@mcoda/codali 0.1.133 → 0.1.135-codali.2

package/dist/cli/TerminalCredentials.js

@@ -0,0 +1,89 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { credentialFilePath, parseCredentialFile, resetCredentialCache } from "../runcontext/CredentialFile.js";
+import { withStateLock } from "../session/AtomicState.js";
+export const setTerminalCredential = async (key) => {
+    if (key !== undefined && (!key.trim() || /[\r\n\0]/.test(key) || key.length > 8192))
+        throw new Error("Invalid API key");
+    const file = credentialFilePath();
+    await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+    await withStateLock(file, async () => {
+        let existing = "";
+        try {
+            const stat = await fs.lstat(file);
+            if (stat.isSymbolicLink())
+                throw new Error("Credential file must not be a symlink");
+            existing = await fs.readFile(file, "utf8");
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        const lines = existing.split(/\r?\n/).filter(line => !Object.keys(parseCredentialFile(line)).some(name => ["MCODA_MSWARM_API_KEY", "MSWARM_API_KEY", "CODALI_MSWARM_LOGGED_OUT"].includes(name)));
+        lines.push(key === undefined ? "CODALI_MSWARM_LOGGED_OUT=1" : `MCODA_MSWARM_API_KEY=${key.trim()}`);
+        const temporary = `${file}.${randomUUID()}.tmp`;
+        const handle = await fs.open(temporary, "wx", 0o600);
+        try {
+            await handle.writeFile(`${lines.filter(Boolean).join("\n")}\n`);
+            await handle.sync();
+            await handle.close();
+            await fs.rename(temporary, file);
+        }
+        finally {
+            await handle.close().catch(() => undefined);
+            await fs.unlink(temporary).catch(() => undefined);
+        }
+    });
+    resetCredentialCache();
+};
+export const readTerminalCredential = async (fromStdin) => {
+    if (fromStdin) {
+        if (process.stdin.isTTY)
+            throw new Error("--stdin requires piped input");
+        let value = "";
+        for await (const chunk of process.stdin) {
+            value += String(chunk);
+            if (value.length > 8192)
+                throw new Error("API key input is too large");
+        }
+        return value.trim();
+    }
+    if (!process.stdin.isTTY)
+        throw new Error("Use codali login --stdin with piped input");
+    return new Promise((resolve, reject) => {
+        let value = "";
+        const wasRaw = process.stdin.isRaw;
+        const finish = (error) => { process.stdin.off("data", onData); process.stdin.setRawMode(wasRaw); process.stdin.pause(); process.stderr.write("\n"); error ? reject(error) : resolve(value); };
+        const onData = (chunk) => {
+            for (const character of chunk.toString("utf8")) {
+                if (character === "\u0003") {
+                    finish(new Error("Login cancelled"));
+                    return;
+                }
+                if (character === "\r" || character === "\n") {
+                    finish();
+                    return;
+                }
+                if (character === "\u007f" || character === "\b") {
+                    if (value) {
+                        value = value.slice(0, -1);
+                        process.stderr.write("\b \b");
+                    }
+                }
+                else if (character >= " " && character <= "~") {
+                    value += character;
+                    process.stderr.write("*");
+                    if (value.length > 8192) {
+                        finish(new Error("API key is too large"));
+                        return;
+                    }
+                }
+            }
+        };
+        process.stderr.write("mSwarm API key: ");
+        process.stdin.setRawMode(true);
+        process.stdin.resume();
+        process.stdin.on("data", onData);
+    });
+};

package/dist/cli/TerminalInput.d.ts

@@ -0,0 +1,24 @@
+import { Transform, type TransformCallback } from "node:stream";
+import type { Interface } from "node:readline";
+/** Bracketed paste is one editable input, never a sequence of submitted commands. */
+export declare class TerminalInput extends Transform {
+    private readonly options;
+    private readonly decoder;
+    private pending;
+    private pasting;
+    private pasted;
+    private bytes;
+    private overflow;
+    constructor(options: {
+        onPaste: (text: string) => void;
+        onRejected: (reason: string) => void;
+        maxPasteBytes?: number;
+    });
+    private append;
+    private consume;
+    _transform(chunk: Buffer, _encoding: BufferEncoding, callback: TransformCallback): void;
+    _flush(callback: TransformCallback): void;
+}
+/** readline exposes the current editable line and cursor; refresh preserves multiline content. */
+export declare const insertTerminalPaste: (readline: Interface, text: string) => void;
+//# sourceMappingURL=TerminalInput.d.ts.map

package/dist/cli/TerminalInput.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TerminalInput.d.ts","sourceRoot":"","sources":["../../src/cli/TerminalInput.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAS/C,qFAAqF;AACrF,qBAAa,aAAc,SAAQ,SAAS;IAO9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,QAAQ,CAAS;gBACI,OAAO,EAAE;QAAE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE;IACvI,OAAO,CAAC,MAAM;IAKd,OAAO,CAAC,OAAO;IAmBN,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI;IAGvF,MAAM,CAAC,QAAQ,EAAE,iBAAiB,GAAG,IAAI;CAOnD;AAED,kGAAkG;AAClG,eAAO,MAAM,mBAAmB,GAAI,UAAU,SAAS,EAAE,MAAM,MAAM,KAAG,IAOvE,CAAC"}

package/dist/cli/TerminalInput.js

@@ -0,0 +1,98 @@
+import { Transform } from "node:stream";
+import { StringDecoder } from "node:string_decoder";
+const START = "\u001b[200~";
+const END = "\u001b[201~";
+const suffixLength = (text, token) => {
+    for (let size = Math.min(text.length, token.length - 1); size > 0; size--)
+        if (text.endsWith(token.slice(0, size)))
+            return size;
+    return 0;
+};
+/** Bracketed paste is one editable input, never a sequence of submitted commands. */
+export class TerminalInput extends Transform {
+    constructor(options) {
+        super();
+        this.options = options;
+        this.decoder = new StringDecoder("utf8");
+        this.pending = "";
+        this.pasting = false;
+        this.pasted = "";
+        this.bytes = 0;
+        this.overflow = false;
+    }
+    append(text) {
+        this.bytes += Buffer.byteLength(text);
+        if (this.bytes > (this.options.maxPasteBytes ?? 262144)) {
+            this.overflow = true;
+            this.pasted = "";
+        }
+        else if (!this.overflow)
+            this.pasted += text;
+    }
+    consume(text) {
+        this.pending += text;
+        while (this.pending) {
+            const token = this.pasting ? END : START;
+            const index = this.pending.indexOf(token);
+            if (index < 0) {
+                const keep = suffixLength(this.pending, token);
+                const ready = this.pending.slice(0, this.pending.length - keep);
+                if (this.pasting)
+                    this.append(ready);
+                else if (ready)
+                    this.push(ready);
+                this.pending = keep ? this.pending.slice(-keep) : "";
+                return;
+            }
+            const ready = this.pending.slice(0, index);
+            this.pending = this.pending.slice(index + token.length);
+            if (this.pasting) {
+                this.append(ready);
+                if (this.overflow)
+                    this.options.onRejected("Paste exceeds the 256 KiB input limit");
+                else
+                    this.options.onPaste(this.pasted.replace(/\r\n?/g, "\n").replace(/[\x00-\x08\x0b\x0c\x0e-\x1f\x7f-\x9f]/g, ""));
+                this.pasting = false;
+                this.pasted = "";
+                this.bytes = 0;
+                this.overflow = false;
+            }
+            else {
+                if (ready)
+                    this.push(ready);
+                this.pasting = true;
+            }
+        }
+    }
+    _transform(chunk, _encoding, callback) {
+        try {
+            this.consume(this.decoder.write(chunk));
+            callback();
+        }
+        catch (error) {
+            callback(error);
+        }
+    }
+    _flush(callback) {
+        try {
+            this.consume(this.decoder.end());
+            if (this.pasting)
+                this.options.onRejected("Incomplete paste discarded");
+            else if (this.pending)
+                this.push(this.pending);
+            callback();
+        }
+        catch (error) {
+            callback(error);
+        }
+    }
+}
+/** readline exposes the current editable line and cursor; refresh preserves multiline content. */
+export const insertTerminalPaste = (readline, text) => {
+    // Node documents coordinated line/cursor updates; @types/node marks both readonly.
+    // Keep this compatibility boundary together: https://nodejs.org/api/readline.html#rlline
+    const editable = readline;
+    editable.line = editable.line.slice(0, editable.cursor) + text + editable.line.slice(editable.cursor);
+    editable.cursor += text.length;
+    readline.prompt(true);
+};

package/dist/cli/TerminalText.d.ts

@@ -0,0 +1,10 @@
+export declare const terminalText: (value: string) => string;
+/** Buffers incomplete ANSI/OSC sequences split across streamed chunks. */
+export declare class TerminalTextStream {
+    private pending;
+    private secrets;
+    write(chunk: string): string;
+    finish(): string;
+    reset(): void;
+}
+//# sourceMappingURL=TerminalText.d.ts.map

package/dist/cli/TerminalText.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TerminalText.d.ts","sourceRoot":"","sources":["../../src/cli/TerminalText.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,YAAY,GAAI,OAAO,MAAM,KAAG,MAA0D,CAAC;AAExG,0EAA0E;AAC1E,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,OAAO,CAAM;IACrB,OAAO,CAAC,OAAO,CAAiC;IAChD,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAwB5B,MAAM,IAAI,MAAM;IAChB,KAAK,IAAI,IAAI;CACd"}

package/dist/cli/TerminalText.js

@@ -0,0 +1,53 @@
+import { stripVTControlCharacters } from "node:util";
+import { redactSecretValues } from "../gateway/GatewayTracer.js";
+import { StreamingSecretRedactor } from "../runtime/SecretRedaction.js";
+/** Model/tool text is data, never terminal control sequences or clipboard commands. */
+const stripTerminalControls = (value) => stripVTControlCharacters(value)
+    .replace(/[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g, "")
+    .replace(/[\u202a-\u202e\u2066-\u2069]/g, "");
+export const terminalText = (value) => redactSecretValues(stripTerminalControls(value));
+/** Buffers incomplete ANSI/OSC sequences split across streamed chunks. */
+export class TerminalTextStream {
+    constructor() {
+        this.pending = "";
+        this.secrets = new StreamingSecretRedactor();
+    }
+    write(chunk) {
+        this.pending += chunk;
+        let cutoff = this.pending.length;
+        for (let index = 0; index < this.pending.length; index++) {
+            if (this.pending[index] !== "\u001b")
+                continue;
+            const next = this.pending[index + 1];
+            if (next === undefined) {
+                cutoff = index;
+                break;
+            }
+            if (["]", "P", "_", "^", "X"].includes(next)) {
+                const rest = this.pending.slice(index + 2);
+                const end = rest.search(/\u0007|\u001b\\/);
+                if (end < 0) {
+                    cutoff = index;
+                    break;
+                }
+                index += end + 2;
+            }
+            else if (next === "[") {
+                const rest = this.pending.slice(index + 2);
+                const end = rest.search(/[\x40-\x7e]/);
+                if (end < 0) {
+                    cutoff = index;
+                    break;
+                }
+                index += end + 2;
+            }
+        }
+        const ready = this.pending.slice(0, cutoff);
+        this.pending = this.pending.slice(cutoff);
+        if (this.pending.length > 8192)
+            this.pending = "";
+        return this.secrets.write(stripTerminalControls(ready));
+    }
+    finish() { this.pending = ""; return this.secrets.finish(); }
+    reset() { this.pending = ""; this.secrets = new StreamingSecretRedactor(); }
+}

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAsFA,eAAO,MAAM,MAAM,GAAU,OAAM,MAAM,EAA0B,KAAG,OAAO,CAAC,IAAI,CAkEjF,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AA2FA,eAAO,MAAM,MAAM,GAAU,OAAM,MAAM,EAA0B,KAAG,OAAO,CAAC,IAAI,CAyEjF,CAAC"}

package/dist/cli.js

@@ -11,7 +11,12 @@ import { FeedbackCommand } from "./cli/FeedbackCommand.js";
 import { EvalCommand } from "./cli/EvalCommand.js";
 import { DatasetCommand } from "./cli/DatasetCommand.js";
 import { ImprovementCommand } from "./cli/ImprovementCommand.js";
-const HELP_TEXT = "Usage: codali ask \"<question>\" [--trace] [--json] [--workspace-root <path>]\n" +
+import { TerminalCommand, terminalDoctor } from "./cli/TerminalCommand.js";
+const HELP_TEXT = "Usage: codali [chat] [prompt] [--effort low|medium|high|max] [--permissions plan|ask|workspace]\n" +
+    "   or: codali exec <prompt> [--json] [--config <path>]\n" +
+    "   or: codali setup | login [--stdin] | logout | auth status\n" +
+    "   or: codali sessions | resume <id> | inspect <id>\n" +
+    "   or: codali ask \"<question>\" [--trace] [--json] [--workspace-root <path>]\n" +
     "   or: codali tools <list|describe|call|health> [options]\n" +
     "   or: codali auth <microsoft>\n" +
     "   or: codali serve [--port <n>] [--api-key <key>]\n" +
@@ -79,6 +84,10 @@ const printDoctor = () => {
     console.log(lines.join("\n"));
 };
 export const runCli = async (argv = process.argv.slice(2)) => {
+    if (argv.length === 0 && process.stdin.isTTY) {
+        await TerminalCommand.run(["chat"]);
+        return;
+    }
     if (argv.includes("--help") || argv.includes("-h") || argv.length === 0) {
         // eslint-disable-next-line no-console
         console.log(HELP_TEXT);
@@ -86,13 +95,25 @@ export const runCli = async (argv = process.argv.slice(2)) => {
     }
     const [command, ...rest] = argv;
     if (command === "--version" || command === "-v" || command === "version") {
-        // Keep this lightweight for scaffold phase.
-        // eslint-disable-next-line no-console
-        console.log("dev");
+        const pkg = JSON.parse(fs.readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+        console.log(pkg.version);
         return;
     }
     if (command === "doctor" || command === "--doctor") {
+        if (rest.includes("--json")) {
+            await TerminalCommand.run(["doctor", ...rest]);
+            return;
+        }
         printDoctor();
+        console.log(JSON.stringify(await terminalDoctor(rest.includes("--config") ? rest[rest.indexOf("--config") + 1] : undefined), null, 2));
+        return;
+    }
+    if (["chat", "exec", "setup", "login", "logout", "sessions", "resume", "status", "inspect", "checkpoint", "amend"].includes(command)) {
+        await TerminalCommand.run(argv);
+        return;
+    }
+    if (["--effort", "--permissions", "--config", "--workspace-root", "--plain", "--json", "--stdin"].includes(command)) {
+        await TerminalCommand.run(["chat", ...argv]);
         return;
     }
     if (command === "ask") {
@@ -100,6 +121,10 @@ export const runCli = async (argv = process.argv.slice(2)) => {
         return;
     }
     if (command === "auth") {
+        if (rest[0] === "status") {
+            await TerminalCommand.run(["auth-status", ...rest.slice(1)]);
+            return;
+        }
         await AuthCommand.run(rest);
         return;
     }
@@ -131,6 +156,10 @@ export const runCli = async (argv = process.argv.slice(2)) => {
         await FeedbackCommand.run(rest);
         return;
     }
+    if (!command.startsWith("-")) {
+        await TerminalCommand.run(["chat", ...argv]);
+        return;
+    }
     throw new Error(HELP_TEXT);
 };
 const isMain = (() => {

package/dist/cognitive/ConfiguredPipeline.d.ts

@@ -0,0 +1,34 @@
+import { ConfiguredModelScope, type ScopedModelEvent, type ScopedModelUsage } from "../providers/ConfiguredModelScope.js";
+import type { EffortLevel, ResolvedOrchestrationConfig } from "../config/OrchestrationConfig.js";
+import type { ModelCallerContext } from "../providers/ConfiguredProvider.js";
+import type { DocdexClient } from "../docdex/DocdexClient.js";
+import { type ArchitectPlannerOptions } from "./ArchitectPlanner.js";
+import { type BuilderRunnerOptions } from "./BuilderRunner.js";
+import { type ContextAssemblerOptions } from "./ContextAssembler.js";
+import { type PatchInterpreterOptions } from "./PatchInterpreter.js";
+import { type SmartPipelineOptions, type SmartPipelineResult } from "./SmartPipeline.js";
+export interface ConfiguredPipelineHost {
+    /** Host supplies a managed/configured retrieval client and owns its tool permissions. */
+    docdex: DocdexClient;
+    context?: Omit<ContextAssemblerOptions, "queryProvider">;
+    architect?: ArchitectPlannerOptions;
+    builder: Omit<BuilderRunnerOptions, "provider" | "interpreter">;
+    interpreter?: Omit<PatchInterpreterOptions, "provider">;
+    /** ValidationRunner and other host operations must use scope.signal. */
+    pipeline: Omit<SmartPipelineOptions, "contextAssembler" | "architectPlanner" | "builderRunner" | "onPhaseProviderFailure">;
+}
+export interface ConfiguredPipelineOptions {
+    orchestration: ResolvedOrchestrationConfig;
+    effort?: EffortLevel;
+    signal?: AbortSignal;
+    caller?: ModelCallerContext;
+    onModelEvent?: (event: ScopedModelEvent) => Promise<void> | void;
+    configure: (scope: ConfiguredModelScope) => ConfiguredPipelineHost | Promise<ConfiguredPipelineHost>;
+}
+/** Adapter for the existing cognitive pipeline; no second execution loop or undeclared fallback. */
+export declare const runConfiguredPipeline: (task: string, options: ConfiguredPipelineOptions) => Promise<{
+    result: SmartPipelineResult;
+    usage: ScopedModelUsage;
+    toolCalls: number;
+}>;
+//# sourceMappingURL=ConfiguredPipeline.d.ts.map

package/dist/cognitive/ConfiguredPipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfiguredPipeline.d.ts","sourceRoot":"","sources":["../../src/cognitive/ConfiguredPipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAC1H,OAAO,KAAK,EAAE,WAAW,EAAE,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAoB,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAiB,KAAK,oBAAoB,EAAE,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAExG,MAAM,WAAW,sBAAsB;IACrC,yFAAyF;IACzF,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC;IACzD,SAAS,CAAC,EAAE,uBAAuB,CAAC;IACpC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,UAAU,GAAG,aAAa,CAAC,CAAC;IAChE,WAAW,CAAC,EAAE,IAAI,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;IACxD,wEAAwE;IACxE,QAAQ,EAAE,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,GAAG,kBAAkB,GAAG,eAAe,GAAG,wBAAwB,CAAC,CAAC;CAC5H;AACD,MAAM,WAAW,yBAAyB;IACxC,aAAa,EAAE,2BAA2B,CAAC;IAC3C,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACjE,SAAS,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACtG;AAED,oGAAoG;AACpG,eAAO,MAAM,qBAAqB,GAAU,MAAM,MAAM,EAAE,SAAS,yBAAyB,KAAG,OAAO,CAAC;IAAE,MAAM,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAgCjL,CAAC"}

package/dist/cognitive/ConfiguredPipeline.js

@@ -0,0 +1,50 @@
+import { ConfiguredModelScope } from "../providers/ConfiguredModelScope.js";
+import { ArchitectPlanner } from "./ArchitectPlanner.js";
+import { BuilderRunner } from "./BuilderRunner.js";
+import { ContextAssembler } from "./ContextAssembler.js";
+import { PatchInterpreter } from "./PatchInterpreter.js";
+import { SmartPipeline } from "./SmartPipeline.js";
+/** Adapter for the existing cognitive pipeline; no second execution loop or undeclared fallback. */
+export const runConfiguredPipeline = async (task, options) => {
+    const scope = new ConfiguredModelScope(options.orchestration, { effort: options.effort, signal: options.signal, caller: options.caller, onEvent: options.onModelEvent });
+    let toolCalls = 0;
+    try {
+        const host = await options.configure(scope);
+        const budget = scope.budget();
+        for (const [record, forbidden] of [[host.context, ["queryProvider"]], [host.builder, ["provider", "interpreter"]], [host.interpreter, ["provider"]],
+            [host.pipeline, ["contextAssembler", "architectPlanner", "builderRunner", "onPhaseProviderFailure"]]]) {
+            for (const key of forbidden)
+                if (record && key in record)
+                    throw new Error(`Configured pipeline cannot accept a legacy ${key} override`);
+        }
+        scope.signal.throwIfAborted();
+        const beforeTool = host.builder.context.beforeTool;
+        const afterTool = host.builder.context.afterTool;
+        const context = { ...host.builder.context, signal: scope.signal,
+            beforeTool: async (...args) => {
+                scope.signal.throwIfAborted();
+                if (toolCalls >= budget.maxToolCalls)
+                    throw new Error("Shared pipeline tool budget exhausted");
+                toolCalls++;
+                await beforeTool?.(...args);
+                scope.signal.throwIfAborted();
+            },
+            afterTool: async (...args) => { await afterTool?.(...args); scope.signal.throwIfAborted(); },
+        };
+        const pipeline = new SmartPipeline({ ...host.pipeline,
+            contextAssembler: new ContextAssembler(host.docdex, { ...host.context, queryProvider: scope.provider("router") }),
+            architectPlanner: new ArchitectPlanner(scope.provider("architect"), host.architect),
+            builderRunner: new BuilderRunner({ ...host.builder, context, provider: scope.provider("worker"),
+                maxTokens: Math.min(host.builder.maxTokens ?? budget.maxOutputTokens, budget.maxOutputTokens),
+                maxSteps: Math.min(host.builder.maxSteps, budget.maxSteps), maxToolCalls: Math.min(host.builder.maxToolCalls, budget.maxToolCalls),
+                timeoutMs: Math.min(host.builder.timeoutMs ?? budget.timeoutMs, budget.timeoutMs),
+                interpreter: host.interpreter ? new PatchInterpreter({ ...host.interpreter, provider: scope.provider("repair") }) : undefined }),
+        });
+        const result = await pipeline.run(task);
+        scope.signal.throwIfAborted();
+        return { result, usage: scope.snapshot(), toolCalls };
+    }
+    finally {
+        scope.close();
+    }
+};

package/dist/cognitive/ValidationRunner.d.ts

@@ -1,6 +1,10 @@
+import { type ToolContext } from "../tools/ToolTypes.js";
 import type { DocdexClient } from "../docdex/DocdexClient.js";
 import type { VerificationCheckResult, VerificationCheckType, VerificationOutcome, VerificationPolicySummary, VerificationReasonCode, VerificationReport } from "./Types.js";
 export interface ValidationRunnerOptions {
+    signal?: AbortSignal;
+    shellExecutor?: ToolContext["shellExecutor"];
+    onOutput?: ToolContext["onOutput"];
     allowShell: boolean;
     shellAllowlist: string[];
     workspaceRoot: string;

package/dist/cognitive/ValidationRunner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ValidationRunner.d.ts","sourceRoot":"","sources":["../../src/cognitive/ValidationRunner.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3E;AAED,KAAK,gBAAgB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAErD,MAAM,MAAM,yBAAyB,GACjC,MAAM,GACN,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,CAAC;AAEd,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,qBAAqB,CAAC;IAClC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,yBAAyB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAClC,MAAM,EAAE,yBAAyB,CAAC;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAuQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAA0B;gBAE7B,OAAO,EAAE,uBAAuB;IAItC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAsQ7F"}
+{"version":3,"file":"ValidationRunner.d.ts","sourceRoot":"","sources":["../../src/cognitive/ValidationRunner.ts"],"names":[],"mappings":"AACA,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAG7E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACrB,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,aAAa,CAAC,EAAE,WAAW,CAAC,eAAe,CAAC,CAAC;IAC7C,QAAQ,CAAC,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,4BAA4B,CAAC,EAAE,OAAO,CAAC;CACxC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,wBAAwB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC3E;AAED,KAAK,gBAAgB,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAErD,MAAM,MAAM,yBAAyB,GACjC,MAAM,GACN,MAAM,GACN,OAAO,GACP,MAAM,GACN,SAAS,CAAC;AAEd,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,qBAAqB,CAAC;IAClC,QAAQ,EAAE,yBAAyB,CAAC;IACpC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,EAAE,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;IACzC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,MAAM,EAAE,yBAAyB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,YAAY,EAAE,sBAAsB,EAAE,CAAC;IACvC,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAClC,MAAM,EAAE,yBAAyB,CAAC;IAClC,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,kBAAkB,CAAC;CAC5B;AAuQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAA0B;gBAE7B,OAAO,EAAE,uBAAuB;IAItC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,UAAU,GAAE,oBAAyB,GAAG,OAAO,CAAC,gBAAgB,CAAC;CA4O7F"}

package/dist/cognitive/ValidationRunner.js

@@ -1,4 +1,5 @@
-import { spawnSync } from "node:child_process";
+import { runProcess } from "../tools/shell/AsyncProcess.js";
+import { ToolExecutionError } from "../tools/ToolTypes.js";
 import { existsSync } from "node:fs";
 import path from "node:path";
 const DEFAULT_SHELL_TIMEOUT_MS = 120000;
@@ -266,6 +267,7 @@ export class ValidationRunner {
         this.options = options;
     }
     async run(steps, runOptions = {}) {
+        this.options.signal?.throwIfAborted();
         const errors = [];
         const touchedFiles = (runOptions.touchedFiles ?? []).map((entry) => entry.trim()).filter(Boolean);
         const languageSignals = detectLanguageSignals(touchedFiles);
@@ -330,6 +332,7 @@ export class ValidationRunner {
             }
         };
         for (const check of checks) {
+            this.options.signal?.throwIfAborted();
             const startedAt = Date.now();
             const step = check.step;
             if (!step) {
@@ -405,54 +408,28 @@ export class ValidationRunner {
                 });
                 continue;
             }
-            const result = spawnSync(command, args, {
-                cwd: this.options.workspaceRoot,
-                encoding: "utf8",
-                timeout: this.options.shellTimeoutMs ?? DEFAULT_SHELL_TIMEOUT_MS,
-            });
-            if (result.error) {
-                const errorMessage = result.error.message;
-                const timeoutHit = result.error.name === "TimeoutError"
-                    || result.error.code === "ETIMEDOUT"
-                    || result.error.message.toLowerCase().includes("timed out");
-                pushResult({
-                    ...check,
-                    status: "failed",
-                    reason_code: timeoutHit
-                        ? "verification_command_timeout"
-                        : "verification_tool_unavailable",
-                    message: errorMessage,
-                    duration_ms: Date.now() - startedAt,
+            try {
+                const result = await (this.options.shellExecutor ?? runProcess)(command, args, {
+                    workspaceRoot: this.options.workspaceRoot, signal: this.options.signal,
+                    shellTimeoutMs: this.options.shellTimeoutMs ?? DEFAULT_SHELL_TIMEOUT_MS, onOutput: this.options.onOutput,
                 });
-                continue;
+                this.options.signal?.throwIfAborted();
+                const details = result.data;
+                pushResult({ ...check, status: "passed", evidence: compactText(details?.stdout ?? result.output) ?? `command succeeded: ${command}`, duration_ms: Date.now() - startedAt });
             }
-            if (result.status === null && result.signal === "SIGTERM") {
+            catch (error) {
+                this.options.signal?.throwIfAborted();
+                const code = error instanceof ToolExecutionError ? error.code : undefined;
+                const details = error instanceof ToolExecutionError ? error.details : undefined;
                 pushResult({
                     ...check,
                     status: "failed",
-                    reason_code: "verification_command_timeout",
-                    message: `command timed out: ${command}`,
+                    reason_code: code === "tool_timeout" ? "verification_command_timeout" : code === "tool_execution_failed" ? "verification_command_failed" : "verification_tool_unavailable",
+                    message: error instanceof Error ? error.message : String(error),
+                    evidence: compactText(details?.stdout),
                     duration_ms: Date.now() - startedAt,
                 });
-                continue;
-            }
-            if (result.status !== 0) {
-                pushResult({
-                    ...check,
-                    status: "failed",
-                    reason_code: "verification_command_failed",
-                    message: result.stderr?.toString().trim() || `command failed: ${command}`,
-                    evidence: compactText(result.stdout?.toString()),
-                    duration_ms: Date.now() - startedAt,
-                });
-                continue;
             }
-            pushResult({
-                ...check,
-                status: "passed",
-                evidence: compactText(result.stdout?.toString()) ?? `command succeeded: ${command}`,
-                duration_ms: Date.now() - startedAt,
-            });
         }
         const totals = {
             configured: checks.length,

package/dist/config/NodeOrchestration.d.ts

@@ -0,0 +1,21 @@
+export interface ApprovedNodeModel {
+    model: string;
+    baseUrl?: string;
+    modelDigest?: string;
+    contextWindow?: number;
+    maxOutputTokens?: number;
+    modelsPath?: string;
+    supportsTools?: boolean;
+    supportsStreaming?: boolean;
+}
+/** The node may serve only the model already admitted by its registry/job boundary. */
+export declare function loadNodeOrchestrationConfig(file: string, approved: ApprovedNodeModel, nativeReasoning?: {
+    reasoning_effort?: string;
+    reasoning_budget_tokens?: number;
+}): Promise<{
+    sourceHash: string;
+    config: import("./OrchestrationConfig.js").OrchestrationConfig;
+    hash: string;
+    source: string;
+}>;
+//# sourceMappingURL=NodeOrchestration.d.ts.map

package/dist/config/NodeOrchestration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeOrchestration.d.ts","sourceRoot":"","sources":["../../src/config/NodeOrchestration.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,uFAAuF;AACvF,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,eAAe,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,uBAAuB,CAAC,EAAE,MAAM,CAAA;CAAO;;;;;GAyCjL"}