@azure-id/orc 1.9.1 → 1.9.2

package/templates/hooks/orc-effort-guard.js

@@ -1,178 +1,178 @@
-#!/usr/bin/env node
-"use strict";
-
-/**
- * ORC effort guard — a Claude Code PreToolUse hook.
- *
- * Blocks invocation of the full `orc` orchestrator skill unless the MAIN
- * session is running at HIGH reasoning effort (Opus 5 / Fable 5 clear at
- * medium+ — see the session-model bridge below). This is the one half of the
- * "run ORC on Opus 4.8 high or better" rule hooks can enforce deterministically:
- * Claude Code exposes `effort.level` (and $CLAUDE_EFFORT) to PreToolUse, but
- * NOT the model id (only SessionStart may see the model, and cannot block).
- * The model tier is surfaced separately by the statusline warning + the
- * self-check inside skills/orc/SKILL.md.
- *
- * Wiring (installed by `orc init` into .claude/settings.json):
- *   hooks.PreToolUse[] { matcher: "Skill", hooks:[{ type:"command",
- *     command: 'node "<.claude>/hooks/orc-effort-guard.js"' }] }
- *
- * Contract: read PreToolUse JSON from stdin. Exit 0 = allow. Exit 2 = block
- * the tool call and show stderr to Claude, which relays it to the user.
- *
- * Also surfaces a "newer orc version available" nudge here — this hook fires
- * exactly when /orc is invoked, so it's the natural place to tell the user
- * without them running `orc version`. On allow it emits a `systemMessage`
- * (shown to the user, NOT added to model context → zero tokens); on block it
- * appends the nudge to the block reason. Version check is cached 24h and
- * fail-silent. (systemMessage handling may vary by Claude Code version — verify
- * with /doctor if you don't see it; the statusline shows it regardless.)
- */
-
-// Shared update-check helper (sibling file). Degrade gracefully if absent.
-let updater = null;
-try {
-  updater = require("./orc-update-lib.js");
-} catch (_) {
-  updater = null;
-}
-
-// Effort ladder: low < medium < high < xhigh < max. A tier that meets the bar
-// meets it at that rung OR anything stronger — so "requires high" allows xhigh
-// and max too (the bug this fixes: an xhigh/max session was hard-blocked).
-const EFFORT_LADDER = ["low", "medium", "high", "xhigh", "max"];
-const effortsAtOrAbove = (e) => {
-  const i = EFFORT_LADDER.indexOf(String(e).toLowerCase());
-  return i === -1 ? ["high", "xhigh", "max"] : EFFORT_LADDER.slice(i);
-};
-
-// Session-model bridge (written by orc-statusline.js). The guard can't see the
-// model id itself, so it reads it here to grant the medium-effort allowance of
-// the models that are strictly stronger than the Opus 4.8 baseline (Opus 5 and
-// Fable 5). Fail-OPEN: missing / unreadable / stale → null, and the guard
-// behaves exactly as it would without a bridge (never blocks on our own error).
-// Stale = older than this window; a live session re-renders the statusline far
-// more often, so a fresh file always exists during active use.
-const BRIDGE_MAX_AGE_MS = 30 * 60 * 1000;
-function readSessionModel(projectDir) {
-  try {
-    const fs = require("fs");
-    const path = require("path");
-    const p = path.join(projectDir, ".claude", "orc", "session-model.json");
-    const j = JSON.parse(fs.readFileSync(p, "utf8").replace(/^/, ""));
-    if (!j || typeof j.written_at !== "number") return null;
-    if (Date.now() - j.written_at > BRIDGE_MAX_AGE_MS) return null;
-    return String(j.model_id || "");
-  } catch (_) {
-    return null;
-  }
-}
-// Models that clear /orc at medium effort — strictly stronger than the Opus 4.8
-// baseline, so medium on them beats high on it. Opus 5 (v0.34.0) joins Fable 5.
-// The `\b` after the 5 keeps 4.8 / 4.7 / 5-something-else correctly gated.
-const isMediumOkModel = (id) =>
-  /(opus|fable)[\s._-]?5\b/.test(String(id || "").toLowerCase());
-
-let raw = "";
-process.stdin.on("data", (c) => (raw += c));
-process.stdin.on("end", () => {
-  let data = {};
-  try {
-    data = JSON.parse(raw || "{}");
-  } catch (_) {
-    // Unparseable payload — never block on our own error.
-    process.exit(0);
-  }
-
-  const tool = data.tool_name || "";
-  const input = data.tool_input || {};
-  const skill = String(input.skill || input.name || "");
-
-  // Only gate the full orchestrator and the compiled DIY lane. orc-mini /
-  // orc-fast / orc-analyze / subskills pass — orc-fast is DESIGNED to run at
-  // Sonnet medium; never widen this match to include it.
-  const isOrc = tool === "Skill" && /^orc$/i.test(skill);
-  const isDiy = tool === "Skill" && /^orc-diy$/i.test(skill);
-  if (!isOrc && !isDiy) process.exit(0);
-
-  const effort = String(
-    (data.effort && data.effort.level) || process.env.CLAUDE_EFFORT || ""
-  ).toLowerCase();
-  const installed = updater ? updater.installedVersion(__dirname) : null;
-  const projectDir = data.cwd || process.cwd();
-
-  // Baseline /orc: the session must be at high effort OR stronger (xhigh/max).
-  // Opus 5 and Fable 5 additionally clear at medium — strictly-capable models —
-  // detected through the session-model bridge (the guard can't see the model id
-  // itself; fail-open when the bridge is missing/stale, i.e. medium stays blocked).
-  let requiredEfforts = effortsAtOrAbove("high");
-  let requiredLabel =
-    "Opus 4.8 at high effort (Opus 5 / Fable 5 also clear at medium+)";
-  if (!isDiy && isMediumOkModel(readSessionModel(projectDir))) {
-    requiredEfforts = ["medium", ...requiredEfforts];
-  }
-
-  // /orc-diy: the required tier is whatever the flow was COMPILED for — read
-  // it from flow.lock.json (written only by the `orc diy` CLI). Fail closed:
-  // no lock = no compiled flow = deterministic onboarding block. `compile` /
-  // `status` invocations pass at any effort (they just shell out to the CLI).
-  if (isDiy) {
-    if (/^\s*(compile|status)\b/i.test(String(input.args || ""))) process.exit(0);
-    const fs = require("fs");
-    const path = require("path");
-    let lock = null;
-    try {
-      lock = JSON.parse(
-        fs
-          .readFileSync(
-            path.join(projectDir, ".claude", "orc", "diy", "flow.lock.json"),
-            "utf8"
-          )
-          .replace(/^\uFEFF/, "")
-      );
-    } catch (_) {}
-    if (!lock || !lock.session_tier) {
-      process.stderr.write(
-        "\n⛔ /orc-diy blocked — no compiled flow in this project (fail-closed gate)." +
-          "\n   Compose and build your flow in the terminal first:" +
-          "\n     orc diy init        (then shape it: orc diy set <key> <value>)" +
-          "\n     orc diy compile" +
-          "\n   Guide: .claude/skills/orc-diy/README.md — or use plain /orc for this request.\n"
-      );
-      process.exit(2);
-    }
-    // Effort half is DETERMINISTIC from the compiled slug's suffix (allow that
-    // effort or anything stronger); the model half is warn-only on the
-    // statusline (hooks can't block on model). Covers the full tier grid —
-    // sonnet-4-6 / opus-4-7 / opus-4-8 / fable-5 at med|high|xhigh|max.
-    const m = String(lock.session_tier).match(/-(med|high|xhigh|max)$/);
-    const slugEffort = m ? (m[1] === "med" ? "medium" : m[1]) : "high";
-    requiredEfforts = effortsAtOrAbove(slugEffort);
-    requiredLabel = `${lock.session_tier} (compiled session_tier — needs effort ${slugEffort}+)`;
-  }
-
-  const decide = (nudge) => {
-    if (requiredEfforts.includes(effort)) {
-      // Requirement met — allow. Surface a version nudge if one exists.
-      if (nudge) {
-        try {
-          process.stdout.write(JSON.stringify({ systemMessage: nudge }));
-        } catch (_) {}
-      }
-      process.exit(0);
-    }
-
-    process.stderr.write(
-      `\n⛔ ${isDiy ? "/orc-diy" : "ORC"} blocked — required effort not met` +
-        (effort ? ` (current effort: ${effort}).` : " (effort not detected).") +
-        `\n   Switch this session to ${requiredLabel}, then re-run.` +
-        "\n   Run the MAIN session at (or above) the required tier — subagents cannot" +
-        "\n   exceed the main tier, so pinned agents silently downgrade below it.\n" +
-        (nudge ? "\n" + nudge + "\n" : "")
-    );
-    process.exit(2);
-  };
-
-  if (updater) updater.refreshAndNudge(installed, decide);
-  else decide(null);
-});
+#!/usr/bin/env node
+"use strict";
+
+/**
+ * ORC effort guard — a Claude Code PreToolUse hook.
+ *
+ * Blocks invocation of the full `orc` orchestrator skill unless the MAIN
+ * session is running at HIGH reasoning effort (Opus 5.5 / Fable 5 clear at
+ * medium+ — see the session-model bridge below). This is the one half of the
+ * "run ORC on Opus 4.8 high or better" rule hooks can enforce deterministically:
+ * Claude Code exposes `effort.level` (and $CLAUDE_EFFORT) to PreToolUse, but
+ * NOT the model id (only SessionStart may see the model, and cannot block).
+ * The model tier is surfaced separately by the statusline warning + the
+ * self-check inside skills/orc/SKILL.md.
+ *
+ * Wiring (installed by `orc init` into .claude/settings.json):
+ *   hooks.PreToolUse[] { matcher: "Skill", hooks:[{ type:"command",
+ *     command: 'node "<.claude>/hooks/orc-effort-guard.js"' }] }
+ *
+ * Contract: read PreToolUse JSON from stdin. Exit 0 = allow. Exit 2 = block
+ * the tool call and show stderr to Claude, which relays it to the user.
+ *
+ * Also surfaces a "newer orc version available" nudge here — this hook fires
+ * exactly when /orc is invoked, so it's the natural place to tell the user
+ * without them running `orc version`. On allow it emits a `systemMessage`
+ * (shown to the user, NOT added to model context → zero tokens); on block it
+ * appends the nudge to the block reason. Version check is cached 24h and
+ * fail-silent. (systemMessage handling may vary by Claude Code version — verify
+ * with /doctor if you don't see it; the statusline shows it regardless.)
+ */
+
+// Shared update-check helper (sibling file). Degrade gracefully if absent.
+let updater = null;
+try {
+  updater = require("./orc-update-lib.js");
+} catch (_) {
+  updater = null;
+}
+
+// Effort ladder: low < medium < high < xhigh < max. A tier that meets the bar
+// meets it at that rung OR anything stronger — so "requires high" allows xhigh
+// and max too (the bug this fixes: an xhigh/max session was hard-blocked).
+const EFFORT_LADDER = ["low", "medium", "high", "xhigh", "max"];
+const effortsAtOrAbove = (e) => {
+  const i = EFFORT_LADDER.indexOf(String(e).toLowerCase());
+  return i === -1 ? ["high", "xhigh", "max"] : EFFORT_LADDER.slice(i);
+};
+
+// Session-model bridge (written by orc-statusline.js). The guard can't see the
+// model id itself, so it reads it here to grant the medium-effort allowance of
+// the models that are strictly stronger than the Opus 4.8 baseline (Opus 5.5 and
+// Fable 5). Fail-OPEN: missing / unreadable / stale → null, and the guard
+// behaves exactly as it would without a bridge (never blocks on our own error).
+// Stale = older than this window; a live session re-renders the statusline far
+// more often, so a fresh file always exists during active use.
+const BRIDGE_MAX_AGE_MS = 30 * 60 * 1000;
+function readSessionModel(projectDir) {
+  try {
+    const fs = require("fs");
+    const path = require("path");
+    const p = path.join(projectDir, ".claude", "orc", "session-model.json");
+    const j = JSON.parse(fs.readFileSync(p, "utf8").replace(/^/, ""));
+    if (!j || typeof j.written_at !== "number") return null;
+    if (Date.now() - j.written_at > BRIDGE_MAX_AGE_MS) return null;
+    return String(j.model_id || "");
+  } catch (_) {
+    return null;
+  }
+}
+// Models that clear /orc at medium effort — strictly stronger than the Opus 4.8
+// baseline, so medium on them beats high on it. Opus 5.5 (v0.34.0) joins Fable 5.
+// The `\b` after the 5 keeps 4.8 / 4.7 / 5-something-else correctly gated.
+const isMediumOkModel = (id) =>
+  /(opus|fable)[\s._-]?5\b/.test(String(id || "").toLowerCase());
+
+let raw = "";
+process.stdin.on("data", (c) => (raw += c));
+process.stdin.on("end", () => {
+  let data = {};
+  try {
+    data = JSON.parse(raw || "{}");
+  } catch (_) {
+    // Unparseable payload — never block on our own error.
+    process.exit(0);
+  }
+
+  const tool = data.tool_name || "";
+  const input = data.tool_input || {};
+  const skill = String(input.skill || input.name || "");
+
+  // Only gate the full orchestrator and the compiled DIY lane. orc-mini /
+  // orc-fast / orc-analyze / subskills pass — orc-fast is DESIGNED to run at
+  // Sonnet medium; never widen this match to include it.
+  const isOrc = tool === "Skill" && /^orc$/i.test(skill);
+  const isDiy = tool === "Skill" && /^orc-diy$/i.test(skill);
+  if (!isOrc && !isDiy) process.exit(0);
+
+  const effort = String(
+    (data.effort && data.effort.level) || process.env.CLAUDE_EFFORT || ""
+  ).toLowerCase();
+  const installed = updater ? updater.installedVersion(__dirname) : null;
+  const projectDir = data.cwd || process.cwd();
+
+  // Baseline /orc: the session must be at high effort OR stronger (xhigh/max).
+  // Opus 5.5 and Fable 5 additionally clear at medium — strictly-capable models —
+  // detected through the session-model bridge (the guard can't see the model id
+  // itself; fail-open when the bridge is missing/stale, i.e. medium stays blocked).
+  let requiredEfforts = effortsAtOrAbove("high");
+  let requiredLabel =
+    "Opus 4.8 at high effort (Opus 5.5 / Fable 5 also clear at medium+)";
+  if (!isDiy && isMediumOkModel(readSessionModel(projectDir))) {
+    requiredEfforts = ["medium", ...requiredEfforts];
+  }
+
+  // /orc-diy: the required tier is whatever the flow was COMPILED for — read
+  // it from flow.lock.json (written only by the `orc diy` CLI). Fail closed:
+  // no lock = no compiled flow = deterministic onboarding block. `compile` /
+  // `status` invocations pass at any effort (they just shell out to the CLI).
+  if (isDiy) {
+    if (/^\s*(compile|status)\b/i.test(String(input.args || ""))) process.exit(0);
+    const fs = require("fs");
+    const path = require("path");
+    let lock = null;
+    try {
+      lock = JSON.parse(
+        fs
+          .readFileSync(
+            path.join(projectDir, ".claude", "orc", "diy", "flow.lock.json"),
+            "utf8"
+          )
+          .replace(/^\uFEFF/, "")
+      );
+    } catch (_) {}
+    if (!lock || !lock.session_tier) {
+      process.stderr.write(
+        "\n⛔ /orc-diy blocked — no compiled flow in this project (fail-closed gate)." +
+          "\n   Compose and build your flow in the terminal first:" +
+          "\n     orc diy init        (then shape it: orc diy set <key> <value>)" +
+          "\n     orc diy compile" +
+          "\n   Guide: .claude/skills/orc-diy/README.md — or use plain /orc for this request.\n"
+      );
+      process.exit(2);
+    }
+    // Effort half is DETERMINISTIC from the compiled slug's suffix (allow that
+    // effort or anything stronger); the model half is warn-only on the
+    // statusline (hooks can't block on model). Covers the full tier grid —
+    // sonnet-4-6 / opus-4-7 / opus-4-8 / fable-5 at med|high|xhigh|max.
+    const m = String(lock.session_tier).match(/-(med|high|xhigh|max)$/);
+    const slugEffort = m ? (m[1] === "med" ? "medium" : m[1]) : "high";
+    requiredEfforts = effortsAtOrAbove(slugEffort);
+    requiredLabel = `${lock.session_tier} (compiled session_tier — needs effort ${slugEffort}+)`;
+  }
+
+  const decide = (nudge) => {
+    if (requiredEfforts.includes(effort)) {
+      // Requirement met — allow. Surface a version nudge if one exists.
+      if (nudge) {
+        try {
+          process.stdout.write(JSON.stringify({ systemMessage: nudge }));
+        } catch (_) {}
+      }
+      process.exit(0);
+    }
+
+    process.stderr.write(
+      `\n⛔ ${isDiy ? "/orc-diy" : "ORC"} blocked — required effort not met` +
+        (effort ? ` (current effort: ${effort}).` : " (effort not detected).") +
+        `\n   Switch this session to ${requiredLabel}, then re-run.` +
+        "\n   Run the MAIN session at (or above) the required tier — subagents cannot" +
+        "\n   exceed the main tier, so pinned agents silently downgrade below it.\n" +
+        (nudge ? "\n" + nudge + "\n" : "")
+    );
+    process.exit(2);
+  };
+
+  if (updater) updater.refreshAndNudge(installed, decide);
+  else decide(null);
+});

package/templates/hooks/orc-statusline.js

@@ -24,8 +24,8 @@
  * ICON carries the verdict and the words carry the installed ORC version — but
  * the degrade branch still names every reason, because a warning with no reason
  * is an emoji:
- *   ✅ ORC v1.2.1 - Opus 5/high          Opus 4.8 high (the baseline)
- *   🚀 ORC v1.2.1 - Opus 5/high          Opus 4.8 xhigh/max, or Opus 5 / Fable 5 medium…max
+ *   ✅ ORC v1.2.1 - Opus 5.5/high          Opus 4.8 high (the baseline)
+ *   🚀 ORC v1.2.1 - Opus 5.5/high          Opus 4.8 xhigh/max, or Opus 5.5 / Fable 5 medium…max
  *   ⛔ ORC v1.2.1 - Sonnet 5/high (why)  everything below (wrong model, sub-baseline effort, quota)
  *
  * The two lines, in full (v1.2.1):
@@ -52,7 +52,7 @@
  * This is the ONLY place Claude Code exposes the live model id, so it also
  * writes a fail-silent session-model bridge (.claude/orc/session-model.json)
  * that the PreToolUse effort guard reads — the guard can't see the model id
- * on its own, so the bridge is how the Opus 5 / Fable 5 medium-effort allowance
+ * on its own, so the bridge is how the Opus 5.5 / Fable 5 medium-effort allowance
  * reaches it.
  *
  * Also appends a "newer orc version available" hint from the 24h update cache
@@ -66,7 +66,7 @@
  * over that budget — ORC_STATUSLINE_SCAN_MS — and nothing in ORC ever sets it.
  */
 
-// Opus 4.8 / Opus 5 / Fable 5 are matched by tolerant regexes below (accept
+// Opus 4.8 / Opus 5.5 / Fable 5 are matched by tolerant regexes below (accept
 // dated/suffixed ids and the display name), not strict strings. Effort ranks give
 // the acceptance-matrix tiers (0 = unknown, never treated as a positive downgrade).
 const EFFORT_RANK = { low: 1, medium: 2, high: 3, xhigh: 4, max: 5 };
@@ -526,7 +526,7 @@ process.stdin.on("end", () => {
   // ── Session-model bridge (fail-silent) ─────────────────────────────────────
   // The PreToolUse effort guard cannot see the model id; it can only read
   // effort. Persist {model_id, effort, written_at} here so the guard can grant
-  // the Opus 5 / Fable 5 medium-effort allowance. The statusline re-renders constantly
+  // the Opus 5.5 / Fable 5 medium-effort allowance. The statusline re-renders constantly
   // while a session is active, so written_at stays fresh; the guard treats a
   // stale file (older than its freshness window) as absent and never blocks on
   // it. Any error (no dir, read-only fs) is swallowed — this is a nicety, not a
@@ -674,7 +674,7 @@ process.stdin.on("end", () => {
   const hay = `${model} ${display}`.toLowerCase();
   const isOpus48 = /opus[\s._-]?4[\s._-]?8\b/.test(hay);
   const isFable5 = /fable[\s._-]?5\b/.test(hay);
-  // Opus 5 (v0.34.0) — strictly above the baseline, so it boosts from medium up,
+  // Opus 5.5 (v0.34.0) — strictly above the baseline, so it boosts from medium up,
   // exactly like Fable 5. The `\b` keeps opus 4.8 / 4.7 out of this branch.
   const isOpus5 = /opus[\s._-]?5\b/.test(hay);
   const modelKnown = model !== "" || (display !== "" && display !== "unknown");

package/templates/skills/_shared/code-graph.md

@@ -294,7 +294,7 @@ false.
    on every later turn (~100K tokens across a 6-task run).
 4. `code_graph_notes: wave` → once per wave. `end` → once, at the end of the
    run, for every path the run changed.
-5. Under `opus5_only` there is no Opus 5 noter. Print
+5. Under `opus5_only` there is no Opus 5.5 noter. Print
    `graph notes: skipped (opus5_only)` once and dispatch nothing.
 
 ## 7. Slice injection — and when NOT to inject