@autodidacticon/orchestrator 0.0.0-stage → 0.2.0

package/README.md

@@ -1,3 +1,158 @@
-# Temporary Holding Version
+# orchestrator
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+An orchestrator that runs many coding agents in parallel from a dependency graph of tasks against one repository. Dependencies gate admission. Each agent works in its own git worktree and reports through a local API. Humans resolve blockers and review milestones. A task is done only after its sealed work has been rebased, checked, and published to the integration branch. The orchestrator itself is a static TypeScript daemon with named hook points for model-backed judgment, designed to converge to the same outcome after a crash at any point. Task graphs are imported from Linear or Jira through the session's own tracker connector, and progress is mirrored back to the tracker.
+
+## Running locally
+
+Prerequisites: Node 22.13 or newer (the store uses Node's built-in SQLite), git, and, for real agents, the Claude Code CLI (`claude`) logged in. Scripted agents need nothing else. Start from a Claude Code session with the plugin, or from a terminal with the CLIs.
+
+### From a Claude Code session
+
+Install the plugin from this repository's marketplace. Nothing else needs to be installed or on PATH:
+
+```
+claude plugin marketplace add autodidacticon/orchestrator
+claude plugin install orchestrator@orchestrator
+```
+
+From a checkout instead, run `npm install && npm run build` once, then `claude --plugin-dir /path/to/orchestrator/hosts/claude-code`.
+
+Then use the skills: `import` turns a Linear or Jira epic into the graph with the session's own tracker connector, `run` starts the daemon, has the session's own subagents execute the launches through a bundled workflow, and monitors (questions, reviews, stuck tasks, proposals, tracker mirroring), `work` adds workers from another session or switches the mode, and `review` judges a milestone's pinned commit. On `start` the daemon detects the repository's check command, integration branch, and the tools agents may run, and the skill reports them with their sources; when nothing supplies a check command, the skill looks in `CLAUDE.md`, the README, and the root manifests and sets it through `configure`, or asks. No `orchestrator.yaml` is needed; the terminal section below describes the resolution order and the overrides. The plugin's launcher (`hosts/claude-code/bin/orchestrator.mjs`) runs the package from the plugin's own `node_modules` after a marketplace install (Claude Code installs the published package `@autodidacticon/orchestrator` pinned in `hosts/claude-code/package.json`), from the checkout when loaded with `--plugin-dir`, and through `npx` as a fallback.
+
+Who executes launches is `runner.mode`: `pull` parks each prepared launch until a worker claims it, and is what a run started from the plugin defaults to, with the `run` skill's workflow claiming launches for visible session subagents; `spawn` has the daemon run headless Claude Code agents, and is the default for `orchestrator-ctl start` from a terminal, where no session is attached; `mixed` parks for `runner.claimWindowMs` (default 60 s) and then spawns. `runner.mode` in `orchestrator.yaml`, `orchestrator-ctl mode <mode>`, or `start` with `mode` are explicit choices that the plugin default never overrides. A claimed launch has no process: its lease is renewed by the worker's API calls and by progress in the worktree, and `release` hands it back (untouched: no attempt spent; with `--keep`, or `keep: true` on the tool, uncommitted work is committed on the launch branch, the branch is kept, and the task returns to unstarted at no cost with an `interrupted` context in its next brief, up to `daemon.maxKeptReleases` times, default 3).
+
+### From a terminal
+
+Build the package and put its executables on PATH:
+
+```
+git clone git@github.com:autodidacticon/orchestrator.git && cd orchestrator
+npm install
+npm run build
+npm link            # puts orchestrator, orchestrator-ctl, orchestrator-mcp, orchestrator-mcp-shim on PATH
+```
+
+1. No configuration file is needed. At every start the daemon reads the repository root (never subdirectories) and detects the check command from the first matching manifest in a fixed order (a `Makefile` with a `test` target, then `package.json` with a real `test` script using the package manager named by `packageManager` or the lockfile, then `Cargo.toml`, `go.mod`, `pyproject.toml`/`setup.cfg`/`pytest.ini` with uv or poetry when their lockfile exists, `Gemfile`, `build.gradle(.kts)`, `pom.xml`, `mix.exs`, `*.sln`/`*.csproj`), the integration branch (`origin/HEAD` when that branch exists locally, else the checked-out branch, else `main`), and the tools spawned agents may run (`Bash(git:*)` and the orchestrator tools, plus the test, run, install, and exec commands of every toolchain found: `npm test`, `npm run`, `npm install`, `npm ci`, `npx`, `node`, `cargo`, `go`, `pytest`, `python`, `pip`, `uv`, `poetry`, `make`, and their counterparts). Every value is resolved in one order, an explicit argument over `orchestrator.yaml` over the branch pinned for the run (integration branch only) over detection over the built-in default, and records where it came from. Arguments are durable overrides for the run: `orchestrator-ctl start --set checkCommand="make check" --set capacity=3` (also `integrationBranch`, `allowedTools` as a JSON array or one rule per flag, `runnerCommand`, `model`, `effort`), and `orchestrator-ctl config --check-command ... --capacity ... --allow "Bash(docker:*)" --runner-command ... --model ... --effort ... --clear <key>` on a running daemon; `orchestrator-ctl config` alone prints every key with its value and source, the detection record, and `needsConfig`. The same facts are in `status` (`config`, `toolchain`, `needsConfig`) and in `config.json` in the run directory. When nothing supplies a check command, `needsConfig` names it and submitted work is held, without spending an attempt, until one is set. The integration branch is pinned when the run first starts: a re-pointed `origin/HEAD` or a different checked-out branch never moves it, and an explicit different branch is refused once the run holds launches (start from a fresh run directory to change it). The derived allow list lets spawned agents fetch and run packages, including their install scripts, with the user's credentials; `runner.claude.deriveTools: false` with an explicit `runner.claude.allowedTools`, or a `deny` rule in the project's `.claude/settings.json`, narrows it. Which agents get the list is the runner mode: it is filled into the `{allowedTools}` slot of the default `runnerCommand` for launches the daemon spawns (`spawn`, and `mixed` after the claim window), while a launch claimed by a session worker runs under that session's own permissions (see the previous section). Workers run `claude-opus-5-5` at `medium` effort by default (`runner.claude.model` and `runner.claude.effort`, overridable the same way); a task chooses its own with `model` and `effort` in its payload, which the import fills from `model:<name>` and `effort:<level>` labels on the issue. The choice is fixed when a launch is prepared, filled into the `{model}` and `{effort}` slots of the default `runnerCommand` for spawned agents, carried in the claim response for session workers, and shown per launch in `status`. An existing `orchestrator.yaml` keeps working unchanged: keys it sets resolve with source `file`, and a `runnerCommand` without the `{allowedTools}`, `{model}`, or `{effort}` slots runs verbatim. The file is optional for everything else too:
+
+   ```yaml
+   integrationBranch: main
+   checkCommand: npm test          # run on every rebased submission before it is published
+   capacity: 2                     # agents in parallel
+   runner:
+     claude:
+       allowedTools: ["Bash(docker:*)"]   # appended to the derived list for spawned agents
+       deriveTools: true                  # false: only Bash(git:*), the orchestrator tools, and the rules above
+       model: claude-opus-5-5             # worker model; a task's `model` payload key or `model:<name>` label overrides it
+       effort: medium                     # low, medium, high, xhigh, or max; a task's `effort` key or `effort:<level>` label overrides it
+   scheduling:
+     order: [criticalPath, priority, fifo]   # admission order; ties keep graph file order
+     scopes: true                  # never run two tasks whose declared scopes overlap
+   budgets:
+     maxLaunchMs: 7200000          # 2 h per launch
+     maxRunCostUsd: 20             # pause admission when the run has spent this much
+   ```
+
+2. Start the daemon for that repository. It records run data under `~/.orchestrator/runs/<id>/` and prints the graph file path:
+
+   ```
+   cd /path/to/your/repo
+   orchestrator-ctl start          # {"started": true, "url": "http://127.0.0.1:...", "graphPath": "~/.orchestrator/runs/<id>/graph.yaml", ...}
+   ```
+
+3. Write the task graph to that `graphPath`. The daemon re-reads it on change. Every task needs a description and acceptance criteria, or it is blocked as under-specified:
+
+   ```yaml
+   nodes:
+     - id: T1
+       title: Add the schema migration
+       description: Create the users table migration and the model.
+       acceptanceCriteria: [migration applies cleanly, model has unit tests]
+       deps: []
+     - id: T2
+       title: Expose the users API
+       description: Add GET and POST /users on top of T1's model.
+       acceptanceCriteria: [endpoints documented, integration test passes]
+       deps: [T1]
+       scope: ["src/api/**", "package.json"]   # optional: path globs the work stays within
+       priority: 1                             # optional: lower is more urgent
+     - id: MVP
+       kind: milestone
+       gated: true                 # a human reviews and accepts the pinned commit
+       deps: [T2]
+   ```
+
+4. Operate the run from the same terminal:
+
+   ```
+   orchestrator-ctl status                         # sets by state, stall roots, open questions, stuck tasks, deferred tasks, cost, config, toolchain, needsConfig
+   orchestrator-ctl config [--check-command <cmd>] [--allow <rule>] [--capacity <n>] [--clear <key>]   # show or override the configuration
+   orchestrator-ctl answer T1 "use sqlite"         # answer an agent's question
+   orchestrator-ctl logs T1                        # the agent's captured output
+   orchestrator-ctl nudge T1 "commit what you have"
+   orchestrator-ctl accept MVP --sha <sha> --version 1   # or: reject MVP --note "..."
+   orchestrator-ctl reopen T1 [--cascade]
+   orchestrator-ctl proposals | accept-proposal <id> | reject-proposal <id> --note "..."
+   orchestrator-ctl pause | resume [--override-budget]
+   orchestrator-ctl mode pull | claim w1 | release <launchId> --reason "..."
+   orchestrator-ctl stop [--reap]                  # graceful: agents keep running and are adopted on the next start
+   orchestrator-ctl runs                           # every run under ~/.orchestrator
+   ```
+
+   The daemon exits on its own after `daemon.idleExitMs` (default 10 min, 0 disables) with nothing live and no session attached (`daemon.exitWhileAttached: true` lets it exit while one is), records why in `daemon.json` (`runs` shows `exit` for a daemon that is gone, or nothing after a crash), and any `orchestrator-ctl` command or plugin tool revives it on demand; only an explicit `stop` is final until the next `start`. `status` reports `idle` and `attachments`. To run the daemon in the foreground instead, `orchestrator --repo .` (SIGTERM stops it gracefully). To keep everything inside one directory, use a config with explicit paths and `orchestrator --config orchestrator.yaml` with `repoPath`, `graphPath`, and `dataDir` set; then pass `--data-dir` to `orchestrator-ctl`.
+
+By default agents are headless Claude Code sessions (`runnerCommand`, with `{allowedTools}`, `{model}`, and `{effort}` filled at spawn), each in its own git worktree with the brief on stdin and the agent API as an MCP server. For a dry run without model calls, point `runnerCommand` at the scripted agent: `node --import <repo>/node_modules/tsx/dist/loader.mjs <repo>/test/agents/scripted.ts {briefJson}`, and give each task a `behavior` such as `commitAndSubmit`, `blockAndWait:<question>`, or `fail`.
+
+### Tests
+
+`npm test` runs everything that needs no model: unit tests, slices with real subprocess agents, git, and the HTTP API, and the crash-injection suite in `test/crash`, which is the project gate. Three opt-in tests use a real model: `ORCH_E2E_CLAUDE=1 npm test -- test/e2e/claude` runs three Claude Code agents, `ORCH_E2E_CLAUDE_PLUGIN=1 npm test -- test/e2e/plugin` has a Claude Code session operate a run through the plugin, and `ORCH_E2E_CLAUDE_WORK=1 npm test -- test/e2e/work` has a session execute a run in pull mode with two workers through the work skill.
+
+## Behaviour
+
+A task is done once its sealed work has been rebased onto the integration branch, checked, and published as one squash commit with `Orchestrator-Task` and `Orchestrator-Launch` trailers; a gated milestone then waits for a human to accept its pinned commit. The daemon converges to the same outcome after a crash at any named point, and surviving agents are adopted on restart.
+
+Tracker sync. After an import that names its tracker, the daemon derives tracker-bound effects from its own transitions into a durable outbox, in the same transaction as the transition: an issue goes in progress on its first launch, done when its work is published (or, with `tracker.doneAt: milestoneAccepted`, when its gated milestone is accepted), cancelled on cancel; the parent issue follows its first starting child and closes when the milestone is accepted. Comments are posted where a human is needed: an agent's question, a block with its reason, a milestone ready for review, accepted, or rejected (`tracker.commentOnDone` and `tracker.commentOnFail` add completion and failure comments, both off by default). The daemon never talks to a tracker: the `run` skill drains the outbox after every `wait` with the session's Linear or Atlassian tools, mapping states by type, and acknowledges each effect (`outbox`, `ack` tools; `GET /v1/outbox`, `POST /v1/outbox/:id/{ack,nack}` routes; `orchestrator-ctl outbox | ack`). Every comment ends with a marker line, `— orchestrator run <id> · event <n>`, so a drainer can recognise its own comments and never posts one twice. A human reply under a question comment is relayed as the answer (`tracker.answersFromComments`, default on); the first answer wins. Config keys: `tracker.enabled` (`auto` | `always` | `never`), `maxAttempts`, `parentInProgress`, `doneAt`, `commentOnDone`, `commentOnFail`, `answersFromComments`. Status reports `tracker`, `outboxPending`, and `trackerErrors`. Manual check against a sandbox workspace: import an epic with the `import` skill in a Claude Code session connected to Linear or Jira, run it with the `run` skill, and watch the child issues move and the question comment appear; this is not part of `npm test`.
+
+The daemon's life. A session attaches through the plugin's operator server, which registers its process ancestry with the daemon on first contact and ends the attachment when its transport closes; the plugin's `SessionEnd` hook posts the ending session's ancestry as well, and the daemon ends any attachment whose own process has died. A claim made through a session carries its attachment, and when the attachment ends the daemon releases that launch with `keep` on the next tick: uncommitted work becomes a work-in-progress commit on the launch branch, the worktree goes, the branch stays, the task returns to `unstarted` with `attempts` unchanged and an `interrupted` context (prior launch, branch, head, the WIP commit) in its next brief, counted in `interruptions` and bounded by `daemon.maxKeptReleases`. With nothing live, no verifier job pending, no cascade pending, no request in flight, and no session attached, the daemon exits after `daemon.idleExitMs`, writes an exit record, and is revived by the next operator call; the plugin's `SessionStart` hook names runs whose daemon is alive or whose last exit left parked launches, open questions, a milestone under review, or a stall. Releasing a new version: bump the version in `package.json`, `hosts/claude-code/.claude-plugin/plugin.json`, and the pin in `hosts/claude-code/package.json`; `npm publish` (which builds); regenerate `hosts/claude-code/package-lock.json` with `npm install --package-lock-only` in that directory against the published version; then push.
+
+Scheduling. Ready tasks are admitted in the order of `scheduling.order`, a chain of stages applied as one stable sort (default `[criticalPath, priority, fifo]`): `criticalPath` puts the task with the longest chain of tasks behind it first, so the chain that gates the milestone starts first; `priority` reads the task's `priority` as a number, lower first, missing last (the import passes the tracker's number through, dropping Linear's 0); `fifo` is graph file order, which also breaks any remaining tie. Waiting tasks whose answer has arrived are resumed before anything is ordered; `order: [fifo]` restores the v1 order. A task may declare `scope`, a list of path globs (in the graph file, or under a `Scope` heading in an imported description, one glob per bullet; `options.scopeHeading` renames it). While a task is running, waiting, submitted, or has a claimable launch, no task whose scope overlaps it is launched: two globs overlap when the static prefix of one (the leading path segments before any `*`, `?`, `[`, `{`) is a prefix of the other's, so `src/**` holds `src/api/x.ts`, `src/api/**` and `src/ui/**` run together, and `**` or `*` overlaps everything. Held-back tasks appear as `deferred: [{ id, reason: scopeOverlap, with }]` in status and as a count in the digest; they launch on the first tick after the blocker publishes. `scheduling.scopes: false` turns the filter off; a malformed `scope` fails graph validation.
+
+Health. The daemon renews a launch's lease every tick while its process is alive, so a quiet agent is never failed for silence; lease expiry applies only to launches the runner cannot observe. Progress is a worktree fingerprint (head plus status and diff), any API call, or a changed heartbeat text. A launch idle past `health.stuckAfterMs` (default 15 min) is flagged (`stuck` in status and the digest, a `stuck` notice in its inbox, event `launch.stuck`) and idle past `health.stuckFailAfterMs` (default 45 min) is reaped and failed with reason `stuck`, spending an attempt; either threshold at 0 disables that step. `orchestrator-ctl nudge <task> <message>` (also the `nudge` tool) queues a message for the agent's inbox. Budgets: `budgets.maxLaunchMs` (default 2 h) fails an overlong launch with reason `timeBudget`, waiting time excluded; `budgets.maxRunCostUsd` (default 0, unlimited) pauses admission with `pausedReason: costBudget` once the run's cost, read from Claude Code's final JSON per launch, reaches the ceiling, and `resume` is refused until `orchestrator-ctl resume --override-budget` (or `resume` with `overrideBudget`) raises the ceiling by one budget. When a task is published, every other running agent gets a `baseMoved` notice naming the new head and the files it touched, and may rebase its branch onto it; the verifier rebases from the merge base so such branches integrate cleanly (`health.baseMovedNotice` turns the notice off).
+
+Graph mutation. Milestones hold no work, so they never block a reopen: reopening a done task resets every done or submitted milestone downstream (`milestone.reset`), which is reviewed again at its next version once the revised work is published, and dependency edits to such milestones are compatible reloads that reset them the same way. A reopen whose target has started task dependents is refused with the blockers; `orchestrator-ctl reopen <task> --cascade` (or `reopen` with `cascade: true`) records a plan, returns it as `reset: [{ id, from }]`, and the next tick kills running dependents, drops queued verification, and returns done dependents and the target to unstarted with budgets reset. Nothing on the integration branch is reverted: each relaunch is briefed with a revision context naming the prior launch, branch, published commit, and report, and publishes a further trailer commit. Agents may put structured `proposals` (title, description, acceptance criteria, optional deps, scope, labels) in their submit report; they are held pending (`proposals` in status and the digest) until `accept-proposal <id> [--node-id <tracker key>]` appends a task node depending on the proposer, joining its gated milestone when `proposals.joinMilestone` is true (default), or `reject-proposal <id> --note`. A compatible reload that edits a running task's payload sends its agent a `payloadChanged` inbox notice (`graph.payloadChangedNotice`, default true); the pinned brief stays and the next launch uses the new payload.
+
+## Contents
+
+### Requirements
+
+Current specs in `openspec/specs/`, synced from the archived changes `add-orchestrator-v1`, `add-session-operator`, `add-tracker-sync`, `add-health-monitoring`, `add-graph-mutation`, `add-pull-runner`, `add-scheduling-policy`, `replace-sqlite-driver`, `add-daemon-lifecycle`, `add-toolchain-discovery`, and `add-model-selection`:
+
+- Capability specs
+  - [task-graph](openspec/specs/task-graph/spec.md): loading, validation, external nodes, readiness, milestones, stall detection, revisions, reload compatibility, revocability through milestones and the cascade plan, critical path length
+  - [task-lifecycle](openspec/specs/task-lifecycle/spec.md): states, transitions by actor, admission, counters, leases, retry, reopen guard, cascade reopen, milestone reset and review, cancellation
+  - [agent-protocol](openspec/specs/agent-protocol/spec.md): the brief, the API, deduplication, sealing, no-op and acceptance checks, blocking and resume, fallback, fencing, MCP façade, brief validation, the check command and tool rules in the brief
+  - [integration-pipeline](openspec/specs/integration-pipeline/spec.md): worktrees, the verifier and the hold while no check command is configured, publication, conflicts, foreign commits, milestone tags
+  - [crash-recovery](openspec/specs/crash-recovery/spec.md): durable records, recovery per boundary, adoption, fencing, sweeps, crash points, invariants, store transactions
+  - [operator-control](openspec/specs/operator-control/spec.md): operator routes shared by the CLI and the MCP server, status, run directories, daemon lifecycle, idle exit, exit record and revival, session attachments, the configuration route and start arguments, event stream, review bundle, graph import, pause and resume, shutdown, logs
+  - [operator-mcp](openspec/specs/operator-mcp/spec.md): the operator MCP server a host session drives: tool set, wait, start with configuration arguments, configure, review
+  - [graph-import](openspec/specs/graph-import/spec.md): normalized issue records, mapping rules including the `model:` and `effort:` selector labels, acceptance criteria and scope extraction, priority normalisation, import outcome
+  - [host-integration](openspec/specs/host-integration/spec.md): package entrypoints, per-host wrappers, the plugin launcher and session hooks, skills and how they report the toolchain and resolve `needsConfig`, no native dependencies, quiet SQLite binding
+  - [tracker-sync](openspec/specs/tracker-sync/spec.md): the durable outbox of tracker effects, effect kinds and marker, mirroring policy, done semantics, the drainer contract
+  - [health-monitoring](openspec/specs/health-monitoring/spec.md): process liveness, progress signals, stuck detection and escalation, the diagnosis hook, launch and run budgets, usage accounting, the base-moved notice
+  - [pull-runner](openspec/specs/pull-runner/spec.md): runner modes and the claim window, claim and release with keep (the claim carrying the launch's model and effort), session attachments, worker identity and idempotent re-claim, access modes with remote reserved
+  - [scheduling-policy](openspec/specs/scheduling-policy/spec.md): the admission ordering chain and its stages, declared scopes, the overlap rule, the scope filter at admission
+  - [toolchain-discovery](openspec/specs/toolchain-discovery/spec.md): resolution order and provenance, toolchain detection and the package manager, integration branch detection and pinning, derived allowed tools, runner command composition with the allow-list, model, and effort slots, the resolved configuration record, runtime overrides and start-only keys
+  - [model-selection](openspec/specs/model-selection/spec.md): the run default worker model and effort with provenance, per-task selectors and their validation, resolution fixed at preparation, delivery to spawned agents and claimed workers, visibility to operators
+- Archived change `add-orchestrator-v1` (the v1 runtime): [Proposal](openspec/changes/archive/2026-10-12-add-orchestrator-v1/proposal.md), [Design](openspec/changes/archive/2026-10-12-add-orchestrator-v1/design.md), [Tasks](openspec/changes/archive/2026-10-12-add-orchestrator-v1/tasks.md)
+- Archived change `add-session-operator` (operate from a Claude Code session): [Proposal](openspec/changes/archive/2026-10-12-add-session-operator/proposal.md), [Design](openspec/changes/archive/2026-10-12-add-session-operator/design.md), [Tasks](openspec/changes/archive/2026-10-12-add-session-operator/tasks.md)
+- Archived change `add-tracker-sync` (mirror the run to the tracker): [Proposal](openspec/changes/archive/2026-10-12-add-tracker-sync/proposal.md), [Design](openspec/changes/archive/2026-10-12-add-tracker-sync/design.md), [Tasks](openspec/changes/archive/2026-10-12-add-tracker-sync/tasks.md)
+- Archived change `add-health-monitoring` (liveness, stuck detection, budgets): [Proposal](openspec/changes/archive/2026-10-12-add-health-monitoring/proposal.md), [Design](openspec/changes/archive/2026-10-12-add-health-monitoring/design.md), [Tasks](openspec/changes/archive/2026-10-12-add-health-monitoring/tasks.md)
+- Archived change `add-graph-mutation` (transparent milestones, cascade reopen, proposals): [Proposal](openspec/changes/archive/2026-10-12-add-graph-mutation/proposal.md), [Design](openspec/changes/archive/2026-10-12-add-graph-mutation/design.md), [Tasks](openspec/changes/archive/2026-10-12-add-graph-mutation/tasks.md)
+- Archived change `add-pull-runner` (workers claim launches; the work skill and workflow): [Proposal](openspec/changes/archive/2026-10-13-add-pull-runner/proposal.md), [Design](openspec/changes/archive/2026-10-13-add-pull-runner/design.md), [Tasks](openspec/changes/archive/2026-10-13-add-pull-runner/tasks.md)
+- Archived change `add-scheduling-policy` (ordering chain, scopes, deferrals): [Proposal](openspec/changes/archive/2026-10-13-add-scheduling-policy/proposal.md), [Design](openspec/changes/archive/2026-10-13-add-scheduling-policy/design.md), [Tasks](openspec/changes/archive/2026-10-13-add-scheduling-policy/tasks.md)
+- Archived change `replace-sqlite-driver` (Node's built-in SQLite, no native dependency): [Proposal](openspec/changes/archive/2026-10-13-replace-sqlite-driver/proposal.md), [Design](openspec/changes/archive/2026-10-13-replace-sqlite-driver/design.md), [Tasks](openspec/changes/archive/2026-10-13-replace-sqlite-driver/tasks.md)
+- Archived change `add-daemon-lifecycle` (visible session subagents by default, idle exit and revival, session attachments, kept release, self-contained plugin, hooks): [Proposal](openspec/changes/archive/2026-10-13-add-daemon-lifecycle/proposal.md), [Design](openspec/changes/archive/2026-10-13-add-daemon-lifecycle/design.md), [Tasks](openspec/changes/archive/2026-10-13-add-daemon-lifecycle/tasks.md)
+- Archived change `add-toolchain-discovery` (the check command, integration branch, and spawned agents' allowed tools detected from the repository with provenance, durable overrides through `configure` and `--set`, no `orchestrator.yaml` required): [Proposal](openspec/changes/archive/2026-10-13-add-toolchain-discovery/proposal.md), [Design](openspec/changes/archive/2026-10-13-add-toolchain-discovery/design.md), [Tasks](openspec/changes/archive/2026-10-13-add-toolchain-discovery/tasks.md)
+
+- Archived change `add-model-selection` (workers run `claude-opus-5-5` at `medium` by default; a task names its own model or effort by payload or by `model:`/`effort:` labels; the choice is fixed per launch and carried to spawned agents and session workers): [Proposal](openspec/changes/archive/2026-10-17-add-model-selection/proposal.md), [Design](openspec/changes/archive/2026-10-17-add-model-selection/design.md), [Tasks](openspec/changes/archive/2026-10-17-add-model-selection/tasks.md)
+
+No change is active. The next planned piece of work, not yet proposed, is the usage and log loss when a launch is reaped on report.

package/dist/src/agent/api.js

@@ -0,0 +1,14 @@
+/**
+ * Agent API schemas. The contract is the operations and their semantics; the
+ * transport is loopback HTTP (server.ts) with an MCP façade (mcp-shim.ts).
+ */
+import { z } from 'zod';
+export { failBodySchema, questionSchema, submitBodySchema } from '../loop/orchestrator.js';
+export const AGENT_OPS = ['heartbeat', 'report', 'block', 'inbox', 'log'];
+export const fallbackFileSchema = z.object({
+    launchId: z.string(),
+    seq: z.number().int().nonnegative(),
+    kind: z.enum(['submit', 'fail', 'block']),
+    body: z.record(z.unknown()),
+});
+//# sourceMappingURL=api.js.map

package/dist/src/agent/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/agent/api.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAE3F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAEnF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAC5B,CAAC,CAAC"}

package/dist/src/agent/mcp-shim.js

@@ -0,0 +1,104 @@
+#!/usr/bin/env node
+/**
+ * MCP façade: a stdio MCP server exposing the five agent operations as tools
+ * and forwarding them to the daemon's HTTP API with the launch token from the
+ * environment. Retries through daemon restarts for the retry window.
+ *
+ * Env: ORCH_API, ORCH_LAUNCH_ID, ORCH_TOKEN, ORCH_RETRY_WINDOW_MS (default 120000).
+ */
+import { z } from 'zod';
+import { isEntrypoint } from '../entry.js';
+export function envFromProcess(env = process.env) {
+    const api = env['ORCH_API'];
+    const launchId = env['ORCH_LAUNCH_ID'];
+    const token = env['ORCH_TOKEN'];
+    if (!api || !launchId || !token)
+        throw new Error('ORCH_API, ORCH_LAUNCH_ID and ORCH_TOKEN are required');
+    return { api, launchId, token, retryWindowMs: Number(env['ORCH_RETRY_WINDOW_MS'] ?? 120_000) };
+}
+/** Forward one operation, retrying connection failures with backoff for the retry window. */
+export async function forward(env, op, body, method = 'POST') {
+    const url = `${env.api}/v1/launches/${env.launchId}/${op}`;
+    const deadline = Date.now() + env.retryWindowMs;
+    let delay = 100;
+    for (;;) {
+        try {
+            const res = await fetch(url, {
+                method,
+                headers: { authorization: `Bearer ${env.token}`, 'content-type': 'application/json' },
+                body: method === 'POST' ? JSON.stringify(body) : undefined,
+            });
+            return { status: res.status, body: await res.json() };
+        }
+        catch (err) {
+            if (Date.now() + delay > deadline)
+                throw err;
+            await new Promise((r) => setTimeout(r, delay));
+            delay = Math.min(delay * 2, 2000);
+        }
+    }
+}
+export const TOOL_NAMES = ['heartbeat', 'report', 'block', 'inbox', 'log'];
+export async function startShim(env) {
+    const { McpServer } = await import('@modelcontextprotocol/sdk/server/mcp.js');
+    const { StdioServerTransport } = await import('@modelcontextprotocol/sdk/server/stdio.js');
+    const server = new McpServer({ name: 'orchestrator-agent-api', version: '0.2.0' });
+    const text = (r) => ({
+        content: [{ type: 'text', text: JSON.stringify({ status: r.status, ...(typeof r.body === 'object' && r.body ? r.body : { body: r.body }) }) }],
+        isError: r.status >= 400,
+    });
+    server.registerTool('heartbeat', { description: 'Renew the lease and report progress; a changed progress text counts as progress for stuck detection.', inputSchema: { progress: z.string().optional() } }, async (args) => text(await forward(env, 'heartbeat', args)));
+    server.registerTool('report', {
+        description: 'Final report. kind=submit requires a committed, clean worktree; kind=fail gives up. seq must increase per call.',
+        inputSchema: {
+            seq: z.number().int().nonnegative(),
+            kind: z.enum(['submit', 'fail']),
+            summary: z.string().optional(),
+            interfaces: z.array(z.string()).optional(),
+            decisions: z.array(z.string()).optional(),
+            deviations: z.array(z.string()).optional(),
+            followUps: z.array(z.string()).optional(),
+            tests: z.array(z.string()).optional(),
+            acceptance: z.array(z.object({ criterion: z.string(), evidence: z.string() })).optional(),
+            noChanges: z.object({ justification: z.string() }).optional(),
+            proposals: z
+                .array(z.object({ title: z.string(), description: z.string(), acceptanceCriteria: z.array(z.string()), deps: z.array(z.string()).optional(), scope: z.array(z.string()).optional(), labels: z.array(z.string()).optional() }))
+                .optional()
+                .describe('Follow-up tasks you discovered; a human accepts them into the graph. followUps stays free text.'),
+            tried: z.string().optional(),
+            why: z.string().optional(),
+            whatWouldUnblock: z.string().optional(),
+        },
+    }, async (args) => text(await forward(env, 'report', args)));
+    server.registerTool('block', {
+        description: 'Ask a human a question and wait for the answer. Returns {answer} or {timeout:true}.',
+        inputSchema: {
+            seq: z.number().int().nonnegative(),
+            kind: z.enum(['needsDecision', 'needsAccess', 'impossible', 'dependencyCancelled', 'outOfScope', 'insufficientSpec', 'milestoneRejected']),
+            message: z.string(),
+            options: z.array(z.string()).optional(),
+        },
+    }, async (args) => text(await forward({ ...env, retryWindowMs: Math.max(env.retryWindowMs, 24 * 3600_000) }, 'block', args)));
+    server.registerTool('inbox', { description: 'Fetch pending notices from the orchestrator: stuck (no progress observed), nudge (a message from the operator), baseMoved (the integration branch advanced; head and files). Check after long steps.', inputSchema: {} }, async () => text(await forward(env, 'inbox', {}, 'GET')));
+    server.registerTool('log', { description: 'Append a log line to the launch log.', inputSchema: { text: z.string(), seq: z.number().int().optional() } }, async (args) => text(await forward(env, 'log', args)));
+    await server.connect(new StdioServerTransport());
+}
+export const USAGE = `orchestrator-mcp-shim: MCP façade for an agent launch.
+
+  orchestrator-mcp-shim
+
+A stdio MCP server exposing heartbeat, report, block, inbox, and log, forwarded
+to the daemon with the launch token. Env: ORCH_API, ORCH_LAUNCH_ID, ORCH_TOKEN,
+ORCH_RETRY_WINDOW_MS. The orchestrator writes this into each launch's mcp.json.
+`;
+const isEntry = isEntrypoint(import.meta.url);
+if (isEntry && (process.argv.includes('--help') || process.argv.includes('-h'))) {
+    process.stdout.write(USAGE);
+}
+else if (isEntry) {
+    startShim(envFromProcess()).catch((err) => {
+        process.stderr.write(`${String(err)}\n`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=mcp-shim.js.map

package/dist/src/agent/mcp-shim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-shim.js","sourceRoot":"","sources":["../../../src/agent/mcp-shim.ts"],"names":[],"mappings":";AACA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAS3C,MAAM,UAAU,cAAc,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACzG,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAY,EAAE,EAAU,EAAE,IAA6B,EAAE,SAAyB,MAAM;IACpH,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,GAAG,gBAAgB,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,aAAa,CAAC;IAChD,IAAI,KAAK,GAAG,GAAG,CAAC;IAChB,SAAS,CAAC;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM;gBACN,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBACrF,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aAC3D,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAC7C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YAC/C,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAEpF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAY;IAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,yCAAyC,CAAC,CAAC;IAC9E,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,2CAA2C,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,CAAC,CAAoC,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAe,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACnK,OAAO,EAAE,CAAC,CAAC,MAAM,IAAI,GAAG;KACzB,CAAC,CAAC;IAEH,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,sGAAsG,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzQ,MAAM,CAAC,YAAY,CACjB,QAAQ,EACR;QACE,WAAW,EAAE,iHAAiH;QAC9H,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC9B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACzC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;YACrC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;YACzF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;YAC7D,SAAS,EAAE,CAAC;iBACT,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;iBAC7N,QAAQ,EAAE;iBACV,QAAQ,CAAC,iGAAiG,CAAC;YAC9G,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC5B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;YAC1B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;SACxC;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CACzD,CAAC;IACF,MAAM,CAAC,YAAY,CACjB,OAAO,EACP;QACE,WAAW,EAAE,qFAAqF;QAClG,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACnC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;YAC1I,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;YACnB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;SACxC;KACF,EACD,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,EAAE,GAAG,GAAG,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAC1H,CAAC;IACF,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,sMAAsM,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACjU,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,sCAAsC,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAEhN,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAAG;;;;;;;CAOpB,CAAC;AAEF,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;KAAM,IAAI,OAAO,EAAE,CAAC;IACnB,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/agent/seal.js

@@ -0,0 +1,28 @@
+/**
+ * Criteria are compared after dropping markdown code spans and emphasis, a
+ * leading list marker such as the brief's "3.", and trailing punctuation,
+ * collapsing whitespace, and ignoring case, so an agent that quotes a criterion
+ * loosely still covers it. See specs/agent-protocol "Acceptance evidence".
+ */
+export function normaliseCriterion(text) {
+    return text
+        .replace(/[`*_~]/g, '')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .replace(/^(?:\d+[.)]|[-+])\s*/, '')
+        .replace(/[.;:,]+$/, '')
+        .toLowerCase();
+}
+export function checkSubmission(input) {
+    if (input.sealedSha === input.baseSha && !input.noChanges) {
+        return { ok: false, reason: 'emptySubmission', message: 'no commits ahead of base and no noChanges declaration' };
+    }
+    // A criterion is covered by its normalised text or by its 1-based position in the brief's list.
+    const covered = new Set(input.covered.map(normaliseCriterion));
+    const uncovered = input.criteria.filter((c, i) => !covered.has(normaliseCriterion(c)) && !covered.has(String(i + 1)));
+    if (uncovered.length) {
+        return { ok: false, reason: 'missingAcceptanceEvidence', message: `no evidence for: ${uncovered.join('; ')}`, uncovered };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=seal.js.map

package/dist/src/agent/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../src/agent/seal.ts"],"names":[],"mappings":"AAiBA;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI;SACR,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;SACtB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC;SACnC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAA2B;IACzD,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC;IACpH,CAAC;IACD,gGAAgG;IAChG,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,oBAAoB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC;IAC5H,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/agent/server.js

@@ -0,0 +1,96 @@
+/**
+ * Loopback HTTP server for agents and operators.
+ *   POST /v1/launches/:id/{heartbeat,report,block,log}
+ *   GET  /v1/launches/:id/inbox
+ * Operator routes are registered by operator/routes.ts.
+ */
+import http from 'node:http';
+export class ApiServer {
+    orch;
+    server;
+    routes = [];
+    port = 0;
+    constructor(orch) {
+        this.orch = orch;
+        this.server = http.createServer((req, res) => void this.dispatch(req, res));
+        this.server.keepAliveTimeout = 5_000;
+        this.addRoute('POST', /^\/v1\/launches\/([^/]+)\/(heartbeat|report|block|log)$/, async (req, body, [launchId, op]) => {
+            const token = bearer(req);
+            return this.orch.agentCall(launchId, token, op, body);
+        });
+        this.addRoute('GET', /^\/v1\/launches\/([^/]+)\/inbox$/, async (req, _body, [launchId]) => {
+            return this.orch.agentCall(launchId, bearer(req), 'inbox', {});
+        });
+    }
+    addRoute(method, pattern, handler) {
+        this.routes.push({ method, pattern, handler });
+    }
+    async listen(port = 0) {
+        await new Promise((resolve, reject) => {
+            const onError = (err) => reject(err);
+            this.server.once('error', onError);
+            this.server.listen(port, '127.0.0.1', () => {
+                this.server.off('error', onError);
+                resolve();
+            });
+        });
+        this.port = this.server.address().port;
+        const url = `http://127.0.0.1:${this.port}`;
+        this.orch.apiBaseUrl = url;
+        return url;
+    }
+    async close() {
+        await new Promise((resolve) => this.server.close(() => resolve()));
+        this.server.closeAllConnections();
+    }
+    async dispatch(req, res) {
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        for (const r of this.routes) {
+            if (r.method !== req.method)
+                continue;
+            const m = r.pattern.exec(url.pathname);
+            if (!m)
+                continue;
+            // A probe is a liveness check that must not count as activity. See specs/operator-control "Idle exit".
+            const probe = req.method === 'GET' && url.pathname === '/v1/status' && url.searchParams.get('probe') === '1';
+            const attachment = req.headers['x-orch-attachment'];
+            const attachmentId = typeof attachment === 'string' && attachment ? attachment : undefined;
+            this.orch.requestBegan();
+            try {
+                const body = req.method === 'POST' || req.method === 'PUT' ? await readJson(req) : Object.fromEntries(url.searchParams.entries());
+                const out = await r.handler(req, body, m.slice(1));
+                // The operation stands; the caller learns its attachment is unknown and registers again. See specs/operator-control "Session attachments".
+                const headers = attachmentId && !this.orch.isLiveAttachment(attachmentId) ? { 'x-orch-attachment': 'unknown' } : undefined;
+                send(res, out.status, out.body, headers);
+            }
+            catch (err) {
+                send(res, 500, { error: String(err) });
+            }
+            finally {
+                this.orch.requestEnded(probe);
+            }
+            return;
+        }
+        send(res, 404, { error: 'not found' });
+    }
+}
+function bearer(req) {
+    const h = req.headers.authorization ?? '';
+    return h.startsWith('Bearer ') ? h.slice(7).trim() : '';
+}
+function send(res, status, body, headers = {}) {
+    const text = JSON.stringify(body ?? {});
+    res.writeHead(status, { 'content-type': 'application/json', 'content-length': Buffer.byteLength(text), ...headers });
+    res.end(text);
+}
+async function readJson(req) {
+    const chunks = [];
+    for await (const c of req)
+        chunks.push(c);
+    const text = Buffer.concat(chunks).toString('utf8');
+    if (!text.trim())
+        return {};
+    const parsed = JSON.parse(text);
+    return parsed && typeof parsed === 'object' ? parsed : {};
+}
+//# sourceMappingURL=server.js.map

package/dist/src/agent/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../src/agent/server.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,MAAM,OAAO,SAAS;IAKS;IAJZ,MAAM,CAAc;IACpB,MAAM,GAAY,EAAE,CAAC;IACtC,IAAI,GAAG,CAAC,CAAC;IAET,YAA6B,IAAkB;QAAlB,SAAI,GAAJ,IAAI,CAAc;QAC7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,yDAAyD,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE;YACnH,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAkB,EAAE,KAAK,EAAE,EAAa,EAAE,IAAI,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,kCAAkC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;YACxF,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC;IAED,QAAQ,CAAC,MAAuB,EAAE,OAAe,EAAE,OAAqB;QACtE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;QACnB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,OAAO,GAAG,CAAC,GAAU,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACzC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAClC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;QACxD,MAAM,GAAG,GAAG,oBAAoB,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC;QAC3B,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,GAAyB,EAAE,GAAwB;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAAE,SAAS;YACtC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACvC,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,uGAAuG;YACvG,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;YAC7G,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;YACpD,MAAM,YAAY,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;gBAClI,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,2IAA2I;gBAC3I,MAAM,OAAO,GAAG,YAAY,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3H,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IACzC,CAAC;CACF;AAED,SAAS,MAAM,CAAC,GAAyB;IACvC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;IAC1C,OAAO,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAa,EAAE,UAAkC,EAAE;IACzG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IACrH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAyB;IAC/C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;QAAE,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IAC3C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;AACzF,CAAC"}

package/dist/src/brief/compose.js

@@ -0,0 +1,121 @@
+export function acceptanceCriteriaOf(payload) {
+    const raw = payload['acceptanceCriteria'];
+    if (Array.isArray(raw))
+        return raw.map(String);
+    if (typeof raw === 'string' && raw.trim())
+        return raw.split('\n').map((s) => s.replace(/^[-*]\s*/, '').trim()).filter(Boolean);
+    return [];
+}
+export function composeBrief(input, opts) {
+    const { launch, node } = input;
+    const criteria = acceptanceCriteriaOf(node.payload);
+    const json = {
+        launchId: launch.launchId,
+        taskId: node.id,
+        token: launch.token,
+        apiBaseUrl: input.apiBaseUrl,
+        worktree: launch.worktree,
+        branch: launch.branch,
+        baseSha: launch.baseSha,
+        graphRev: launch.graphRev,
+        integrationBranch: input.integrationBranch,
+        checkCommand: input.checkCommand,
+        allowedTools: input.allowedTools,
+        retryWindowMs: input.retryWindowMs,
+        fallbackPath: opts.fallbackPath,
+        attempt: launch.attempt,
+        launchNo: launch.launchNo,
+        task: node.payload,
+        acceptanceCriteria: criteria,
+        dependencies: input.depReports.map((d) => ({
+            taskId: d.taskId,
+            summary: d.report ? String(d.report.body['summary'] ?? '') : undefined,
+            report: d.report?.body,
+            cancelled: d.cancelled,
+            external: d.external,
+        })),
+        context: input.carry,
+    };
+    const title = String(node.payload['title'] ?? node.id);
+    const description = String(node.payload['description'] ?? '');
+    const lines = [];
+    lines.push(`# Task ${node.id}: ${title}`, '');
+    if (description)
+        lines.push(description, '');
+    lines.push('## Acceptance criteria', '');
+    if (criteria.length)
+        criteria.forEach((c, i) => lines.push(`${i + 1}. ${c}`));
+    else
+        lines.push('- (none declared)');
+    lines.push('', '## Definition of done', '');
+    lines.push(`- Commit all work on branch \`${launch.branch}\` in this worktree. Uncommitted or untracked files make your submission be rejected with 409 and the file list; commit and resubmit.`, `- Never merge into, push to, or check out \`${input.integrationBranch}\`. You may rebase your launch branch onto it when a baseMoved notice says it advanced; the orchestrator integrates your branch after verification.`, input.checkCommand
+        ? `- Run the check command before submitting: \`${input.checkCommand}\`.`
+        : '- No check command is configured for this repository yet; the operator is being asked. Run the project\'s documented test suite before submitting.', '- If the task needs no changes, say so explicitly with `noChanges: { justification }` in your report.', '- Your report must give evidence for every acceptance criterion above: one `acceptance` entry per criterion, whose `criterion` quotes the criterion text (markdown and case do not matter) or gives its number.', '- Terminate as soon as your report is accepted.', '');
+    lines.push('## Workspace', '');
+    lines.push(`- Worktree: \`${launch.worktree}\``, `- Branch: \`${launch.branch}\``, `- Base commit: \`${launch.baseSha}\``, `- Integration branch: \`${input.integrationBranch}\``);
+    if (input.allowedTools?.length) {
+        const bash = input.allowedTools.filter((r) => r.startsWith('Bash('));
+        lines.push(`- If the orchestrator spawned you, these Bash rules are in force: ${bash.map((r) => `\`${r}\``).join(', ')}. A worker holding a claimed launch runs under its own permissions instead.`, '- Run commands from the worktree root without `cd`: every part of a compound command must match a rule on its own. When you need a command these rules do not cover, ask with a `needsAccess` question naming the command rather than retrying it.');
+    }
+    lines.push('- Notices may arrive in your inbox (the `inbox` operation): `stuck` when no progress has been observed for a while, `nudge` with a message from the operator, `baseMoved` with the new integration `head` and the `files` that changed, and `payloadChanged` when your task\'s description was edited (re-read the brief file). Check the inbox after long steps.', '');
+    lines.push('## Dependencies', '');
+    if (!input.depReports.length)
+        lines.push('- none');
+    for (const d of input.depReports) {
+        if (d.external) {
+            lines.push(`- **${d.taskId}**${d.external.title ? ` (${d.external.title})` : ''} is outside this run and is ${d.external.done ? 'done' : 'not done'}. Its work was not produced by an agent here; look at the repository for what it delivered.`);
+        }
+        else if (d.cancelled) {
+            lines.push(`- **${d.taskId}** was cancelled: ${d.cancelled.reason}. Its work does not exist; plan accordingly.`);
+        }
+        else if (d.report) {
+            const b = d.report.body;
+            lines.push(`- **${d.taskId}**: ${String(b['summary'] ?? '')}`);
+            for (const key of ['interfaces', 'decisions', 'deviations']) {
+                const arr = b[key];
+                if (Array.isArray(arr) && arr.length)
+                    lines.push(`  - ${key}: ${arr.map(String).join('; ')}`);
+            }
+        }
+        else {
+            lines.push(`- **${d.taskId}**: no completion report available; see \`git log ${input.integrationBranch}\`.`);
+        }
+    }
+    lines.push('');
+    if (input.carry && Object.keys(input.carry).length) {
+        lines.push('## Context from previous attempts', '');
+        const c = input.carry;
+        if (c['priorFailure'])
+            lines.push(`- Previous attempt failed: ${JSON.stringify(c['priorFailure'])}`);
+        if (c['verifierOutput'])
+            lines.push('- Verifier output:', '', '```', String(c['verifierOutput']).slice(0, 8000), '```');
+        if (c['conflict']) {
+            const k = c['conflict'];
+            lines.push(`- Your previous branch \`${k.previousBranch ?? ''}\` conflicted on rebase in: ${(k.files ?? []).join(', ')}. Tasks published since your base: ${(k.since ?? []).join(', ') || 'none'}. Rebase that branch or start over from the new base.`);
+        }
+        if (c['interrupted']) {
+            const k = c['interrupted'];
+            lines.push(`- Your previous launch \`${k.priorLaunchId}\` was interrupted (${k.reason}); this is interruption ${k.interruptions} for this task. Its branch \`${k.priorBranch}\` holds the work so far at \`${k.headSha}\`${k.wipCommit ? `, and commit \`${k.wipCommit}\` is a work-in-progress commit of changes it had not committed` : ''}. Continue from that branch by merging or cherry-picking it onto your base, or inspect it and start over${k.wipCommit ? '; squash the work-in-progress commit before submitting' : ''}.`);
+        }
+        if (c['question'] || c['answer'])
+            lines.push(`- Question asked earlier: ${JSON.stringify(c['question'])}`, `- Human answer: ${String(c['answer'] ?? '')}`);
+        lines.push('');
+    }
+    const revision = input.carry?.['revision'];
+    if (revision) {
+        lines.push('## Revision', '');
+        lines.push(revision.cause === 'upstreamReopened'
+            ? `- This task is being revised because its upstream task \`${revision.upstream ?? ''}\` was reopened and its work may change.`
+            : '- This task was reopened for revision.');
+        lines.push(`- Your prior launch \`${revision.priorLaunchId}\` worked on branch \`${revision.priorBranch}\`${revision.priorPublishedSha
+            ? ` and published commit \`${revision.priorPublishedSha}\`, which remains on \`${input.integrationBranch}\` and is contained in your base commit \`${launch.baseSha}\``
+            : ' and did not publish'}.`);
+        if (revision.priorReportSummary)
+            lines.push(`- Prior report: ${revision.priorReportSummary}`);
+        lines.push('- Revise the prior work rather than redoing it: build on what the base commit already contains, and commit the delta.', '');
+    }
+    lines.push('## Reporting', '');
+    lines.push(`- API: \`${input.apiBaseUrl}/v1/launches/${launch.launchId}/...\` with header \`Authorization: Bearer <token from brief.json>\`.`, '- Operations: heartbeat, report (kind submit|fail, with seq), block (a question; waits for the answer), inbox, log.', `- If the API fails for more than ${Math.round(input.retryWindowMs / 1000)}s, write your report to \`${opts.fallbackPath}\` and exit.`, '- If any call returns 401, stop immediately: your launch has been revoked.', '');
+    return { markdown: lines.join('\n'), json };
+}
+//# sourceMappingURL=compose.js.map

package/dist/src/brief/compose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/brief/compose.ts"],"names":[],"mappings":"AAgCA,MAAM,UAAU,oBAAoB,CAAC,OAAgC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1C,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/H,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,IAAoB;IAClE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,IAAI,GAAc;QACtB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,IAAI,CAAC,OAAO;QAClB,kBAAkB,EAAE,QAAQ;QAC5B,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;SACrB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,CAAC,KAAK;KACrB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,EAAE,KAAK,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;;QACzE,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CACR,iCAAiC,MAAM,CAAC,MAAM,uIAAuI,EACrL,+CAA+C,KAAK,CAAC,iBAAiB,qJAAqJ,EAC3N,KAAK,CAAC,YAAY;QAChB,CAAC,CAAC,gDAAgD,KAAK,CAAC,YAAY,KAAK;QACzE,CAAC,CAAC,oJAAoJ,EACxJ,uGAAuG,EACvG,iNAAiN,EACjN,iDAAiD,EACjD,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,QAAQ,IAAI,EAAE,eAAe,MAAM,CAAC,MAAM,IAAI,EAAE,oBAAoB,MAAM,CAAC,OAAO,IAAI,EAAE,2BAA2B,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC;IACnL,IAAI,KAAK,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CACR,qEAAqE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E,EACxL,oPAAoP,CACrP,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,mWAAmW,EACnW,EAAE,CACH,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,+BAA+B,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,6FAA6F,CAAC,CAAC;QACpP,CAAC;aAAM,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,qBAAqB,CAAC,CAAC,SAAS,CAAC,MAAM,8CAA8C,CAAC,CAAC;QACnH,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,OAAO,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/D,KAAK,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAU,EAAE,CAAC;gBACrE,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;gBACnB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM;oBAAE,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,qDAAqD,KAAK,CAAC,iBAAiB,KAAK,CAAC,CAAC;QAC/G,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QACnD,KAAK,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,KAAK,CAAC,KAAgC,CAAC;QACjD,IAAI,CAAC,CAAC,cAAc,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,CAAC,gBAAgB,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QACxH,IAAI,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAoE,CAAC;YAC3F,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,cAAc,IAAI,EAAE,+BAA+B,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,uDAAuD,CAAC,CAAC;QAC3P,CAAC;QACD,IAAI,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAoD,CAAC;YAC9E,KAAK,CAAC,IAAI,CACR,4BAA4B,CAAC,CAAC,aAAa,uBAAuB,CAAC,CAAC,MAAM,2BAA2B,CAAC,CAAC,aAAa,gCAAgC,CAAC,CAAC,WAAW,iCAAiC,CAAC,CAAC,OAAO,KACzM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,SAAS,iEAAiE,CAAC,CAAC,CAAC,EACjH,2GAA2G,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,wDAAwD,CAAC,CAAC,CAAC,EAAE,GAAG,CAC1L,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,mBAAmB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAC3J,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,UAAU,CAA6D,CAAC;IACvG,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,KAAK,KAAK,kBAAkB;YACnC,CAAC,CAAC,4DAA4D,QAAQ,CAAC,QAAQ,IAAI,EAAE,0CAA0C;YAC/H,CAAC,CAAC,wCAAwC,CAC7C,CAAC;QACF,KAAK,CAAC,IAAI,CACR,yBAAyB,QAAQ,CAAC,aAAa,yBAAyB,QAAQ,CAAC,WAAW,KAC1F,QAAQ,CAAC,iBAAiB;YACxB,CAAC,CAAC,2BAA2B,QAAQ,CAAC,iBAAiB,0BAA0B,KAAK,CAAC,iBAAiB,6CAA6C,MAAM,CAAC,OAAO,IAAI;YACvK,CAAC,CAAC,sBACN,GAAG,CACJ,CAAC;QACF,IAAI,QAAQ,CAAC,kBAAkB;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,QAAQ,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC9F,KAAK,CAAC,IAAI,CAAC,uHAAuH,EAAE,EAAE,CAAC,CAAC;IAC1I,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/B,KAAK,CAAC,IAAI,CACR,YAAY,KAAK,CAAC,UAAU,gBAAgB,MAAM,CAAC,QAAQ,uEAAuE,EAClI,qHAAqH,EACrH,oCAAoC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,6BAA6B,IAAI,CAAC,YAAY,cAAc,EACtI,4EAA4E,EAC5E,EAAE,CACH,CAAC;IACF,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC"}