@monoes/monomindcli 2.16.12 → 2.16.14

package/dist/src/orgrt/org-reload.js

@@ -0,0 +1,111 @@
+// packages/@monomind/cli/src/orgrt/org-reload.ts
+// Extracted from daemon.ts — hot-reloading a running org's definition.
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { resolveOrgDefBlueprints } from '../catalog/blueprints.js';
+import { reopenBudgetClosedRoles, rolesOnDefTokenCaps } from './budget-closure.js';
+import { isEndpointRole } from './endpoint-roles.js';
+import { expandOrgPolicyPathVars, promptVarsFor } from './prompt-vars.js';
+import { computeReplacementBudget } from './role-slot.js';
+import { ORG_DIR, OrgDefSchema } from './types.js';
+export function reloadOrgDef(daemon, name) {
+    const running = daemon.orgs.get(name);
+    if (!running)
+        throw new Error(`org ${name} is not running`);
+    const defPath = join(daemon.root, ORG_DIR, `${name}.json`);
+    const parsedDef = OrgDefSchema.parse(JSON.parse(readFileSync(defPath, 'utf8')));
+    const bp = resolveOrgDefBlueprints(parsedDef, daemon.root);
+    if (bp.errors.length)
+        throw new Error(`org ${name}: ${bp.errors.join('; ')}`);
+    const newDef = expandOrgPolicyPathVars(bp.def, promptVarsFor(daemon.root));
+    const changed = [];
+    const newRoles = [];
+    const removedRoles = [];
+    const onDefTokenCaps = rolesOnDefTokenCaps(running);
+    if (newDef.goal !== running.def.goal) {
+        running.def.goal = newDef.goal;
+        changed.push('goal');
+    }
+    const oldRc = running.def.run_config;
+    const newRc = newDef.run_config;
+    for (const key of new Set([...Object.keys(oldRc), ...Object.keys(newRc)])) {
+        if (JSON.stringify(oldRc[key]) !== JSON.stringify(newRc[key])) {
+            oldRc[key] = newRc[key];
+            changed.push(`run_config.${key}`);
+        }
+    }
+    // M1 (C-37): apply changes to EXISTING roles' tool_providers, endpoint,
+    // kind and policy. Fields are replaced on the live role object (sessions
+    // read tool_providers at their next start, checkApproval reads policy
+    // live) and a running role's PolicyEngine gets the new policy now.
+    // #343: budget_usd / budget_tokens too — the live PolicyEngine gets the
+    // new caps with its spend kept, and a role closed for budget reopens
+    // below once it is no longer over them.
+    const RELOADABLE_ROLE_FIELDS = [
+        'tool_providers',
+        'endpoint',
+        'kind',
+        'policy',
+        'budget_usd',
+        'budget_tokens',
+    ];
+    for (const next of newDef.roles) {
+        const live = running.def.roles.find((r) => r.id === next.id);
+        if (!live)
+            continue;
+        const liveRec = live;
+        const nextRec = next;
+        for (const field of RELOADABLE_ROLE_FIELDS) {
+            if (JSON.stringify(liveRec[field]) === JSON.stringify(nextRec[field]))
+                continue;
+            const targets = new Set([liveRec]);
+            const slotRole = running.roleSlots.get(next.id)?.effectiveRole;
+            if (slotRole)
+                targets.add(slotRole);
+            const pending = running.pendingRoles?.get(next.id);
+            if (pending)
+                targets.add(pending);
+            for (const t of targets) {
+                if (nextRec[field] === undefined)
+                    delete t[field];
+                else
+                    t[field] = nextRec[field];
+            }
+            if (field === 'policy')
+                running.agents.get(next.id)?.policy.updatePolicy(next.policy ?? {});
+            if (field === 'budget_usd' || field === 'budget_tokens')
+                running.agents.get(next.id)?.policy.setBudgetCaps({
+                    maxTokens: live.policy?.maxTokens ?? computeReplacementBudget(running.def, next.id),
+                    maxUsd: live.policy?.maxUsd ?? live.budget_usd,
+                });
+            changed.push(`role:${next.id}:${field}`);
+        }
+    }
+    const reopened = reopenBudgetClosedRoles(daemon, name, running, onDefTokenCaps);
+    const existingRoleIds = new Set(running.def.roles.map((r) => r.id));
+    const newRoleIds = new Set(newDef.roles.map((r) => r.id));
+    for (const role of newDef.roles) {
+        if (!existingRoleIds.has(role.id)) {
+            running.def.roles.push(role);
+            // M2: an endpoint role never gets a session — nothing to lazy-spawn.
+            if (!isEndpointRole(role)) {
+                if (!running.pendingRoles)
+                    running.pendingRoles = new Map();
+                running.pendingRoles.set(role.id, role);
+            }
+            newRoles.push(role.id);
+        }
+    }
+    for (const id of existingRoleIds) {
+        if (!newRoleIds.has(id))
+            removedRoles.push(id);
+    }
+    running.bus.emit({
+        type: 'audit',
+        reason: 'hot-reload',
+        msg: `org def reloaded: ${changed.length} fields changed, ${newRoles.length} new roles, ${removedRoles.length} removed roles${reopened.length ? `, reopened ${reopened.join(', ')}` : ''}`,
+        data: { changed, newRoles, removedRoles },
+    });
+    return { changed, newRoles, removedRoles };
+}
+//# sourceMappingURL=org-reload.js.map

package/dist/src/orgrt/org-reload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-reload.js","sourceRoot":"","sources":["../../../src/orgrt/org-reload.ts"],"names":[],"mappings":"AAAA,iDAAiD;AACjD,uEAAuE;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEnF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,UAAU,YAAY,CAC1B,MAAiB,EACjB,IAAY;IAEZ,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,iBAAiB,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,uBAAuB,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAEpD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAqC,CAAC;IAChE,MAAM,KAAK,GAAG,MAAM,CAAC,UAAqC,CAAC;IAC3D,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,cAAc,GAAG,EAAE,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,mEAAmE;IACnE,wEAAwE;IACxE,qEAAqE;IACrE,wCAAwC;IACxC,MAAM,sBAAsB,GAAG;QAC7B,gBAAgB;QAChB,UAAU;QACV,MAAM;QACN,QAAQ;QACR,YAAY;QACZ,eAAe;KACP,CAAC;IACX,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,MAAM,OAAO,GAAG,IAA+B,CAAC;QAChD,KAAK,MAAM,KAAK,IAAI,sBAAsB,EAAE,CAAC;YAC3C,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,aAEpC,CAAC;YACd,IAAI,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAwC,CAAC;YAC1F,IAAI,OAAO;gBAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,SAAS;oBAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;;oBAC7C,CAAC,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,KAAK,KAAK,QAAQ;gBAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAC5F,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,eAAe;gBACrD,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC;oBAChD,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,wBAAwB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;oBACnF,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,UAAU;iBAC/C,CAAC,CAAC;YACL,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,IAAI,KAAK,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAEhF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,qEAAqE;YACrE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,OAAO,CAAC,YAAY;oBAAE,OAAO,CAAC,YAAY,GAAG,IAAI,GAAG,EAAE,CAAC;gBAC5D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC1C,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,eAAe,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QACf,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,YAAY;QACpB,GAAG,EAAE,qBAAqB,OAAO,CAAC,MAAM,oBAAoB,QAAQ,CAAC,MAAM,eAAe,YAAY,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1L,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE;KAC1C,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAC7C,CAAC"}

package/dist/src/orgrt/org-start-steps.d.ts

@@ -0,0 +1,21 @@
+import { type OrgCheckpoint } from './checkpoint.js';
+import type { OrgDaemon } from './daemon.js';
+import { type RunningOrg } from './daemon-types.js';
+import { type RoleFence } from './fence.js';
+import { type OrgDef } from './types.js';
+/** Everything startOrgInner needs before it creates the bus: validates the
+ *  definition and roster, picks (or resumes) the run, and prepares its cwd. */
+export declare function prepareOrgStart(daemon: OrgDaemon, name: string, options?: {
+    resume?: boolean;
+    autoApprove?: string[];
+}): Promise<{
+    def: OrgDef;
+    run: string;
+    checkpoint: OrgCheckpoint | undefined;
+    dir: string;
+    cwd: string;
+    worktreePath: string | undefined;
+}>;
+export declare function createRoleFences(daemon: OrgDaemon, def: OrgDef): Promise<Map<string, RoleFence>>;
+export declare function startInboxAndDrain(daemon: OrgDaemon, name: string, running: RunningOrg): Promise<void>;
+//# sourceMappingURL=org-start-steps.d.ts.map

package/dist/src/orgrt/org-start-steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-start-steps.d.ts","sourceRoot":"","sources":["../../../src/orgrt/org-start-steps.ts"],"names":[],"mappings":"AAYA,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAOrE,OAAO,EAIL,KAAK,SAAS,EACf,MAAM,YAAY,CAAC;AAKpB,OAAO,EAAW,KAAK,MAAM,EAAgB,MAAM,YAAY,CAAC;AAEhE;+EAC+E;AAC/E,wBAAsB,eAAe,CACnC,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACrD,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,aAAa,GAAG,SAAS,CAAC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CAAC,CAmMD;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CA8BjC;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,IAAI,CAAC,CAiFf"}

package/dist/src/orgrt/org-start-steps.js

@@ -0,0 +1,305 @@
+// packages/@monomind/cli/src/orgrt/org-start-steps.ts
+// Extracted from daemon.ts — the self-contained steps of startOrg: preflight
+// (definition, run id, workspace, validation), per-role fences, and the
+// broker registration + offline-inbox drain that ends it.
+import { execFileSync } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { resolveOrgDefBlueprints } from '../catalog/blueprints.js';
+import { configureResourceLimits, getResourceLimits } from '../utils/resource-governor.js';
+// ── Extracted module imports ────────────────────────────────────────────
+import * as approvalOps from './approvals.js';
+import { BrokerLease, normalizeCredential } from './broker.js';
+import { isCheckpointExpired, migrateCheckpoint, validateCheckpoint, } from './checkpoint.js';
+import * as crossOrg from './cross-org.js';
+import { activeRoleCount } from './daemon-types.js';
+import { agentRoles, isEndpointRole, retryQueuedEndpoints, startEndpointRetryLoop, } from './endpoint-roles.js';
+import { createFenceForRole, loadGlobalFenceConfig, mergeFenceConfigs, } from './fence.js';
+import { drainInbox, newMessageId, queueMessage } from './inbox.js';
+import { expandOrgPolicyPathVars, promptVarsFor } from './prompt-vars.js';
+import * as questionOps from './questions.js';
+import { resolveRoleRunner } from './runner-resolve.js';
+import { ORG_DIR, OrgDefSchema } from './types.js';
+/** Everything startOrgInner needs before it creates the bus: validates the
+ *  definition and roster, picks (or resumes) the run, and prepares its cwd. */
+export async function prepareOrgStart(daemon, name, options) {
+    // #301: the PRIMARY fix — the stop-side backstops below (finishStop,
+    // process 'exit') can only run for a run that ends through code we
+    // control; a SIGKILL leaves .git/worktrees/<name> metadata behind with
+    // nothing left to clean it up, and so did every run that leaked before
+    // this fix existed. Pruning here turns "did the last run clean up,
+    // however it died?" into "a run always begins clean" — the only thing
+    // that recovers both the SIGKILL case and worktrees already orphaned
+    // before this daemon process started. Unconditional and best-effort for
+    // the same reasons as the stop-side prune (see finishStop): it only
+    // drops metadata whose worktree directory is already gone, so it cannot
+    // touch a live worktree, including the owner's.
+    try {
+        execFileSync('git', ['worktree', 'prune'], {
+            cwd: daemon.root,
+            stdio: 'ignore',
+            timeout: 30_000,
+        });
+    }
+    catch {
+        /* best-effort: not a git repo, git missing, or a wedged hook */
+    }
+    const defPath = join(daemon.root, ORG_DIR, `${name}.json`);
+    const parsedDef = OrgDefSchema.parse(JSON.parse(readFileSync(defPath, 'utf8')));
+    const bp = resolveOrgDefBlueprints(parsedDef, daemon.root);
+    // {{home}} / {{org_root}} in policy paths, before any root or sandbox sees them.
+    const def = expandOrgPolicyPathVars(bp.def, promptVarsFor(daemon.root));
+    const autoApproveError = approvalOps.unknownAutoApproveError(options?.autoApprove ?? [], def.roles);
+    if (autoApproveError)
+        throw new Error(autoApproveError);
+    let run;
+    let checkpoint;
+    if (options?.resume) {
+        const rtPath = join(daemon.root, ORG_DIR, name, 'runtime.json');
+        if (!existsSync(rtPath))
+            throw new Error(`cannot resume org "${name}": runtime.json not found`);
+        const rt = JSON.parse(readFileSync(rtPath, 'utf8'));
+        if (!rt?.run || !rt?.checkpoint)
+            throw new Error(`cannot resume org "${name}": no valid checkpoint found`);
+        if (isCheckpointExpired(rt.checkpoint))
+            throw new Error(`cannot resume org "${name}": checkpoint expired`);
+        // Migrate an older-schema checkpoint (verifying ITS OWN stored checksum
+        // first) before validating it against CHECKPOINT_VERSION — see
+        // migrateCheckpoint's doc comment in checkpoint.ts.
+        const migrated = migrateCheckpoint(rt.checkpoint);
+        if (!migrated || !validateCheckpoint(migrated))
+            throw new Error(`cannot resume org "${name}": checkpoint validation failed`);
+        rt.checkpoint = migrated;
+        run = rt.run;
+        checkpoint = rt.checkpoint;
+        if (rt.abandonedRoles) {
+            daemon.abandoned.set(name, new Set(rt.abandonedRoles));
+        }
+    }
+    else {
+        daemon.abandoned.delete(name); // a previous run's missing roles say nothing about this one
+        daemon.memoryErrors.delete(name); // nor does its memory-store failure (#293)
+        approvalOps.clearApprovalsForFreshStart(daemon, name); // a previous run's approvals are moot for this one
+        questionOps.clearQuestionsForFreshStart(daemon, name); // nor do its unanswered questions (#248)
+        // random suffix: second-precision stamps collide across processes (two CLI
+        // invocations in the same second would share a run dir and its bus.jsonl)
+        run = `run-${new Date().toISOString().replace(/[-:T]/g, '').slice(0, 14)}-${Math.random().toString(36).slice(2, 6)}`;
+    }
+    const dir = join(daemon.root, ORG_DIR, name, run);
+    mkdirSync(dir, { recursive: true });
+    // Role sessions run at the project root by default. They used to run in an
+    // empty scratch dir under .monomind/orgs/<name>/workspace, which the policy
+    // engine's workdir check ("path escapes org workdir") then confined every
+    // path to — so a development org could not Read or Edit a single file of
+    // the project it was created to work on. Roles fell back to Bash, which is
+    // not path-scoped, meaning the sandbox blocked the safe tools and let the
+    // unrestricted one through. Opt back in with run_config.workspace:
+    // 'isolated', or pin an absolute path.
+    const ws = daemon.workspaceSetting(def);
+    let cwd;
+    let worktreePath;
+    if (ws === 'worktree') {
+        worktreePath = join(daemon.root, ORG_DIR, name, 'worktree');
+        const { execFileSync } = await import('node:child_process');
+        try {
+            // Remove stale worktree from a previous run
+            if (existsSync(worktreePath)) {
+                // R4: bound the call — a wedged git hook (git-lfs, gc lock, gpg sign
+                // prompt) would otherwise hang the whole daemon indefinitely.
+                // SEC-5: execFileSync + argv — no shell interpolation of worktreePath.
+                execFileSync('git', ['worktree', 'remove', '--force', worktreePath], {
+                    cwd: daemon.root,
+                    stdio: 'ignore',
+                    timeout: 30_000,
+                });
+            }
+        }
+        catch {
+            /* best-effort cleanup */
+        }
+        execFileSync('git', ['worktree', 'add', worktreePath, 'HEAD', '--detach'], {
+            cwd: daemon.root,
+            stdio: 'ignore',
+            timeout: 30_000,
+        });
+        cwd = worktreePath;
+    }
+    else {
+        cwd =
+            ws === 'repo'
+                ? daemon.root
+                : ws === 'isolated'
+                    ? join(daemon.root, ORG_DIR, name, 'workspace')
+                    : ws;
+    }
+    mkdirSync(cwd, { recursive: true });
+    // An org must be able to seat its whole roster. maxSdkProcesses is sized for
+    // the machine (cpus - 2), so any org with more roles than that had its tail
+    // roles deferred forever — a 7-role org on an 8-core box permanently lost
+    // its 7th, and the work that role owned simply never happened. Raise the
+    // ceiling to the role count. An explicit MONOMIND_MAX_SDK_PROCS still wins:
+    // if the operator named a number, that number is the answer.
+    //
+    // Runner process model (relevant for sizing): ClaudeAgentRunner and
+    // VercelAgentRunner are in-process (no subprocess per role). KimiCodeAgentRunner,
+    // OpencodeAgentRunner, and CodexAgentRunner each spawn one subprocess per role.
+    // The current sizing (def.roles.length) is therefore safe — it over-provisions
+    // for in-process runners but never under-provisions for subprocess runners.
+    const sessionRoleCount = agentRoles(def.roles).length;
+    if (!process.env.MONOMIND_MAX_SDK_PROCS &&
+        getResourceLimits().maxSdkProcesses < sessionRoleCount) {
+        configureResourceLimits({ maxSdkProcesses: sessionRoleCount });
+    }
+    // ADR-O001 D8: a cost tier that can't resolve a model for a role's
+    // provider must stop the run here. The alternative — resolving it at
+    // session start — would either crash one role ten minutes in or, worse,
+    // quietly leave that role on a different model than the tier claimed.
+    const { validateCostTiers } = await import('./cost-tier.js');
+    const tierErrors = validateCostTiers(def);
+    if (tierErrors.length) {
+        throw new Error(`org ${name}: ${tierErrors.join('; ')}`);
+    }
+    // ADR-O001 D7: an oversized or unresolvable loadout catalog stops the run
+    // here, for the same reason — not ten minutes in, at some role's spawn.
+    const { validateLoadouts } = await import('./loadouts.js');
+    const loadoutErrors = validateLoadouts(def, daemon.root).errors;
+    if (loadoutErrors.length) {
+        throw new Error(`org ${name}: ${loadoutErrors.join('; ')}`);
+    }
+    const { validateRoleSkills } = await import('./skill-library.js');
+    const skillErrors = [
+        ...bp.errors,
+        ...def.roles.flatMap((r) => validateRoleSkills(r, daemon.root)),
+    ];
+    if (skillErrors.length) {
+        throw new Error(`org ${name}: ${skillErrors.join('; ')}`);
+    }
+    // Validate per-role providers before spawning anything (fail-fast: a
+    // missing env var discovered 10 minutes into a run wastes the entire run).
+    const { resolveProviderEnv: validateProvider, resolveRoleProvider } = await import('./provider.js');
+    for (const role of def.roles) {
+        try {
+            if (role.provider) {
+                validateProvider(role.provider);
+            }
+            else if (role.adapter_config?.provider) {
+                // Named provider (`monomind providers configure`): resolve now so a
+                // missing/misconfigured entry fails the run at start, not mid-flight.
+                resolveRoleProvider(role, daemon.root);
+            }
+        }
+        catch (err) {
+            throw new Error(`org ${name}: role "${role.id}" provider validation failed — ${err instanceof Error ? err.message : err}`);
+        }
+        // provider.kind 'gemini'/'openai' only sets env vars (GEMINI_API_KEY /
+        // OPENAI_API_KEY — see provider.ts) for a CLI that never reads them:
+        // autoRuntimeFromProvider has no case for either kind, so
+        // resolveRoleRunner falls through to `undefined` and session.ts spawns
+        // the default ClaudeAgentRunner. The role silently runs on Claude while
+        // its config claims gemini/openai — surface that loudly at start time
+        // instead of leaving it to be discovered mid-run.
+        const kind = role.provider?.kind;
+        if ((kind === 'gemini' || kind === 'openai') &&
+            !resolveRoleRunner(role.runtime, def.runtime, kind, undefined, role.provider)) {
+            console.error(`org ${name}: role "${role.id}" sets provider.kind="${kind}" but no runtime honors it — ` +
+                `this role will actually run on the Claude Agent SDK, not ${kind}. ` +
+                `Set role.runtime (or the org's runtime) explicitly, or use provider.kind="vercel-api-key" ` +
+                `with vendor="${kind === 'gemini' ? 'google' : 'openai'}" to route through a real ${kind} model.`);
+        }
+    }
+    return { def, run, checkpoint, dir, cwd, worktreePath };
+}
+export async function createRoleFences(daemon, def) {
+    // ── MonoFence guardrail: pre-create per-role instances ────────────────
+    const globalFence = loadGlobalFenceConfig(daemon.root);
+    const orgFence = def.fence;
+    const roleFences = new Map();
+    for (const role of def.roles) {
+        const roleFenceCfg = role.policy?.fence;
+        const merged = mergeFenceConfigs(globalFence ?? undefined, orgFence, roleFenceCfg);
+        if (merged.enabled === false)
+            continue;
+        if (!globalFence && !orgFence && !roleFenceCfg)
+            continue;
+        try {
+            const instance = await createFenceForRole(merged);
+            if (instance) {
+                roleFences.set(role.id, {
+                    instance,
+                    abortThreshold: typeof merged.abortThreshold === 'number' ? merged.abortThreshold : 0.8,
+                    scanMessages: merged.scanMessages !== false,
+                });
+            }
+        }
+        catch {
+            /* monofence-ai not installed — skip silently */
+        }
+    }
+    return roleFences;
+}
+export async function startInboxAndDrain(daemon, name, running) {
+    const { def, bus } = running;
+    if (daemon.opts.crossProcess && daemon.opts.inboxUrl) {
+        const operatorCred = normalizeCredential(daemon.opts.operatorCredential);
+        const lease = new BrokerLease(name, daemon.opts.inboxUrl, daemon.opts.brokerDir, undefined, running.credential, operatorCred ? { credential: operatorCred, dir: daemon.opts.operatorDir } : undefined, daemon.root);
+        lease.start();
+        daemon.leases.set(name, lease);
+    }
+    // Drain any messages that arrived while the org was offline
+    const queued = drainInbox(daemon.root, name);
+    // M2: messages for endpoint roles are delivered by POST, not into a mailbox —
+    // put them back (flagged) and let the endpoint retry path send them.
+    const endpointQueued = new Set();
+    for (const msg of queued) {
+        if (!isEndpointRole(def.roles.find((r) => r.id === msg.toRole)))
+            continue;
+        const messageId = msg.messageId ?? newMessageId();
+        endpointQueued.add(messageId);
+        queueMessage(daemon.root, name, { ...msg, messageId, endpoint: true });
+    }
+    startEndpointRetryLoop(daemon, name);
+    if (endpointQueued.size > 0)
+        void retryQueuedEndpoints(daemon, name, (m) => endpointQueued.has(m.messageId ?? '')).catch(() => {
+            /* stays queued — the periodic sweep retries */
+        });
+    for (const msg of queued) {
+        if (isEndpointRole(def.roles.find((r) => r.id === msg.toRole)))
+            continue;
+        // Spawn a lazy target before delivering. These messages were queued while
+        // the org was offline — a human's answer, or another org's request — and
+        // the whole point of draining is that they arrive. Skipping a role merely
+        // because it has not spawned yet discarded them permanently, after
+        // queueMessage had already reported them accepted.
+        if (!running.agents.has(msg.toRole) && running.pendingRoles?.has(msg.toRole)) {
+            const pending = running.pendingRoles.get(msg.toRole);
+            // Bug 4: don't spawn past run_config.max_concurrent_agents. Requeue
+            // this message (queueMessage, not a silent drop) and defer the spawn
+            // the same way a concurrency-gated lazy spawn defers elsewhere.
+            const concurrencyLimit = def.run_config.max_concurrent_agents;
+            if (concurrencyLimit != null && activeRoleCount(running) >= concurrencyLimit) {
+                running.pendingRoles.delete(msg.toRole);
+                queueMessage(daemon.root, name, msg);
+                daemon.scheduleConcurrencyDeferredSpawn(name, running, pending, running.spawnRole);
+            }
+            else {
+                running.pendingRoles.delete(msg.toRole);
+                running.spawnRole?.(pending);
+            }
+        }
+        const agent = running.agents.get(msg.toRole);
+        if (agent && !agent.mailbox.isClosed) {
+            bus.emit({
+                type: 'xorg',
+                from: msg.fromQualified,
+                to: `${name}:${msg.toRole}`,
+                subject: msg.subject,
+                msg: msg.body,
+                data: { messageId: msg.messageId ?? newMessageId() },
+            });
+            await crossOrg.pushMessage(daemon, name, running, msg.toRole, msg.fromQualified, msg.subject, msg.body, `inbox-${msg.ts}-${Math.random().toString(36).slice(2, 8)}`);
+        }
+    }
+    if (queued.length)
+        bus.emit({ type: 'status', msg: `drained ${queued.length} queued message(s) from inbox` });
+}
+//# sourceMappingURL=org-start-steps.js.map

package/dist/src/orgrt/org-start-steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-start-steps.js","sourceRoot":"","sources":["../../../src/orgrt/org-start-steps.ts"],"names":[],"mappings":"AAAA,sDAAsD;AACtD,6EAA6E;AAC7E,wEAAwE;AACxE,0DAA0D;AAC1D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAC3F,2EAA2E;AAC3E,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EAEjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAmB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EACL,UAAU,EACV,cAAc,EACd,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,GAElB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAe,YAAY,EAAE,MAAM,YAAY,CAAC;AAEhE;+EAC+E;AAC/E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAiB,EACjB,IAAY,EACZ,OAAsD;IAStD,qEAAqE;IACrE,mEAAmE;IACnE,uEAAuE;IACvE,uEAAuE;IACvE,mEAAmE;IACnE,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,gDAAgD;IAChD,IAAI,CAAC;QACH,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE;YACzC,GAAG,EAAE,MAAM,CAAC,IAAI;YAChB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,gEAAgE;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChF,MAAM,EAAE,GAAG,uBAAuB,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,iFAAiF;IACjF,MAAM,GAAG,GAAG,uBAAuB,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,gBAAgB,GAAG,WAAW,CAAC,uBAAuB,CAC1D,OAAO,EAAE,WAAW,IAAI,EAAE,EAC1B,GAAG,CAAC,KAAK,CACV,CAAC;IACF,IAAI,gBAAgB;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAExD,IAAI,GAAW,CAAC;IAChB,IAAI,UAAqC,CAAC;IAC1C,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,2BAA2B,CAAC,CAAC;QAChG,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,UAAU;YAC7B,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,8BAA8B,CAAC,CAAC;QAC5E,IAAI,mBAAmB,CAAC,EAAE,CAAC,UAAU,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,uBAAuB,CAAC,CAAC;QACrE,wEAAwE;QACxE,+DAA+D;QAC/D,oDAAoD;QACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,iCAAiC,CAAC,CAAC;QAC/E,EAAE,CAAC,UAAU,GAAG,QAAQ,CAAC;QACzB,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;QACb,UAAU,GAAG,EAAE,CAAC,UAAU,CAAC;QAC3B,IAAI,EAAE,CAAC,cAAc,EAAE,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,4DAA4D;QAC3F,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,2CAA2C;QAC7E,WAAW,CAAC,2BAA2B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,mDAAmD;QAC1G,WAAW,CAAC,2BAA2B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,yCAAyC;QAChG,2EAA2E;QAC3E,0EAA0E;QAC1E,GAAG,GAAG,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACvH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAClD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,2EAA2E;IAC3E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,mEAAmE;IACnE,uCAAuC;IACvC,MAAM,EAAE,GAAG,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,YAAgC,CAAC;IACrC,IAAI,EAAE,KAAK,UAAU,EAAE,CAAC;QACtB,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,4CAA4C;YAC5C,IAAI,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC7B,qEAAqE;gBACrE,8DAA8D;gBAC9D,uEAAuE;gBACvE,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE;oBACnE,GAAG,EAAE,MAAM,CAAC,IAAI;oBAChB,KAAK,EAAE,QAAQ;oBACf,OAAO,EAAE,MAAM;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,yBAAyB;QAC3B,CAAC;QACD,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE;YACzE,GAAG,EAAE,MAAM,CAAC,IAAI;YAChB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,MAAM;SAChB,CAAC,CAAC;QACH,GAAG,GAAG,YAAY,CAAC;IACrB,CAAC;SAAM,CAAC;QACN,GAAG;YACD,EAAE,KAAK,MAAM;gBACX,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,EAAE,KAAK,UAAU;oBACjB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC;oBAC/C,CAAC,CAAC,EAAE,CAAC;IACb,CAAC;IACD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpC,6EAA6E;IAC7E,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,4EAA4E;IAC5E,6DAA6D;IAC7D,EAAE;IACF,oEAAoE;IACpE,kFAAkF;IAClF,gFAAgF;IAChF,+EAA+E;IAC/E,4EAA4E;IAC5E,MAAM,gBAAgB,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IACtD,IACE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;QACnC,iBAAiB,EAAE,CAAC,eAAe,GAAG,gBAAgB,EACtD,CAAC;QACD,uBAAuB,CAAC,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,mEAAmE;IACnE,qEAAqE;IACrE,wEAAwE;IACxE,sEAAsE;IACtE,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAChE,IAAI,aAAa,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG;QAClB,GAAG,EAAE,CAAC,MAAM;QACZ,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;KAChE,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAChF,eAAe,CAChB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAClB,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,IAAI,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;gBACzC,oEAAoE;gBACpE,sEAAsE;gBACtE,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,OAAO,IAAI,WAAW,IAAI,CAAC,EAAE,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC1G,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,qEAAqE;QACrE,0DAA0D;QAC1D,uEAAuE;QACvE,wEAAwE;QACxE,sEAAsE;QACtE,kDAAkD;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;QACjC,IACE,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,QAAQ,CAAC;YACxC,CAAC,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAC7E,CAAC;YACD,OAAO,CAAC,KAAK,CACX,OAAO,IAAI,WAAW,IAAI,CAAC,EAAE,yBAAyB,IAAI,+BAA+B;gBACvF,4DAA4D,IAAI,IAAI;gBACpE,4FAA4F;gBAC5F,gBAAgB,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,6BAA6B,IAAI,SAAS,CACpG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAiB,EACjB,GAAW;IAEX,yEAAyE;IACzE,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAI,GAA+B,CAAC,KAA4C,CAAC;IAC/F,MAAM,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAI,IAAI,CAAC,MAA8C,EAAE,KAE9D,CAAC;QACd,MAAM,MAAM,GAAG,iBAAiB,CAC9B,WAAW,IAAI,SAAS,EACxB,QAAe,EACf,YAAmB,CACpB,CAAC;QACF,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK;YAAE,SAAS;QACvC,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY;YAAE,SAAS;QACzD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,QAAQ,EAAE,CAAC;gBACb,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;oBACtB,QAAQ;oBACR,cAAc,EAAE,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG;oBACvF,YAAY,EAAE,MAAM,CAAC,YAAY,KAAK,KAAK;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAiB,EACjB,IAAY,EACZ,OAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC7B,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,IAAI,WAAW,CAC3B,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,QAAQ,EACpB,MAAM,CAAC,IAAI,CAAC,SAAS,EACrB,SAAS,EACT,OAAO,CAAC,UAAU,EAClB,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,EACrF,MAAM,CAAC,IAAI,CACZ,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,4DAA4D;IAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7C,8EAA8E;IAC9E,qEAAqE;IACrE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QAC1E,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,YAAY,EAAE,CAAC;QAClD,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9B,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACrC,IAAI,cAAc,CAAC,IAAI,GAAG,CAAC;QACzB,KAAK,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CACzF,GAAG,EAAE;YACH,+CAA+C;QACjD,CAAC,CACF,CAAC;IACJ,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;YAAE,SAAS;QACzE,0EAA0E;QAC1E,yEAAyE;QACzE,0EAA0E;QAC1E,mEAAmE;QACnE,mDAAmD;QACnD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;YACtD,oEAAoE;YACpE,qEAAqE;YACrE,gEAAgE;YAChE,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC;YAC9D,IAAI,gBAAgB,IAAI,IAAI,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,gBAAgB,EAAE,CAAC;gBAC7E,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACxC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;gBACrC,MAAM,CAAC,gCAAgC,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,SAAU,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACxC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE,GAAG,CAAC,aAAa;gBACvB,EAAE,EAAE,GAAG,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE;gBAC3B,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,GAAG,EAAE,GAAG,CAAC,IAAI;gBACb,IAAI,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,YAAY,EAAE,EAAE;aACrD,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,WAAW,CACxB,MAAM,EACN,IAAI,EACJ,OAAO,EACP,GAAG,CAAC,MAAM,EACV,GAAG,CAAC,aAAa,EACjB,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,IAAI,EACR,SAAS,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM;QACf,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,MAAM,CAAC,MAAM,+BAA+B,EAAE,CAAC,CAAC;AAC/F,CAAC"}

package/dist/src/orgrt/org-start.d.ts

@@ -0,0 +1,7 @@
+import type { OrgDaemon } from './daemon.js';
+import type { RunningOrg } from './daemon-types.js';
+export declare function startOrg(daemon: OrgDaemon, name: string, taskOverride?: string, options?: {
+    resume?: boolean;
+    autoApprove?: string[];
+}): Promise<RunningOrg>;
+//# sourceMappingURL=org-start.d.ts.map

package/dist/src/orgrt/org-start.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-start.d.ts","sourceRoot":"","sources":["../../../src/orgrt/org-start.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAkBpD,wBAAsB,QAAQ,CAC5B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GACrD,OAAO,CAAC,UAAU,CAAC,CA2DrB"}