@algosuite/vo-mcp 0.2.0-beta.28 → 0.2.0-beta.29

package/dist/runner-cli.js

@@ -3001,6 +3001,62 @@ var init_windows_claude_launch = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/claude-credential-choice.mjs
+function isTruthyFlag(v) {
+  const s = String(v ?? "").trim().toLowerCase();
+  return s === "1" || s === "true" || s === "yes" || s === "on";
+}
+function wantsLogin(env2) {
+  return isTruthyFlag(env2[CLAUDE_PREFER_LOGIN_ENV]) || isTruthyFlag(env2[PREFER_LOGIN_ENV]);
+}
+function wantsKey(env2) {
+  return isTruthyFlag(env2[CLAUDE_PREFER_KEY_ENV]) || isTruthyFlag(env2[PREFER_KEY_ENV]);
+}
+function classifyClaudeCredential(baseEnv = {}, { getKey, probeLogin } = {}) {
+  const preferKey = wantsKey(baseEnv);
+  if (!preferKey && wantsLogin(baseEnv)) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN, key: null };
+  }
+  if (baseEnv.ANTHROPIC_API_KEY) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.ENV_KEY, key: null };
+  }
+  const key = getKey();
+  if (!key) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.NO_KEY, key: null };
+  }
+  if (preferKey) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY, key };
+  }
+  if (probeLogin() === true) {
+    return { source: CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS, key: null };
+  }
+  return { source: CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN, key };
+}
+var PREFER_LOGIN_ENV, CLAUDE_PREFER_LOGIN_ENV, PREFER_KEY_ENV, CLAUDE_PREFER_KEY_ENV, CLAUDE_CREDENTIAL_SOURCE;
+var init_claude_credential_choice = __esm({
+  "../../scripts/virtual-office/code-runner/claude-credential-choice.mjs"() {
+    "use strict";
+    PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
+    CLAUDE_PREFER_LOGIN_ENV = "VO_RUNNER_CLAUDE_PREFER_LOGIN";
+    PREFER_KEY_ENV = "VO_RUNNER_PREFER_KEY";
+    CLAUDE_PREFER_KEY_ENV = "VO_RUNNER_CLAUDE_PREFER_KEY";
+    CLAUDE_CREDENTIAL_SOURCE = Object.freeze({
+      /** PREFER_LOGIN set (and not overridden): any API key is ignored. */
+      PREFER_LOGIN: "prefer_login",
+      /** An explicit ANTHROPIC_API_KEY in the environment — the manual override. */
+      ENV_KEY: "env_key",
+      /** No key anywhere; the spawn falls through to the login session. */
+      NO_KEY: "no_key",
+      /** A stored key, used because the operator explicitly opted out of tier 1. */
+      KEYCHAIN_PREFER_KEY: "keychain_prefer_key",
+      /** A stored key exists but a proven live subscription outranks it. */
+      SUBSCRIPTION_WINS: "subscription_wins",
+      /** A stored key, used because no live subscription was proven. */
+      KEYCHAIN: "keychain"
+    });
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/anthropic-key-store.mjs
 import { createRequire as createRequire2 } from "node:module";
 import { spawnSync as spawnSync2 } from "node:child_process";
@@ -3022,46 +3078,22 @@ function getAnthropicKey({ EntryCtor = defaultEntryCtor() } = {}) {
     return null;
   }
 }
-function isTruthyFlag(v) {
-  const s = String(v ?? "").trim().toLowerCase();
-  return s === "1" || s === "true" || s === "yes" || s === "on";
-}
-function wantsLogin(env2) {
-  return isTruthyFlag(env2[CLAUDE_PREFER_LOGIN_ENV]) || isTruthyFlag(env2[PREFER_LOGIN_ENV]);
-}
-function wantsKey(env2) {
-  return isTruthyFlag(env2[CLAUDE_PREFER_KEY_ENV]) || isTruthyFlag(env2[PREFER_KEY_ENV]);
-}
 function withAnthropicKey(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
-  const preferKey = wantsKey(baseEnv);
-  if (!preferKey && wantsLogin(baseEnv)) {
-    const next = { ...baseEnv };
+  const { source, key } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
+  const next = { ...baseEnv };
+  if (source === CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN) {
     delete next.ANTHROPIC_API_KEY;
     return next;
   }
-  if (baseEnv.ANTHROPIC_API_KEY) return { ...baseEnv };
-  const key = getKey();
-  if (!key) return { ...baseEnv };
-  if (!preferKey && probeLogin() === true) return { ...baseEnv };
-  return { ...baseEnv, ANTHROPIC_API_KEY: key };
+  if (key !== null) next.ANTHROPIC_API_KEY = key;
+  return next;
 }
 function claudeCostBasis(env2 = process.env) {
   return String(env2.ANTHROPIC_API_KEY || "").trim() ? "vendor_billed" : "subscription_api_equivalent";
 }
 function describeAnthropicAuthSource(baseEnv = {}, { getKey = getAnthropicKey, probeLogin = probeClaudeLoginState } = {}) {
-  const preferKey = wantsKey(baseEnv);
-  if (!preferKey && wantsLogin(baseEnv)) {
-    return "claude auth login (VO_RUNNER_PREFER_LOGIN set \u2014 any API key ignored)";
-  }
-  if (baseEnv.ANTHROPIC_API_KEY) return "ANTHROPIC_API_KEY from environment";
-  if (!getKey()) return "claude auth login session (no API key set)";
-  if (preferKey) {
-    return "ANTHROPIC_API_KEY from OS keychain (VO_RUNNER_PREFER_KEY set \u2014 subscription ignored)";
-  }
-  if (probeLogin() === true) {
-    return "claude auth login session (subscription beats the stored keychain key)";
-  }
-  return "ANTHROPIC_API_KEY from OS keychain";
+  const { source } = classifyClaudeCredential(baseEnv, { getKey, probeLogin });
+  return AUTH_SOURCE_DESCRIPTION[source];
 }
 function augmentAuthError(summary) {
   const s = String(summary ?? "");
@@ -3083,19 +3115,25 @@ function probeClaudeLoginState({
     return null;
   }
 }
-var require2, KEY_SERVICE, KEY_ACCOUNT, _entryCtor, _loadTried, PREFER_LOGIN_ENV, CLAUDE_PREFER_LOGIN_ENV, PREFER_KEY_ENV, CLAUDE_PREFER_KEY_ENV, AUTH_ERROR_RE;
+var require2, KEY_SERVICE, KEY_ACCOUNT, _entryCtor, _loadTried, AUTH_SOURCE_DESCRIPTION, AUTH_ERROR_RE;
 var init_anthropic_key_store = __esm({
   "../../scripts/virtual-office/code-runner/anthropic-key-store.mjs"() {
     "use strict";
     init_windows_claude_launch();
+    init_claude_credential_choice();
+    init_claude_credential_choice();
     require2 = createRequire2(import.meta.url);
     KEY_SERVICE = "algosuite-vo";
     KEY_ACCOUNT = "anthropic-api-key";
     _loadTried = false;
-    PREFER_LOGIN_ENV = "VO_RUNNER_PREFER_LOGIN";
-    CLAUDE_PREFER_LOGIN_ENV = "VO_RUNNER_CLAUDE_PREFER_LOGIN";
-    PREFER_KEY_ENV = "VO_RUNNER_PREFER_KEY";
-    CLAUDE_PREFER_KEY_ENV = "VO_RUNNER_CLAUDE_PREFER_KEY";
+    AUTH_SOURCE_DESCRIPTION = Object.freeze({
+      [CLAUDE_CREDENTIAL_SOURCE.PREFER_LOGIN]: "claude auth login (VO_RUNNER_PREFER_LOGIN set \u2014 any API key ignored)",
+      [CLAUDE_CREDENTIAL_SOURCE.ENV_KEY]: "ANTHROPIC_API_KEY from environment",
+      [CLAUDE_CREDENTIAL_SOURCE.NO_KEY]: "claude auth login session (no API key set)",
+      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN_PREFER_KEY]: "ANTHROPIC_API_KEY from OS keychain (VO_RUNNER_PREFER_KEY set \u2014 subscription ignored)",
+      [CLAUDE_CREDENTIAL_SOURCE.SUBSCRIPTION_WINS]: "claude auth login session (subscription beats the stored keychain key)",
+      [CLAUDE_CREDENTIAL_SOURCE.KEYCHAIN]: "ANTHROPIC_API_KEY from OS keychain"
+    });
     AUTH_ERROR_RE = /\b401\b|invalid[^.]{0,24}(authentication|credential)|authentication_error|unauthorized|not[ _-]?authenticated/i;
   }
 });
@@ -7443,6 +7481,13 @@ function makeUsageRow({
   }
   return row;
 }
+function readingAgeMs(row, nowMs = Date.now()) {
+  const at = row && typeof row.captured_at === "string" ? row.captured_at : null;
+  if (!at) return null;
+  const ms = new Date(at).getTime();
+  if (!Number.isFinite(ms)) return null;
+  return Math.max(0, nowMs - ms);
+}
 var clampPct, readJson, ACCOUNT_KEY_SALT;
 var init_shared = __esm({
   "../../scripts/virtual-office/code-runner/account-usage/shared.mjs"() {
@@ -7463,8 +7508,17 @@ var init_shared = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/account-usage/claude.mjs
+import fs7 from "node:fs";
 import os3 from "node:os";
 import path14 from "node:path";
+function fileCaptureTime(filePath, explicit, statFn) {
+  if (typeof explicit === "string" && explicit) return explicit;
+  try {
+    return statFn(filePath).mtime.toISOString();
+  } catch {
+    return null;
+  }
+}
 function usageBaseUrl(env2 = process.env) {
   const raw = env2.ANTHROPIC_BASE_URL || "https://api.anthropic.com";
   return String(raw).replace(/\/+$/, "");
@@ -7570,7 +7624,12 @@ async function readClaudeOAuthUsage({
     clearTimeout(timer);
   }
 }
-function readClaudeFileUsage({ homeDir = os3.homedir(), read: rawRead = readJson } = {}) {
+function readClaudeFileUsage({
+  homeDir = os3.homedir(),
+  read: rawRead = readJson,
+  statFn = fs7.statSync,
+  now = () => Date.now()
+} = {}) {
   const read = (p) => {
     try {
       return rawRead(p);
@@ -7579,31 +7638,39 @@ function readClaudeFileUsage({ homeDir = os3.homedir(), read: rawRead = readJson
     }
   };
   const accountId = readAccountId({ homeDir, read });
-  const status = read(path14.join(homeDir, ".claude", "claude-usage.json"));
+  const fresh = (row) => {
+    if (!row) return null;
+    const age = readingAgeMs(row, now());
+    if (age === null || age > MAX_FILE_AGE_MS) return null;
+    return row;
+  };
+  const statusPath = path14.join(homeDir, ".claude", "claude-usage.json");
+  const status = read(statusPath);
   if (status && (status.seven_day || status.five_hour)) {
-    const row = makeUsageRow({
+    const row = fresh(makeUsageRow({
       agent: "claude",
       source: "statusline",
-      capturedAt: typeof status.capturedAt === "string" ? status.capturedAt : null,
+      capturedAt: fileCaptureTime(statusPath, status.capturedAt, statFn),
       accountId,
       sevenDay: status.seven_day?.used_percentage,
       fiveHour: status.five_hour?.used_percentage,
       sevenDayResetsAt: status.seven_day?.resets_at ?? null,
       fiveHourResetsAt: status.five_hour?.resets_at ?? null
-    });
+    }));
     if (row) return row;
   }
-  const weekly = read(path14.join(homeDir, ".claude", "claude-weekly-usage.json"));
+  const weeklyPath = path14.join(homeDir, ".claude", "claude-weekly-usage.json");
+  const weekly = read(weeklyPath);
   if (weekly) {
-    const row = makeUsageRow({
+    const row = fresh(makeUsageRow({
       agent: "claude",
       source: "file",
-      capturedAt: typeof weekly.capturedAt === "string" ? weekly.capturedAt : null,
+      capturedAt: fileCaptureTime(weeklyPath, weekly.capturedAt, statFn),
       accountId,
       sevenDay: weekly.sevenDayPct,
       fiveHour: weekly.fiveHourPct,
       sevenDayResetsAt: weekly.sevenDayResetsAt ?? null
-    });
+    }));
     if (row) return row;
   }
   return null;
@@ -7616,11 +7683,12 @@ async function readClaudeUsage(opts = {}) {
   }
   return readClaudeFileUsage(opts);
 }
-var USAGE_PATH, OAUTH_BETA, DEFAULT_TIMEOUT_MS;
+var MAX_FILE_AGE_MS, USAGE_PATH, OAUTH_BETA, DEFAULT_TIMEOUT_MS;
 var init_claude = __esm({
   "../../scripts/virtual-office/code-runner/account-usage/claude.mjs"() {
     "use strict";
     init_shared();
+    MAX_FILE_AGE_MS = 6 * 60 * 60 * 1e3;
     USAGE_PATH = "/api/oauth/usage";
     OAUTH_BETA = "oauth-2025-04-20";
     DEFAULT_TIMEOUT_MS = 5e3;
@@ -9043,7 +9111,7 @@ var init_effort_mode_config = __esm({
 });
 
 // ../../scripts/virtual-office/model-registry.mjs
-import fs7 from "node:fs";
+import fs8 from "node:fs";
 import path15 from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 function uniqueModels(models = []) {
@@ -9156,9 +9224,9 @@ async function fetchGoogleModels(fetchImpl, env2 = process.env) {
   return (data?.models || []).map((model) => normalizeCatalogModel({ ...model, provider: "google", source: "google" })).filter(Boolean);
 }
 function readCache(cacheFile = DEFAULT_CACHE_FILE, nowMs = Date.now(), ttlMs = DEFAULT_TTL_MS3) {
-  if (!fs7.existsSync(cacheFile)) return null;
+  if (!fs8.existsSync(cacheFile)) return null;
   try {
-    const parsed = JSON.parse(fs7.readFileSync(cacheFile, "utf-8"));
+    const parsed = JSON.parse(fs8.readFileSync(cacheFile, "utf-8"));
     if (nowMs - Number(parsed.checkedAtMs || 0) > ttlMs) return null;
     if (!Array.isArray(parsed.models)) return null;
     return parsed;
@@ -9167,8 +9235,8 @@ function readCache(cacheFile = DEFAULT_CACHE_FILE, nowMs = Date.now(), ttlMs = D
   }
 }
 function writeCache(cacheFile = DEFAULT_CACHE_FILE, payload) {
-  fs7.mkdirSync(path15.dirname(cacheFile), { recursive: true });
-  fs7.writeFileSync(cacheFile, JSON.stringify(payload, null, 2));
+  fs8.mkdirSync(path15.dirname(cacheFile), { recursive: true });
+  fs8.writeFileSync(cacheFile, JSON.stringify(payload, null, 2));
 }
 async function fetchRegistryCatalog({
   fetchImpl = fetch,
@@ -10440,6 +10508,93 @@ var init_task_helpers = __esm({
   }
 });
 
+// ../../scripts/virtual-office/code-runner/swarm-admission.mjs
+function canLaunchSuccessorAgent(agent, platform = process.platform) {
+  const name = typeof agent === "string" ? agent.trim() : "";
+  if (!Object.prototype.hasOwnProperty.call(SUCCESSOR_LAUNCH_SHAPES, name)) return false;
+  if (platform === "win32" && !SUCCESSOR_LAUNCH_SHAPES[name]) return false;
+  return true;
+}
+function isSubscriptionExhausted(usage) {
+  if (!usage || typeof usage !== "object") return false;
+  const readings = [usage.seven_day_used_pct, usage.five_hour_used_pct, usage.monthly_used_pct];
+  return readings.some((v) => typeof v === "number" && Number.isFinite(v) && v >= SUBSCRIPTION_EXHAUSTED_PCT);
+}
+function clampSubagents(requested) {
+  if (!Number.isFinite(requested) || requested < 1) return 0;
+  return Math.min(Math.floor(requested), MAX_BOUND_SUBAGENTS);
+}
+function usageFor(accountUsage, agent) {
+  if (!Array.isArray(accountUsage)) return null;
+  return accountUsage.find((row) => row && row.agent === agent) ?? null;
+}
+function exhaustedAgents(availableAgents, accountUsage) {
+  if (!Array.isArray(availableAgents)) return [];
+  return availableAgents.filter((row) => row && row.installed === true && row.authenticated === true && row.auth_tier === AUTH_TIER_SUBSCRIPTION && isSubscriptionExhausted(usageFor(accountUsage, row.agent))).map((row) => row.agent);
+}
+function resolveRunnerSwarmBinding({
+  swarmId,
+  agent,
+  availableAgents,
+  accountUsage = [],
+  requestedSubagents = MAX_BOUND_SUBAGENTS,
+  nowIso,
+  platform = process.platform
+} = {}) {
+  const id = typeof swarmId === "string" ? swarmId.trim() : "";
+  const boundAgent = typeof agent === "string" ? agent.trim() : "";
+  if (id.length === 0 || boundAgent.length === 0) return null;
+  if (!canLaunchSuccessorAgent(boundAgent, platform)) return null;
+  const budget = clampSubagents(requestedSubagents);
+  if (budget === 0) return null;
+  const rows = Array.isArray(availableAgents) ? availableAgents : [];
+  const row = rows.find((r) => r && r.agent === boundAgent) ?? null;
+  if (!row || row.installed !== true || row.authenticated !== true) return null;
+  const tier = AUTH_TIER_TO_SWARM_TIER[row.auth_tier];
+  if (!tier) return null;
+  const exhausted = exhaustedAgents(rows, accountUsage);
+  const boundExhausted = tier === "tier1_subscription" && isSubscriptionExhausted(usageFor(accountUsage, boundAgent));
+  const effectiveBudget = boundExhausted ? Math.min(budget, EXHAUSTED_SUBAGENT_BUDGET) : budget;
+  const basis = `code-task dispatch admitted on '${boundAgent}' at auth tier '${row.auth_tier}' (runner-local capability probe)`;
+  return {
+    schema_version: 1,
+    swarm_id: id,
+    tier,
+    agent: boundAgent,
+    reason: boundExhausted ? `${basis}; that subscription window is >=${SUBSCRIPTION_EXHAUSTED_PCT}% spent, so the fan-out is bound at a REDUCED ceiling of ${effectiveBudget} instead of being left unbound and uncapped` : basis,
+    exhausted_agents: exhausted,
+    subagent_budget: effectiveBudget,
+    // Never a platform-billed fan-out in this lane — see the module header.
+    spend_cap_usd: null,
+    resolved_at: typeof nowIso === "string" && nowIso ? nowIso : (/* @__PURE__ */ new Date()).toISOString()
+  };
+}
+function mintSwarmTierBindingEnv(input) {
+  const binding = resolveRunnerSwarmBinding(input);
+  if (!binding) return {};
+  return { [SWARM_TIER_BINDING_ENV]: JSON.stringify(binding) };
+}
+var SWARM_TIER_BINDING_ENV, MAX_BOUND_SUBAGENTS, SUBSCRIPTION_EXHAUSTED_PCT, EXHAUSTED_SUBAGENT_BUDGET, SUCCESSOR_LAUNCH_SHAPES, AUTH_TIER_TO_SWARM_TIER;
+var init_swarm_admission = __esm({
+  "../../scripts/virtual-office/code-runner/swarm-admission.mjs"() {
+    "use strict";
+    init_agent_auth_tier();
+    SWARM_TIER_BINDING_ENV = "VO_SWARM_TIER_BINDING";
+    MAX_BOUND_SUBAGENTS = 20;
+    SUBSCRIPTION_EXHAUSTED_PCT = 95;
+    EXHAUSTED_SUBAGENT_BUDGET = 1;
+    SUCCESSOR_LAUNCH_SHAPES = Object.freeze({
+      claude: true,
+      codex: false
+    });
+    AUTH_TIER_TO_SWARM_TIER = Object.freeze({
+      [AUTH_TIER_SUBSCRIPTION]: "tier1_subscription",
+      [AUTH_TIER_LOCAL]: "tier1_local",
+      [AUTH_TIER_API_KEY]: "tier2_user_key"
+    });
+  }
+});
+
 // ../../scripts/virtual-office/code-runner/agent-process-env.mjs
 function safeIdentityPart(value, fallback) {
   const normalized = String(value || "").trim().replace(/[^a-zA-Z0-9_-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -10452,8 +10607,14 @@ function safeBaseEnv(env2 = {}) {
   }
   return result;
 }
-function buildAgentProcessEnv(env2, { agent = "agent", runnerId = "vo-runner", taskId = "task", githubReadToken = null } = {}) {
+function buildAgentProcessEnv(env2, { agent = "agent", runnerId = "vo-runner", taskId = "task", githubReadToken = null, swarmAdmission = null } = {}) {
   const base = safeBaseEnv(env2);
+  if (swarmAdmission) {
+    for (const key of Object.keys(base)) {
+      if (key.toUpperCase() === SWARM_TIER_BINDING_ENV) delete base[key];
+    }
+    Object.assign(base, mintSwarmTierBindingEnv({ ...swarmAdmission, agent, swarmId: taskId }));
+  }
   if (typeof githubReadToken === "string" && githubReadToken) {
     base.GH_TOKEN = githubReadToken;
     base.GITHUB_TOKEN = githubReadToken;
@@ -10471,6 +10632,7 @@ var SAFE_ENV_NAMES;
 var init_agent_process_env = __esm({
   "../../scripts/virtual-office/code-runner/agent-process-env.mjs"() {
     "use strict";
+    init_swarm_admission();
     SAFE_ENV_NAMES = /* @__PURE__ */ new Set([
       "AGENT_ID",
       "APPDATA",
@@ -10511,7 +10673,31 @@ var init_agent_process_env = __esm({
       // it. #9242 added VO_RUNNER_PREFER_KEY without this line, which left the
       // escape hatch inert — an operator who set it still got the subscription.
       "VO_RUNNER_PREFER_KEY",
-      "VO_RUNNER_CLAUDE_PREFER_KEY"
+      "VO_RUNNER_CLAUDE_PREFER_KEY",
+      // The swarm tier binding (SWARM_TIER_BINDING_ENV in
+      // packages/vo-mcp/src/swarm/tier-binding.ts). A fan-out resolves its billing
+      // tier ONCE at admission and exports the binding so every subagent inherits
+      // the same answer instead of re-resolving its own. This line is what lets it
+      // cross the process boundary at all: the daemon builds each child env with
+      // buildAgentProcessEnv(process.env) at
+      // scripts/virtual-office/code-runner-daemon.mjs:117 (sibling dir, not this
+      // one), so a name absent from this set is stripped and the binding binds
+      // NOTHING —
+      // exactly how #9242's VO_RUNNER_PREFER_KEY shipped inert until #9247.
+      //
+      // NOT a credential and NOT an authorization input: it names a tier, it never
+      // grants one, and it carries no key material (see the module's header rule).
+      "VO_SWARM_TIER_BINDING",
+      // Where the swarm SPAWN LEDGER lives (SWARM_LEDGER_DIR_ENV in
+      // packages/vo-mcp/src/swarm/spawn-ledger.ts). The ledger is the durable,
+      // host-shared counter that bounds the TOTAL spawns under one swarm_id; the
+      // binding above only bounds the depth of one chain. If a parent's override
+      // were stripped here, the child would ledger into a DIFFERENT directory,
+      // claim slot 0 again, and the shared ceiling would silently degrade back to a
+      // per-process quota — which is precisely the defect the ledger closes.
+      //
+      // A path, not a credential. Absent means the default ~/.vo/swarm-ledger.
+      "VO_SWARM_LEDGER_DIR"
     ]);
   }
 });
@@ -11002,7 +11188,7 @@ var init_inference_task_runner = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/isolation-audit.mjs
-import fs8 from "node:fs";
+import fs9 from "node:fs";
 import fsp11 from "node:fs/promises";
 import path16 from "node:path";
 async function defaultRun(command, args, cwd, options = {}) {
@@ -11097,7 +11283,7 @@ async function restoreExactCanonicalPaths(baseline, evidence, run) {
   for (const relative of evidence.untracked) {
     const target = path16.resolve(baseline.root, relative);
     const prefix = `${path16.resolve(baseline.root)}${path16.sep}`;
-    if (!target.startsWith(prefix) || !fs8.existsSync(target)) continue;
+    if (!target.startsWith(prefix) || !fs9.existsSync(target)) continue;
     await fsp11.rm(target, { force: true });
   }
 }
@@ -11627,7 +11813,7 @@ var init_publication_scope = __esm({
 });
 
 // ../../scripts/virtual-office/code-runner/recovery-ledger.mjs
-import fs9 from "node:fs";
+import fs10 from "node:fs";
 import fsp13 from "node:fs/promises";
 import path18 from "node:path";
 function recoveryTaskId(prompt) {
@@ -11665,7 +11851,7 @@ async function readLedger(file, readFile5) {
 async function findPreservedRecovery(task, {
   clonesRoot: clonesRoot2 = process.env.VO_CODE_RUNNER_CLONES_ROOT || "",
   readFile: readFile5 = fsp13.readFile,
-  exists = fs9.existsSync
+  exists = fs10.existsSync
 } = {}) {
   const resumedFrom = /^[0-9a-f-]{36}$/iu.test(String(task.resumed_from || "")) ? String(task.resumed_from).toLowerCase() : null;
   const originalTaskId = recoveryTaskId(task.prompt) ?? resumedFrom;
@@ -12389,7 +12575,7 @@ import { fileURLToPath as fileURLToPath6 } from "node:url";
 function log(msg) {
   console.log(`[code-runner ${(/* @__PURE__ */ new Date()).toISOString()}] ${msg}`);
 }
-async function processOneTask(client, task, cfg, runnerInstanceId) {
+async function processOneTask(client, task, cfg, runnerInstanceId, swarmAdmission = null) {
   const id = task.code_task_id;
   let worktreeName = "";
   let preserveReason = null;
@@ -12439,7 +12625,8 @@ async function processOneTask(client, task, cfg, runnerInstanceId) {
       model,
       effort: effectiveEffort,
       maxBudgetUsd: sel.agent === "claude" ? effectiveMaxBudgetUsd : void 0,
-      env: buildAgentProcessEnv(process.env, { agent: sel.agent, runnerId: cfg.runnerId, taskId: id, githubReadToken: agentGithubReadToken }),
+      env: buildAgentProcessEnv(process.env, { agent: sel.agent, runnerId: cfg.runnerId, taskId: id, githubReadToken: agentGithubReadToken, swarmAdmission }),
+      // swarmAdmission mints VO_SWARM_TIER_BINDING: ONE tier decision for this task's whole agent tree
       sandbox,
       onProgress: (text, checkpoint) => {
         const usage = checkpoint?.tokenUsage ? { token_usage: checkpoint.tokenUsage } : {};
@@ -12725,7 +12912,7 @@ async function main({ env: env2 = process.env, once: once2 = false } = {}) {
     }
     log(`claimed task ${task.code_task_id} (${task.repo})`);
     active += 1;
-    const runTask = task.kind === "inference" ? processInferenceTask(client, task, cfg, { safeProgress, runnerStagePatch, log }) : processOneTask(client, task, cfg, runnerInstanceId);
+    const runTask = task.kind === "inference" ? processInferenceTask(client, task, cfg, { safeProgress, runnerStagePatch, log }) : processOneTask(client, task, cfg, runnerInstanceId, { availableAgents: claimAgents.availableAgents, accountUsage: accountUsage.get() });
     const done = runTask.catch(async (error) => {
       log(`task ${task.code_task_id} unhandled runner error: ${error.message}`);
       if (task.kind === "inference") await deliverTerminalRun({