@caupulican/pi-adaptative 0.81.38 → 0.81.40

package/dist/core/orchestration/profile-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-store.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/profile-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAEN,4BAA4B,EAG5B,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,yBAAyB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAE7D,MAAM,WAAW,8BAA8B;IAC9C,KAAK,EAAE,yBAAyB,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,EAAE,4BAA4B,CAAC;IACvC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC1C,WAAW,EAAE,SAAS,8BAA8B,EAAE,CAAC;CACvD;AAaD,qBAAa,yBAAyB;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC,YAAY,OAAO,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,OAAO,CAAA;KAAE,EAI9E;IAED,SAAS,CAAC,KAAK,EAAE,yBAAyB,GAAG,MAAM,CAIlD;IAED,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,yBAAyB,GAAG,MAAM,CAOpE;IAED,IAAI,IAAI,8BAA8B,CA0DrC;IAED,IAAI,CACH,OAAO,EAAE,oBAAoB,EAC7B,KAAK,EAAE,yBAAyB,EAChC,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO,GACnC,MAAM,CAiBR;IAED,OAAO,CAAC,SAAS;CAgCjB","sourcesContent":["import { existsSync, readdirSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { resourceDir } from \"../agent-paths.ts\";\nimport { withFileLockSync, writeFileAtomicSync } from \"../util/atomic-file.ts\";\nimport type { OrchestrationProfile } from \"./contracts.ts\";\nimport {\n\tOrchestrationProfileError,\n\tOrchestrationProfileRegistry,\n\tparseOrchestrationProfile,\n\tvalidateOrchestrationProfile,\n} from \"./profile-registry.ts\";\n\nexport type OrchestrationProfileScope = \"global\" | \"project\";\n\nexport interface OrchestrationProfileDiagnostic {\n\tscope: OrchestrationProfileScope;\n\tpath: string;\n\tmessage: string;\n}\n\nexport interface OrchestrationProfileLoadResult {\n\tregistry: OrchestrationProfileRegistry;\n\tprofiles: readonly OrchestrationProfile[];\n\tdiagnostics: readonly OrchestrationProfileDiagnostic[];\n}\n\nconst PROFILE_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;\n\nfunction authoredProfile(profile: OrchestrationProfile): Omit<OrchestrationProfile, \"sourcePath\"> {\n\tconst { sourcePath: _sourcePath, ...authored } = profile;\n\treturn authored;\n}\n\nfunction messageFrom(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n\nexport class OrchestrationProfileStore {\n\tprivate readonly agentDir: string;\n\tprivate readonly cwd: string;\n\tprivate readonly projectTrusted: boolean;\n\n\tconstructor(options: { agentDir: string; cwd: string; projectTrusted: boolean }) {\n\t\tthis.agentDir = resolve(options.agentDir);\n\t\tthis.cwd = resolve(options.cwd);\n\t\tthis.projectTrusted = options.projectTrusted;\n\t}\n\n\tdirectory(scope: OrchestrationProfileScope): string {\n\t\treturn scope === \"global\"\n\t\t\t? join(resourceDir(\"profiles\", this.agentDir), \"orchestration\")\n\t\t\t: join(this.cwd, CONFIG_DIR_NAME, \"profiles\", \"orchestration\");\n\t}\n\n\tfilePath(profileId: string, scope: OrchestrationProfileScope): string {\n\t\tif (!PROFILE_ID_PATTERN.test(profileId)) {\n\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\"Orchestration profile IDs must be 1-128 characters using only letters, numbers, '.', '_', or '-'.\",\n\t\t\t);\n\t\t}\n\t\treturn join(this.directory(scope), `${profileId}.json`);\n\t}\n\n\tload(): OrchestrationProfileLoadResult {\n\t\tconst diagnostics: OrchestrationProfileDiagnostic[] = [];\n\t\tconst globalProfiles = this.loadScope(\"global\", diagnostics);\n\t\tconst projectProfiles = this.projectTrusted ? this.loadScope(\"project\", diagnostics) : [];\n\t\tif (!this.projectTrusted && existsSync(this.directory(\"project\"))) {\n\t\t\tdiagnostics.push({\n\t\t\t\tscope: \"project\",\n\t\t\t\tpath: this.directory(\"project\"),\n\t\t\t\tmessage: \"Project orchestration profiles were not loaded because the project is untrusted.\",\n\t\t\t});\n\t\t}\n\t\tconst profilesById = new Map(globalProfiles.map((profile) => [profile.profileId, profile]));\n\t\tfor (const profile of projectProfiles) profilesById.set(profile.profileId, profile);\n\t\tlet profiles = [...profilesById.values()].sort((left, right) => left.profileId.localeCompare(right.profileId));\n\t\tlet removed = true;\n\t\twhile (removed) {\n\t\t\tremoved = false;\n\t\t\tconst available = new Map(profiles.map((profile) => [profile.profileId, profile]));\n\t\t\tprofiles = profiles.filter((profile) => {\n\t\t\t\tconst invalidTarget = profile.dispatchProfileIds.find((profileId) => {\n\t\t\t\t\tconst target = available.get(profileId);\n\t\t\t\t\treturn !target || target.role === \"orchestrator\";\n\t\t\t\t});\n\t\t\t\tconst verifier = profile.verificationProfileId ? available.get(profile.verificationProfileId) : undefined;\n\t\t\t\tconst invalidVerifier =\n\t\t\t\t\tprofile.verificationProfileId && verifier?.role !== \"verifier\"\n\t\t\t\t\t\t? profile.verificationProfileId\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst unauthorizedVerifier =\n\t\t\t\t\tprofile.role === \"orchestrator\"\n\t\t\t\t\t\t? profile.dispatchProfileIds\n\t\t\t\t\t\t\t\t.map((profileId) => available.get(profileId))\n\t\t\t\t\t\t\t\t.find(\n\t\t\t\t\t\t\t\t\t(target) =>\n\t\t\t\t\t\t\t\t\t\ttarget?.verificationProfileId &&\n\t\t\t\t\t\t\t\t\t\t!profile.dispatchProfileIds.includes(target.verificationProfileId),\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: undefined;\n\t\t\t\tif (!invalidTarget && !invalidVerifier && !unauthorizedVerifier) return true;\n\t\t\t\tremoved = true;\n\t\t\t\tconst message = invalidTarget\n\t\t\t\t\t? `Dispatch target '${invalidTarget}' is missing or is another orchestrator.`\n\t\t\t\t\t: invalidVerifier\n\t\t\t\t\t\t? `Verifier target '${invalidVerifier}' is missing or is not a verifier.`\n\t\t\t\t\t\t: `Dispatched profile '${unauthorizedVerifier?.profileId}' requires verifier '${unauthorizedVerifier?.verificationProfileId}', which this orchestrator does not authorize.`;\n\t\t\t\tdiagnostics.push({\n\t\t\t\t\tscope: profile.sourcePath?.startsWith(this.directory(\"project\")) ? \"project\" : \"global\",\n\t\t\t\t\tpath: profile.sourcePath ?? profile.profileId,\n\t\t\t\t\tmessage,\n\t\t\t\t});\n\t\t\t\treturn false;\n\t\t\t});\n\t\t}\n\t\treturn {\n\t\t\tregistry: new OrchestrationProfileRegistry(profiles),\n\t\t\tprofiles,\n\t\t\tdiagnostics,\n\t\t};\n\t}\n\n\tsave(\n\t\tprofile: OrchestrationProfile,\n\t\tscope: OrchestrationProfileScope,\n\t\toptions: { overwrite?: boolean } = {},\n\t): string {\n\t\tif (scope === \"project\" && !this.projectTrusted) {\n\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\"Project is not trusted; refusing to write project orchestration profiles.\",\n\t\t\t);\n\t\t}\n\t\tvalidateOrchestrationProfile(profile);\n\t\tconst filePath = this.filePath(profile.profileId, scope);\n\t\twithFileLockSync(filePath, () => {\n\t\t\tif (!options.overwrite && existsSync(filePath)) {\n\t\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\t`Orchestration profile '${profile.profileId}' already exists in ${scope} scope.`,\n\t\t\t\t);\n\t\t\t}\n\t\t\twriteFileAtomicSync(filePath, `${JSON.stringify(authoredProfile(profile), null, 2)}\\n`);\n\t\t});\n\t\treturn filePath;\n\t}\n\n\tprivate loadScope(\n\t\tscope: OrchestrationProfileScope,\n\t\tdiagnostics: OrchestrationProfileDiagnostic[],\n\t): OrchestrationProfile[] {\n\t\tconst directory = this.directory(scope);\n\t\tif (!existsSync(directory)) return [];\n\t\tlet entries: string[];\n\t\ttry {\n\t\t\tentries = readdirSync(directory)\n\t\t\t\t.filter((entry) => entry.endsWith(\".json\"))\n\t\t\t\t.sort((left, right) => left.localeCompare(right));\n\t\t} catch (error) {\n\t\t\tdiagnostics.push({ scope, path: directory, message: messageFrom(error) });\n\t\t\treturn [];\n\t\t}\n\t\tconst profilesById = new Map<string, OrchestrationProfile>();\n\t\tfor (const entry of entries) {\n\t\t\tconst sourcePath = join(directory, entry);\n\t\t\ttry {\n\t\t\t\tconst profile = parseOrchestrationProfile(JSON.parse(readFileSync(sourcePath, \"utf-8\")), sourcePath);\n\t\t\t\tif (profilesById.has(profile.profileId)) {\n\t\t\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\t\t`Duplicate orchestration profile '${profile.profileId}' in ${scope} scope.`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tprofilesById.set(profile.profileId, profile);\n\t\t\t} catch (error) {\n\t\t\t\tdiagnostics.push({ scope, path: sourcePath, message: messageFrom(error) });\n\t\t\t}\n\t\t}\n\t\treturn [...profilesById.values()];\n\t}\n}\n"]}

package/dist/core/orchestration/profile-store.js

@@ -0,0 +1,136 @@
+import { existsSync, readdirSync, readFileSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { CONFIG_DIR_NAME } from "../../config.js";
+import { resourceDir } from "../agent-paths.js";
+import { withFileLockSync, writeFileAtomicSync } from "../util/atomic-file.js";
+import { OrchestrationProfileError, OrchestrationProfileRegistry, parseOrchestrationProfile, validateOrchestrationProfile, } from "./profile-registry.js";
+const PROFILE_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
+function authoredProfile(profile) {
+    const { sourcePath: _sourcePath, ...authored } = profile;
+    return authored;
+}
+function messageFrom(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+export class OrchestrationProfileStore {
+    agentDir;
+    cwd;
+    projectTrusted;
+    constructor(options) {
+        this.agentDir = resolve(options.agentDir);
+        this.cwd = resolve(options.cwd);
+        this.projectTrusted = options.projectTrusted;
+    }
+    directory(scope) {
+        return scope === "global"
+            ? join(resourceDir("profiles", this.agentDir), "orchestration")
+            : join(this.cwd, CONFIG_DIR_NAME, "profiles", "orchestration");
+    }
+    filePath(profileId, scope) {
+        if (!PROFILE_ID_PATTERN.test(profileId)) {
+            throw new OrchestrationProfileError("Orchestration profile IDs must be 1-128 characters using only letters, numbers, '.', '_', or '-'.");
+        }
+        return join(this.directory(scope), `${profileId}.json`);
+    }
+    load() {
+        const diagnostics = [];
+        const globalProfiles = this.loadScope("global", diagnostics);
+        const projectProfiles = this.projectTrusted ? this.loadScope("project", diagnostics) : [];
+        if (!this.projectTrusted && existsSync(this.directory("project"))) {
+            diagnostics.push({
+                scope: "project",
+                path: this.directory("project"),
+                message: "Project orchestration profiles were not loaded because the project is untrusted.",
+            });
+        }
+        const profilesById = new Map(globalProfiles.map((profile) => [profile.profileId, profile]));
+        for (const profile of projectProfiles)
+            profilesById.set(profile.profileId, profile);
+        let profiles = [...profilesById.values()].sort((left, right) => left.profileId.localeCompare(right.profileId));
+        let removed = true;
+        while (removed) {
+            removed = false;
+            const available = new Map(profiles.map((profile) => [profile.profileId, profile]));
+            profiles = profiles.filter((profile) => {
+                const invalidTarget = profile.dispatchProfileIds.find((profileId) => {
+                    const target = available.get(profileId);
+                    return !target || target.role === "orchestrator";
+                });
+                const verifier = profile.verificationProfileId ? available.get(profile.verificationProfileId) : undefined;
+                const invalidVerifier = profile.verificationProfileId && verifier?.role !== "verifier"
+                    ? profile.verificationProfileId
+                    : undefined;
+                const unauthorizedVerifier = profile.role === "orchestrator"
+                    ? profile.dispatchProfileIds
+                        .map((profileId) => available.get(profileId))
+                        .find((target) => target?.verificationProfileId &&
+                        !profile.dispatchProfileIds.includes(target.verificationProfileId))
+                    : undefined;
+                if (!invalidTarget && !invalidVerifier && !unauthorizedVerifier)
+                    return true;
+                removed = true;
+                const message = invalidTarget
+                    ? `Dispatch target '${invalidTarget}' is missing or is another orchestrator.`
+                    : invalidVerifier
+                        ? `Verifier target '${invalidVerifier}' is missing or is not a verifier.`
+                        : `Dispatched profile '${unauthorizedVerifier?.profileId}' requires verifier '${unauthorizedVerifier?.verificationProfileId}', which this orchestrator does not authorize.`;
+                diagnostics.push({
+                    scope: profile.sourcePath?.startsWith(this.directory("project")) ? "project" : "global",
+                    path: profile.sourcePath ?? profile.profileId,
+                    message,
+                });
+                return false;
+            });
+        }
+        return {
+            registry: new OrchestrationProfileRegistry(profiles),
+            profiles,
+            diagnostics,
+        };
+    }
+    save(profile, scope, options = {}) {
+        if (scope === "project" && !this.projectTrusted) {
+            throw new OrchestrationProfileError("Project is not trusted; refusing to write project orchestration profiles.");
+        }
+        validateOrchestrationProfile(profile);
+        const filePath = this.filePath(profile.profileId, scope);
+        withFileLockSync(filePath, () => {
+            if (!options.overwrite && existsSync(filePath)) {
+                throw new OrchestrationProfileError(`Orchestration profile '${profile.profileId}' already exists in ${scope} scope.`);
+            }
+            writeFileAtomicSync(filePath, `${JSON.stringify(authoredProfile(profile), null, 2)}\n`);
+        });
+        return filePath;
+    }
+    loadScope(scope, diagnostics) {
+        const directory = this.directory(scope);
+        if (!existsSync(directory))
+            return [];
+        let entries;
+        try {
+            entries = readdirSync(directory)
+                .filter((entry) => entry.endsWith(".json"))
+                .sort((left, right) => left.localeCompare(right));
+        }
+        catch (error) {
+            diagnostics.push({ scope, path: directory, message: messageFrom(error) });
+            return [];
+        }
+        const profilesById = new Map();
+        for (const entry of entries) {
+            const sourcePath = join(directory, entry);
+            try {
+                const profile = parseOrchestrationProfile(JSON.parse(readFileSync(sourcePath, "utf-8")), sourcePath);
+                if (profilesById.has(profile.profileId)) {
+                    throw new OrchestrationProfileError(`Duplicate orchestration profile '${profile.profileId}' in ${scope} scope.`);
+                }
+                profilesById.set(profile.profileId, profile);
+            }
+            catch (error) {
+                diagnostics.push({ scope, path: sourcePath, message: messageFrom(error) });
+            }
+        }
+        return [...profilesById.values()];
+    }
+}
+//# sourceMappingURL=profile-store.js.map

package/dist/core/orchestration/profile-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-store.js","sourceRoot":"","sources":["../../../src/core/orchestration/profile-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,EACN,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,4BAA4B,GAC5B,MAAM,uBAAuB,CAAC;AAgB/B,MAAM,kBAAkB,GAAG,oCAAoC,CAAC;AAEhE,SAAS,eAAe,CAAC,OAA6B,EAA4C;IACjG,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;IACzD,OAAO,QAAQ,CAAC;AAAA,CAChB;AAED,SAAS,WAAW,CAAC,KAAc,EAAU;IAC5C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAA,CAC9D;AAED,MAAM,OAAO,yBAAyB;IACpB,QAAQ,CAAS;IACjB,GAAG,CAAS;IACZ,cAAc,CAAU;IAEzC,YAAY,OAAmE,EAAE;QAChF,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;IAAA,CAC7C;IAED,SAAS,CAAC,KAAgC,EAAU;QACnD,OAAO,KAAK,KAAK,QAAQ;YACxB,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;YAC/D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IAAA,CAChE;IAED,QAAQ,CAAC,SAAiB,EAAE,KAAgC,EAAU;QACrE,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,yBAAyB,CAClC,mGAAmG,CACnG,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IAAA,CACxD;IAED,IAAI,GAAmC;QACtC,MAAM,WAAW,GAAqC,EAAE,CAAC;QACzD,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7D,MAAM,eAAe,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACnE,WAAW,CAAC,IAAI,CAAC;gBAChB,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBAC/B,OAAO,EAAE,kFAAkF;aAC3F,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,OAAO,IAAI,eAAe;YAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACpF,IAAI,QAAQ,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/G,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,OAAO,OAAO,EAAE,CAAC;YAChB,OAAO,GAAG,KAAK,CAAC;YAChB,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YACnF,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvC,MAAM,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;oBACpE,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACxC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,cAAc,CAAC;gBAAA,CACjD,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC1G,MAAM,eAAe,GACpB,OAAO,CAAC,qBAAqB,IAAI,QAAQ,EAAE,IAAI,KAAK,UAAU;oBAC7D,CAAC,CAAC,OAAO,CAAC,qBAAqB;oBAC/B,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,oBAAoB,GACzB,OAAO,CAAC,IAAI,KAAK,cAAc;oBAC9B,CAAC,CAAC,OAAO,CAAC,kBAAkB;yBACzB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;yBAC5C,IAAI,CACJ,CAAC,MAAM,EAAE,EAAE,CACV,MAAM,EAAE,qBAAqB;wBAC7B,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,qBAAqB,CAAC,CACnE;oBACH,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,CAAC,aAAa,IAAI,CAAC,eAAe,IAAI,CAAC,oBAAoB;oBAAE,OAAO,IAAI,CAAC;gBAC7E,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,OAAO,GAAG,aAAa;oBAC5B,CAAC,CAAC,oBAAoB,aAAa,0CAA0C;oBAC7E,CAAC,CAAC,eAAe;wBAChB,CAAC,CAAC,oBAAoB,eAAe,oCAAoC;wBACzE,CAAC,CAAC,uBAAuB,oBAAoB,EAAE,SAAS,wBAAwB,oBAAoB,EAAE,qBAAqB,gDAAgD,CAAC;gBAC9K,WAAW,CAAC,IAAI,CAAC;oBAChB,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;oBACvF,IAAI,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS;oBAC7C,OAAO;iBACP,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YAAA,CACb,CAAC,CAAC;QACJ,CAAC;QACD,OAAO;YACN,QAAQ,EAAE,IAAI,4BAA4B,CAAC,QAAQ,CAAC;YACpD,QAAQ;YACR,WAAW;SACX,CAAC;IAAA,CACF;IAED,IAAI,CACH,OAA6B,EAC7B,KAAgC,EAChC,OAAO,GAA4B,EAAE,EAC5B;QACT,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACjD,MAAM,IAAI,yBAAyB,CAClC,2EAA2E,CAC3E,CAAC;QACH,CAAC;QACD,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACzD,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,yBAAyB,CAClC,0BAA0B,OAAO,CAAC,SAAS,uBAAuB,KAAK,SAAS,CAChF,CAAC;YACH,CAAC;YACD,mBAAmB,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QAAA,CACxF,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAAA,CAChB;IAEO,SAAS,CAChB,KAAgC,EAChC,WAA6C,EACpB;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACJ,OAAO,GAAG,WAAW,CAAC,SAAS,CAAC;iBAC9B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;iBAC1C,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC1E,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAgC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC;gBACJ,MAAM,OAAO,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;gBACrG,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;oBACzC,MAAM,IAAI,yBAAyB,CAClC,oCAAoC,OAAO,CAAC,SAAS,QAAQ,KAAK,SAAS,CAC3E,CAAC;gBACH,CAAC;gBACD,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,WAAW,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;QACF,CAAC;QACD,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IAAA,CAClC;CACD","sourcesContent":["import { existsSync, readdirSync, readFileSync } from \"node:fs\";\nimport { join, resolve } from \"node:path\";\nimport { CONFIG_DIR_NAME } from \"../../config.ts\";\nimport { resourceDir } from \"../agent-paths.ts\";\nimport { withFileLockSync, writeFileAtomicSync } from \"../util/atomic-file.ts\";\nimport type { OrchestrationProfile } from \"./contracts.ts\";\nimport {\n\tOrchestrationProfileError,\n\tOrchestrationProfileRegistry,\n\tparseOrchestrationProfile,\n\tvalidateOrchestrationProfile,\n} from \"./profile-registry.ts\";\n\nexport type OrchestrationProfileScope = \"global\" | \"project\";\n\nexport interface OrchestrationProfileDiagnostic {\n\tscope: OrchestrationProfileScope;\n\tpath: string;\n\tmessage: string;\n}\n\nexport interface OrchestrationProfileLoadResult {\n\tregistry: OrchestrationProfileRegistry;\n\tprofiles: readonly OrchestrationProfile[];\n\tdiagnostics: readonly OrchestrationProfileDiagnostic[];\n}\n\nconst PROFILE_ID_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;\n\nfunction authoredProfile(profile: OrchestrationProfile): Omit<OrchestrationProfile, \"sourcePath\"> {\n\tconst { sourcePath: _sourcePath, ...authored } = profile;\n\treturn authored;\n}\n\nfunction messageFrom(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n\nexport class OrchestrationProfileStore {\n\tprivate readonly agentDir: string;\n\tprivate readonly cwd: string;\n\tprivate readonly projectTrusted: boolean;\n\n\tconstructor(options: { agentDir: string; cwd: string; projectTrusted: boolean }) {\n\t\tthis.agentDir = resolve(options.agentDir);\n\t\tthis.cwd = resolve(options.cwd);\n\t\tthis.projectTrusted = options.projectTrusted;\n\t}\n\n\tdirectory(scope: OrchestrationProfileScope): string {\n\t\treturn scope === \"global\"\n\t\t\t? join(resourceDir(\"profiles\", this.agentDir), \"orchestration\")\n\t\t\t: join(this.cwd, CONFIG_DIR_NAME, \"profiles\", \"orchestration\");\n\t}\n\n\tfilePath(profileId: string, scope: OrchestrationProfileScope): string {\n\t\tif (!PROFILE_ID_PATTERN.test(profileId)) {\n\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\"Orchestration profile IDs must be 1-128 characters using only letters, numbers, '.', '_', or '-'.\",\n\t\t\t);\n\t\t}\n\t\treturn join(this.directory(scope), `${profileId}.json`);\n\t}\n\n\tload(): OrchestrationProfileLoadResult {\n\t\tconst diagnostics: OrchestrationProfileDiagnostic[] = [];\n\t\tconst globalProfiles = this.loadScope(\"global\", diagnostics);\n\t\tconst projectProfiles = this.projectTrusted ? this.loadScope(\"project\", diagnostics) : [];\n\t\tif (!this.projectTrusted && existsSync(this.directory(\"project\"))) {\n\t\t\tdiagnostics.push({\n\t\t\t\tscope: \"project\",\n\t\t\t\tpath: this.directory(\"project\"),\n\t\t\t\tmessage: \"Project orchestration profiles were not loaded because the project is untrusted.\",\n\t\t\t});\n\t\t}\n\t\tconst profilesById = new Map(globalProfiles.map((profile) => [profile.profileId, profile]));\n\t\tfor (const profile of projectProfiles) profilesById.set(profile.profileId, profile);\n\t\tlet profiles = [...profilesById.values()].sort((left, right) => left.profileId.localeCompare(right.profileId));\n\t\tlet removed = true;\n\t\twhile (removed) {\n\t\t\tremoved = false;\n\t\t\tconst available = new Map(profiles.map((profile) => [profile.profileId, profile]));\n\t\t\tprofiles = profiles.filter((profile) => {\n\t\t\t\tconst invalidTarget = profile.dispatchProfileIds.find((profileId) => {\n\t\t\t\t\tconst target = available.get(profileId);\n\t\t\t\t\treturn !target || target.role === \"orchestrator\";\n\t\t\t\t});\n\t\t\t\tconst verifier = profile.verificationProfileId ? available.get(profile.verificationProfileId) : undefined;\n\t\t\t\tconst invalidVerifier =\n\t\t\t\t\tprofile.verificationProfileId && verifier?.role !== \"verifier\"\n\t\t\t\t\t\t? profile.verificationProfileId\n\t\t\t\t\t\t: undefined;\n\t\t\t\tconst unauthorizedVerifier =\n\t\t\t\t\tprofile.role === \"orchestrator\"\n\t\t\t\t\t\t? profile.dispatchProfileIds\n\t\t\t\t\t\t\t\t.map((profileId) => available.get(profileId))\n\t\t\t\t\t\t\t\t.find(\n\t\t\t\t\t\t\t\t\t(target) =>\n\t\t\t\t\t\t\t\t\t\ttarget?.verificationProfileId &&\n\t\t\t\t\t\t\t\t\t\t!profile.dispatchProfileIds.includes(target.verificationProfileId),\n\t\t\t\t\t\t\t\t)\n\t\t\t\t\t\t: undefined;\n\t\t\t\tif (!invalidTarget && !invalidVerifier && !unauthorizedVerifier) return true;\n\t\t\t\tremoved = true;\n\t\t\t\tconst message = invalidTarget\n\t\t\t\t\t? `Dispatch target '${invalidTarget}' is missing or is another orchestrator.`\n\t\t\t\t\t: invalidVerifier\n\t\t\t\t\t\t? `Verifier target '${invalidVerifier}' is missing or is not a verifier.`\n\t\t\t\t\t\t: `Dispatched profile '${unauthorizedVerifier?.profileId}' requires verifier '${unauthorizedVerifier?.verificationProfileId}', which this orchestrator does not authorize.`;\n\t\t\t\tdiagnostics.push({\n\t\t\t\t\tscope: profile.sourcePath?.startsWith(this.directory(\"project\")) ? \"project\" : \"global\",\n\t\t\t\t\tpath: profile.sourcePath ?? profile.profileId,\n\t\t\t\t\tmessage,\n\t\t\t\t});\n\t\t\t\treturn false;\n\t\t\t});\n\t\t}\n\t\treturn {\n\t\t\tregistry: new OrchestrationProfileRegistry(profiles),\n\t\t\tprofiles,\n\t\t\tdiagnostics,\n\t\t};\n\t}\n\n\tsave(\n\t\tprofile: OrchestrationProfile,\n\t\tscope: OrchestrationProfileScope,\n\t\toptions: { overwrite?: boolean } = {},\n\t): string {\n\t\tif (scope === \"project\" && !this.projectTrusted) {\n\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\"Project is not trusted; refusing to write project orchestration profiles.\",\n\t\t\t);\n\t\t}\n\t\tvalidateOrchestrationProfile(profile);\n\t\tconst filePath = this.filePath(profile.profileId, scope);\n\t\twithFileLockSync(filePath, () => {\n\t\t\tif (!options.overwrite && existsSync(filePath)) {\n\t\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\t`Orchestration profile '${profile.profileId}' already exists in ${scope} scope.`,\n\t\t\t\t);\n\t\t\t}\n\t\t\twriteFileAtomicSync(filePath, `${JSON.stringify(authoredProfile(profile), null, 2)}\\n`);\n\t\t});\n\t\treturn filePath;\n\t}\n\n\tprivate loadScope(\n\t\tscope: OrchestrationProfileScope,\n\t\tdiagnostics: OrchestrationProfileDiagnostic[],\n\t): OrchestrationProfile[] {\n\t\tconst directory = this.directory(scope);\n\t\tif (!existsSync(directory)) return [];\n\t\tlet entries: string[];\n\t\ttry {\n\t\t\tentries = readdirSync(directory)\n\t\t\t\t.filter((entry) => entry.endsWith(\".json\"))\n\t\t\t\t.sort((left, right) => left.localeCompare(right));\n\t\t} catch (error) {\n\t\t\tdiagnostics.push({ scope, path: directory, message: messageFrom(error) });\n\t\t\treturn [];\n\t\t}\n\t\tconst profilesById = new Map<string, OrchestrationProfile>();\n\t\tfor (const entry of entries) {\n\t\t\tconst sourcePath = join(directory, entry);\n\t\t\ttry {\n\t\t\t\tconst profile = parseOrchestrationProfile(JSON.parse(readFileSync(sourcePath, \"utf-8\")), sourcePath);\n\t\t\t\tif (profilesById.has(profile.profileId)) {\n\t\t\t\t\tthrow new OrchestrationProfileError(\n\t\t\t\t\t\t`Duplicate orchestration profile '${profile.profileId}' in ${scope} scope.`,\n\t\t\t\t\t);\n\t\t\t\t}\n\t\t\t\tprofilesById.set(profile.profileId, profile);\n\t\t\t} catch (error) {\n\t\t\t\tdiagnostics.push({ scope, path: sourcePath, message: messageFrom(error) });\n\t\t\t}\n\t\t}\n\t\treturn [...profilesById.values()];\n\t}\n}\n"]}

package/dist/core/orchestration/risk-budget.d.ts

@@ -0,0 +1,9 @@
+import type { RiskBudget } from "./contracts.ts";
+export declare const RISK_BUDGET_LIMIT_FIELDS: readonly ["maxTokens", "maxWallClockMs", "maxCostUsd", "maxAttempts", "maxToolCalls"];
+export type RiskBudgetLimitField = (typeof RISK_BUDGET_LIMIT_FIELDS)[number];
+export declare const RISK_BUDGET_FIELDS: readonly ["maxTokens", "maxWallClockMs", "maxCostUsd", "maxAttempts", "maxToolCalls", "requireApprovalAboveCostUsd"];
+export declare function validateRiskBudget(budget: RiskBudget, label: string): void;
+export declare function exceededRiskBudgetFields(requested: RiskBudget, authority: RiskBudget): RiskBudgetLimitField[];
+/** Intersects independent ceilings. Undefined fields do not constrain the result. */
+export declare function intersectRiskBudgets(...budgets: readonly RiskBudget[]): RiskBudget;
+//# sourceMappingURL=risk-budget.d.ts.map

package/dist/core/orchestration/risk-budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-budget.d.ts","sourceRoot":"","sources":["../../../src/core/orchestration/risk-budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,eAAO,MAAM,wBAAwB,uFAM3B,CAAC;AAEX,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7E,eAAO,MAAM,kBAAkB,sHAAwE,CAAC;AASxG,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAS1E;AAED,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,oBAAoB,EAAE,CAM7G;AAED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAAC,GAAG,OAAO,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,CAWlF","sourcesContent":["import type { RiskBudget } from \"./contracts.ts\";\n\nexport const RISK_BUDGET_LIMIT_FIELDS = [\n\t\"maxTokens\",\n\t\"maxWallClockMs\",\n\t\"maxCostUsd\",\n\t\"maxAttempts\",\n\t\"maxToolCalls\",\n] as const;\n\nexport type RiskBudgetLimitField = (typeof RISK_BUDGET_LIMIT_FIELDS)[number];\n\nexport const RISK_BUDGET_FIELDS = [...RISK_BUDGET_LIMIT_FIELDS, \"requireApprovalAboveCostUsd\"] as const;\n\nconst DISCRETE_BUDGET_FIELDS: ReadonlySet<(typeof RISK_BUDGET_FIELDS)[number]> = new Set([\n\t\"maxTokens\",\n\t\"maxWallClockMs\",\n\t\"maxAttempts\",\n\t\"maxToolCalls\",\n]);\n\nexport function validateRiskBudget(budget: RiskBudget, label: string): void {\n\tfor (const field of RISK_BUDGET_FIELDS) {\n\t\tconst value = budget[field];\n\t\tif (value === undefined) continue;\n\t\tif (!Number.isFinite(value) || value < 0) throw new TypeError(`${label}.${field} must be non-negative.`);\n\t\tif (DISCRETE_BUDGET_FIELDS.has(field) && !Number.isSafeInteger(value)) {\n\t\t\tthrow new TypeError(`${label}.${field} must be a non-negative safe integer.`);\n\t\t}\n\t}\n}\n\nexport function exceededRiskBudgetFields(requested: RiskBudget, authority: RiskBudget): RiskBudgetLimitField[] {\n\treturn RISK_BUDGET_LIMIT_FIELDS.filter((field) => {\n\t\tconst request = requested[field];\n\t\tconst ceiling = authority[field];\n\t\treturn request !== undefined && ceiling !== undefined && request > ceiling;\n\t});\n}\n\n/** Intersects independent ceilings. Undefined fields do not constrain the result. */\nexport function intersectRiskBudgets(...budgets: readonly RiskBudget[]): RiskBudget {\n\tconst result: RiskBudget = {};\n\tfor (const field of RISK_BUDGET_FIELDS) {\n\t\tconst values = budgets.map((budget) => budget[field]).filter((value): value is number => value !== undefined);\n\t\tif (values.length > 0) result[field] = Math.min(...values);\n\t}\n\tconst approvalThreshold = result.requireApprovalAboveCostUsd;\n\tif (approvalThreshold !== undefined) {\n\t\tresult.maxCostUsd = Math.min(result.maxCostUsd ?? approvalThreshold, approvalThreshold);\n\t}\n\treturn result;\n}\n"]}

package/dist/core/orchestration/risk-budget.js

@@ -0,0 +1,48 @@
+export const RISK_BUDGET_LIMIT_FIELDS = [
+    "maxTokens",
+    "maxWallClockMs",
+    "maxCostUsd",
+    "maxAttempts",
+    "maxToolCalls",
+];
+export const RISK_BUDGET_FIELDS = [...RISK_BUDGET_LIMIT_FIELDS, "requireApprovalAboveCostUsd"];
+const DISCRETE_BUDGET_FIELDS = new Set([
+    "maxTokens",
+    "maxWallClockMs",
+    "maxAttempts",
+    "maxToolCalls",
+]);
+export function validateRiskBudget(budget, label) {
+    for (const field of RISK_BUDGET_FIELDS) {
+        const value = budget[field];
+        if (value === undefined)
+            continue;
+        if (!Number.isFinite(value) || value < 0)
+            throw new TypeError(`${label}.${field} must be non-negative.`);
+        if (DISCRETE_BUDGET_FIELDS.has(field) && !Number.isSafeInteger(value)) {
+            throw new TypeError(`${label}.${field} must be a non-negative safe integer.`);
+        }
+    }
+}
+export function exceededRiskBudgetFields(requested, authority) {
+    return RISK_BUDGET_LIMIT_FIELDS.filter((field) => {
+        const request = requested[field];
+        const ceiling = authority[field];
+        return request !== undefined && ceiling !== undefined && request > ceiling;
+    });
+}
+/** Intersects independent ceilings. Undefined fields do not constrain the result. */
+export function intersectRiskBudgets(...budgets) {
+    const result = {};
+    for (const field of RISK_BUDGET_FIELDS) {
+        const values = budgets.map((budget) => budget[field]).filter((value) => value !== undefined);
+        if (values.length > 0)
+            result[field] = Math.min(...values);
+    }
+    const approvalThreshold = result.requireApprovalAboveCostUsd;
+    if (approvalThreshold !== undefined) {
+        result.maxCostUsd = Math.min(result.maxCostUsd ?? approvalThreshold, approvalThreshold);
+    }
+    return result;
+}
+//# sourceMappingURL=risk-budget.js.map

package/dist/core/orchestration/risk-budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-budget.js","sourceRoot":"","sources":["../../../src/core/orchestration/risk-budget.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,WAAW;IACX,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,cAAc;CACL,CAAC;AAIX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,wBAAwB,EAAE,6BAA6B,CAAU,CAAC;AAExG,MAAM,sBAAsB,GAAqD,IAAI,GAAG,CAAC;IACxF,WAAW;IACX,gBAAgB;IAChB,aAAa;IACb,cAAc;CACd,CAAC,CAAC;AAEH,MAAM,UAAU,kBAAkB,CAAC,MAAkB,EAAE,KAAa,EAAQ;IAC3E,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,IAAI,KAAK,wBAAwB,CAAC,CAAC;QACzG,IAAI,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,IAAI,KAAK,uCAAuC,CAAC,CAAC;QAC/E,CAAC;IACF,CAAC;AAAA,CACD;AAED,MAAM,UAAU,wBAAwB,CAAC,SAAqB,EAAE,SAAqB,EAA0B;IAC9G,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACjC,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,OAAO,CAAC;IAAA,CAC3E,CAAC,CAAC;AAAA,CACH;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAAC,GAAG,OAA8B,EAAc;IACnF,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QAC9G,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,CAAC,2BAA2B,CAAC;IAC7D,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import type { RiskBudget } from \"./contracts.ts\";\n\nexport const RISK_BUDGET_LIMIT_FIELDS = [\n\t\"maxTokens\",\n\t\"maxWallClockMs\",\n\t\"maxCostUsd\",\n\t\"maxAttempts\",\n\t\"maxToolCalls\",\n] as const;\n\nexport type RiskBudgetLimitField = (typeof RISK_BUDGET_LIMIT_FIELDS)[number];\n\nexport const RISK_BUDGET_FIELDS = [...RISK_BUDGET_LIMIT_FIELDS, \"requireApprovalAboveCostUsd\"] as const;\n\nconst DISCRETE_BUDGET_FIELDS: ReadonlySet<(typeof RISK_BUDGET_FIELDS)[number]> = new Set([\n\t\"maxTokens\",\n\t\"maxWallClockMs\",\n\t\"maxAttempts\",\n\t\"maxToolCalls\",\n]);\n\nexport function validateRiskBudget(budget: RiskBudget, label: string): void {\n\tfor (const field of RISK_BUDGET_FIELDS) {\n\t\tconst value = budget[field];\n\t\tif (value === undefined) continue;\n\t\tif (!Number.isFinite(value) || value < 0) throw new TypeError(`${label}.${field} must be non-negative.`);\n\t\tif (DISCRETE_BUDGET_FIELDS.has(field) && !Number.isSafeInteger(value)) {\n\t\t\tthrow new TypeError(`${label}.${field} must be a non-negative safe integer.`);\n\t\t}\n\t}\n}\n\nexport function exceededRiskBudgetFields(requested: RiskBudget, authority: RiskBudget): RiskBudgetLimitField[] {\n\treturn RISK_BUDGET_LIMIT_FIELDS.filter((field) => {\n\t\tconst request = requested[field];\n\t\tconst ceiling = authority[field];\n\t\treturn request !== undefined && ceiling !== undefined && request > ceiling;\n\t});\n}\n\n/** Intersects independent ceilings. Undefined fields do not constrain the result. */\nexport function intersectRiskBudgets(...budgets: readonly RiskBudget[]): RiskBudget {\n\tconst result: RiskBudget = {};\n\tfor (const field of RISK_BUDGET_FIELDS) {\n\t\tconst values = budgets.map((budget) => budget[field]).filter((value): value is number => value !== undefined);\n\t\tif (values.length > 0) result[field] = Math.min(...values);\n\t}\n\tconst approvalThreshold = result.requireApprovalAboveCostUsd;\n\tif (approvalThreshold !== undefined) {\n\t\tresult.maxCostUsd = Math.min(result.maxCostUsd ?? approvalThreshold, approvalThreshold);\n\t}\n\treturn result;\n}\n"]}

package/dist/core/orchestration/task-runtime.d.ts

@@ -0,0 +1,168 @@
+import { type AcceptanceCriterion, type AgentBindingContract, type AgentResumeContext, type ApprovalOutcome, type ApprovalRequestContract, type ApprovalResolutionContract, type AttemptCheckpoint, type AttemptLease, type AttemptStatus, type EvidenceContract, type ExecutionGrant, type ObjectiveContract, type OrchestrationDispatchRequest, type OrchestrationEvent, type RiskBudget, type TaskContract, type WorkerResultContract } from "./contracts.ts";
+import { type OrchestrationEventStore } from "./event-store.ts";
+export interface ObjectiveRuntimeState {
+    objective: ObjectiveContract;
+    taskIds: readonly string[];
+    evidence: readonly EvidenceContract[];
+}
+export interface TaskRuntimeState {
+    task: TaskContract;
+    attemptIds: readonly string[];
+    verification?: {
+        verifierTaskId: string;
+        verifierAttemptId: string;
+        verdict: "accepted" | "rejected" | "inconclusive";
+        reasonCode: string;
+        completedAt: string;
+    };
+}
+export interface AttemptRuntimeState {
+    attemptId: string;
+    taskId: string;
+    dispatch: OrchestrationDispatchRequest;
+    status: AttemptStatus;
+    reasonCode?: string;
+    grantId?: string;
+    /** Full compiled authority for new attempts; grantId alone is retained only when replaying legacy events. */
+    grant?: ExecutionGrant;
+    agentId?: string;
+    lease?: AttemptLease;
+    checkpointIds: readonly string[];
+    result?: WorkerResultContract;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface NotificationRuntimeState {
+    notificationId: string;
+    objectiveId: string;
+    attemptId?: string;
+    status: "pending" | "delivered";
+    message: string;
+    createdAt: string;
+    deliveredAt?: string;
+}
+export interface ApprovalRuntimeState {
+    request: ApprovalRequestContract;
+    status: "pending" | ApprovalOutcome;
+    resolution?: ApprovalResolutionContract;
+}
+export interface TaskRuntimeProjection {
+    lastOrdinal: number;
+    agents: Readonly<Record<string, AgentBindingContract>>;
+    objectives: Readonly<Record<string, ObjectiveRuntimeState>>;
+    tasks: Readonly<Record<string, TaskRuntimeState>>;
+    attempts: Readonly<Record<string, AttemptRuntimeState>>;
+    checkpoints: Readonly<Record<string, AttemptCheckpoint>>;
+    approvals: Readonly<Record<string, ApprovalRuntimeState>>;
+    notifications: Readonly<Record<string, NotificationRuntimeState>>;
+}
+export interface CreateObjectiveInput {
+    objectiveId?: string;
+    title: string;
+    description: string;
+    constraints?: readonly string[];
+    acceptanceCriteria?: readonly AcceptanceCriterion[];
+    riskBudget?: RiskBudget;
+}
+export interface CreateTaskInput {
+    taskId?: string;
+    objectiveId: string;
+    title: string;
+    description: string;
+    role: TaskContract["role"];
+    dependsOn?: readonly string[];
+    requiredCapabilities?: TaskContract["requiredCapabilities"];
+    acceptanceCriterionIds?: readonly string[];
+    verificationOfTaskId?: string;
+    riskBudget?: RiskBudget;
+}
+export interface DurableTaskRuntimeOptions {
+    store: OrchestrationEventStore;
+    now?: () => number;
+    createId?: () => string;
+}
+export interface RegisterAgentInput {
+    agentId?: string;
+    role: AgentBindingContract["role"];
+    resumeContext: AgentResumeContext;
+}
+export declare class DurableTaskRuntimeError extends Error {
+    constructor(message: string);
+}
+export declare function reduceOrchestrationEvent(projection: TaskRuntimeProjection, event: OrchestrationEvent): TaskRuntimeProjection;
+export declare function projectOrchestrationEvents(events: readonly OrchestrationEvent[]): TaskRuntimeProjection;
+export declare class DurableTaskRuntime {
+    private readonly store;
+    private readonly now;
+    private readonly createId;
+    private state;
+    constructor(options: DurableTaskRuntimeOptions);
+    getSnapshot(): TaskRuntimeProjection;
+    registerAgent(input: RegisterAgentInput): AgentBindingContract;
+    createObjective(input: CreateObjectiveInput): ObjectiveContract;
+    /** Create or synchronize owner-authored objective metadata without disturbing lifecycle or task state. */
+    ensureObjective(input: CreateObjectiveInput & {
+        objectiveId: string;
+    }): ObjectiveContract;
+    recordObjectiveEvidence(objectiveId: string, evidence: EvidenceContract): EvidenceContract;
+    createTask(input: CreateTaskInput): TaskContract;
+    queueAttempt(taskId: string, dispatch: OrchestrationDispatchRequest, grantId?: string): AttemptRuntimeState;
+    bindAttemptGrant(attemptId: string, grant: ExecutionGrant): AttemptRuntimeState;
+    leaseAttempt(attemptId: string, ownerId: string, ttlMs: number, agentId?: string): AttemptLease;
+    startAttempt(attemptId: string, leaseId: string, fencingToken: number): AttemptRuntimeState;
+    checkpointAttempt(args: {
+        attemptId: string;
+        leaseId: string;
+        fencingToken: number;
+        summary: string;
+        artifactIds?: readonly string[];
+        evidenceIds?: readonly string[];
+    }): AttemptCheckpoint;
+    finishAttempt(result: WorkerResultContract): AttemptRuntimeState;
+    finishVerification(args: {
+        taskId: string;
+        verifierTaskId: string;
+        verifierAttemptId: string;
+        verdict: "accepted" | "rejected" | "inconclusive";
+        reasonCode: string;
+    }): TaskRuntimeState;
+    cancelAttempt(attemptId: string, reasonCode: string): AttemptRuntimeState;
+    failTask(taskId: string, reasonCode: string): TaskContract;
+    /**
+     * Recover unbound in-process work after a process restart. A completion has no resumable model
+     * transcript, so its old lease is fenced and the task becomes dispatchable for a fresh attempt.
+     * Agent-bound attempts are intentionally excluded: those must wake the same logical agent.
+     */
+    recoverInterruptedUnboundAttempts(shouldRecover?: (attempt: AttemptRuntimeState) => boolean): string[];
+    expireLeases(at?: number): string[];
+    requestAgentResume(agentId: string): AgentBindingContract;
+    resumeAttempt(attemptId: string, agentId: string, ttlMs: number): AttemptLease;
+    pauseObjective(objectiveId: string): void;
+    resumeObjective(objectiveId: string): void;
+    cancelObjective(objectiveId: string): void;
+    completeObjective(objectiveId: string): void;
+    completeObjectiveFromOwner(objectiveId: string, acceptanceOverride: boolean): void;
+    requestApproval(approval: ApprovalRequestContract): ApprovalRuntimeState;
+    resolveApproval(approvalId: string, outcome: ApprovalOutcome, reasonCode: string): ApprovalRuntimeState;
+    enqueueNotification(args: {
+        notificationId?: string;
+        objectiveId: string;
+        attemptId?: string;
+        message: string;
+    }): NotificationRuntimeState;
+    markNotificationDelivered(notificationId: string): NotificationRuntimeState;
+    private transitionObjective;
+    private requireObjective;
+    private requireDispatchableTask;
+    private requireAttempt;
+    private approvalForAttempt;
+    private pendingApprovalForTask;
+    private requireActiveObjectiveForAttempt;
+    private validateApprovalRequest;
+    private requireLiveLease;
+    private refresh;
+    private commit;
+    private compactCurrentProjection;
+    private nowIso;
+}
+//# sourceMappingURL=task-runtime.d.ts.map