@claudexor/orchestrator 3.0.4 → 3.1.1

package/dist/transientClassify.js

@@ -0,0 +1,109 @@
+/**
+ * Whether a classified category admits a bounded stream retry. Only failures
+ * the adapter DISCLOSED mid-stream as recoverable (a typed transient or a rate
+ * limit) are retried — retrying replays the work with a fresh session. Auth /
+ * capability / config are deterministic refusals. A process crash and an
+ * inactivity-watchdog give-up are NOT auto-retried here (the watchdog exists to
+ * STOP a wedged stream; a crashed child is settled, not replayed): they are
+ * still classified and disclosed, but the run terminates on them.
+ */
+const CATEGORY_RETRYABLE = {
+    timeout: true,
+    rate_limited: true,
+    unknown_harness_error: true,
+    process_crash: false,
+    auth_failed: false,
+    capability_refused: false,
+    config_error: false,
+};
+function observation(category, extra = {}) {
+    return {
+        kind: extra.kind ?? "unknown",
+        category,
+        retryable: CATEGORY_RETRYABLE[category],
+        retryDelayMs: extra.retryDelayMs ?? null,
+        httpStatus: extra.httpStatus ?? null,
+        signal: extra.signal ?? null,
+        adapterCode: extra.adapterCode ?? null,
+    };
+}
+/** A typed `transient` signal: a `timeout` kind is the timeout category; every
+ * other adapter-declared transient is a generic retryable harness error. */
+export function classifyTransientSignal(t) {
+    const category = t.kind === "timeout" ? "timeout" : "unknown_harness_error";
+    return observation(category, { kind: t.kind, retryDelayMs: t.retry_delay_ms ?? null });
+}
+/** A typed `rate_limit` signal is a first-class transient category (not only a
+ * W5.4 rotation signal). */
+export function classifyRateLimit(retryDelayMs) {
+    return observation("rate_limited", { retryDelayMs });
+}
+/** Map the vendor's typed `status.error_category` onto the taxonomy. Only the
+ * deterministic FAILURE classes are surfaced here; rate limits arrive via the
+ * dedicated `rate_limit` signal, and transient/overload retries the vendor
+ * drives itself are not our failures (returns null → not recorded). */
+export function classifyStatusError(ec, retryDelayMs) {
+    let category;
+    switch (ec) {
+        case "authentication_failed":
+            category = "auth_failed";
+            break;
+        case "oauth_org_not_allowed":
+        case "model_not_found":
+            category = "capability_refused";
+            break;
+        case "billing_error":
+        case "invalid_request":
+        case "max_output_tokens":
+            category = "config_error";
+            break;
+        default:
+            // rate_limit/overloaded/server_error/unknown: not surfaced from status.
+            category = null;
+    }
+    if (!category)
+        return null;
+    return observation(category, { retryDelayMs, adapterCode: ec });
+}
+/**
+ * Classify a process crash from the run loop's TYPED `completed` payload
+ * (never prose): a spawn failure is a config/environment error (retrying
+ * replays the same missing binary/bad config); a non-aborted signal kill or
+ * non-zero exit is a settled crash. An aborted completion (our watchdog/cancel)
+ * is never a crash. Returns null when the completion carries no crash evidence.
+ */
+export function classifyCompletedCrash(payload) {
+    if (!payload || payload["aborted"])
+        return null;
+    const spawnFailed = payload["spawn_failed"] === true;
+    const signal = typeof payload["exit_signal"] === "string" ? payload["exit_signal"] : null;
+    const exitCode = typeof payload["exit_code"] === "number" ? payload["exit_code"] : null;
+    if (spawnFailed) {
+        return observation("config_error", { signal, adapterCode: "spawn_failed" });
+    }
+    if (signal !== null || (exitCode !== null && exitCode !== 0)) {
+        return observation("process_crash", {
+            signal,
+            adapterCode: exitCode !== null ? `exit_${exitCode}` : null,
+        });
+    }
+    return null;
+}
+/**
+ * Classify an adapter/stream throw. The inactivity watchdog surfaces a typed
+ * `HarnessInactivityTimeoutError` (timeout); every other throw is a process
+ * crash. A THROWN failure is a give-up, not a mid-stream recoverable transient:
+ * the watchdog already aborted a wedged stream and a crashed child is settled,
+ * so it is classified and disclosed but never auto-retried here (preserving the
+ * pre-#31 terminate-on-throw behavior). Never parses prose — `errorName` is the
+ * constructor name.
+ */
+export function classifyAdapterThrow(opts) {
+    const isTimeout = opts.errorName === "HarnessInactivityTimeoutError";
+    const base = observation(isTimeout ? "timeout" : "process_crash", {
+        kind: isTimeout ? "timeout" : "unknown",
+        signal: opts.signal ?? null,
+    });
+    return { ...base, retryable: false };
+}
+//# sourceMappingURL=transientClassify.js.map

package/dist/transientClassify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transientClassify.js","sourceRoot":"","sources":["../src/transientClassify.ts"],"names":[],"mappings":"AA4BA;;;;;;;;GAQG;AACH,MAAM,kBAAkB,GAA4C;IAClE,OAAO,EAAE,IAAI;IACb,YAAY,EAAE,IAAI;IAClB,qBAAqB,EAAE,IAAI;IAC3B,aAAa,EAAE,KAAK;IACpB,WAAW,EAAE,KAAK;IAClB,kBAAkB,EAAE,KAAK;IACzB,YAAY,EAAE,KAAK;CACpB,CAAC;AAEF,SAAS,WAAW,CAClB,QAAgC,EAChC,QAA8E,EAAE;IAEhF,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,SAAS;QAC7B,QAAQ;QACR,SAAS,EAAE,kBAAkB,CAAC,QAAQ,CAAC;QACvC,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;QACpC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;KACvC,CAAC;AACJ,CAAC;AAED;4EAC4E;AAC5E,MAAM,UAAU,uBAAuB,CACrC,CAAyC;IAEzC,MAAM,QAAQ,GACZ,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC;IAC7D,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;4BAC4B;AAC5B,MAAM,UAAU,iBAAiB,CAAC,YAA2B;IAC3D,OAAO,WAAW,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;AACvD,CAAC;AAED;;;uEAGuE;AACvE,MAAM,UAAU,mBAAmB,CACjC,EAAsE,EACtE,YAA2B;IAE3B,IAAI,QAAuC,CAAC;IAC5C,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,uBAAuB;YAC1B,QAAQ,GAAG,aAAa,CAAC;YACzB,MAAM;QACR,KAAK,uBAAuB,CAAC;QAC7B,KAAK,iBAAiB;YACpB,QAAQ,GAAG,oBAAoB,CAAC;YAChC,MAAM;QACR,KAAK,eAAe,CAAC;QACrB,KAAK,iBAAiB,CAAC;QACvB,KAAK,mBAAmB;YACtB,QAAQ,GAAG,cAAc,CAAC;YAC1B,MAAM;QACR;YACE,wEAAwE;YACxE,QAAQ,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA4C;IAE5C,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,OAAO,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1F,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC,eAAe,EAAE;YAClC,MAAM;YACN,WAAW,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;SAC3D,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAGpC;IACC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,+BAA+B,CAAC;IACrE,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,EAAE;QAChE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACvC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;KAC5B,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC"}

package/dist/write-isolation.d.ts

@@ -0,0 +1,11 @@
+import type { ModeKind } from "@claudexor/schema";
+/** Refuse restriction policies that a live-tree write cannot contain. */
+export declare function assertWriteIsolation(input: {
+    mode: ModeKind;
+    protectedPaths: readonly string[];
+    denyPaths?: readonly string[];
+    inPlace?: boolean;
+    repoRoot: string;
+    executionRoot: string;
+}): void;
+//# sourceMappingURL=write-isolation.d.ts.map

package/dist/write-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-isolation.d.ts","sourceRoot":"","sources":["../src/write-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGlD,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,IAAI,EAAE,QAAQ,CAAC;IACf,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,GAAG,IAAI,CAcP"}

package/dist/write-isolation.js

@@ -0,0 +1,13 @@
+import { canonicalProjectRoot } from "@claudexor/util";
+/** Refuse restriction policies that a live-tree write cannot contain. */
+export function assertWriteIsolation(input) {
+    const liveProject = input.inPlace === true &&
+        canonicalProjectRoot(input.executionRoot) === canonicalProjectRoot(input.repoRoot);
+    if (input.mode === "agent" && input.protectedPaths.length > 0 && liveProject) {
+        throw new Error("project protected_paths require an isolated execution root before an agent run can mutate files; use an isolated thread or drop --in-place");
+    }
+    if ((input.denyPaths?.length ?? 0) > 0 && input.inPlace === true) {
+        throw new Error("denyPaths requires an isolated/envelope run: the post-diff policy gate blocks a violating patch before delivery, which an in-place run cannot guarantee; drop --deny-path or run isolated");
+    }
+}
+//# sourceMappingURL=write-isolation.js.map

package/dist/write-isolation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"write-isolation.js","sourceRoot":"","sources":["../src/write-isolation.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,yEAAyE;AACzE,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,MAAM,WAAW,GACf,KAAK,CAAC,OAAO,KAAK,IAAI;QACtB,oBAAoB,CAAC,KAAK,CAAC,aAAa,CAAC,KAAK,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,KAAK,CACb,4IAA4I,CAC7I,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,2LAA2L,CAC5L,CAAC;IACJ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claudexor/orchestrator",
-  "version": "3.0.4",
+  "version": "3.1.1",
   "license": "MIT",
   "description": "Hub that composes all subsystems and implements the three canonical intents (ask, plan, agent) with their strategy flags (ask deep-scan, plan solo/council, agent best-of-N race, attempt caps, until-clean, create, delegate).",
   "type": "module",
@@ -17,24 +17,24 @@
   ],
   "dependencies": {
     "ajv": "^8.20.0",
-    "@claudexor/arbitration": "3.0.4",
-    "@claudexor/budget": "3.0.4",
-    "@claudexor/config": "3.0.4",
-    "@claudexor/context": "3.0.4",
-    "@claudexor/artifact-store": "3.0.4",
-    "@claudexor/core": "3.0.4",
-    "@claudexor/delivery": "3.0.4",
-    "@claudexor/event-log": "3.0.4",
-    "@claudexor/gateway": "3.0.4",
-    "@claudexor/review": "3.0.4",
-    "@claudexor/policy": "3.0.4",
-    "@claudexor/schema": "3.0.4",
-    "@claudexor/synthesis": "3.0.4",
-    "@claudexor/workspace": "3.0.4",
-    "@claudexor/util": "3.0.4"
+    "@claudexor/artifact-store": "3.1.1",
+    "@claudexor/arbitration": "3.1.1",
+    "@claudexor/budget": "3.1.1",
+    "@claudexor/config": "3.1.1",
+    "@claudexor/context": "3.1.1",
+    "@claudexor/core": "3.1.1",
+    "@claudexor/delivery": "3.1.1",
+    "@claudexor/event-log": "3.1.1",
+    "@claudexor/gateway": "3.1.1",
+    "@claudexor/policy": "3.1.1",
+    "@claudexor/review": "3.1.1",
+    "@claudexor/schema": "3.1.1",
+    "@claudexor/synthesis": "3.1.1",
+    "@claudexor/util": "3.1.1",
+    "@claudexor/workspace": "3.1.1"
   },
   "devDependencies": {
-    "@claudexor/harness-fake": "3.0.4"
+    "@claudexor/harness-fake": "3.1.1"
   },
   "repository": {
     "type": "git",