@calliopelabs/cli 3.1.0 → 3.2.0

package/dist/orchestration/verification.js

@@ -0,0 +1,204 @@
+import { join, resolve } from 'node:path';
+import { createHash, randomUUID } from 'node:crypto';
+import { canonicalJson, approvalDisplayText, canonicalPath } from '../approvals/index.js';
+import { authorizeSessionAction } from '../session-management/index.js';
+import { throwIfCancelled } from '../cancellation.js';
+import { OrchestrationError } from './types.js';
+import { array, id, shape, text } from './validation.js';
+import { readArtifactBytes } from './execution-store.js';
+import { mechanicallyVerified, validateCollectedArtifact } from './execution-journal.js';
+const hashBytes = (value) => createHash('sha256').update(value).digest('hex');
+const contextForTask = (store, taskId) => store.manifest.plan.tasks.some(t => t.id === taskId) ? store.manifest : store.context();
+export function workerSummary(value) { return approvalDisplayText(value).slice(0, 8192).trim() || 'The worker returned no summary.'; }
+/** Worker prose is a claim; it never supplies authoritative hashes, test passes or event IDs. */
+export function workerReport(content, task) {
+    const outputs = new Map(), risks = [];
+    let summary = workerSummary(content);
+    if (content.length > 1024 * 1024)
+        return { summary, outputs, risks: ['Worker report exceeded its size limit.'] };
+    const raw = content.trim().replace(/^```(?:json)?\s*/, '').replace(/\s*```$/, '');
+    let value;
+    try {
+        value = JSON.parse(raw);
+    }
+    catch {
+        // Models often preface a valid structured report with one sentence and a
+        // fenced JSON block. Parse only that block; prose remains an untrusted
+        // summary and never supplies artifact metadata.
+        const fenced = /```(?:json)?\s*([\s\S]*?)\s*```/i.exec(content)?.[1]?.trim();
+        if (!fenced)
+            return { summary, outputs, risks };
+        try {
+            value = JSON.parse(fenced);
+        }
+        catch {
+            return { summary, outputs, risks };
+        }
+    }
+    if (task.id === 'propose' && value && typeof value === 'object' && !Array.isArray(value) &&
+        Object.hasOwn(value, 'agents') && Object.hasOwn(value, 'tasks') && Object.hasOwn(value, 'limits')) {
+        outputs.set('proposal', raw);
+        return { summary: 'Raw ProjectPlan proposal captured for validation.', outputs, risks };
+    }
+    try {
+        shape(value, ['version', 'summary', 'outputs'], ['risks']);
+        if (value.version !== 1)
+            throw new Error();
+        text(value.summary);
+        array(value.outputs, 100);
+        summary = value.summary;
+        if (value.risks !== undefined) {
+            array(value.risks, 100);
+            for (const risk of value.risks) {
+                text(risk);
+                risks.push(risk);
+            }
+        }
+        for (const output of value.outputs) {
+            shape(output, ['id', 'content']);
+            id(output.id);
+            if (typeof output.content !== 'string' || Buffer.byteLength(output.content) > 1024 * 1024 || approvalDisplayText(output.content) !== output.content || outputs.has(output.id) || !task.outputs.some(o => o.id === output.id && !o.path))
+                throw new Error();
+            outputs.set(output.id, output.content);
+        }
+    }
+    catch {
+        outputs.clear();
+        risks.push('Worker report was malformed or contained unsafe text; its claims were not accepted.');
+    }
+    return { summary, outputs, risks };
+}
+export async function readCollectedArtifact(store, artifact, options = {}) {
+    validateCollectedArtifact(artifact, contextForTask(store, artifact.taskId));
+    throwIfCancelled(options.signal);
+    const file = artifact.location === 'project' ? resolve(store.manifest.project.root, artifact.path) : join(store.root, 'artifacts', artifact.path);
+    if (canonicalPath(file) !== file)
+        throw new OrchestrationError('conflict', 'Artifact path changed or became an alias.');
+    const sourcePath = contextForTask(store, artifact.taskId).plan.tasks.find(t => t.id === artifact.taskId).outputs.find(o => o.id === artifact.id).path;
+    if (sourcePath)
+        await authorizeSessionAction(store.manifest.project.root, 'read_file', { path: resolve(store.manifest.project.root, sourcePath), operation: 'orchestration-verification', runId: store.manifest.id, artifactId: artifact.id }, options);
+    throwIfCancelled(options.signal);
+    return checkArtifactSnapshot(store, artifact);
+}
+/** Recheck already-authorized content synchronously at the journal commit boundary. */
+export function checkArtifactSnapshot(store, artifact) {
+    validateCollectedArtifact(artifact, contextForTask(store, artifact.taskId));
+    const file = artifact.location === 'project' ? resolve(store.manifest.project.root, artifact.path) : join(store.root, 'artifacts', artifact.path), bytes = readArtifactBytes(file, 1024 * 1024, artifact.location === 'run');
+    if (hashBytes(bytes) !== artifact.sha256 || bytes.length !== artifact.bytes)
+        throw new OrchestrationError('conflict', 'Artifact changed after collection; recorded output cannot be used.');
+    return bytes;
+}
+export async function collectTaskOutput(store, task, content, options = {}) {
+    options.workspace?.assertVerified(options.signal);
+    const taskContext = contextForTask(store, task.id), verifiedWorkspaceHash = options.workspace?.snapshot(taskContext.plan.agents.find(a => a.id === task.agentId).allowedPaths, options.signal);
+    const claim = workerReport(content, task), prior = store.read().state, artifacts = prior.tasks[task.id].artifactIds.map(id => prior.artifacts[id]), contents = new Map(), risks = [...claim.risks];
+    for (const spec of task.outputs) {
+        const existing = artifacts.find(a => a.id === spec.id);
+        if (existing) {
+            contents.set(spec.id, checkArtifactSnapshot(store, existing));
+            continue;
+        }
+        throwIfCancelled(options.signal);
+        const eventId = randomUUID();
+        let path, bytes;
+        try {
+            if (spec.path) {
+                path = spec.path;
+                const file = resolve(store.manifest.project.root, path);
+                await authorizeSessionAction(store.manifest.project.root, 'read_file', { path: file, operation: 'orchestration-artifact', runId: store.manifest.id, taskId: task.id }, options);
+                throwIfCancelled(options.signal);
+                options.workspace?.assertIdentity();
+                bytes = readArtifactBytes(options.workspace ? resolve(options.workspace.filesRoot, path) : file);
+                if (options.workspace)
+                    path = store.writeArtifact(eventId, bytes, options.signal);
+            }
+            else {
+                const reserved = task.isolation && (spec.id === task.isolation.patchArtifactId || task.isolation.commands.some(c => c.artifactId === spec.id));
+                const content = reserved ? options.executorOutputs?.get(spec.id) : claim.outputs.get(spec.id);
+                if (content === undefined) {
+                    risks.push(`Missing declared artifact: ${spec.id}.`);
+                    continue;
+                }
+                path = store.writeArtifact(eventId, content, options.signal);
+                bytes = Buffer.from(content);
+            }
+        }
+        catch (error) {
+            throwIfCancelled(options.signal);
+            if (error instanceof OrchestrationError && error.code === 'limit')
+                throw error;
+            risks.push(`Artifact ${spec.id} could not be collected under current policy and scope.`);
+            continue;
+        }
+        const artifact = { id: spec.id, taskId: task.id, agentId: task.agentId, kind: spec.kind, location: spec.path && !options.workspace ? 'project' : 'run', path, sha256: hashBytes(bytes), bytes: bytes.length, createdAt: new Date().toISOString(), source: { runId: store.manifest.id, eventId }, confidence: 1 };
+        await store.append({ type: 'artifact', artifact }, options.signal, eventId);
+        artifacts.push(artifact);
+        contents.set(spec.id, bytes);
+    }
+    const checks = (task.acceptanceChecks ?? []).map(check => {
+        const bytes = contents.get(check.artifactId), artifact = artifacts.find(a => a.id === check.artifactId);
+        let passed = false;
+        if (bytes) {
+            if (check.kind === 'command') {
+                try {
+                    const receipt = JSON.parse(bytes.toString());
+                    passed = receipt.version === 1 && receipt.kind === 'isolated-command' && receipt.outcome === 'passed' && receipt.exitCode === 0 && receipt.cleanupConfirmed && /^[a-f0-9]{64}$/.test(receipt.workspace.before) && receipt.workspace.before === receipt.workspace.after && receipt.workspace.after === verifiedWorkspaceHash;
+                }
+                catch { /* Malformed executor evidence is never a pass. */ }
+            }
+            else if (check.kind === 'exists')
+                passed = true;
+            else if (check.kind === 'contains')
+                passed = bytes.toString('utf8').includes(check.expected);
+            else if (check.kind === 'sha256')
+                passed = artifact.sha256 === check.expected;
+            else
+                try {
+                    passed = canonicalJson(JSON.parse(bytes.toString())) === canonicalJson(JSON.parse(check.expected));
+                }
+                catch { /* Invalid JSON is failed evidence. */ }
+        }
+        return { id: check.id, artifactId: check.artifactId, kind: check.kind, criteria: check.criteria, passed, observedHash: artifact?.sha256 ?? null };
+    });
+    const state = store.read().state.tasks[task.id], output = { version: 1, taskId: task.id, agentId: task.agentId, status: 'partial', summary: claim.summary, changedFiles: [...state.changedFiles], artifacts, testEvidence: checks.filter(c => c.passed).map(c => c.id), unresolvedRisks: risks.slice(0, 100), recommendedNextAction: 'Review the remaining acceptance criteria.', checks };
+    const complete = mechanicallyVerified(output, contextForTask(store, task.id)), failed = artifacts.length !== task.outputs.length || checks.some(c => !c.passed);
+    options.workspace?.assertVerified(options.signal);
+    if (complete) {
+        output.status = 'success';
+        output.recommendedNextAction = 'Continue with dependency-ready work.';
+    }
+    else if (failed) {
+        // A mutation may be real and mechanically verified even when the model
+        // omitted a non-file report/receipt. Preserve those checks for supervised
+        // evidence repair instead of treating the workspace as an unverified
+        // failure. Human acceptance still requires every declared artifact.
+        const missing = task.outputs.some(spec => !artifacts.some(a => a.id === spec.id));
+        if (missing && checks.length > 0 && checks.every(check => check.passed) && state.mutations) {
+            output.status = 'partial';
+            output.recommendedNextAction = 'Request the missing patch or verification receipt; do not repeat the mutation until evidence is complete.';
+            return { output, status: 'review_required' };
+        }
+        output.status = 'failed';
+        output.recommendedNextAction = 'Inspect failed or missing evidence before retrying.';
+    }
+    else
+        output.unresolvedRisks = [...risks.slice(0, 99), 'Natural-language acceptance criteria still require human review.'];
+    const policyDenied = risks.some(r => /current policy and scope|permission denied/i.test(r));
+    return { output, status: policyDenied ? 'denied' : complete ? 'completed' : failed ? 'failed' : 'review_required' };
+}
+/** Retain only independently collected files/receipts, never truncated worker claims. */
+export async function collectStoppedTaskOutput(store, task, options) {
+    const { output } = await collectTaskOutput(store, task, '', options);
+    const mechanicallyReady = output.checks.length > 0 && output.checks.every(check => check.passed) && output.artifacts.length === task.outputs.length;
+    return { ...output, status: mechanicallyReady ? 'partial' : 'failed', summary: 'Worker output was truncated; retained workspace evidence was collected independently.',
+        unresolvedRisks: [...output.unresolvedRisks.slice(0, 99), mechanicallyReady ? 'The incomplete worker report still requires human acceptance.' : 'The incomplete worker report was not accepted as success.'],
+        recommendedNextAction: mechanicallyReady ? 'Review and accept the retained patch and verification receipts.' : 'Review the retained patch and verification receipts before a bounded retry; increase --max-output-tokens if needed for the worker report.' };
+}
+/** Retain completed process evidence even when cancellation stops later collection. */
+export async function recordExecutorArtifact(store, task, id, content) {
+    if (!task.isolation?.commands.some(c => c.artifactId === id))
+        throw new OrchestrationError('invalid', 'Executor result is not declared by this task.');
+    const eventId = randomUUID(), path = store.writeArtifact(eventId, content), bytes = Buffer.from(content);
+    await store.append({ type: 'artifact', artifact: { id, taskId: task.id, agentId: task.agentId, kind: 'test_result', location: 'run', path, sha256: hashBytes(bytes), bytes: bytes.length, createdAt: new Date().toISOString(), source: { runId: store.manifest.id, eventId }, confidence: 1 } }, undefined, eventId);
+}
+//# sourceMappingURL=verification.js.map

package/dist/orchestration/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../src/orchestration/verification.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,IAAI,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AACvC,OAAO,EAAC,UAAU,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AAClD,OAAO,EAAC,aAAa,EAAC,mBAAmB,EAAC,aAAa,EAAC,MAAM,uBAAuB,CAAC;AACtF,OAAO,EAAC,sBAAsB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAC,kBAAkB,EAAkB,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAC,KAAK,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAgB,iBAAiB,EAAC,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAC,oBAAoB,EAAC,yBAAyB,EAAC,MAAM,wBAAwB,CAAC;AAKtF,MAAM,SAAS,GAAC,CAAC,KAAY,EAAC,EAAE,CAAA,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjF,MAAM,cAAc,GAAC,CAAC,KAAoB,EAAC,MAAa,EAAC,EAAE,CAAA,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,MAAM,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,QAAQ,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,EAAE,CAAC;AAC3I,MAAM,UAAU,aAAa,CAAC,KAAY,IAAU,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAE,iCAAiC,CAAC,CAAA,CAAC;AAC/I,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,OAAc,EAAC,IAAgB;IAC1D,MAAM,OAAO,GAAC,IAAI,GAAG,EAAiB,EAAC,KAAK,GAAU,EAAE,CAAC;IAAA,IAAI,OAAO,GAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5F,IAAG,OAAO,CAAC,MAAM,GAAC,IAAI,GAAC,IAAI;QAAC,OAAM,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC,wCAAwC,CAAC,EAAC,CAAC;IACrG,MAAM,GAAG,GAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAC,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC;IAAA,IAAI,KAAa,CAAC;IAChG,IAAG,CAAC;QAAA,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAC/B,yEAAyE;QACzE,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,MAAM,GAAC,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC3E,IAAG,CAAC,MAAM;YAAE,OAAM,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;QAC1C,IAAG,CAAC;YAAA,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,CAAC;QAAA,MAAK,CAAC;YAAA,OAAM,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;QAAA,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC7B,OAAO,EAAC,OAAO,EAAC,mDAAmD,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC;QACH,KAAK,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,SAAS,EAAC,SAAS,CAAC,EAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAAA,IAAG,KAAK,CAAC,OAAO,KAAG,CAAC;YAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAA,KAAK,CAAC,KAAK,CAAC,OAAO,EAAC,GAAG,CAAC,CAAC;QAAA,OAAO,GAAC,KAAK,CAAC,OAAO,CAAC;QACjK,IAAG,KAAK,CAAC,KAAK,KAAG,SAAS,EAAC,CAAC;YAAA,KAAK,CAAC,KAAK,CAAC,KAAK,EAAC,GAAG,CAAC,CAAC;YAAA,KAAI,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAC,CAAC;gBAAA,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAA,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAA,CAAC;QAAA,CAAC;QAChH,KAAI,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAC,CAAC;YAAA,KAAK,CAAC,MAAM,EAAC,CAAC,IAAI,EAAC,SAAS,CAAC,CAAC,CAAC;YAAA,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAAA,IAAG,OAAO,MAAM,CAAC,OAAO,KAAG,QAAQ,IAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,GAAC,IAAI,GAAC,IAAI,IAAE,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,KAAG,MAAM,CAAC,OAAO,IAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,IAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,MAAM,CAAC,EAAE,IAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,KAAK,EAAE,CAAC;YAAA,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAA,CAAC;IAC5V,CAAC;IAAA,MAAM,CAAC;QAAA,OAAO,CAAC,KAAK,EAAE,CAAC;QAAA,KAAK,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAAA,CAAC;IAC3H,OAAM,EAAC,OAAO,EAAC,OAAO,EAAC,KAAK,EAAC,CAAC;AAChC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,KAAoB,EAAC,QAA0B,EAAC,OAAO,GAAkB,EAAE;IACrH,yBAAyB,CAAC,QAAQ,EAAC,cAAc,CAAC,KAAK,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAAA,MAAM,IAAI,GAAC,QAAQ,CAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxK,IAAG,aAAa,CAAC,IAAI,CAAC,KAAG,IAAI;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,2CAA2C,CAAC,CAAC;IACnH,MAAM,UAAU,GAAC,cAAc,CAAC,KAAK,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,MAAM,CAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,QAAQ,CAAC,EAAE,CAAE,CAAC,IAAI,CAAC;IAC7I,IAAG,UAAU;QAAC,MAAM,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,WAAW,EAAC,EAAC,IAAI,EAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,UAAU,CAAC,EAAC,SAAS,EAAC,4BAA4B,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAC,UAAU,EAAC,QAAQ,CAAC,EAAE,EAAC,EAAC,OAAO,CAAC,CAAC;IACzO,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAAA,OAAO,qBAAqB,CAAC,KAAK,EAAC,QAAQ,CAAC,CAAC;AAChF,CAAC;AACD,uFAAuF;AACvF,MAAM,UAAU,qBAAqB,CAAC,KAAoB,EAAC,QAA0B;IACnF,yBAAyB,CAAC,QAAQ,EAAC,cAAc,CAAC,KAAK,EAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAC,QAAQ,CAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,QAAQ,CAAC,IAAI,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,KAAK,CAAC,IAAI,EAAC,WAAW,EAAC,QAAQ,CAAC,IAAI,CAAC,EAAC,KAAK,GAAC,iBAAiB,CAAC,IAAI,EAAC,IAAI,GAAC,IAAI,EAAC,QAAQ,CAAC,QAAQ,KAAG,KAAK,CAAC,CAAC;IACzM,IAAG,SAAS,CAAC,KAAK,CAAC,KAAG,QAAQ,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,KAAG,QAAQ,CAAC,KAAK;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,oEAAoE,CAAC,CAAC;IAAA,OAAO,KAAK,CAAC;AAClM,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAoB,EAAC,IAAgB,EAAC,OAAc,EAAC,OAAO,GAAkF,EAAE;IACtL,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,WAAW,GAAC,cAAc,CAAC,KAAK,EAAC,IAAI,CAAC,EAAE,CAAC,EAAC,qBAAqB,GAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,IAAI,CAAC,OAAO,CAAE,CAAC,YAAY,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrL,MAAM,KAAK,GAAC,YAAY,CAAC,OAAO,EAAC,IAAI,CAAC,EAAC,KAAK,GAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,EAAC,SAAS,GAAqB,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAA,EAAE,CAAA,KAAK,CAAC,SAAS,CAAC,EAAE,CAAE,CAAC,EAAC,QAAQ,GAAC,IAAI,GAAG,EAAiB,EAAC,KAAK,GAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACvN,KAAI,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAC,CAAC;QAC9B,MAAM,QAAQ,GAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QAAA,IAAG,QAAQ,EAAC,CAAC;YAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAC,qBAAqB,CAAC,KAAK,EAAC,QAAQ,CAAC,CAAC,CAAC;YAAA,SAAS;QAAA,CAAC;QACpI,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,OAAO,GAAC,UAAU,EAAE,CAAC;QAAA,IAAI,IAAW,EAAC,KAAY,CAAC;QACzF,IAAI,CAAC;YACH,IAAG,IAAI,CAAC,IAAI,EAAC,CAAC;gBAAA,IAAI,GAAC,IAAI,CAAC,IAAI,CAAC;gBAAA,MAAM,IAAI,GAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,IAAI,CAAC,CAAC;gBAAA,MAAM,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAC,WAAW,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,SAAS,EAAC,wBAAwB,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,EAAC,OAAO,CAAC,CAAC;gBAAA,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAAA,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;gBAAA,KAAK,GAAC,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAA,CAAC,CAAA,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAC,IAAI,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC;gBAAA,IAAG,OAAO,CAAC,SAAS;oBAAC,IAAI,GAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAC,KAAK,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,CAAC;iBAC7d,CAAC;gBAAA,MAAM,QAAQ,GAAC,IAAI,CAAC,SAAS,IAAE,CAAC,IAAI,CAAC,EAAE,KAAG,IAAI,CAAC,SAAS,CAAC,eAAe,IAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAA,MAAM,OAAO,GAAC,QAAQ,CAAA,CAAC,CAAA,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAAA,IAAG,OAAO,KAAG,SAAS,EAAC,CAAC;oBAAA,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;oBAAA,SAAS;gBAAA,CAAC;gBAAA,IAAI,GAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAC,OAAO,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAAA,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAAA,CAAC;QAC/Y,CAAC;QAAA,OAAM,KAAK,EAAC,CAAC;YAAA,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,KAAK,YAAY,kBAAkB,IAAE,KAAK,CAAC,IAAI,KAAG,OAAO;gBAAC,MAAM,KAAK,CAAC;YAAA,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,yDAAyD,CAAC,CAAC;YAAA,SAAS;QAAA,CAAC;QAC3N,MAAM,QAAQ,GAAmB,EAAC,EAAE,EAAC,IAAI,CAAC,EAAE,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,IAAI,CAAC,IAAI,EAAC,QAAQ,EAAC,IAAI,CAAC,IAAI,IAAE,CAAC,OAAO,CAAC,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,EAAC,SAAS,EAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAC,OAAO,EAAC,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC;QACjS,MAAM,KAAK,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,EAAC,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC;QAAA,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC;IAC7H,CAAC;IACD,MAAM,MAAM,GAAC,CAAC,IAAI,CAAC,gBAAgB,IAAE,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE;QAClD,MAAM,KAAK,GAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAC,QAAQ,GAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAAA,IAAI,MAAM,GAAC,KAAK,CAAC;QAChH,IAAG,KAAK,EAAC,CAAC;YAAA,IAAG,KAAK,CAAC,IAAI,KAAG,SAAS,EAAC,CAAC;gBAAA,IAAG,CAAC;oBAAA,MAAM,OAAO,GAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAkE,CAAC;oBAAA,MAAM,GAAC,OAAO,CAAC,OAAO,KAAG,CAAC,IAAE,OAAO,CAAC,IAAI,KAAG,kBAAkB,IAAE,OAAO,CAAC,OAAO,KAAG,QAAQ,IAAE,OAAO,CAAC,QAAQ,KAAG,CAAC,IAAE,OAAO,CAAC,gBAAgB,IAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,IAAE,OAAO,CAAC,SAAS,CAAC,MAAM,KAAG,OAAO,CAAC,SAAS,CAAC,KAAK,IAAE,OAAO,CAAC,SAAS,CAAC,KAAK,KAAG,qBAAqB,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,kDAAkD,CAAA,CAAC;YAAA,CAAC;iBAAK,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,GAAC,IAAI,CAAC;iBAAK,IAAG,KAAK,CAAC,IAAI,KAAG,UAAU;gBAAC,MAAM,GAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC;iBAAK,IAAG,KAAK,CAAC,IAAI,KAAG,QAAQ;gBAAC,MAAM,GAAC,QAAS,CAAC,MAAM,KAAG,KAAK,CAAC,QAAQ,CAAC;;gBAAK,IAAG,CAAC;oBAAA,MAAM,GAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAS,CAAC,CAAC,CAAC;gBAAA,CAAC;gBAAA,MAAK,CAAC,CAAA,sCAAsC,CAAA,CAAC;QAAA,CAAC;QACj1B,OAAM,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,UAAU,EAAC,KAAK,CAAC,UAAU,EAAC,IAAI,EAAC,KAAK,CAAC,IAAI,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,MAAM,EAAC,YAAY,EAAC,QAAQ,EAAE,MAAM,IAAE,IAAI,EAAC,CAAC;IACrI,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAE,EAAC,MAAM,GAAY,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,YAAY,EAAC,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,EAAC,SAAS,EAAC,YAAY,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,CAAC,EAAC,eAAe,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,EAAC,qBAAqB,EAAC,2CAA2C,EAAC,MAAM,EAAC,CAAC;IACxW,MAAM,QAAQ,GAAC,oBAAoB,CAAC,MAAM,EAAC,cAAc,CAAC,KAAK,EAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAC,MAAM,GAAC,SAAS,CAAC,MAAM,KAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACnJ,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,IAAG,QAAQ,EAAC,CAAC;QAAA,MAAM,CAAC,MAAM,GAAC,SAAS,CAAC;QAAA,MAAM,CAAC,qBAAqB,GAAC,sCAAsC,CAAC;IAAA,CAAC;SACrG,IAAG,MAAM,EAAC,CAAC;QACd,uEAAuE;QACvE,0EAA0E;QAC1E,qEAAqE;QACrE,oEAAoE;QACpE,MAAM,OAAO,GAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,EAAE,CAAA,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,EAAE,KAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1E,IAAG,OAAO,IAAE,MAAM,CAAC,MAAM,GAAC,CAAC,IAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,IAAE,KAAK,CAAC,SAAS,EAAC,CAAC;YAC/E,MAAM,CAAC,MAAM,GAAC,SAAS,CAAC;YACxB,MAAM,CAAC,qBAAqB,GAAC,2GAA2G,CAAC;YACzI,OAAM,EAAC,MAAM,EAAC,MAAM,EAAC,iBAAiB,EAAC,CAAC;QAC1C,CAAC;QACD,MAAM,CAAC,MAAM,GAAC,QAAQ,CAAC;QAAA,MAAM,CAAC,qBAAqB,GAAC,qDAAqD,CAAC;IAC5G,CAAC;;QACI,MAAM,CAAC,eAAe,GAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAC,kEAAkE,CAAC,CAAC;IACtH,MAAM,YAAY,GAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,6CAA6C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,OAAM,EAAC,MAAM,EAAC,MAAM,EAAC,YAAY,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,MAAM,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,iBAAiB,EAAC,CAAC;AACrG,CAAC;AACD,yFAAyF;AACzF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAoB,EAAC,IAAgB,EAAC,OAAsF;IACzK,MAAM,EAAC,MAAM,EAAC,GAAC,MAAM,iBAAiB,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,EAAC,OAAO,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAC,MAAM,CAAC,MAAM,CAAC,MAAM,GAAC,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC,SAAS,CAAC,MAAM,KAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;IACxI,OAAO,EAAC,GAAG,MAAM,EAAC,MAAM,EAAC,iBAAiB,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,QAAQ,EAAC,OAAO,EAAC,uFAAuF;QAC3J,eAAe,EAAC,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAC,iBAAiB,CAAA,CAAC,CAAA,+DAA+D,CAAA,CAAC,CAAA,2DAA2D,CAAC;QACrM,qBAAqB,EAAC,iBAAiB,CAAA,CAAC,CAAA,iEAAiE,CAAA,CAAC,CAAA,2IAA2I,EAAC,CAAC;AAC3P,CAAC;AACD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,KAAoB,EAAC,IAAgB,EAAC,EAAS,EAAC,OAAc;IACzG,IAAG,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,UAAU,KAAG,EAAE,CAAC;QAAC,MAAM,IAAI,kBAAkB,CAAC,SAAS,EAAC,+CAA+C,CAAC,CAAC;IAChJ,MAAM,OAAO,GAAC,UAAU,EAAE,EAAC,IAAI,GAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAC,OAAO,CAAC,EAAC,KAAK,GAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAC,IAAI,EAAC,UAAU,EAAC,QAAQ,EAAC,EAAC,EAAE,EAAC,MAAM,EAAC,IAAI,CAAC,EAAE,EAAC,OAAO,EAAC,IAAI,CAAC,OAAO,EAAC,IAAI,EAAC,aAAa,EAAC,QAAQ,EAAC,KAAK,EAAC,IAAI,EAAC,MAAM,EAAC,SAAS,CAAC,KAAK,CAAC,EAAC,KAAK,EAAC,KAAK,CAAC,MAAM,EAAC,SAAS,EAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAC,OAAO,EAAC,EAAC,UAAU,EAAC,CAAC,EAAC,EAAC,EAAC,SAAS,EAAC,OAAO,CAAC,CAAC;AACvR,CAAC"}

package/dist/orchestration/worker-context.d.ts

@@ -0,0 +1,33 @@
+import { type ProjectPlan, type ProjectTask } from './types.js';
+import type { ExecutionInspection, TaskStatus } from './coordinator-types.js';
+export interface WorkerAttemptDescriptor {
+    version: 1;
+    number: number;
+    phase: 'initial' | 'retry';
+    maxAttempts: number;
+    startedEventId: string;
+    previous: {
+        number: number;
+        startedEventId: string;
+        outcomeEventId: string | null;
+        status: Exclude<TaskStatus, 'pending' | 'running'>;
+    }[];
+}
+export interface WorkerPreviousAttempt {
+    eventId: string;
+    status: Exclude<TaskStatus, 'pending' | 'running'>;
+    summary: string;
+    checks: {
+        id: string;
+        passed: boolean;
+    }[];
+    risks: string[];
+}
+/** Keep controller-wide evidence in the journal while exposing only this task's outcomes to its worker. */
+export declare function workerRetryEvidenceIds(previousAttempts: WorkerPreviousAttempt[], strategyEvidence?: string[]): string[];
+/** Bind model-facing attempt state to the executor's current journal projection. */
+export declare function workerAttemptContext(plan: ProjectPlan, task: ProjectTask, inspection: ExecutionInspection): {
+    attempt: WorkerAttemptDescriptor;
+    previousAttempts: WorkerPreviousAttempt[];
+};
+//# sourceMappingURL=worker-context.d.ts.map

package/dist/orchestration/worker-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context.d.ts","sourceRoot":"","sources":["../../src/orchestration/worker-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,WAAW,EAAC,KAAK,WAAW,EAAC,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAgB,mBAAmB,EAAC,UAAU,EAAC,MAAM,wBAAwB,CAAC;AAE1F,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,SAAS,GAAC,OAAO,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IACnE,cAAc,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC;QAAC,MAAM,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,GAAC,IAAI,CAAC;QAAA,MAAM,EAAC,OAAO,CAAC,UAAU,EAAC,SAAS,GAAC,SAAS,CAAC,CAAA;KAAC,EAAE,CAAC;CAClJ;AACD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,OAAO,CAAC,UAAU,EAAC,SAAS,GAAC,SAAS,CAAC,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAC7E,MAAM,EAAC;QAAC,EAAE,EAAC,MAAM,CAAC;QAAA,MAAM,EAAC,OAAO,CAAA;KAAC,EAAE,CAAC;IAAA,KAAK,EAAC,MAAM,EAAE,CAAC;CACpD;AAED,2GAA2G;AAC3G,wBAAgB,sBAAsB,CAAC,gBAAgB,EAAC,qBAAqB,EAAE,EAAC,gBAAgB,CAAC,EAAC,MAAM,EAAE,GAAE,MAAM,EAAE,CAMnH;AAED,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,IAAI,EAAC,WAAW,EAAC,IAAI,EAAC,WAAW,EAAC,UAAU,EAAC,mBAAmB,GAAE;IAAC,OAAO,EAAC,uBAAuB,CAAC;IAAA,gBAAgB,EAAC,qBAAqB,EAAE,CAAA;CAAC,CAahL"}

package/dist/orchestration/worker-context.js

@@ -0,0 +1,31 @@
+import { OrchestrationError } from './types.js';
+/** Keep controller-wide evidence in the journal while exposing only this task's outcomes to its worker. */
+export function workerRetryEvidenceIds(previousAttempts, strategyEvidence) {
+    const outcomes = previousAttempts.map(attempt => attempt.eventId);
+    if (!outcomes.length || strategyEvidence === undefined)
+        return outcomes;
+    const cited = new Set(strategyEvidence), selected = outcomes.filter(id => cited.has(id));
+    if (!selected.length)
+        throw new OrchestrationError('conflict', 'Supervision retry evidence does not include an authoritative outcome for this task.');
+    return selected;
+}
+/** Bind model-facing attempt state to the executor's current journal projection. */
+export function workerAttemptContext(plan, task, inspection) {
+    const state = inspection.state.tasks[task.id], agent = plan.agents.find(value => value.id === task.agentId);
+    if (!state || !agent || state.status !== 'running' || state.attempts < 1)
+        throw new OrchestrationError('conflict', 'Worker attempt context requires the current running task.');
+    const starts = inspection.events.filter((event) => event.change.type === 'task_started' && event.change.taskId === task.id), started = starts.at(-1);
+    if (starts.length !== state.attempts || !started || started.change.attempt !== state.attempts || started.change.sessionId !== state.sessionId)
+        throw new OrchestrationError('conflict', 'Worker attempt context differs from the current task-start event.');
+    const finished = inspection.events.filter((event) => event.change.type === 'task_finished' && event.change.taskId === task.id);
+    if (starts.some((event, index) => event.change.attempt !== index + 1) || finished.some(event => event.sequence > started.sequence))
+        throw new OrchestrationError('conflict', 'Worker attempt history differs from the current attempt number.');
+    const prior = starts.slice(0, -1).map((start, index) => ({ start, outcome: finished.filter(event => event.sequence > start.sequence && event.sequence < starts[index + 1].sequence).at(-1) }));
+    const maxAttempts = agent.escalationPolicy.maxRetries + 1;
+    if (state.attempts > maxAttempts)
+        throw new OrchestrationError('conflict', 'Worker attempt exceeds the reviewed retry limit.');
+    const previousAttempts = prior.filter((value) => !!value.outcome).map(({ outcome }) => ({ eventId: outcome.id, status: outcome.change.status, summary: outcome.change.output.summary.slice(0, 1024), checks: outcome.change.output.checks.map(check => ({ id: check.id, passed: check.passed })), risks: outcome.change.output.unresolvedRisks.slice(0, 8).map(risk => risk.slice(0, 512)) }));
+    const previous = prior.map(({ start, outcome }) => ({ number: start.change.attempt, startedEventId: start.id, outcomeEventId: outcome?.id ?? null, status: outcome?.change.status ?? 'unknown' }));
+    return { attempt: { version: 1, number: state.attempts, phase: state.attempts === 1 ? 'initial' : 'retry', maxAttempts, startedEventId: started.id, previous }, previousAttempts };
+}
+//# sourceMappingURL=worker-context.js.map

package/dist/orchestration/worker-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context.js","sourceRoot":"","sources":["../../src/orchestration/worker-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,kBAAkB,EAAmC,MAAM,YAAY,CAAC;AAYhF,2GAA2G;AAC3G,MAAM,UAAU,sBAAsB,CAAC,gBAAwC,EAAC,gBAA0B;IACxG,MAAM,QAAQ,GAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,IAAG,CAAC,QAAQ,CAAC,MAAM,IAAE,gBAAgB,KAAG,SAAS;QAAC,OAAO,QAAQ,CAAC;IAClE,MAAM,KAAK,GAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC,EAAC,QAAQ,GAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAA,EAAE,CAAA,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAClF,IAAG,CAAC,QAAQ,CAAC,MAAM;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,qFAAqF,CAAC,CAAC;IACnJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,IAAgB,EAAC,IAAgB,EAAC,UAA8B;IACnG,MAAM,KAAK,GAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAC,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,EAAE,KAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IACnG,IAAG,CAAC,KAAK,IAAE,CAAC,KAAK,IAAE,KAAK,CAAC,MAAM,KAAG,SAAS,IAAE,KAAK,CAAC,QAAQ,GAAC,CAAC;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,2DAA2D,CAAC,CAAC;IACnK,MAAM,MAAM,GAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAA0F,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,cAAc,IAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,EAAE,CAAC,EAAC,OAAO,GAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACjO,IAAG,MAAM,CAAC,MAAM,KAAG,KAAK,CAAC,QAAQ,IAAE,CAAC,OAAO,IAAE,OAAO,CAAC,MAAM,CAAC,OAAO,KAAG,KAAK,CAAC,QAAQ,IAAE,OAAO,CAAC,MAAM,CAAC,SAAS,KAAG,KAAK,CAAC,SAAS;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,mEAAmE,CAAC,CAAC;IAC9O,MAAM,QAAQ,GAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAA2F,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,IAAI,KAAG,eAAe,IAAE,KAAK,CAAC,MAAM,CAAC,MAAM,KAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/M,IAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAA,KAAK,CAAC,MAAM,CAAC,OAAO,KAAG,KAAK,GAAC,CAAC,CAAC,IAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,QAAQ,GAAC,OAAO,CAAC,QAAQ,CAAC;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,iEAAiE,CAAC,CAAC;IAChO,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAC,KAAK,EAAC,EAAE,CAAA,CAAC,EAAC,KAAK,EAAC,OAAO,EAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAA,EAAE,CAAA,KAAK,CAAC,QAAQ,GAAC,KAAK,CAAC,QAAQ,IAAE,KAAK,CAAC,QAAQ,GAAC,MAAM,CAAC,KAAK,GAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IAC5K,MAAM,WAAW,GAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,GAAC,CAAC,CAAC;IACtD,IAAG,KAAK,CAAC,QAAQ,GAAC,WAAW;QAAC,MAAM,IAAI,kBAAkB,CAAC,UAAU,EAAC,kDAAkD,CAAC,CAAC;IAC1H,MAAM,gBAAgB,GAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmE,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,EAAC,OAAO,EAAC,EAAC,EAAE,CAAA,CAAC,EAAC,OAAO,EAAC,OAAO,CAAC,EAAE,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAC,OAAO,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAC,IAAI,CAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAA,EAAE,CAAA,CAAC,EAAC,EAAE,EAAC,KAAK,CAAC,EAAE,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,EAAC,CAAC,CAAC,EAAC,KAAK,EAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,KAAK,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACla,MAAM,QAAQ,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,EAAC,OAAO,EAAC,EAAC,EAAE,CAAA,CAAC,EAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAC,cAAc,EAAC,KAAK,CAAC,EAAE,EAAC,cAAc,EAAC,OAAO,EAAE,EAAE,IAAE,IAAI,EAAC,MAAM,EAAC,OAAO,EAAE,MAAM,CAAC,MAAM,IAAE,SAAS,EAAC,CAAC,CAAC,CAAC;IAC/K,OAAM,EAAC,OAAO,EAAC,EAAC,OAAO,EAAC,CAAC,EAAC,MAAM,EAAC,KAAK,CAAC,QAAQ,EAAC,KAAK,EAAC,KAAK,CAAC,QAAQ,KAAG,CAAC,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,OAAO,EAAC,WAAW,EAAC,cAAc,EAAC,OAAO,CAAC,EAAE,EAAC,QAAQ,EAAC,EAAC,gBAAgB,EAAC,CAAC;AAC/J,CAAC"}

package/dist/policy.d.ts

@@ -25,6 +25,7 @@ export interface PolicyResult {
     durationMs: number;
 }
 export interface PolicyOptions {
+    signal?: AbortSignal;
     /** Override the configured command (tests / embedding). */
     command?: string;
     /** Override the configured timeout in ms. */

package/dist/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,8EAA8E;AAC9E,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAQrD;AAYD,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CA2FrG"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,MAAM,CAAC;AAE9C,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,cAAc,CAAC;IACzB,kFAAkF;IAClF,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID,8EAA8E;AAC9E,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAQrD;AAYD,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAEpE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,YAAY,CAAC,CAmGrG"}

package/dist/policy.js

@@ -51,6 +51,8 @@ export function isPolicyEnabled(options = {}) {
 export function evaluatePolicy(toolCall, options = {}) {
     const command = options.command ?? getPolicyCommand();
     const started = Date.now();
+    if (options.signal?.aborted)
+        return Promise.resolve({ decision: 'deny', source: 'policy', reason: 'Policy evaluation cancelled', durationMs: 0 });
     if (!command) {
         return Promise.resolve({ decision: 'allow', source: 'none', durationMs: 0 });
     }
@@ -80,9 +82,10 @@ export function evaluatePolicy(toolCall, options = {}) {
             return;
         }
         let stderr = '';
-        let timedOut = false;
+        let timedOut = false, cancelled = false;
+        let killTimer;
         proc.stderr?.on('data', (d) => {
-            stderr += d.toString();
+            stderr = (stderr + d.toString()).slice(0, 65536);
         });
         const signalGroup = (signal) => {
             try {
@@ -100,11 +103,24 @@ export function evaluatePolicy(toolCall, options = {}) {
         };
         const timer = setTimeout(() => {
             timedOut = true;
+            killTimer = setTimeout(() => signalGroup('SIGKILL'), 2000);
             signalGroup('SIGTERM');
-            setTimeout(() => signalGroup('SIGKILL'), 2000);
         }, timeoutMs);
+        const abort = () => { cancelled = true; signalGroup('SIGKILL'); };
+        const cleanup = () => { clearTimeout(timer); if (killTimer)
+            clearTimeout(killTimer); options.signal?.removeEventListener('abort', abort); if (cancelled || timedOut) {
+            try {
+                if (proc.pid)
+                    process.kill(-proc.pid, 'SIGKILL');
+            }
+            catch { /* Group already exited. */ }
+        } };
         proc.on('close', (code) => {
-            clearTimeout(timer);
+            cleanup();
+            if (cancelled) {
+                done({ decision: 'deny', source: 'policy', reason: 'Policy evaluation cancelled' });
+                return;
+            }
             if (timedOut) {
                 // Fail closed on timeout.
                 done({ decision: 'deny', source: 'policy', reason: `policy hook timed out after ${timeoutMs}ms (fail closed)` });
@@ -122,10 +138,14 @@ export function evaluatePolicy(toolCall, options = {}) {
             }
         });
         proc.on('error', (err) => {
-            clearTimeout(timer);
+            cleanup();
             // Fail closed on runtime spawn error (e.g. command not found).
             done({ decision: 'deny', source: 'policy', reason: `policy hook error: ${err.message}` });
         });
+        options.signal?.addEventListener('abort', abort, { once: true });
+        if (options.signal?.aborted)
+            abort();
+        proc.stdin?.on?.('error', () => { });
         // Feed the tool-call JSON to the policy on stdin, then close it.
         try {
             proc.stdin?.write(input);

package/dist/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAoBtC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAqC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,EAAE,OAAO,CAAC;QAC5B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAuC,CAAC;QAC1E,MAAM,CAAC,GAAG,MAAM,EAAE,SAAS,CAAC;QAC5B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,OAAO,GAAkB,EAAE;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB,EAAE,OAAO,GAAkB,EAAE;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,MAAwC,EAAQ,EAAE;YAC9D,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0DAA0D;YAC1D,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACjI,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;QAErB,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5B,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,MAAsB,EAAQ,EAAE;YACnD,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,CAAC,SAAS,CAAC,CAAC;YACvB,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,QAAQ,EAAE,CAAC;gBACb,0BAA0B;gBAC1B,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,SAAS,kBAAkB,EAAE,CAAC,CAAC;gBACjH,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,uBAAuB,IAAI,IAAI,SAAS,GAAG;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,+DAA+D;YAC/D,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,iEAAiE;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;QACjF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAqBtC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEhC,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAqC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,EAAE,OAAO,CAAC;QAC5B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAuC,CAAC;QAC1E,MAAM,CAAC,GAAG,MAAM,EAAE,SAAS,CAAC;QAC5B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,OAAO,GAAkB,EAAE;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAkB,EAAE,OAAO,GAAkB,EAAE;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IACtD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE3B,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,6BAA6B,EAAC,UAAU,EAAC,CAAC,EAAC,CAAC,CAAC;IACzI,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3B,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAe,CAAC,OAAO,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,MAAwC,EAAQ,EAAE;YAC9D,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC;QAEF,0EAA0E;QAC1E,4CAA4C;QAC5C,IAAI,IAA8B,CAAC;QACnC,IAAI,CAAC;YACH,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0DAA0D;YAC1D,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YACjI,OAAO;QACT,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,QAAQ,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,CAAC;QACxC,IAAI,SAAoD,CAAC;QAEzD,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YAC5B,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,CAAC,MAAsB,EAAQ,EAAE;YACnD,IAAI,CAAC;gBACH,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBACH,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACpB,CAAC;gBAAC,MAAM,CAAC;oBACP,kBAAkB;gBACpB,CAAC;YACH,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,QAAQ,GAAG,IAAI,CAAC;YAChB,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;YAC3D,WAAW,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS;YAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,IAAI,CAAC,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;QACzQ,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,EAAE,CAAC;YACV,IAAI,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,EAAC,QAAQ,EAAC,MAAM,EAAC,MAAM,EAAC,QAAQ,EAAC,MAAM,EAAC,6BAA6B,EAAC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxG,IAAI,QAAQ,EAAE,CAAC;gBACb,0BAA0B;gBAC1B,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,SAAS,kBAAkB,EAAE,CAAC,CAAC;gBACjH,OAAO;YACT,CAAC;YACD,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,QAAQ;oBAChB,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,uBAAuB,IAAI,IAAI,SAAS,GAAG;iBACrE,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,OAAO,EAAE,CAAC;YACV,+DAA+D;YAC/D,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAgD,CAAC,CAAC,CAAC;QAClF,iEAAiE;QACjE,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;QACjF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/preferences/controls.d.ts

@@ -0,0 +1,21 @@
+import { type RoutingDecision } from '../routing/index.js';
+import type { ModelInfo } from '../models/index.js';
+import type { Message, LLMProvider } from '../types.js';
+import { RunLog } from '../runlog.js';
+import type { ModelPreference } from './types.js';
+export interface ProviderChoice {
+    id: LLMProvider;
+    label: string;
+    configured: boolean;
+    configHint: string;
+    health: 'healthy' | 'degraded' | 'quarantined' | 'unknown' | 'missing';
+    note?: string;
+}
+export declare function providerChoices(): Promise<ProviderChoice[]>;
+export declare function formatModelDetails(model: ModelInfo): string;
+/** Validate choices before changing UI state. No inference or preference write occurs here. */
+export declare function validateSelection(preference: ModelPreference, messages: Message[], options?: {
+    signal?: AbortSignal;
+    runlog?: RunLog;
+}): Promise<RoutingDecision>;
+//# sourceMappingURL=controls.d.ts.map

package/dist/preferences/controls.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controls.d.ts","sourceRoot":"","sources":["../../src/preferences/controls.ts"],"names":[],"mappings":"AAEA,OAAO,EAAwC,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACjG,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IACxE,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,GAAG,SAAS,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACvF;AACD,wBAAsB,eAAe,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAUjE;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAM3D;AACD,+FAA+F;AAC/F,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,OAAO,CAAC,eAAe,CAAC,CAO3K"}

package/dist/preferences/controls.js

@@ -0,0 +1,36 @@
+import * as config from '../config.js';
+import { diagnoseProviders } from '../doctor.js';
+import { selectRoute, RoutingUnavailableError } from '../routing/index.js';
+import { validatePreference } from './validate.js';
+export async function providerChoices() {
+    const { report } = await diagnoseProviders(['providers']);
+    return [{ id: 'auto', label: 'Auto', configured: true, configHint: '', health: 'unknown', note: 'Use eligible providers and explain each route' },
+        ...config.getProviderNames().map(id => {
+            const health = report.providers.find(provider => provider.provider === id), env = config.getProviderEnvVars(id);
+            return { id, label: id, configured: !!health && health.credentials !== 'missing', configHint: id === 'bedrock' ? 'AWS_PROFILE / BEDROCK_BASE_URL' : env.apiKey ?? env.baseUrl ?? 'provider configuration',
+                health: !health ? 'unknown' : health.credentials === 'missing' ? 'missing' : health.quarantine.active ? 'quarantined'
+                    : health.sampleCount === 0 ? 'unknown' : health.errorRate ? 'degraded' : 'healthy',
+                note: health?.quarantine.active ? `until ${health.quarantine.expiresAt}; explicit recovery allowed` : undefined };
+        })];
+}
+export function formatModelDetails(model) {
+    const price = model.pricing, knownPrice = price?.input !== undefined && price.output !== undefined;
+    const estimate = knownPrice ? (price.input * 1000 + price.output * 250) / 1000000 : undefined;
+    return `context ${model.contextLength?.toLocaleString('en-US') ?? 'unknown'} · output ${model.maxOutputTokens?.toLocaleString('en-US') ?? 'unknown'} · `
+        + (estimate !== undefined && Number.isFinite(estimate) ? `$${estimate.toFixed(6)} / 1k in + 250 out` : 'cost unknown')
+        + ` · tools ${model.capabilities?.tools === undefined ? 'unknown' : model.capabilities.tools ? 'yes' : 'no'}`;
+}
+/** Validate choices before changing UI state. No inference or preference write occurs here. */
+export async function validateSelection(preference, messages, options = {}) {
+    const value = validatePreference(preference);
+    const decision = await selectRoute({ provider: value.provider ?? 'auto', model: value.model ?? undefined, messages, signal: options.signal,
+        preferences: config.get('routing'), requirements: { tools: true, streaming: true } });
+    if (options.runlog) {
+        options.runlog.routingDecision(decision);
+        await options.runlog.flush();
+    }
+    if (!decision.selected)
+        throw new RoutingUnavailableError(decision);
+    return decision;
+}
+//# sourceMappingURL=controls.js.map

package/dist/preferences/controls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controls.js","sourceRoot":"","sources":["../../src/preferences/controls.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAwB,MAAM,qBAAqB,CAAC;AAIjG,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAOnD,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,+CAA+C,EAAE;QAC/I,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,EAAE,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAChH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,WAAW,KAAK,SAAS,EAAE,UAAU,EAAE,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,wBAAwB;gBACvM,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,aAAsB;oBAC9I,CAAC,CAAC,MAAM,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,SAAkB;gBAC/G,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,MAAM,CAAC,UAAU,CAAC,SAAS,6BAA6B,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACtH,CAAC,CAAC,CAAC,CAAC;AACR,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAgB;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,UAAU,GAAG,KAAK,EAAE,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;IACnG,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAM,GAAG,IAAI,GAAG,KAAK,CAAC,MAAO,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAChG,OAAO,WAAW,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,SAAS,aAAa,KAAK,CAAC,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,SAAS,KAAK;UACpJ,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,cAAc,CAAC;UACpH,YAAY,KAAK,CAAC,YAAY,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAClH,CAAC;AACD,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,UAA2B,EAAE,QAAmB,EAAE,OAAO,GAA8C,EAAE;IAC/I,MAAM,KAAK,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;QACxI,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAAC,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAC/F,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/preferences/flags.d.ts

@@ -0,0 +1,8 @@
+import type { ModelPreference } from './types.js';
+/** Strip only provider/model flags; arguments after -- are literal prompt text. */
+export declare function parseModelFlags(args: string[]): {
+    preference: ModelPreference;
+    args: string[];
+    literal: string[];
+};
+//# sourceMappingURL=flags.d.ts.map

package/dist/preferences/flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/preferences/flags.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,mFAAmF;AACnF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG;IAAE,UAAU,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAclH"}

package/dist/preferences/flags.js

@@ -0,0 +1,27 @@
+import { validatePreference } from './validate.js';
+/** Strip only provider/model flags; arguments after -- are literal prompt text. */
+export function parseModelFlags(args) {
+    const preference = {}, remaining = [];
+    for (let index = 0; index < args.length; index++) {
+        const arg = args[index];
+        if (arg === '--')
+            return { preference: validatePreference(preference), args: remaining, literal: args.slice(index + 1) };
+        const flag = arg.split('=', 1)[0];
+        if (flag !== '--provider' && flag !== '--model') {
+            remaining.push(arg);
+            continue;
+        }
+        const field = flag === '--provider' ? 'provider' : 'model';
+        if (Object.hasOwn(preference, field))
+            throw new Error(`Duplicate ${flag} option`);
+        const value = arg.includes('=') ? arg.slice(arg.indexOf('=') + 1) : args[++index];
+        if (!value || value.startsWith('-'))
+            throw new Error(`${flag} requires a value`);
+        if (field === 'provider')
+            preference.provider = value;
+        else
+            preference.model = value;
+    }
+    return { preference: validatePreference(preference), args: remaining, literal: [] };
+}
+//# sourceMappingURL=flags.js.map

package/dist/preferences/flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../src/preferences/flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGnD,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,IAAc;IAC5C,MAAM,UAAU,GAAoB,EAAE,EAAE,SAAS,GAAa,EAAE,CAAC;IACjE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAE,CAAC;QACzB,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACzH,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACnF,MAAM,KAAK,GAAG,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;QAC3D,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,SAAS,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;QACjF,IAAI,KAAK,KAAK,UAAU;YAAE,UAAU,CAAC,QAAQ,GAAG,KAAoC,CAAC;;YAAM,UAAU,CAAC,KAAK,GAAG,KAAK,CAAC;IACtH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACtF,CAAC"}

package/dist/preferences/index.d.ts

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './resolve.js';
+export * from './store.js';
+export * from './validate.js';
+export * from './once.js';
+export * from './controls.js';
+export * from './submission.js';
+export * from './flags.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/preferences/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/preferences/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/preferences/index.js

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './resolve.js';
+export * from './store.js';
+export * from './validate.js';
+export * from './once.js';
+export * from './controls.js';
+export * from './submission.js';
+export * from './flags.js';
+//# sourceMappingURL=index.js.map

package/dist/preferences/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preferences/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC"}

package/dist/preferences/once.d.ts

@@ -0,0 +1,8 @@
+import type { ModelPreference } from './types.js';
+export declare const ONCE_USAGE = "/once [--provider <name>] [--model <id>] -- <prompt>";
+/** The delimiter makes arbitrary prompts unambiguous; never shell-parse or execute them. */
+export declare function parseOnce(input: string): {
+    preference: ModelPreference;
+    prompt: string;
+} | undefined;
+//# sourceMappingURL=once.d.ts.map

package/dist/preferences/once.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"once.d.ts","sourceRoot":"","sources":["../../src/preferences/once.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,UAAU,yDAAyD,CAAC;AACjF,4FAA4F;AAC5F,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,UAAU,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAgBpG"}

package/dist/preferences/once.js

@@ -0,0 +1,28 @@
+import { validatePreference } from './validate.js';
+export const ONCE_USAGE = '/once [--provider <name>] [--model <id>] -- <prompt>';
+/** The delimiter makes arbitrary prompts unambiguous; never shell-parse or execute them. */
+export function parseOnce(input) {
+    if (!/^\/once(?:\s|$)/i.test(input))
+        return undefined;
+    if (input.length > 1024 * 1024)
+        throw new Error('Single-turn input exceeds 1 MiB');
+    const split = /\s--(?:\s|$)/.exec(input);
+    if (!split)
+        throw new Error(`Usage: ${ONCE_USAGE}`);
+    const flags = input.slice(5, split.index).trim().split(/\s+/).filter(Boolean);
+    const prompt = input.slice(split.index + split[0].length).trim();
+    if (!prompt || !flags.length || flags.length > 4 || flags.length % 2)
+        throw new Error(`Usage: ${ONCE_USAGE}`);
+    const preference = {};
+    for (let i = 0; i < flags.length; i += 2) {
+        const flag = flags[i], value = flags[i + 1];
+        if (flag === '--provider' && preference.provider === undefined)
+            preference.provider = value;
+        else if (flag === '--model' && preference.model === undefined)
+            preference.model = value;
+        else
+            throw new Error(`Usage: ${ONCE_USAGE}`);
+    }
+    return { preference: validatePreference(preference), prompt };
+}
+//# sourceMappingURL=once.js.map