@mcoda/codali 0.1.133 → 0.1.135-codali.2

package/dist/config/NodeOrchestration.js

@@ -0,0 +1,54 @@
+import path from "node:path";
+import { loadOrchestrationConfig, orchestrationHash } from "./OrchestrationConfig.js";
+/** The node may serve only the model already admitted by its registry/job boundary. */
+export async function loadNodeOrchestrationConfig(file, approved, nativeReasoning = {}) {
+    if (Object.keys(nativeReasoning).some(key => !["reasoning_effort", "reasoning_budget_tokens"].includes(key)))
+        throw new Error("Unsupported native reasoning field");
+    if (nativeReasoning.reasoning_effort !== undefined && (typeof nativeReasoning.reasoning_effort !== "string" || !/^[a-z][a-z0-9_-]{0,31}$/.test(nativeReasoning.reasoning_effort)))
+        throw new Error("Invalid reasoning_effort");
+    if (nativeReasoning.reasoning_budget_tokens !== undefined && (!Number.isSafeInteger(nativeReasoning.reasoning_budget_tokens) || nativeReasoning.reasoning_budget_tokens < 0 || nativeReasoning.reasoning_budget_tokens > 1000000))
+        throw new Error("Invalid reasoning_budget_tokens");
+    if (!path.isAbsolute(file))
+        throw new Error("Node orchestration config path must be absolute");
+    if (!approved.baseUrl)
+        throw new Error("Configured node orchestration requires an approved local runner");
+    const endpoint = new URL(approved.baseUrl);
+    if (!["127.0.0.1", "localhost", "[::1]"].includes(endpoint.hostname))
+        throw new Error("Configured node orchestration requires a loopback runner");
+    const normalize = (value) => new URL(value).toString().replace(/\/$/, "");
+    const expectedCatalog = approved.modelsPath
+        ? new URL(approved.modelsPath, `${normalize(endpoint.toString())}/`).toString()
+        : `${normalize(endpoint.toString())}/models`;
+    const resolved = await loadOrchestrationConfig(file);
+    for (const provider of Object.values(resolved.config.providers)) {
+        if (provider.adapter !== "openai-compatible" || normalize(provider.baseUrl) !== normalize(endpoint.toString())) {
+            throw new Error("Node orchestration provider must match the approved runner; public gateway recursion is forbidden");
+        }
+        if (normalize(provider.catalogUrl ?? `${normalize(provider.baseUrl)}/models`) !== normalize(expectedCatalog)
+            || provider.usageUrl || provider.mediaJobsUrl)
+            throw new Error("Node orchestration catalog/operations differ from the approved runner");
+    }
+    for (const model of Object.values(resolved.config.models)) {
+        if (model.catalogId !== approved.model || model.operations.some(operation => operation !== "chat.completions")) {
+            throw new Error("Node orchestration cannot change the admitted model or operation");
+        }
+        if (approved.modelDigest && model.revision !== approved.modelDigest)
+            throw new Error("Node orchestration model revision differs from the approved artifact");
+        if (model.supportsTools && !approved.supportsTools || model.supportsStreaming && !approved.supportsStreaming)
+            throw new Error("Node orchestration exceeds approved model capabilities");
+        if (approved.contextWindow && model.contextWindow > approved.contextWindow
+            || approved.maxOutputTokens && model.maxOutputTokens > approved.maxOutputTokens)
+            throw new Error("Node orchestration exceeds approved model limits");
+    }
+    const sourceHash = resolved.hash;
+    if (Object.values(nativeReasoning).some(value => value !== undefined)) {
+        for (const model of Object.values(resolved.config.models)) {
+            // The caller can select native reasoning, but cannot change the admitted
+            // model, endpoint, tools or shared execution budget. All nested roles use
+            // the same pinned effective configuration for this invocation.
+            model.reasoning = Object.fromEntries(["low", "medium", "high", "max"].map(level => [level, { ...model.reasoning?.[level], ...nativeReasoning }]));
+        }
+        resolved.hash = orchestrationHash(resolved.config);
+    }
+    return { ...resolved, sourceHash };
+}

package/dist/config/OrchestrationConfig.d.ts

@@ -0,0 +1,100 @@
+export type EffortLevel = "low" | "medium" | "high" | "max";
+export type ModelOperation = "chat.completions" | "embeddings" | "images.generations" | "audio.generations" | "videos.generations";
+export interface EffortBudget {
+    maxSteps: number;
+    maxToolCalls: number;
+    maxModelCalls: number;
+    maxTotalTokens: number;
+    maxOutputTokens: number;
+    timeoutMs: number;
+}
+export declare const EFFORT_BUDGETS: Readonly<Record<EffortLevel, Readonly<EffortBudget>>>;
+export interface OrchestrationProvider {
+    adapter: "mswarm" | "openai-compatible";
+    baseUrl: string;
+    credentialRef?: string;
+    catalogUrl?: string;
+    usageUrl?: string;
+    /** Opt-in mswarm-media-jobs-v1 contract; synchronous adapters may omit it. */
+    mediaJobsUrl?: string;
+}
+export interface OrchestrationModel {
+    provider: string;
+    catalogId: string;
+    revision: string;
+    operations: ModelOperation[];
+    backend?: string;
+    host?: string;
+    resourcePool?: string;
+    contextWindow: number;
+    maxOutputTokens: number;
+    supportsTools?: boolean;
+    supportsStreaming?: boolean;
+    embeddingDimensions?: number;
+    embedding?: {
+        queryPrefix: string;
+        documentPrefix: string;
+        normalization: "none" | "l2";
+        pooling: string;
+    };
+    reasoning?: Partial<Record<EffortLevel, Record<string, unknown>>>;
+}
+export interface ModelBinding {
+    candidates?: string[];
+    useBinding?: string;
+    enabled?: boolean;
+    embeddingSpace?: string;
+}
+export interface TaskControlConfig {
+    maxWritingTasksPerWorktree: 1;
+    maxConcurrentHelpers: number;
+    helpers: "read-only-or-draft";
+    repeatedFailureThreshold: number;
+    repairAttemptsBeforeReplan: number;
+    checkpointOn: string[];
+    reviewPolicy: "risk-and-evidence";
+}
+export interface OrchestrationConfig {
+    schemaVersion: 1;
+    profile: string;
+    providers: Record<string, OrchestrationProvider>;
+    models: Record<string, OrchestrationModel>;
+    bindings: Record<string, ModelBinding>;
+    routing?: {
+        strategy: "capability-and-capacity";
+        requiredBackends?: Record<string, string[]>;
+    };
+    effort?: Partial<Record<EffortLevel, Partial<EffortBudget>>>;
+    taskControl?: TaskControlConfig;
+    docdex?: {
+        binary?: string;
+        binarySha256?: string;
+        startupTimeoutMs?: number;
+    };
+}
+export interface ResolvedOrchestrationConfig {
+    config: OrchestrationConfig;
+    hash: string;
+    source: string;
+}
+export declare const pinOrchestrationConfig: (resolved: ResolvedOrchestrationConfig) => ResolvedOrchestrationConfig;
+export declare const orchestrationHash: (config: OrchestrationConfig) => string;
+export declare const validateOrchestrationConfig: (input: unknown) => OrchestrationConfig;
+/** Every candidate in a failover binding must produce the same vector space. */
+export declare const configuredEmbeddingSpace: (config: OrchestrationConfig, binding?: string) => {
+    id: string;
+    queryPrefix: string;
+    documentPrefix: string;
+    normalization: "none" | "l2";
+    pooling: string;
+    revision: string;
+    dimensions: number;
+    label: string;
+};
+export declare const resolveBinding: (config: OrchestrationConfig, name: string, operation?: ModelOperation) => Array<{
+    id: string;
+    model: OrchestrationModel;
+}>;
+export declare const loadOrchestrationConfig: (file?: string) => Promise<ResolvedOrchestrationConfig>;
+export declare const effortBudget: (config: OrchestrationConfig, level: EffortLevel) => EffortBudget;
+//# sourceMappingURL=OrchestrationConfig.d.ts.map

package/dist/config/OrchestrationConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OrchestrationConfig.d.ts","sourceRoot":"","sources":["../../src/config/OrchestrationConfig.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,kBAAkB,GAAG,YAAY,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,oBAAoB,CAAC;AACnI,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AACD,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC,CAK/E,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,QAAQ,GAAG,mBAAmB,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AACD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,cAAc,EAAE,CAAC;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3G,SAAS,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACnE;AACD,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AACD,MAAM,WAAW,iBAAiB;IAChC,0BAA0B,EAAE,CAAC,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,OAAO,EAAE,oBAAoB,CAAC;IAC9B,wBAAwB,EAAE,MAAM,CAAC;IACjC,0BAA0B,EAAE,MAAM,CAAC;IACnC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,mBAAmB,CAAC;CACnC;AACD,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACvC,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,yBAAyB,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;KAAE,CAAC;IAC/F,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7D,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AACD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,mBAAmB,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,sBAAsB,GAAI,UAAU,2BAA2B,KAAG,2BAI9E,CAAC;AA4BF,eAAO,MAAM,iBAAiB,GAAI,QAAQ,mBAAmB,KAAG,MAAsF,CAAC;AAEvJ,eAAO,MAAM,2BAA2B,GAAI,OAAO,OAAO,KAAG,mBA6F5D,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,wBAAwB,GAAI,QAAQ,mBAAmB,EAAE,gBAAqB;;iBArK9D,MAAM;oBAAkB,MAAM;mBAAiB,MAAM,GAAG,IAAI;aAAW,MAAM;;;;CAyLzG,CAAC;AAEF,eAAO,MAAM,cAAc,GAAI,QAAQ,mBAAmB,EAAE,MAAM,MAAM,EAAE,YAAY,cAAc,KAAG,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAA;CAAE,CAerJ,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAAU,aAAuG,KAAG,OAAO,CAAC,2BAA2B,CAI1L,CAAC;AACF,eAAO,MAAM,YAAY,GAAI,QAAQ,mBAAmB,EAAE,OAAO,WAAW,KAAG,YAAyE,CAAC"}

package/dist/config/OrchestrationConfig.js

@@ -0,0 +1,245 @@
+import { createHash } from "node:crypto";
+import { readFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import path from "node:path";
+export const EFFORT_BUDGETS = Object.freeze({
+    low: Object.freeze({ maxSteps: 12, maxToolCalls: 12, maxModelCalls: 12, maxTotalTokens: 32000, maxOutputTokens: 2048, timeoutMs: 300000 }),
+    medium: Object.freeze({ maxSteps: 32, maxToolCalls: 48, maxModelCalls: 36, maxTotalTokens: 128000, maxOutputTokens: 4096, timeoutMs: 900000 }),
+    high: Object.freeze({ maxSteps: 64, maxToolCalls: 128, maxModelCalls: 72, maxTotalTokens: 320000, maxOutputTokens: 8192, timeoutMs: 1800000 }),
+    max: Object.freeze({ maxSteps: 128, maxToolCalls: 256, maxModelCalls: 144, maxTotalTokens: 640000, maxOutputTokens: 8192, timeoutMs: 3600000 }),
+});
+export const pinOrchestrationConfig = (resolved) => {
+    const config = validateOrchestrationConfig(structuredClone(resolved.config));
+    if (orchestrationHash(config) !== resolved.hash)
+        throw new Error("Orchestration configuration hash does not match its contents");
+    return { config, hash: resolved.hash, source: resolved.source };
+};
+const operations = new Set(["chat.completions", "embeddings", "images.generations", "audio.generations", "videos.generations"]);
+const isRecord = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+const hasOwn = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+const object = (v, label) => {
+    if (!isRecord(v))
+        throw new Error(`${label} must be an object`);
+    return v;
+};
+const fields = (v, allowed, label) => {
+    for (const key of Object.keys(v))
+        if (!allowed.includes(key))
+            throw new Error(`${label}: unknown field ${key}`);
+};
+const nonempty = (v, label) => {
+    if (typeof v !== "string" || !v.trim() || /[\x00-\x1f]/.test(v))
+        throw new Error(`${label} must be a nonempty string`);
+    return v;
+};
+const positive = (v, label) => {
+    if (!Number.isSafeInteger(v) || v <= 0)
+        throw new Error(`${label} must be a positive integer`);
+};
+const trustedUrl = (v, label) => {
+    const url = new URL(nonempty(v, label));
+    if (url.username || url.password || url.search || url.hash)
+        throw new Error(`${label} must not contain credentials, query or fragment`);
+    if (url.protocol !== "https:" && !(url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname))) {
+        throw new Error(`${label} requires HTTPS (HTTP is permitted only for loopback development)`);
+    }
+};
+const canonical = (v) => Array.isArray(v) ? v.map(canonical) : isRecord(v)
+    ? Object.fromEntries(Object.keys(v).sort().map(k => [k, canonical(v[k])])) : v;
+export const orchestrationHash = (config) => createHash("sha256").update(JSON.stringify(canonical(config))).digest("hex");
+export const validateOrchestrationConfig = (input) => {
+    const root = object(input, "orchestration");
+    fields(root, ["schemaVersion", "profile", "providers", "models", "bindings", "routing", "effort", "taskControl", "docdex"], "orchestration");
+    if (root.schemaVersion !== 1)
+        throw new Error("Unsupported orchestration schemaVersion");
+    nonempty(root.profile, "profile");
+    const providers = object(root.providers, "providers");
+    for (const [id, entry] of Object.entries(providers)) {
+        const p = object(entry, `providers.${id}`);
+        fields(p, ["adapter", "baseUrl", "credentialRef", "catalogUrl", "usageUrl", "mediaJobsUrl"], `providers.${id}`);
+        if (!["mswarm", "openai-compatible"].includes(String(p.adapter)))
+            throw new Error(`Unsupported adapter: ${id}`);
+        trustedUrl(p.baseUrl, `${id}.baseUrl`);
+        if (p.credentialRef !== undefined && !/^env:[A-Za-z_][A-Za-z0-9_]*$/.test(String(p.credentialRef)))
+            throw new Error(`${id}: credentialRef must be env:NAME`);
+        if (p.adapter === "mswarm" && !p.credentialRef)
+            throw new Error(`${id}: mSwarm requires credentialRef`);
+        for (const key of ["catalogUrl", "usageUrl", "mediaJobsUrl"])
+            if (p[key] !== undefined) {
+                trustedUrl(p[key], `${id}.${key}`);
+                if (new URL(String(p[key])).origin !== new URL(String(p.baseUrl)).origin)
+                    throw new Error(`${id}.${key} must use the provider origin`);
+            }
+    }
+    const models = object(root.models, "models");
+    for (const [id, entry] of Object.entries(models)) {
+        const m = object(entry, `models.${id}`);
+        fields(m, ["provider", "catalogId", "revision", "operations", "backend", "host", "resourcePool", "contextWindow", "maxOutputTokens", "supportsTools", "supportsStreaming", "embeddingDimensions", "embedding", "reasoning"], `models.${id}`);
+        if (!hasOwn(providers, String(m.provider)))
+            throw new Error(`${id}: unknown provider`);
+        nonempty(m.catalogId, `${id}.catalogId`);
+        nonempty(m.revision, `${id}.revision`);
+        positive(m.contextWindow, `${id}.contextWindow`);
+        positive(m.maxOutputTokens, `${id}.maxOutputTokens`);
+        if (Number(m.maxOutputTokens) > Number(m.contextWindow))
+            throw new Error(`${id}: output exceeds context window`);
+        if (!Array.isArray(m.operations) || !m.operations.length || m.operations.some(o => !operations.has(o)))
+            throw new Error(`${id}: invalid operations`);
+        for (const key of ["supportsTools", "supportsStreaming"])
+            if (m[key] !== undefined && typeof m[key] !== "boolean")
+                throw new Error(`${id}.${key} must be boolean`);
+        for (const key of ["host", "backend", "resourcePool"])
+            if (m[key] !== undefined)
+                nonempty(m[key], `${id}.${key}`);
+        if (m.embeddingDimensions !== undefined)
+            positive(m.embeddingDimensions, `${id}.embeddingDimensions`);
+        if (m.embedding !== undefined) {
+            const e = object(m.embedding, `${id}.embedding`);
+            fields(e, ["queryPrefix", "documentPrefix", "normalization", "pooling"], `${id}.embedding`);
+            for (const key of ["queryPrefix", "documentPrefix"])
+                if (typeof e[key] !== "string" || String(e[key]).length > 256 || /[\x00-\x1f]/.test(String(e[key])))
+                    throw new Error(`${id}.embedding.${key} must be a bounded string`);
+            if (!["none", "l2"].includes(String(e.normalization)))
+                throw new Error(`${id}: invalid embedding normalization`);
+            nonempty(e.pooling, `${id}.embedding.pooling`);
+        }
+        if (m.reasoning !== undefined) {
+            const mapping = object(m.reasoning, `${id}.reasoning`);
+            fields(mapping, ["low", "medium", "high", "max"], `${id}.reasoning`);
+            for (const [level, settings] of Object.entries(mapping)) {
+                const values = object(settings, `${id}.reasoning.${level}`);
+                fields(values, ["reasoning_effort", "reasoning_budget", "reasoning_budget_tokens", "enable_thinking"], `${id}.reasoning.${level}`);
+                if (values.reasoning_effort !== undefined)
+                    nonempty(values.reasoning_effort, `${id}.reasoning.${level}.reasoning_effort`);
+                if (values.reasoning_budget !== undefined)
+                    positive(values.reasoning_budget, `${id}.reasoning.${level}.reasoning_budget`);
+                if (values.reasoning_budget_tokens !== undefined && (!Number.isSafeInteger(values.reasoning_budget_tokens) || Number(values.reasoning_budget_tokens) < 0 || Number(values.reasoning_budget_tokens) > 1000000))
+                    throw new Error(`${id}.reasoning.${level}.reasoning_budget_tokens must be an integer from 0 through 1000000`);
+                if (values.enable_thinking !== undefined && typeof values.enable_thinking !== "boolean")
+                    throw new Error(`${id}.reasoning.${level}.enable_thinking must be boolean`);
+            }
+        }
+    }
+    const bindings = object(root.bindings, "bindings");
+    if (!hasOwn(bindings, "lead"))
+        throw new Error("Missing lead binding");
+    for (const [name, entry] of Object.entries(bindings)) {
+        const b = object(entry, `bindings.${name}`);
+        fields(b, ["candidates", "useBinding", "enabled", "embeddingSpace"], `bindings.${name}`);
+        if (b.enabled !== undefined && typeof b.enabled !== "boolean")
+            throw new Error(`${name}.enabled must be boolean`);
+        if (b.enabled === false) {
+            if (name === "lead")
+                throw new Error("Lead cannot be disabled");
+            continue;
+        }
+        if ((b.candidates !== undefined) === (b.useBinding !== undefined))
+            throw new Error(`${name}: specify candidates or useBinding`);
+        if (b.useBinding !== undefined && !hasOwn(bindings, String(b.useBinding)))
+            throw new Error(`${name}: unknown binding alias`);
+        if (b.candidates !== undefined && (!Array.isArray(b.candidates) || !b.candidates.length || b.candidates.some(id => typeof id !== "string" || !hasOwn(models, id)) || new Set(b.candidates).size !== b.candidates.length))
+            throw new Error(`${name}: invalid/duplicate/undeclared candidates`);
+        if (b.embeddingSpace !== undefined)
+            nonempty(b.embeddingSpace, `${name}.embeddingSpace`);
+    }
+    if (root.routing !== undefined) {
+        const r = object(root.routing, "routing");
+        fields(r, ["strategy", "requiredBackends"], "routing");
+        if (r.strategy !== "capability-and-capacity")
+            throw new Error("Unsupported routing strategy");
+        for (const [role, values] of Object.entries(object(r.requiredBackends ?? {}, "requiredBackends"))) {
+            if (!hasOwn(bindings, role) || !Array.isArray(values) || !values.length || values.some(x => typeof x !== "string" || !x))
+                throw new Error(`Invalid requiredBackends: ${role}`);
+        }
+    }
+    if (root.effort !== undefined) {
+        const profiles = object(root.effort, "effort");
+        fields(profiles, ["low", "medium", "high", "max"], "effort");
+        for (const [level, entry] of Object.entries(profiles)) {
+            const p = object(entry, `effort.${level}`);
+            fields(p, Object.keys(EFFORT_BUDGETS.low), `effort.${level}`);
+            for (const [key, value] of Object.entries(p))
+                positive(value, `effort.${level}.${key}`);
+        }
+    }
+    if (root.taskControl !== undefined) {
+        const t = object(root.taskControl, "taskControl");
+        fields(t, ["maxWritingTasksPerWorktree", "maxConcurrentHelpers", "helpers", "repeatedFailureThreshold", "repairAttemptsBeforeReplan", "checkpointOn", "reviewPolicy"], "taskControl");
+        if (t.maxWritingTasksPerWorktree !== 1 || t.helpers !== "read-only-or-draft" || t.reviewPolicy !== "risk-and-evidence")
+            throw new Error("Invalid task-control safety policy");
+        for (const key of ["maxConcurrentHelpers", "repeatedFailureThreshold", "repairAttemptsBeforeReplan"])
+            positive(t[key], `taskControl.${key}`);
+        if (!Array.isArray(t.checkpointOn) || t.checkpointOn.some(v => !["task-transition", "before-compaction", "before-exit"].includes(String(v))))
+            throw new Error("Invalid checkpointOn policy");
+    }
+    if (root.docdex !== undefined) {
+        const d = object(root.docdex, "docdex");
+        fields(d, ["binary", "binarySha256", "startupTimeoutMs"], "docdex");
+        if (d.binary !== undefined)
+            nonempty(d.binary, "docdex.binary");
+        if (d.binarySha256 !== undefined && (typeof d.binarySha256 !== "string" || !/^[a-f0-9]{64}$/.test(d.binarySha256) || d.binary === undefined))
+            throw new Error("docdex.binarySha256 requires an explicit binary and a SHA-256 digest");
+        if (d.startupTimeoutMs !== undefined)
+            positive(d.startupTimeoutMs, "docdex.startupTimeoutMs");
+    }
+    const config = structuredClone(root);
+    for (const name of Object.keys(config.bindings))
+        if (config.bindings[name].enabled !== false)
+            resolveBinding(config, name);
+    if (config.bindings.embedding && config.bindings.embedding.enabled !== false)
+        configuredEmbeddingSpace(config);
+    return config;
+};
+/** Every candidate in a failover binding must produce the same vector space. */
+export const configuredEmbeddingSpace = (config, binding = "embedding") => {
+    let key = binding;
+    const seen = new Set();
+    let label;
+    while (config.bindings[key] && !seen.has(key)) {
+        seen.add(key);
+        label ?? (label = config.bindings[key].embeddingSpace);
+        if (!config.bindings[key].useBinding)
+            break;
+        key = config.bindings[key].useBinding;
+    }
+    if (!label)
+        throw new Error("Enabled embedding binding requires embeddingSpace");
+    const candidates = resolveBinding(config, binding, "embeddings");
+    const identities = candidates.map(({ id, model }) => {
+        if (!model.embeddingDimensions || model.embeddingDimensions > 4096 || !model.embedding || /^(catalog-unversioned|latest|unknown)$/.test(model.revision)) {
+            throw new Error(`${id}: embeddings require a pinned revision, dimensions and explicit preprocessing`);
+        }
+        return { revision: model.revision, dimensions: model.embeddingDimensions, ...model.embedding };
+    });
+    const signature = JSON.stringify(canonical(identities[0]));
+    if (identities.some(identity => JSON.stringify(canonical(identity)) !== signature))
+        throw new Error("Embedding failover candidates have incompatible vector spaces");
+    return { label, ...identities[0], id: createHash("sha256").update(JSON.stringify([label, signature])).digest("hex") };
+};
+export const resolveBinding = (config, name, operation) => {
+    const seen = new Set();
+    let key = name;
+    while (true) {
+        if (seen.has(key))
+            throw new Error(`Binding alias cycle: ${name}`);
+        seen.add(key);
+        const binding = config.bindings[key];
+        if (!binding || binding.enabled === false)
+            throw new Error(`Binding unavailable: ${key}`);
+        if (binding.useBinding) {
+            key = binding.useBinding;
+            continue;
+        }
+        const requiredBackends = [...seen].map(role => config.routing?.requiredBackends?.[role]).filter((v) => !!v);
+        const candidates = (binding.candidates ?? []).map(id => ({ id, model: config.models[id] })).filter(({ model }) => model && (!operation || model.operations.includes(operation)) && requiredBackends.every(allowed => allowed.includes(model.backend ?? "")));
+        if (!candidates.length)
+            throw new Error(`No compatible configured candidates for ${name}${operation ? ` (${operation})` : ""}`);
+        return candidates;
+    }
+};
+export const loadOrchestrationConfig = async (file = process.env.CODALI_ORCHESTRATION_CONFIG ?? path.join(homedir(), ".codali", "orchestration.json")) => {
+    const source = path.resolve(file);
+    const config = validateOrchestrationConfig(JSON.parse(await readFile(source, "utf8")));
+    return { config, source, hash: orchestrationHash(config) };
+};
+export const effortBudget = (config, level) => ({ ...EFFORT_BUDGETS[level], ...config.effort?.[level] });

package/dist/connectors/mcp/McpClient.d.ts

@@ -103,6 +103,7 @@ export interface McpClientOptions {
 export interface McpTransportClient {
     listTools(params?: Record<string, unknown>, options?: {
         timeout?: number;
+        signal?: AbortSignal;
     }): Promise<{
         tools: unknown[];
     }>;
@@ -111,6 +112,7 @@ export interface McpTransportClient {
         arguments?: Record<string, unknown>;
     }, resultSchema?: unknown, options?: {
         timeout?: number;
+        signal?: AbortSignal;
     }): Promise<unknown>;
     close(): Promise<void>;
 }
@@ -125,7 +127,7 @@ export declare class McpClient {
     private ensureClient;
     private connect;
     listTools(): Promise<McpToolDefinition[]>;
-    callTool(name: string, args: unknown): Promise<McpCallResult>;
+    callTool(name: string, args: unknown, signal?: AbortSignal): Promise<McpCallResult>;
     close(): Promise<void>;
 }
 export declare const createMcpClient: (options: McpClientOptions) => McpClient;

package/dist/connectors/mcp/McpClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpClient.d.ts","sourceRoot":"","sources":["../../../src/connectors/mcp/McpClient.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAkCxD,eAAO,MAAM,sBAAsB;;;CAGzB,CAAC;AAIX,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,GAAG,sBAAsB,CAAC;AAElF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,kBAAkB,CAAC;AAEvE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAG1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAWzD;AAKD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,SAAS,OAAO,KAAG,MAkBpD,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,mBAAmB,CAAC;IAChC,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClD;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,SAAS,CACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACjC,QAAQ,CACN,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAC7D,YAAY,CAAC,EAAE,OAAO,EACtB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,UAAU,CAAC,CAA8B;gBAEpB,OAAO,EAAE,gBAAgB;IAEtD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,KAAK,SAAS,GAEpB;IAED,0EAA0E;YAC5D,YAAY;YAWZ,OAAO;IA6Cf,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAqCzC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC;IAmC7D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAW7B;AAED,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,SACpC,CAAC"}
+{"version":3,"file":"McpClient.d.ts","sourceRoot":"","sources":["../../../src/connectors/mcp/McpClient.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;GAYG;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAkCxD,eAAO,MAAM,sBAAsB;;;CAGzB,CAAC;AAIX,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEhD,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,kBAAkB,GAAG,uBAAuB,GAAG,sBAAsB,CAAC;AAElF,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,MAAM,mBAAmB,GAAG,eAAe,GAAG,kBAAkB,CAAC;AAEvE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACvC;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAG1B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAWzD;AAKD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,SAAS,OAAO,KAAG,MAkBpD,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,mBAAmB,CAAC;IAChC,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAClD;AAED,2DAA2D;AAC3D,MAAM,WAAW,kBAAkB;IACjC,SAAS,CACP,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACnD,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;IACjC,QAAQ,CACN,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,EAC7D,YAAY,CAAC,EAAE,OAAO,EACtB,OAAO,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GACnD,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qBAAa,SAAS;IAIR,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,MAAM,CAAC,CAAqB;IACpC,OAAO,CAAC,UAAU,CAAC,CAA8B;gBAEpB,OAAO,EAAE,gBAAgB;IAEtD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,OAAO,KAAK,SAAS,GAEpB;IAED,0EAA0E;YAC5D,YAAY;YAWZ,OAAO;IA6Cf,SAAS,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAqCzC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAoCnF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAW7B;AAED,eAAO,MAAM,eAAe,GAAI,SAAS,gBAAgB,KAAG,SACpC,CAAC"}

package/dist/connectors/mcp/McpClient.js

@@ -176,11 +176,12 @@ export class McpClient {
         }
         return tools;
     }
-    async callTool(name, args) {
+    async callTool(name, args, signal) {
+        signal?.throwIfAborted();
         const client = await this.ensureClient();
         let raw;
         try {
-            raw = await client.callTool({ name, arguments: isRecord(args) ? args : {} }, undefined, { timeout: this.timeoutMs });
+            raw = await client.callTool({ name, arguments: isRecord(args) ? args : {} }, undefined, { timeout: this.timeoutMs, ...(signal ? { signal } : {}) });
         }
         catch (error) {
             throw new McpClientError("mcp_call_tool_failed", this.name, `tools/call ${name} failed on "${this.name}": ${error instanceof Error ? error.message : String(error)}`, { retryable: true, cause: error });

package/dist/connectors/mcp/McpServerRegistry.d.ts

@@ -59,8 +59,8 @@ export declare class McpServerRegistry {
     discoverTools(): Promise<ToolDefinition[]>;
     /**
      * Wraps a client so every tool call is bounded by the concurrency budget and
-     * retried once on a transport failure. Retrying is safe here because Phase 2
-     * connectors are read-only.
+     * retried once on a transport failure only for operator-declared read-only
+     * servers. A lost write response leaves an uncertain remote outcome.
      */
     private wrapClient;
     healthReport(): McpServerHealth[];

package/dist/connectors/mcp/McpServerRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"McpServerRegistry.d.ts","sourceRoot":"","sources":["../../../src/connectors/mcp/McpServerRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EACL,SAAS,EAET,KAAK,mBAAmB,EAEzB,MAAM,gBAAgB,CAAC;AAGxB;;;;;;;;;;;;GAYG;AAEH,yDAAyD;AACzD,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAK9C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB;IACzB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,mBAAmB,KAAK,SAAS,CAAC;IAC9D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AA0B/D,qBAAa,iBAAiB;IAMhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,UAAU,CAAS;gBAEE,OAAO,EAAE,wBAAwB;IAM9D;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAmFhD;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA4BlB,YAAY,IAAI,eAAe,EAAE;IAIjC,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B;AAED,eAAO,MAAM,uBAAuB,GAClC,SAAS,wBAAwB,KAChC,iBAAmD,CAAC"}
+{"version":3,"file":"McpServerRegistry.d.ts","sourceRoot":"","sources":["../../../src/connectors/mcp/McpServerRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE/D,OAAO,EACL,SAAS,EAET,KAAK,mBAAmB,EAEzB,MAAM,gBAAgB,CAAC;AAGxB;;;;;;;;;;;;GAYG;AAEH,yDAAyD;AACzD,eAAO,MAAM,4BAA4B,IAAI,CAAC;AAK9C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,UAAU,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACxC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB;IACzB,YAAY,CAAC,EAAE,CAAC,UAAU,EAAE,mBAAmB,KAAK,SAAS,CAAC;IAC9D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,IAAI,CAAC;CAC7C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAuC/D,qBAAa,iBAAiB;IAMhB,OAAO,CAAC,QAAQ,CAAC,OAAO;IALpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,UAAU,CAAS;gBAEE,OAAO,EAAE,wBAAwB;IAM9D;;;;;OAKG;IACG,aAAa,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAmFhD;;;;OAIG;IACH,OAAO,CAAC,UAAU;IA8BlB,YAAY,IAAI,eAAe,EAAE;IAIjC,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B;AAED,eAAO,MAAM,uBAAuB,GAClC,SAAS,wBAAwB,KAChC,iBAAmD,CAAC"}

package/dist/connectors/mcp/McpServerRegistry.js

@@ -24,21 +24,42 @@ class Semaphore {
         this.limit = limit;
         this.active = 0;
         this.waiting = [];
+        if (!Number.isSafeInteger(limit) || limit < 1)
+            throw new Error("MCP concurrency limit must be a positive integer");
     }
-    async acquire() {
+    async acquire(signal) {
+        signal?.throwIfAborted();
         if (this.active < this.limit) {
             this.active += 1;
-            return () => this.release();
         }
-        await new Promise((resolve) => this.waiting.push(resolve));
-        this.active += 1;
-        return () => this.release();
+        else {
+            await new Promise((resolve, reject) => {
+                const grant = () => { signal?.removeEventListener("abort", abort); resolve(); };
+                const abort = () => {
+                    const index = this.waiting.indexOf(grant);
+                    if (index < 0)
+                        return;
+                    this.waiting.splice(index, 1);
+                    reject(signal?.reason ?? new Error("MCP wait aborted"));
+                };
+                this.waiting.push(grant);
+                signal?.addEventListener("abort", abort, { once: true });
+            });
+        }
+        let released = false;
+        return () => { if (!released) {
+            released = true;
+            this.release();
+        } };
     }
     release() {
-        this.active -= 1;
         const next = this.waiting.shift();
+        // Transfer the occupied slot before waking its waiter; a new caller cannot
+        // steal it between promise resolution and the waiter's continuation.
         if (next)
             next();
+        else
+            this.active -= 1;
     }
 }
 export class McpServerRegistry {
@@ -116,7 +137,7 @@ export class McpServerRegistry {
                 durationMs,
             });
             return mcpToolsToDefinitions(tools, {
-                client: this.wrapClient(client),
+                client: this.wrapClient(client, definition.readOnly === true),
                 server: definition.name,
                 capability: definition.name,
                 // Operator declaration only. Claiming read-only for an unvetted
@@ -132,28 +153,30 @@ export class McpServerRegistry {
     }
     /**
      * Wraps a client so every tool call is bounded by the concurrency budget and
-     * retried once on a transport failure. Retrying is safe here because Phase 2
-     * connectors are read-only.
+     * retried once on a transport failure only for operator-declared read-only
+     * servers. A lost write response leaves an uncertain remote outcome.
      */
-    wrapClient(client) {
+    wrapClient(client, readOnly) {
         const semaphore = this.semaphore;
         const wrapped = Object.create(client);
-        wrapped.callTool = async (name, args) => {
-            const release = await semaphore.acquire();
+        wrapped.callTool = async (name, args, signal) => {
+            const release = await semaphore.acquire(signal);
             try {
+                signal?.throwIfAborted();
                 let lastError;
-                for (let attempt = 1; attempt <= MAX_CALL_ATTEMPTS; attempt += 1) {
+                const attempts = readOnly ? MAX_CALL_ATTEMPTS : 1;
+                for (let attempt = 1; attempt <= attempts; attempt += 1) {
                     try {
-                        return await client.callTool(name, args);
+                        return await client.callTool(name, args, signal);
                     }
                     catch (error) {
                         lastError = error;
                         const retryable = error instanceof McpClientError && error.retryable;
-                        if (!retryable || attempt === MAX_CALL_ATTEMPTS)
+                        if (!retryable || signal?.aborted || attempt === attempts)
                             break;
                     }
                 }
-                throw new ToolExecutionError("tool_execution_failed", lastError instanceof Error ? lastError.message : String(lastError), { retryable: false, details: { tool: name } });
+                throw new ToolExecutionError("tool_execution_failed", lastError instanceof Error ? lastError.message : String(lastError), { retryable: false, details: { tool: name, uncertainOutcome: !readOnly } });
             }
             finally {
                 release();

package/dist/connectors/mcp/McpToolAdapter.js

@@ -74,8 +74,8 @@ export const mcpToolToDefinition = (tool, options) => {
         outputSchema: tool.outputSchema,
         readOnly: options.readOnly,
         capability: options.capability ?? options.server,
-        handler: async (args) => {
-            const result = await options.client.callTool(tool.name, args);
+        handler: async (args, context) => {
+            const result = await options.client.callTool(tool.name, args, context.signal);
             if (!result.ok) {
                 // Surface as a tool failure so the runner records it and the model is
                 // told, rather than passing an error string off as a result.

package/dist/connectors/media/ConfiguredMediaTools.d.ts

@@ -0,0 +1,6 @@
+import type { ResolvedOrchestrationConfig } from "../../config/OrchestrationConfig.js";
+import type { ToolDefinition } from "../../tools/ToolTypes.js";
+import { MediaJobStore, type MediaJob } from "./MediaJobStore.js";
+export declare const mediaJobSummary: (job: MediaJob) => Record<string, unknown>;
+export declare const createConfiguredMediaTools: (resolved: ResolvedOrchestrationConfig, store: () => MediaJobStore) => ToolDefinition[];
+//# sourceMappingURL=ConfiguredMediaTools.d.ts.map

package/dist/connectors/media/ConfiguredMediaTools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfiguredMediaTools.d.ts","sourceRoot":"","sources":["../../../src/connectors/media/ConfiguredMediaTools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,2BAA2B,EAAkB,MAAM,qCAAqC,CAAC;AACvG,OAAO,KAAK,EAAE,cAAc,EAAwB,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,KAAK,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAGlE,eAAO,MAAM,eAAe,GAAI,KAAK,QAAQ,KAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAuN,CAAC;AAC9R,eAAO,MAAM,0BAA0B,GAAI,UAAU,2BAA2B,EAAE,OAAO,MAAM,aAAa,KAAG,cAAc,EA+B5H,CAAC"}