@harness-engineering/orchestrator 0.9.0 → 0.9.1

package/dist/index.mjs

@@ -2445,6 +2445,9 @@ var RoadmapTrackerAdapter = class {
 // src/tracker/extensions/linear.ts
 import { Ok as Ok5, Err as Err4 } from "@harness-engineering/types";
 var LINEAR_GRAPHQL_ENDPOINT = "https://api.linear.app/graphql";
+function errorMessage(err) {
+  return err instanceof Error ? err.message : String(err);
+}
 var LinearGraphQLClient = class {
   apiKey;
   endpoint;
@@ -2455,9 +2458,23 @@ var LinearGraphQLClient = class {
     this.fetchFn = opts.fetchFn ?? globalThis.fetch;
   }
   async query(query, variables) {
-    let res;
+    const sent = await this.sendRequest(query, variables);
+    if (!sent.ok) return sent;
+    const res = sent.value;
+    if (!res.ok) {
+      return Err4(await this.httpError(res));
+    }
+    const parsed = await this.parseEnvelope(res);
+    if (!parsed.ok) return parsed;
+    const envelope = parsed.value;
+    const graphqlError = envelopeError(envelope);
+    if (graphqlError) return Err4(graphqlError);
+    return Ok5(envelope.data ?? {});
+  }
+  /** POST the operation to Linear, normalizing transport throws into an `Err`. */
+  async sendRequest(query, variables) {
     try {
-      res = await this.fetchFn(this.endpoint, {
+      const res = await this.fetchFn(this.endpoint, {
         method: "POST",
         headers: {
           Authorization: this.apiKey,
@@ -2465,35 +2482,31 @@ var LinearGraphQLClient = class {
         },
         body: JSON.stringify({ query, variables: variables ?? {} })
       });
+      return Ok5(res);
     } catch (err) {
-      return Err4(
-        new Error(
-          `Linear GraphQL request failed: ${err instanceof Error ? err.message : String(err)}`
-        )
-      );
-    }
-    if (!res.ok) {
-      const body = await res.text().catch(() => "");
-      const detail = body ? `: ${body.slice(0, 500)}` : "";
-      return Err4(new Error(`Linear GraphQL HTTP ${res.status}${detail}`));
+      return Err4(new Error(`Linear GraphQL request failed: ${errorMessage(err)}`));
     }
-    let envelope;
+  }
+  /** Build the error for a non-2xx HTTP response, including a truncated body. */
+  async httpError(res) {
+    const body = await res.text().catch(() => "");
+    const detail = body ? `: ${body.slice(0, 500)}` : "";
+    return new Error(`Linear GraphQL HTTP ${res.status}${detail}`);
+  }
+  /** Parse the JSON envelope, normalizing parse failures into an `Err`. */
+  async parseEnvelope(res) {
     try {
-      envelope = await res.json();
+      return Ok5(await res.json());
     } catch (err) {
-      return Err4(
-        new Error(
-          `Linear GraphQL response was not valid JSON: ${err instanceof Error ? err.message : String(err)}`
-        )
-      );
-    }
-    if (envelope.errors && envelope.errors.length > 0) {
-      const message = envelope.errors.map((e) => e.message ?? "unknown error").join("; ");
-      return Err4(new Error(`Linear GraphQL error: ${message}`));
+      return Err4(new Error(`Linear GraphQL response was not valid JSON: ${errorMessage(err)}`));
     }
-    return Ok5(envelope.data ?? {});
   }
 };
+function envelopeError(envelope) {
+  if (!envelope.errors || envelope.errors.length === 0) return void 0;
+  const message = envelope.errors.map((e) => e.message ?? "unknown error").join("; ");
+  return new Error(`Linear GraphQL error: ${message}`);
+}
 var LinearGraphQLStub = class {
   async query(query, _variables) {
     console.log("Linear GraphQL query (stub):", query);
@@ -4696,18 +4709,18 @@ var AnthropicBackend = class {
         usage
       };
     } catch (err) {
-      const errorMessage = err instanceof Error ? err.message : "Anthropic request failed";
+      const errorMessage2 = err instanceof Error ? err.message : "Anthropic request failed";
       yield {
         type: "error",
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        content: errorMessage,
+        content: errorMessage2,
         sessionId: session.sessionId
       };
       return {
         success: false,
         sessionId: session.sessionId,
         usage: { inputTokens: 0, outputTokens: 0, totalTokens: 0 },
-        error: errorMessage
+        error: errorMessage2
       };
     }
   }
@@ -4801,18 +4814,18 @@ var OpenAIBackend = class {
         }
       }
     } catch (err) {
-      const errorMessage = err instanceof Error ? err.message : "OpenAI request failed";
+      const errorMessage2 = err instanceof Error ? err.message : "OpenAI request failed";
       yield {
         type: "error",
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        content: errorMessage,
+        content: errorMessage2,
         sessionId: session.sessionId
       };
       return {
         success: false,
         sessionId: session.sessionId,
         usage: { inputTokens: 0, outputTokens: 0, totalTokens: 0 },
-        error: errorMessage
+        error: errorMessage2
       };
     }
     const usage = {
@@ -4926,11 +4939,11 @@ var GeminiBackend = class {
         }
       }
     } catch (err) {
-      const errorMessage = err instanceof Error ? err.message : "Gemini request failed";
+      const errorMessage2 = err instanceof Error ? err.message : "Gemini request failed";
       yield {
         type: "error",
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        content: errorMessage,
+        content: errorMessage2,
         sessionId: session.sessionId
       };
       return {
@@ -4943,7 +4956,7 @@ var GeminiBackend = class {
           cacheCreationTokens,
           cacheReadTokens
         },
-        error: errorMessage
+        error: errorMessage2
       };
     }
     const usage = {
@@ -5072,18 +5085,18 @@ var LocalBackend = class {
         }
       }
     } catch (err) {
-      const errorMessage = err instanceof Error ? err.message : "Local backend request failed";
+      const errorMessage2 = err instanceof Error ? err.message : "Local backend request failed";
       yield {
         type: "error",
         timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-        content: errorMessage,
+        content: errorMessage2,
         sessionId: session.sessionId
       };
       return {
         success: false,
         sessionId: session.sessionId,
         usage: { inputTokens: 0, outputTokens: 0, totalTokens: 0 },
-        error: errorMessage
+        error: errorMessage2
       };
     }
     const usage = { inputTokens, outputTokens, totalTokens };
@@ -5425,30 +5438,8 @@ var SshBackend = class {
   config;
   spawnImpl;
   constructor(config) {
-    if (!config.host || typeof config.host !== "string") {
-      throw new Error("SshBackend: `host` is required");
-    }
-    if (FORBIDDEN_HOST_CHARS.test(config.host) || config.host.startsWith("-")) {
-      throw new Error(
-        `SshBackend: invalid host '${config.host}' (contains shell metacharacters or starts with '-')`
-      );
-    }
-    if (!config.remoteCommand || typeof config.remoteCommand !== "string") {
-      throw new Error("SshBackend: `remoteCommand` is required");
-    }
-    if (config.user !== void 0 && /[\s;&|`$]/.test(config.user)) {
-      throw new Error(`SshBackend: invalid user '${config.user}'`);
-    }
-    this.config = {
-      host: config.host,
-      remoteCommand: config.remoteCommand,
-      sshBinary: config.sshBinary ?? "ssh",
-      sshOptions: config.sshOptions ?? [],
-      timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS2,
-      ...config.user !== void 0 ? { user: config.user } : {},
-      ...config.port !== void 0 ? { port: config.port } : {},
-      ...config.identityFile !== void 0 ? { identityFile: config.identityFile } : {}
-    };
+    validateSshConfig(config);
+    this.config = normalizeSshConfig(config);
     this.spawnImpl = config.spawnImpl ?? spawn3;
   }
   /**
@@ -5600,6 +5591,34 @@ var SshBackend = class {
     });
   }
 };
+function validateSshConfig(config) {
+  if (!config.host || typeof config.host !== "string") {
+    throw new Error("SshBackend: `host` is required");
+  }
+  if (FORBIDDEN_HOST_CHARS.test(config.host) || config.host.startsWith("-")) {
+    throw new Error(
+      `SshBackend: invalid host '${config.host}' (contains shell metacharacters or starts with '-')`
+    );
+  }
+  if (!config.remoteCommand || typeof config.remoteCommand !== "string") {
+    throw new Error("SshBackend: `remoteCommand` is required");
+  }
+  if (config.user !== void 0 && /[\s;&|`$]/.test(config.user)) {
+    throw new Error(`SshBackend: invalid user '${config.user}'`);
+  }
+}
+function normalizeSshConfig(config) {
+  return {
+    host: config.host,
+    remoteCommand: config.remoteCommand,
+    sshBinary: config.sshBinary ?? "ssh",
+    sshOptions: config.sshOptions ?? [],
+    timeoutMs: config.timeoutMs ?? DEFAULT_TIMEOUT_MS2,
+    ...config.user !== void 0 ? { user: config.user } : {},
+    ...config.port !== void 0 ? { port: config.port } : {},
+    ...config.identityFile !== void 0 ? { identityFile: config.identityFile } : {}
+  };
+}
 function errResult(sessionId, message) {
   return {
     success: false,
@@ -5709,23 +5728,8 @@ var OciServerlessBackend = class extends ServerlessBackend {
   envSource;
   constructor(config) {
     super();
-    if (!config.image || typeof config.image !== "string") {
-      throw new Error("OciServerlessBackend: `image` is required");
-    }
-    if (FORBIDDEN_IMAGE_CHARS.test(config.image) || config.image.startsWith("-")) {
-      throw new Error(
-        `OciServerlessBackend: invalid image '${config.image}' (contains shell metacharacters or starts with '-')`
-      );
-    }
-    this.config = {
-      image: config.image,
-      pullPolicy: config.pullPolicy ?? "if-not-present",
-      runtime: config.runtime ?? "docker",
-      envPassthrough: config.envPassthrough ?? [],
-      timeoutMs: config.timeoutMs ?? DEFAULT_OCI_TIMEOUT_MS,
-      extraArgs: sanitizeExtraArgs(config.extraArgs),
-      ...config.registry !== void 0 ? { registry: config.registry } : {}
-    };
+    validateOciImage(config.image);
+    this.config = resolveOciConfig(config);
     this.spawnImpl = config.spawnImpl ?? spawn4;
     this.envSource = config.envSource ?? process.env;
   }
@@ -5888,6 +5892,27 @@ var OciServerlessBackend = class extends ServerlessBackend {
     });
   }
 };
+function validateOciImage(image) {
+  if (!image || typeof image !== "string") {
+    throw new Error("OciServerlessBackend: `image` is required");
+  }
+  if (FORBIDDEN_IMAGE_CHARS.test(image) || image.startsWith("-")) {
+    throw new Error(
+      `OciServerlessBackend: invalid image '${image}' (contains shell metacharacters or starts with '-')`
+    );
+  }
+}
+function resolveOciConfig(config) {
+  return {
+    image: config.image,
+    pullPolicy: config.pullPolicy ?? "if-not-present",
+    runtime: config.runtime ?? "docker",
+    envPassthrough: config.envPassthrough ?? [],
+    timeoutMs: config.timeoutMs ?? DEFAULT_OCI_TIMEOUT_MS,
+    extraArgs: sanitizeExtraArgs(config.extraArgs),
+    ...config.registry !== void 0 ? { registry: config.registry } : {}
+  };
+}
 function sanitizeExtraArgs(extraArgs) {
   if (!extraArgs) return [];
   return extraArgs.filter((arg) => !BLOCKED_DOCKER_FLAGS.some((flag) => arg.startsWith(flag)));
@@ -5959,78 +5984,96 @@ function makeGetModel(model) {
   if (Array.isArray(model) && model.length > 0) return () => model[0] ?? null;
   return () => null;
 }
+function createClaudeBackend(def, options) {
+  return new ClaudeBackend(def.command ?? "claude", {
+    ...options.cacheMetrics ? { cacheMetrics: options.cacheMetrics } : {}
+  });
+}
+function createAnthropicBackend(def) {
+  return new AnthropicBackend({
+    model: def.model,
+    ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {}
+  });
+}
+function createOpenAIBackend(def) {
+  return new OpenAIBackend({
+    model: def.model,
+    ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {}
+  });
+}
+function createGeminiBackend(def) {
+  return new GeminiBackend({
+    model: def.model,
+    ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {}
+  });
+}
+function createLocalBackend(def) {
+  const isArray = Array.isArray(def.model);
+  return new LocalBackend({
+    endpoint: def.endpoint,
+    ...typeof def.model === "string" ? { model: def.model } : {},
+    ...isArray ? { getModel: makeGetModel(def.model) } : {},
+    ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {},
+    ...def.timeoutMs !== void 0 ? { timeoutMs: def.timeoutMs } : {}
+  });
+}
+function createPiBackend(def) {
+  const isArray = Array.isArray(def.model);
+  return new PiBackend({
+    endpoint: def.endpoint,
+    ...typeof def.model === "string" ? { model: def.model } : {},
+    ...isArray ? { getModel: makeGetModel(def.model) } : {},
+    ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {},
+    ...def.timeoutMs !== void 0 ? { timeoutMs: def.timeoutMs } : {}
+  });
+}
+function createSshBackend(def) {
+  return new SshBackend({
+    host: def.host,
+    remoteCommand: def.remoteCommand,
+    ...def.user !== void 0 ? { user: def.user } : {},
+    ...def.port !== void 0 ? { port: def.port } : {},
+    ...def.identityFile !== void 0 ? { identityFile: def.identityFile } : {},
+    ...def.sshOptions !== void 0 ? { sshOptions: def.sshOptions } : {},
+    ...def.sshBinary !== void 0 ? { sshBinary: def.sshBinary } : {}
+  });
+}
+function createServerlessBackend(def) {
+  switch (def.adapter) {
+    case "oci":
+      return new OciServerlessBackend({
+        image: def.image,
+        ...def.registry !== void 0 ? { registry: def.registry } : {},
+        ...def.pullPolicy !== void 0 ? { pullPolicy: def.pullPolicy } : {},
+        ...def.envPassthrough !== void 0 ? { envPassthrough: def.envPassthrough } : {},
+        ...def.runtime !== void 0 ? { runtime: def.runtime } : {}
+      });
+    default: {
+      const exhaustive = def.adapter;
+      throw new Error(`createBackend: unknown serverless adapter ${JSON.stringify(exhaustive)}`);
+    }
+  }
+}
 function createBackend(def, options = {}) {
   switch (def.type) {
     case "mock":
       return new MockBackend();
     case "claude":
-      return new ClaudeBackend(def.command ?? "claude", {
-        ...options.cacheMetrics ? { cacheMetrics: options.cacheMetrics } : {}
-      });
+      return createClaudeBackend(def, options);
     case "anthropic":
-      return new AnthropicBackend({
-        model: def.model,
-        ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {}
-      });
+      return createAnthropicBackend(def);
     case "openai":
-      return new OpenAIBackend({
-        model: def.model,
-        ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {}
-      });
+      return createOpenAIBackend(def);
     case "gemini":
-      return new GeminiBackend({
-        model: def.model,
-        ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {}
-      });
-    case "local": {
-      const isArray = Array.isArray(def.model);
-      return new LocalBackend({
-        endpoint: def.endpoint,
-        ...typeof def.model === "string" ? { model: def.model } : {},
-        ...isArray ? { getModel: makeGetModel(def.model) } : {},
-        ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {},
-        ...def.timeoutMs !== void 0 ? { timeoutMs: def.timeoutMs } : {}
-      });
-    }
-    case "pi": {
-      const isArray = Array.isArray(def.model);
-      return new PiBackend({
-        endpoint: def.endpoint,
-        ...typeof def.model === "string" ? { model: def.model } : {},
-        ...isArray ? { getModel: makeGetModel(def.model) } : {},
-        ...def.apiKey !== void 0 ? { apiKey: def.apiKey } : {},
-        ...def.timeoutMs !== void 0 ? { timeoutMs: def.timeoutMs } : {}
-      });
-    }
-    case "ssh": {
-      return new SshBackend({
-        host: def.host,
-        remoteCommand: def.remoteCommand,
-        ...def.user !== void 0 ? { user: def.user } : {},
-        ...def.port !== void 0 ? { port: def.port } : {},
-        ...def.identityFile !== void 0 ? { identityFile: def.identityFile } : {},
-        ...def.sshOptions !== void 0 ? { sshOptions: def.sshOptions } : {},
-        ...def.sshBinary !== void 0 ? { sshBinary: def.sshBinary } : {}
-      });
-    }
-    case "serverless": {
-      switch (def.adapter) {
-        case "oci":
-          return new OciServerlessBackend({
-            image: def.image,
-            ...def.registry !== void 0 ? { registry: def.registry } : {},
-            ...def.pullPolicy !== void 0 ? { pullPolicy: def.pullPolicy } : {},
-            ...def.envPassthrough !== void 0 ? { envPassthrough: def.envPassthrough } : {},
-            ...def.runtime !== void 0 ? { runtime: def.runtime } : {}
-          });
-        default: {
-          const exhaustive = def.adapter;
-          throw new Error(
-            `createBackend: unknown serverless adapter ${JSON.stringify(exhaustive)}`
-          );
-        }
-      }
-    }
+      return createGeminiBackend(def);
+    case "local":
+      return createLocalBackend(def);
+    case "pi":
+      return createPiBackend(def);
+    case "ssh":
+      return createSshBackend(def);
+    case "serverless":
+      return createServerlessBackend(def);
     default: {
       const exhaustive = def;
       throw new Error(`createBackend: unknown backend type ${JSON.stringify(exhaustive)}`);
@@ -9618,26 +9661,41 @@ function hasScope(held, required) {
   if (held.includes("admin")) return true;
   return held.includes(required);
 }
-function requiredScopeForRoute(method, path24) {
-  const bridgeScope = requiredBridgeScope(method, path24);
-  if (bridgeScope) return bridgeScope;
+function exactScopeForRoute(method, path24) {
   if (path24 === "/api/v1/auth/token" && method === "POST") return "admin";
   if (path24 === "/api/v1/auth/tokens" && method === "GET") return "admin";
   if (/^\/api\/v1\/auth\/tokens\/[^/]+$/.test(path24) && method === "DELETE") return "admin";
   if ((path24 === "/api/state" || path24 === "/api/v1/state") && method === "GET") return "read-status";
-  if (path24.startsWith("/api/interactions")) return "resolve-interaction";
-  if (path24.startsWith("/api/plans")) return "read-status";
-  if (path24.startsWith("/api/analyze") || path24.startsWith("/api/analyses")) return "read-status";
-  if (path24.startsWith("/api/roadmap-actions")) return "modify-roadmap";
-  if (path24.startsWith("/api/dispatch-actions")) return "trigger-job";
-  if (path24.startsWith("/api/local-model") || path24.startsWith("/api/local-models"))
-    return "read-status";
-  if (path24.startsWith("/api/maintenance")) return "trigger-job";
-  if (path24.startsWith("/api/streams")) return "read-status";
-  if (path24.startsWith("/api/sessions")) return "read-status";
-  if (path24 === "/api/chat" || path24.startsWith("/api/chat-proxy")) return "trigger-job";
   return null;
 }
+var PREFIX_SCOPES = [
+  ["/api/interactions", "resolve-interaction"],
+  ["/api/plans", "read-status"],
+  ["/api/analyze", "read-status"],
+  ["/api/analyses", "read-status"],
+  ["/api/roadmap-actions", "modify-roadmap"],
+  ["/api/dispatch-actions", "trigger-job"],
+  ["/api/local-model", "read-status"],
+  ["/api/local-models", "read-status"],
+  ["/api/maintenance", "trigger-job"],
+  ["/api/streams", "read-status"],
+  ["/api/sessions", "read-status"],
+  ["/api/chat-proxy", "trigger-job"]
+];
+function prefixScopeForPath(path24) {
+  if (path24 === "/api/chat") return "trigger-job";
+  for (const [prefix, scope] of PREFIX_SCOPES) {
+    if (path24.startsWith(prefix)) return scope;
+  }
+  return null;
+}
+function requiredScopeForRoute(method, path24) {
+  const bridgeScope = requiredBridgeScope(method, path24);
+  if (bridgeScope) return bridgeScope;
+  const exactScope = exactScopeForRoute(method, path24);
+  if (exactScope) return exactScope;
+  return prefixScopeForPath(path24);
+}
 
 // src/server/http.ts
 var RATE_LIMIT = Number(process.env["HARNESS_RATE_LIMIT"]) || 100;
@@ -10596,79 +10654,102 @@ function buildAttributes(payload, extras = {}) {
   }
   return attrs;
 }
+function extractIds(payload) {
+  const correlationId = typeof payload["correlationId"] === "string" ? payload["correlationId"] : void 0;
+  const taskId = typeof payload["taskId"] === "string" ? payload["taskId"] : void 0;
+  return { correlationId, taskId };
+}
+function resolveActiveRun(registry, correlationId, taskId) {
+  return registry.resolve({
+    ...correlationId !== void 0 ? { correlationId } : {},
+    ...taskId !== void 0 ? { taskId } : {}
+  });
+}
+function openMaintenanceSpan(registry, correlationId, taskId) {
+  const traceId = newTraceId();
+  const spanId = newSpanId();
+  const key = correlationId ?? taskId ?? `run_${spanId}`;
+  registry.open(key, { traceId, spanId });
+  return { traceId, spanId };
+}
+function closeMaintenanceSpan(registry, topic, correlationId, taskId) {
+  const existing = resolveActiveRun(registry, correlationId, taskId);
+  const traceId = existing?.traceId ?? newTraceId();
+  const spanId = existing?.spanId ?? newSpanId();
+  const statusCode = topic === TOPICS.MAINTENANCE_ERROR ? 2 : 1;
+  const key = correlationId ?? taskId ?? "";
+  if (key) registry.close(key);
+  return { traceId, spanId, statusCode };
+}
+function childSpan(registry, correlationId, taskId) {
+  const parent = resolveActiveRun(registry, correlationId, taskId);
+  const plan = {
+    traceId: parent?.traceId ?? newTraceId(),
+    spanId: newSpanId()
+  };
+  if (parent?.spanId !== void 0) plan.parentSpanId = parent.spanId;
+  return plan;
+}
+function planSpan(registry, topic, correlationId, taskId) {
+  if (topic === TOPICS.MAINTENANCE_STARTED) {
+    return openMaintenanceSpan(registry, correlationId, taskId);
+  }
+  if (topic === TOPICS.MAINTENANCE_COMPLETED || topic === TOPICS.MAINTENANCE_ERROR) {
+    return closeMaintenanceSpan(registry, topic, correlationId, taskId);
+  }
+  return childSpan(registry, correlationId, taskId);
+}
+function buildSpan(topic, plan, payload) {
+  const startNs = nowNs();
+  return {
+    traceId: plan.traceId,
+    spanId: plan.spanId,
+    ...plan.parentSpanId !== void 0 ? { parentSpanId: plan.parentSpanId } : {},
+    name: SPAN_NAME[topic],
+    kind: SpanKind.INTERNAL,
+    startTimeNs: startNs,
+    endTimeNs: startNs,
+    attributes: buildAttributes(payload, { "harness.topic": topic }),
+    ...plan.statusCode !== void 0 ? { statusCode: plan.statusCode } : {}
+  };
+}
+function buildGatewayEvent(topic, payload, correlationId) {
+  return {
+    id: newEventId2(),
+    type: TELEMETRY_TYPE[topic],
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    data: payload,
+    ...correlationId !== void 0 ? { correlationId } : {}
+  };
+}
+async function enqueueToMatchingSubs(store, webhookDelivery, event) {
+  const subs = await store.listForEvent(event.type);
+  if (subs.length === 0) return;
+  const filtered = subs.filter((sub) => sub.events.some((p) => eventMatches(p, event.type)));
+  for (const sub of filtered) {
+    webhookDelivery.enqueue(sub, event);
+  }
+}
+function makeTelemetryHandler(ctx, topic) {
+  return (data) => {
+    const payload = data ?? {};
+    const { correlationId, taskId } = extractIds(payload);
+    const plan = planSpan(ctx.registry, topic, correlationId, taskId);
+    ctx.exporter.push(buildSpan(topic, plan, payload));
+    void enqueueToMatchingSubs(
+      ctx.store,
+      ctx.webhookDelivery,
+      buildGatewayEvent(topic, payload, correlationId)
+    );
+  };
+}
 function wireTelemetryFanout(params) {
   const { bus, exporter, webhookDelivery, store } = params;
   const registry = new ActiveRunRegistry();
   const handlers = [];
-  const enqueueToMatchingSubs = async (event) => {
-    const subs = await store.listForEvent(event.type);
-    if (subs.length === 0) return;
-    const filtered = subs.filter((sub) => sub.events.some((p) => eventMatches(p, event.type)));
-    for (const sub of filtered) {
-      webhookDelivery.enqueue(sub, event);
-    }
-  };
-  const makeHandler = (topic) => (data) => {
-    const payload = data ?? {};
-    const correlationId = typeof payload["correlationId"] === "string" ? payload["correlationId"] : void 0;
-    const taskId = typeof payload["taskId"] === "string" ? payload["taskId"] : void 0;
-    let traceId;
-    let spanId;
-    let parentSpanId;
-    let statusCode;
-    if (topic === TOPICS.MAINTENANCE_STARTED) {
-      traceId = newTraceId();
-      spanId = newSpanId();
-      const key = correlationId ?? taskId ?? `run_${spanId}`;
-      registry.open(key, { traceId, spanId });
-    } else if (topic === TOPICS.MAINTENANCE_COMPLETED || topic === TOPICS.MAINTENANCE_ERROR) {
-      const existing = registry.resolve({
-        ...correlationId !== void 0 ? { correlationId } : {},
-        ...taskId !== void 0 ? { taskId } : {}
-      });
-      if (existing !== void 0) {
-        traceId = existing.traceId;
-        spanId = existing.spanId;
-      } else {
-        traceId = newTraceId();
-        spanId = newSpanId();
-      }
-      statusCode = topic === TOPICS.MAINTENANCE_ERROR ? 2 : 1;
-      const key = correlationId ?? taskId ?? "";
-      if (key) registry.close(key);
-    } else {
-      const parent = registry.resolve({
-        ...correlationId !== void 0 ? { correlationId } : {},
-        ...taskId !== void 0 ? { taskId } : {}
-      });
-      traceId = parent?.traceId ?? newTraceId();
-      spanId = newSpanId();
-      parentSpanId = parent?.spanId;
-    }
-    const startNs = nowNs();
-    const span = {
-      traceId,
-      spanId,
-      ...parentSpanId !== void 0 ? { parentSpanId } : {},
-      name: SPAN_NAME[topic],
-      kind: SpanKind.INTERNAL,
-      startTimeNs: startNs,
-      endTimeNs: startNs,
-      attributes: buildAttributes(payload, { "harness.topic": topic }),
-      ...statusCode !== void 0 ? { statusCode } : {}
-    };
-    exporter.push(span);
-    const gatewayEvent = {
-      id: newEventId2(),
-      type: TELEMETRY_TYPE[topic],
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      data: payload,
-      ...correlationId !== void 0 ? { correlationId } : {}
-    };
-    void enqueueToMatchingSubs(gatewayEvent);
-  };
+  const ctx = { registry, exporter, webhookDelivery, store };
   for (const topic of Object.values(TOPICS)) {
-    const fn = makeHandler(topic);
+    const fn = makeTelemetryHandler(ctx, topic);
     bus.on(topic, fn);
     handlers.push({ topic, fn });
   }
@@ -12371,39 +12452,50 @@ function classifyCheckExecutionFailure(output) {
 function parseStatusLine(output) {
   const lines = output.split("\n").map((l) => l.trim()).filter(Boolean);
   for (let i = lines.length - 1; i >= 0; i--) {
-    const line = lines[i];
-    if (!line || !line.startsWith("{") || !line.endsWith("}")) continue;
-    try {
-      const obj = JSON.parse(line);
-      const s = obj.status;
-      if (s === "success" || s === "skipped" || s === "failure" || s === "no-issues") {
-        const parsed = { status: s, rawStatus: s };
-        if (typeof obj.candidatesFound === "number") {
-          parsed.candidatesFound = obj.candidatesFound;
-        }
-        if (typeof obj.error === "string") {
-          parsed.error = obj.error;
-        }
-        if (typeof obj.reason === "string") {
-          parsed.reason = obj.reason;
-        }
-        if (typeof obj.detail === "string" && !parsed.error) {
-          parsed.error = `${parsed.reason ?? "skipped"}: ${obj.detail}`;
-        }
-        return parsed;
-      }
-      if (s === "updated" || s === "no-op") {
-        return { status: "success", rawStatus: s };
-      }
-      if (s === "error") {
-        const message = typeof obj.message === "string" ? obj.message : "unknown error";
-        return { status: "failure", error: message, rawStatus: "error" };
-      }
-    } catch {
-    }
+    const parsed = parseStatusObjectLine(lines[i]);
+    if (parsed) return parsed;
   }
   return null;
 }
+function parseStatusObjectLine(line) {
+  if (!line || !line.startsWith("{") || !line.endsWith("}")) return null;
+  let obj;
+  try {
+    obj = JSON.parse(line);
+  } catch {
+    return null;
+  }
+  return classifyStatusObject(obj);
+}
+var PHASE_STATUSES = /* @__PURE__ */ new Set(["success", "skipped", "failure", "no-issues"]);
+var SYNC_SUCCESS_STATUSES = /* @__PURE__ */ new Set(["updated", "no-op"]);
+function classifyStatusObject(obj) {
+  const s = obj.status;
+  if (typeof s !== "string") return null;
+  if (PHASE_STATUSES.has(s)) return buildPhaseStatus(s, obj);
+  if (SYNC_SUCCESS_STATUSES.has(s)) return { status: "success", rawStatus: s };
+  if (s === "error") {
+    const message = typeof obj.message === "string" ? obj.message : "unknown error";
+    return { status: "failure", error: message, rawStatus: "error" };
+  }
+  return null;
+}
+function buildPhaseStatus(status, obj) {
+  const parsed = { status, rawStatus: status };
+  if (typeof obj.candidatesFound === "number") {
+    parsed.candidatesFound = obj.candidatesFound;
+  }
+  if (typeof obj.error === "string") {
+    parsed.error = obj.error;
+  }
+  if (typeof obj.reason === "string") {
+    parsed.reason = obj.reason;
+  }
+  if (typeof obj.detail === "string" && !parsed.error) {
+    parsed.error = `${parsed.reason ?? "skipped"}: ${obj.detail}`;
+  }
+  return parsed;
+}
 
 // src/maintenance/check-script-runner.ts
 import { execFile as execFile6 } from "child_process";
@@ -13298,22 +13390,7 @@ var Orchestrator = class extends EventEmitter {
       });
       webhookDelivery.start();
       this.setupNotifications(config.notifications);
-      const otlpCfg = config.telemetry?.export?.otlp;
-      if (otlpCfg) {
-        this.otlpExporter = new OTLPExporter({
-          endpoint: otlpCfg.endpoint,
-          ...otlpCfg.enabled !== void 0 ? { enabled: otlpCfg.enabled } : {},
-          ...otlpCfg.headers !== void 0 ? { headers: otlpCfg.headers } : {},
-          ...otlpCfg.flushIntervalMs !== void 0 ? { flushIntervalMs: otlpCfg.flushIntervalMs } : {},
-          ...otlpCfg.batchSize !== void 0 ? { batchSize: otlpCfg.batchSize } : {}
-        });
-        this.telemetryFanoutOff = wireTelemetryFanout({
-          bus: this,
-          exporter: this.otlpExporter,
-          webhookDelivery,
-          store: webhookStore
-        });
-      }
+      this.setupTelemetryExport(config, webhookStore, webhookDelivery);
       this.server = new OrchestratorServer(this, config.server.port, {
         interactionQueue: this.interactionQueue,
         webhooks: {
@@ -13336,24 +13413,8 @@ var Orchestrator = class extends EventEmitter {
         analysisArchive: this.analysisArchive,
         roadmapPath: config.tracker.filePath ?? null,
         dispatchAdHoc: this.dispatchAdHoc.bind(this),
-        getLocalModelStatus: () => {
-          const first = this.localResolvers.values().next();
-          return first.done ? null : first.value.getStatus();
-        },
-        getLocalModelStatuses: () => {
-          const backends = this.config.agent.backends ?? {};
-          const out = [];
-          for (const [name, resolver] of this.localResolvers) {
-            const def = backends[name];
-            if (!def || def.type !== "local" && def.type !== "pi") continue;
-            out.push({
-              ...resolver.getStatus(),
-              backendName: name,
-              endpoint: def.endpoint
-            });
-          }
-          return out;
-        }
+        getLocalModelStatus: () => this.getFirstLocalModelStatus(),
+        getLocalModelStatuses: () => this.buildLocalModelStatuses()
       });
       this.server.setRecorder(this.recorder);
       this.interactionQueue.onPush((interaction) => {
@@ -13361,6 +13422,56 @@ var Orchestrator = class extends EventEmitter {
       });
     }
   }
+  /**
+   * Phase 5: construct the OTLP/HTTP trace exporter and wire telemetry fanout.
+   * Only fires when the operator configures `telemetry.export.otlp` in
+   * harness.config.json. Extracted from the server-init block in the
+   * constructor to keep that block's cyclomatic complexity under threshold.
+   */
+  setupTelemetryExport(config, webhookStore, webhookDelivery) {
+    const otlpCfg = config.telemetry?.export?.otlp;
+    if (!otlpCfg) return;
+    this.otlpExporter = new OTLPExporter({
+      endpoint: otlpCfg.endpoint,
+      ...otlpCfg.enabled !== void 0 ? { enabled: otlpCfg.enabled } : {},
+      ...otlpCfg.headers !== void 0 ? { headers: otlpCfg.headers } : {},
+      ...otlpCfg.flushIntervalMs !== void 0 ? { flushIntervalMs: otlpCfg.flushIntervalMs } : {},
+      ...otlpCfg.batchSize !== void 0 ? { batchSize: otlpCfg.batchSize } : {}
+    });
+    this.telemetryFanoutOff = wireTelemetryFanout({
+      bus: this,
+      exporter: this.otlpExporter,
+      webhookDelivery,
+      store: webhookStore
+    });
+  }
+  /**
+   * Deprecated alias for /api/v1/local-model/status (Spec 1 endpoint retained
+   * as a compat shim per spec line 35; superseded by getLocalModelStatuses for
+   * the multi-local UI). Returns the first-registered resolver's status.
+   */
+  getFirstLocalModelStatus() {
+    const first = this.localResolvers.values().next();
+    return first.done ? null : first.value.getStatus();
+  }
+  /**
+   * SC38: build NamedLocalModelStatus[] from each registered resolver, tagged
+   * with its backendName + endpoint from the config.
+   */
+  buildLocalModelStatuses() {
+    const backends = this.config.agent.backends ?? {};
+    const out = [];
+    for (const [name, resolver] of this.localResolvers) {
+      const def = backends[name];
+      if (!def || def.type !== "local" && def.type !== "pi") continue;
+      out.push({
+        ...resolver.getStatus(),
+        backendName: name,
+        endpoint: def.endpoint
+      });
+    }
+    return out;
+  }
   createTracker() {
     if (this.config.tracker.kind === "github-issues") {
       const trackerCfg = {