@inixiative/foundry-core 0.5.10 → 0.5.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inixiative/foundry-core",
-  "version": "0.5.10",
+  "version": "0.5.12",
   "type": "module",
   "main": "src/index.ts",
   "types": "src/index.ts",
@@ -33,7 +33,7 @@
     "bun": ">=1.4.4"
   },
   "peerDependencies": {
-    "@inixiative/archive": "^0.32.0"
+    "@inixiative/archive": "^0.33.0"
   },
   "peerDependenciesMeta": {
     "@inixiative/archive": {
@@ -41,6 +41,6 @@
     }
   },
   "devDependencies": {
-    "@inixiative/archive": "^0.32.0"
+    "@inixiative/archive": "^0.33.1"
   }
 }

package/src/adapters/markdown-docs.ts

@@ -293,7 +293,13 @@ export function secretInstructionPath(path: string, trusted: readonly string[] =
     name.startsWith('.') ||
     /^id_[a-z0-9]+/i.test(name) ||
     /\.(pem|key|p12|pfx|keystore|jks)$/i.test(name) ||
-    rest.split(sep).some((part) => CREDENTIAL_DIRECTORIES.has(part))
+    rest.split(sep).some((part) => CREDENTIAL_DIRECTORIES.has(part)) ||
+    // A `.private` path is never read (FEAT-005): a segment named or ending `.private`, or holding `.private.`.
+    path
+      .split(sep)
+      .some(
+        (part) => part === '.private' || part.endsWith('.private') || part.includes('.private.'),
+      )
   );
 }
 

package/src/adapters/markdown-hierarchy.ts

@@ -37,7 +37,7 @@ export interface HierarchyMatch {
   readonly owners?: readonly string[];
   /** The harness the composed prompt is for. */
   readonly harness?: readonly string[];
-  /** The role composed for (e.g. "main", a Warden's agent id). */
+  /** The role composed for (e.g. a thread role, a Warden's agent id), or one of its base roles. */
   readonly roles?: readonly string[];
   /** The slot composed (e.g. "instructions", "domainKnowledge"). */
   readonly slots?: readonly string[];
@@ -124,6 +124,11 @@ export interface HierarchyLocation {
   readonly harnessLoads?: readonly string[];
   /** The role composed for; also `{role}` in paths. */
   readonly role?: string;
+  /**
+   * Roles whose files come first: a source whose path names `{role}` is read once per base role, in
+   * order, then for `role` (e.g. a shared base role under each thread role).
+   */
+  readonly baseRoles?: readonly string[];
   /** The slot composed; also `{slot}` in paths. */
   readonly slot?: string;
   /**
@@ -221,7 +226,14 @@ function matches(when: HierarchyMatch | undefined, location: HierarchyLocation):
   if (when.projects && !(location.projectId && when.projects.includes(location.projectId)))
     return false;
   if (when.owners && !(location.owner && when.owners.includes(location.owner))) return false;
-  if (when.roles && !(location.role && when.roles.includes(location.role))) return false;
+  // A base role counts as the role it sits under (a node for `main` serves every thread role).
+  if (
+    when.roles &&
+    ![...(location.baseRoles ?? []), ...(location.role ? [location.role] : [])].some((role) =>
+      when.roles!.includes(role),
+    )
+  )
+    return false;
   if (when.slots && !(location.slot && when.slots.includes(location.slot))) return false;
   if (when.paths && !matchedPath(when.paths, location)) return false;
   return true;
@@ -480,6 +492,22 @@ export async function discoverHierarchy(
   ) => {
     if (!matches(source.when, location) || (source.id && loadedNatively.has(source.id))) return;
     if (!slotted && !source.when?.slots && !unslottedApplies(entry.node, location)) return;
+    const templates = typeof source.path === 'string' ? [source.path] : source.path;
+    const roles =
+      location.baseRoles?.length && templates.some((path) => path.includes('{role}'))
+        ? [...new Set([...location.baseRoles, ...(location.role ? [location.role] : [])])]
+        : undefined;
+    for (const pass of roles ? roles.map((role) => ({ ...vars, role })) : [vars])
+      await collect(entry, source, position, base, pass);
+  };
+
+  const collect = async (
+    entry: SelectedHierarchyNode,
+    source: HierarchyFileSource,
+    position: number,
+    base: string | undefined,
+    vars: Readonly<Record<string, string | undefined>>,
+  ) => {
     const place = (path: string) => (isAbsolute(path) ? path : base ? join(base, path) : undefined);
     const literal = (template: string) => {
       const expanded = expandHierarchyPath(template, vars, location.home);

package/src/event-stream.ts

@@ -42,7 +42,31 @@ export type StreamEvent =
       message: string;
       severity: 'error' | 'warn';
       timestamp: number;
-    };
+    }
+  | ({ kind: 'activity'; timestamp: number } & SystemActivity);
+
+export type ActivityEvent = Extract<StreamEvent, { kind: 'activity' }>;
+
+/**
+ * What the system is doing around a thread, not in it (Aron, 2026-11-11): a project's Wardens
+ * starting, a decision process restarting, a rate limit. The viewer keeps the latest per `key`
+ * and shows it above the composer; `error` events stay for what failed and needs the person.
+ */
+export interface SystemActivity {
+  /** One thing that changes over time ("project-wardens:<projectId>"); a later event replaces it. */
+  readonly key: string;
+  readonly source: string;
+  /** The project it concerns; absent when it touches every thread (a login's rate limit). */
+  readonly projectId?: string;
+  /** `idle` is kept for the log only; the others show, in the status colours. */
+  readonly state: 'working' | 'ready' | 'degraded' | 'failed' | 'idle';
+  /** Shown until then unless a later event of the same key replaces it (a rate limit's end). */
+  readonly until?: number;
+  /** One plain sentence for the person. */
+  readonly summary: string;
+  /** The technical line, for the expanded log. */
+  readonly detail: string;
+}
 
 /**
  * Unified event stream across all threads and sessions.
@@ -56,6 +80,8 @@ export type StreamEvent =
 export class EventStream {
   private _listeners: Array<(event: StreamEvent) => void> = [];
   private _history: StreamEvent[] = [];
+  /** The latest activity of each key, kept past the history bound: a failure stays until it clears. */
+  private _activities = new Map<string, ActivityEvent>();
   private _maxHistory: number;
 
   constructor(maxHistory: number = 5000) {
@@ -64,6 +90,10 @@ export class EventStream {
 
   /** Push an event into the stream. */
   push(event: StreamEvent): void {
+    if (event.kind === 'activity') {
+      this._activities.delete(event.key);
+      this._activities.set(event.key, event);
+    }
     this._history.push(event);
     if (this._history.length > this._maxHistory) {
       this._history.shift();
@@ -117,8 +147,19 @@ export class EventStream {
     this.push({ kind: 'error', source, message, severity, timestamp: Date.now() });
   }
 
+  /** Push what the system is doing (shown above the composer, never as a toast). */
+  pushActivity(activity: SystemActivity): void {
+    this.push({ kind: 'activity', ...activity, timestamp: Date.now() });
+  }
+
+  /** The latest activity of every key, oldest first. */
+  activities(): ActivityEvent[] {
+    return [...this._activities.values()];
+  }
+
   /** Clear history. */
   clear(): void {
     this._history = [];
+    this._activities.clear();
   }
 }

package/src/feedback/correction.ts

@@ -221,7 +221,11 @@ export function extractCorrections(
   return { corrections, secretsScrubbed };
 }
 
-const SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]> = [
+/**
+ * Credentials by their own shape (a provider's token prefix, a key block): specific enough that a
+ * match is a secret. Foundry lifts these from a message even when the person forgot `$$` (FEAT-005).
+ */
+const SHAPED_SECRETS: ReadonlyArray<readonly [RegExp, string]> = [
   [/sk-ant-[A-Za-z0-9_-]{20,}/g, '[REDACTED:anthropic-key]'],
   [/sk-[A-Za-z0-9_-]{20,}/g, '[REDACTED:api-key]'],
   [/gh[pousr]_[A-Za-z0-9]{20,}/g, '[REDACTED:github-token]'],
@@ -245,6 +249,10 @@ const SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]> = [
   ],
   [/hooks\.slack\.com\/services\/[A-Za-z0-9/]+/g, '[REDACTED:slack-webhook]'],
   [/\bASIA[A-Z0-9]{16}/g, '[REDACTED:aws-key]'],
+];
+
+/** Credentials by context (an assignment, a header, a URL): a match may be a secret, so it is scrubbed but never lifted. */
+const CONTEXT_SECRETS: ReadonlyArray<readonly [RegExp, string]> = [
   [/\b(Bearer|Basic|DPoP)\s+[A-Za-z0-9._~+/=-]{16,}/g, '$1 [REDACTED:credential]'],
   [/\b([a-z][a-z0-9+.-]*:\/\/[^\s:/@]+:)[^\s@/]+@/gi, '$1[REDACTED:password]@'],
   [
@@ -257,6 +265,32 @@ const SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]> = [
   ],
 ];
 
+const SECRET_PATTERNS: ReadonlyArray<readonly [RegExp, string]> = [
+  ...SHAPED_SECRETS,
+  ...CONTEXT_SECRETS,
+];
+
+/**
+ * The shaped credentials safe to lift from a message the person forgot to mark: each never starts
+ * inside a word (`task-runner-…` holds `sk-…`), and the two loosest shapes (`sk-…` and
+ * `<word>_live_<…>`, which long hyphenated or snake_case names also fit) must carry a digit. Fresh
+ * regex objects, so lifting never shares match state with `scrubSecrets`. Scrubbing a false match is
+ * harmless; lifting one would take words out of the person's message.
+ */
+export const SHAPED_SECRET_PATTERNS: readonly RegExp[] = SHAPED_SECRETS.map(([pattern]) => {
+  const loose =
+    pattern.source.startsWith('sk-[') || pattern.source.includes('(?:live|test|prod|runtime)');
+  const digit = loose ? '(?=[A-Za-z0-9_-]*\\d)' : '';
+  return new RegExp(`(?<![A-Za-z0-9_-])${digit}(?:${pattern.source})`, pattern.flags);
+});
+
+/** How many credentials known only by context (`PASSWORD=…`, `Bearer …`, a URL password) the text holds. */
+export function contextSecretHits(text: string): number {
+  let hits = 0;
+  for (const [pattern] of CONTEXT_SECRETS) hits += [...text.matchAll(pattern)].length;
+  return hits;
+}
+
 /** Replace credential-shaped substrings. Transcripts are exactly where leaked keys live. */
 export function scrubSecrets(text: string): { text: string; hits: number } {
   let hits = 0;

package/src/index.ts

@@ -166,7 +166,13 @@ export {
   verifyExpertDelivery,
 } from './delivery-evidence';
 // Observability
-export { EventStream, type SessionEvent, type StreamEvent } from './event-stream';
+export {
+  type ActivityEvent,
+  EventStream,
+  type SessionEvent,
+  type StreamEvent,
+  type SystemActivity,
+} from './event-stream';
 export {
   type ExecuteHandler,
   type ExecuteMeta,
@@ -186,6 +192,7 @@ export {
   type CorrectionDetection,
   type CorrectionEvent,
   type CorrectionSignal,
+  contextSecretHits,
   correctionClassifyMessages,
   correctionId,
   detectCorrection,
@@ -194,6 +201,7 @@ export {
   type FeedbackTag,
   parseCorrectionClassifications,
   proseOf,
+  SHAPED_SECRET_PATTERNS,
   scrubSecrets,
   type TranscriptTurn,
 } from './feedback/correction';
@@ -423,7 +431,6 @@ export {
   type ThreadPlan,
   type ThreadPlanItem,
   type ThreadReference,
-  type ThreadSetup,
   type ThreadSnooze,
   type ThreadSpawn,
   type ThreadStatus,

package/src/model-registry.ts

@@ -245,7 +245,7 @@ export interface ModelSweepOption {
   label: string;
 }
 
-export const MODEL_REGISTRY_UPDATED_AT = '2026-09-24';
+export const MODEL_REGISTRY_UPDATED_AT = '2026-11-11';
 
 /**
  * Decision default: Claude Haiku 5.5, the cheapest current Claude model tagged `judgment`. Held here
@@ -292,7 +292,7 @@ export const MODEL_REGISTRY: Record<string, FoundryProviderInfo> = {
     models: [
       {
         id: 'fable',
-        label: 'Fable 5.1',
+        label: 'Fable 5.2',
         tier: 'powerful',
         costTier: 'high',
         contextWindow: 1_000_000,
@@ -301,7 +301,7 @@ export const MODEL_REGISTRY: Record<string, FoundryProviderInfo> = {
         nativeAlias: true,
         capabilities: POWERFUL_REASONING,
         reasoning: CLAUDE_REASONING,
-        notes: 'Claude Code alias for claude-fable-5-1.',
+        notes: 'Claude Code alias for claude-fable-5-2.',
       },
       {
         id: 'opus',
@@ -348,6 +348,17 @@ export const MODEL_REGISTRY: Record<string, FoundryProviderInfo> = {
         capabilities: POWERFUL_REASONING,
         reasoning: CLAUDE_REASONING,
       },
+      {
+        id: 'claude-fable-5-2',
+        label: 'Fable 5.2',
+        tier: 'powerful',
+        costTier: 'high',
+        contextWindow: 1_000_000,
+        maxOutputTokens: 128_000,
+        runtimeKind: 'native-harness',
+        capabilities: POWERFUL_REASONING,
+        reasoning: CLAUDE_REASONING,
+      },
       {
         id: 'claude-fable-5-1',
         label: 'Fable 5.1',
@@ -382,6 +393,18 @@ export const MODEL_REGISTRY: Record<string, FoundryProviderInfo> = {
     credential: 'api-key',
     enabledByDefault: true,
     models: [
+      {
+        id: 'claude-fable-5-2',
+        label: 'Claude Fable 5.2',
+        tier: 'powerful',
+        costTier: 'high',
+        contextWindow: 1_000_000,
+        maxOutputTokens: 128_000,
+        runtimeKind: 'api',
+        capabilities: POWERFUL_REASONING,
+        reasoning: CLAUDE_REASONING,
+        notes: 'Thinking is always on; steer with effort.',
+      },
       {
         id: 'claude-fable-5-1',
         label: 'Claude Fable 5.1',
@@ -416,6 +439,17 @@ export const MODEL_REGISTRY: Record<string, FoundryProviderInfo> = {
         capabilities: POWERFUL_REASONING,
         reasoning: CLAUDE_REASONING,
       },
+      {
+        id: 'claude-sonnet-5-5',
+        label: 'Claude Sonnet 5.5',
+        tier: 'standard',
+        costTier: 'medium',
+        contextWindow: 1_000_000,
+        maxOutputTokens: 128_000,
+        runtimeKind: 'api',
+        capabilities: STANDARD_REASONING,
+        reasoning: CLAUDE_REASONING,
+      },
       {
         id: 'claude-sonnet-5',
         label: 'Claude Sonnet 5',

package/src/scope.ts

@@ -16,6 +16,10 @@ export interface OwnershipScope {
   readonly projectId?: string;
   /** Where the thread's native session runs. Not ownership: sources that read the workspace resolve against it. */
   readonly cwd?: string;
+  /** The thread role it composes as; absent: its worker's default. Not ownership. */
+  readonly role?: string;
+  /** The worker running its main session. Not ownership. */
+  readonly worker?: string;
 }
 
 /** Copy a scope, dropping undefined fields so equality checks are stable. */

package/src/thread.ts

@@ -276,18 +276,15 @@ export interface ThreadMeta {
   /** 1 for a child of a main thread. */
   depth?: number;
 
-  /**
-   * Start-up of a thread whose Wardens are held in its own process (docs/THREAD-TREE.md spec C):
-   * turns typed meanwhile wait as `queued` until it is `ready` (or `degraded`).
-   */
-  setup?: ThreadSetup;
-
   /** Project that owns this thread. Scopes memory sources and tool calls. */
   projectId?: string;
 
   /** The harness running this thread's main session (`claude-code`, `codex`). Set at creation; never changed silently. */
   worker?: string;
 
+  /** The thread role its instructions compose as (`coder`, `assistant`, …). Absent: its worker's default role. */
+  role?: string;
+
   /** When this thread was created. */
   readonly createdAt: number;
 
@@ -298,15 +295,6 @@ export interface ThreadMeta {
   archivedAt?: number;
 }
 
-export interface ThreadSetup {
-  status: 'starting' | 'ready' | 'degraded';
-  startedAt: number;
-  readyAt?: number;
-  /** Every configured Warden, those holding a spare, and those that did not by the deadline. */
-  wardens: { expected: number; held: number; failed: string[] };
-  runtime: 'claude-in-session' | 'codex-in-process' | 'side-session';
-}
-
 export interface Dispatch<T = unknown> {
   readonly agentId: string;
   readonly timestamp: number;
@@ -403,6 +391,8 @@ export interface ThreadConfig {
   projectId?: string;
   /** The harness running this thread's main session. */
   worker?: string;
+  /** The thread role its instructions compose as. */
+  role?: string;
   /** Optional token tracker — auto-records costs for every dispatch. */
   tokenTracker?: TokenTracker;
 }
@@ -456,6 +446,7 @@ export class Thread {
       ...(opts?.forkedFrom ? { forkedFrom: opts.forkedFrom } : {}),
       projectId: opts?.projectId,
       ...(opts?.worker ? { worker: opts.worker } : {}),
+      ...(opts?.role ? { role: opts.role } : {}),
       createdAt: now,
       lastActiveAt: now,
     };

package/src/token-tracker.ts

@@ -219,18 +219,19 @@ export interface UsageSummary {
 
 // ---------------------------------------------------------------------------
 // Default cost table. Anthropic: first-party API list prices per 1M tokens, as published at
-// https://platform.claude.com/docs/en/about-claude/pricing (read 2026-11-01; cache writes are the
+// https://platform.claude.com/docs/en/about-claude/pricing (read 2026-11-11; cache writes are the
 // 5-minute rate, 1.25x input). Haiku 5.5 is its rate up to 100K-token prompts.
 // ---------------------------------------------------------------------------
 
 export const DEFAULT_COST_TABLE: CostTable = {
   anthropic: {
+    'claude-fable-5-2': { inputPer1M: 8, outputPer1M: 40, cacheReadPer1M: 0.2 },
     'claude-fable-5-1': { inputPer1M: 10, outputPer1M: 50, cacheReadPer1M: 0.25 },
     'claude-fable-5': { inputPer1M: 10, outputPer1M: 50 },
     'claude-opus-5-5': { inputPer1M: 4, outputPer1M: 20, cacheReadPer1M: 0.2 },
     'claude-opus-5': { inputPer1M: 5, outputPer1M: 25 },
     'claude-opus-4-8': { inputPer1M: 5, outputPer1M: 25 },
-    'claude-sonnet-5-5': { inputPer1M: 2, outputPer1M: 10, cacheReadPer1M: 0.2 },
+    'claude-sonnet-5-5': { inputPer1M: 2, outputPer1M: 10, cacheReadPer1M: 0.1 },
     'claude-sonnet-5': { inputPer1M: 2, outputPer1M: 10 },
     'claude-haiku-5-5': { inputPer1M: 0.1, outputPer1M: 0.5 },
     'claude-haiku-4-5': { inputPer1M: 1, outputPer1M: 5 },

package/src/types.ts

@@ -217,8 +217,6 @@ export interface LLMProvider {
    * `threadPrefix` starts at once. `messages` end at those prefixes; no decision is made. Optional.
    */
   prestart?(messages: LLMMessage[], opts: CompletionOpts): void;
-  /** A thread closed: release whatever the provider holds for it. Optional. */
-  releaseThread?(threadId: string): Promise<void>;
 }
 
 export interface EmbeddingProvider {