@dzhechkov/harness-core 0.8.21 → 0.8.23

package/src/claude-hooks-assets.ts

@@ -35,7 +35,10 @@
 import { harnessCoreDistDir } from './harness-core-location.js';
 
 /** Bump when the emitted BODY changes. Unlike Codex, Claude has no trust gate — this is provenance. */
-export const DZ_CLAUDE_HOOK_VERSION = 1;
+// Поднято до 2 (2026-09-08, фича guard-narrow-unarmed-refusal): урезанный режим меняет наблюдаемое
+// поведение хука у ПОТРЕБИТЕЛЯ. Без подъёма версии установленный хук остаётся старым, блокирующим
+// любую команду в дереве без решателя, и починка до него не доезжает — находка QE major #1.
+export const DZ_CLAUDE_HOOK_VERSION = 2;
 
 /**
  * The OWNERSHIP marker. A file carrying this line is one dz wrote and may replace; a file without it
@@ -99,8 +102,8 @@ export interface ClaudeHookAssetOptions {
  * The emitted `.claude/hooks/destructive-guard.cjs`.
  *
  * Thin by contract: read stdin, hand the payload to `decideDestructiveHook`, print, exit. Runtime
- * failures of ours exit 0 with one loud line, but a deterministically missing decision module exits
- * 2: setup cannot leave an armed-looking hook that allows every command until somebody builds it.
+ * failures of ours exit 0 with one loud line. Without the decision module, only literal recursive
+ * deletion is refused; every other request passes with an explicit partial-protection warning.
  */
 export function generateClaudeDestructiveHook(opts: ClaudeHookAssetOptions = {}): string {
   const installed = opts.installedDistDir === undefined ? harnessCoreDistDir() : opts.installedDistDir;
@@ -117,7 +120,7 @@ export function generateClaudeDestructiveHook(opts: ClaudeHookAssetOptions = {})
 // alone and only '--force' replaces it, after a timestamped backup.
 //
 // PreToolUse guard on Bash: a deletion by a LITERAL path into a protected store never runs.
-// All of the policy — the three outcomes, the refusal text, the limits the guard must name — lives
+// The full policy — the three outcomes, the refusal text, the limits the guard must name — lives
 // in @dzhechkov/harness-core (destructive-guard.js classifies, destructive-guard-hook.js decides).
 // The same module decides for the Codex host, so both runtimes refuse the same commands in the
 // same words.
@@ -187,22 +190,32 @@ function failOpen(what) {
   process.exit(0);
 }
 
-/** One line, exit 2. No decider means the guard installation is incomplete, so nothing may run. */
-function failUnarmed(reason) {
-  const line =
-    'DZ-DESTRUCTIVE: страж опасных команд не собран и не может проверить запрос — команда НЕ ВЫПОЛНЕНА. ' +
-      'Причина: ' + String(reason).replace(/\\s*\\n\\s*/g, ' ') +
+/** Textual literal check only: no quoting, expansion or nested-shell parsing. */
+function failUnarmed(reason, payload) {
+  const command = payload && ['Bash', 'bash', 'shell', 'local_shell'].includes(payload.tool_name) &&
+    payload.tool_input && typeof payload.tool_input.command === 'string' ? payload.tool_input.command : '';
+  const literalRecursive = /(?:^|[\\s;&|()])rm[ \\t]+(?:(?:-[a-zA-Z]+|--[a-z-]+)[ \\t]+)*(?:-[a-zA-Z]*[rR][a-zA-Z]*|--recursive)(?=[ \\t])/;
+  // Инструмент не из семейства Bash страж не судит НИ В ОДНОМ режиме, поэтому и предупреждать тут
+  // не о чем: в полном режиме такой вызов пропускается молча. Предупреждение обязано означать
+  // «я не смог рассудить КОМАНДУ ОБОЛОЧКИ», иначе оно станет фоном и перестанет читаться
+  // (риск R5 шага 3.5) — находка QE minor #3.
+  if (command === '') process.exit(0);
+  const refuse = literalRecursive.test(command);
+  const line = (refuse
+    ? 'DZ-DESTRUCTIVE: урезанный режим — буквальное рекурсивное удаление; команда НЕ ВЫПОЛНЕНА. '
+    : 'DZ-DESTRUCTIVE-WARN: урезанный режим, защита частичная — проверено только буквальное рекурсивное удаление, без разбора оболочки; команда ПРОПУЩЕНА. ') +
+    'Для полной защиты нужен решатель. Причина: ' + String(reason).replace(/\\s*\\n\\s*/g, ' ') +
       ' Починка: npm install -g @dzhechkov/harness-cli@latest, затем dz setup --target claude-code.\\n';
   // Hook stderr is a pipe under the host and under spawnSync. An immediate process.exit can drop a
   // buffered write entirely, so write this installation verdict synchronously before exiting.
   writeSync(2, line);
-  process.exit(2);
+  process.exit(refuse ? 2 : 0);
 }
 
 function onDecider(loaded, payload) {
   const decide = loaded.decide;
   if (decide === null) {
-    failUnarmed(loaded.reason);
+    failUnarmed(loaded.reason, payload);
     return;
   }
 

package/src/discrimination-gate.ts

@@ -608,7 +608,8 @@ export function classifyExecutionEvidence(
   const base = {
     exitCode,
     runner: toEvidenceRunner(red.runner),
-    failureKind: red.kind,
+    // This gate has no infrastructure policy; preserve its existing unrecognised-run behavior.
+    failureKind: red.kind === 'runner-infrastructure' ? 'unrecognised' : red.kind,
     testsExecuted: countFailingTests(raw),
     targetSeen,
   } as const;

package/src/feature-adr-routing.ts

@@ -83,6 +83,8 @@ export interface RoutingEnv {
   readonly budget?: unknown;
   /** The productive family for design + code; absent defaults to Claude. */
   readonly primary?: 'claude' | 'codex';
+  /** Run tier affects planning only; absent uses the S/M flagship tier (ADR-001). */
+  readonly complexityTier?: 'S' | 'M' | 'L' | 'XL';
 }
 
 // ── USAGE-ADAPTIVE ROUTING (pre-emptive codex switch at >= usageThreshold) ────
@@ -186,9 +188,9 @@ export function decideUsageAction(
 // ── Data tables (data-only extensibility — gpt-5.6-ready) ───────────────────
 
 /** Known codex ids. Adding a new id (e.g. `'gpt-5.7'`) is a DATA-ONLY change. */
-export const KNOWN_CODEX: Record<string, number> = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1 };
+export const KNOWN_CODEX: Record<string, number> = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1, 'gpt-6-astra': 1 };
 
-export type CodexTier = 'flagship' | 'workhorse' | 'high-volume';
+export type CodexTier = 'premium' | 'flagship' | 'workhorse' | 'high-volume';
 
 /**
  * Capability tiers are routing data, separate from {@link KNOWN_CODEX}'s spellability role.
@@ -197,6 +199,9 @@ export type CodexTier = 'flagship' | 'workhorse' | 'high-volume';
  * timescale of days (probed 2026-08-18: 3 ids HTTP 400; probed 2026-08-29: all 3 exit 0).
  */
 export const CODEX_TIERS: Record<CodexTier, string> = {
+  // Astra is the premium tier for consequential decisions; Sol remains the flagship.
+  // The owner's live probe (2026-09-09) confirmed gpt-6-astra, not gpt-5.6-astra.
+  premium: 'gpt-6-astra',
   flagship: 'gpt-5.6-sol',
   workhorse: 'gpt-5.6-terra',
   'high-volume': 'gpt-5.6-luna',
@@ -320,17 +325,22 @@ export function budgetTable(
     codexHalf = { ...ROUTING_TABLES.claude.codex[mode.codex], qe: env.codexAvailable === false ? 'opus' : qeSpec };
   } else {
     const normal = mode.codex === 'normal';
-    const design = codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'medium', env);
+    const largePlan = env.complexityTier === 'L' || env.complexityTier === 'XL';
+    const work = codexCell(normal ? 'flagship' : 'workhorse', 'high', env);
+    const evidence = codexCell(normal ? 'workhorse' : 'high-volume', 'medium', env);
     codexHalf = {
-      requirements: design,
-      research: design,
-      adr: design,
-      ideation: design,
-      ddd: design,
-      architecture: design,
-      plan: codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'low', env),
-      code: codexCell(normal ? 'flagship' : 'workhorse', 'medium', env),
+      router: evidence,
+      requirements: codexCell(normal ? 'flagship' : 'workhorse', 'medium', env),
+      research: evidence,
+      adr: codexCell(normal ? 'premium' : 'flagship', 'high', env),
+      ideation: work,
+      ddd: work,
+      architecture: codexCell(normal ? 'premium' : 'flagship', 'high', env),
+      plan: largePlan ? codexCell(normal ? 'premium' : 'flagship', 'high', env) : work,
+      code: work,
+      fleet: work,
     };
+
   }
   return { ...claudeHalf, ...codexHalf };
 }

package/src/index.ts

@@ -1151,3 +1151,5 @@ export {
 } from './claude-hooks-assets.js';
 export type { ClaudeHookAssetOptions } from './claude-hooks-assets.js';
 export { harnessCoreDistDir, harnessCoreModuleDir } from './harness-core-location.js';
+
+export { maskMarkdown } from './markdown-masker.js';

package/src/loop-blobs.generated.ts

@@ -61,11 +61,11 @@ export const BLOBS: Record<string, LoopBlob> = {
   "model-resolver": {
     name: "model-resolver",
     version: "1.0.0",
-    contentHash: "357a258796e553b2fbe94dfab26cf487a9fd189b4927836f261185215392dfaa",
+    contentHash: "1a62a5ebe31aaa5fa25ed82cd6e4cde15482c6cb099faa262af518bdd4f8b609",
     sourcePath: "packages/@dzhechkov/harness-core/src/feature-adr-routing.ts",
     requires: [],
     exports: ["specToOpts","resolveStageModel","KNOWN_CODEX","mergeOpts","stageLabel","modelLabel"],
-    code: "const STAGE_EFFORT = { override: {\n        router: 'medium',\n        requirements: 'medium',\n        research: 'medium',\n        adr: 'high',\n        ideation: 'medium',\n        ddd: 'high',\n        architecture: 'high',\n        plan: 'high',\n        code: 'medium',\n        qe: 'high',\n        fleet: 'medium',\n    } };\nfunction topCodexId(env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS.flagship;\n}\nconst KNOWN_CODEX = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1 };\nconst CODEX_TIERS = {\n    flagship: 'gpt-5.6-sol',\n    workhorse: 'gpt-5.6-terra',\n    'high-volume': 'gpt-5.6-luna',\n};\nfunction codexIdForTier(tier, env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS[tier];\n}\nconst BUDGET_PRESETS = {\n    normal: { claude: 'normal', codex: 'normal' },\n    eco: { claude: 'eco', codex: 'eco' },\n    hybrid: { claude: 'eco', codex: 'normal' },\n};\nfunction resolveBudgetMode(raw) {\n    if (raw === undefined)\n        return BUDGET_PRESETS.normal;\n    if (typeof raw === 'string') {\n        const preset = BUDGET_PRESETS[raw];\n        if (!preset)\n            throw new RangeError('budget: unknown preset \"' + raw + '\" — valid: normal|eco|hybrid');\n        return preset;\n    }\n    if (raw && typeof raw === 'object') {\n        const value = raw;\n        for (const key of Object.keys(value)) {\n            if (key !== 'claude' && key !== 'codex') {\n                throw new RangeError('budget: unknown family key \"' + key + '\" — valid: claude|codex');\n            }\n        }\n        for (const key of ['claude', 'codex']) {\n            const level = value[key];\n            if (level !== undefined && level !== 'normal' && level !== 'eco') {\n                throw new RangeError('budget.' + key + ': unknown level \"' + level + '\" — valid: normal|eco');\n            }\n        }\n        return {\n            claude: value.claude || 'normal',\n            codex: value.codex || 'normal',\n        };\n    }\n    throw new RangeError('budget: expected a preset name or {claude,codex} object, got ' + typeof raw);\n}\nconst CLAUDE_NAMES = { fable: 1, opus: 1, sonnet: 1, haiku: 1 };\nconst VALID_REASONING = { none: 1, minimal: 1, low: 1, medium: 1, high: 1, xhigh: 1, max: 1 };\nconst DEFAULT_MODELS = {\n    router: 'fable',\n    requirements: 'sonnet',\n    research: 'sonnet',\n    adr: 'opus',\n    ideation: 'sonnet',\n    ddd: 'opus',\n    architecture: 'opus',\n    plan: 'sonnet',\n    code: null,\n    qe: null,\n    fleet: 'sonnet',\n};\nconst ROUTING_TABLES = {\n    claude: {\n        claude: {\n            normal: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'fable', ideation: 'sonnet', ddd: 'fable', architecture: 'fable', plan: 'opus', code: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'opus', ideation: 'sonnet', ddd: 'opus', architecture: 'opus', plan: 'sonnet', code: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n    codex: {\n        claude: {\n            normal: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n};\nfunction codexCell(tier, effort, env) {\n    return 'codex:' + codexIdForTier(tier, env) + ':' + effort;\n}\nfunction budgetTable(primary, mode, env) {\n    const claudeHalf = ROUTING_TABLES[primary].claude[mode.claude];\n    let codexHalf;\n    if (primary === 'claude') {\n        const qeSpec = mode.codex === 'normal'\n            ? codexCell('flagship', 'high', env)\n            : codexCell('workhorse', 'medium', env);\n        codexHalf = { ...ROUTING_TABLES.claude.codex[mode.codex], qe: env.codexAvailable === false ? 'opus' : qeSpec };\n    }\n    else {\n        const normal = mode.codex === 'normal';\n        const design = codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'medium', env);\n        codexHalf = {\n            requirements: design,\n            research: design,\n            adr: design,\n            ideation: design,\n            ddd: design,\n            architecture: design,\n            plan: codexCell(normal ? 'flagship' : 'workhorse', normal ? 'high' : 'low', env),\n            code: codexCell(normal ? 'flagship' : 'workhorse', 'medium', env),\n        };\n    }\n    return { ...claudeHalf, ...codexHalf };\n}\nfunction specToOpts(spec, env) {\n    const log = env.log || function () { };\n    if (!spec)\n        return {};\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        let id = parts[1] || env.CODEX_MODEL;\n        if (id !== 'auto' && !KNOWN_CODEX[id]) {\n            log('models: unknown codex id ' + id + ' — using ' + env.CODEX_MODEL);\n            id = env.CODEX_MODEL;\n        }\n        let reasoning = parts[2] || 'high';\n        if (!VALID_REASONING[reasoning]) {\n            throw new RangeError('models: invalid reasoning \"' + reasoning + '\" — valid: ' + Object.keys(VALID_REASONING).join('|'));\n        }\n        return { agentType: 'codex:codex-rescue', codexModel: id, _reasoning: reasoning };\n    }\n    if (CLAUDE_NAMES[head])\n        return { model: head };\n    log('models: unknown spec ' + spec + ' — session-inherited');\n    return {};\n}\nfunction resolveCoderSpec(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return 'codex:' + env.CODEX_MODEL + ':high';\n    return 'opus';\n}\nfunction coderIsCodex(env) {\n    const codeSpec = env.MODELS.code;\n    if (codeSpec !== undefined && codeSpec !== null)\n        return String(codeSpec).split(':')[0] === 'codex';\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return true;\n    return env.primary === 'codex';\n}\nfunction resolveQeSpecForCoder(coderCodex, env) {\n    if (coderCodex)\n        return 'sonnet';\n    const CODEX_AVAILABLE = env.codexAvailable !== false;\n    if (!CODEX_AVAILABLE)\n        return 'opus';\n    const budget = resolveBudgetMode(env.budget);\n    return budget.codex === 'eco'\n        ? 'codex:' + codexIdForTier('workhorse', env) + ':medium'\n        : 'codex:' + codexIdForTier('flagship', env) + ':high';\n}\nfunction resolveQeSpec(env) {\n    return resolveQeSpecForCoder(coderIsCodex(env), env);\n}\nfunction routingRequested(env) {\n    return (Object.keys(env.MODELS).length > 0 ||\n        env.primary !== undefined ||\n        env.budget !== undefined ||\n        env.PLANNER === 'codex' ||\n        env.CODER === 'codex' ||\n        env.CODER === 'codex-fallback' ||\n        env.QE_REVIEWER === 'codex' ||\n        env.QE_REVIEWER === 'codex-fallback');\n}\nfunction resolveStageModel(stage, env) {\n    return resolveStageDecision(stage, env).opts;\n}\nfunction specFamily(spec) {\n    return (spec && String(spec).split(':')[0] === 'codex') ? 'codex' : 'claude';\n}\nfunction qeReasonForFamilies(coderCodex, qeSpec) {\n    if (specFamily(qeSpec) === (coderCodex ? 'codex' : 'claude'))\n        return 'qe-same-family-degraded';\n    return 'qe-cross-family';\n}\nfunction effectiveSpec(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue')\n        return 'codex:' + opts.codexModel + ':' + opts._reasoning;\n    if (opts && opts.model)\n        return opts.model;\n    return null;\n}\nfunction specDegradation(spec, opts, env) {\n    if (!spec)\n        return null;\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        const requested = parts[1] || env.CODEX_MODEL;\n        if (opts.codexModel !== requested)\n            return 'codex-id-substituted';\n        return null;\n    }\n    if (!CLAUDE_NAMES[head])\n        return 'spec-unrecognised';\n    return null;\n}\nfunction decisionFor(base, spec, opts, env) {\n    const deg = specDegradation(spec, opts, env);\n    if (deg !== null)\n        return { opts: opts, spec: effectiveSpec(opts), reason: deg };\n    return { opts: opts, spec: effectiveSpec(opts), reason: base };\n}\nfunction decideFromSpec(base, stage, spec, env) {\n    if (stage === 'code' && (spec === null || spec === undefined)) {\n        const s = resolveCoderSpec(env);\n        return decisionFor(base, s, specToOpts(s, env), env);\n    }\n    if (stage === 'qe' && (spec === null || spec === undefined)) {\n        const s = resolveQeSpec(env);\n        return decisionFor(base, s, specToOpts(s, env), env);\n    }\n    return decisionFor(base, spec, specToOpts(spec, env), env);\n}\nfunction resolveStageDecision(stage, env) {\n    if (env.usageOverride) {\n        const r = (env.usageReasoning && env.usageReasoning[stage]) || STAGE_EFFORT.override[stage] || 'medium';\n        const s = 'codex:' + topCodexId(env) + ':' + r;\n        const o = specToOpts(s, env);\n        o._usageSwitched = true;\n        return decisionFor('usage-override', s, o, env);\n    }\n    const spec = env.MODELS[stage];\n    if (spec !== undefined)\n        return decideFromSpec('explicit-models', stage, spec, env);\n    if (!routingRequested(env))\n        return { opts: {}, spec: null, reason: 'routing-not-requested' };\n    if (stage === 'code' && (env.CODER === 'codex' || env.CODER === 'codex-fallback')) {\n        const s = resolveCoderSpec(env);\n        return decisionFor('coder-knob-codex', s, specToOpts(s, env), env);\n    }\n    if (stage === 'plan' && env.PLANNER === 'codex') {\n        const s = 'codex:' + env.CODEX_MODEL + ':high';\n        return decisionFor('planner-knob-codex', s, specToOpts(s, env), env);\n    }\n    if (stage === 'qe') {\n        const s = resolveQeSpec(env);\n        return decisionFor(qeReasonForFamilies(coderIsCodex(env), s), s, specToOpts(s, env), env);\n    }\n    const resolvedPrimary = env.primary || 'claude';\n    const cell = budgetTable(resolvedPrimary, resolveBudgetMode(env.budget), env)[stage];\n    if (cell !== undefined)\n        return decideFromSpec('budget-table-cell', stage, cell, env);\n    return decideFromSpec('default-models', stage, DEFAULT_MODELS[stage], env);\n}\nfunction modelLabel(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue') {\n        const base = 'codex:' + opts.codexModel + ':' + opts._reasoning;\n        return opts._usageSwitched ? base + ' (usage-switched)' : base;\n    }\n    if (opts && opts.model)\n        return opts.model;\n    return 'session';\n}\nfunction stageLabel(base, opts) {\n    const m = modelLabel(opts);\n    return m === 'session' ? base : base + ' · ' + m;\n}\nfunction mergeOpts(base, extra) {\n    const out = {};\n    for (const k in base)\n        out[k] = base[k];\n    for (const k in extra)\n        out[k] = extra[k];\n    return out;\n}",
+    code: "const STAGE_EFFORT = { override: {\n        router: 'medium',\n        requirements: 'medium',\n        research: 'medium',\n        adr: 'high',\n        ideation: 'medium',\n        ddd: 'high',\n        architecture: 'high',\n        plan: 'high',\n        code: 'medium',\n        qe: 'high',\n        fleet: 'medium',\n    } };\nfunction topCodexId(env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS.flagship;\n}\nconst KNOWN_CODEX = { auto: 1, 'gpt-5.5': 1, 'gpt-5.6': 1, 'gpt-5.6-luna': 1, 'gpt-5.6-terra': 1, 'gpt-5.6-sol': 1, 'gpt-6-astra': 1 };\nconst CODEX_TIERS = {\n    premium: 'gpt-6-astra',\n    flagship: 'gpt-5.6-sol',\n    workhorse: 'gpt-5.6-terra',\n    'high-volume': 'gpt-5.6-luna',\n};\nfunction codexIdForTier(tier, env) {\n    return env.CODEX_MODEL !== 'auto' ? env.CODEX_MODEL : CODEX_TIERS[tier];\n}\nconst BUDGET_PRESETS = {\n    normal: { claude: 'normal', codex: 'normal' },\n    eco: { claude: 'eco', codex: 'eco' },\n    hybrid: { claude: 'eco', codex: 'normal' },\n};\nfunction resolveBudgetMode(raw) {\n    if (raw === undefined)\n        return BUDGET_PRESETS.normal;\n    if (typeof raw === 'string') {\n        const preset = BUDGET_PRESETS[raw];\n        if (!preset)\n            throw new RangeError('budget: unknown preset \"' + raw + '\" — valid: normal|eco|hybrid');\n        return preset;\n    }\n    if (raw && typeof raw === 'object') {\n        const value = raw;\n        for (const key of Object.keys(value)) {\n            if (key !== 'claude' && key !== 'codex') {\n                throw new RangeError('budget: unknown family key \"' + key + '\" — valid: claude|codex');\n            }\n        }\n        for (const key of ['claude', 'codex']) {\n            const level = value[key];\n            if (level !== undefined && level !== 'normal' && level !== 'eco') {\n                throw new RangeError('budget.' + key + ': unknown level \"' + level + '\" — valid: normal|eco');\n            }\n        }\n        return {\n            claude: value.claude || 'normal',\n            codex: value.codex || 'normal',\n        };\n    }\n    throw new RangeError('budget: expected a preset name or {claude,codex} object, got ' + typeof raw);\n}\nconst CLAUDE_NAMES = { fable: 1, opus: 1, sonnet: 1, haiku: 1 };\nconst VALID_REASONING = { none: 1, minimal: 1, low: 1, medium: 1, high: 1, xhigh: 1, max: 1 };\nconst DEFAULT_MODELS = {\n    router: 'fable',\n    requirements: 'sonnet',\n    research: 'sonnet',\n    adr: 'opus',\n    ideation: 'sonnet',\n    ddd: 'opus',\n    architecture: 'opus',\n    plan: 'sonnet',\n    code: null,\n    qe: null,\n    fleet: 'sonnet',\n};\nconst ROUTING_TABLES = {\n    claude: {\n        claude: {\n            normal: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'fable', ideation: 'sonnet', ddd: 'fable', architecture: 'fable', plan: 'opus', code: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', requirements: 'sonnet', research: 'sonnet', adr: 'opus', ideation: 'sonnet', ddd: 'opus', architecture: 'opus', plan: 'sonnet', code: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n    codex: {\n        claude: {\n            normal: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n            eco: { router: 'sonnet', qe: 'sonnet', fleet: 'sonnet' },\n        },\n        codex: { normal: {}, eco: {} },\n    },\n};\nfunction codexCell(tier, effort, env) {\n    return 'codex:' + codexIdForTier(tier, env) + ':' + effort;\n}\nfunction budgetTable(primary, mode, env) {\n    const claudeHalf = ROUTING_TABLES[primary].claude[mode.claude];\n    let codexHalf;\n    if (primary === 'claude') {\n        const qeSpec = mode.codex === 'normal'\n            ? codexCell('flagship', 'high', env)\n            : codexCell('workhorse', 'medium', env);\n        codexHalf = { ...ROUTING_TABLES.claude.codex[mode.codex], qe: env.codexAvailable === false ? 'opus' : qeSpec };\n    }\n    else {\n        const normal = mode.codex === 'normal';\n        const largePlan = env.complexityTier === 'L' || env.complexityTier === 'XL';\n        const work = codexCell(normal ? 'flagship' : 'workhorse', 'high', env);\n        const evidence = codexCell(normal ? 'workhorse' : 'high-volume', 'medium', env);\n        codexHalf = {\n            router: evidence,\n            requirements: codexCell(normal ? 'flagship' : 'workhorse', 'medium', env),\n            research: evidence,\n            adr: codexCell(normal ? 'premium' : 'flagship', 'high', env),\n            ideation: work,\n            ddd: work,\n            architecture: codexCell(normal ? 'premium' : 'flagship', 'high', env),\n            plan: largePlan ? codexCell(normal ? 'premium' : 'flagship', 'high', env) : work,\n            code: work,\n            fleet: work,\n        };\n    }\n    return { ...claudeHalf, ...codexHalf };\n}\nfunction specToOpts(spec, env) {\n    const log = env.log || function () { };\n    if (!spec)\n        return {};\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        let id = parts[1] || env.CODEX_MODEL;\n        if (id !== 'auto' && !KNOWN_CODEX[id]) {\n            log('models: unknown codex id ' + id + ' — using ' + env.CODEX_MODEL);\n            id = env.CODEX_MODEL;\n        }\n        let reasoning = parts[2] || 'high';\n        if (!VALID_REASONING[reasoning]) {\n            throw new RangeError('models: invalid reasoning \"' + reasoning + '\" — valid: ' + Object.keys(VALID_REASONING).join('|'));\n        }\n        return { agentType: 'codex:codex-rescue', codexModel: id, _reasoning: reasoning };\n    }\n    if (CLAUDE_NAMES[head])\n        return { model: head };\n    log('models: unknown spec ' + spec + ' — session-inherited');\n    return {};\n}\nfunction resolveCoderSpec(env) {\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return 'codex:' + env.CODEX_MODEL + ':high';\n    return 'opus';\n}\nfunction coderIsCodex(env) {\n    const codeSpec = env.MODELS.code;\n    if (codeSpec !== undefined && codeSpec !== null)\n        return String(codeSpec).split(':')[0] === 'codex';\n    if (env.CODER === 'codex' || env.CODER === 'codex-fallback')\n        return true;\n    return env.primary === 'codex';\n}\nfunction resolveQeSpecForCoder(coderCodex, env) {\n    if (coderCodex)\n        return 'sonnet';\n    const CODEX_AVAILABLE = env.codexAvailable !== false;\n    if (!CODEX_AVAILABLE)\n        return 'opus';\n    const budget = resolveBudgetMode(env.budget);\n    return budget.codex === 'eco'\n        ? 'codex:' + codexIdForTier('workhorse', env) + ':medium'\n        : 'codex:' + codexIdForTier('flagship', env) + ':high';\n}\nfunction resolveQeSpec(env) {\n    return resolveQeSpecForCoder(coderIsCodex(env), env);\n}\nfunction routingRequested(env) {\n    return (Object.keys(env.MODELS).length > 0 ||\n        env.primary !== undefined ||\n        env.budget !== undefined ||\n        env.PLANNER === 'codex' ||\n        env.CODER === 'codex' ||\n        env.CODER === 'codex-fallback' ||\n        env.QE_REVIEWER === 'codex' ||\n        env.QE_REVIEWER === 'codex-fallback');\n}\nfunction resolveStageModel(stage, env) {\n    return resolveStageDecision(stage, env).opts;\n}\nfunction specFamily(spec) {\n    return (spec && String(spec).split(':')[0] === 'codex') ? 'codex' : 'claude';\n}\nfunction qeReasonForFamilies(coderCodex, qeSpec) {\n    if (specFamily(qeSpec) === (coderCodex ? 'codex' : 'claude'))\n        return 'qe-same-family-degraded';\n    return 'qe-cross-family';\n}\nfunction effectiveSpec(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue')\n        return 'codex:' + opts.codexModel + ':' + opts._reasoning;\n    if (opts && opts.model)\n        return opts.model;\n    return null;\n}\nfunction specDegradation(spec, opts, env) {\n    if (!spec)\n        return null;\n    const parts = String(spec).split(':');\n    const head = parts[0] || '';\n    if (head === 'codex') {\n        const requested = parts[1] || env.CODEX_MODEL;\n        if (opts.codexModel !== requested)\n            return 'codex-id-substituted';\n        return null;\n    }\n    if (!CLAUDE_NAMES[head])\n        return 'spec-unrecognised';\n    return null;\n}\nfunction decisionFor(base, spec, opts, env) {\n    const deg = specDegradation(spec, opts, env);\n    if (deg !== null)\n        return { opts: opts, spec: effectiveSpec(opts), reason: deg };\n    return { opts: opts, spec: effectiveSpec(opts), reason: base };\n}\nfunction decideFromSpec(base, stage, spec, env) {\n    if (stage === 'code' && (spec === null || spec === undefined)) {\n        const s = resolveCoderSpec(env);\n        return decisionFor(base, s, specToOpts(s, env), env);\n    }\n    if (stage === 'qe' && (spec === null || spec === undefined)) {\n        const s = resolveQeSpec(env);\n        return decisionFor(base, s, specToOpts(s, env), env);\n    }\n    return decisionFor(base, spec, specToOpts(spec, env), env);\n}\nfunction resolveStageDecision(stage, env) {\n    if (env.usageOverride) {\n        const r = (env.usageReasoning && env.usageReasoning[stage]) || STAGE_EFFORT.override[stage] || 'medium';\n        const s = 'codex:' + topCodexId(env) + ':' + r;\n        const o = specToOpts(s, env);\n        o._usageSwitched = true;\n        return decisionFor('usage-override', s, o, env);\n    }\n    const spec = env.MODELS[stage];\n    if (spec !== undefined)\n        return decideFromSpec('explicit-models', stage, spec, env);\n    if (!routingRequested(env))\n        return { opts: {}, spec: null, reason: 'routing-not-requested' };\n    if (stage === 'code' && (env.CODER === 'codex' || env.CODER === 'codex-fallback')) {\n        const s = resolveCoderSpec(env);\n        return decisionFor('coder-knob-codex', s, specToOpts(s, env), env);\n    }\n    if (stage === 'plan' && env.PLANNER === 'codex') {\n        const s = 'codex:' + env.CODEX_MODEL + ':high';\n        return decisionFor('planner-knob-codex', s, specToOpts(s, env), env);\n    }\n    if (stage === 'qe') {\n        const s = resolveQeSpec(env);\n        return decisionFor(qeReasonForFamilies(coderIsCodex(env), s), s, specToOpts(s, env), env);\n    }\n    const resolvedPrimary = env.primary || 'claude';\n    const cell = budgetTable(resolvedPrimary, resolveBudgetMode(env.budget), env)[stage];\n    if (cell !== undefined)\n        return decideFromSpec('budget-table-cell', stage, cell, env);\n    return decideFromSpec('default-models', stage, DEFAULT_MODELS[stage], env);\n}\nfunction modelLabel(opts) {\n    if (opts && opts.agentType === 'codex:codex-rescue') {\n        const base = 'codex:' + opts.codexModel + ':' + opts._reasoning;\n        return opts._usageSwitched ? base + ' (usage-switched)' : base;\n    }\n    if (opts && opts.model)\n        return opts.model;\n    return 'session';\n}\nfunction stageLabel(base, opts) {\n    const m = modelLabel(opts);\n    return m === 'session' ? base : base + ' · ' + m;\n}\nfunction mergeOpts(base, extra) {\n    const out = {};\n    for (const k in base)\n        out[k] = base[k];\n    for (const k in extra)\n        out[k] = extra[k];\n    return out;\n}",
   },
   "usage-probes": {
     name: "usage-probes",

package/src/markdown-masker.ts

@@ -0,0 +1,109 @@
+/**
+ * Canonical Markdown block masker; copied byte-for-byte as markdown-masker.mjs beside K2.
+ * Keep this file valid JavaScript (inferred TS types, no build needed by the copy).
+ *
+ * CommonMark fences and type-2 HTML comments; same UTF-16 length and newline positions.
+ * Inline code cannot open an HTML block. HTML delimiters within a block are consumed left to
+ * right, including close/reopen on one line. This is not a complete CommonMark parser.
+ *
+ * Reader policies are deliberate: amendment-trace restores unclosed blocks; brief/K2 hide them.
+ * Four-space code is still unsupported by default. ONLY brief keeps its pre-existing policy.
+ * Containers, tab indentation and HTML block types other than comments remain unsupported.
+ * Callbacks expose line facts; callers own semantic diagnostics and list-barrier representation.
+ */
+export function maskMarkdown(md = '', {
+  unclosed = 'restore',
+  indentedCode = false,
+  inlineComments = false,
+  onMasked = (_line = 0) => {},
+  onDisputed = (_line = 0) => {},
+} = {}) {
+  const lines = md.split('\n');
+  const out = lines.slice();
+  const masked = lines.map(() => false);
+  let state = 'text';
+  let marker = '';
+  let markerLength = 0;
+  let openedAt = -1;
+  let nestedOpener = false;
+  let disputed = false;
+  for (let i = 0; i < lines.length; i++) {
+    const line = lines[i] ?? '';
+    const blank = () => { out[i] = ' '.repeat(line.length); masked[i] = true; };
+    if (state === 'fence') {
+      blank();
+      const close = /^ {0,3}(`{3,}|~{3,})\s*$/.exec(line);
+      if (close) {
+        const run = close[1] ?? '';
+        if (run[0] === marker && run.length >= markerLength) {
+          state = 'text';
+          openedAt = -1;
+        }
+      }
+      continue;
+    }
+    if (state === 'text') {
+      const fence = /^ {0,3}(`{3,}|~{3,})([^\n]*)$/.exec(line);
+      if (fence && !(fence[1]?.[0] === '`' && fence[2]?.includes('`'))) {
+        const run = fence[1] ?? '';
+        state = 'fence';
+        marker = run[0] ?? '';
+        markerLength = run.length;
+        openedAt = i;
+        blank();
+        continue;
+      }
+      if (indentedCode && /^ {4,}/.test(line)) {
+        blank();
+        continue;
+      }
+    }
+    // Outside HTML only a block opener counts: code-spanned delimiters in prose are inert.
+    // Inside HTML, backticks are literal and do not protect a delimiter.
+    const htmlStart = /^ {0,3}<!--/.test(line);
+    const wasDisputed = disputed;
+    // Ambiguity is diagnostic state, never permission to scan otherwise-visible prose.
+    // Brief deliberately keeps that diagnostic across blocks until the author's outer close;
+    // block-only readers must not hide an unrelated arrow or opener because it is pending.
+    if (state === 'html' || htmlStart || inlineComments) {
+      let maskLine = state === 'html' || htmlStart;
+      const tokens = [...line.matchAll(/`+|<!--|-->/g)];
+      for (let t = 0; t < tokens.length; t++) {
+        const token = tokens[t];
+        if (!token) continue;
+        if (token[0][0] === '`') {
+          // Code spans require an EXACT matching run; a shorter embedded run is literal.
+          // HTML blocks treat backticks literally. Inline-comment support is brief's existing
+          // policy; other readers only enter this scan at a block opener or while disputed.
+          if (state !== 'html') {
+            const end = tokens.findIndex((next, j) => j > t && next[0] === token[0]);
+            if (end >= 0) t = end;
+          }
+          continue;
+        }
+        if (token[0] === '<!--') {
+          if (state === 'html') nestedOpener = true;
+          else { state = 'html'; openedAt = i; }
+          maskLine = true;
+        } else if (state === 'html') {
+          state = 'text';
+          openedAt = -1;
+          if (nestedOpener) { disputed = true; nestedOpener = false; }
+        } else if (disputed) {
+          disputed = false;
+          maskLine = true;
+        }
+      }
+      if (maskLine) blank();
+    }
+    if (wasDisputed || disputed) onDisputed(i);
+  }
+  if (openedAt >= 0 && unclosed === 'restore') {
+    for (let i = openedAt; i < lines.length; i++) {
+      out[i] = lines[i] ?? '';
+      masked[i] = false;
+    }
+  }
+  for (let i = 0; i < masked.length; i++) if (masked[i]) onMasked(i);
+  return out.join('\n');
+}