@coool/opencode-adaptive 0.0.0-stage → 1.0.0

package/dist/state/settings/parse.js

@@ -0,0 +1,261 @@
+/**
+ * Bounded shape validation and migration-on-read (ADP-036). Every parser is
+ * total: it accepts `unknown` and either returns a typed value or `undefined`
+ * — the read path always falls back to a default rather than throwing, so a
+ * corrupted record can never take the plugin (or the host) down (ADP-031).
+ *
+ * Plain objects are never indexed with untrusted strings beyond own-property
+ * checks (`Object.hasOwn`) — prototype-chain keys like "toString" must not be
+ * mistaken for data (project-wide audit rule).
+ */
+import { OPERATING_MODES } from "../../core/scheduler/types.js";
+import { normalizeTierList } from "../../core/tier-policy/tier-list.js";
+import { TIERS } from "../../core/tier-policy/types.js";
+import { MAX_AGENT_TIERS, MAX_TIER_RESOURCES, SETTINGS_VERSION } from "./types.js";
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/**
+ * Quoted, bounded rendering of an untrusted patch value inside an error
+ * message (errors travel to surfaces over RPC; JSON.stringify is only ever
+ * called on strings here, so a cyclic object cannot make applyPatch throw).
+ */
+function describePatchValue(value) {
+    if (typeof value === "string") {
+        const quoted = JSON.stringify(value);
+        return quoted.length > 64 ? `${quoted.slice(0, 64)}…` : quoted;
+    }
+    if (value === null)
+        return "null";
+    if (typeof value === "object")
+        return "object";
+    if (typeof value === "number" || typeof value === "boolean")
+        return String(value);
+    return typeof value;
+}
+export function parseMode(raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    return OPERATING_MODES.find((mode) => mode === raw);
+}
+/**
+ * Legacy persisted value: v1 settings written before the `control → active`
+ * rename store `mode: "control"`. Migration-on-read maps it; patches stay
+ * strict (wire input must use the current vocabulary).
+ */
+function parseLegacyMode(raw) {
+    return raw === "control" ? "active" : parseMode(raw);
+}
+export function parseTierLists(raw) {
+    if (!isRecord(raw))
+        return undefined;
+    const tiers = {};
+    for (const tier of TIERS) {
+        tiers[tier] = normalizeTierListValue(raw[tier]);
+    }
+    return tiers;
+}
+/** Shared per-tier normalization (drop invalid, dedupe, cap) for both paths. */
+function normalizeTierListValue(list) {
+    return Array.isArray(list)
+        ? normalizeTierList(list.map(parseModelRef).filter((ref) => ref !== undefined)).slice(0, MAX_TIER_RESOURCES)
+        : [];
+}
+export function parseModelRef(raw) {
+    if (!isRecord(raw))
+        return undefined;
+    const providerID = raw["providerID"];
+    const id = raw["id"];
+    const variant = raw["variant"];
+    if (typeof providerID !== "string" || providerID === "")
+        return undefined;
+    if (typeof id !== "string" || id === "")
+        return undefined;
+    return {
+        providerID,
+        id,
+        ...(typeof variant === "string" && variant !== "" ? { variant } : {}),
+    };
+}
+export function parsePin(raw) {
+    if (raw === null)
+        return null;
+    return parseModelRef(raw);
+}
+export function parseAgentTiers(raw) {
+    if (!isRecord(raw))
+        return undefined;
+    const entries = [];
+    for (const [agent, tier] of Object.entries(raw)) {
+        if (agent === "")
+            continue;
+        const parsed = parseModelessTier(tier);
+        if (parsed === undefined)
+            continue;
+        entries.push([agent, parsed]);
+        if (entries.length === MAX_AGENT_TIERS)
+            break;
+    }
+    // `Object.fromEntries` creates own data properties, so even a "__proto__"
+    // key from JSON input cannot pollute the prototype here.
+    return Object.fromEntries(entries);
+}
+function parseModelessTier(raw) {
+    if (typeof raw !== "string")
+        return undefined;
+    return TIERS.find((tier) => tier === raw);
+}
+/**
+ * Patch-path tier-list validation. Unlike the read path (which fills missing
+ * or unusable tiers with `[]`), a patch that names `tiers` REPLACES the whole
+ * map — silently filling an omitted key with `[]` would wipe that tier's
+ * configured resources, so every key must be present and array-typed. List
+ * contents still go through the shared normalization (drop invalid, dedupe,
+ * cap), which is repair of user-typed entries rather than data loss.
+ */
+function parseTierListsPatch(raw) {
+    if (!isRecord(raw))
+        return { ok: false, error: "invalid tiers" };
+    const missing = TIERS.filter((tier) => raw[tier] === undefined);
+    if (missing.length > 0) {
+        const named = missing.map((tier) => JSON.stringify(tier)).join(", ");
+        return { ok: false, error: `invalid tiers: missing ${named}` };
+    }
+    const tiers = {};
+    for (const tier of TIERS) {
+        const list = raw[tier];
+        if (!Array.isArray(list)) {
+            return { ok: false, error: `invalid tiers: ${JSON.stringify(tier)} must be an array` };
+        }
+        tiers[tier] = normalizeTierListValue(list);
+    }
+    return { ok: true, value: tiers };
+}
+/**
+ * Patch-path agent-tier validation. Unlike the read path (which drops invalid
+ * entries as migration-on-read repair), a patch REPLACES the whole map —
+ * silently dropping entries would let a single typo wipe the persisted hints,
+ * so any invalid entry (and an over-cap patch) is rejected with an error that
+ * names the offending field and value.
+ */
+function parseAgentTiersPatch(raw) {
+    if (!isRecord(raw))
+        return { ok: false, error: "invalid agentTiers" };
+    const entries = [];
+    for (const [agent, tier] of Object.entries(raw)) {
+        if (entries.length === MAX_AGENT_TIERS) {
+            return {
+                ok: false,
+                error: `invalid agentTiers: more than ${String(MAX_AGENT_TIERS)} entries`,
+            };
+        }
+        if (agent === "")
+            return { ok: false, error: "invalid agentTiers: empty agent name" };
+        const parsed = parseModelessTier(tier);
+        if (parsed === undefined) {
+            return {
+                ok: false,
+                error: `invalid agentTiers entry ${describePatchValue(agent)}: ${describePatchValue(tier)}`,
+            };
+        }
+        entries.push([agent, parsed]);
+    }
+    // `Object.fromEntries` creates own data properties, so even a "__proto__"
+    // key from JSON input cannot pollute the prototype here.
+    return { ok: true, value: Object.fromEntries(entries) };
+}
+/** Settings with nothing configured: OBSERVE, empty tiers, no pin (ADP-029/032). */
+export function defaultSettings() {
+    return {
+        version: SETTINGS_VERSION,
+        mode: "observe",
+        tiers: { quick: [], standard: [], advanced: [] },
+        pin: null,
+        agentTiers: {},
+        inviteDismissed: false,
+    };
+}
+/**
+ * Migration-on-read. `undefined`/absent record → defaults (first install);
+ * versionless (v0 draft) and v1 records are validated field-wise with
+ * defaults for unusable fields; a record written by a NEWER version is
+ * returned as defaults rather than guessed at (and is only re-persisted once
+ * the user changes something, which stamps the current version).
+ */
+export function migrateSettings(raw) {
+    if (!isRecord(raw))
+        return defaultSettings();
+    const version = raw["version"];
+    if (version !== SETTINGS_VERSION && version !== 0 && version !== undefined) {
+        return defaultSettings();
+    }
+    return fieldsFrom(raw);
+}
+function fieldsFrom(raw) {
+    const mode = parseLegacyMode(raw["mode"]) ?? "observe";
+    const tiers = parseTierLists(raw["tiers"]) ?? defaultSettings().tiers;
+    const pin = parsePin(raw["pin"]) ?? null;
+    const agentTiers = parseAgentTiers(raw["agentTiers"]) ?? {};
+    const inviteDismissed = raw["inviteDismissed"] === true;
+    return { version: SETTINGS_VERSION, mode, tiers, pin, agentTiers, inviteDismissed };
+}
+/**
+ * Validate a patch against current settings. The patch is WIRE input (unknown
+ * by contract — surfaces send untrusted JSON over RPC; the SettingsPatch type
+ * documents the expected shape, the field parsers enforce it). Invalid fields
+ * collect error strings (at most one per field, five fields); a valid patch
+ * produces a NEW settings object (inputs are never mutated).
+ */
+export function applyPatch(current, patch) {
+    if (!isRecord(patch))
+        return { ok: false, errors: ["invalid patch"] };
+    const request = patch;
+    const errors = [];
+    let mode = current.mode;
+    let tiers = current.tiers;
+    let pin = current.pin;
+    let agentTiers = current.agentTiers;
+    let inviteDismissed = current.inviteDismissed;
+    if (request.mode !== undefined) {
+        const parsed = parseMode(request.mode);
+        if (parsed === undefined)
+            errors.push("invalid mode");
+        else
+            mode = parsed;
+    }
+    if (request.tiers !== undefined) {
+        const parsed = parseTierListsPatch(request.tiers);
+        if (parsed.ok)
+            tiers = parsed.value;
+        else
+            errors.push(parsed.error);
+    }
+    // `pin === null` is a meaningful clear and must not read as absence.
+    if (request.pin !== undefined) {
+        const parsed = parsePin(request.pin);
+        if (parsed === undefined)
+            errors.push("invalid pin");
+        else
+            pin = parsed;
+    }
+    if (request.agentTiers !== undefined) {
+        const parsed = parseAgentTiersPatch(request.agentTiers);
+        if (parsed.ok)
+            agentTiers = parsed.value;
+        else
+            errors.push(parsed.error);
+    }
+    if (request.inviteDismissed !== undefined) {
+        if (typeof request.inviteDismissed !== "boolean")
+            errors.push("invalid inviteDismissed");
+        else
+            inviteDismissed = request.inviteDismissed;
+    }
+    if (errors.length > 0)
+        return { ok: false, errors };
+    return {
+        ok: true,
+        settings: { version: SETTINGS_VERSION, mode, tiers, pin, agentTiers, inviteDismissed },
+    };
+}
+//# sourceMappingURL=parse.js.map

package/dist/state/settings/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../../src/state/settings/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAA;AAE/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAA;AACvE,OAAO,EAAE,KAAK,EAAE,MAAM,iCAAiC,CAAA;AAGvD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGlF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAKD;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QACpC,OAAO,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAA;IAChE,CAAC;IACD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAA;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAA;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACjF,OAAO,OAAO,KAAK,CAAA;AACrB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,GAAY;IACnC,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAY;IAEZ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,KAAK,GAAG,EAA2C,CAAA;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,gFAAgF;AAChF,SAAS,sBAAsB,CAAC,IAAa;IAC3C,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACxB,CAAC,CAAC,iBAAiB,CACf,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAmB,EAAE,CAAC,GAAG,KAAK,SAAS,CAAC,CAC5E,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC;QAChC,CAAC,CAAC,EAAE,CAAA;AACR,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,CAAA;IACpC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;IACpB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAA;IAC9B,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACzE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACzD,OAAO;QACL,UAAU;QACV,EAAE;QACF,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtE,CAAA;AACH,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC7B,OAAO,aAAa,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,EAAE;YAAE,SAAQ;QAC1B,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,SAAQ;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;QAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe;YAAE,MAAK;IAC/C,CAAC;IACD,0EAA0E;IAC1E,yDAAyD;IACzD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAA;AACpC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAA;AAC3C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,mBAAmB,CAC1B,GAAY;IAEZ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,CAAA;IAChE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAA;IAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,KAAK,EAAE,EAAE,CAAA;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,EAA2C,CAAA;IACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,CAAA;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAA;QACxF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAA;IACrE,MAAM,OAAO,GAAyB,EAAE,CAAA;IACxC,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,OAAO,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,iCAAiC,MAAM,CAAC,eAAe,CAAC,UAAU;aAC1E,CAAA;QACH,CAAC;QACD,IAAI,KAAK,KAAK,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAA;QACrF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,4BAA4B,kBAAkB,CAAC,KAAK,CAAC,KAAK,kBAAkB,CAAC,IAAI,CAAC,EAAE;aAC5F,CAAA;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/B,CAAC;IACD,0EAA0E;IAC1E,yDAAyD;IACzD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,CAAA;AACzD,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;QAChD,GAAG,EAAE,IAAI;QACT,UAAU,EAAE,EAAE;QACd,eAAe,EAAE,KAAK;KACvB,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,eAAe,EAAE,CAAA;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAA;IAC9B,IAAI,OAAO,KAAK,gBAAgB,IAAI,OAAO,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3E,OAAO,eAAe,EAAE,CAAA;IAC1B,CAAC;IACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,UAAU,CAAC,GAA4B;IAC9C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,SAAS,CAAA;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,KAAK,CAAA;IACrE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAA;IACxC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE,CAAA;IAC3D,MAAM,eAAe,GAAG,GAAG,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAA;IACvD,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AACrF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,OAAmB,EACnB,KAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,EAAE,CAAA;IACrE,MAAM,OAAO,GAAG,KAMf,CAAA;IACD,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAA;IACvB,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAA;IACzB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,CAAA;IACrB,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IACnC,IAAI,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;IAE7C,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;;YAChD,IAAI,GAAG,MAAM,CAAA;IACpB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACjD,IAAI,MAAM,CAAC,EAAE;YAAE,KAAK,GAAG,MAAM,CAAC,KAAK,CAAA;;YAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,qEAAqE;IACrE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QACpC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;;YAC/C,GAAG,GAAG,MAAM,CAAA;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACvD,IAAI,MAAM,CAAC,EAAE;YAAE,UAAU,GAAG,MAAM,CAAC,KAAK,CAAA;;YACnC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QAC1C,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;;YACnF,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;IAChD,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;IACnD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,eAAe,EAAE;KACvF,CAAA;AACH,CAAC"}

package/dist/state/settings/store.d.ts

@@ -0,0 +1,22 @@
+import type { PatchResult, SettingsPatch, SettingsStorage, SettingsV1 } from "./types.js";
+export declare class SettingsStore {
+    #private;
+    private readonly storage;
+    constructor(storage: SettingsStorage);
+    /** Current snapshot (defaults until the first successful load). */
+    get(): SettingsV1;
+    /**
+     * Read + migrate the persisted record. A storage read failure degrades to
+     * defaults instead of breaking setup; the record is not rewritten here, so
+     * a later successful patch simply re-stamps the current version.
+     */
+    load(): Promise<SettingsV1>;
+    /**
+     * Validate, persist, then adopt. Invalid patches change nothing. Updates
+     * serialize through a promise chain so two concurrent callers cannot both
+     * patch the same base snapshot and lose one write (the chain swallows
+     * rejections — a failed update must not poison the next one).
+     */
+    update(patch: SettingsPatch): Promise<PatchResult>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/state/settings/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/state/settings/store.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGzF,qBAAa,aAAa;;IAKZ,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,eAAe;IAErD,mEAAmE;IACnE,GAAG,IAAI,UAAU;IAIjB;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,UAAU,CAAC;IAWjC;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;CAWnD"}

package/dist/state/settings/store.js

@@ -0,0 +1,57 @@
+/**
+ * Settings store (ADP-036): the server-side single source of truth. Loads
+ * once at setup (migration-on-read), serves synchronous snapshots to the
+ * scheduler, and persists validated patches. Reads fail open to defaults
+ * (ADP-031); write failures propagate to the caller so surfaces can report
+ * them — the in-memory snapshot is only advanced after a successful write.
+ */
+import { applyPatch, migrateSettings } from "./parse.js";
+import { defaultSettings } from "./parse.js";
+export class SettingsStore {
+    storage;
+    #current = defaultSettings();
+    /** Tail of the update chain; keeps awaiting updates serialized. */
+    #queue = Promise.resolve();
+    constructor(storage) {
+        this.storage = storage;
+    }
+    /** Current snapshot (defaults until the first successful load). */
+    get() {
+        return this.#current;
+    }
+    /**
+     * Read + migrate the persisted record. A storage read failure degrades to
+     * defaults instead of breaking setup; the record is not rewritten here, so
+     * a later successful patch simply re-stamps the current version.
+     */
+    async load() {
+        let raw;
+        try {
+            raw = await this.storage.read();
+        }
+        catch {
+            raw = undefined;
+        }
+        this.#current = migrateSettings(raw);
+        return this.#current;
+    }
+    /**
+     * Validate, persist, then adopt. Invalid patches change nothing. Updates
+     * serialize through a promise chain so two concurrent callers cannot both
+     * patch the same base snapshot and lose one write (the chain swallows
+     * rejections — a failed update must not poison the next one).
+     */
+    update(patch) {
+        const run = this.#queue.then(async () => {
+            const result = applyPatch(this.#current, patch);
+            if (!result.ok)
+                return result;
+            await this.storage.write(result.settings);
+            this.#current = result.settings;
+            return result;
+        });
+        this.#queue = run.catch(() => undefined);
+        return run;
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/state/settings/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/state/settings/store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAExD,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAE5C,MAAM,OAAO,aAAa;IAKK;IAJ7B,QAAQ,GAAe,eAAe,EAAE,CAAA;IACxC,mEAAmE;IACnE,MAAM,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAE5C,YAA6B,OAAwB;QAAxB,YAAO,GAAP,OAAO,CAAiB;IAAG,CAAC;IAEzD,mEAAmE;IACnE,GAAG;QACD,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,GAAY,CAAA;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,GAAG,SAAS,CAAA;QACjB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAA;IACtB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAoB;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YACtC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;YAC/C,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,MAAM,CAAA;YAC7B,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;YACzC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;YAC/B,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACxC,OAAO,GAAG,CAAA;IACZ,CAAC;CACF"}

package/dist/state/settings/types.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Durable settings (ADP-036): versioned, migrated on read, persisted through
+ * `ctx.storage` under a single key. The server plugin owns the store; TUI and
+ * GUI surfaces only read snapshots and send patches (ADP-034/036).
+ */
+import type { OperatingMode } from "../../core/scheduler/types.js";
+import type { TierName } from "../../core/tier-policy/types.js";
+import type { ModelRef } from "../../core/work-unit/types.js";
+/** Storage key for the settings record (see architecture "Persistence ownership"). */
+export declare const SETTINGS_KEY = "coool.adaptive/settings";
+/** Current settings schema version. */
+export declare const SETTINGS_VERSION = 1;
+/**
+ * Product bounds, not user knobs: they keep a hostile or buggy write from
+ * growing state without limit. (Patch error lists need no cap: at most one
+ * error per field, and the patch has five fields.)
+ */
+export declare const MAX_TIER_RESOURCES = 32;
+export declare const MAX_AGENT_TIERS = 64;
+export interface SettingsV1 {
+    readonly version: typeof SETTINGS_VERSION;
+    /** OFF does nothing; OBSERVE is the safe default after install (ADP-029/032). */
+    readonly mode: OperatingMode;
+    /** Ordered per-tier resource lists; order is user policy and never reordered (ADP-005). */
+    readonly tiers: Readonly<Record<TierName, readonly ModelRef[]>>;
+    /**
+     * Global explicit user pin. `null` = no pin. A pin names a concrete model
+     * and outranks every other routing input (ADP-002).
+     */
+    readonly pin: ModelRef | null;
+    /** User-configured agent → tier hints (role level of the ladder, ADP-002). */
+    readonly agentTiers: Readonly<Record<string, TierName>>;
+    /** First-install invitation dismissed (ADP-032: shown once, never nagged). */
+    readonly inviteDismissed: boolean;
+}
+/**
+ * Partial update as sent by surfaces over RPC. Field absence means "leave
+ * unchanged"; `pin: null` explicitly clears the pin.
+ */
+export interface SettingsPatch {
+    readonly mode?: OperatingMode | undefined;
+    readonly tiers?: Readonly<Record<TierName, readonly ModelRef[]>> | undefined;
+    readonly pin?: ModelRef | null | undefined;
+    readonly agentTiers?: Readonly<Record<string, TierName>> | undefined;
+    readonly inviteDismissed?: boolean | undefined;
+}
+export type PatchResult = {
+    readonly ok: true;
+    readonly settings: SettingsV1;
+} | {
+    readonly ok: false;
+    readonly errors: readonly string[];
+};
+/**
+ * Narrow storage seam so the store stays decoupled from `@opencode/plugin`
+ * (only `adapters/opencode` may touch the host API). The adapter binds the
+ * settings key and translates `ctx.storage`.
+ */
+export interface SettingsStorage {
+    read(): Promise<unknown>;
+    write(settings: SettingsV1): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/state/settings/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/state/settings/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAA;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAA;AAE7D,sFAAsF;AACtF,eAAO,MAAM,YAAY,4BAA4B,CAAA;AAErD,uCAAuC;AACvC,eAAO,MAAM,gBAAgB,IAAI,CAAA;AAEjC;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,KAAK,CAAA;AACpC,eAAO,MAAM,eAAe,KAAK,CAAA;AAEjC,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,gBAAgB,CAAA;IACzC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;IAC5B,2FAA2F;IAC3F,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC,CAAA;IAC/D;;;OAGG;IACH,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAA;IAC7B,8EAA8E;IAC9E,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;IACvD,8EAA8E;IAC9E,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,SAAS,CAAA;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,QAAQ,EAAE,CAAC,CAAC,GAAG,SAAS,CAAA;IAC5E,QAAQ,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,GAAG,SAAS,CAAA;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAA;IACpE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAA;CAC/C;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,GACpD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC,CAAA;AAEL;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;IACxB,KAAK,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3C"}

package/dist/state/settings/types.js

@@ -0,0 +1,12 @@
+/** Storage key for the settings record (see architecture "Persistence ownership"). */
+export const SETTINGS_KEY = "coool.adaptive/settings";
+/** Current settings schema version. */
+export const SETTINGS_VERSION = 1;
+/**
+ * Product bounds, not user knobs: they keep a hostile or buggy write from
+ * growing state without limit. (Patch error lists need no cap: at most one
+ * error per field, and the patch has five fields.)
+ */
+export const MAX_TIER_RESOURCES = 32;
+export const MAX_AGENT_TIERS = 64;
+//# sourceMappingURL=types.js.map

package/dist/state/settings/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/state/settings/types.ts"],"names":[],"mappings":"AASA,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG,yBAAyB,CAAA;AAErD,uCAAuC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAA;AAEjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAA;AACpC,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAA"}

package/dist/supervisor/index.d.ts

@@ -0,0 +1,5 @@
+export { LOG_ERROR_LENGTH, logFailOpen } from "./log.js";
+export { Supervisor } from "./supervisor.js";
+export { CODEX_PROVIDER_ID } from "./types.js";
+export type { RetryHookInput, SupervisorOptions, SupervisorSessionSource } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/supervisor/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/supervisor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA"}

package/dist/supervisor/index.js

@@ -0,0 +1,4 @@
+export { LOG_ERROR_LENGTH, logFailOpen } from "./log.js";
+export { Supervisor } from "./supervisor.js";
+export { CODEX_PROVIDER_ID } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/supervisor/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/supervisor/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA"}

package/dist/supervisor/log.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Fail-open logging (ADP-031). The supervisor never throws from its public
+ * entry points; unexpected failures are logged with a bounded scope line and
+ * swallowed. Logging is the degradation path, not a channel for secrets —
+ * only the error's string form, bounded, is emitted.
+ */
+/** Bound for the logged error text (bounded diagnostics, ADP-030 spirit). */
+export declare const LOG_ERROR_LENGTH = 200;
+/** Log one swallowed internal failure under the plugin's namespace. */
+export declare function logFailOpen(scope: string, error: unknown): void;
+//# sourceMappingURL=log.d.ts.map

package/dist/supervisor/log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.d.ts","sourceRoot":"","sources":["../../src/supervisor/log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,gBAAgB,MAAM,CAAA;AAEnC,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAG/D"}

package/dist/supervisor/log.js

@@ -0,0 +1,14 @@
+/**
+ * Fail-open logging (ADP-031). The supervisor never throws from its public
+ * entry points; unexpected failures are logged with a bounded scope line and
+ * swallowed. Logging is the degradation path, not a channel for secrets —
+ * only the error's string form, bounded, is emitted.
+ */
+/** Bound for the logged error text (bounded diagnostics, ADP-030 spirit). */
+export const LOG_ERROR_LENGTH = 200;
+/** Log one swallowed internal failure under the plugin's namespace. */
+export function logFailOpen(scope, error) {
+    const detail = String(error).slice(0, LOG_ERROR_LENGTH);
+    console.error(`[coool.adaptive] ${scope}: ${detail}`);
+}
+//# sourceMappingURL=log.js.map

package/dist/supervisor/log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log.js","sourceRoot":"","sources":["../../src/supervisor/log.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,GAAG,CAAA;AAEnC,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,KAAc;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAA;IACvD,OAAO,CAAC,KAAK,CAAC,oBAAoB,KAAK,KAAK,MAAM,EAAE,CAAC,CAAA;AACvD,CAAC"}

package/dist/supervisor/supervisor.d.ts

@@ -0,0 +1,69 @@
+import type { TierName } from "../core/tier-policy/types.js";
+import type { OperatingMode } from "../core/scheduler/types.js";
+import type { SettingsV1 } from "../state/settings/index.js";
+import type { PatchResult, SettingsPatch } from "../state/settings/types.js";
+import type { Receipt } from "../state/receipts/types.js";
+import type { StatusSnapshot } from "../rpc/status.js";
+import type { EventReport } from "../adapters/opencode/index.js";
+import type { RetryHookInput, SupervisorOptions } from "./types.js";
+export declare class Supervisor {
+    #private;
+    /** Last agent observed per session (role-hint routing evidence, ADP-002). */
+    static readonly MAX_AGENT_HINTS = 1024;
+    /**
+     * Per-session tier requests (agent-declared via the adaptive_tier tool):
+     * the request is STICKY — it steers the session's next and following
+     * admissions until cleared or the session dies — because an agent works
+     * across many units in one task. Insertion order gives the eviction.
+     */
+    static readonly MAX_TIER_REQUESTS = 1024;
+    constructor(options: SupervisorOptions);
+    /** Handle one host report (event pump or session hook). */
+    handleReport(report: EventReport): Promise<void>;
+    /**
+     * Handle one `retry` hook invocation. On a veto this mutates
+     * `input.decision` to `{ retry: false }`; otherwise the decision is left
+     * untouched and OpenCode's native retry policy stands.
+     */
+    handleRetry(input: RetryHookInput): Promise<void>;
+    /**
+     * Record an escalation-tool request (ADP-015 agent self-report) against the
+     * session's current work unit. Returns false when no unit is active — the
+     * request is then discarded (escalation is a per-unit signal).
+     */
+    noteEscalationRequest(sessionID: string, reason: string, evidence: string): boolean;
+    /**
+     * Record an agent-declared tier request for the session (the adaptive_tier
+     * tool). STICKY: it steers the session's next and following admissions
+     * until cleared — an agent works across many units in one task. Returns
+     * false on an unknown tier (the tool re-validates before calling).
+     */
+    noteTierRequest(sessionID: string, tier: string): boolean;
+    /** The session's tier request, or `null` when it follows the routing ladder. */
+    getTierRequest(sessionID: string): Promise<TierName | null>;
+    /** Clear one session's tier request (`null` is the only valid input). */
+    setTierRequest(sessionID: string, tier: TierName | null): Promise<void>;
+    /** Current settings (awaits the constructor load). */
+    settings(): Promise<SettingsV1>;
+    /** Validate and persist a settings patch; returns per-field errors. */
+    updateSettings(patch: SettingsPatch): Promise<PatchResult>;
+    /** The session's mode override, or `null` when it follows the global mode. */
+    getSessionMode(sessionID: string): Promise<OperatingMode | null>;
+    /**
+     * Persist one session's mode override (`null` clears it). Throws on write
+     * failure — the RPC handler degrades that to an error patch result
+     * (fail-open, ADP-031), while the routing path never calls this.
+     */
+    setSessionMode(sessionID: string, mode: OperatingMode | null): Promise<void>;
+    /**
+     * Bounded status snapshot for the status view (ADP-033). Health is read
+     * from the persisted record set (not the in-memory registry): the serving
+     * instance's registry can be empty when the host's plugin reconciliation
+     * placed the event-pump hooks on another instance, while the persisted
+     * mirror is shared by every instance.
+     */
+    status(): Promise<StatusSnapshot>;
+    /** Newest-first bounded receipt view (ADP-030). */
+    receipts(): Promise<Receipt[]>;
+}
+//# sourceMappingURL=supervisor.d.ts.map

package/dist/supervisor/supervisor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervisor.d.ts","sourceRoot":"","sources":["../../src/supervisor/supervisor.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAmB,QAAQ,EAAE,MAAM,8BAA8B,CAAA;AAQ7E,OAAO,KAAK,EAGV,aAAa,EAEd,MAAM,4BAA4B,CAAA;AAwBnC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAA;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAG5E,OAAO,KAAK,EAAE,OAAO,EAAgC,MAAM,4BAA4B,CAAA;AAEvF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AActD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAGhE,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAiCnE,qBAAa,UAAU;;IAiBrB,6EAA6E;IAI7E,MAAM,CAAC,QAAQ,CAAC,eAAe,QAAO;IAEtC;;;;;OAKG;IACH,MAAM,CAAC,QAAQ,CAAC,iBAAiB,QAAO;gBAiD5B,OAAO,EAAE,iBAAiB;IA0GtC,2DAA2D;IACrD,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAetD;;;;OAIG;IACG,WAAW,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD;;;;OAIG;IACH,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAYnF;;;;;OAKG;IACH,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAiBzD,gFAAgF;IAC1E,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;IAKjE,yEAAyE;IACnE,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7E,sDAAsD;IAChD,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC;IAIrC,uEAAuE;IACjE,cAAc,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IAKhE,8EAA8E;IACxE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAKtE;;;;OAIG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAKlF;;;;;;OAMG;IACG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IA8BvC,mDAAmD;IAC7C,QAAQ,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CA86BrC"}