@claudexor/orchestrator 3.12.2 → 3.12.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -6,6 +6,11 @@ interface TaskContractBuildInput {
|
|
|
6
6
|
instructions?: string;
|
|
7
7
|
baseRef?: string;
|
|
8
8
|
delegate?: boolean;
|
|
9
|
+
/** Wire `execution.delegated`: an EXTERNAL orchestrator owns this workspace
|
|
10
|
+
* and carries its own authority. Unrelated to the `delegate` belt flag above
|
|
11
|
+
* and to `delegatedFromRunId` (belt-child provenance). Already carried on
|
|
12
|
+
* RunInput (orchestrator.ts) — declared here so the trust gate can read it. */
|
|
13
|
+
delegated?: boolean;
|
|
9
14
|
parentRunId?: string | null;
|
|
10
15
|
delegatedFromRunId?: string | null;
|
|
11
16
|
tests?: TestCommandInvocation[];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"task-contract-builder.d.ts","sourceRoot":"","sources":["../src/task-contract-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,QAAQ,EACR,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,qBAAqB,EACtB,MAAM,mBAAmB,CAAC;AAW3B,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,EAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,oBAAoB,GAC7B,kBAAkB,
|
|
1
|
+
{"version":3,"file":"task-contract-builder.d.ts","sourceRoot":"","sources":["../src/task-contract-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,UAAU,EACV,qBAAqB,EACrB,QAAQ,EACR,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,WAAW,EACX,qBAAqB,EACtB,MAAM,mBAAmB,CAAC;AAW3B,UAAU,sBAAsB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;oFAGgF;IAChF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,CAAC,EAAE,qBAAqB,EAAE,CAAC;IAChC,sBAAsB,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjD,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,GAAG,CAAC,EAAE,qBAAqB,CAAC;IAC5B,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACrC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;CAC7C;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,EAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,oBAAoB,GAC7B,kBAAkB,CAmJpB"}
|
|
@@ -13,12 +13,32 @@ export function buildTaskContract(input, taskId, mode, defaults) {
|
|
|
13
13
|
const requestedAccess = access.requested;
|
|
14
14
|
// Effective access is COMPUTED by the engine, never echoed from a client.
|
|
15
15
|
const effectiveAccess = access.effective;
|
|
16
|
-
//
|
|
17
|
-
//
|
|
18
|
-
//
|
|
19
|
-
//
|
|
20
|
-
//
|
|
21
|
-
|
|
16
|
+
// The full-access allow is a CONSENT CEREMONY for the operator sitting at a
|
|
17
|
+
// surface (the app's one-time grant, `claudexor trust --allow-full-access`):
|
|
18
|
+
// a loud error, never a silent downgrade. Versioned repo config still cannot
|
|
19
|
+
// self-grant it (ProjectConfig structurally excludes the sensitive trust
|
|
20
|
+
// settings). Through the narrow control/CLI surface the ACCESS DEFAULT can
|
|
21
|
+
// only be readonly|workspace_write and the full-access grant is a separate
|
|
22
|
+
// explicit field; a hand-edited user-level trust file may itself carry
|
|
23
|
+
// `access_default: full`, which still faces this gate on a non-delegated run.
|
|
24
|
+
//
|
|
25
|
+
// A run marked `execution.delegated` skips it: an external orchestrator owns
|
|
26
|
+
// the workspace and carries its own authority. What that buys differs by
|
|
27
|
+
// caller, so state both honestly. A control-API client holds the daemon token
|
|
28
|
+
// and can already POST /v2/trust to grant itself the allow, so the second
|
|
29
|
+
// ceremony bought nothing there. An MCP tool caller is the HOST'S MODEL: it
|
|
30
|
+
// holds no token and has no trust-writing tool, so for it this marker is a
|
|
31
|
+
// real widening — one call with `delegated: true` and `access: "full"` runs
|
|
32
|
+
// unsandboxed native full on any `repoPath` with no grant, and the only
|
|
33
|
+
// remaining control is the host's own MCP tool-approval policy. Kept anyway
|
|
34
|
+
// per INV-122: prefer the broad capability plus an accurate residual over a
|
|
35
|
+
// weaker second boundary. The residual is disclosed in SECURITY.md.
|
|
36
|
+
//
|
|
37
|
+
// The gate applies to the EFFECTIVE profile either way, so a run clamped to
|
|
38
|
+
// readonly never runs unsandboxed and needs no allow.
|
|
39
|
+
if (effectiveAccess === "full" &&
|
|
40
|
+
input.delegated !== true &&
|
|
41
|
+
!resolvedCfg.trust.allow_full_access) {
|
|
22
42
|
// Typed refusal: the `code` rides the daemon job record onto the thread
|
|
23
43
|
// turn (TurnEnqueueError.code), so surfaces key remedies on the CODE —
|
|
24
44
|
// never on substring-matching this human message.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"task-contract-builder.js","sourceRoot":"","sources":["../src/task-contract-builder.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,kBAAkB,IAAI,kBAAkB,EACxC,gBAAgB,EAChB,cAAc,EACd,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;
|
|
1
|
+
{"version":3,"file":"task-contract-builder.js","sourceRoot":"","sources":["../src/task-contract-builder.ts"],"names":[],"mappings":"AAaA,OAAO,EACL,kBAAkB,IAAI,kBAAkB,EACxC,gBAAgB,EAChB,cAAc,EACd,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAsC3D;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA6B,EAC7B,MAAc,EACd,IAAc,EACd,QAA8B;IAE9B,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC;IAChC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACzE,MAAM,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC;IACzC,0EAA0E;IAC1E,MAAM,eAAe,GAAkB,MAAM,CAAC,SAAS,CAAC;IACxD,4EAA4E;IAC5E,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,uEAAuE;IACvE,8EAA8E;IAC9E,EAAE;IACF,6EAA6E;IAC7E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,EAAE;IACF,4EAA4E;IAC5E,sDAAsD;IACtD,IACE,eAAe,KAAK,MAAM;QAC1B,KAAK,CAAC,SAAS,KAAK,IAAI;QACxB,CAAC,WAAW,CAAC,KAAK,CAAC,iBAAiB,EACpC,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,kDAAkD;QAClD,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,KAAK,CACP,oGAAoG;YAClG,IAAI,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,yFAAyF,CAC/H;QACD,uEAAuE;QACvE,kEAAkE;QAClE,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAC9C,CAAC;IACJ,CAAC;IACD,MAAM,qBAAqB,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,qBAAqB,IAAI,MAAM,CAAC;IACjF,2EAA2E;IAC3E,uEAAuE;IACvE,sDAAsD;IACtD,MAAM,aAAa,GAAG,oBAAoB,CAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe;QACf,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,mBAAmB;QAClD,gBAAgB,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE;QACnC,eAAe,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE;KAC3C,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC;IACxC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC,CAAC;IACrE,MAAM,kBAAkB,GAAG,aAAa,CAAC,kBAAkB,CAAC;IAC5D,MAAM,sBAAsB,GAAG;QAC7B,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CACvF,CAAC,MAAM,EAAE;KACX,CAAC;IACF,MAAM,eAAe,GAAG,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC;IAClE,OAAO,kBAAkB,CAAC,KAAK,CAAC;QAC9B,cAAc,EAAE,cAAc;QAC9B,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,MAAM,EAAE;QACpB,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE;QAC3F,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;QACpB,oBAAoB,EAAE,KAAK,CAAC,QAAQ,KAAK,IAAI;QAC7C,gBAAgB,EAAE,eAAe;QACjC,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,eAAe;YACtC,CAAC,CAAC;gBACE,WAAW,EAAE;oBACX,uCAAuC,EAAE,KAAK;oBAC9C,sCAAsC,EAAE,KAAK;iBAC9C;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE;YACX,aAAa,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;YACxC,qBAAqB,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI;SACxD;QACD,WAAW,EAAE,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QACjD,uEAAuE;QACvE,0EAA0E;QAC1E,yEAAyE;QACzE,gDAAgD;QAChD,YAAY,EAAE,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC;QAC9F,uEAAuE;QACvE,iDAAiD;QACjD,aAAa,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACzC,eAAe,EAAE,KAAK,CAAC,cAAc,IAAI,MAAM;QAC/C,qBAAqB,EAAE,KAAK,CAAC,mBAAmB,IAAI,IAAI;QACxD,SAAS,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;QACjC,WAAW,EAAE;YACX,eAAe,EAAE,cAAc;YAC/B,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YAC/C,oBAAoB,EAAE,kBAAkB;YACxC,wBAAwB,EAAE,sBAAsB;SACjD;QACD,KAAK,EAAE,EAAE,QAAQ,EAAE;QACnB,MAAM,EAAE;YACN,iBAAiB,EAAE,eAAe;YAClC,iBAAiB,EAAE,eAAe;SACnC;QACD,gBAAgB,EAAE;YAChB,MAAM,EAAE,qBAAqB;YAC7B,qEAAqE;YACrE,qEAAqE;YACrE,8DAA8D;YAC9D,YAAY,EAAE,KAAK;YACnB,wEAAwE;YACxE,2EAA2E;YAC3E,cAAc,EAAE,qBAAqB;SACtC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,8BAA8B;QAC9B,sBAAsB,EAAE;YACtB,GAAG,EAAE,qBAAqB;YAC1B,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE;SACT;QACD,MAAM,EAAE;YACN,YAAY,EACV,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,IAAI,GAAG,EAAE,MAAM,EAAE,YAAY,IAAI,MAAM;YAClF,WAAW,EACT,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,mBAAmB;SAC3F;QACD,wEAAwE;QACxE,wEAAwE;QACxE,kDAAkD;QAClD,cAAc,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAClC,yEAAyE;QACzE,2EAA2E;QAC3E,wEAAwE;QACxE,oDAAoD;QACpD,eAAe,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QACpC,qBAAqB,EAAE,KAAK,CAAC,oBAAoB;KAClD,CAAC,CAAC;AACL,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@claudexor/orchestrator",
|
|
3
|
-
"version": "3.12.
|
|
3
|
+
"version": "3.12.4",
|
|
4
4
|
"license": "MIT",
|
|
5
5
|
"description": "Hub that composes all subsystems and implements the three canonical intents (ask, plan, agent) with their strategy flags (ask deep-scan, plan solo/council, agent best-of-N race, attempt caps, until-clean, create, delegate).",
|
|
6
6
|
"type": "module",
|
|
@@ -17,24 +17,24 @@
|
|
|
17
17
|
],
|
|
18
18
|
"dependencies": {
|
|
19
19
|
"ajv": "^8.20.0",
|
|
20
|
-
"@claudexor/arbitration": "3.12.
|
|
21
|
-
"@claudexor/
|
|
22
|
-
"@claudexor/
|
|
23
|
-
"@claudexor/
|
|
24
|
-
"@claudexor/
|
|
25
|
-
"@claudexor/core": "3.12.
|
|
26
|
-
"@claudexor/delivery": "3.12.
|
|
27
|
-
"@claudexor/event-log": "3.12.
|
|
28
|
-
"@claudexor/gateway": "3.12.
|
|
29
|
-
"@claudexor/
|
|
30
|
-
"@claudexor/
|
|
31
|
-
"@claudexor/schema": "3.12.
|
|
32
|
-
"@claudexor/
|
|
33
|
-
"@claudexor/
|
|
34
|
-
"@claudexor/
|
|
20
|
+
"@claudexor/arbitration": "3.12.4",
|
|
21
|
+
"@claudexor/artifact-store": "3.12.4",
|
|
22
|
+
"@claudexor/budget": "3.12.4",
|
|
23
|
+
"@claudexor/context": "3.12.4",
|
|
24
|
+
"@claudexor/config": "3.12.4",
|
|
25
|
+
"@claudexor/core": "3.12.4",
|
|
26
|
+
"@claudexor/delivery": "3.12.4",
|
|
27
|
+
"@claudexor/event-log": "3.12.4",
|
|
28
|
+
"@claudexor/gateway": "3.12.4",
|
|
29
|
+
"@claudexor/policy": "3.12.4",
|
|
30
|
+
"@claudexor/review": "3.12.4",
|
|
31
|
+
"@claudexor/schema": "3.12.4",
|
|
32
|
+
"@claudexor/synthesis": "3.12.4",
|
|
33
|
+
"@claudexor/util": "3.12.4",
|
|
34
|
+
"@claudexor/workspace": "3.12.4"
|
|
35
35
|
},
|
|
36
36
|
"devDependencies": {
|
|
37
|
-
"@claudexor/harness-fake": "3.12.
|
|
37
|
+
"@claudexor/harness-fake": "3.12.4"
|
|
38
38
|
},
|
|
39
39
|
"repository": {
|
|
40
40
|
"type": "git",
|