@jmanuelcorral/openteam 0.2.1 → 0.9.0

package/dist/orchestrator/graphShadow.d.ts

@@ -3,63 +3,62 @@ import type { GraphState } from "../graph/types";
 import type { LegacyExecutionTraceV1 } from "../plugin/graphShadowIngress";
 import type { ShadowRunSummary } from "./shadowComparator";
 /**
- * **Espejo shadow sin efectos** (GE-043): compila el trace productivo de
- * GE-042 a un `GraphSpecV1` validado, sintetiza el journal que ese run habría
- * escrito y lo pliega con el **reducer real** para producir el
- * `ShadowRunSummary` que consume el comparador de paridad (GE-044).
+ * **Side-effect-free shadow mirror** (GE-043): compiles the production trace
+ * from GE-042 into a validated `GraphSpecV1`, synthesizes the journal that run
+ * would have written, and folds it with the **real reducer** to produce the
+ * `ShadowRunSummary` consumed by the parity comparator (GE-044).
  *
- * El run legacy se ejecuta **una sola vez**: este módulo no tiene superficie de
- * ejecución. No importa el puerto `GraphEffectExecutor`, ni el adaptador de
- * sesión de opencode, ni el runtime, ni ningún origen de I/O, reloj o azar; el
- * único builtin alcanzable es `node:crypto` para el cómputo de digests. Por eso
- * el espejo no puede duplicar el trabajo que observa: no tiene con qué.
+ * The legacy run executes **exactly once**: this module has no execution
+ * surface. It imports neither the `GraphEffectExecutor` port, nor the opencode
+ * session adapter, nor the runtime, nor any I/O, clock, or random source; the
+ * only reachable builtin is `node:crypto` for digest computation. Therefore the
+ * mirror cannot duplicate the work it observes: it has no means to do so.
  *
- * **Qué prueba realmente cada dimensión de paridad** está declarado en
- * `SHADOW_MIRROR_PROVENANCE`, y esa distinción es deliberada: certificar
- * paridad sobre dimensiones que el espejo se limita a copiar del trace no
- * probaría nada. Solo el nº de fixes se **recomputa** desde el grafo compilado
- * (divergencia demostrable); el orden de nodos y los roles pasan por el
- * compilador y validador del spec —que rechaza traces irrepresentables como
- * `invalid-spec`— pero la compilación preserva ambos valores literalmente, así
- * que la comparación no puede divergir (**compiled**); el estado terminal lo
- * **valida** el reducer; el modelo y el outcome se **transportan** sin
- * inspección.
+ * **What each parity dimension actually proves** is declared in
+ * `SHADOW_MIRROR_PROVENANCE`, and that distinction is deliberate: certifying
+ * parity on dimensions that the mirror merely copies from the trace would prove
+ * nothing. Only the number of fixes is **recomputed** from the compiled graph
+ * (demonstrable divergence); node order and roles pass through the spec
+ * compiler and validator —which rejects unrepresentable traces as
+ * `invalid-spec`— but compilation preserves both values literally, so the
+ * comparison cannot diverge (**compiled**); the terminal state is **validated**
+ * by the reducer; the model and outcome are **carried** without inspection.
  *
- * Los artefactos del journal espejo son **placeholders sintéticos y
- * deterministas** (`shadow://<run>/<node>`): el espejo no tiene contenido que
- * digerir y el comparador no contrasta artefactos. El esquema `shadow://` los
- * hace inconfundibles con evidencia real.
+ * The shadow journal artifacts are **synthetic and deterministic placeholders**
+ * (`shadow://<run>/<node>`): the mirror has no content to digest, and the
+ * comparator does not compare artifacts. The `shadow://` scheme makes them
+ * unmistakable from real evidence.
  *
- * Módulo **puro y determinista**: el mismo trace produce el mismo spec, el
- * mismo journal y el mismo resumen.
+ * **Pure and deterministic** module: the same trace produces the same spec, the
+ * same journal, and the same summary.
  */
-/** Qué prueba el espejo sobre una dimensión de paridad concreta. */
+/** What the mirror proves about a specific parity dimension. */
 export type ShadowParityProvenance = "recomputed" | "compiled" | "validated" | "carried";
 /**
- * Procedencia **demostrada** de cada dimensión que compara GE-044. Acota qué
- * puede afirmar la certificación de shadow (GE-046) y qué no.
+ * **Demonstrated** provenance of each dimension that GE-044 compares. It bounds
+ * what shadow certification (GE-046) can and cannot claim.
  *
- * - "recomputed": el espejo calcula el valor de forma independiente desde el
- *   spec compilado. La comparación PUEDE divergir → apta para conjunto crítico.
- *   Un test de alcanzabilidad en `demonstrated-divergence-provenance.test.ts`
- *   DEMUESTRA la divergencia atravesando el pipeline completo para cada código
- *   así clasificado. Si no se puede producir, no es "recomputed".
- * - "compiled": la dimensión pasa por `GraphSpecV1Schema.parse` y
- *   `validateGraphSpec`, que rechazan traces irrepresentables (ids duplicados,
- *   reviewer sin implementer, ciclos → `invalid-spec`). La comparación NO
- *   puede divergir porque la compilación preserva el valor idéntico, pero un
- *   trace irrepresentable impide el espejo por completo. Esta es la
- *   **representabilidad** sobre la que se apoya R6.
- * - "validated": el reducer valida la secuencia, pero ambos lados proyectan el
- *   mismo campo del trace. La comparación NO puede divergir.
- * - "carried": ambos lados copian el mismo campo del trace sin que nadie lo
- *   inspeccione. La comparación NO puede divergir.
+ * - "recomputed": the mirror calculates the value independently from the
+ *   compiled spec. The comparison CAN diverge → suitable for the critical set.
+ *   A reachability test in `demonstrated-divergence-provenance.test.ts`
+ *   DEMONSTRATES divergence by traversing the full pipeline for each code
+ *   classified this way. If it cannot be produced, it is not "recomputed".
+ * - "compiled": the dimension passes through `GraphSpecV1Schema.parse` and
+ *   `validateGraphSpec`, which reject unrepresentable traces (duplicate ids,
+ *   reviewer without an implementer, cycles → `invalid-spec`). The comparison
+ *   CANNOT diverge because compilation preserves the identical value, but an
+ *   unrepresentable trace prevents the mirror entirely. This is the
+ *   **representability** that R6 relies on.
+ * - "validated": the reducer validates the sequence, but both sides project
+ *   the same field from the trace. The comparison CANNOT diverge.
+ * - "carried": both sides copy the same field from the trace without anyone
+ *   inspecting it. The comparison CANNOT diverge.
  *
- * Invariante: solo los códigos con procedencia "recomputed" pueden incluirse
- * en `criticalDivergenceCodes` de la política soak, porque solo esos producen
- * una comparación independiente. Los códigos "compiled", "validated" o
- * "carried" no pueden divergir en la comparación; incluirlos inflaría la
- * cobertura declarada sin medir nada real.
+ * Invariant: only codes with "recomputed" provenance may be included in
+ * `criticalDivergenceCodes` in the soak policy, because only those produce an
+ * independent comparison. The "compiled", "validated", or "carried" codes
+ * cannot diverge in the comparison; including them would inflate the declared
+ * coverage without measuring anything real.
  */
 export declare const SHADOW_MIRROR_PROVENANCE: {
     readonly status: "validated";
@@ -69,15 +68,15 @@ export declare const SHADOW_MIRROR_PROVENANCE: {
     readonly fixes: "recomputed";
     readonly outcome: "carried";
 };
-/** Motivo tipado por el que un trace no produce espejo. */
+/** Typed reason why a trace does not produce a mirror. */
 export type ShadowMirrorErrorCode = "invalid-trace" | "invalid-spec" | "illegal-sequence" | "mirror-error";
-/** Error tipado del espejo. Nunca escapa de la fachada (`graphFacade`). */
+/** Typed mirror error. It never escapes the facade (`graphFacade`). */
 export declare class ShadowMirrorError extends Error {
     readonly code: ShadowMirrorErrorCode;
     readonly detail: string;
     constructor(code: ShadowMirrorErrorCode, detail: string);
 }
-/** Espejo completo: evidencia intermedia más el resumen comparable. */
+/** Complete mirror: intermediate evidence plus the comparable summary. */
 export type ShadowMirror = {
     readonly spec: GraphSpecV1;
     readonly specDigest: string;
@@ -86,36 +85,38 @@ export type ShadowMirror = {
     readonly summary: ShadowRunSummary;
 };
 /**
- * Compila el trace a un DAG lineal: cada nodo depende del anterior y cada
- * reviewer revisa el implementer que le precede. Un trace que el grafo no puede
- * representar (reviewer sin implementer previo, ids duplicados, ciclo) es
- * rechazado por el validador real como `invalid-spec`, antes de reducir nada.
+ * Compiles the trace into a linear DAG: each node depends on the previous one,
+ * and each reviewer reviews the implementer that precedes it. A trace the graph
+ * cannot represent (reviewer without a previous implementer, duplicate ids,
+ * cycle) is rejected by the real validator as `invalid-spec`, before reducing
+ * anything.
  */
 export declare function compileShadowSpec(trace: LegacyExecutionTraceV1): GraphSpecV1;
 /**
- * Sintetiza el journal que el run observado habría escrito: apertura, despacho
- * y recibo por nodo en orden, y el evento terminal reclamado. `errorClass`
- * distingue el recibo: ausente es éxito, `cancelled` cancela y el resto falla.
+ * Synthesizes the journal that the observed run would have written: opening,
+ * dispatch and receipt per node in order, and the claimed terminal event.
+ * `errorClass` distinguishes the receipt: absent means success, `cancelled`
+ * cancels, and the rest fail.
  */
 export declare function mirrorJournal(spec: GraphSpecV1, trace: LegacyExecutionTraceV1): GraphEventV1[];
 /**
- * Pliega el journal espejo con el reducer real. Una secuencia que el reducer
- * rechaza —un run que se dice completado con un nodo fallido, un despacho sobre
- * una dependencia no satisfecha— es `illegal-sequence`: el grafo no pudo haber
- * producido esa ejecución, y esa es justamente la evidencia que aporta.
+ * Folds the shadow journal with the real reducer. A sequence the reducer
+ * rejects —a run that claims completion with a failed node, a dispatch on an
+ * unsatisfied dependency— is `illegal-sequence`: the graph could not have
+ * produced that execution, and that is exactly the evidence it contributes.
  */
 export declare function reduceMirror(spec: GraphSpecV1, journal: readonly GraphEventV1[]): GraphState;
 /**
- * Proyección 1:1 del **lado legacy**: lo que el run observado afirma de sí
- * mismo, sin pasar por el grafo. Es el término que el comparador contrasta
- * contra el espejo.
+ * 1:1 projection of the **legacy side**: what the observed run claims about
+ * itself, without passing through the graph. It is the term that the comparator
+ * contrasts against the mirror.
  */
 export declare function projectLegacySummary(trace: LegacyExecutionTraceV1): ShadowRunSummary;
 /**
- * Construye el espejo sin efectos de una ejecución legacy observada. Lanza
- * `ShadowMirrorError` cuando el grafo no puede representar o reproducir el
- * trace; la fachada (`graphFacade`) contiene ese fallo para que nunca alcance
- * al camino legacy.
+ * Builds the side-effect-free mirror of an observed legacy execution. Throws
+ * `ShadowMirrorError` when the graph cannot represent or reproduce the trace;
+ * the facade (`graphFacade`) contains that failure so it never reaches the
+ * legacy path.
  */
 export declare function mirrorLegacyExecution(trace: LegacyExecutionTraceV1): ShadowMirror;
 //# sourceMappingURL=graphShadow.d.ts.map

package/dist/orchestrator/graphShadow.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graphShadow.d.ts","sourceRoot":"","sources":["../../src/orchestrator/graphShadow.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,WAAW,EAEjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EACV,sBAAsB,EAEvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,oEAAoE;AACpE,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,wBAAwB;qBAC3B,WAAW;oBACZ,UAAU;oBACV,UAAU;qBACT,SAAS;oBACV,YAAY;sBACV,SAAS;CAGnB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,cAAc,CAAC;AAEnB,2EAA2E;AAC3E,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAKtD;CACF;AAED,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAaF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,WAAW,CAqC5E;AAkBD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,sBAAsB,GAC5B,YAAY,EAAE,CAmEhB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,UAAU,CAeZ;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAYlB;AA8BD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,sBAAsB,GAC5B,YAAY,CAcd"}
+{"version":3,"file":"graphShadow.d.ts","sourceRoot":"","sources":["../../src/orchestrator/graphShadow.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,WAAW,EAEjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAEjD,OAAO,KAAK,EACV,sBAAsB,EAEvB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,gEAAgE;AAChE,MAAM,MAAM,sBAAsB,GAC9B,YAAY,GACZ,UAAU,GACV,WAAW,GACX,SAAS,CAAC;AAEd;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,eAAO,MAAM,wBAAwB;qBAC3B,WAAW;oBACZ,UAAU;oBACV,UAAU;qBACT,SAAS;oBACV,YAAY;sBACV,SAAS;CAGnB,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,cAAc,CAAC;AAEnB,uEAAuE;AACvE,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,IAAI,EAAE,qBAAqB,EAAE,MAAM,EAAE,MAAM,EAKtD;CACF;AAED,0EAA0E;AAC1E,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;CACpC,CAAC;AAaF;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,sBAAsB,GAAG,WAAW,CAqC5E;AAkBD;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE,sBAAsB,GAC5B,YAAY,EAAE,CAmEhB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,UAAU,CAeZ;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,sBAAsB,GAC5B,gBAAgB,CAYlB;AA+BD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,sBAAsB,GAC5B,YAAY,CAcd"}

package/dist/orchestrator/opencodeSessionAdapter.d.ts

@@ -1,30 +1,30 @@
 import type { ModelSelection } from "../router/types";
 /**
- * Adaptador tipado de sesión de opencode (GE-030).
+ * Typed opencode session adapter (GE-030).
  *
- * Estrecha la superficie de sesión de opencode a las seis operaciones de ciclo
- * de vida verificadas por el contrato (create, dispatch/prompt, children,
- * status/get, messages, abort) y normaliza cada fallo del cliente a un error
- * tipado {@link SessionAdapterError}. Deliberadamente **no** expone acciones
- * destructivas ni de resumen (delete, summarize, share/unshare, fork, command):
- * la autoridad del grafo nunca borra ni resume una sesión de forma automática.
+ * Narrows the opencode session surface to the six lifecycle operations
+ * verified by the contract (create, dispatch/prompt, children, status/get,
+ * messages, abort) and normalizes each client failure to a typed error
+ * {@link SessionAdapterError}. Deliberately **does not** expose destructive
+ * or summary actions (delete, summarize, share/unshare, fork, command):
+ * the graph authority never deletes or summarizes a session automatically.
  *
- * El adaptador no realiza I/O propio: envuelve un cliente inyectado
- * ({@link GraphSessionClient}) cuya forma es asignable desde el cliente real de
- * `@opencode-ai/sdk`. Un contract test fija esa correspondencia.
+ * The adapter performs no I/O of its own: it wraps an injected client
+ * ({@link GraphSessionClient}) whose shape is assignable from the real
+ * `@opencode-ai/sdk` client. A contract test pins that correspondence.
  */
-/** Resultado del SDK: dato tipado o error opaco, nunca ambos. */
+/** SDK result: typed data or opaque error, never both. */
 type ClientResult<T> = {
     data?: T;
     error?: unknown;
 };
-/** Referencia mínima a una sesión (subconjunto verificado de `Session`). */
+/** Minimal reference to a session (verified subset of `Session`). */
 export type SessionInfo = {
     readonly id: string;
 };
 /**
- * Puerto del cliente de sesión de opencode acotado a las operaciones que usa el
- * adaptador. Estructuralmente compatible con `client.session` del SDK real.
+ * opencode session client port limited to the operations the adapter uses.
+ * Structurally compatible with `client.session` from the real SDK.
  */
 export type GraphSessionClient = {
     session: {
@@ -75,21 +75,21 @@ export type GraphSessionClient = {
         }): Promise<ClientResult<boolean>>;
     };
 };
-/** Taxonomía cerrada de errores del adaptador de sesión. */
+/** Closed taxonomy of session adapter errors. */
 export type SessionAdapterErrorCode = "create-failed" | "missing-session-id" | "dispatch-failed" | "children-failed" | "status-failed" | "messages-failed" | "abort-failed";
-/** Error tipado de una operación de sesión que falló o devolvió datos inválidos. */
+/** Typed error from a session operation that failed or returned invalid data. */
 export declare class SessionAdapterError extends Error {
     readonly code: SessionAdapterErrorCode;
     readonly detail: string;
     constructor(code: SessionAdapterErrorCode, detail: string);
 }
-/** Datos para crear una sub-sesión hija. */
+/** Data for creating a child sub-session. */
 export type CreateChildInput = {
     readonly parentSessionID?: string;
     readonly title?: string;
     readonly directory?: string;
 };
-/** Datos para despachar un prompt (el efecto) a una sesión existente. */
+/** Data for dispatching a prompt (the effect) to an existing session. */
 export type DispatchInput = {
     readonly sessionID: string;
     readonly prompt: string;
@@ -97,19 +97,19 @@ export type DispatchInput = {
     readonly agent?: string;
     readonly system?: string;
 };
-/** Superficie verificada del adaptador de sesión de opencode. */
+/** Verified surface of the opencode session adapter. */
 export interface OpencodeSessionAdapter {
-    /** Crea una sub-sesión hija y devuelve su id; falla cerrado si no hay id. */
+    /** Creates a child sub-session and returns its id; fails closed if there is no id. */
     createChild(input: CreateChildInput): Promise<string>;
-    /** Despacha un prompt a la sesión y devuelve la respuesta cruda del efecto. */
+    /** Dispatches a prompt to the session and returns the raw response from the effect. */
     dispatch(input: DispatchInput): Promise<unknown>;
-    /** Lista los ids de las sesiones hijas. */
+    /** Lists the child session ids. */
     listChildren(sessionID: string): Promise<readonly string[]>;
-    /** Devuelve el estado de la sesión (get por id). */
+    /** Returns the session state (get by id). */
     getStatus(sessionID: string): Promise<SessionInfo>;
-    /** Lista los mensajes de la sesión. */
+    /** Lists the session messages. */
     listMessages(sessionID: string): Promise<readonly unknown[]>;
-    /** Solicita abortar la sesión; devuelve si el runtime lo aceptó. */
+    /** Requests session abort; returns whether the runtime accepted it. */
     abort(sessionID: string): Promise<boolean>;
 }
 export declare function createOpencodeSessionAdapter(client: GraphSessionClient): OpencodeSessionAdapter;

package/dist/orchestrator/opencodeSessionAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencodeSessionAdapter.d.ts","sourceRoot":"","sources":["../../src/orchestrator/opencodeSessionAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AAEH,iEAAiE;AACjE,KAAK,YAAY,CAAC,CAAC,IAAI;IAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAErD,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE;QACP,MAAM,CAAC,IAAI,EAAE;YACX,IAAI,CAAC,EAAE;gBAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YAC7C,KAAK,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;SAChC,GAAG,OAAO,CAAC,YAAY,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,EAAE;YACX,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;YACrB,IAAI,EAAE;gBACJ,KAAK,CAAC,EAAE,cAAc,CAAC;gBACvB,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,MAAM,CAAC,EAAE,MAAM,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC;oBAAE,IAAI,EAAE,MAAM,CAAC;oBAAC,IAAI,EAAE,MAAM,CAAA;iBAAE,CAAC,CAAC;aAC9C,CAAC;SACH,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,QAAQ,CAAC,IAAI,EAAE;YACb,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;SACtB,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,EAAE;YACb,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;SACtB,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;KACvE,CAAC;CACH,CAAC;AAEF,4DAA4D;AAC5D,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,cAAc,CAAC;AAEnB,oFAAoF;AACpF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAKxD;CACF;AAED,4CAA4C;AAC5C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,iEAAiE;AACjE,MAAM,WAAW,sBAAsB;IACrC,6EAA6E;IAC7E,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,+EAA+E;IAC/E,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,2CAA2C;IAC3C,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC5D,oDAAoD;IACpD,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,uCAAuC;IACvC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC7D,oEAAoE;IACpE,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5C;AAiBD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,kBAAkB,GACzB,sBAAsB,CA4GxB"}
+{"version":3,"file":"opencodeSessionAdapter.d.ts","sourceRoot":"","sources":["../../src/orchestrator/opencodeSessionAdapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AAEH,0DAA0D;AAC1D,KAAK,YAAY,CAAC,CAAC,IAAI;IAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAErD,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE;QACP,MAAM,CAAC,IAAI,EAAE;YACX,IAAI,CAAC,EAAE;gBAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAAC,KAAK,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;YAC7C,KAAK,CAAC,EAAE;gBAAE,SAAS,CAAC,EAAE,MAAM,CAAA;aAAE,CAAC;SAChC,GAAG,OAAO,CAAC,YAAY,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,EAAE;YACX,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;YACrB,IAAI,EAAE;gBACJ,KAAK,CAAC,EAAE,cAAc,CAAC;gBACvB,KAAK,CAAC,EAAE,MAAM,CAAC;gBACf,MAAM,CAAC,EAAE,MAAM,CAAC;gBAChB,KAAK,EAAE,KAAK,CAAC;oBAAE,IAAI,EAAE,MAAM,CAAC;oBAAC,IAAI,EAAE,MAAM,CAAA;iBAAE,CAAC,CAAC;aAC9C,CAAC;SACH,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,QAAQ,CAAC,IAAI,EAAE;YACb,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;SACtB,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,EAAE;YACb,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAC;SACtB,GAAG,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,EAAE;YAAE,IAAI,EAAE;gBAAE,EAAE,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;KACvE,CAAC;CACH,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,uBAAuB,GAC/B,eAAe,GACf,oBAAoB,GACpB,iBAAiB,GACjB,iBAAiB,GACjB,eAAe,GACf,iBAAiB,GACjB,cAAc,CAAC;AAEnB,iFAAiF;AACjF,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAKxD;CACF;AAED,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,wDAAwD;AACxD,MAAM,WAAW,sBAAsB;IACrC,sFAAsF;IACtF,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACjD,mCAAmC;IACnC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC5D,6CAA6C;IAC7C,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACnD,kCAAkC;IAClC,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC7D,uEAAuE;IACvE,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5C;AAiBD,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,kBAAkB,GACzB,sBAAsB,CA4GxB"}

package/dist/orchestrator/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/orchestrator/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,MAAM,GACN,eAAe,GACf,aAAa,GACb,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAQ7D,CAAC;AASF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAE3E;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,cAAc,EAAE,GACtB,cAAc,CAKhB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,cAAc,GACnB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CASvC"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/orchestrator/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,MAAM,MAAM,cAAc,GACtB,MAAM,GACN,MAAM,GACN,eAAe,GACf,aAAa,GACb,SAAS,GACT,OAAO,CAAC;AAEZ,MAAM,MAAM,iBAAiB,GAAG;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,cAAc,EAAE,CAAC;CAC3B,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,CAU7D,CAAC;AASF,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO,CAE3E;AAED,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,cAAc,EAAE,GACtB,cAAc,CAKhB;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,cAAc,GACnB;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CASvC"}

package/dist/orchestrator/ralphLoop.d.ts

@@ -0,0 +1,57 @@
+import type { OpenTeamConfig } from "../config/schema";
+import type { RoutingDecision, TaskSignals } from "../router/types";
+import { type CoordinatorDeps, type RoleTaskResult } from "./coordinator";
+/**
+ * W3 ralph loop (#174).
+ *
+ * Makes the guaranteed `ralph` role a real behaviour rather than an unreachable
+ * profile: a bounded iterate-until-done cycle. Each pass dispatches the `ralph`
+ * role through the real coordinator ({@link runRoleTask}), so the loop inherits
+ * two guarantees for free — the mandatory-local gate (#143), which refuses to run
+ * BEFORE the first iteration when no local runtime is reachable and never falls
+ * through to a frontier provider, and local-first routing, which keeps every
+ * iteration on a local runtime.
+ *
+ * This module is only loop CONTROL: model/runtime work is the injected coordinator
+ * deps, and the done-signal is an injected predicate. Deterministic given its
+ * ports — no clock, randomness or direct I/O.
+ */
+/** Canonical roleID of the guaranteed ralph role. */
+export declare const RALPH_ROLE_ID = "ralph";
+/** Default iteration cap so the loop can never spin unbounded. */
+export declare const DEFAULT_RALPH_MAX_ITERATIONS = 10;
+export type RalphLoopInput = {
+    readonly task: TaskSignals;
+    readonly prompt: string;
+    readonly config: OpenTeamConfig;
+    readonly parentSessionID?: string;
+    /** Iteration cap; defaults to {@link DEFAULT_RALPH_MAX_ITERATIONS}. */
+    readonly maxIterations?: number;
+};
+/** Why the loop stopped: the done-signal fired, or the iteration cap was hit. */
+export type RalphLoopTermination = "done" | "cap";
+export type RalphLoopResult = {
+    readonly iterations: number;
+    readonly termination: RalphLoopTermination;
+    readonly decision: RoutingDecision | undefined;
+    readonly results: readonly RoleTaskResult[];
+};
+export type RalphLoopDeps = CoordinatorDeps & {
+    /**
+     * The done-signal predicate (#174). Reads the iteration's subsession result and
+     * decides whether the task is finished. Injected so the "fake runtime" that
+     * reports done/not-done stays outside the loop control under test.
+     */
+    readonly isDone: (result: RoleTaskResult) => boolean;
+};
+/**
+ * Runs the ralph loop (#174): dispatches the `ralph` role repeatedly until the
+ * injected done-signal fires or the iteration cap is reached.
+ *
+ * On the first pass, {@link runRoleTask} enforces the mandatory-local gate: when
+ * no local runtime is reachable it throws before any dispatch, so the loop fails
+ * before the first iteration and no model is contacted — the caller sees the
+ * thrown, actionable error.
+ */
+export declare function runRalphLoop(input: RalphLoopInput, deps: RalphLoopDeps): Promise<RalphLoopResult>;
+//# sourceMappingURL=ralphLoop.d.ts.map

package/dist/orchestrator/ralphLoop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ralphLoop.d.ts","sourceRoot":"","sources":["../../src/orchestrator/ralphLoop.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACpE,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,cAAc,EAEpB,MAAM,eAAe,CAAC;AAEvB;;;;;;;;;;;;;;GAcG;AAEH,qDAAqD;AACrD,eAAO,MAAM,aAAa,UAAU,CAAC;AAErC,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAE/C,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,uEAAuE;IACvE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,KAAK,CAAC;AAElD,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,eAAe,GAAG;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC;CACtD,CAAC;AAeF;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,cAAc,EACrB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,eAAe,CAAC,CA+B1B"}

package/dist/orchestrator/roles.d.ts

@@ -1,5 +1,6 @@
 import { z } from "zod";
 import type { CapabilityRequirement, ComplexityTier } from "../capabilities/types";
+import type { LocalRuntimeId } from "../local/types";
 import type { ModelSelection, TaskSignals } from "../router/types";
 export type AgentRoleProfile = {
     roleID: string;
@@ -8,9 +9,34 @@ export type AgentRoleProfile = {
     minReasoningTier: 1 | 2 | 3 | 4 | 5;
     minCodeQualityTier: 1 | 2 | 3 | 4 | 5;
     needsToolCallingByDefault: boolean;
-    preferredLocalModels: ModelSelection[];
     preferredFrontierModels: Array<ModelSelection | "auto">;
     localFirst: boolean;
+    /**
+     * Hard requirement that this role runs on a reachable LOCAL runtime (#143).
+     *
+     * This is a PROHIBITION, distinct from the `localFirst` PREFERENCE. `localFirst`
+     * only tilts routing toward local and still falls through to frontier when no
+     * local runtime is reachable (2026-08-26 ruling). `requiresLocalRuntime` refuses
+     * the request before dispatch when no local runtime is reachable — it never
+     * falls through to a frontier provider. Optional so existing roles keep today's
+     * behaviour; only bookkeeping/safety roles (scribe, ralph, guardian) set it `true`.
+     */
+    requiresLocalRuntime?: boolean;
+    /**
+     * Ordered preference list of LOCAL runtimes this role may draw on (#144).
+     *
+     * When set, dispatch walks the list in order and picks the FIRST runtime that
+     * is reachable; an unreachable runtime is skipped (failover). The chosen
+     * runtime is then honoured for the whole task — capacity is enforced on it and
+     * excess work queues rather than spilling to a less-preferred runtime. When
+     * `requiresLocalRuntime` is also set, the hard requirement is satisfied when
+     * ANY listed runtime is reachable; when none is, the role fails closed.
+     *
+     * Optional so existing roles keep today's behaviour: without a list, the role
+     * dispatches to whatever local model routing selected, with capacity enforced
+     * on that runtime.
+     */
+    localRuntimes?: LocalRuntimeId[];
 };
 export declare const AgentRoleProfileSchema: z.ZodObject<{
     roleID: z.ZodString;
@@ -24,17 +50,33 @@ export declare const AgentRoleProfileSchema: z.ZodObject<{
     minReasoningTier: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
     minCodeQualityTier: z.ZodUnion<readonly [z.ZodLiteral<1>, z.ZodLiteral<2>, z.ZodLiteral<3>, z.ZodLiteral<4>, z.ZodLiteral<5>]>;
     needsToolCallingByDefault: z.ZodBoolean;
-    preferredLocalModels: z.ZodArray<z.ZodObject<{
-        providerID: z.ZodString;
-        modelID: z.ZodString;
-    }, z.core.$strip>>;
     preferredFrontierModels: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
         providerID: z.ZodString;
         modelID: z.ZodString;
-    }, z.core.$strip>, z.ZodLiteral<"auto">]>>;
+    }, z.core.$strict>, z.ZodLiteral<"auto">]>>;
     localFirst: z.ZodBoolean;
-}, z.core.$strip>;
+    requiresLocalRuntime: z.ZodOptional<z.ZodBoolean>;
+    localRuntimes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        "foundry-local": "foundry-local";
+        lemonade: "lemonade";
+        lmstudio: "lmstudio";
+        ollama: "ollama";
+    }>>>;
+}, z.core.$strict>;
 export declare const TEAM_ROLES: Record<string, AgentRoleProfile>;
-export declare function getRoleProfile(roleID: string): AgentRoleProfile | undefined;
+export declare function getRoleProfile(roleID: string, configuredRoles?: Readonly<Record<string, AgentRoleProfile>>): AgentRoleProfile | undefined;
+/**
+ * Synthesises a neutral, frontier-eligible fallback profile for a roleID that
+ * is not present in TEAM_ROLES. The roleID is passed through verbatim so the
+ * orchestrator dispatches the correct agent name to opencode, producing an
+ * accurate error ("agent Galadriel not found") rather than a misleading one
+ * ("agent scribe not found") when the agent does not exist in the workspace.
+ *
+ * Profile values mirror the majority of the team (yen/basher/reviewer):
+ * moderate tier with frontier escalation enabled and local-first routing, so
+ * the core local-first promise is preserved while unknown roles are never
+ * silently starved of frontier access.
+ */
+export declare function synthesiseFallbackProfile(roleID: string): AgentRoleProfile;
 export declare function roleToRequirement(role: AgentRoleProfile, task: TaskSignals, tier?: ComplexityTier): CapabilityRequirement;
 //# sourceMappingURL=roles.d.ts.map

package/dist/orchestrator/roles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/orchestrator/roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,cAAc,CAAC;IAC5B,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,kBAAkB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,yBAAyB,EAAE,OAAO,CAAC;IACnC,oBAAoB,EAAE,cAAc,EAAE,CAAC;IACvC,uBAAuB,EAAE,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC;IACxD,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC;AAeF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;iBAYjC,CAAC;AAGH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAgFvD,CAAC;AAEF,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE3E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,cAAc,GACpB,qBAAqB,CAevB"}
+{"version":3,"file":"roles.d.ts","sourceRoot":"","sources":["../../src/orchestrator/roles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,KAAK,EACV,qBAAqB,EACrB,cAAc,EACf,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,cAAc,CAAC;IAC5B,gBAAgB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,kBAAkB,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtC,yBAAyB,EAAE,OAAO,CAAC;IACnC,uBAAuB,EAAE,KAAK,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC;IACxD,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;;;;;OASG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B;;;;;;;;;;;;;OAaG;IACH,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC;CAClC,CAAC;AAiBF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;kBAkBxB,CAAC;AAGZ,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CA8FvD,CAAC;AAEF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,GAC3D,gBAAgB,GAAG,SAAS,CAE9B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAW1E;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,gBAAgB,EACtB,IAAI,EAAE,WAAW,EACjB,IAAI,CAAC,EAAE,cAAc,GACpB,qBAAqB,CAevB"}

package/dist/orchestrator/roster.d.ts

@@ -0,0 +1,103 @@
+import { z } from "zod";
+/**
+ * W3 roster model (#171, #172).
+ *
+ * The roster is a STRUCTURED artifact, never free LLM prose: a chosen `universe`
+ * plus a list of `roleID` → `agentName` entries. The split (decision P6(a)) keeps
+ * routing keyed to the stable `roleID` (which resolves to a capability profile via
+ * {@link getRoleProfile}) while the themed `agentName` is only the dispatch alias
+ * opencode sees. Validating the artifact with Zod removes the silent-no-op failure
+ * class of a prose parser.
+ *
+ * This module is pure: no I/O, clock, or randomness. Generation takes an injected
+ * {@link RosterSource} port so the model call stays outside the decision core, and
+ * persistence lives in `rosterPersistence.ts`.
+ */
+/** One cast member: a stable routing `roleID` bound to a themed dispatch alias. */
+export declare const RosterEntrySchema: z.ZodObject<{
+    roleID: z.ZodString;
+    agentName: z.ZodString;
+}, z.core.$strict>;
+/** A structured roster: one universe shared by every entry. */
+export declare const RosterSchema: z.ZodObject<{
+    universe: z.ZodString;
+    entries: z.ZodArray<z.ZodObject<{
+        roleID: z.ZodString;
+        agentName: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type RosterEntry = z.infer<typeof RosterEntrySchema>;
+export type Roster = z.infer<typeof RosterSchema>;
+/**
+ * The four roles every roster must contain (#171). `orchestrator` is the primary
+ * agent itself and has no TEAM_ROLES profile; `guardian`/`scribe`/`ralph` are the
+ * bookkeeping/safety roles that carry `requiresLocalRuntime`. Security review,
+ * decision capture and the ralph loop can never be silently omitted from a team.
+ */
+export declare const GUARANTEED_ROLE_IDS: readonly ["orchestrator", "guardian", "scribe", "ralph"];
+export type GuaranteedRoleID = (typeof GUARANTEED_ROLE_IDS)[number];
+/** Guaranteed roleIDs absent from a roster, in canonical order. */
+export declare function missingGuaranteedRoles(roster: Roster): GuaranteedRoleID[];
+/** Whether every guaranteed roleID is present in the roster. */
+export declare function hasAllGuaranteedRoles(roster: Roster): boolean;
+/**
+ * Enforces the guaranteed-role invariant (#171): re-adds any missing guaranteed
+ * role, binding its `agentName` to the canonical roleID so it dispatches to the
+ * standard agent. Returns the roster unchanged when nothing is missing. Pure.
+ */
+export declare function enforceGuaranteedRoles(roster: Roster): Roster;
+/** Draft roster a generator source emits before Zod validation. */
+export type RosterDraft = {
+    universe: string;
+    entries: Array<{
+        roleID: string;
+        agentName: string;
+    }>;
+};
+/**
+ * Injected generation port (#172). Turns an initial prompt into a draft roster.
+ * In production this wraps a model call; tests pass a deterministic fake, so the
+ * generator's decision core never contacts a live LLM.
+ */
+export type RosterSource = (prompt: string) => RosterDraft | Promise<RosterDraft>;
+/**
+ * Generates a roster from the initial prompt (#172): runs the injected source,
+ * validates the draft with Zod (fail-closed on a malformed roster), then enforces
+ * the guaranteed roles (#171). The result is always a valid, guaranteed roster.
+ */
+export declare function generateRoster(prompt: string, source: RosterSource): Promise<Roster>;
+/**
+ * The dispatch target for a roleID: the themed `agentName` opencode dispatches to.
+ * `undefined` when the roleID is not in the roster. This is the roleID/agentName
+ * split at the dispatch boundary — routing uses the roleID, opencode uses this.
+ */
+export declare function rosterDispatchTarget(roster: Roster, roleID: string): string | undefined;
+/**
+ * Resolves the universe an entry belongs to (#172). The universe is recorded ONCE
+ * for the whole roster, so every entry shares the single roster universe; this
+ * throws if the entry is not part of the roster, so the invariant is checked, not
+ * assumed. Pure.
+ */
+export declare function resolveEntryUniverse(roster: Roster, entry: RosterEntry): string;
+/**
+ * Actionable, English failure for a guaranteed role whose agent file was never
+ * written (#153, Defect B). `openteam setup` currently writes only the primary
+ * agent, so `scribe`/`ralph`/`guardian` have no agent file to dispatch to. Names
+ * the missing agent and points at `openteam setup` rather than surfacing an opaque
+ * "agent not found" from opencode.
+ */
+export declare function missingAgentFileMessage(agentName: string): string;
+/**
+ * Fails closed BEFORE dispatch when a guaranteed role's agent file is absent
+ * (#153, Defect B). `agentFileExists` is an injected I/O port — the filesystem
+ * probe lives at the composition root, so this stays pure of I/O.
+ */
+export declare function assertAgentFileForRole(agentName: string, agentFileExists: (agentName: string) => boolean | Promise<boolean>): Promise<void>;
+/**
+ * Dispatches a guaranteed role only after asserting its agent file exists (#153).
+ * The agent-file guard runs BEFORE the `dispatch` callback, so a missing file
+ * surfaces the actionable error without ever contacting a model. `dispatch` is the
+ * real coordinator call the caller supplies.
+ */
+export declare function dispatchGuaranteedRole<T>(agentName: string, agentFileExists: (agentName: string) => boolean | Promise<boolean>, dispatch: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=roster.d.ts.map

package/dist/orchestrator/roster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.d.ts","sourceRoot":"","sources":["../../src/orchestrator/roster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;;GAaG;AAEH,mFAAmF;AACnF,eAAO,MAAM,iBAAiB;;;kBAKnB,CAAC;AAEZ,+DAA+D;AAC/D,eAAO,MAAM,YAAY;;;;;;kBAKd,CAAC;AAEZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,YAC9B,cAAc,EACd,UAAU,EACV,QAAQ,EACR,OAAO,CACC,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,mEAAmE;AACnE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAGzE;AAED,gEAAgE;AAChE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE7D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAU7D;AAED,mEAAmE;AACnE,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,MAAM,EAAE,MAAM,KACX,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAExC;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,MAAM,CAAC,CAIjB;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,GACb,MAAM,GAAG,SAAS,CAEpB;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,GACjB,MAAM,CAOR;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAMjE;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GACjE,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAC5C,SAAS,EAAE,MAAM,EACjB,eAAe,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,EAClE,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACzB,OAAO,CAAC,CAAC,CAAC,CAGZ"}