@monoes/monomindcli 2.12.0 → 2.14.0

package/dist/src/orgrt/completion-gate.d.ts

@@ -55,4 +55,78 @@ export interface CompletionFacts {
 /** Decide whether an `org_complete` call is honest, given already-gathered
  *  facts. Returns a refusal message, or `null` to allow. */
 export declare function checkCompletion(f: CompletionFacts): string | null;
+/**
+ * The gate above asks "is this claim about the RUN honest?".
+ * `checkTaskEvidence` asks the same question one level down, about a single
+ * item: "may this role close this task, and is there anything but its own
+ * opinion saying it is done?".
+ *
+ * Why: one measured run produced 223 gate verdicts for 15 finished items —
+ * ~15 opinions per item — and still shipped five controls that could not
+ * fail. Three times the verifier FAILED a sha the reviewer had already
+ * APPROVED, and the verifier was right every time. Every one of those
+ * verdicts was an LLM judgment with nothing checking it.
+ *
+ * Ported from Gas Town's `gt done` (internal/cmd/done.go:498-526), which
+ * refuses to retire review work unless the item carries a fresh evidence
+ * comment. Its five tests map onto this runtime as:
+ *   1. posted after work started — STRUCTURAL here, not a check: evidence is
+ *      an argument OF the org_task_done call, so it cannot predate the call.
+ *      Gas Town needs `attached_at` because its evidence is a comment that
+ *      persists on the item independently of the close.
+ *   2. authored by the assignee — `caller` is the RUNTIME's view of which
+ *      role invoked the tool (session.ts binds it per role), compared here
+ *      against the task's assignee. Deliberately not a self-declared author
+ *      field, which an agent could simply write.
+ *   3. machine-parseable prefix — replaced by something stronger: evidence is
+ *      a typed {command, exitCode, output} record. There is no prose to
+ *      regex, and "an acceptance criterion is a command with an exit code"
+ *      (D5) becomes expressible in the type itself.
+ *   4. not machine-generated — n/a, see 3.
+ *   5. head_sha equal to the current HEAD — ported as-is, and the
+ *      load-bearing one: evidence gathered before the last commit is STALE.
+ *      The work moved; the proof did not.
+ *
+ * What this does NOT do, stated plainly rather than implied: the runtime does
+ * not re-execute the command. A role can still report exitCode 0 for a
+ * command it never ran. What the gate buys is that the proof must name a
+ * runnable command, must be attributable, and must be pinned to the tree
+ * state being closed — so it cannot be recycled across commits, which is the
+ * failure actually observed. Re-executing the acceptance commands from the
+ * daemon is the strictly stronger version and the obvious next step; it needs
+ * a decision about where those commands run (role sandbox vs daemon) that is
+ * out of scope here.
+ *
+ * Opt-in: `run_config.completion_evidence` (default false). Turning it on
+ * refuses completions that previously succeeded — that IS the point — so it
+ * must never be on by default, or every existing org breaks on upgrade.
+ */
+/** One acceptance criterion: a command, the exit code it actually returned,
+ *  and what it printed. */
+export interface EvidenceCheck {
+    command: string;
+    exitCode: number;
+    output?: string;
+}
+export interface TaskEvidence {
+    /** The commit sha the checks were run against. */
+    headSha: string;
+    checks: EvidenceCheck[];
+}
+export interface TaskEvidenceFacts {
+    /** `run_config.completion_evidence`. False (the default) allows everything. */
+    required: boolean;
+    evidence?: TaskEvidence;
+    /** The workspace's real current commit sha, resolved by the caller.
+     *  Undefined when the workspace is not a git repository. */
+    headSha?: string;
+    /** Role id the runtime saw calling org_task_done. */
+    caller: string;
+    /** The task's recorded assignee. */
+    assignee: string;
+}
+/** Decide whether a role may close a task, given already-gathered facts.
+ *  Returns a refusal message, or `null` to allow. Pure: the caller resolves
+ *  the head sha and the assignee. */
+export declare function checkTaskEvidence(f: TaskEvidenceFacts): string | null;
 //# sourceMappingURL=completion-gate.d.ts.map

package/dist/src/orgrt/completion-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"completion-gate.d.ts","sourceRoot":"","sources":["../../../src/orgrt/completion-gate.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;mFAE+E;IAC/E,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,gEAAgE;IAChE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;kEAE8D;IAC9D,cAAc,EAAE,OAAO,CAAC;IACxB;;;;sBAIkB;IAClB,cAAc,EAAE,OAAO,CAAC;CACzB;AAiDD;4DAC4D;AAC5D,wBAAgB,eAAe,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CASjE"}
+{"version":3,"file":"completion-gate.d.ts","sourceRoot":"","sources":["../../../src/orgrt/completion-gate.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,MAAM,MAAM,iBAAiB,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;AAClE,MAAM,MAAM,iBAAiB,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,CAAC;AAEzE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;mFAE+E;IAC/E,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IACrB,gEAAgE;IAChE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,iBAAiB,EAAE,MAAM,CAAC;IAC1B;;kEAE8D;IAC9D,cAAc,EAAE,OAAO,CAAC;IACxB;;;;sBAIkB;IAClB,cAAc,EAAE,OAAO,CAAC;CACzB;AAiDD;4DAC4D;AAC5D,wBAAgB,eAAe,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CASjE;AAGD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH;2BAC2B;AAC3B,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,kDAAkD;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;gEAC4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,QAAQ,EAAE,MAAM,CAAC;CAClB;AASD;;qCAEqC;AACrC,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAoCrE"}

package/dist/src/orgrt/completion-gate.js

@@ -83,4 +83,49 @@ export function checkCompletion(f) {
     }
     return null;
 }
+/** Shortest sha prefix accepted — the git default short length. Below that a
+ *  prefix identifies nothing. */
+const MIN_SHA_LEN = 7;
+const EVIDENCE_SHAPE = 'Attach evidence: { headSha: "<the current commit sha>", checks: [{ command, exitCode, output }] } — one entry per acceptance criterion, each a command you actually ran, with its real exit code and its output.';
+/** Decide whether a role may close a task, given already-gathered facts.
+ *  Returns a refusal message, or `null` to allow. Pure: the caller resolves
+ *  the head sha and the assignee. */
+export function checkTaskEvidence(f) {
+    if (!f.required)
+        return null;
+    if (f.caller !== f.assignee) {
+        return `org_task_done refused: this task is assigned to "${f.assignee}", and evidence only counts from the assignee. Ask "${f.assignee}" to close it, or reassign the task first.`;
+    }
+    const ev = f.evidence;
+    if (!ev) {
+        return `org_task_done refused (run_config.completion_evidence): closing a task needs verifiable evidence, not a summary. ${EVIDENCE_SHAPE}`;
+    }
+    if (ev.checks.length === 0) {
+        return `org_task_done refused: the evidence names no acceptance command. An acceptance criterion is a command with an exit code — if you cannot write one, the criterion is too vague to close on. ${EVIDENCE_SHAPE}`;
+    }
+    for (const c of ev.checks) {
+        if (!c.command.trim()) {
+            return `org_task_done refused: an evidence entry has an empty command. Every check must name the command that was actually run. ${EVIDENCE_SHAPE}`;
+        }
+    }
+    const failed = ev.checks.filter((c) => c.exitCode !== 0);
+    if (failed.length > 0) {
+        const detail = failed
+            .map((c) => `  $ ${c.command}\n  exit ${c.exitCode}${c.output ? `\n  ${c.output}` : ''}`)
+            .join('\n');
+        return `org_task_done refused: ${failed.length} acceptance command(s) did not exit 0 — the task is not done.\n${detail}\nFix the failure, re-run the checks, and close it again; the task goes back in your queue.`;
+    }
+    if (!f.headSha) {
+        return 'org_task_done refused: evidence must be pinned to a commit, but this workspace has no resolvable git HEAD. Either run this org in a git workspace, or turn run_config.completion_evidence off.';
+    }
+    const claimed = ev.headSha.trim().toLowerCase();
+    const actual = f.headSha.trim().toLowerCase();
+    if (claimed.length < MIN_SHA_LEN) {
+        return `org_task_done refused: headSha "${ev.headSha}" is too short to identify a commit (at least ${MIN_SHA_LEN} characters). The current head is ${actual}.`;
+    }
+    if (!actual.startsWith(claimed)) {
+        return `org_task_done refused: the evidence is STALE. It is pinned to ${claimed}, but the current head is ${actual} — the tree moved after those checks ran, so they say nothing about the code being closed. Re-run the acceptance commands against the current head and attach the new output.`;
+    }
+    return null;
+}
 //# sourceMappingURL=completion-gate.js.map

package/dist/src/orgrt/completion-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"completion-gate.js","sourceRoot":"","sources":["../../../src/orgrt/completion-gate.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA6BH;yEACyE;AACzE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B;6CAC6C;AAC7C,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B;4BAC4B;AAC5B,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,MAAM,UAAU,GACd,ybAAyb,CAAC;AAE5b,SAAS,YAAY,CAAC,CAAkB;IACtC,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IAClC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBAC3E,OAAO,iGAAiG,cAAc,wOAAwO,CAAC;YACjW,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,iBAAiB,GAAG,gBAAgB,EAAE,CAAC;gBAC3C,OAAO,sFAAsF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,GAAG,GAAG,CAAC,wJAAwJ,CAAC;YAC7R,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,wOAAwO,CAAC;YAClP,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBACtB,OAAO,uOAAuO,CAAC;YACjP,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GACpB,0PAA0P,CAAC;AAE7P;4DAC4D;AAC5D,MAAM,UAAU,eAAe,CAAC,CAAkB;IAChD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;QACxF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"completion-gate.js","sourceRoot":"","sources":["../../../src/orgrt/completion-gate.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AA6BH;yEACyE;AACzE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B;6CAC6C;AAC7C,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B;4BAC4B;AAC5B,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,MAAM,UAAU,GACd,ybAAyb,CAAC;AAE5b,SAAS,YAAY,CAAC,CAAkB;IACtC,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IAClC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC;QAClB,KAAK,UAAU,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;gBAC3E,OAAO,iGAAiG,cAAc,wOAAwO,CAAC;YACjW,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,QAAQ,EAAE,CAAC;YACd,IAAI,CAAC,CAAC,iBAAiB,GAAG,gBAAgB,EAAE,CAAC;gBAC3C,OAAO,sFAAsF,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,GAAG,GAAG,CAAC,wJAAwJ,CAAC;YAC7R,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,iBAAiB,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,wOAAwO,CAAC;YAClP,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;gBACtB,OAAO,uOAAuO,CAAC;YACjP,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,gBAAgB,GACpB,0PAA0P,CAAC;AAE7P;4DAC4D;AAC5D,MAAM,UAAU,eAAe,CAAC,CAAkB;IAChD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;QACxF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA6ED;iCACiC;AACjC,MAAM,WAAW,GAAG,CAAC,CAAC;AAEtB,MAAM,cAAc,GAClB,kNAAkN,CAAC;AAErN;;qCAEqC;AACrC,MAAM,UAAU,iBAAiB,CAAC,CAAoB;IACpD,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5B,OAAO,oDAAoD,CAAC,CAAC,QAAQ,uDAAuD,CAAC,CAAC,QAAQ,4CAA4C,CAAC;IACrL,CAAC;IACD,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC;IACtB,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,OAAO,oHAAoH,cAAc,EAAE,CAAC;IAC9I,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,8LAA8L,cAAc,EAAE,CAAC;IACxN,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;YACtB,OAAO,2HAA2H,cAAc,EAAE,CAAC;QACrJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;aACxF,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,OAAO,0BAA0B,MAAM,CAAC,MAAM,kEAAkE,MAAM,6FAA6F,CAAC;IACtN,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACf,OAAO,gMAAgM,CAAC;IAC1M,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC;QACjC,OAAO,mCAAmC,EAAE,CAAC,OAAO,iDAAiD,WAAW,qCAAqC,MAAM,GAAG,CAAC;IACjK,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,iEAAiE,OAAO,6BAA6B,MAAM,+KAA+K,CAAC;IACpS,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/orgrt/cost-tier.d.ts

@@ -0,0 +1,144 @@
+/**
+ * ADR-O001 D8 — cost tiers: a named cost level that sets BOTH the model AND
+ * the reasoning/thinking effort for a role, on whatever provider that role
+ * runs on.
+ *
+ * Measured on one real org run, holding volume constant: all-Opus $1,744,
+ * as-run blended $1,050, all-Sonnet $698, all-Haiku $349. Tiering is roughly
+ * a 3x win and is independent of every other D-decision.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ * DO NOT TIER A DELIBERATIVE ROLE INTO A WEAK VOICE.
+ *
+ * ADR-O001, "What this does NOT apply to — deliberation and debate":
+ *
+ *     "do not tier a debate participant into a weak voice. Tier by
+ *      *difficulty of the judgement*, not by role label. A cheap model in a
+ *      debate produces cheap arguments and the synthesiser cannot tell."
+ *
+ * Tier by how hard the judgement is, not by what the role is called. A role
+ * whose value is the quality of its disagreement — a design reviewer, a
+ * red-teamer, a debate participant, a synthesiser reading every position —
+ * belongs at `"exempt"` (see EXEMPT_TIER), which opts it out of tiering
+ * entirely and leaves its model exactly as it was. Control its cost with a
+ * budget (D1), not with a cheaper model.
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ * Three properties this deliberately has:
+ *
+ *  - **Defaulted off.** An org that declares no `cost_tiers` resolves to
+ *    `undefined` here and behaves byte-identically to before. Asserted by
+ *    org-cost-tier.test.ts, not merely promised by this comment.
+ *
+ *  - **Provider-agnostic.** A tier is a table keyed by *provider key* — a
+ *    Vercel vendor slug (`glm`, `openai`, …) when the role has one, else the
+ *    role's runtime id (`codex`, `kimicode`, `claude`, …). The built-in
+ *    catalog covers Claude only (the default and the only provider whose
+ *    model ids and effort mechanism this repo can verify); every other
+ *    provider — including one this code has never heard of — is declared in
+ *    the org config with no code change.
+ *
+ *  - **Never a silent downgrade.** If a tier has no entry for a role's
+ *    provider, resolution THROWS (and `validateCostTiers` reports it at org
+ *    start, before a token is spent) rather than quietly picking something.
+ *
+ * Effort is abstract here (`off | low | medium | high | xhigh | max`, the
+ * Claude Agent SDK's own vocabulary plus an explicit `off`). Each provider
+ * expresses it its own way:
+ *   - Claude: natively — session.ts hands it to the runner, which sets the
+ *     SDK's `effort` option (or `thinking: {type:'disabled'}` for `off`).
+ *   - Any other provider: whatever env vars the org declares under
+ *     `cost_tiers.providers.<key>.effort_env.<level>`, merged into the
+ *     session env. Providers that encode effort in the model id instead
+ *     (e.g. `gemini-3.6-flash-high`) need nothing extra — name the model
+ *     you want per tier.
+ *   - A provider with no mechanism at all simply ignores the level.
+ */
+import type { OrgDef, OrgRole } from './types.js';
+/** Abstract reasoning-effort level. Mirrors the Claude Agent SDK's
+ *  `EffortLevel` ('low' | 'medium' | 'high' | 'xhigh' | 'max') plus an
+ *  explicit 'off' meaning "no extended thinking at all". */
+export declare const ORG_EFFORT_LEVELS: readonly ['off', 'low', 'medium', 'high', 'xhigh', 'max'];
+export type OrgEffortLevel = (typeof ORG_EFFORT_LEVELS)[number];
+/** Reserved tier name: this role is not tiered at all. See the header. */
+export declare const EXEMPT_TIER = "exempt";
+/** What one tier resolves to for one provider. */
+export interface CostTierEntry {
+    model: string;
+    effort?: OrgEffortLevel;
+}
+/** A tier: provider key → entry. */
+export type CostTierDef = Record<string, CostTierEntry>;
+/** How one provider expresses an effort level, when it can. */
+export interface CostTierProviderDef {
+    /** Env vars to set for the session, per effort level. */
+    effort_env?: Partial<Record<OrgEffortLevel, Record<string, string>>>;
+}
+/** The org's `cost_tiers` block. */
+export interface CostTiersConfig {
+    /** Tier applied to every role that has no entry in `roles`. */
+    default?: string;
+    /** Per-role assignment. A bare string is a tier name (or `"exempt"`);
+     *  the object form additionally overrides the tier's effort, which is how
+     *  "patrol roles drop effort since they do simpler, more repetitive work"
+     *  is expressed without minting a whole extra tier. */
+    roles?: Record<string, string | {
+        tier: string;
+        effort?: OrgEffortLevel;
+    }>;
+    /** User catalog. Merged OVER the built-in catalog per tier, per provider —
+     *  so adding `{economy: {codex: …}}` extends built-in `economy` rather than
+     *  replacing its `claude` entry. */
+    tiers?: Record<string, CostTierDef>;
+    /** Per-provider effort expression. */
+    providers?: Record<string, CostTierProviderDef>;
+}
+/** Built-in catalog. Claude only, on purpose: these are the model ids and the
+ *  effort mechanism this repo can actually verify. Tiering a role on any other
+ *  provider means naming that provider's models in `cost_tiers.tiers` — which
+ *  is the honest alternative to inventing model ids and downgrading a role
+ *  onto a string nobody checked. */
+export declare const BUILTIN_COST_TIERS: Record<string, CostTierDef>;
+/** Thrown when a tier cannot resolve a model for a role's provider, or names
+ *  a tier that does not exist. Never swallowed into a default — see header. */
+export declare class CostTierError extends Error {
+}
+/** The provider key a role tiers under: its Vercel vendor slug when it has
+ *  one (that is what actually picks the model), else its runtime id, else the
+ *  org's runtime, else 'claude'. Mirrors resolveModel()'s own vendor-then-
+ *  runtime precedence in session.ts. */
+export declare function costTierProviderKey(role: Pick<OrgRole, 'runtime' | 'provider'>, orgRuntime?: string, vendor?: string): string;
+/** What a role's tier resolved to. */
+export interface ResolvedCostTier {
+    tier: string;
+    provider: string;
+    model: string;
+    effort?: OrgEffortLevel;
+    /** Env vars expressing `effort` for this provider; `{}` when the provider
+     *  has no env mechanism (Claude, which is handled natively, or a provider
+     *  with none at all). */
+    env: Record<string, string>;
+}
+/**
+ * Resolve the cost tier for one role. Returns `undefined` when the org
+ * declares no tiers, when the role is assigned none, or when it is
+ * `"exempt"` — all of which mean "leave this role exactly as it was".
+ *
+ * Throws CostTierError when a tier IS assigned but cannot be honoured, so a
+ * misconfigured tier is a loud failure rather than a silent downgrade.
+ */
+export declare function resolveRoleCostTier(args: {
+    role: OrgRole;
+    def?: Pick<OrgDef, 'runtime' | 'cost_tiers'> & Record<string, unknown>;
+    /** Vendor override, when the caller already resolved a named provider's
+     *  vendor (session.ts does). */
+    vendor?: string;
+}): ResolvedCostTier | undefined;
+/**
+ * Every cost-tier problem in an org definition, as human-readable lines.
+ * Empty for an org that declares no tiers (the upgrade-safe case). Called by
+ * the daemon before it spawns anything — a tier that cannot resolve must fail
+ * the run at start, not ten minutes and a wrong model later.
+ */
+export declare function validateCostTiers(def: OrgDef): string[];
+//# sourceMappingURL=cost-tier.d.ts.map

package/dist/src/orgrt/cost-tier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-tier.d.ts","sourceRoot":"","sources":["../../../src/orgrt/cost-tier.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAElD;;4DAE4D;AAC5D,eAAO,MAAM,iBAAiB,YAAI,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAC3F,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,0EAA0E;AAC1E,eAAO,MAAM,WAAW,WAAW,CAAC;AAEpC,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,oCAAoC;AACpC,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AAExD,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACtE;AAED,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;2DAGuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC3E;;wCAEoC;IACpC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,sCAAsC;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;CACjD;AAED;;;;oCAIoC;AACpC,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAa1D,CAAC;AAEF;+EAC+E;AAC/E,qBAAa,aAAc,SAAQ,KAAK;CAAG;AAE3C;;;wCAGwC;AACxC,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,GAAG,UAAU,CAAC,EAC3C,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAER;AAED,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;6BAEyB;IACzB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B;AAoBD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE;oCACgC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,gBAAgB,GAAG,SAAS,CAiC/B;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAiCvD"}

package/dist/src/orgrt/cost-tier.js

@@ -0,0 +1,183 @@
+// packages/@monomind/cli/src/orgrt/cost-tier.ts
+/**
+ * ADR-O001 D8 — cost tiers: a named cost level that sets BOTH the model AND
+ * the reasoning/thinking effort for a role, on whatever provider that role
+ * runs on.
+ *
+ * Measured on one real org run, holding volume constant: all-Opus $1,744,
+ * as-run blended $1,050, all-Sonnet $698, all-Haiku $349. Tiering is roughly
+ * a 3x win and is independent of every other D-decision.
+ *
+ * ──────────────────────────────────────────────────────────────────────────
+ * DO NOT TIER A DELIBERATIVE ROLE INTO A WEAK VOICE.
+ *
+ * ADR-O001, "What this does NOT apply to — deliberation and debate":
+ *
+ *     "do not tier a debate participant into a weak voice. Tier by
+ *      *difficulty of the judgement*, not by role label. A cheap model in a
+ *      debate produces cheap arguments and the synthesiser cannot tell."
+ *
+ * Tier by how hard the judgement is, not by what the role is called. A role
+ * whose value is the quality of its disagreement — a design reviewer, a
+ * red-teamer, a debate participant, a synthesiser reading every position —
+ * belongs at `"exempt"` (see EXEMPT_TIER), which opts it out of tiering
+ * entirely and leaves its model exactly as it was. Control its cost with a
+ * budget (D1), not with a cheaper model.
+ * ──────────────────────────────────────────────────────────────────────────
+ *
+ * Three properties this deliberately has:
+ *
+ *  - **Defaulted off.** An org that declares no `cost_tiers` resolves to
+ *    `undefined` here and behaves byte-identically to before. Asserted by
+ *    org-cost-tier.test.ts, not merely promised by this comment.
+ *
+ *  - **Provider-agnostic.** A tier is a table keyed by *provider key* — a
+ *    Vercel vendor slug (`glm`, `openai`, …) when the role has one, else the
+ *    role's runtime id (`codex`, `kimicode`, `claude`, …). The built-in
+ *    catalog covers Claude only (the default and the only provider whose
+ *    model ids and effort mechanism this repo can verify); every other
+ *    provider — including one this code has never heard of — is declared in
+ *    the org config with no code change.
+ *
+ *  - **Never a silent downgrade.** If a tier has no entry for a role's
+ *    provider, resolution THROWS (and `validateCostTiers` reports it at org
+ *    start, before a token is spent) rather than quietly picking something.
+ *
+ * Effort is abstract here (`off | low | medium | high | xhigh | max`, the
+ * Claude Agent SDK's own vocabulary plus an explicit `off`). Each provider
+ * expresses it its own way:
+ *   - Claude: natively — session.ts hands it to the runner, which sets the
+ *     SDK's `effort` option (or `thinking: {type:'disabled'}` for `off`).
+ *   - Any other provider: whatever env vars the org declares under
+ *     `cost_tiers.providers.<key>.effort_env.<level>`, merged into the
+ *     session env. Providers that encode effort in the model id instead
+ *     (e.g. `gemini-3.6-flash-high`) need nothing extra — name the model
+ *     you want per tier.
+ *   - A provider with no mechanism at all simply ignores the level.
+ */
+/** Abstract reasoning-effort level. Mirrors the Claude Agent SDK's
+ *  `EffortLevel` ('low' | 'medium' | 'high' | 'xhigh' | 'max') plus an
+ *  explicit 'off' meaning "no extended thinking at all". */
+export const ORG_EFFORT_LEVELS = ['off', 'low', 'medium', 'high', 'xhigh', 'max'];
+/** Reserved tier name: this role is not tiered at all. See the header. */
+export const EXEMPT_TIER = 'exempt';
+/** Built-in catalog. Claude only, on purpose: these are the model ids and the
+ *  effort mechanism this repo can actually verify. Tiering a role on any other
+ *  provider means naming that provider's models in `cost_tiers.tiers` — which
+ *  is the honest alternative to inventing model ids and downgrading a role
+ *  onto a string nobody checked. */
+export const BUILTIN_COST_TIERS = {
+    standard: {
+        claude: { model: 'claude-opus-5', effort: 'high' },
+        anthropic: { model: 'claude-opus-5', effort: 'high' },
+    },
+    economy: {
+        claude: { model: 'claude-sonnet-5', effort: 'medium' },
+        anthropic: { model: 'claude-sonnet-5', effort: 'medium' },
+    },
+    budget: {
+        claude: { model: 'claude-haiku-4-5', effort: 'low' },
+        anthropic: { model: 'claude-haiku-4-5', effort: 'low' },
+    },
+};
+/** Thrown when a tier cannot resolve a model for a role's provider, or names
+ *  a tier that does not exist. Never swallowed into a default — see header. */
+export class CostTierError extends Error {
+}
+/** The provider key a role tiers under: its Vercel vendor slug when it has
+ *  one (that is what actually picks the model), else its runtime id, else the
+ *  org's runtime, else 'claude'. Mirrors resolveModel()'s own vendor-then-
+ *  runtime precedence in session.ts. */
+export function costTierProviderKey(role, orgRuntime, vendor) {
+    return vendor ?? role.provider?.vendor ?? role.runtime ?? orgRuntime ?? 'claude';
+}
+function catalogFor(config, tier) {
+    const builtin = BUILTIN_COST_TIERS[tier];
+    const user = config.tiers?.[tier];
+    if (!builtin && !user)
+        return undefined;
+    return { ...builtin, ...user };
+}
+/** The tier name assigned to a role, or undefined when it is untiered. */
+function assignmentFor(config, roleId) {
+    const entry = config.roles?.[roleId];
+    if (typeof entry === 'string')
+        return { tier: entry };
+    if (entry)
+        return entry;
+    return config.default ? { tier: config.default } : undefined;
+}
+/**
+ * Resolve the cost tier for one role. Returns `undefined` when the org
+ * declares no tiers, when the role is assigned none, or when it is
+ * `"exempt"` — all of which mean "leave this role exactly as it was".
+ *
+ * Throws CostTierError when a tier IS assigned but cannot be honoured, so a
+ * misconfigured tier is a loud failure rather than a silent downgrade.
+ */
+export function resolveRoleCostTier(args) {
+    const config = args.def?.cost_tiers;
+    if (!config)
+        return undefined;
+    const assignment = assignmentFor(config, args.role.id);
+    if (!assignment || assignment.tier === EXEMPT_TIER)
+        return undefined;
+    const tier = catalogFor(config, assignment.tier);
+    if (!tier) {
+        throw new CostTierError(`cost tier "${assignment.tier}" is not defined (built-in tiers: ${Object.keys(BUILTIN_COST_TIERS).join(', ')}; add it under cost_tiers.tiers, or use "${EXEMPT_TIER}" to opt this role out)`);
+    }
+    const provider = costTierProviderKey(args.role, args.def?.runtime, args.vendor);
+    const entry = tier[provider];
+    if (!entry) {
+        throw new CostTierError(`cost tier "${assignment.tier}" has no model for provider "${provider}" ` +
+            `(define cost_tiers.tiers.${assignment.tier}.${provider} = { "model": "…", "effort": "…" }, ` +
+            `or set this role's tier to "${EXEMPT_TIER}") — refusing to guess a cheaper model`);
+    }
+    const effort = assignment.effort ?? entry.effort;
+    const env = (effort && config.providers?.[provider]?.effort_env?.[effort]) ?? {};
+    return { tier: assignment.tier, provider, model: entry.model, effort, env };
+}
+/**
+ * Every cost-tier problem in an org definition, as human-readable lines.
+ * Empty for an org that declares no tiers (the upgrade-safe case). Called by
+ * the daemon before it spawns anything — a tier that cannot resolve must fail
+ * the run at start, not ten minutes and a wrong model later.
+ */
+export function validateCostTiers(def) {
+    const config = def.cost_tiers;
+    if (!config)
+        return [];
+    const errors = [];
+    // A `default` or per-role tier naming a tier nobody defined is an error even
+    // if no role happens to reach it — it is always a typo.
+    const named = new Set();
+    if (config.default)
+        named.add(config.default);
+    for (const entry of Object.values(config.roles ?? {})) {
+        named.add(typeof entry === 'string' ? entry : entry.tier);
+    }
+    for (const tier of named) {
+        if (tier === EXEMPT_TIER)
+            continue;
+        if (!catalogFor(config, tier)) {
+            errors.push(`cost_tiers: tier "${tier}" is not defined (built-in: ${Object.keys(BUILTIN_COST_TIERS).join(', ')})`);
+        }
+    }
+    for (const role of def.roles ?? []) {
+        if (role.kind === 'endpoint')
+            continue; // endpoint roles run no model session
+        try {
+            resolveRoleCostTier({ role, def });
+        }
+        catch (err) {
+            if (!(err instanceof CostTierError))
+                throw err;
+            // The "tier not defined" case is already reported once above, by name.
+            if (err.message.startsWith('cost tier') && err.message.includes('is not defined'))
+                continue;
+            errors.push(`cost_tiers: role "${role.id}" — ${err.message}`);
+        }
+    }
+    return errors;
+}
+//# sourceMappingURL=cost-tier.js.map

package/dist/src/orgrt/cost-tier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cost-tier.js","sourceRoot":"","sources":["../../../src/orgrt/cost-tier.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAIH;;4DAE4D;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAU,CAAC;AAG3F,0EAA0E;AAC1E,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAkCpC;;;;oCAIoC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,QAAQ,EAAE;QACR,MAAM,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;QAClD,SAAS,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;KACtD;IACD,OAAO,EAAE;QACP,MAAM,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE;QACtD,SAAS,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,EAAE;KAC1D;IACD,MAAM,EAAE;QACN,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE;QACpD,SAAS,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAK,EAAE;KACxD;CACF,CAAC;AAEF;+EAC+E;AAC/E,MAAM,OAAO,aAAc,SAAQ,KAAK;CAAG;AAE3C;;;wCAGwC;AACxC,MAAM,UAAU,mBAAmB,CACjC,IAA2C,EAC3C,UAAmB,EACnB,MAAe;IAEf,OAAO,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC,OAAO,IAAI,UAAU,IAAI,QAAQ,CAAC;AACnF,CAAC;AAcD,SAAS,UAAU,CAAC,MAAuB,EAAE,IAAY;IACvD,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,0EAA0E;AAC1E,SAAS,aAAa,CACpB,MAAuB,EACvB,MAAc;IAEd,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAMnC;IACC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,UAAyC,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAE9B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,SAAS,CAAC;IAErE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,aAAa,CACrB,cAAc,UAAU,CAAC,IAAI,qCAAqC,MAAM,CAAC,IAAI,CAC3E,kBAAkB,CACnB,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,WAAW,yBAAyB,CAC7F,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAClC,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,GAAG,EAAE,OAA6B,EACvC,IAAI,CAAC,MAAM,CACZ,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CACrB,cAAc,UAAU,CAAC,IAAI,gCAAgC,QAAQ,IAAI;YACvE,4BAA4B,UAAU,CAAC,IAAI,IAAI,QAAQ,sCAAsC;YAC7F,+BAA+B,WAAW,wCAAwC,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AAC9E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,MAAM,GAAI,GAAwC,CAAC,UAAU,CAAC;IACpE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,6EAA6E;IAC7E,wDAAwD;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,MAAM,CAAC,OAAO;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACtD,KAAK,CAAC,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,WAAW;YAAE,SAAS;QACnC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;YAC9B,MAAM,CAAC,IAAI,CACT,qBAAqB,IAAI,+BAA+B,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACtG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,sCAAsC;QAC9E,IAAI,CAAC;YACH,mBAAmB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,aAAa,CAAC;gBAAE,MAAM,GAAG,CAAC;YAC/C,uEAAuE;YACvE,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAAE,SAAS;YAC5F,MAAM,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,EAAE,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/orgrt/cross-org.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cross-org.d.ts","sourceRoot":"","sources":["../../../src/orgrt/cross-org.ts"],"names":[],"mappings":"AAOA,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAS/E,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjF;AAsED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAMtE;AAED;;;mEAGmE;AACnE,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,MAAM,CAWR;AAED;;;;;iEAKiE;AACjE,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CA0ClB;AAUD,mGAAmG;AACnG,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,CA8RjB;AAwMD,MAAM,WAAW,iBAAiB;IAChC;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;oGAEoG;AACpG,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,EACvB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA6NvE"}
+{"version":3,"file":"cross-org.d.ts","sourceRoot":"","sources":["../../../src/orgrt/cross-org.ts"],"names":[],"mappings":"AAOA,OAAO,EAAmB,KAAK,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAS/E,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAGjF;AAsED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,EAAE,EAAE,MAAM,GACT;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAMtE;AAED;;;mEAGmE;AACnE,wBAAgB,QAAQ,CACtB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,GAAG,SAAS,EAC3B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,MAAM,CAWR;AAED;;;;;iEAKiE;AACjE,wBAAsB,WAAW,CAC/B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,UAAU,EACf,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CA0ClB;AAUD,mGAAmG;AACnG,wBAAsB,OAAO,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,MAAM,CAAC,CA4SjB;AAwMD,MAAM,WAAW,iBAAiB;IAChC;kEAC8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;oGAEoG;AACpG,wBAAsB,aAAa,CACjC,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EACZ,cAAc,CAAC,EAAE,MAAM,EACvB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CA6NvE"}

package/dist/src/orgrt/cross-org.js

@@ -174,6 +174,20 @@ export async function deliver(daemon, fromOrg, fromRole, to, subject, body, opts
     const { cross, orgName: targetOrgName, role: targetRole, qualified: toQualified, } = resolveAddress(fromOrg, to);
     const targetOrg = daemon.orgs.get(targetOrgName);
     const src = daemon.orgs.get(fromOrg);
+    // ADR-O001 D6: an artifact-only reviewer takes runtime-built packets only.
+    // Another agent's mail is exactly the doer's framing D6 keeps out, so it is
+    // refused with the way to get a review instead. The human is not an agent.
+    const reviewerRole = targetOrg?.def.roles.find((r) => r.id === targetRole);
+    if (reviewerRole?.review_input === 'artifact-only' && (cross || fromRole !== 'human')) {
+        src?.bus.emit({
+            type: 'audit',
+            from: fromRole,
+            to: toQualified,
+            reason: 'review-mail-refused',
+            msg: `mail to artifact-only reviewer ${toQualified} refused: ${subject}`,
+        });
+        return `REFUSED: "${toQualified}" is an artifact-only reviewer and does not take messages from agents. Request a review with org_review(taskId, "${targetRole}") — it is built from the task, its evidence and the diff.`;
+    }
     // M2: an endpoint role has no mailbox — POST to its endpoint instead.
     const endpointRole = targetOrg ? findEndpointRole(targetOrg.def, targetRole) : undefined;
     if (targetOrg && endpointRole) {