@mcoda/codali 0.1.88 → 0.1.89

package/dist/cli/EvalCommand.d.ts

@@ -26,6 +26,14 @@ export interface ParsedEvalArgs {
     workflow_profile?: string;
     smart?: boolean;
     no_deep_investigation?: boolean;
+    gateway_smoke?: boolean;
+    gateway_live_smoke?: boolean;
+    live_timeout_ms?: number;
+    live_mcoda_command?: string;
+    live_allow_cloud_fallback?: boolean;
+    live_no_image_worker?: boolean;
+    live_agent_run_force?: boolean;
+    live_strict?: boolean;
     help?: boolean;
 }
 export declare const parseEvalArgs: (argv: string[]) => ParsedEvalArgs;

package/dist/cli/EvalCommand.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"EvalCommand.d.ts","sourceRoot":"","sources":["../../src/cli/EvalCommand.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAEX,KAAK,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3E,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY;CAKpD;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AA+BD,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,KAAG,cAkG9C,CAAC;AA2DF,qBAAa,WAAW;IACtB,MAAM,CAAC,QAAQ,IAAI,MAAM;WAIZ,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAqJhD"}
+{"version":3,"file":"EvalCommand.d.ts","sourceRoot":"","sources":["../../src/cli/EvalCommand.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,eAAe;;;;;CAKlB,CAAC;AAEX,KAAK,YAAY,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAE3E,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;gBAEpB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY;CAKpD;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAoDD,eAAO,MAAM,aAAa,GAAI,MAAM,MAAM,EAAE,KAAG,cAuI9C,CAAC;AA2DF,qBAAa,WAAW;IACtB,MAAM,CAAC,QAAQ,IAAI,MAAM;WAIZ,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAmMhD"}

package/dist/cli/EvalCommand.js

@@ -11,6 +11,8 @@ import { serializeEvalReport } from "../eval/ReportSerializer.js";
 import { ReportStore } from "../eval/ReportStore.js";
 import { loadSuiteFromFile } from "../eval/SuiteLoader.js";
 import { SuiteValidationError } from "../eval/SuiteSchema.js";
+import { formatCodaliGatewayLiveHarnessTextReport, runCodaliGatewayLiveHarness, } from "../eval/CodaliGatewayLiveHarness.js";
+import { formatCodaliGatewayEvalTextReport, runCodaliGatewayEvalSuite, } from "../eval/GatewayEvalSuite.js";
 import { resolveWorkspaceRoot } from "./RunCommand.js";
 export const EVAL_EXIT_CODES = {
     usage_error: 2,
@@ -25,9 +27,13 @@ export class EvalCommandError extends Error {
         this.exitCode = exitCode;
     }
 }
-const HELP_TEXT = "Usage: codali eval --suite <path> [options]\n\n"
+const HELP_TEXT = "Usage: codali eval --suite <path> [options]\n"
+    + "   or: codali eval --gateway-smoke [options]\n"
+    + "   or: codali eval --gateway-live-smoke [options]\n\n"
     + "Options:\n"
     + "  --suite <path>               Path to eval suite JSON (required)\n"
+    + "  --gateway-smoke              Run deterministic Codali gateway eval smoke suite\n"
+    + "  --gateway-live-smoke         Run Codali gateway live model smoke harness\n"
     + "  --output <text|json>         Output mode (default: text)\n"
     + "  --baseline <path>            Optional baseline report for regression diff\n"
     + "  --report-dir <path>          Override eval report output directory\n"
@@ -42,6 +48,12 @@ const HELP_TEXT = "Usage: codali eval --suite <path> [options]\n\n"
     + "  --profile <name>             Workflow profile override for task runs\n"
     + "  --smart                      Force smart mode for task runs\n"
     + "  --no-deep-investigation      Disable deep investigation for task runs\n"
+    + "  --live-timeout-ms <n>        Timeout per live smoke command (default: 120000)\n"
+    + "  --live-mcoda-command <cmd>   mcoda command path for live smoke (default: mcoda)\n"
+    + "  --allow-cloud-fallback       Allow cloud candidates in live tier resolution\n"
+    + "  --no-image-worker            Disable image-worker requirement in live smoke\n"
+    + "  --agent-run-force            Pass --force to mcoda agent-run live checks\n"
+    + "  --strict                     Fail live smoke on degraded status\n"
     + "  --config <path>              Config file path\n"
     + "  --help                       Show help\n";
 const expectValue = (argv, index, flag) => {
@@ -51,6 +63,13 @@ const expectValue = (argv, index, flag) => {
     }
     return value;
 };
+const parsePositiveIntegerFlag = (value, flag) => {
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new EvalCommandError(`Invalid ${flag} value. Expected a positive integer.`, EVAL_EXIT_CODES.usage_error);
+    }
+    return parsed;
+};
 export const parseEvalArgs = (argv) => {
     const parsed = {
         output: "text",
@@ -66,6 +85,14 @@ export const parseEvalArgs = (argv) => {
             index += 1;
             continue;
         }
+        if (arg === "--gateway-live-smoke") {
+            parsed.gateway_live_smoke = true;
+            continue;
+        }
+        if (arg === "--gateway-smoke") {
+            parsed.gateway_smoke = true;
+            continue;
+        }
         if (arg === "--output") {
             const value = expectValue(argv, index, "--output").trim().toLowerCase();
             if (value !== "text" && value !== "json") {
@@ -143,6 +170,32 @@ export const parseEvalArgs = (argv) => {
             parsed.no_deep_investigation = true;
             continue;
         }
+        if (arg === "--live-timeout-ms") {
+            parsed.live_timeout_ms = parsePositiveIntegerFlag(expectValue(argv, index, "--live-timeout-ms"), "--live-timeout-ms");
+            index += 1;
+            continue;
+        }
+        if (arg === "--live-mcoda-command") {
+            parsed.live_mcoda_command = expectValue(argv, index, "--live-mcoda-command");
+            index += 1;
+            continue;
+        }
+        if (arg === "--allow-cloud-fallback") {
+            parsed.live_allow_cloud_fallback = true;
+            continue;
+        }
+        if (arg === "--no-image-worker") {
+            parsed.live_no_image_worker = true;
+            continue;
+        }
+        if (arg === "--agent-run-force") {
+            parsed.live_agent_run_force = true;
+            continue;
+        }
+        if (arg === "--strict") {
+            parsed.live_strict = true;
+            continue;
+        }
         throw new EvalCommandError(`Unknown eval flag: ${arg}`, EVAL_EXIT_CODES.usage_error);
     }
     return parsed;
@@ -203,6 +256,45 @@ export class EvalCommand {
             console.log(HELP_TEXT);
             return;
         }
+        if (parsed.gateway_smoke) {
+            const result = await runCodaliGatewayEvalSuite();
+            if (parsed.output === "json") {
+                // eslint-disable-next-line no-console
+                console.log(`${JSON.stringify(result, null, 2)}\n`);
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.log(formatCodaliGatewayEvalTextReport(result));
+            }
+            if (result.summary.status !== "passed" || !result.gates.passed) {
+                throw new EvalCommandError("Codali gateway smoke gates failed.", EVAL_EXIT_CODES.gate_failure);
+            }
+            return;
+        }
+        if (parsed.gateway_live_smoke) {
+            const result = await runCodaliGatewayLiveHarness({
+                command: parsed.live_mcoda_command,
+                timeoutMs: parsed.live_timeout_ms,
+                allowCloudFallback: parsed.live_allow_cloud_fallback,
+                allowImageWorker: parsed.live_no_image_worker ? false : true,
+                forceAgentRun: parsed.live_agent_run_force,
+            });
+            if (parsed.output === "json") {
+                // eslint-disable-next-line no-console
+                console.log(`${JSON.stringify(result, null, 2)}\n`);
+            }
+            else {
+                // eslint-disable-next-line no-console
+                console.log(formatCodaliGatewayLiveHarnessTextReport(result));
+            }
+            if (result.summary.status === "failed") {
+                throw new EvalCommandError("Codali gateway live smoke failed.", EVAL_EXIT_CODES.run_failure);
+            }
+            if (parsed.live_strict && result.summary.status !== "passed") {
+                throw new EvalCommandError("Codali gateway live smoke did not pass strict mode.", EVAL_EXIT_CODES.gate_failure);
+            }
+            return;
+        }
         if (!parsed.suite_path) {
             throw new EvalCommandError("Missing required --suite <path>.", EVAL_EXIT_CODES.usage_error);
         }

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAkEA,eAAO,MAAM,MAAM,GAAU,OAAM,MAAM,EAA0B,KAAG,OAAO,CAAC,IAAI,CAoCjF,CAAC"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AAmEA,eAAO,MAAM,MAAM,GAAU,OAAM,MAAM,EAA0B,KAAG,OAAO,CAAC,IAAI,CAoCjF,CAAC"}

package/dist/cli.js

@@ -9,6 +9,7 @@ const HELP_TEXT = "Usage: codali run [--workspace-root <path>] --agent <slug> [-
     "   or: codali run [--workspace-root <path>] --provider <name> --model <model> [--task <file>]\n" +
     "   or: codali <fix|review|explain|test> [run options] [--task <file>]\n" +
     "   or: codali eval --suite <path> [eval options]\n" +
+    "   or: codali eval --gateway-live-smoke [eval options]\n" +
     "   or: codali learn --file <path/to/file> [--confirm <dedupe_key> ...]\n" +
     "   or: codali learn --confirm <dedupe_key> [--confirm <dedupe_key> ...]\n" +
     "\n" +

package/dist/docdex/DocdexClient.d.ts

@@ -9,9 +9,10 @@ export interface DocdexClientOptions {
     required?: boolean;
     allowedOperations?: readonly string[];
     capabilities?: Record<string, boolean | undefined>;
+    immutableRuntimeContext?: boolean;
     dagSessionId?: string;
 }
-export type DocdexRuntimeErrorCode = "docdex_context_missing" | "docdex_api_key_missing" | "docdex_operation_not_allowed" | "docdex_auth_failed" | "docdex_repo_access_denied" | "docdex_unavailable";
+export type DocdexRuntimeErrorCode = "missing_credentials" | "repo_access_denied" | "scope_denied" | "encrypted_operation_disabled" | "docdex_context_missing" | "docdex_api_key_missing" | "docdex_operation_not_allowed" | "docdex_auth_failed" | "docdex_repo_access_denied" | "docdex_unavailable";
 export type DocdexRuntimeOperation = "health" | "initialize" | "search" | "snippet" | "open" | "symbols" | "ast" | "impact_graph" | "impact_diagnostics" | "dag_export" | "tree" | "memory_save" | "memory_recall" | "profile_read" | "profile_write" | "web_research" | "chat_context" | "rerank" | "batch_search" | "capabilities" | "stats" | "files" | "repo_inspect" | "index_rebuild" | "index_ingest" | "delegate" | "hooks_validate";
 export interface DocdexRuntimeErrorOptions {
     status?: number;
@@ -100,6 +101,10 @@ export declare class DocdexClient {
     clearCapabilityCache(): void;
     private runtimeAllowedOperations;
     private runtimeCapability;
+    private isImmutableRuntimeContext;
+    private missingCredentialCode;
+    private missingScopeCode;
+    private operationDisabledCode;
     private redactSensitiveText;
     private runtimeError;
     private assertRuntimeContext;
@@ -117,6 +122,8 @@ export declare class DocdexClient {
     private withRepoId;
     private extractErrorCode;
     private mapResponseErrorCode;
+    private responseRequestId;
+    private attachResponseMetadata;
     private throwResponseError;
     private throwResponseBodyError;
     search(query: string, options?: DocdexSearchOptions): Promise<unknown>;

package/dist/docdex/DocdexClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DocdexClient.d.ts","sourceRoot":"","sources":["../../src/docdex/DocdexClient.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,wBAAwB,EAEzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,yBAAyB,GAAG,MAAM,CAAC;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,sBAAsB,GAC9B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,CAAC;AAEzB,MAAM,MAAM,sBAAsB,GAC9B,QAAQ,GACR,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,MAAM,GACN,SAAS,GACT,KAAK,GACL,cAAc,GACd,oBAAoB,GACpB,YAAY,GACZ,MAAM,GACN,aAAa,GACb,eAAe,GACf,cAAc,GACd,eAAe,GACf,cAAc,GACd,cAAc,GACd,QAAQ,GACR,cAAc,GACd,cAAc,GACd,OAAO,GACP,OAAO,GACP,cAAc,GACd,eAAe,GACf,cAAc,GACd,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,yBAA8B;CAS1C;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAmED,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,sBAElE,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAC1C,OAAO,MAAM,KACZ,sBAAsB,GAAG,SAyB3B,CAAC;AAwBF,qBAAa,YAAY;IAOX,OAAO,CAAC,OAAO;IAN3B,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,kBAAkB,CAAC,CAA2B;gBAElC,OAAO,EAAE,mBAAmB;IAKhD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,SAAS,IAAI,MAAM,GAAG,SAAS;IAI/B,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIxC,eAAe,IAAI,MAAM,GAAG,SAAS;IAIrC,oBAAoB,IAAI,IAAI;IAI5B,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,oBAAoB;IAwB5B,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,YAAY;YAcN,YAAY;IAoBpB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAe/B,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;YAKpE,cAAc;YAiBd,qBAAqB;IAWnC,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,oBAAoB;YAmBd,kBAAkB;IAKhC,OAAO,CAAC,sBAAsB;IAaxB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IAoD1E,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqBhF,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IAkB9E,iBAAiB,CAAC,OAAO,GAAE,8BAAmC,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBjF,YAAY,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAcpD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc3C,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAchD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAc5D,WAAW,CACf,QAAQ,EAAE,iBAAiB,EAAE,EAC7B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,OAAO,CAAC;IAuBb,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAmC9E,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAmC7E,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,0BAA0B;IAoClC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI3D,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzB,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO1E,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,IAAI,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC;IAavD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;IAalF,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM9C,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,OAAO,CAAC,OAAO,CAAC;IASnB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,OAAO,CAAC;YAatE,eAAe;IAyB7B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW9E,WAAW,CACT,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GACtD,OAAO,CAAC,OAAO,CAAC;IAWb,eAAe,CAAC,YAAY,UAAQ,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAmC/E"}
+{"version":3,"file":"DocdexClient.d.ts","sourceRoot":"","sources":["../../src/docdex/DocdexClient.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAEV,wBAAwB,EAEzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,yBAAyB,GAAG,MAAM,CAAC;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC,CAAC;IACnD,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,sBAAsB,GAC9B,qBAAqB,GACrB,oBAAoB,GACpB,cAAc,GACd,8BAA8B,GAC9B,wBAAwB,GACxB,wBAAwB,GACxB,8BAA8B,GAC9B,oBAAoB,GACpB,2BAA2B,GAC3B,oBAAoB,CAAC;AAEzB,MAAM,MAAM,sBAAsB,GAC9B,QAAQ,GACR,YAAY,GACZ,QAAQ,GACR,SAAS,GACT,MAAM,GACN,SAAS,GACT,KAAK,GACL,cAAc,GACd,oBAAoB,GACpB,YAAY,GACZ,MAAM,GACN,aAAa,GACb,eAAe,GACf,cAAc,GACd,eAAe,GACf,cAAc,GACd,cAAc,GACd,QAAQ,GACR,cAAc,GACd,cAAc,GACd,OAAO,GACP,OAAO,GACP,cAAc,GACd,eAAe,GACf,cAAc,GACd,UAAU,GACV,gBAAgB,CAAC;AAErB,MAAM,WAAW,yBAAyB;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAGzC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,yBAA8B;CAS1C;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAuED,eAAO,MAAM,wBAAwB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,sBAElE,CAAC;AAEF,eAAO,MAAM,+BAA+B,GAC1C,OAAO,MAAM,KACZ,sBAAsB,GAAG,SAyB3B,CAAC;AAwBF,qBAAa,YAAY;IAOX,OAAO,CAAC,OAAO;IAN3B,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,uBAAuB,CAAS;IACxC,OAAO,CAAC,kBAAkB,CAAC,CAA2B;gBAElC,OAAO,EAAE,mBAAmB;IAKhD,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI/B,SAAS,IAAI,MAAM,GAAG,SAAS;IAI/B,WAAW,IAAI,MAAM,GAAG,SAAS;IAIjC,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAIxC,eAAe,IAAI,MAAM,GAAG,SAAS;IAIrC,oBAAoB,IAAI,IAAI;IAI5B,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,yBAAyB;IAOjC,OAAO,CAAC,qBAAqB;IAI7B,OAAO,CAAC,gBAAgB;IAIxB,OAAO,CAAC,qBAAqB;IAM7B,OAAO,CAAC,mBAAmB;IAkB3B,OAAO,CAAC,YAAY;IAQpB,OAAO,CAAC,oBAAoB;IAsC5B,OAAO,CAAC,sBAAsB;IAmB9B,OAAO,CAAC,cAAc;IAKtB,OAAO,CAAC,YAAY;YAgBN,YAAY;IAoBpB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAkB/B,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;YAKpE,cAAc;YAiBd,qBAAqB;IAYnC,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,gBAAgB;IAWxB,OAAO,CAAC,oBAAoB;IAsC5B,OAAO,CAAC,iBAAiB;IAczB,OAAO,CAAC,sBAAsB;YA8BhB,kBAAkB;IAKhC,OAAO,CAAC,sBAAsB;IAkBxB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IA6D1E,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAAC,OAAO,CAAC;IAqBhF,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,OAAO,CAAC;IAkB9E,iBAAiB,CAAC,OAAO,GAAE,8BAAmC,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBjF,YAAY,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAcpD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc3C,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAchD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAc5D,WAAW,CACf,QAAQ,EAAE,iBAAiB,EAAE,EAC7B,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,OAAO,CAAC;IAuBb,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,OAAO,CAAC;IAsC9E,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAuC7E,OAAO,CAAC,kBAAkB;IAqC1B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,oBAAoB;IAU5B,OAAO,CAAC,kBAAkB;IAe1B,OAAO,CAAC,0BAA0B;IAoClC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI3D,KAAK,IAAI,OAAO,CAAC,OAAO,CAAC;IAIzB,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIxD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAI/B,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC;IAO1E,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,IAAI,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC;IAavD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,OAAO,CAAC,OAAO,CAAC;IAalF,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM9C,cAAc,CACZ,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,QAAQ,CAAC,EAAE,mBAAmB,GAC7B,OAAO,CAAC,OAAO,CAAC;IASnB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,OAAO,CAAC;YAatE,eAAe;IAyB7B,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW9E,WAAW,CACT,OAAO,EAAE,MAAM,EAAE,EACjB,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAO,GACtD,OAAO,CAAC,OAAO,CAAC;IAWb,eAAe,CAAC,YAAY,UAAQ,GAAG,OAAO,CAAC,wBAAwB,CAAC;CAmC/E"}

package/dist/docdex/DocdexClient.js

@@ -19,6 +19,10 @@ const CAPABILITY_KEYS = [
     "batch_search",
 ];
 const DOCDEX_RUNTIME_ERROR_CODES = new Set([
+    "missing_credentials",
+    "repo_access_denied",
+    "scope_denied",
+    "encrypted_operation_disabled",
     "docdex_context_missing",
     "docdex_api_key_missing",
     "docdex_operation_not_allowed",
@@ -167,6 +171,21 @@ export class DocdexClient {
         }
         return undefined;
     }
+    isImmutableRuntimeContext() {
+        return (this.options.immutableRuntimeContext === true ||
+            this.options.credentialSource === "attached_mswarm_api_key");
+    }
+    missingCredentialCode() {
+        return this.isImmutableRuntimeContext() ? "missing_credentials" : "docdex_api_key_missing";
+    }
+    missingScopeCode() {
+        return this.isImmutableRuntimeContext() ? "scope_denied" : "docdex_context_missing";
+    }
+    operationDisabledCode() {
+        return this.isImmutableRuntimeContext()
+            ? "encrypted_operation_disabled"
+            : "docdex_operation_not_allowed";
+    }
     redactSensitiveText(text) {
         let output = text;
         for (const secret of [this.options.apiKey, this.options.authToken]) {
@@ -185,29 +204,35 @@ export class DocdexClient {
         const credentialSource = this.options.credentialSource;
         const requiresAttachedKey = credentialSource === "attached_mswarm_api_key";
         if (requiresAttachedKey && (!this.options.apiKey || this.options.apiKey.trim().length === 0)) {
-            throw this.runtimeError("docdex_api_key_missing", "Docdex attached mswarm API key is required but was not provided.", { retryable: false, details: { operation, credential_source: credentialSource } });
+            throw this.runtimeError(this.missingCredentialCode(), "Docdex attached mswarm API key is required but was not provided.", { retryable: false, details: { operation, credential_source: credentialSource } });
         }
-        if (this.options.required && this.resolveBaseUrl().length === 0) {
-            throw this.runtimeError("docdex_context_missing", "Docdex base_url is required for this job.", {
+        if ((this.options.required || this.isImmutableRuntimeContext()) && this.resolveBaseUrl().length === 0) {
+            throw this.runtimeError(this.missingScopeCode(), "Docdex base_url is required for this job.", {
                 retryable: false,
                 details: { operation },
             });
         }
-        if (this.options.required && requiresAttachedKey && !this.repoId) {
-            throw this.runtimeError("docdex_context_missing", "Docdex repo_id is required for this job.", {
+        if ((this.options.required || this.isImmutableRuntimeContext()) && requiresAttachedKey && !this.repoId) {
+            throw this.runtimeError(this.missingScopeCode(), "Docdex repo_id is required for this job.", {
                 retryable: false,
                 details: { operation },
             });
         }
+        if (this.isImmutableRuntimeContext() && !this.options.allowedOperations?.length) {
+            throw this.runtimeError("scope_denied", "Docdex allowedOperations are required for immutable encrypted jobs.", { retryable: false, details: { operation, missing: "allowedOperations" } });
+        }
+        if (this.isImmutableRuntimeContext() && !this.options.capabilities) {
+            throw this.runtimeError("scope_denied", "Docdex capability map is required for immutable encrypted jobs.", { retryable: false, details: { operation, missing: "capabilities" } });
+        }
     }
     assertOperationAllowed(operation) {
         this.assertRuntimeContext(operation);
         const allowedOperations = this.runtimeAllowedOperations();
         if (allowedOperations && !allowedOperations.has(operation)) {
-            throw this.runtimeError("docdex_operation_not_allowed", `Docdex operation is not allowed by this job: ${operation}`, { retryable: false, details: { operation } });
+            throw this.runtimeError(this.operationDisabledCode(), `Docdex operation is not allowed by this job: ${operation}`, { retryable: false, details: { operation } });
         }
         if (this.runtimeCapability(operation) === false) {
-            throw this.runtimeError("docdex_operation_not_allowed", `Docdex operation is disabled by this job capability map: ${operation}`, { retryable: false, details: { operation } });
+            throw this.runtimeError(this.operationDisabledCode(), `Docdex operation is disabled by this job capability map: ${operation}`, { retryable: false, details: { operation } });
         }
     }
     resolveBaseUrl() {
@@ -224,8 +249,9 @@ export class DocdexClient {
         }
         if (this.repoId)
             headers["x-docdex-repo-id"] = this.repoId;
-        if (this.options.repoRoot)
+        if (this.options.repoRoot && !this.isImmutableRuntimeContext()) {
             headers["x-docdex-repo-root"] = path.resolve(this.options.repoRoot);
+        }
         const resolvedDagSessionId = dagSessionId ?? this.dagSessionId;
         if (resolvedDagSessionId)
             headers["x-docdex-dag-session"] = resolvedDagSessionId;
@@ -250,6 +276,9 @@ export class DocdexClient {
         }
     }
     async healthCheck() {
+        if (this.isImmutableRuntimeContext()) {
+            this.assertRuntimeContext("health");
+        }
         let response;
         try {
             response = await fetch(`${this.resolveBaseUrl()}/healthz`);
@@ -282,6 +311,8 @@ export class DocdexClient {
         return { repoId, repoRoot };
     }
     async ensureRepoInitialized() {
+        if (this.isImmutableRuntimeContext())
+            return;
         if (this.repoId || this.repoInitializeAttempted || !this.options.repoRoot)
             return;
         this.repoInitializeAttempted = true;
@@ -296,8 +327,9 @@ export class DocdexClient {
     withRepoId(params) {
         if (this.repoId)
             params.set("repo_id", this.repoId);
-        if (this.options.repoRoot)
+        if (this.options.repoRoot && !this.isImmutableRuntimeContext()) {
             params.set("repo_root", path.resolve(this.options.repoRoot));
+        }
     }
     extractErrorCode(body) {
         const parsed = this.tryParseJson(body);
@@ -312,33 +344,88 @@ export class DocdexClient {
     }
     mapResponseErrorCode(status, body) {
         const extracted = this.extractErrorCode(body);
-        if (isDocdexRuntimeErrorCode(extracted))
+        if (isDocdexRuntimeErrorCode(extracted)) {
+            if (this.isImmutableRuntimeContext()) {
+                if (extracted === "docdex_api_key_missing" || extracted === "docdex_auth_failed") {
+                    return "missing_credentials";
+                }
+                if (extracted === "docdex_repo_access_denied") {
+                    return "repo_access_denied";
+                }
+                if (extracted === "docdex_context_missing") {
+                    return "scope_denied";
+                }
+                if (extracted === "docdex_operation_not_allowed") {
+                    return "encrypted_operation_disabled";
+                }
+            }
             return extracted;
+        }
         const normalized = `${extracted ?? ""} ${body}`.toLowerCase();
         if (/introspection_unavailable|unavailable|timeout|timed out|econnrefused|enotfound/.test(normalized)) {
             return "docdex_unavailable";
         }
         if (/repo_access_denied|unknown_repo|repo.*denied|denied.*repo/.test(normalized)) {
-            return "docdex_repo_access_denied";
+            return this.isImmutableRuntimeContext() ? "repo_access_denied" : "docdex_repo_access_denied";
         }
-        if (/scope_denied|operation_not_allowed|encrypted_operation_disabled|not allowed|forbidden_operation/.test(normalized)) {
-            return "docdex_operation_not_allowed";
+        if (/scope_denied/.test(normalized)) {
+            return this.isImmutableRuntimeContext() ? "scope_denied" : "docdex_operation_not_allowed";
+        }
+        if (/operation_not_allowed|encrypted_operation_disabled|not allowed|forbidden_operation/.test(normalized)) {
+            return this.operationDisabledCode();
         }
         if (status === 401 || status === 403 || /invalid_credentials|missing_credentials|ambiguous_credentials/.test(normalized)) {
-            return "docdex_auth_failed";
+            return this.isImmutableRuntimeContext() ? "missing_credentials" : "docdex_auth_failed";
         }
         return "docdex_unavailable";
     }
+    responseRequestId(response) {
+        for (const key of [
+            "x-docdex-request-id",
+            "x-request-id",
+            "x-mswarm-request-id",
+            "x-correlation-id",
+            "traceparent",
+        ]) {
+            const value = response.headers.get(key);
+            if (value?.trim())
+                return value.trim();
+        }
+        return undefined;
+    }
+    attachResponseMetadata(payload, response, operation) {
+        const headerRequestId = this.responseRequestId(response);
+        if (!headerRequestId || !payload || typeof payload !== "object" || Array.isArray(payload)) {
+            return payload;
+        }
+        const record = payload;
+        const existingMeta = record.meta && typeof record.meta === "object" && !Array.isArray(record.meta)
+            ? record.meta
+            : {};
+        const existingRequestId = typeof existingMeta.docdex_request_id === "string"
+            ? existingMeta.docdex_request_id
+            : typeof existingMeta.request_id === "string"
+                ? existingMeta.request_id
+                : undefined;
+        return {
+            ...record,
+            meta: {
+                ...existingMeta,
+                docdex_request_id: existingRequestId ?? headerRequestId,
+                docdex_operation: operation,
+            },
+        };
+    }
     async throwResponseError(response, operation) {
         const body = await response.text();
-        this.throwResponseBodyError(response.status, body, operation);
+        this.throwResponseBodyError(response.status, body, operation, this.responseRequestId(response));
     }
-    throwResponseBodyError(status, body, operation) {
+    throwResponseBodyError(status, body, operation, requestId) {
         const code = this.mapResponseErrorCode(status, body);
         throw this.runtimeError(code, `Docdex ${operation} failed (${status}): ${body}`, {
             status,
             retryable: code === "docdex_unavailable" && status >= 500,
-            details: { operation },
+            details: requestId ? { operation, docdex_request_id: requestId } : { operation },
         });
     }
     async search(query, options = {}) {
@@ -366,7 +453,7 @@ export class DocdexClient {
             if (retryQuery) {
                 const retryResponse = await executeSearch(retryQuery);
                 if (retryResponse.ok) {
-                    const retryPayload = await retryResponse.json();
+                    const retryPayload = this.attachResponseMetadata(await retryResponse.json(), retryResponse, "search");
                     if (retryPayload && typeof retryPayload === "object" && !Array.isArray(retryPayload)) {
                         const payloadRecord = retryPayload;
                         const meta = payloadRecord.meta && typeof payloadRecord.meta === "object" && !Array.isArray(payloadRecord.meta)
@@ -387,11 +474,11 @@ export class DocdexClient {
                     return retryPayload;
                 }
                 const retryBody = await retryResponse.text();
-                this.throwResponseBodyError(retryResponse.status, retryBody, "search");
+                this.throwResponseBodyError(retryResponse.status, retryBody, "search", this.responseRequestId(retryResponse));
             }
-            this.throwResponseBodyError(response.status, body, "search");
+            this.throwResponseBodyError(response.status, body, "search", this.responseRequestId(response));
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "search");
     }
     async openSnippet(docId, options = {}) {
         this.assertOperationAllowed("snippet");
@@ -411,7 +498,7 @@ export class DocdexClient {
         }
         const contentType = response.headers.get("content-type") ?? "";
         if (contentType.includes("application/json")) {
-            return response.json();
+            return this.attachResponseMetadata(await response.json(), response, "snippet");
         }
         return response.text();
     }
@@ -433,7 +520,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "impact graph");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "impact_graph");
     }
     async impactDiagnostics(options = {}) {
         this.assertOperationAllowed("impact_diagnostics");
@@ -453,7 +540,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "impact diagnostics");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "impact_diagnostics");
     }
     async indexRebuild(libsSources) {
         this.assertOperationAllowed("index_rebuild");
@@ -466,7 +553,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "index rebuild");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "index_rebuild");
     }
     async indexIngest(file) {
         this.assertOperationAllowed("index_ingest");
@@ -479,7 +566,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "index ingest");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "index_ingest");
     }
     async hooksValidate(files) {
         this.assertOperationAllowed("hooks_validate");
@@ -492,7 +579,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "hooks validate");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "hooks_validate");
     }
     async delegate(payload) {
         this.assertOperationAllowed("delegate");
@@ -505,7 +592,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "delegate");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "delegate");
     }
     async chatContext(messages, options = {}) {
         this.assertOperationAllowed("chat_context");
@@ -531,7 +618,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "chat context");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "chat_context");
     }
     async dagExport(sessionId, options = {}) {
         this.assertOperationAllowed("dag_export");
@@ -552,13 +639,16 @@ export class DocdexClient {
             throw this.runtimeError(code, `Docdex dag export failed (${response.status}): ${body}`, {
                 status: response.status,
                 retryable: code === "docdex_unavailable" && response.status >= 500,
-                details: { operation: "dag_export" },
+                details: {
+                    operation: "dag_export",
+                    ...(this.responseRequestId(response) ? { docdex_request_id: this.responseRequestId(response) } : {}),
+                },
             });
         }
         const contentType = response.headers.get("content-type") ?? "";
         if (contentType.includes("application/json")) {
             try {
-                return JSON.parse(body);
+                return this.attachResponseMetadata(JSON.parse(body), response, "dag_export");
             }
             catch {
                 return body;
@@ -595,7 +685,7 @@ export class DocdexClient {
                 details: { method },
             });
         }
-        return this.normalizeMcpResult(raw.result);
+        return this.attachResponseMetadata(this.normalizeMcpResult(raw.result), response, operation ?? method);
     }
     normalizeMcpResult(payload) {
         if (!payload || typeof payload !== "object")
@@ -637,6 +727,9 @@ export class DocdexClient {
         }
     }
     buildProjectParams(extra) {
+        if (this.isImmutableRuntimeContext()) {
+            return { ...extra };
+        }
         return {
             project_root: this.options.repoRoot,
             ...extra,
@@ -786,7 +879,7 @@ export class DocdexClient {
         if (!response.ok) {
             await this.throwResponseError(response, "web research");
         }
-        return response.json();
+        return this.attachResponseMetadata(await response.json(), response, "web_research");
     }
     rerank(query, candidates, limit) {
         return this.callMcp("docdex_rerank", this.buildProjectParams({