@jterrats/open-orchestra 1.0.16 → 1.0.18

package/dist/provider-agent-wrapper.js

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { evaluateProviderEgressPolicy } from "./security/provider-egress-policy.js";
 export async function executeProviderBackedAgent(request, deps) {
     const requestId = `provider-agent-${randomUUID()}`;
     const providerIds = [request.routing.provider, ...request.routing.fallbacks];
@@ -16,6 +17,18 @@ export async function executeProviderBackedAgent(request, deps) {
         if (!budget.passed) {
             return blockedResult(request, requestId, providerId, budget.safeMessage ?? "provider execution blocked by budget envelope");
         }
+        const egressDecision = evaluateProviderEgressPolicy({
+            requestId,
+            taskId: request.taskId,
+            role: request.role,
+            actor: request.actor,
+            providerId,
+            messages: request.messages,
+        });
+        if (!egressDecision.allowed) {
+            return blockedResult(request, requestId, providerId, egressDecision.safeMessage ??
+                "provider egress blocked before provider execution");
+        }
         const provider = deps.createProvider(providerId);
         const capabilityBlock = providerCapabilityBlock(request, entryResult.entry);
         if (capabilityBlock) {
@@ -238,6 +251,7 @@ function providerFailureCode(error) {
 }
 function sanitizeProviderError(error) {
     return errorMessage(error)
+        .replace(/\bhttps?:\/\/[^\s),;]+/gi, "[REDACTED_PROVIDER_URL]")
         .replace(/Bearer\s+\S+/gi, "Bearer [REDACTED]")
         .replace(/\b(authorization|x-goog-api-key|x-api-key|api[-_]?key|apiKey)\s*[:=]\s*[^&\s,;]+/gi, "$1=[REDACTED]")
         .replace(/\bAIza[0-9A-Za-z_-]{20,}\b/g, "[REDACTED_API_KEY]")

package/dist/provider-agent-wrapper.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-agent-wrapper.js","sourceRoot":"","sources":["../src/provider-agent-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA0BzC,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAmC,EACnC,IAAqC;IAErC,MAAM,SAAS,GAAG,kBAAkB,UAAU,EAAE,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,WAAW,CAAC,WAAW,CACxB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,MAAM,CAAC,WAAW,IAAI,+CAA+C,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACrD,OAAO,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC9B,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACxD,OAAO,eAAe,CAAC;oBACrB,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,YAAY,EAAE,KAAK,GAAG,CAAC;oBACvB,eAAe;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,qBAAqB,CAAC,KAAK,CAAC,CAC7B,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,IAAI,QAAQ,GAAG,WAAW;oBAAE,SAAS;gBAC1D,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CACjB,OAAO,EACP,SAAS,EACT,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,IAAqC;IAIrC,IAAI,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,qBAAqB,UAAU,EAAE;SAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAmC,EACnC,KAA4B,EAC5B,YAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAC7C,IAAI,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,OAAO,kCAAkC,KAAK,CAAC,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,IACE,MAAM,EAAE,gBAAgB;QACxB,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAClC,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAC3C,CAAC;QACD,OAAO,sCAAsC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,EAAE,CAAC;QACpE,OAAO,wCAAwC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,IACE,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EACxC,CAAC;QACD,OAAO,+FAA+F,CAAC;IACzG,CAAC;IACD,IACE,KAAK,CAAC,SAAS,KAAK,UAAU;QAC9B,OAAO,CAAC,MAAM,CAAC,gBAAgB,KAAK,YAAY,EAChD,CAAC;QACD,OAAO,gDAAgD,KAAK,CAAC,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAAC,SAA4B;IAC7D,OAAO,SAAS,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAmC,EACnC,KAA4B;IAE5B,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACtD,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,YAAY,KAAK,CAAC,EAAE,0CAA0C,UAAU,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IACD,IACE,KAAK,CAAC,YAAY,CAAC,gBAAgB,GAAG,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAC9D,CAAC;QACD,OAAO,YAAY,KAAK,CAAC,EAAE,mDAAmD,CAAC;IACjF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA4B,EAC5B,UAAkB;IAElB,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;IACpE,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;IAC5D,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;IAC9D,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,EACvB,OAAO,EACP,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,eAAe,GAOhB;IACC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;IACzE,MAAM,wBAAwB,GAC5B,UAAU,KAAK,aAAa;QAC1B,CAAC,CAAC,yFAAyF;QAC3F,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS;QACT,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE;YACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW;YACvC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;YACzC,WAAW,EAAE,UAAU;SACxB;QACD,IAAI,EAAE;YACJ,gBAAgB,EAAE,CAAC;YACnB,UAAU;YACV,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,YAAY;YAClB,eAAe;YACf,aAAa,EAAE,QAAQ,CAAC,QAAQ;YAChC,UAAU,EAAE,QAAQ,CAAC,KAAK;SAC3B;QACD,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS;YACT,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW;YACvC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;YACzC,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,UAAU;YACvB,UAAU;YACV,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,YAAY;YACZ,eAAe;YACf,aAAa,EAAE,QAAQ,CAAC,QAAQ;YAChC,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,wBAAwB;YACjE,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAmC,EACnC,SAAiB,EACjB,UAAkB,EAClB,WAAmB;IAEnB,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;QAC5B,SAAS;QACT,KAAK,EAAE,gBAAgB,CAAC,mCAAmC,CAAC;QAC5D,IAAI,EAAE,eAAe,CAAC,mCAAmC,CAAC;QAC1D,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK;YACX,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;SAClC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAAmC,EACnC,SAAiB,EACjB,UAAkB,EAClB,eAAwC;IAExC,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;QAC5B,SAAS;QACT,KAAK,EAAE,gBAAgB,CAAC,2BAA2B,CAAC;QACpD,IAAI,EAAE,eAAe,CAAC,2BAA2B,CAAC;QAClD,QAAQ,EAAE;YACR,IAAI,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC;YAChC,eAAe;YACf,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;SAClC;QACD,WAAW,EAAE,sBAAsB,CAAC,eAAe,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO;QACL,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,aAAsB;QACnC,yBAAyB,EAAE,SAAS;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO;QACL,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,aAAsB;QAClC,wBAAwB,EAAE,SAAS;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,KAAc,EACd,QAAgB;IAEhB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,IAAI;QACJ,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC;QACpC,SAAS,EAAE,IAAI,KAAK,gBAAgB;QACpC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACxE,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,YAAY,CAAC,KAAK,CAAC;SACvB,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SAC9C,OAAO,CACN,oFAAoF,EACpF,eAAe,CAChB;SACA,OAAO,CAAC,6BAA6B,EAAE,oBAAoB,CAAC;SAC5D,OAAO,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC9D,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ;SACrB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,yBAAyB,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"provider-agent-wrapper.js","sourceRoot":"","sources":["../src/provider-agent-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AA0BpF,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAmC,EACnC,IAAqC;IAErC,MAAM,SAAS,GAAG,kBAAkB,UAAU,EAAE,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,eAAe,GAA4B,EAAE,CAAC;IAEpD,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,MAAM,WAAW,GAAG,wBAAwB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,WAAW,CAAC,WAAW,CACxB,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,MAAM,CAAC,WAAW,IAAI,+CAA+C,CACtE,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAAG,4BAA4B,CAAC;YAClD,SAAS;YACT,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,UAAU;YACV,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,cAAc,CAAC,WAAW;gBACxB,mDAAmD,CACtD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5E,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;QACrD,OAAO,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC9B,QAAQ,IAAI,CAAC,CAAC;YACd,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBACxD,OAAO,eAAe,CAAC;oBACrB,OAAO;oBACP,SAAS;oBACT,QAAQ;oBACR,YAAY,EAAE,KAAK,GAAG,CAAC;oBACvB,eAAe;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC5B,OAAO,aAAa,CAClB,OAAO,EACP,SAAS,EACT,UAAU,EACV,qBAAqB,CAAC,KAAK,CAAC,CAC7B,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,wBAAwB,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;gBACtE,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjE,CAAC;gBACD,IAAI,OAAO,CAAC,SAAS,IAAI,QAAQ,GAAG,WAAW;oBAAE,SAAS;gBAC1D,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC9B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CACjB,OAAO,EACP,SAAS,EACT,OAAO,CAAC,OAAO,CAAC,QAAQ,EACxB,eAAe,CAChB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,IAAqC;IAIrC,IAAI,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,qBAAqB,UAAU,EAAE;SAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAmC,EACnC,KAA4B,EAC5B,YAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;IAC7C,IAAI,MAAM,EAAE,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACjD,OAAO,kCAAkC,KAAK,CAAC,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,IACE,MAAM,EAAE,gBAAgB;QACxB,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAClC,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAC3C,CAAC;QACD,OAAO,sCAAsC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,IAAI,YAAY,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,EAAE,CAAC;QACpE,OAAO,wCAAwC,KAAK,CAAC,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,IACE,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC;QAC1C,CAAC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EACxC,CAAC;QACD,OAAO,+FAA+F,CAAC;IACzG,CAAC;IACD,IACE,KAAK,CAAC,SAAS,KAAK,UAAU;QAC9B,OAAO,CAAC,MAAM,CAAC,gBAAgB,KAAK,YAAY,EAChD,CAAC;QACD,OAAO,gDAAgD,KAAK,CAAC,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,yBAAyB,CAAC,SAA4B;IAC7D,OAAO,SAAS,KAAK,MAAM,CAAC;AAC9B,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAmC,EACnC,KAA4B;IAE5B,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACtD,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,YAAY,KAAK,CAAC,EAAE,0CAA0C,UAAU,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IACD,IACE,KAAK,CAAC,YAAY,CAAC,gBAAgB,GAAG,CAAC;QACvC,OAAO,CAAC,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,gBAAgB,EAC9D,CAAC;QACD,OAAO,YAAY,KAAK,CAAC,EAAE,mDAAmD,CAAC;IACjF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAA4B,EAC5B,UAAkB;IAElB,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC;IACpE,IAAI,UAAU,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;IAC5D,IAAI,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;IAC9D,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,EACvB,OAAO,EACP,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,eAAe,GAOhB;IACC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;IACzE,MAAM,wBAAwB,GAC5B,UAAU,KAAK,aAAa;QAC1B,CAAC,CAAC,yFAAyF;QAC3F,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,SAAS;QACT,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE;YACL,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW;YACvC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;YACzC,WAAW,EAAE,UAAU;SACxB;QACD,IAAI,EAAE;YACJ,gBAAgB,EAAE,CAAC;YACnB,UAAU;YACV,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE;QACD,QAAQ,EAAE;YACR,IAAI,EAAE,YAAY;YAClB,eAAe;YACf,aAAa,EAAE,QAAQ,CAAC,QAAQ;YAChC,UAAU,EAAE,QAAQ,CAAC,KAAK;SAC3B;QACD,UAAU,EAAE;YACV,IAAI,EAAE,OAAO,CAAC,MAAM;YACpB,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS;YACT,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW;YACvC,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;YACzC,gBAAgB,EAAE,CAAC;YACnB,WAAW,EAAE,UAAU;YACvB,UAAU;YACV,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,YAAY;YACZ,eAAe;YACf,aAAa,EAAE,QAAQ,CAAC,QAAQ;YAChC,UAAU,EAAE,QAAQ,CAAC,KAAK;YAC1B,wBAAwB,EAAE,OAAO,CAAC,MAAM,CAAC,wBAAwB;YACjE,YAAY,EAAE,QAAQ,CAAC,YAAY;SACpC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CACpB,OAAmC,EACnC,SAAiB,EACjB,UAAkB,EAClB,WAAmB;IAEnB,OAAO;QACL,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;QAC5B,SAAS;QACT,KAAK,EAAE,gBAAgB,CAAC,mCAAmC,CAAC;QAC5D,IAAI,EAAE,eAAe,CAAC,mCAAmC,CAAC;QAC1D,QAAQ,EAAE;YACR,IAAI,EAAE,KAAK;YACX,eAAe,EAAE,EAAE;YACnB,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;SAClC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,OAAmC,EACnC,SAAiB,EACjB,UAAkB,EAClB,eAAwC;IAExC,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;QAC5B,SAAS;QACT,KAAK,EAAE,gBAAgB,CAAC,2BAA2B,CAAC;QACpD,IAAI,EAAE,eAAe,CAAC,2BAA2B,CAAC;QAClD,QAAQ,EAAE;YACR,IAAI,EAAE,eAAe,CAAC,MAAM,GAAG,CAAC;YAChC,eAAe;YACf,aAAa,EAAE,UAAU;YACzB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK;SAClC;QACD,WAAW,EAAE,sBAAsB,CAAC,eAAe,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,OAAO;QACL,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,aAAsB;QACnC,yBAAyB,EAAE,SAAS;KACrC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,OAAO;QACL,gBAAgB,EAAE,CAAC;QACnB,UAAU,EAAE,aAAsB;QAClC,wBAAwB,EAAE,SAAS;KACpC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAkB,EAClB,KAAc,EACd,QAAgB;IAEhB,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,QAAQ,EAAE,UAAU;QACpB,IAAI;QACJ,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC;QACpC,SAAS,EAAE,IAAI,KAAK,gBAAgB;QACpC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACxE,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,YAAY,CAAC,KAAK,CAAC;SACvB,OAAO,CAAC,0BAA0B,EAAE,yBAAyB,CAAC;SAC9D,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;SAC9C,OAAO,CACN,oFAAoF,EACpF,eAAe,CAChB;SACA,OAAO,CAAC,6BAA6B,EAAE,oBAAoB,CAAC;SAC5D,OAAO,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC9D,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,QAAQ;SACrB,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,yBAAyB,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/E,CAAC"}

package/dist/runtime-adapters.js

@@ -19,6 +19,35 @@ const runtimeAdapters = [
         supportsManagedBlocks: true,
         supportsImports: true,
         guidance: "Reference compact Open Orchestra blocks from CLAUDE.md and load task skills on demand.",
+        recurringPreflightLines: [
+            "- Claude recurring preflight: after each phase completes, after a subagent returns, and after any context compaction or session resume, rerun `orchestra health --runtime claude-cli --json` and `orchestra validate --pre-run --task <ID> --json` before continuing.",
+            "- Treat a non-empty `missingActiveContext` or missing workflow run as a signal to re-register or resume the workflow before editing files.",
+        ],
+        bootstrapSpawnLines: [
+            "- Claude Code parent runtimes should launch the rendered packet with the native Agent/Subagent tool; use Task only when that is the exposed legacy alias.",
+            "- Prefer a role-named Claude subagent and record the resulting id or label in spawn lifecycle.",
+            "",
+            "### Claude Subagent Delegation — Exact Sequence",
+            "",
+            "When the user asks to delegate, or a workflow phase requires a subagent, follow this sequence without skipping steps:",
+            "",
+            "1. `orchestra workflow run --task <ID> --gates phase` — generates the spawn packet and session id.",
+            "2. `orchestra runtime parent-actions --task <ID> --json` — inspect pending `claude-agent-request` actions.",
+            "3. Read the `payload.promptArtifact` file from the action — this is the subagent prompt.",
+            "4. Launch a subagent using the native **Agent** tool with the prompt artifact content as the prompt.",
+            "5. `orchestra runtime spawn-lifecycle --session <sessionId> --status spawned --agent-id <label>` — record the child.",
+            "6. After the subagent writes its handoff artifact, run: `orchestra runtime parent-actions --task <ID> --dispatch --runtime claude-cli --until-idle` — this auto-detects completion and promotes queued sessions.",
+            "7. `orchestra workflow run --task <ID> --resume <run-id>` — advance the workflow to the next phase.",
+            "",
+            "**Never skip step 1.** The session id, spawn packet, and expected handoff path come from `orchestra workflow run`. Do not invent child context or launch subagents with ad-hoc prompts outside this sequence.",
+            "After the developer subagent completes, run `orchestra workflow run --task <ID> --resume <run-id>` to drive the QA phase; do not mark work done until QA evidence is recorded and the `qa→release` gate has been surfaced to the user.",
+        ],
+        spawnProtocolLines: [
+            "- Spawn only from an Orchestra `runtime spawn-request` artifact; do not invent child context.",
+            "- Keep detached children in background and let the parent continue talking to the user.",
+            "- Record `spawned`, terminal status, evidence artifact, and agent id through `runtime spawn-lifecycle`.",
+            "- Claude Code: use the native Agent/Subagent tool for the packet; use Task only if exposed as the legacy alias.",
+        ],
     },
     {
         target: "cursor",
@@ -29,6 +58,16 @@ const runtimeAdapters = [
         supportsManagedBlocks: true,
         supportsImports: true,
         guidance: "Use MDC rules for compact task routing and keep detailed skills in referenced files.",
+        bootstrapSpawnLines: [
+            "- Cursor parent runtimes should launch the rendered packet as a Background Agent so work continues in parallel with the current chat.",
+            "- Record the Cursor Background Agent id or branch label in spawn lifecycle before resuming the workflow.",
+        ],
+        spawnProtocolLines: [
+            "- Spawn only from an Orchestra `runtime spawn-request` artifact; do not invent child context.",
+            "- Keep detached children in background and let the parent continue talking to the user.",
+            "- Record `spawned`, terminal status, evidence artifact, and agent id through `runtime spawn-lifecycle`.",
+            "- Cursor: launch the packet as a Background Agent and record the Background Agent id or branch label.",
+        ],
     },
     {
         target: "codex",
@@ -39,6 +78,23 @@ const runtimeAdapters = [
         supportsManagedBlocks: true,
         supportsImports: false,
         guidance: "Reference Open Orchestra from AGENTS.md so local CLI work follows workflow gates.",
+        bootstrapSpawnHint: [
+            "- Codex parent runtimes should call `spawn_agent` for `codex-spawn-agent` actions using the `promptArtifact`, then record `spawned` with the returned agent id.",
+        ],
+        recurringPreflightLines: [
+            "- Codex recurring preflight: before each new work block and after any context shift, compaction, resume, interruption, or role handoff, rerun `orchestra health --runtime codex-cli --json`, `orchestra task list --json --status pending,blocked,in_progress`, and `orchestra validate --pre-run --task <ID> --json`.",
+            "- Treat `activeOrchestraContext: false` or non-empty `missingActiveContext` from pre-run validation as a drift warning; reload the task context and resume/register the workflow before editing files.",
+            "- Codex has no native recurring hook in this project, so this managed guidance and validation command are the fallback enforcement mechanism; the `--runtime codex-cli` flag is what registers the active runtime in `.agent-workflow/active-runtime.json`.",
+        ],
+        bootstrapSpawnLines: [
+            "- Codex parent runtimes should use `spawn_agent` for the rendered packet and avoid waiting by default.",
+        ],
+        spawnProtocolLines: [
+            "- Spawn only from an Orchestra `runtime spawn-request` artifact; do not invent child context.",
+            "- Keep detached children in background and let the parent continue talking to the user.",
+            "- Record `spawned`, terminal status, evidence artifact, and agent id through `runtime spawn-lifecycle`.",
+            "- Codex: use `spawn_agent` for the packet and avoid `wait_agent` unless the next critical step is blocked.",
+        ],
     },
     {
         target: "vscode",

package/dist/runtime-adapters.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-adapters.js","sourceRoot":"","sources":["../src/runtime-adapters.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,MAAM,eAAe,GAAqB;IACxC;QACE,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,cAAc,CAAC;QACzC,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,QAAQ,EACN,yFAAyF;KAC5F;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,WAAW,CAAC;QACtC,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,wFAAwF;KAC3F;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,kCAAkC,CAAC;QAC7D,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,sFAAsF;KACzF;IACD;QACE,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,WAAW,CAAC;QACtC,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,QAAQ,EACN,mFAAmF;KACtF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE;YACvB,qCAAqC;YACrC,2BAA2B;SAC5B;QACD,yBAAyB,EAAE,IAAI;QAC/B,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,QAAQ,EACN,+FAA+F;KAClG;IACD;QACE,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,mCAAmC,CAAC;QAC9D,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,4FAA4F;KAC/F;CACF,CAAC;AAEF,MAAM,UAAU,mBAAmB;IACjC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,GAAG,OAAO;QACV,iBAAiB,EAAE,wBAAwB;aACxC,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;aACxE,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;KACtE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9C,qBAAqB,CAAC,OAAO,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAC3C,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,SAA6B;IAE7B,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAC1C,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,SAAS,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa;IAEb,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAgC;IAEhC,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,oBAAoB,EAAE;YACpB,GAAG,OAAO,CAAC,oBAAoB;YAC/B,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC;YAC9D,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACxD,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACxD,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC;YAC9D,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC;SACzD;QACD,SAAS,EAAE;YACT,GAAG,OAAO,CAAC,SAAS;YACpB,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE;SACtC;KACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"runtime-adapters.js","sourceRoot":"","sources":["../src/runtime-adapters.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE3E,MAAM,eAAe,GAAqB;IACxC;QACE,MAAM,EAAE,SAAS;QACjB,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,cAAc,CAAC;QACzC,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,QAAQ,EACN,yFAAyF;KAC5F;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,WAAW,CAAC;QACtC,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,wFAAwF;QAC1F,uBAAuB,EAAE;YACvB,uQAAuQ;YACvQ,4IAA4I;SAC7I;QACD,mBAAmB,EAAE;YACnB,2JAA2J;YAC3J,gGAAgG;YAChG,EAAE;YACF,iDAAiD;YACjD,EAAE;YACF,uHAAuH;YACvH,EAAE;YACF,oGAAoG;YACpG,4GAA4G;YAC5G,0FAA0F;YAC1F,sGAAsG;YACtG,sHAAsH;YACtH,kNAAkN;YAClN,qGAAqG;YACrG,EAAE;YACF,+MAA+M;YAC/M,wOAAwO;SACzO;QACD,kBAAkB,EAAE;YAClB,+FAA+F;YAC/F,yFAAyF;YACzF,yGAAyG;YACzG,iHAAiH;SAClH;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,QAAQ;QACf,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,kCAAkC,CAAC;QAC7D,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,sFAAsF;QACxF,mBAAmB,EAAE;YACnB,uIAAuI;YACvI,0GAA0G;SAC3G;QACD,kBAAkB,EAAE;YAClB,+FAA+F;YAC/F,yFAAyF;YACzF,yGAAyG;YACzG,uGAAuG;SACxG;KACF;IACD;QACE,MAAM,EAAE,OAAO;QACf,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,WAAW,CAAC;QACtC,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,QAAQ,EACN,mFAAmF;QACrF,kBAAkB,EAAE;YAClB,iKAAiK;SAClK;QACD,uBAAuB,EAAE;YACvB,wTAAwT;YACxT,wMAAwM;YACxM,6PAA6P;SAC9P;QACD,mBAAmB,EAAE;YACnB,wGAAwG;SACzG;QACD,kBAAkB,EAAE;YAClB,+FAA+F;YAC/F,yFAAyF;YACzF,yGAAyG;YACzG,4GAA4G;SAC7G;KACF;IACD;QACE,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE;YACvB,qCAAqC;YACrC,2BAA2B;SAC5B;QACD,yBAAyB,EAAE,IAAI;QAC/B,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,KAAK;QACtB,QAAQ,EACN,+FAA+F;KAClG;IACD;QACE,MAAM,EAAE,UAAU;QAClB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,KAAK;QACX,uBAAuB,EAAE,CAAC,mCAAmC,CAAC;QAC9D,yBAAyB,EAAE,KAAK;QAChC,qBAAqB,EAAE,IAAI;QAC3B,eAAe,EAAE,IAAI;QACrB,QAAQ,EACN,4FAA4F;KAC/F;CACF,CAAC;AAEF,MAAM,UAAU,mBAAmB;IACjC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACvC,GAAG,OAAO;QACV,iBAAiB,EAAE,wBAAwB;aACxC,MAAM,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC;aACxE,GAAG,CAAC,CAAC,gBAAgB,EAAE,EAAE,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;KACtE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,OAAO,wBAAwB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC9C,qBAAqB,CAAC,OAAO,CAAC,CAC/B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,MAAM,CAC3C,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,SAA6B;IAE7B,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,SAAS,CAC1C,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,SAAS,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAa;IAEb,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,GAAG,KAAK,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAgC;IAEhC,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,oBAAoB,EAAE;YACpB,GAAG,OAAO,CAAC,oBAAoB;YAC/B,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC;YAC9D,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACxD,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC;YACxD,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,aAAa,CAAC;YAC9D,UAAU,EAAE,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC;SACzD;QACD,SAAS,EAAE;YACT,GAAG,OAAO,CAAC,SAAS;YACpB,KAAK,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE;SACtC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime-bootstrap.js

@@ -4,7 +4,7 @@ import { applyCursorMdcFrontmatter } from "./cursor-mdc.js";
 import { getRuntimeAdapter } from "./runtime-adapters.js";
 import { runtimeBootstrapSpawnLines } from "./runtime-spawn-guidance.js";
 const BOOTSTRAP_BLOCK_ID = "runtime-bootstrap";
-const BOOTSTRAP_VERSION = "1";
+const BOOTSTRAP_VERSION = "2";
 const BOOTSTRAP_SOURCE = "open-orchestra command-manifest,runtime-bootstrap";
 export function renderRuntimeBootstrap(target = "generic") {
     const commands = listCommandManifest();
@@ -37,12 +37,20 @@ export function renderRuntimeBootstrap(target = "generic") {
         "```",
         "orchestra estimate --task <ID> --sizing <xs|s|m|l|xl> --solo-days <N> --ai-unguided-days <N> --ai-guided-days <N>",
         "```",
+        "Do not run `orchestra workflow run` until this estimate is recorded; an unestimated task signals incomplete planning.",
         "",
         "### Step 3 — Run the autonomous workflow",
         "```",
         "orchestra workflow run --task <ID> --gates phase",
         "```",
         "The workflow sequences PM → PO → Architect → Developer → QA → Release.",
+        "Execution mode is selected from sizing when no explicit `--phase-execution` is provided:",
+        "- `xs` (1 point): `single-agent` so all phases run inline without spawn overhead.",
+        "- `s` (2–3 points): `single-agent` by default; use `subagents` when the work is separable.",
+        "- `m`, `l`, `xl`: `subagents` so phase work is isolated and reviewable.",
+        "For xs/s tasks, prefer `orchestra workflow run --task <ID> --gates phase --phase-execution single-agent` when you need to be explicit. The parent agent still produces handoffs, evidence, and reviews for every phase.",
+        "The agent (Claude Code) is responsible for executing every phase in sequence — acting as PM, then PO, then Architect, then Developer, then QA, then Release — before marking work complete.",
+        'Never pass `--from-phase`, `--skip-phases`, or any phase-shortcut flag. If a phase seems irrelevant, record a bypass rationale with `orchestra validate --pre-run --task <ID> --bypass --bypass-rationale "..."` instead.',
         "Gates pause at `po→architect` and `qa→release` for human review.",
         "The architect phase requires a sizing decision before proceeding:",
         "```",
@@ -61,6 +69,7 @@ export function renderRuntimeBootstrap(target = "generic") {
         "```",
         "orchestra workflow run --task <ID> --resume <run-id>",
         "```",
+        "At a `po→architect` or `qa→release` gate, stop work, surface the handoff artifact to the user, and wait for explicit approval before resuming — do not self-approve or continue autonomously.",
         "Gate approval is not automatic. Before approving `po→architect`, verify the GitHub issue or Orchestra task has user-validated acceptance criteria, non-goals, assumptions, priority, and sizing context.",
         "Before approving `qa→release`, verify real implementation evidence exists: changed files, exact validation commands, test results, QA findings, BA/PO acceptance, and Architect review when technical contracts changed.",
         "If a generated handoff says `Acceptance Criteria: none`, treat it as incomplete. Pull criteria from the linked issue/task, record a review finding, and do not approve release until the gap is fixed or explicitly risk-accepted.",
@@ -69,19 +78,23 @@ export function renderRuntimeBootstrap(target = "generic") {
         "```",
         "orchestra benchmark --task <ID>",
         "```",
+        "A task is not complete until `orchestra benchmark` has run. Do not close the task or mark it done beforehand.",
         "",
         "## Active Work",
-        "- At session start, run `orchestra health --json` before implementation or file edits.",
+        "- At session start, run `" +
+            healthPreflightCommand(target) +
+            "` before implementation or file edits.",
         "- Run `orchestra task list --json --status pending,blocked,in_progress` and identify resumable work before creating a new task.",
         "- For the active task, run context, delegation, plan, skills, protocol, and workflow render commands.",
         "- Run `orchestra validate --pre-run --task <ID> --json` before implementation; resolve missing estimate, workflow run, evidence, or review checks.",
         '- If a user accepts a smaller/advisory path, record it with `orchestra validate --pre-run --task <ID> --bypass --bypass-rationale "..."`.',
+        "- After `orchestra workflow run` completes a phase or reports a pending action, immediately run `orchestra runtime parent-actions --task <ID> --json` and dispatch any actionable `claude-agent-request` items before continuing.",
         ...recurringPreflightLines(target),
         "",
         "## Runtime-Native Background Spawn",
         "- When a workflow phase returns `completionMode=detached`, keep the parent conversation available and do not block on the child unless the user explicitly asks to wait.",
         "- After `orchestra workflow run` reports a pending parent runtime action, immediately inspect `orchestra runtime parent-actions --task <ID> --json` and consume safe actions supported by the active runtime.",
-        "- Codex parent runtimes should call `spawn_agent` for `codex-spawn-agent` actions using the `promptArtifact`, then record `spawned` with the returned agent id.",
+        ...codexSpawnHint(target),
         "- Do not auto-consume actions when the user explicitly asked to pause, when the action is queued, or when the runtime/tool is unavailable or unsafe.",
         "- Use `orchestra runtime spawn-request --task <ID> --role <role> --phase <phase> --run-id <run-id>` to render the assignment packet.",
         "- Record child state with `orchestra runtime spawn-lifecycle --session <session-id> --status <spawned|active|completed|failed> --agent-id <id>`.",
@@ -98,6 +111,7 @@ export function renderRuntimeBootstrap(target = "generic") {
         "- Record command/file/browser evidence with `orchestra evidence add`.",
         "- Record review outcome with `orchestra review`.",
         "- Update task status only after evidence and review are present.",
+        "- **Never run `git push` without explicit user instruction.** Completing a task, finishing QA, or closing a workflow run does not authorize a push.",
         "",
         "## Command Discovery",
         "- Use `orchestra commands manifest --json` for command metadata.",
@@ -154,15 +168,24 @@ function bootstrapCommandIds() {
         "summary",
     ]);
 }
+function codexSpawnHint(target) {
+    return getRuntimeAdapter(target).bootstrapSpawnHint ?? [];
+}
 function recurringPreflightLines(target) {
-    if (target !== "codex") {
-        return [];
-    }
-    return [
-        "- Codex recurring preflight: before each new work block and after any context shift, compaction, resume, interruption, or role handoff, rerun `orchestra health --json`, `orchestra task list --json --status pending,blocked,in_progress`, and `orchestra validate --pre-run --task <ID> --json`.",
-        "- Treat `activeOrchestraContext: false` or non-empty `missingActiveContext` from pre-run validation as a drift warning; reload the task context and resume/register the workflow before editing files.",
-        "- Codex has no native recurring hook in this project, so this managed guidance and validation command are the fallback enforcement mechanism.",
-    ];
+    return getRuntimeAdapter(target).recurringPreflightLines ?? [];
+}
+const HEALTH_RUNTIME_BY_TARGET = {
+    claude: "claude-cli",
+    codex: "codex-cli",
+    cursor: "cursor-cli",
+    vscode: "vscode-agent",
+    windsurf: "windsurf-agent",
+};
+function healthPreflightCommand(target) {
+    const executionId = HEALTH_RUNTIME_BY_TARGET[target];
+    return executionId
+        ? `orchestra health --runtime ${executionId} --json`
+        : "orchestra health --json";
 }
 function targetNote(target) {
     const adapter = getRuntimeAdapter(target);

package/dist/runtime-bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-bootstrap.js","sourceRoot":"","sources":["../src/runtime-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAUzE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,mDAAmD,CAAC;AAE7E,MAAM,UAAU,sBAAsB,CACpC,SAA4B,SAAS;IAErC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,oCAAoC;QACpC,EAAE;QACF,UAAU,CAAC,MAAM,CAAC;QAClB,EAAE;QACF,+EAA+E;QAC/E,8IAA8I;QAC9I,EAAE;QACF,+CAA+C;QAC/C,EAAE;QACF,qHAAqH;QACrH,iHAAiH;QACjH,EAAE;QACF,gCAAgC;QAChC,KAAK;QACL,iGAAiG;QACjG,KAAK;QACL,kDAAkD;QAClD,gDAAgD;QAChD,kDAAkD;QAClD,8DAA8D;QAC9D,gCAAgC;QAChC,4BAA4B;QAC5B,wCAAwC;QACxC,EAAE;QACF,sCAAsC;QACtC,KAAK;QACL,mHAAmH;QACnH,KAAK;QACL,EAAE;QACF,0CAA0C;QAC1C,KAAK;QACL,kDAAkD;QAClD,KAAK;QACL,wEAAwE;QACxE,kEAAkE;QAClE,mEAAmE;QACnE,KAAK;QACL,gFAAgF;QAChF,gGAAgG;QAChG,KAAK;QACL,EAAE;QACF,6CAA6C;QAC7C,6FAA6F;QAC7F,yFAAyF;QACzF,sDAAsD;QACtD,0FAA0F;QAC1F,oEAAoE;QACpE,EAAE;QACF,iCAAiC;QACjC,KAAK;QACL,sDAAsD;QACtD,KAAK;QACL,0MAA0M;QAC1M,0NAA0N;QAC1N,oOAAoO;QACpO,EAAE;QACF,yCAAyC;QACzC,KAAK;QACL,iCAAiC;QACjC,KAAK;QACL,EAAE;QACF,gBAAgB;QAChB,wFAAwF;QACxF,iIAAiI;QACjI,uGAAuG;QACvG,oJAAoJ;QACpJ,2IAA2I;QAC3I,GAAG,uBAAuB,CAAC,MAAM,CAAC;QAClC,EAAE;QACF,oCAAoC;QACpC,0KAA0K;QAC1K,+MAA+M;QAC/M,iKAAiK;QACjK,sJAAsJ;QACtJ,sIAAsI;QACtI,kJAAkJ;QAClJ,8GAA8G;QAC9G,GAAG,0BAA0B,CAAC,MAAM,CAAC;QACrC,EAAE;QACF,cAAc;QACd,GAAG,QAAQ;aACR,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;QACvE,EAAE;QACF,eAAe;QACf,oCAAoC;QACpC,uEAAuE;QACvE,kDAAkD;QAClD,kEAAkE;QAClE,EAAE;QACF,sBAAsB;QACtB,kEAAkE;QAClE,mDAAmD;QACnD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,MAAM;QACN,OAAO;QACP,YAAY,EAAE,kCAAkC,CAAC,MAAM,EAAE,OAAO,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAyB,EACzB,OAAe;IAEf,MAAM,KAAK,GAAG,6BAA6B,CAAC;QAC1C,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,kCAAkC;QAC7C,OAAO,EAAE,iBAAiB;QAC1B,MAAM;QACN,cAAc,EAAE,gBAAgB;QAChC,OAAO;KACR,CAAC,CAAC;IACH,OAAO,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,SAA2B,EAC3B,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,6BAA6B,CAC1C,QAAQ,EACR;QACE,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,kCAAkC;QAC7C,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,cAAc,EAAE,gBAAgB;QAChC,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,EACD,OAAO,CACR,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO;QACrD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,GAAG,CAAC;QACb,QAAQ;QACR,WAAW;QACX,SAAS;QACT,YAAY;QACZ,MAAM;QACN,aAAa;QACb,eAAe;QACf,iBAAiB;QACjB,iBAAiB;QACjB,cAAc;QACd,QAAQ;QACR,MAAM;QACN,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACxD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO;QACL,oSAAoS;QACpS,wMAAwM;QACxM,+IAA+I;KAChJ,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAyB;IAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,kBAAkB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAyB,EACzB,OAAe;IAEf,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,EAAE;QACxC,WAAW,EAAE,wDAAwD;QACrE,KAAK,EAAE,QAAQ;QACf,gBAAgB,EAAE,iBAAiB;KACpC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"runtime-bootstrap.js","sourceRoot":"","sources":["../src/runtime-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAUzE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,gBAAgB,GAAG,mDAAmD,CAAC;AAE7E,MAAM,UAAU,sBAAsB,CACpC,SAA4B,SAAS;IAErC,MAAM,QAAQ,GAAG,mBAAmB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG;QACd,oCAAoC;QACpC,EAAE;QACF,UAAU,CAAC,MAAM,CAAC;QAClB,EAAE;QACF,+EAA+E;QAC/E,8IAA8I;QAC9I,EAAE;QACF,+CAA+C;QAC/C,EAAE;QACF,qHAAqH;QACrH,iHAAiH;QACjH,EAAE;QACF,gCAAgC;QAChC,KAAK;QACL,iGAAiG;QACjG,KAAK;QACL,kDAAkD;QAClD,gDAAgD;QAChD,kDAAkD;QAClD,8DAA8D;QAC9D,gCAAgC;QAChC,4BAA4B;QAC5B,wCAAwC;QACxC,EAAE;QACF,sCAAsC;QACtC,KAAK;QACL,mHAAmH;QACnH,KAAK;QACL,uHAAuH;QACvH,EAAE;QACF,0CAA0C;QAC1C,KAAK;QACL,kDAAkD;QAClD,KAAK;QACL,wEAAwE;QACxE,0FAA0F;QAC1F,mFAAmF;QACnF,4FAA4F;QAC5F,yEAAyE;QACzE,yNAAyN;QACzN,6LAA6L;QAC7L,2NAA2N;QAC3N,kEAAkE;QAClE,mEAAmE;QACnE,KAAK;QACL,gFAAgF;QAChF,gGAAgG;QAChG,KAAK;QACL,EAAE;QACF,6CAA6C;QAC7C,6FAA6F;QAC7F,yFAAyF;QACzF,sDAAsD;QACtD,0FAA0F;QAC1F,oEAAoE;QACpE,EAAE;QACF,iCAAiC;QACjC,KAAK;QACL,sDAAsD;QACtD,KAAK;QACL,+LAA+L;QAC/L,0MAA0M;QAC1M,0NAA0N;QAC1N,oOAAoO;QACpO,EAAE;QACF,yCAAyC;QACzC,KAAK;QACL,iCAAiC;QACjC,KAAK;QACL,+GAA+G;QAC/G,EAAE;QACF,gBAAgB;QAChB,2BAA2B;YACzB,sBAAsB,CAAC,MAAM,CAAC;YAC9B,wCAAwC;QAC1C,iIAAiI;QACjI,uGAAuG;QACvG,oJAAoJ;QACpJ,2IAA2I;QAC3I,mOAAmO;QACnO,GAAG,uBAAuB,CAAC,MAAM,CAAC;QAClC,EAAE;QACF,oCAAoC;QACpC,0KAA0K;QAC1K,+MAA+M;QAC/M,GAAG,cAAc,CAAC,MAAM,CAAC;QACzB,sJAAsJ;QACtJ,sIAAsI;QACtI,kJAAkJ;QAClJ,8GAA8G;QAC9G,GAAG,0BAA0B,CAAC,MAAM,CAAC;QACrC,EAAE;QACF,cAAc;QACd,GAAG,QAAQ;aACR,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;QACvE,EAAE;QACF,eAAe;QACf,oCAAoC;QACpC,uEAAuE;QACvE,kDAAkD;QAClD,kEAAkE;QAClE,qJAAqJ;QACrJ,EAAE;QACF,sBAAsB;QACtB,kEAAkE;QAClE,mDAAmD;QACnD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,OAAO;QACL,MAAM;QACN,OAAO;QACP,YAAY,EAAE,kCAAkC,CAAC,MAAM,EAAE,OAAO,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,MAAyB,EACzB,OAAe;IAEf,MAAM,KAAK,GAAG,6BAA6B,CAAC;QAC1C,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,kCAAkC;QAC7C,OAAO,EAAE,iBAAiB;QAC1B,MAAM;QACN,cAAc,EAAE,gBAAgB;QAChC,OAAO;KACR,CAAC,CAAC;IACH,OAAO,wBAAwB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAAgB,EAChB,SAA2B,EAC3B,UAA+B,EAAE;IAEjC,MAAM,MAAM,GAAG,6BAA6B,CAC1C,QAAQ,EACR;QACE,OAAO,EAAE,kBAAkB;QAC3B,SAAS,EAAE,kCAAkC;QAC7C,OAAO,EAAE,iBAAiB;QAC1B,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,cAAc,EAAE,gBAAgB;QAChC,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,EACD,OAAO,CACR,CAAC;IACF,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3E,OAAO;QACL,GAAG,MAAM;QACT,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,MAAM,CAAC,OAAO;QACrD,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,GAAG,CAAC;QACb,QAAQ;QACR,WAAW;QACX,SAAS;QACT,YAAY;QACZ,MAAM;QACN,aAAa;QACb,eAAe;QACf,iBAAiB;QACjB,iBAAiB;QACjB,cAAc;QACd,QAAQ;QACR,MAAM;QACN,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAyB;IAC/C,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,kBAAkB,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAyB;IACxD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,uBAAuB,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,wBAAwB,GAA+C;IAC3E,MAAM,EAAE,YAAY;IACpB,KAAK,EAAE,WAAW;IAClB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,gBAAgB;CAC3B,CAAC;AAEF,SAAS,sBAAsB,CAAC,MAAyB;IACvD,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACrD,OAAO,WAAW;QAChB,CAAC,CAAC,8BAA8B,WAAW,SAAS;QACpD,CAAC,CAAC,yBAAyB,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,MAAyB;IAC3C,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,kBAAkB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;AACtE,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAyB,EACzB,OAAe;IAEf,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,yBAAyB,CAAC,OAAO,EAAE;QACxC,WAAW,EAAE,wDAAwD;QACrE,KAAK,EAAE,QAAQ;QACf,gBAAgB,EAAE,iBAAiB;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/runtime-capacity-policy.d.ts

@@ -0,0 +1,38 @@
+import type { RuntimeCapacityScope, RuntimeCapacityUnit, RuntimeQuotaPolicy, RuntimeScheduleReasonCode, RuntimeScheduleRequest } from "./types.js";
+export type RuntimeCapacityMode = "local" | "saas";
+export declare const LOCAL_RUNTIME_CAPACITY_SCOPE: RuntimeCapacityScope;
+export declare const DEFAULT_RUNTIME_CAPACITY_UNIT: RuntimeCapacityUnit;
+export declare const DEFAULT_RUNTIME_QUOTA_POLICY: RuntimeQuotaPolicy;
+export interface RuntimeCapacityCounters {
+    active: RuntimeScheduleRequest[];
+    queued: RuntimeScheduleRequest[];
+}
+export interface RuntimeCapacityValidation {
+    valid: boolean;
+    scope: RuntimeCapacityScope;
+    reasonCode?: RuntimeScheduleReasonCode;
+    userSafeReason?: string;
+}
+export interface RuntimeCapacityLimitEvaluation {
+    allowed: boolean;
+    reasonCode?: RuntimeScheduleReasonCode;
+    userSafeReason?: string;
+}
+export declare function normalizeRuntimeScheduleRequest(request: RuntimeScheduleRequest, mode: RuntimeCapacityMode, defaultScope?: RuntimeCapacityScope): RuntimeCapacityValidation;
+export declare function evaluateRuntimeCapacityLimits({ request, scope, counters, platformPolicy, tenantPolicy, workspacePolicy, }: {
+    request: RuntimeScheduleRequest;
+    scope: RuntimeCapacityScope;
+    counters: RuntimeCapacityCounters;
+    platformPolicy: RuntimeQuotaPolicy;
+    tenantPolicy: RuntimeQuotaPolicy;
+    workspacePolicy: RuntimeQuotaPolicy;
+}): RuntimeCapacityLimitEvaluation;
+export declare function canQueueRuntimeCapacity({ request, scope, counters, platformPolicy, tenantPolicy, workspacePolicy, }: {
+    request: RuntimeScheduleRequest;
+    scope: RuntimeCapacityScope;
+    counters: RuntimeCapacityCounters;
+    platformPolicy: RuntimeQuotaPolicy;
+    tenantPolicy: RuntimeQuotaPolicy;
+    workspacePolicy: RuntimeQuotaPolicy;
+}): RuntimeCapacityLimitEvaluation;
+export declare function queueReasonForLimit(reasonCode: RuntimeScheduleReasonCode): RuntimeScheduleReasonCode;

package/dist/runtime-capacity-policy.js

@@ -0,0 +1,117 @@
+export const LOCAL_RUNTIME_CAPACITY_SCOPE = {
+    platformId: "local",
+    tenantId: "local",
+    workspaceId: "local-workspace",
+};
+export const DEFAULT_RUNTIME_CAPACITY_UNIT = {
+    concurrencyUnits: 1,
+};
+export const DEFAULT_RUNTIME_QUOTA_POLICY = {
+    maxActive: 3,
+    maxQueued: 25,
+    maxActivePerProvider: 2,
+    maxActivePerRuntime: 3,
+    limitAction: "queue",
+    queueTtlMs: 30_000,
+};
+const WORKLOAD_CLASSES = [
+    "interactive",
+    "workflow-phase",
+    "runtime-native-spawn",
+    "provider-backed-phase",
+    "background-maintenance",
+    "evidence-processing",
+];
+export function normalizeRuntimeScheduleRequest(request, mode, defaultScope = LOCAL_RUNTIME_CAPACITY_SCOPE) {
+    if (!request.scope && mode === "saas") {
+        return {
+            valid: false,
+            scope: defaultScope,
+            reasonCode: "rejected_missing_scope",
+            userSafeReason: "tenant and workspace scope are required",
+        };
+    }
+    const scope = request.scope ?? defaultScope;
+    if (!scope.platformId ||
+        !scope.tenantId ||
+        !scope.workspaceId ||
+        !WORKLOAD_CLASSES.includes(request.workloadClass) ||
+        !Number.isFinite(request.capacity.concurrencyUnits) ||
+        request.capacity.concurrencyUnits <= 0) {
+        return {
+            valid: false,
+            scope,
+            reasonCode: "rejected_invalid_request",
+            userSafeReason: "runtime capacity request is invalid",
+        };
+    }
+    return { valid: true, scope };
+}
+export function evaluateRuntimeCapacityLimits({ request, scope, counters, platformPolicy, tenantPolicy, workspacePolicy, }) {
+    const requestUnits = request.capacity.concurrencyUnits;
+    const checks = [
+        activeLimitCheck(sumActiveUnits(counters.active), requestUnits, platformPolicy.maxActive, "rejected_platform_limit", "platform runtime capacity is exhausted"),
+        activeLimitCheck(sumActiveUnits(counters.active.filter((item) => sameTenant(item, scope))), requestUnits, tenantPolicy.maxActive, "rejected_tenant_limit", "tenant runtime capacity is exhausted"),
+        activeLimitCheck(sumActiveUnits(counters.active.filter((item) => sameWorkspace(item, scope))), requestUnits, workspacePolicy.maxActive, "rejected_workspace_limit", "workspace runtime capacity is exhausted"),
+        providerLimitCheck(request, counters.active, tenantPolicy),
+        runtimeLimitCheck(request, counters.active, tenantPolicy),
+    ];
+    return checks.find((check) => !check.allowed) ?? { allowed: true };
+}
+export function canQueueRuntimeCapacity({ request, scope, counters, platformPolicy, tenantPolicy, workspacePolicy, }) {
+    const requestUnits = request.capacity.concurrencyUnits;
+    const checks = [
+        queuedLimitCheck(sumActiveUnits(counters.queued), requestUnits, platformPolicy.maxQueued, "rejected_queue_full", "platform runtime queue is full"),
+        queuedLimitCheck(sumActiveUnits(counters.queued.filter((item) => sameTenant(item, scope))), requestUnits, tenantPolicy.maxQueued, "rejected_tenant_limit", "tenant runtime queue is full"),
+        queuedLimitCheck(sumActiveUnits(counters.queued.filter((item) => sameWorkspace(item, scope))), requestUnits, workspacePolicy.maxQueued, "rejected_workspace_limit", "workspace runtime queue is full"),
+    ];
+    return checks.find((check) => !check.allowed) ?? { allowed: true };
+}
+export function queueReasonForLimit(reasonCode) {
+    if (reasonCode === "rejected_platform_limit")
+        return "queued_platform_limit";
+    if (reasonCode === "rejected_tenant_limit")
+        return "queued_tenant_limit";
+    if (reasonCode === "rejected_workspace_limit")
+        return "queued_workspace_limit";
+    if (reasonCode === "rejected_provider_limit")
+        return "queued_provider_limit";
+    if (reasonCode === "rejected_runtime_limit")
+        return "queued_runtime_limit";
+    return "queued_no_eligible_worker";
+}
+function activeLimitCheck(activeUnits, requestUnits, maxActive, reasonCode, userSafeReason) {
+    if (activeUnits + requestUnits <= maxActive)
+        return { allowed: true };
+    return { allowed: false, reasonCode, userSafeReason };
+}
+function queuedLimitCheck(queuedUnits, requestUnits, maxQueued, reasonCode, userSafeReason) {
+    if (queuedUnits + requestUnits <= maxQueued)
+        return { allowed: true };
+    return { allowed: false, reasonCode, userSafeReason };
+}
+function providerLimitCheck(request, active, policy) {
+    if (!request.provider || policy.maxActivePerProvider === undefined) {
+        return { allowed: true };
+    }
+    const activeUnits = sumActiveUnits(active.filter((item) => item.provider === request.provider));
+    return activeLimitCheck(activeUnits, request.capacity.concurrencyUnits, policy.maxActivePerProvider, "rejected_provider_limit", "provider runtime capacity is exhausted");
+}
+function runtimeLimitCheck(request, active, policy) {
+    if (!request.runtime || policy.maxActivePerRuntime === undefined) {
+        return { allowed: true };
+    }
+    const activeUnits = sumActiveUnits(active.filter((item) => item.runtime === request.runtime));
+    return activeLimitCheck(activeUnits, request.capacity.concurrencyUnits, policy.maxActivePerRuntime, "rejected_runtime_limit", "runtime capacity is exhausted");
+}
+function sameTenant(request, scope) {
+    return request.scope?.tenantId === scope.tenantId;
+}
+function sameWorkspace(request, scope) {
+    return (request.scope?.tenantId === scope.tenantId &&
+        request.scope.workspaceId === scope.workspaceId);
+}
+function sumActiveUnits(requests) {
+    return requests.reduce((total, request) => total + request.capacity.concurrencyUnits, 0);
+}
+//# sourceMappingURL=runtime-capacity-policy.js.map

package/dist/runtime-capacity-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-capacity-policy.js","sourceRoot":"","sources":["../src/runtime-capacity-policy.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,4BAA4B,GAAyB;IAChE,UAAU,EAAE,OAAO;IACnB,QAAQ,EAAE,OAAO;IACjB,WAAW,EAAE,iBAAiB;CAC/B,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAwB;IAChE,gBAAgB,EAAE,CAAC;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAuB;IAC9D,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,EAAE;IACb,oBAAoB,EAAE,CAAC;IACvB,mBAAmB,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO;IACpB,UAAU,EAAE,MAAM;CACnB,CAAC;AAoBF,MAAM,gBAAgB,GAA2B;IAC/C,aAAa;IACb,gBAAgB;IAChB,sBAAsB;IACtB,uBAAuB;IACvB,wBAAwB;IACxB,qBAAqB;CACtB,CAAC;AAEF,MAAM,UAAU,+BAA+B,CAC7C,OAA+B,EAC/B,IAAyB,EACzB,eAAqC,4BAA4B;IAEjE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACtC,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE,wBAAwB;YACpC,cAAc,EAAE,yCAAyC;SAC1D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,YAAY,CAAC;IAC5C,IACE,CAAC,KAAK,CAAC,UAAU;QACjB,CAAC,KAAK,CAAC,QAAQ;QACf,CAAC,KAAK,CAAC,WAAW;QAClB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC;QACjD,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,EACtC,CAAC;QACD,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,KAAK;YACL,UAAU,EAAE,0BAA0B;YACtC,cAAc,EAAE,qCAAqC;SACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,EAC5C,OAAO,EACP,KAAK,EACL,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,eAAe,GAQhB;IACC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACvD,MAAM,MAAM,GAAG;QACb,gBAAgB,CACd,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,YAAY,EACZ,cAAc,CAAC,SAAS,EACxB,yBAAyB,EACzB,wCAAwC,CACzC;QACD,gBAAgB,CACd,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EACzE,YAAY,EACZ,YAAY,CAAC,SAAS,EACtB,uBAAuB,EACvB,sCAAsC,CACvC;QACD,gBAAgB,CACd,cAAc,CACZ,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC7D,EACD,YAAY,EACZ,eAAe,CAAC,SAAS,EACzB,0BAA0B,EAC1B,yCAAyC,CAC1C;QACD,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;QAC1D,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;KAC1D,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,EACtC,OAAO,EACP,KAAK,EACL,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,eAAe,GAQhB;IACC,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACvD,MAAM,MAAM,GAAG;QACb,gBAAgB,CACd,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC/B,YAAY,EACZ,cAAc,CAAC,SAAS,EACxB,qBAAqB,EACrB,gCAAgC,CACjC;QACD,gBAAgB,CACd,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EACzE,YAAY,EACZ,YAAY,CAAC,SAAS,EACtB,uBAAuB,EACvB,8BAA8B,CAC/B;QACD,gBAAgB,CACd,cAAc,CACZ,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAC7D,EACD,YAAY,EACZ,eAAe,CAAC,SAAS,EACzB,0BAA0B,EAC1B,iCAAiC,CAClC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,UAAqC;IAErC,IAAI,UAAU,KAAK,yBAAyB;QAAE,OAAO,uBAAuB,CAAC;IAC7E,IAAI,UAAU,KAAK,uBAAuB;QAAE,OAAO,qBAAqB,CAAC;IACzE,IAAI,UAAU,KAAK,0BAA0B;QAC3C,OAAO,wBAAwB,CAAC;IAClC,IAAI,UAAU,KAAK,yBAAyB;QAAE,OAAO,uBAAuB,CAAC;IAC7E,IAAI,UAAU,KAAK,wBAAwB;QAAE,OAAO,sBAAsB,CAAC;IAC3E,OAAO,2BAA2B,CAAC;AACrC,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAmB,EACnB,YAAoB,EACpB,SAAiB,EACjB,UAAqC,EACrC,cAAsB;IAEtB,IAAI,WAAW,GAAG,YAAY,IAAI,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,gBAAgB,CACvB,WAAmB,EACnB,YAAoB,EACpB,SAAiB,EACjB,UAAqC,EACrC,cAAsB;IAEtB,IAAI,WAAW,GAAG,YAAY,IAAI,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA+B,EAC/B,MAAgC,EAChC,MAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAChC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAAC,CAC5D,CAAC;IACF,OAAO,gBAAgB,CACrB,WAAW,EACX,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EACjC,MAAM,CAAC,oBAAoB,EAC3B,yBAAyB,EACzB,wCAAwC,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,OAA+B,EAC/B,MAAgC,EAChC,MAA0B;IAE1B,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,WAAW,GAAG,cAAc,CAChC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAC1D,CAAC;IACF,OAAO,gBAAgB,CACrB,WAAW,EACX,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EACjC,MAAM,CAAC,mBAAmB,EAC1B,wBAAwB,EACxB,+BAA+B,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,OAA+B,EAC/B,KAA2B;IAE3B,OAAO,OAAO,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CACpB,OAA+B,EAC/B,KAA2B;IAE3B,OAAO,CACL,OAAO,CAAC,KAAK,EAAE,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAC1C,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAChD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAkC;IACxD,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,gBAAgB,EAC7D,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/runtime-capacity-scheduler-helpers.d.ts

@@ -0,0 +1,40 @@
+import type { RuntimeCapacitySchedulerEvent, RuntimeCapacityScope, RuntimeLease, RuntimeQuotaPolicy, RuntimeScheduleDecision, RuntimeScheduleReasonCode, RuntimeScheduleRequest } from "./types.js";
+export interface RuntimeCapacityQueuedRequest {
+    queueId: string;
+    request: RuntimeScheduleRequest;
+    enqueuedAt: number;
+}
+export declare function normalizeCapacityRequest({ request, defaultScope, tenantPolicy, }: {
+    request: RuntimeScheduleRequest;
+    defaultScope: RuntimeCapacityScope;
+    tenantPolicy: RuntimeQuotaPolicy;
+}): RuntimeScheduleRequest;
+export declare function sortQueuedRuntimeRequests(queue: RuntimeCapacityQueuedRequest[]): void;
+export declare function optionalExpiresAt(request: RuntimeScheduleRequest): {
+    expiresAt: string;
+} | Record<string, never>;
+export declare function reasonForCode(reasonCode: RuntimeScheduleReasonCode): string;
+export declare function createRuntimeScheduleDecision({ decisionId, status, request, reasonCode, userSafeReason, workerId, lease, queue, }: {
+    decisionId: string;
+    status: RuntimeScheduleDecision["status"];
+    request: RuntimeScheduleRequest;
+    reasonCode: RuntimeScheduleReasonCode;
+    userSafeReason: string;
+    workerId?: string;
+    lease?: RuntimeLease;
+    queue?: RuntimeScheduleDecision["queue"];
+}): {
+    decision: RuntimeScheduleDecision;
+    event: RuntimeCapacitySchedulerEvent;
+};
+export declare function createRuntimeReleaseEvent({ decisionId, lease, leaseDurationMs, }: {
+    decisionId: string;
+    lease: RuntimeLease;
+    leaseDurationMs: number;
+}): RuntimeCapacitySchedulerEvent;
+export declare function createRuntimePromotedEvent({ decisionId, request, workerId, queueLatencyMs, }: {
+    decisionId: string;
+    request: RuntimeScheduleRequest;
+    workerId: string;
+    queueLatencyMs: number;
+}): RuntimeCapacitySchedulerEvent;

package/dist/runtime-capacity-scheduler-helpers.js

@@ -0,0 +1,111 @@
+import { DEFAULT_RUNTIME_CAPACITY_UNIT } from "./runtime-capacity-policy.js";
+export function normalizeCapacityRequest({ request, defaultScope, tenantPolicy, }) {
+    return {
+        ...request,
+        scope: request.scope ?? defaultScope,
+        capacity: request.capacity ?? DEFAULT_RUNTIME_CAPACITY_UNIT,
+        queuePolicy: request.queuePolicy ?? {
+            priority: "normal",
+            limitAction: "queue",
+            ...(tenantPolicy.queueTtlMs
+                ? { maxQueueMs: tenantPolicy.queueTtlMs }
+                : {}),
+        },
+    };
+}
+export function sortQueuedRuntimeRequests(queue) {
+    queue.sort((left, right) => priorityWeight(right.request.queuePolicy?.priority) -
+        priorityWeight(left.request.queuePolicy?.priority) ||
+        left.request.scope.tenantId.localeCompare(right.request.scope.tenantId) ||
+        left.request.scope.workspaceId.localeCompare(right.request.scope.workspaceId) ||
+        left.enqueuedAt - right.enqueuedAt ||
+        left.queueId.localeCompare(right.queueId));
+}
+export function optionalExpiresAt(request) {
+    const ttl = request.queuePolicy?.maxQueueMs;
+    return ttl ? { expiresAt: new Date(Date.now() + ttl).toISOString() } : {};
+}
+export function reasonForCode(reasonCode) {
+    const reasons = {
+        admitted: "runtime capacity lease admitted",
+        queued_platform_limit: "queued until platform runtime capacity is available",
+        queued_tenant_limit: "queued until tenant runtime capacity is available",
+        queued_workspace_limit: "queued until workspace runtime capacity is available",
+        queued_provider_limit: "queued until provider runtime capacity is available",
+        queued_runtime_limit: "queued until runtime capacity is available",
+        queued_no_eligible_worker: "queued until an eligible runtime worker is available",
+        rejected_invalid_request: "runtime capacity request is invalid",
+        rejected_missing_scope: "tenant and workspace scope are required",
+        rejected_platform_limit: "platform runtime capacity is exhausted",
+        rejected_tenant_limit: "tenant runtime capacity is exhausted",
+        rejected_workspace_limit: "workspace runtime capacity is exhausted",
+        rejected_provider_limit: "provider runtime capacity is exhausted",
+        rejected_runtime_limit: "runtime capacity is exhausted",
+        rejected_queue_full: "runtime queue is full",
+        deferred_no_eligible_worker: "no eligible runtime worker is available",
+    };
+    return reasons[reasonCode];
+}
+export function createRuntimeScheduleDecision({ decisionId, status, request, reasonCode, userSafeReason, workerId, lease, queue, }) {
+    const decision = {
+        decisionId,
+        status,
+        scope: request.scope,
+        workloadClass: request.workloadClass,
+        reasonCode,
+        userSafeReason,
+        ...(workerId ? { workerId } : {}),
+        ...(lease ? { lease } : {}),
+        ...(queue ? { queue } : {}),
+    };
+    return {
+        decision,
+        event: {
+            decisionId,
+            type: status,
+            scope: request.scope,
+            workloadClass: request.workloadClass,
+            reasonCode,
+            timestamp: new Date().toISOString(),
+            ...(request.provider ? { provider: request.provider } : {}),
+            ...(request.runtime ? { runtime: request.runtime } : {}),
+            ...(workerId ? { workerId } : {}),
+        },
+    };
+}
+export function createRuntimeReleaseEvent({ decisionId, lease, leaseDurationMs, }) {
+    return {
+        decisionId,
+        type: "released",
+        scope: lease.scope,
+        workloadClass: lease.workloadClass,
+        workerId: lease.workerId,
+        reasonCode: "released",
+        leaseDurationMs,
+        timestamp: new Date().toISOString(),
+        ...(lease.provider ? { provider: lease.provider } : {}),
+        ...(lease.runtime ? { runtime: lease.runtime } : {}),
+    };
+}
+export function createRuntimePromotedEvent({ decisionId, request, workerId, queueLatencyMs, }) {
+    return {
+        decisionId,
+        type: "promoted",
+        scope: request.scope,
+        workloadClass: request.workloadClass,
+        workerId,
+        reasonCode: "admitted",
+        queueLatencyMs,
+        timestamp: new Date().toISOString(),
+        ...(request.provider ? { provider: request.provider } : {}),
+        ...(request.runtime ? { runtime: request.runtime } : {}),
+    };
+}
+function priorityWeight(priority = "normal") {
+    if (priority === "high")
+        return 3;
+    if (priority === "normal")
+        return 2;
+    return 1;
+}
+//# sourceMappingURL=runtime-capacity-scheduler-helpers.js.map