (!text.startsWith("---\n")) return null;
+  const end = text.indexOf("\n---\n", 4);
+  if (end === -1) return null;
+  let name = "";
+  let description = "";
+  for (const line of text.slice(4, end).split("\n")) {
+    const idx = line.indexOf(":");
+    if (idx === -1) continue;
+    const key = line.slice(0, idx).trim();
+    const value = line.slice(idx + 1).trim();
+    if (key === "name") name = value;
+    else if (key === "description") description = value;
+  }
+  return name && description ? { name, description } : null;
+}
+function resolveDefaultRepoRoot() {
+  const starts = [dirname3(fileURLToPath(import.meta.url)), process.cwd()];
+  for (const start of starts) {
+    let dir = start;
+    for (let i = 0; i < 8; i += 1) {
+      try {
+        if (statSync(join3(dir, ".claude", "skills")).isDirectory()) return dir;
+      } catch {
+      }
+      const parent = dirname3(dir);
+      if (parent === dir) break;
+      dir = parent;
+    }
+  }
+  return process.cwd();
+}
+function loadSkillCatalog({ repoRoot: repoRoot2 = resolveDefaultRepoRoot() } = {}) {
+  try {
+    const skillsDir = join3(repoRoot2, ".claude", "skills");
+    const catalog = [];
+    for (const entry of readdirSync2(skillsDir)) {
+      const dir = join3(skillsDir, entry);
+      try {
+        if (!statSync(dir).isDirectory()) continue;
+        const parsed = parseFrontmatterNameDescription(
+          readFileSync3(join3(dir, "SKILL.md"), "utf8")
+        );
+        if (parsed) catalog.push(parsed);
+      } catch {
+      }
+    }
+    return catalog.sort((a, b) => a.name.localeCompare(b.name)).slice(0, CATALOG_CAP);
+  } catch {
+    return [];
+  }
+}
+function buildSkillCatalogBlock(catalog) {
+  if (!Array.isArray(catalog) || catalog.length === 0) return "";
+  const lines = catalog.map((s) => `  - ${s.name}: ${s.description}`);
+  return [
+    "\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 ALGOSUITE SKILL CATALOG \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550",
+    "The repo ships a skill corpus (same one Claude Code loads natively). When a",
+    "task matches a skill below, LOAD ITS FULL INSTRUCTIONS FIRST and follow them:",
+    "  - via MCP: call vo_skill_get with the skill name (any vendor with AlgoHQ MCP tools), or",
+    "  - via file: read .claude/skills/<name>/SKILL.md in this worktree.",
+    lines.join("\n"),
+    ""
+  ].join("\n");
+}
+var CATALOG_CAP;
+var init_skill_catalog = __esm({
+  "../../scripts/virtual-office/code-runner/skill-catalog.mjs"() {
+    "use strict";
+    CATALOG_CAP = 60;
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/dispatch-onboarding.mjs
 function buildDispatchOnboarding({ repo = "Algosuite-ai/Nexus" } = {}) {
   const reads = MANDATORY_READS.map((r, i) => `  ${i + 1}. ${r}`).join("\n");
@@ -4976,9 +5116,13 @@ function buildKnowledgeContextBlock(contextMarkdown) {
 }
 function composeDispatchPrompt(taskPrompt, opts = {}) {
   const knowledge = buildKnowledgeContextBlock(opts.knowledgeContextMarkdown);
+  const catalog = opts.includeSkillCatalog === false ? "" : buildSkillCatalogBlock(
+    opts.skillCatalog ?? loadSkillCatalog({ repoRoot: opts.repoRoot })
+  );
   const task = String(taskPrompt ?? "").trim();
   return [
     buildDispatchOnboarding(opts),
+    catalog,
     knowledge,
     "\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550 YOUR TASK \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550",
     task,
@@ -4989,6 +5133,7 @@ var MANDATORY_READS, NON_NEGOTIABLES;
 var init_dispatch_onboarding = __esm({
   "../../scripts/virtual-office/code-runner/dispatch-onboarding.mjs"() {
     "use strict";
+    init_skill_catalog();
     MANDATORY_READS = [
       "CLAUDE.md (repo root \u2014 Claude-specific rules; auto-loaded, but READ it)",
       'AGENTS.md (repo root \u2014 cross-vendor rules + "Onboarding for a lane"; NOT auto-loaded)',
@@ -5252,7 +5397,7 @@ var init_task_attachments = __esm({
 
 // ../../scripts/virtual-office/code-runner/session-spool-forwarder.mjs
 import { homedir as homedir3 } from "node:os";
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 import { readdir as readdir2, readFile as readFile2, unlink, writeFile as writeFile2 } from "node:fs/promises";
 import { createHash as createHash4 } from "node:crypto";
 function deriveUuid(seed) {
@@ -5284,9 +5429,9 @@ async function readSpool(spoolDir = SPOOL_DIR) {
   for (const f of files) {
     if (!f.endsWith(".json")) continue;
     try {
-      const record = JSON.parse(await readFile2(join3(spoolDir, f), "utf8"));
+      const record = JSON.parse(await readFile2(join4(spoolDir, f), "utf8"));
       if (record && typeof record.session_key === "string") {
-        out.push({ full: join3(spoolDir, f), record });
+        out.push({ full: join4(spoolDir, f), record });
       }
     } catch {
     }
@@ -5368,8 +5513,8 @@ var SPOOL_DIR, CLOUD_MAP_FILE, STALE_MS, ACTIVE_SILENCE_MS;
 var init_session_spool_forwarder = __esm({
   "../../scripts/virtual-office/code-runner/session-spool-forwarder.mjs"() {
     "use strict";
-    SPOOL_DIR = join3(homedir3(), ".vo", "session-spool");
-    CLOUD_MAP_FILE = join3(homedir3(), ".vo", "session-cloud-map.json");
+    SPOOL_DIR = join4(homedir3(), ".vo", "session-spool");
+    CLOUD_MAP_FILE = join4(homedir3(), ".vo", "session-cloud-map.json");
     STALE_MS = 60 * 60 * 1e3;
     ACTIVE_SILENCE_MS = 10 * 60 * 1e3;
   }
@@ -5438,14 +5583,14 @@ var init_rate_limit_resume_scheduler_core = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/rate-limit-resume-scheduler.mjs
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, existsSync as existsSync5, mkdirSync as mkdirSync4 } from "node:fs";
-import { dirname as dirname3, join as join4, resolve } from "node:path";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, existsSync as existsSync5, mkdirSync as mkdirSync4 } from "node:fs";
+import { dirname as dirname4, join as join5, resolve } from "node:path";
 function log(msg) {
   console.log(`[rate-limit-scheduler ${(/* @__PURE__ */ new Date()).toISOString()}] ${msg}`);
 }
 function readQueue(queuePath) {
   if (!existsSync5(queuePath)) return [];
-  const content = readFileSync3(queuePath, "utf-8");
+  const content = readFileSync4(queuePath, "utf-8");
   const lines = content.split("\n").filter((l) => l.trim());
   const entries = [];
   for (const line of lines) {
@@ -5458,18 +5603,18 @@ function readQueue(queuePath) {
   return entries;
 }
 function writeQueue(queuePath, entries) {
-  mkdirSync4(dirname3(queuePath), { recursive: true });
+  mkdirSync4(dirname4(queuePath), { recursive: true });
   const lines = entries.map((e) => JSON.stringify(e)).join("\n");
   writeFileSync3(queuePath, lines + (entries.length > 0 ? "\n" : ""), "utf-8");
 }
 function attemptsStorePath() {
-  return join4(dirname3(resumeQueuePath()), "resume-attempts.json");
+  return join5(dirname4(resumeQueuePath()), "resume-attempts.json");
 }
 function readAttemptsStore() {
   const p = attemptsStorePath();
   if (!existsSync5(p)) return {};
   try {
-    const parsed = JSON.parse(readFileSync3(p, "utf-8"));
+    const parsed = JSON.parse(readFileSync4(p, "utf-8"));
     return parsed && typeof parsed === "object" ? parsed : {};
   } catch {
     return {};
@@ -5477,7 +5622,7 @@ function readAttemptsStore() {
 }
 function writeAttemptsStore(store) {
   const p = attemptsStorePath();
-  mkdirSync4(dirname3(p), { recursive: true });
+  mkdirSync4(dirname4(p), { recursive: true });
   writeFileSync3(p, JSON.stringify(store, null, 2), "utf-8");
 }
 function countsFromStore(store) {
@@ -6203,7 +6348,7 @@ var init_superseded_pr_source = __esm({
 
 // ../../scripts/virtual-office/code-runner/pr-watcher.mjs
 import { homedir as homedir4 } from "node:os";
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir2 } from "node:fs/promises";
 import { spawnSync as spawnSync11 } from "node:child_process";
 function ghViewPr(prNumber, repo) {
@@ -6298,7 +6443,7 @@ async function readState(stateFile) {
 }
 async function writeState(stateFile, state) {
   try {
-    await mkdir2(join5(stateFile, ".."), { recursive: true });
+    await mkdir2(join6(stateFile, ".."), { recursive: true });
     await writeFile3(stateFile, JSON.stringify(state, null, 2), "utf8");
   } catch {
   }
@@ -6503,7 +6648,7 @@ var init_pr_watcher = __esm({
     init_pr_watcher_failure_confirmation();
     init_superseded_pr_source();
     init_superseded_pr_source();
-    DEFAULT_STATE_FILE = join5(homedir4(), ".vo", "dispatched-prs.json");
+    DEFAULT_STATE_FILE = join6(homedir4(), ".vo", "dispatched-prs.json");
     FAIL_CONCLUSIONS = /* @__PURE__ */ new Set([
       "FAILURE",
       "TIMED_OUT",
@@ -6743,44 +6888,45 @@ ${effortConfig.multiAgentInstruction}
   parts.push(String(basePrompt || "").trim());
   return parts.join("\n");
 }
-var EFFORT_MODE_CONFIG, DEFAULT_MODE;
+var RED_TEAM_DIRECTIVE, EFFORT_MODE_CONFIG, DEFAULT_MODE;
 var init_effort_mode_config = __esm({
   "../../scripts/virtual-office/code-runner/effort-mode-config.mjs"() {
     "use strict";
+    RED_TEAM_DIRECTIVE = "Before declaring done, red-team your own work: name the top ways it could be wrong \u2014 especially code that is correct but silently not wired into production callers \u2014 give the failure scenario for each, and state the evidence that rules it out.";
     EFFORT_MODE_CONFIG = {
       fast: {
         tier: "cheap",
         permissionMode: "acceptEdits",
         maxTurns: 80,
-        thinkingDirective: "",
+        thinkingDirective: RED_TEAM_DIRECTIVE,
         multiAgentInstruction: ""
       },
       standard: {
         tier: "mid",
         permissionMode: "acceptEdits",
         maxTurns: 200,
-        thinkingDirective: "",
+        thinkingDirective: RED_TEAM_DIRECTIVE,
         multiAgentInstruction: ""
       },
       deep: {
         tier: "best",
         permissionMode: "acceptEdits",
         maxTurns: 300,
-        thinkingDirective: "Think step-by-step. Verify assumptions against source code. Check edge cases.",
+        thinkingDirective: `Think step-by-step. Verify assumptions against source code. Check edge cases. ${RED_TEAM_DIRECTIVE}`,
         multiAgentInstruction: ""
       },
       ultra: {
         tier: "best",
         permissionMode: "acceptEdits",
         maxTurns: 500,
-        thinkingDirective: "Think step-by-step. Exhaustively verify every assumption against source code and documentation. Adversarially review your own work.",
+        thinkingDirective: `Think step-by-step. Exhaustively verify every assumption against source code and documentation. ${RED_TEAM_DIRECTIVE}`,
         multiAgentInstruction: "If this task needs multiple phases (research, build, verify), propose a plan first."
       },
       ultracode: {
         tier: "best",
         permissionMode: "acceptEdits",
         maxTurns: 800,
-        thinkingDirective: "Think step-by-step. Exhaustively verify every assumption against source code and documentation. Build worked examples to validate correctness. Adversarially review your own work.",
+        thinkingDirective: `Think step-by-step. Exhaustively verify every assumption against source code and documentation. Build worked examples to validate correctness. ${RED_TEAM_DIRECTIVE}`,
         multiAgentInstruction: "Decompose this work into parallel research, build, and verification streams; use workflow orchestration where it helps."
       }
     };
@@ -6791,7 +6937,7 @@ var init_effort_mode_config = __esm({
 // ../../scripts/virtual-office/model-registry.mjs
 import fs7 from "node:fs";
 import path15 from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 function uniqueModels(models = []) {
   return [...new Set(models.map((model) => String(model || "").trim()).filter(Boolean))];
 }
@@ -6971,7 +7117,7 @@ var __dirname, ROOT, DEFAULT_CACHE_DIR, DEFAULT_CACHE_FILE, DEFAULT_TTL_MS3, ANT
 var init_model_registry = __esm({
   "../../scripts/virtual-office/model-registry.mjs"() {
     "use strict";
-    __dirname = path15.dirname(fileURLToPath(import.meta.url));
+    __dirname = path15.dirname(fileURLToPath2(import.meta.url));
     ROOT = path15.resolve(__dirname, "..", "..");
     DEFAULT_CACHE_DIR = path15.join(ROOT, ".virtual-office-cache", "model-registry");
     DEFAULT_CACHE_FILE = path15.join(DEFAULT_CACHE_DIR, "catalog.json");
@@ -7551,9 +7697,9 @@ var init_classify_task = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/auto-router/effort-policy.mjs
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync5 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 function difficultyToRung(difficulty, thresholds) {
   const b = thresholds.rungBounds;
   if (difficulty >= b.R5) return "R5";
@@ -7578,7 +7724,7 @@ function operatorTierToRung(tier, difficulty, thresholds) {
   if (tier === "best" && difficulty >= thresholds.rungBounds.R5) return "R5";
   return base;
 }
-function readCodexModelsCache({ path: path18 = DEFAULT_CODEX_MODELS_CACHE, read = readFileSync4 } = {}) {
+function readCodexModelsCache({ path: path18 = DEFAULT_CODEX_MODELS_CACHE, read = readFileSync5 } = {}) {
   try {
     const parsed = JSON.parse(read(path18, "utf8"));
     return Array.isArray(parsed?.models) ? parsed : null;
@@ -7630,23 +7776,148 @@ var init_effort_policy = __esm({
     init_meta_model_catalog();
     RUNG_ORDER = ["R1", "R2", "R3", "R4", "R5"];
     rungIndex = (rung) => RUNG_ORDER.indexOf(rung);
-    DEFAULT_CODEX_MODELS_CACHE = join6(homedir5(), ".codex", "models_cache.json");
+    DEFAULT_CODEX_MODELS_CACHE = join7(homedir5(), ".codex", "models_cache.json");
+  }
+});
+
+// ../../scripts/virtual-office/code-runner/auto-router/role-cost-shadow.mjs
+function attributeRoleCosts({ plannerTokens, workerTokens, plannerModelRate, workerModelRate } = {}) {
+  const inputs = { plannerTokens, workerTokens, plannerModelRate, workerModelRate };
+  for (const [name, value] of Object.entries(inputs)) {
+    if (!isNonNegativeFinite(value)) {
+      return {
+        valid: false,
+        reason: `invalid ${name} (${String(value)}) \u2014 fail-open, no attribution`,
+        ...EMPTY_ATTRIBUTION
+      };
+    }
+  }
+  const plannerCostUsd = plannerTokens * plannerModelRate;
+  const workerCostUsd = workerTokens * workerModelRate;
+  const totalCostUsd = plannerCostUsd + workerCostUsd;
+  const totalTokens = plannerTokens + workerTokens;
+  const plannerCostShare = totalCostUsd > 0 ? plannerCostUsd / totalCostUsd : null;
+  const workerCostShare = totalCostUsd > 0 ? workerCostUsd / totalCostUsd : null;
+  const plannerTokenShare = totalTokens > 0 ? plannerTokens / totalTokens : null;
+  const workerTokenShare = totalTokens > 0 ? workerTokens / totalTokens : null;
+  const plannerCostShareRatio = plannerCostShare !== null && plannerTokenShare !== null && plannerTokenShare > 0 ? plannerCostShare / plannerTokenShare : null;
+  return {
+    valid: true,
+    plannerCostUsd,
+    workerCostUsd,
+    totalCostUsd,
+    plannerCostShare,
+    workerCostShare,
+    plannerTokenShare,
+    workerTokenShare,
+    plannerCostShareRatio
+  };
+}
+function shadowFanOutGate({ taskClass, disagreementSignal, confidence, panelSize } = {}, { thresholds } = {}) {
+  const cfg = { ...DEFAULT_SHADOW_FAN_OUT, ...thresholds?.shadowFanOut ?? {} };
+  const defaultsUsed = !thresholds?.shadowFanOut;
+  const no = (reason) => ({ wouldFanOut: false, reason, criterion: SHADOW_CRITERION, defaultsUsed });
+  if (!isUnitInterval(disagreementSignal)) {
+    return no(`invalid disagreementSignal (${String(disagreementSignal)}) \u2014 fail-open, single-model`);
+  }
+  if (!isUnitInterval(confidence)) {
+    return no(`invalid confidence (${String(confidence)}) \u2014 fail-open, single-model`);
+  }
+  const size = panelSize === void 0 || panelSize === null ? cfg.defaultPanelSize : panelSize;
+  if (!Number.isInteger(size) || size < 1) {
+    return no(`invalid panelSize (${String(panelSize)}) \u2014 fail-open, single-model`);
+  }
+  const never = Array.isArray(cfg.neverFanOutClasses) ? cfg.neverFanOutClasses : [];
+  if (typeof taskClass === "string" && never.includes(taskClass)) {
+    return no(`class=${taskClass} in neverFanOutClasses \u2014 fan-out never pays on low-stakes classes`);
+  }
+  if (size < cfg.minPanelSize) {
+    return no(`panelSize ${size} < ${cfg.minPanelSize} \u2014 too small to contribute independent signal`);
+  }
+  if (disagreementSignal < cfg.minDisagreementSignal) {
+    return no(`disagreement ${disagreementSignal} < ${cfg.minDisagreementSignal} \u2014 extra models would confirm, not inform`);
+  }
+  if (confidence > cfg.maxSingleModelConfidence) {
+    return no(`confidence ${confidence} > ${cfg.maxSingleModelConfidence} \u2014 single model already confident; fan-out adds cost, not signal`);
+  }
+  return {
+    wouldFanOut: true,
+    reason: `disagreement ${disagreementSignal} \u2265 ${cfg.minDisagreementSignal} AND confidence ${confidence} \u2264 ${cfg.maxSingleModelConfidence} (panel ${size})`,
+    criterion: SHADOW_CRITERION,
+    defaultsUsed
+  };
+}
+function buildShadowRecords({ decision, task = {}, thresholds, roleCostInputs = null } = {}) {
+  if (!decision || typeof decision !== "object") return [];
+  const base = {
+    shadow: true,
+    routerVersion: decision.routerVersion ?? null,
+    ts: decision.ts ?? null,
+    taskId: task?.id ?? null
+  };
+  const roleCost = roleCostInputs ? attributeRoleCosts(roleCostInputs) : { valid: false, reason: "planner/worker token telemetry unavailable at routing time", ...EMPTY_ATTRIBUTION };
+  const hasTaskSignal = typeof task?.disagreement_signal === "number";
+  const disagreementSignal = hasTaskSignal ? task.disagreement_signal : typeof decision.difficulty === "number" ? decision.difficulty / 100 : void 0;
+  const gate = shadowFanOutGate(
+    {
+      taskClass: decision.taskClass,
+      disagreementSignal,
+      confidence: decision.confidence,
+      panelSize: task?.panel_size
+    },
+    { thresholds }
+  );
+  return [
+    { kind: "shadow_role_cost", ...base, roleCost },
+    {
+      kind: "shadow_fan_out",
+      ...base,
+      disagreementSignal: disagreementSignal ?? null,
+      disagreementSource: hasTaskSignal ? "task.disagreement_signal" : "difficulty-proxy-v0",
+      ...gate
+    }
+  ];
+}
+var SHADOW_CRITERION, DEFAULT_SHADOW_FAN_OUT, isNonNegativeFinite, isUnitInterval, EMPTY_ATTRIBUTION;
+var init_role_cost_shadow = __esm({
+  "../../scripts/virtual-office/code-runner/auto-router/role-cost-shadow.mjs"() {
+    "use strict";
+    SHADOW_CRITERION = "info-bottleneck-v0";
+    DEFAULT_SHADOW_FAN_OUT = Object.freeze({
+      minDisagreementSignal: 0.4,
+      maxSingleModelConfidence: 0.6,
+      minPanelSize: 2,
+      defaultPanelSize: 3,
+      neverFanOutClasses: Object.freeze(["chore", "docs"])
+    });
+    isNonNegativeFinite = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0;
+    isUnitInterval = (n) => isNonNegativeFinite(n) && n <= 1;
+    EMPTY_ATTRIBUTION = Object.freeze({
+      plannerCostUsd: null,
+      workerCostUsd: null,
+      totalCostUsd: null,
+      plannerCostShare: null,
+      workerCostShare: null,
+      plannerTokenShare: null,
+      workerTokenShare: null,
+      plannerCostShareRatio: null
+    });
   }
 });
 
 // ../../scripts/virtual-office/code-runner/auto-router/auto-router.mjs
-import { readFileSync as readFileSync5, appendFileSync as appendFileSync2, mkdirSync as mkdirSync5 } from "node:fs";
+import { readFileSync as readFileSync6, appendFileSync as appendFileSync2, mkdirSync as mkdirSync5 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
-import { join as join7, dirname as dirname4 } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { join as join8, dirname as dirname5 } from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 function getAutoRouterMode(env2 = process.env) {
   const raw = String(env2.VO_CODE_RUNNER_AUTO_ROUTER || "").trim().toLowerCase();
   return MODES.has(raw) ? raw : "off";
 }
 function loadThresholds() {
   if (!cachedThresholds) {
-    const here = dirname4(fileURLToPath2(import.meta.url));
-    cachedThresholds = JSON.parse(readFileSync5(join7(here, "thresholds.json"), "utf8"));
+    const here = dirname5(fileURLToPath3(import.meta.url));
+    cachedThresholds = JSON.parse(readFileSync6(join8(here, "thresholds.json"), "utf8"));
   }
   return cachedThresholds;
 }
@@ -7712,16 +7983,36 @@ function formatDecisionReason(decision, maxLen = 480) {
   const s = `[${decision.routerVersion}] ${decision.taskClass} d=${decision.difficulty} c=${decision.confidence} \u2192 ${decision.rung}/${decision.tier}${decision.effort ? ` effort=${decision.effort}` : ""} turns=${decision.maxTurns} $${decision.maxBudgetUsd}${decision.flags.length ? ` [${decision.flags.join(",")}]` : ""} :: ${decision.reasons.join("; ")}`;
   return s.length > maxLen ? `${s.slice(0, maxLen - 1)}\u2026` : s;
 }
-var ROUTER_VERSION, DECISION_FALLBACK_PATH, MODES, cachedThresholds;
+function appendDecisionFallback(decision, { path: path18 = DECISION_FALLBACK_PATH, append = appendFileSync2, mkdir: mkdir3 = mkdirSync5, task, thresholds, roleCostInputs } = {}) {
+  try {
+    mkdir3(dirname5(path18), { recursive: true });
+    append(path18, `${JSON.stringify(decision)}
+`, "utf8");
+    if (isRouterDecision(decision)) {
+      try {
+        const records = buildShadowRecords({ decision, task, thresholds: thresholds || loadThresholds(), roleCostInputs });
+        for (const record of records) append(path18, `${JSON.stringify(record)}
+`, "utf8");
+      } catch {
+      }
+    }
+    return true;
+  } catch {
+    return false;
+  }
+}
+var ROUTER_VERSION, DECISION_FALLBACK_PATH, MODES, cachedThresholds, isRouterDecision;
 var init_auto_router = __esm({
   "../../scripts/virtual-office/code-runner/auto-router/auto-router.mjs"() {
     "use strict";
     init_classify_task();
     init_effort_policy();
+    init_role_cost_shadow();
     ROUTER_VERSION = "0.1.0";
-    DECISION_FALLBACK_PATH = join7(homedir6(), ".claude", "vo-auto-router-decisions.jsonl");
+    DECISION_FALLBACK_PATH = join8(homedir6(), ".claude", "vo-auto-router-decisions.jsonl");
     MODES = /* @__PURE__ */ new Set(["off", "shadow", "on"]);
     cachedThresholds = null;
+    isRouterDecision = (d) => Boolean(d && typeof d === "object" && typeof d.taskClass === "string" && typeof d.confidence === "number");
   }
 });
 
@@ -7753,7 +8044,7 @@ function resolveAgentEffort({ agent, tier, env: env2, applying, decision }) {
   }
   return applying ? decision.effort ?? null : null;
 }
-async function resolveEffortDispatch({ client, task, agent = "claude", env: env2, basePrompt, resolveModel = resolveTaskModel, route = routeTask }) {
+async function resolveEffortDispatch({ client, task, agent = "claude", env: env2, basePrompt, resolveModel = resolveTaskModel, route = routeTask, appendDecision = appendDecisionFallback }) {
   const dispatchMode = task.dispatch_mode ?? await client.getDispatchMode().catch(() => "standard");
   const effortConfig = resolveEffortMode(dispatchMode);
   const routerMode = getAutoRouterMode(env2);
@@ -7772,6 +8063,12 @@ async function resolveEffortDispatch({ client, task, agent = "claude", env: env2
     { agent }
   );
   const effort = resolveAgentEffort({ agent, tier, env: env2, applying, decision });
+  if (decision) {
+    try {
+      appendDecision(decision, { task });
+    } catch {
+    }
+  }
   return {
     dispatchMode,
     routerMode,
@@ -8360,7 +8657,7 @@ __export(code_runner_daemon_exports, {
 });
 import os4 from "node:os";
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { fileURLToPath as fileURLToPath3 } from "node:url";
+import { fileURLToPath as fileURLToPath4 } from "node:url";
 function log2(msg) {
   console.log(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${msg}`);
 }
@@ -8718,7 +9015,7 @@ var init_code_runner_daemon = __esm({
     sleep2 = (ms) => new Promise((r) => setTimeout(r, ms));
     numOrUndef = (x) => typeof x === "number" ? x : void 0;
     safeProgress = makeSafeProgress(log2);
-    invokedDirectly = process.argv[1] && fileURLToPath3(import.meta.url) === process.argv[1] && // Bundle-safe: self-start only when THIS file is the real entry (not inlined into vo-mcp's runner-cli.js ⇒ double-claim).
+    invokedDirectly = process.argv[1] && fileURLToPath4(import.meta.url) === process.argv[1] && // Bundle-safe: self-start only when THIS file is the real entry (not inlined into vo-mcp's runner-cli.js ⇒ double-claim).
     import.meta.url.endsWith("code-runner-daemon.mjs");
     if (invokedDirectly) {
       const once2 = process.argv.includes("--once");