@eir-labs/coltrane 0.20.0 → 0.22.0

package/dist/src/cli.d.ts

@@ -31,7 +31,7 @@ export interface CliIO {
     /** Injected for tests. Production reads stdin for `--input -`. */
     stdin?: () => string;
 }
-export declare const USAGE = "coltrane 0.20.0\n\n  coltrane validate                     load the genome; exit non-zero on load errors\n  coltrane dispatch <standard>          run a standard\n  coltrane monitor <gig-id>             report a gig's progress\n  coltrane logs <gig-id>                per-chair logs for a gig\n  coltrane abort <gig-id>               stop a running gig\n  coltrane trace <output-id>            walk an output's provenance\n  coltrane simulate <standard>          cost/shape a standard without running it\n  coltrane health                       engine + store health\n  coltrane serve                        run the MCP server on stdio\n  coltrane enqueue <standard>           queue a gig on the LOCAL file queue (no store, no key)\n                                        (env: COLTRANE_QUEUE_DIR \u2014 its absence is the whole\n                                         difference between local and hosted)\n  coltrane work                         claim one queued gig from the org store and run it\n  coltrane work --check                  report whether this box's drain environment is configured\n                                        and exit without claiming (0 ready, 1 not ready)\n                                        (env: COLTRANE_STORE_URL, COLTRANE_STORE_ANON,\n                                         COLTRANE_AGENT_TOKEN; results drain via\n                                         COLTRANE_DRAIN_URL + COLTRANE_DRAIN_KEY;\n                                         checkpoints under COLTRANE_WORKER_CHECKPOINTS,\n                                         default ~/.coltrane/worker-checkpoints;\n                                         exit 0 complete or parked, 1 failed, 3 queue empty)\n\nOptions\n  --input <json|@file|->                dispatch payload; @file reads a file, - reads stdin\n  --depth <skim|standard|deep>          tighten the per-chair turn cap\n  --budget <dollars>                    per-gig ceiling; the run stops when it is gone\n  --reuse                               allow chair-level reuse of prior sealed outputs\n  --resume <gig-id>                     continue a gig that died mid-pipeline\n  --approve <role>=<json|@file>         a human chair's verdict; repeat once per chair\n  --as <name>                           who is approving; sealed as the verdict's author\n  --wait                                block until the run finishes\n  --follow                              poll until the gig reaches a terminal state\n  --direction <upstream|downstream|both>  for trace\n  --json                                print the raw result to stdout\n  --genome <path>                       genome root (default: $COLTRANE_GENOME or cwd)\n  --help, --version\n\nA dispatch that reaches a chair a HUMAN holds parks: it names the waiting chair and exits 0,\nbecause a gig waiting on a person is not a failed gig. Approve it on the resume \u2014\n\n  coltrane dispatch <standard> --resume <gig> \\\n      --approve approve=@verdict.json --as eugene\n\n--input is NOT required on an approve-only resume: when every remaining chair is human the\ncheckpoint's recorded payload stands and the omission inherits it. If you DO pass --input it is\nchecked against the checkpoint, and a disagreement still refuses the resume.\n";
+export declare const USAGE = "coltrane 0.22.0\n\n  coltrane validate                     load the genome; exit non-zero on load errors\n  coltrane dispatch <standard>          run a standard\n  coltrane monitor <gig-id>             report a gig's progress\n  coltrane logs <gig-id>                per-chair logs for a gig\n  coltrane abort <gig-id>               stop a running gig\n  coltrane trace <output-id>            walk an output's provenance\n  coltrane simulate <standard>          cost/shape a standard without running it\n  coltrane health                       engine + store health\n  coltrane serve                        run the MCP server on stdio\n  coltrane enqueue <standard>           queue a gig on the LOCAL file queue (no store, no key)\n                                        (env: COLTRANE_QUEUE_DIR \u2014 its absence is the whole\n                                         difference between local and hosted)\n  coltrane work                         claim one queued gig from the org store and run it\n  coltrane work --check                  report whether this box's drain environment is configured\n                                        and exit without claiming (0 ready, 1 not ready)\n                                        (env: COLTRANE_STORE_URL, COLTRANE_STORE_ANON,\n                                         COLTRANE_AGENT_TOKEN; results drain via\n                                         COLTRANE_DRAIN_URL + COLTRANE_DRAIN_KEY;\n                                         checkpoints under COLTRANE_WORKER_CHECKPOINTS,\n                                         default ~/.coltrane/worker-checkpoints;\n                                         exit 0 complete or parked, 1 failed, 3 queue empty)\n\nOptions\n  --input <json|@file|->                dispatch payload; @file reads a file, - reads stdin\n  --depth <skim|standard|deep>          tighten the per-chair turn cap\n  --budget <dollars>                    per-gig ceiling; the run stops when it is gone\n  --reuse                               allow chair-level reuse of prior sealed outputs\n  --resume <gig-id>                     continue a gig that died mid-pipeline\n  --approve <role>=<json|@file>         a human chair's verdict; repeat once per chair\n  --as <name>                           who is approving; sealed as the verdict's author\n  --wait                                block until the run finishes\n  --follow                              poll until the gig reaches a terminal state\n  --direction <upstream|downstream|both>  for trace\n  --json                                print the raw result to stdout\n  --genome <path>                       genome root (default: $COLTRANE_GENOME or cwd)\n  --help, --version\n\nA dispatch that reaches a chair a HUMAN holds parks: it names the waiting chair and exits 0,\nbecause a gig waiting on a person is not a failed gig. Approve it on the resume \u2014\n\n  coltrane dispatch <standard> --resume <gig> \\\n      --approve approve=@verdict.json --as eugene\n\n--input is NOT required on an approve-only resume: when every remaining chair is human the\ncheckpoint's recorded payload stands and the omission inherits it. If you DO pass --input it is\nchecked against the checkpoint, and a disagreement still refuses the resume.\n";
 interface Parsed {
     cmd: string | undefined;
     positional: string[];

package/dist/src/placement.d.ts

@@ -0,0 +1,67 @@
+/**
+ * THE CHAIR-PLACEMENT SEAM — the engine defines the question; a deployment answers it.
+ *
+ * WHY THIS SHAPE. The Envoy orientation (2026-08-21) states it directly: "Coltrane (OSS) exposes the
+ * chair-placement seam; Envoy (deployment) plugs into it… the same shape as the venue-realizer seam:
+ * an interface the engine defines and enforces, an implementation the deployment supplies." So the
+ * resolution — who may sit here, and with what history — deliberately does NOT live in this repo.
+ * The engine owns the MOMENT and the REFUSAL; the resolver owns the answer.
+ *
+ * WHAT IT UNBLOCKS. Three things are loaded into the genome today and read by nothing, because there
+ * has been no moment at which anything is asked:
+ *   · an institutional chair's `supplies` — the quartet writes a house-style nothing consumes
+ *   · `technique_evidence` — "why this player in this chair", 0 readers
+ *   · `contract_caps` — the chair-authorisation narrowing rule, 0 readers
+ * Each is an answer waiting for a question. This is the question.
+ *
+ * OPTIONAL BY ABSENCE, CLOSED BY REFUSAL. A deployment that supplies no resolver runs exactly as
+ * before — every existing standard and gig is untouched, which is what makes this safe to land ahead
+ * of any consumer. A deployment that supplies one can REFUSE a seating, and a refusal stops the
+ * chair. A refusal that were logged and ignored would make the seam decoration.
+ */
+/** Who is being placed, where, and under what. Everything the engine knows at the moment a chair is
+ *  taken — deliberately no more: what else bears on the decision is the resolver's business. */
+export interface PlacementRequest {
+    /** The agent being seated. */
+    readonly agent_slug: string;
+    /** The chair's role within the standard. */
+    readonly role: string;
+    /** The standard the chair belongs to. */
+    readonly standard_slug: string;
+    /** The phase the chair runs in. */
+    readonly phase: string;
+    /** The gig this placement is for. */
+    readonly gig_id: string;
+    /** What the chair's contract says this seat consumes and produces — enough for a resolver to ask
+     *  "can it do what this chair assigns" without reaching back into the genome itself. */
+    readonly input_contract: readonly string[];
+    readonly output_contract: readonly string[];
+}
+/**
+ * The answer. `admitted: false` REFUSES the seating and stops the chair.
+ *
+ * `hydration` is the other half of placement — Envoy's "carry the chain into the chair". Whatever the
+ * resolver returns reaches the invocation as `ctx.hydration`, on exactly the wire an institutional
+ * chair's `supplies` would use. A resolver that admits without hydrating is valid; the field is
+ * optional because validation and hydration are separable and a deployment may want only the first.
+ */
+export interface PlacementDecision {
+    readonly admitted: boolean;
+    /** Why refused. Carried into the error so an operator learns the reason, not merely that it failed. */
+    readonly reason?: string | undefined;
+    /** Slot name → value, delivered to the seated agent. */
+    readonly hydration?: Record<string, unknown> | undefined;
+}
+/** What a deployment supplies. One method: the engine asks at the moment a chair is taken. */
+export interface PlacementResolver {
+    place(request: PlacementRequest): Promise<PlacementDecision>;
+}
+/**
+ * A refused seating. Distinct from every other chair failure because the chair never ran — nothing
+ * was spent, and the reason belongs to the institution rather than to the work.
+ */
+export declare class PlacementRefused extends Error {
+    readonly agent_slug: string;
+    readonly role: string;
+    constructor(agent_slug: string, role: string, reason: string);
+}

package/dist/src/placement.js

@@ -0,0 +1,36 @@
+/**
+ * THE CHAIR-PLACEMENT SEAM — the engine defines the question; a deployment answers it.
+ *
+ * WHY THIS SHAPE. The Envoy orientation (2026-08-21) states it directly: "Coltrane (OSS) exposes the
+ * chair-placement seam; Envoy (deployment) plugs into it… the same shape as the venue-realizer seam:
+ * an interface the engine defines and enforces, an implementation the deployment supplies." So the
+ * resolution — who may sit here, and with what history — deliberately does NOT live in this repo.
+ * The engine owns the MOMENT and the REFUSAL; the resolver owns the answer.
+ *
+ * WHAT IT UNBLOCKS. Three things are loaded into the genome today and read by nothing, because there
+ * has been no moment at which anything is asked:
+ *   · an institutional chair's `supplies` — the quartet writes a house-style nothing consumes
+ *   · `technique_evidence` — "why this player in this chair", 0 readers
+ *   · `contract_caps` — the chair-authorisation narrowing rule, 0 readers
+ * Each is an answer waiting for a question. This is the question.
+ *
+ * OPTIONAL BY ABSENCE, CLOSED BY REFUSAL. A deployment that supplies no resolver runs exactly as
+ * before — every existing standard and gig is untouched, which is what makes this safe to land ahead
+ * of any consumer. A deployment that supplies one can REFUSE a seating, and a refusal stops the
+ * chair. A refusal that were logged and ignored would make the seam decoration.
+ */
+/**
+ * A refused seating. Distinct from every other chair failure because the chair never ran — nothing
+ * was spent, and the reason belongs to the institution rather than to the work.
+ */
+export class PlacementRefused extends Error {
+    agent_slug;
+    role;
+    constructor(agent_slug, role, reason) {
+        super(`placement refused — agent "${agent_slug}" may not take chair "${role}": ${reason}`);
+        this.name = "PlacementRefused";
+        this.agent_slug = agent_slug;
+        this.role = role;
+    }
+}
+//# sourceMappingURL=placement.js.map

package/dist/src/placement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"placement.js","sourceRoot":"","sources":["../../src/placement.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AA0CH;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,UAAU,CAAS;IACnB,IAAI,CAAS;IACtB,YAAY,UAAkB,EAAE,IAAY,EAAE,MAAc;QAC1D,KAAK,CAAC,8BAA8B,UAAU,yBAAyB,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}

package/dist/src/placement_institutions.d.ts

@@ -0,0 +1,27 @@
+import type { LoadedInstitution } from "./institution_loader.js";
+import type { PlacementResolver } from "./placement.js";
+/**
+ * A PlacementResolver backed by the genome's own `institutions/*.json`.
+ *
+ * WHY THIS IS IN OSS, given the seam exists for a deployment to fill. The precedent is this repo's:
+ * the venue seam defines `VenueRealizer` AND ships `dockerComposeRealizer()`; `GenomeStore` has three
+ * backings behind one port. This is the file backing of the placement port — the parallel to Envoy's
+ * store-backed resolver, not a competitor to it. Envoy answers from `coltrane_chair_assignment`; this
+ * answers from the files a clone already has.
+ *
+ * WHAT IT CLOSES. `institutions/quartet.json`'s structure-builder chair supplies a real `house-style`,
+ * and bill's carried `structure-conformance` skill tells its agent to "read the constraints supplied
+ * in the `house-style` slot". Nothing ever delivered it, because until the placement seam there was
+ * no moment at which anything was asked. This is the first thing to answer.
+ *
+ * THE SEMANTIC, and it is the whole design decision:
+ *
+ *   SILENCE ADMITS       — an institution that says nothing about an agent does not refuse it.
+ *   CONTRADICTION REFUSES — an institution that seats a DIFFERENT agent in that role does.
+ *
+ * Refusing every unwitnessed seating would break the shipped genome: no standard outside the quartet
+ * carries assignments at all. Absence of a record is not a finding — it is a genome that has not been
+ * populated yet, and treating it as a refusal would make the feature unusable on the day it landed.
+ * A contradiction is different: the institution HAS spoken about this chair and named someone else.
+ */
+export declare function institutionPlacementResolver(institutions: ReadonlyMap<string, LoadedInstitution>): PlacementResolver;

package/dist/src/placement_institutions.js

@@ -0,0 +1,62 @@
+/**
+ * A PlacementResolver backed by the genome's own `institutions/*.json`.
+ *
+ * WHY THIS IS IN OSS, given the seam exists for a deployment to fill. The precedent is this repo's:
+ * the venue seam defines `VenueRealizer` AND ships `dockerComposeRealizer()`; `GenomeStore` has three
+ * backings behind one port. This is the file backing of the placement port — the parallel to Envoy's
+ * store-backed resolver, not a competitor to it. Envoy answers from `coltrane_chair_assignment`; this
+ * answers from the files a clone already has.
+ *
+ * WHAT IT CLOSES. `institutions/quartet.json`'s structure-builder chair supplies a real `house-style`,
+ * and bill's carried `structure-conformance` skill tells its agent to "read the constraints supplied
+ * in the `house-style` slot". Nothing ever delivered it, because until the placement seam there was
+ * no moment at which anything was asked. This is the first thing to answer.
+ *
+ * THE SEMANTIC, and it is the whole design decision:
+ *
+ *   SILENCE ADMITS       — an institution that says nothing about an agent does not refuse it.
+ *   CONTRADICTION REFUSES — an institution that seats a DIFFERENT agent in that role does.
+ *
+ * Refusing every unwitnessed seating would break the shipped genome: no standard outside the quartet
+ * carries assignments at all. Absence of a record is not a finding — it is a genome that has not been
+ * populated yet, and treating it as a refusal would make the feature unusable on the day it landed.
+ * A contradiction is different: the institution HAS spoken about this chair and named someone else.
+ */
+export function institutionPlacementResolver(institutions) {
+    return {
+        place: async (request) => resolve(institutions, request),
+    };
+}
+function resolve(institutions, request) {
+    for (const inst of institutions.values()) {
+        // The document is typed by the loader (InstitutionDocumentSections); read it as such rather than
+        // casting to a bag of unknowns, so a section that changes shape breaks here at compile time.
+        const chairs = inst.document.chairs ?? [];
+        const seats = inst.document.assignments ?? [];
+        // The chair this role names, in this institution. A role no chair carries is silence.
+        const chair = chairs.find((c) => c.role === request.role);
+        if (!chair)
+            continue;
+        // Who the institution seats there. An unseated chair is also silence — the office exists and
+        // nobody has been placed in it, which is not a statement about the agent being placed now.
+        const seat = seats.find((s) => s.chair_id === chair.id);
+        if (!seat)
+            continue;
+        if (seat.agent_slug !== request.agent_slug) {
+            return {
+                admitted: false,
+                reason: `institution "${inst.slug}" seats "${seat.agent_slug}" in chair "${request.role}", ` +
+                    `not "${request.agent_slug}"`,
+            };
+        }
+        // Seated, and it is this agent. Carry the chair's supplies — the institution's data entering at
+        // the seat, which is the wire this whole surface was waiting for.
+        const supplies = chair.supplies && Object.keys(chair.supplies).length > 0
+            ? { ...chair.supplies }
+            : undefined;
+        return supplies ? { admitted: true, hydration: supplies } : { admitted: true };
+    }
+    // No institution had anything to say about this role. Silence admits.
+    return { admitted: true };
+}
+//# sourceMappingURL=placement_institutions.js.map

package/dist/src/placement_institutions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"placement_institutions.js","sourceRoot":"","sources":["../../src/placement_institutions.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,4BAA4B,CAC1C,YAAoD;IAEpD,OAAO;QACL,KAAK,EAAE,KAAK,EAAE,OAAyB,EAA8B,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC;KACvG,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CACd,YAAoD,EACpD,OAAyB;IAEzB,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QACzC,iGAAiG;QACjG,6FAA6F;QAC7F,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;QAE9C,sFAAsF;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,6FAA6F;QAC7F,2FAA2F;QAC3F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,IAAI,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;YAC3C,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EACJ,gBAAgB,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,UAAU,eAAe,OAAO,CAAC,IAAI,KAAK;oBACpF,QAAQ,OAAO,CAAC,UAAU,GAAG;aAChC,CAAC;QACJ,CAAC;QAED,gGAAgG;QAChG,kEAAkE;QAClE,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC;YACtD,CAAC,CAAC,EAAE,GAAI,KAAK,CAAC,QAAoC,EAAE;YACpD,CAAC,CAAC,SAAS,CAAC;QAChB,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,sEAAsE;IACtE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC"}

package/dist/src/run_deps.d.ts

@@ -98,7 +98,7 @@ export declare function resolveWorkingRepo(claim: {
  * seed_outputs, chart, checkpoints) are NOT here: each call site spreads its own onto this result. The
  * assembler unifies exactly the wires that diverged and no more.
  */
-export type AssembleRunDepsArgs = Pick<RunDeps, "outputs" | "ledger" | "invoke" | "model_version" | "skills" | "skill_dirs" | "evals" | "budget" | "toolProviders" | "venue" | "venues" | "venueRealizer"> & {
+export type AssembleRunDepsArgs = Pick<RunDeps, "outputs" | "ledger" | "invoke" | "model_version" | "skills" | "skill_dirs" | "evals" | "budget" | "toolProviders" | "venue" | "venues" | "venueRealizer" | "placementResolver"> & {
     /**
      * The enforcement environment, supplied per door: {} on the drain, the bootstrap map on the server
      * (which is itself `Record | undefined`). REQUIRED — the property may hold undefined but may never be

package/dist/src/run_deps.js

@@ -120,6 +120,7 @@ export function assembleRunDeps(args) {
         ...(args.venue ? { venue: args.venue } : {}),
         ...(args.venues ? { venues: args.venues } : {}),
         ...(args.venueRealizer ? { venueRealizer: args.venueRealizer } : {}),
+        ...(args.placementResolver ? { placementResolver: args.placementResolver } : {}),
         ...(args.repoUrl ? { repoUrl: args.repoUrl } : {}),
     };
 }

package/dist/src/run_deps.js.map

@@ -1 +1 @@
-{"version":3,"file":"run_deps.js","sourceRoot":"","sources":["../../src/run_deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAgD,MAAM,qBAAqB,CAAC;AAGtG;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,GAAG,CACZ,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,UAAmB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CACvG,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,KAA0C;IACpE,MAAM,KAAK,GAAI,KAAK,EAAE,CAAC,QAAQ,CAAuC,EAAE,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEhG,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgE,EAChE,kBAAsC,SAAS;IAE/C,MAAM,KAAK,GAAI,KAAK,CAAC,KAA8C,EAAE,UAAU,CAAC;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IACrG,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClC,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAkDD,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,gGAAgG;QAChG,gGAAgG;QAChG,kBAAkB;QAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"run_deps.js","sourceRoot":"","sources":["../../src/run_deps.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAgD,MAAM,qBAAqB,CAAC;AAGtG;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,IAAI,GAAG,CACZ,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,UAAmB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,CACvG,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,qBAAqB,GAAG,IAAI,CAAC;AAEnC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,KAA0C;IACpE,MAAM,KAAK,GAAI,KAAK,EAAE,CAAC,QAAQ,CAAuC,EAAE,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEhG,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,qBAAqB,EAAE,CAAC;AACpF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhD,MAAM,UAAU,cAAc;IAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,wBAAwB,CAAC;AAC1E,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgE,EAChE,kBAAsC,SAAS;IAE/C,MAAM,KAAK,GAAI,KAAK,CAAC,KAA8C,EAAE,UAAU,CAAC;IAChF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC;IACrG,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC;IAClC,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5F,CAAC;AAmDD,MAAM,UAAU,eAAe,CAAC,IAAyB;IACvD,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,gGAAgG;QAChG,gGAAgG;QAChG,kBAAkB;QAClB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/src/runtime.d.ts

@@ -8,6 +8,7 @@ import { type CheckpointStore, type ReuseStore, type PriorBudgetState } from "./
 import type { OutputStore, OutputRecord } from "./outputs.js";
 import { type GigConformanceResult } from "./gig_conformance.js";
 import { type Ledger, type GigUsage } from "./ledger.js";
+import { type PlacementResolver } from "./placement.js";
 import type { Depth } from "./pricing.js";
 import type { SkillRecord, EvalRecord } from "./loader.js";
 export interface AgentInvocationContext {
@@ -341,6 +342,17 @@ export interface RunDeps {
      * and tests supply the daemon-free substitute (a realizer with an injected `run` seam).
      */
     venueRealizer?: VenueRealizer | undefined;
+    /**
+     * THE CHAIR-PLACEMENT SEAM. Asked at the moment a chair is taken: may this agent be here, can it do
+     * what this chair assigns, and with what history. Absent → every placement is admitted and the run
+     * is byte-identical to before, which is what makes the seam safe to ship ahead of any consumer.
+     *
+     * The engine owns the MOMENT and the REFUSAL; the deployment owns the answer. Per the Envoy
+     * orientation: "Coltrane (OSS) exposes the chair-placement seam; Envoy (deployment) plugs into it
+     * … the same shape as the venue-realizer seam." So institutions, assignments and technique_evidence
+     * are read by the RESOLVER, not by this engine — which is why none of them appear here.
+     */
+    placementResolver?: PlacementResolver | undefined;
     /**
      * How the substrate realizer binds credentials into the room. Passed as the required positional
      * `credentialResolver` argument to `venueRealizer.realize()`. Absent → `async () => ({})`, an empty

package/dist/src/runtime.js

@@ -25,6 +25,7 @@ import { producersSha, reuseCacheKey, checkReuseEntry, runIdentityMismatch, chec
 import { checkGigConformance } from "./gig_conformance.js";
 import { drainGigHeader } from "./output_mirror.js";
 import { LEDGER_SCHEMA_VERSION } from "./ledger.js";
+import { PlacementRefused } from "./placement.js";
 import { COLTRANE_VERSION } from "./version.js";
 /**
  * #236 — settled spend used to be discarded on every failed gig: `usage` was written only on
@@ -1743,12 +1744,47 @@ export async function runGig(standard, gigInput, deps) {
                     reserveSettled = true;
                 };
                 try {
+                    // ── THE PLACEMENT SEAM ────────────────────────────────────────────────────────────────────
+                    // Asked BEFORE the chair is invoked, so a refused seating costs nothing. The engine owns the
+                    // moment and the refusal; the deployment owns the answer (Envoy). Absent resolver → admitted,
+                    // and the run is byte-identical to before.
+                    //
+                    // A resolver that THROWS refuses. Absent must mean DECLINE: treating an unreachable resolver as
+                    // admission would make an outage look like an open door, which is the failure direction this
+                    // engine refuses everywhere else.
+                    let placedHydration;
+                    if (deps.placementResolver) {
+                        let decision;
+                        try {
+                            decision = await deps.placementResolver.place({
+                                agent_slug: agent.slug,
+                                role: chair.role,
+                                standard_slug: standard.slug,
+                                phase: phaseName,
+                                gig_id,
+                                input_contract: [...(chair.input_contract ?? [])],
+                                output_contract: [...(chair.output_contract ?? [])],
+                            });
+                        }
+                        catch (e) {
+                            throw new PlacementRefused(agent.slug, chair.role, `the placement resolver failed, so no admission was given: ${e instanceof Error ? e.message : String(e)}`);
+                        }
+                        if (!decision.admitted) {
+                            throw new PlacementRefused(agent.slug, chair.role, decision.reason ?? "no reason given");
+                        }
+                        placedHydration = decision.hydration;
+                    }
                     data = await deps.invoke({
                         agent, phase: phaseName, gig_id, inputs, gig_input: gigInput, skills,
                         missing_skills: p.missing_skills, // #241 — what did NOT resolve, so the prompt can't assert it
                         // THE SEAT IS WHERE THE INSTITUTION'S DATA ENTERS. Validated at compose time (the dead-slot
                         // refusal) and, until now, dropped on the floor immediately afterwards.
-                        ...(p.chair.supplies ? { hydration: p.chair.supplies } : {}),
+                        // The seat's own supplies, then whatever the placement resolver carried in — Envoy's
+                        // "carry the chain into the chair". The resolver wins on a key collision: it answers with
+                        // the institution's live record, where the standard's chair carries an authored default.
+                        ...(p.chair.supplies || placedHydration
+                            ? { hydration: { ...(p.chair.supplies ?? {}), ...(placedHydration ?? {}) } }
+                            : {}),
                         output_types: output_specs.map((s) => s.domain_type), // #174 — the chair's promised subset
                         // #250 level 2 + #237 — the cancellation signal and the run's depth reach the invocation
                         // itself, so an invoker can kill its child and shape what it asks the model for.