@monoes/monomindcli 2.16.13 → 2.16.14

package/dist/src/orgrt/role-session-opts.js

@@ -0,0 +1,289 @@
+// packages/@monomind/cli/src/orgrt/role-session-opts.ts
+// Extracted from daemon.ts — the SessionOpts one role incarnation runs with
+// (every daemon callback its org tools reach) and the org_complete gate.
+import { join } from 'node:path';
+import { checkCompletion } from './completion-gate.js';
+import * as decisionOps from './decisions.js';
+import { openTaskCount } from './decisions.js';
+import { loadoutCatalog, resolveLoadout } from './loadouts.js';
+import * as questionOps from './questions.js';
+import { endTurn, withTrace } from './role-trace.js';
+import { resolveRoleRunner } from './runner-resolve.js';
+import { effectiveToolProviders } from './skill-library.js';
+import { resolveAutoAssignee } from './task-match.js';
+import { ORG_DIR } from './types.js';
+/** #302: the `org_complete` consent gate's emit-and-return logic, extracted
+ *  (matching `resolvedIdleNudgeCount`'s and `runOutcomeResult`'s precedent)
+ *  so it is unit-testable without a live daemon, a running org, or the SDK's
+ *  own tool-calling loop — none of which a test can drive directly, since
+ *  `queryFn` replaces the whole SDK `query()`, tool orchestration included.
+ *  `onComplete` gathers the facts (needs `this`/`running`) and calls this;
+ *  this does the one decision (`checkCompletion`) and its two possible
+ *  side effects. Returns the refusal string, or `null` to allow — exactly
+ *  what the org_complete tool handler (session.ts) relays as the result. */
+export function resolveOrgComplete(bus, role, outcome, summary, blocker, blockerDetail, runFacts) {
+    const refusal = checkCompletion({ outcome, blocker, blockerDetail, ...runFacts });
+    if (refusal) {
+        // Visible in `org logs` — a silent refusal reads to an operator as a
+        // hung boss, not a boss that was told no.
+        bus.emit({
+            type: 'audit',
+            from: role,
+            reason: 'org-complete-refused',
+            msg: refusal,
+            data: { outcome, blocker, blockerDetail },
+        });
+        return refusal;
+    }
+    // #302 AC6: the blocker must show up in RENDERED output, not just `data`
+    // — `org logs`'s formatter prints an event's `msg` verbatim and never
+    // looks at `data`, so a blocker recorded only there would satisfy a unit
+    // assertion and never reach a human reading the actual log.
+    const blockerSuffix = blocker
+        ? ` (blocker: ${blocker}${blockerDetail ? ` — ${blockerDetail}` : ''})`
+        : '';
+    bus.emit({
+        type: 'status',
+        from: role,
+        reason: 'org-complete',
+        msg: `run outcome: ${outcome}${blockerSuffix}`,
+        data: { outcome, summary, blocker, blockerDetail },
+    });
+    return null;
+}
+/** The sessionOpts built inside spawnRoleIncarnation (role-incarnation.ts). */
+export function buildRoleSessionOpts(daemon, name, running, role, roleCwd, runtime, abort, loadout, policy, mailbox, roleCheckpoint) {
+    const { def, bus, run } = running;
+    return {
+        org: name,
+        role,
+        bus,
+        policy,
+        mailbox,
+        taskProcesses: runtime.taskProcesses,
+        cwd: roleCwd,
+        def,
+        // Pass the org state directory so runners that persist per-role state
+        // (VercelAgentRunner session files) write under .monomind/orgs/<name>
+        // instead of polluting the workspace cwd.
+        orgDir: join(daemon.root, ORG_DIR, name),
+        // Project root for named-provider (`adapter_config.provider`) config
+        // lookup — role cwd may be an isolated workspace with no config file.
+        orgRoot: daemon.root,
+        run,
+        // M1: role tool providers — listed at session start, processes spawned
+        // lazily on first call and killed when the session ends.
+        buildProviderTools: async () => {
+            const providers = effectiveToolProviders(role, daemon.root);
+            if (providers.length === 0)
+                return undefined;
+            return daemon.toolProviders.buildRoleTools({
+                ctx: { org: name, run, role: role.id, root: daemon.root },
+                providers,
+                trace: () => daemon.roleTrace(name, role.id),
+                bus,
+                cwd: roleCwd,
+            });
+        },
+        maxTurns: role.max_turns_per_message ?? def.run_config.max_turns_per_message,
+        resumeSessionId: roleCheckpoint?.sessionId,
+        sessionLedger: running.sessionLedger,
+        // ADR-O001 D3 x D7: a task-scoped session is built with its task's own
+        // recorded loadout. Unresolvable → no loadout, loudly (as at spawn).
+        loadoutFor: (taskId) => {
+            const name = running.taskDag?.get(taskId)?.loadout;
+            if (!name)
+                return undefined;
+            try {
+                return resolveLoadout(def, name, daemon.root);
+            }
+            catch (err) {
+                bus.emit({
+                    type: 'audit',
+                    from: role.id,
+                    reason: 'loadout-unresolvable',
+                    msg: `task ${taskId} session built without loadout "${name}": ${err instanceof Error ? err.message : err}`,
+                    data: { loadout: name, taskId },
+                });
+                return undefined;
+            }
+        },
+        lastMessageId: () => runtime.lastMessageId,
+        onOutput: (line) => runtime.scrollback.push(line),
+        onSessionId: (id) => {
+            runtime.sessionId = id;
+        },
+        onTurnEnd: () => {
+            endTurn(running, role.id);
+            decisionOps.nudgeOpenTasksAtTurnEnd(running, role.id);
+        },
+        // #327: the role's org_send mail carries its chain at the next hop.
+        deliver: (from, to, subject, body) => daemon.deliver(name, from, to, subject, withTrace(body, daemon.roleTrace(name, role.id))),
+        askHuman: (r, question, blocking) => daemon.askHuman(name, r, question, blocking),
+        onGate: (r, gateName, gateDesc) => daemon.createGate(name, r, gateName, gateDesc),
+        circuitBreaker: (() => {
+            const cb = def.run_config.circuit_breaker;
+            if (!cb)
+                return undefined;
+            return { threshold: cb.failure_threshold ?? 5, state: { failures: 0, tripped: false } };
+        })(),
+        beforeTool: (r, toolName, input) => daemon.checkApproval(name, r, toolName, input),
+        fence: running.fences?.get(role.id),
+        // ORG-1: gatedCanUseTool denials are a natural decision point — record them so
+        // `org decisions` shows real traces instead of always reporting none.
+        onDecision: (r, toolName, message, kind) => {
+            daemon.recordDecision(name, r, {
+                type: 'tool',
+                kind,
+                context: `tool call: ${toolName}`,
+                reasoning: message,
+                outcome: 'denied',
+            });
+        },
+        // ORG-9: decision gates are documented as "hard-blocking" — make that
+        // true by actually denying tool use while this role has a pending gate,
+        // the same way pending approvals already do.
+        hasPendingGate: () => daemon.listGates(name, 'pending').some((g) => g.roleId === role.id),
+        // #302: refuse an unsatisfiable org_complete BEFORE the 'org-complete'
+        // status event ever exists — the bus subscriber at the top of this
+        // function auto-stops the run on that event alone, so a refusal that
+        // still emitted it would be undone by the very next tick regardless of
+        // what this function returns to the tool handler.
+        onComplete: role.id === running.bossRoleId
+            ? (r, outcome, summary, blocker, blockerDetail) => {
+                let maxBudgetFraction = 0;
+                for (const rt of running.agents.values()) {
+                    const p = rt.policy;
+                    if (p.policy.maxTokens)
+                        maxBudgetFraction = Math.max(maxBudgetFraction, p.usage / p.policy.maxTokens);
+                    if (p.policy.maxUsd)
+                        maxBudgetFraction = Math.max(maxBudgetFraction, p.usageUsd / p.policy.maxUsd);
+                }
+                // Same predicates the idle watchdog uses for its own
+                // legitimate-wait check (:1316-1328) — a pending gate or an
+                // unanswered question is the same "genuinely waiting on a
+                // human" fact either way.
+                const pendingHumanWaits = daemon.listGates(name, 'pending').length +
+                    questionOps.pendingBlockingQuestions(daemon.root, name).length;
+                return resolveOrgComplete(bus, r, outcome, summary, blocker, blockerDetail, {
+                    mode: def.run_config.completion ?? 'boss',
+                    maxBudgetFraction,
+                    pendingHumanWaits,
+                    hasActiveBlock: running.taskDag?.hasActiveBlock(Date.now()) ?? false,
+                    hasPendingWork: running.taskDag?.hasPendingWork() ?? false,
+                });
+            }
+            : undefined,
+        // #11: a boss that overflows its context window isn't a crash (it keeps
+        // returning +0-token errors forever), so without this the idle watchdog
+        // just nudges it for ~30 min before idle-stopping. Restart the whole org
+        // with fresh sessions instead — bounded by MAX_BOSS_RESTARTS.
+        onContextLimit: role.id === running.bossRoleId ? () => daemon.scheduleBossRestart(name) : undefined,
+        onListRuntimeOptions: role.id === running.bossRoleId && (def.run_config.max_role_respawns ?? 0) > 0
+            ? () => daemon.listRuntimeOptions()
+            : undefined,
+        onRespawnRole: role.id === running.bossRoleId && (def.run_config.max_role_respawns ?? 0) > 0
+            ? (callerId, args) => daemon.respawnRole(name, callerId, args)
+            : undefined,
+        recall: async (r, q) => {
+            const answer = await daemon.recallOrgMemory(name, def, q, r);
+            bus.emit({
+                type: 'status',
+                from: r,
+                reason: 'org-recall',
+                msg: `recall: ${q.slice(0, 80)}`,
+                data: { hits: answer.hits },
+            });
+            return answer.text;
+        },
+        searchKnowledge: async (r, q) => {
+            const answer = await daemon.searchProjectKnowledge(q);
+            bus.emit({
+                type: 'status',
+                from: r,
+                reason: 'knowledge-search',
+                msg: `knowledge: ${q.slice(0, 80)}`,
+                data: { hits: answer.hits },
+            });
+            return answer.text;
+        },
+        glossary: running.glossary,
+        remember: async (r, content, scope) => {
+            const text = await daemon.rememberOrgMemory(name, def, r, content, scope, run);
+            bus.emit({
+                type: 'status',
+                from: r,
+                reason: 'org-remember',
+                msg: `remember (${scope}): ${content.slice(0, 80)}`,
+                data: { scope },
+            });
+            return text;
+        },
+        learn: async (r, payload) => {
+            const text = await daemon.learnOrgKnowledge(name, run, payload);
+            bus.emit({
+                type: 'status',
+                from: r,
+                reason: 'org-learn',
+                msg: `learn: ${text.slice(0, 120)}`,
+                data: {
+                    nodes: payload.nodes?.length ?? 0,
+                    edges: payload.edges?.length ?? 0,
+                    rules: payload.rules?.length ?? 0,
+                },
+            });
+            return text;
+        },
+        createTask: (r, title, assignee, deps, loadout, brief, pick) => {
+            return daemon.dagCreateTask(name, r, title, assignee, deps, loadout, brief, pick);
+        },
+        pickAssignee: resolveAutoAssignee(def, (id) => openTaskCount(daemon.orgs.get(name), id), () => daemon.orgs.get(name)?.taskDag?.all() ?? []),
+        onSkillLoad: (r, skill) => decisionOps.recordSkillLoad(daemon.orgs.get(name), r, skill),
+        // ADR-O001 D7: only an org with a catalog gets the `loadout` argument;
+        // the session itself is built with the loadout frozen above.
+        loadoutCatalog: loadoutCatalog(def),
+        loadout,
+        completeTask: (r, taskId, result, evidence) => {
+            return daemon.dagCompleteTask(name, r, taskId, result, evidence);
+        },
+        // ADR-O001 D5: only an org that opted in advertises the evidence
+        // argument, so every other org's tool list stays byte-identical.
+        requireTaskEvidence: def.run_config.completion_evidence === true && role.deliberative !== true,
+        // ADR-O001 D6: only an org with an artifact-only reviewer gets org_review,
+        // so every other org's tool list stays byte-identical.
+        requestReview: def.roles.some((r) => r.review_input === 'artifact-only')
+            ? (r, taskId, reviewer, base) => daemon.dagRequestReview(name, r, taskId, reviewer, base)
+            : undefined,
+        listTasks: (taskId) => decisionOps.dagListTasks(daemon, name, taskId),
+        splitTask: (r, parentId, children) => {
+            return daemon.dagSplitTask(name, r, parentId, children);
+        },
+        mergeTask: (r, sourceId, targetId) => {
+            return daemon.dagMergeTask(name, r, sourceId, targetId);
+        },
+        cancelTask: (r, taskId, reason) => {
+            return daemon.dagCancelTask(name, r, taskId, reason);
+        },
+        blockTask: (r, taskId, untilIso, reason, every) => {
+            return daemon.dagBlockTask(name, r, taskId, untilIso, reason, every);
+        },
+        planGraph: (r, specs) => {
+            return daemon.dagPlanGraph(name, r, specs);
+        },
+        queryFn: daemon.opts.queryFn,
+        // Runner resolution: explicit opts.runner > role `runtime` field >
+        // org def `runtime` field > MONOMIND_RUNTIME env (opencode/kimicode) >
+        // undefined (session.ts falls back to ClaudeAgentRunner via queryFn).
+        // Leaving it undefined for the default path is what keeps
+        // Claude/Antigravity orgs byte-for-byte unchanged. Session opts are
+        // built per role here, so each role gets its own runner.
+        runner: daemon.opts.runner ??
+            resolveRoleRunner(role.runtime, def.runtime, role.provider?.kind, undefined, role.provider),
+        // Lets respawnRole force-stop THIS specific incarnation (mid-run role
+        // replacement's forced-stop step) without reaching into runAgentSession's
+        // internals.
+        externalAbort: abort,
+        silentSessionMs: daemon.opts.silentSessionMs,
+    };
+}
+//# sourceMappingURL=role-session-opts.js.map

package/dist/src/orgrt/role-session-opts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role-session-opts.js","sourceRoot":"","sources":["../../../src/orgrt/role-session-opts.ts"],"names":[],"mappings":"AAAA,wDAAwD;AACxD,4EAA4E;AAC5E,yEAAyE;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EAAwB,eAAe,EAAqB,MAAM,sBAAsB,CAAC;AAGhG,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/D,OAAO,KAAK,WAAW,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAiB,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAqB,OAAO,EAAgB,MAAM,YAAY,CAAC;AAEtE;;;;;;;;4EAQ4E;AAC5E,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,IAAY,EACZ,OAA0C,EAC1C,OAAe,EACf,OAA6D,EAC7D,aAAiC,EACjC,QAGC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IAClF,IAAI,OAAO,EAAE,CAAC;QACZ,qEAAqE;QACrE,0CAA0C;QAC1C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI;YACV,MAAM,EAAE,sBAAsB;YAC9B,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE;SAC1C,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,aAAa,GAAG,OAAO;QAC3B,CAAC,CAAC,cAAc,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,MAAM,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;QACvE,CAAC,CAAC,EAAE,CAAC;IACP,GAAG,CAAC,IAAI,CAAC;QACP,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,cAAc;QACtB,GAAG,EAAE,gBAAgB,OAAO,GAAG,aAAa,EAAE;QAC9C,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE;KACnD,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,oBAAoB,CAClC,MAAiB,EACjB,IAAY,EACZ,OAAmB,EACnB,IAAa,EACb,OAAe,EACf,OAAqB,EACrB,KAAsB,EACtB,OAAsD,EACtD,MAAoB,EACpB,OAAgB,EAChB,cAA0C;IAE1C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAClC,OAAO;QACL,GAAG,EAAE,IAAI;QACT,IAAI;QACJ,GAAG;QACH,MAAM;QACN,OAAO;QACP,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,GAAG,EAAE,OAAO;QACZ,GAAG;QACH,sEAAsE;QACtE,sEAAsE;QACtE,0CAA0C;QAC1C,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;QACxC,qEAAqE;QACrE,sEAAsE;QACtE,OAAO,EAAE,MAAM,CAAC,IAAI;QACpB,GAAG;QACH,uEAAuE;QACvE,yDAAyD;QACzD,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAC7B,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC7C,OAAO,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC;gBACzC,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;gBACzD,SAAS;gBACT,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC5C,GAAG;gBACH,GAAG,EAAE,OAAO;aACb,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,EAAE,IAAI,CAAC,qBAAqB,IAAI,GAAG,CAAC,UAAU,CAAC,qBAAqB;QAC5E,eAAe,EAAE,cAAc,EAAE,SAAS;QAC1C,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,uEAAuE;QACvE,qEAAqE;QACrE,UAAU,EAAE,CAAC,MAAc,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;YACnD,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC;oBACP,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,IAAI,CAAC,EAAE;oBACb,MAAM,EAAE,sBAAsB;oBAC9B,GAAG,EAAE,QAAQ,MAAM,mCAAmC,IAAI,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE;oBAC1G,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE;iBAChC,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QACD,aAAa,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa;QAC1C,QAAQ,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QACzD,WAAW,EAAE,CAAC,EAAU,EAAE,EAAE;YAC1B,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC;QACzB,CAAC;QACD,SAAS,EAAE,GAAG,EAAE;YACd,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1B,WAAW,CAAC,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,oEAAoE;QACpE,OAAO,EAAE,CAAC,IAAY,EAAE,EAAU,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE,CACnE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3F,QAAQ,EAAE,CAAC,CAAS,EAAE,QAAgB,EAAE,QAAkB,EAAE,EAAE,CAC5D,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAC9C,MAAM,EAAE,CAAC,CAAS,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE,CACxD,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC;QAChD,cAAc,EAAE,CAAC,GAAG,EAAE;YACpB,MAAM,EAAE,GAAI,GAAG,CAAC,UAAsC,CAAC,eAE1C,CAAC;YACd,IAAI,CAAC,EAAE;gBAAE,OAAO,SAAS,CAAC;YAC1B,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,iBAAiB,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;QAC1F,CAAC,CAAC,EAAE;QACJ,UAAU,EAAE,CAAC,CAAS,EAAE,QAAgB,EAAE,KAA8B,EAAE,EAAE,CAC1E,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC;QAChD,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,+EAA+E;QAC/E,sEAAsE;QACtE,UAAU,EAAE,CAAC,CAAS,EAAE,QAAgB,EAAE,OAAe,EAAE,IAAkB,EAAE,EAAE;YAC/E,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,EAAE;gBAC7B,IAAI,EAAE,MAAM;gBACZ,IAAI;gBACJ,OAAO,EAAE,cAAc,QAAQ,EAAE;gBACjC,SAAS,EAAE,OAAO;gBAClB,OAAO,EAAE,QAAQ;aAClB,CAAC,CAAC;QACL,CAAC;QACD,sEAAsE;QACtE,wEAAwE;QACxE,6CAA6C;QAC7C,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;QACzF,uEAAuE;QACvE,mEAAmE;QACnE,qEAAqE;QACrE,uEAAuE;QACvE,kDAAkD;QAClD,UAAU,EACR,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU;YAC5B,CAAC,CAAC,CACE,CAAS,EACT,OAA0C,EAC1C,OAAe,EACf,OAAkD,EAClD,aAAsB,EACtB,EAAE;gBACF,IAAI,iBAAiB,GAAG,CAAC,CAAC;gBAC1B,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;oBACzC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;oBACpB,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS;wBACpB,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAChF,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;wBACjB,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAClF,CAAC;gBACD,qDAAqD;gBACrD,4DAA4D;gBAC5D,0DAA0D;gBAC1D,0BAA0B;gBAC1B,MAAM,iBAAiB,GACrB,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,MAAM;oBACxC,WAAW,CAAC,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC;gBACjE,OAAO,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE;oBAC1E,IAAI,EAAE,GAAG,CAAC,UAAU,CAAC,UAAU,IAAI,MAAM;oBACzC,iBAAiB;oBACjB,iBAAiB;oBACjB,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK;oBACpE,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,KAAK;iBAC3D,CAAC,CAAC;YACL,CAAC;YACH,CAAC,CAAC,SAAS;QACf,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,8DAA8D;QAC9D,cAAc,EACZ,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QACrF,oBAAoB,EAClB,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,CAAC;YAC3E,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,EAAE;YACnC,CAAC,CAAC,SAAS;QACf,aAAa,EACX,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,iBAAiB,IAAI,CAAC,CAAC,GAAG,CAAC;YAC3E,CAAC,CAAC,CAAC,QAAgB,EAAE,IAAS,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC;YAC3E,CAAC,CAAC,SAAS;QACf,MAAM,EAAE,KAAK,EAAE,CAAS,EAAE,CAAS,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,YAAY;gBACpB,GAAG,EAAE,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBAChC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,CAAS,EAAE,CAAS,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,GAAG,EAAE,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBACnC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;aAC5B,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QACD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,KAAK,EAAE,CAAS,EAAE,OAAe,EAAE,KAAsB,EAAE,EAAE;YACrE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/E,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,cAAc;gBACtB,GAAG,EAAE,aAAa,KAAK,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;gBACnD,IAAI,EAAE,EAAE,KAAK,EAAE;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,EAAE,KAAK,EACV,CAAS,EACT,OAAoE,EACpE,EAAE;YACF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAChE,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC;gBACP,MAAM,EAAE,WAAW;gBACnB,GAAG,EAAE,UAAU,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;gBACnC,IAAI,EAAE;oBACJ,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;oBACjC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;oBACjC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC;iBAClC;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,EAAE,CACV,CAAS,EACT,KAAa,EACb,QAAgB,EAChB,IAAc,EACd,OAAgB,EAChB,KAAc,EACd,IAAe,EACf,EAAE;YACF,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACpF,CAAC;QACD,YAAY,EAAE,mBAAmB,CAC/B,GAAG,EACH,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,EAChD,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAClD;QACD,WAAW,EAAE,CAAC,CAAS,EAAE,KAAa,EAAE,EAAE,CACxC,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;QAC9D,uEAAuE;QACvE,6DAA6D;QAC7D,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC;QACnC,OAAO;QACP,YAAY,EAAE,CAAC,CAAS,EAAE,MAAc,EAAE,MAAe,EAAE,QAAuB,EAAE,EAAE;YACpF,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC;QACD,iEAAiE;QACjE,iEAAiE;QACjE,mBAAmB,EAAE,GAAG,CAAC,UAAU,CAAC,mBAAmB,KAAK,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI;QAC9F,2EAA2E;QAC3E,uDAAuD;QACvD,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,eAAe,CAAC;YACtE,CAAC,CAAC,CAAC,CAAS,EAAE,MAAc,EAAE,QAAgB,EAAE,IAAa,EAAE,EAAE,CAC7D,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC;YAC5D,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,WAAW,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC;QAC9E,SAAS,EAAE,CAAC,CAAS,EAAE,QAAgB,EAAE,QAA+C,EAAE,EAAE;YAC1F,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,SAAS,EAAE,CAAC,CAAS,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE;YAC3D,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,UAAU,EAAE,CAAC,CAAS,EAAE,MAAc,EAAE,MAAe,EAAE,EAAE;YACzD,OAAO,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACvD,CAAC;QACD,SAAS,EAAE,CAAC,CAAS,EAAE,MAAc,EAAE,QAAgB,EAAE,MAAe,EAAE,KAAc,EAAE,EAAE;YAC1F,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,SAAS,EAAE,CAAC,CAAS,EAAE,KAAiC,EAAE,EAAE;YAC1D,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;QAC5B,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,0DAA0D;QAC1D,oEAAoE;QACpE,yDAAyD;QACzD,MAAM,EACJ,MAAM,CAAC,IAAI,CAAC,MAAM;YAClB,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC;QAC7F,sEAAsE;QACtE,0EAA0E;QAC1E,aAAa;QACb,aAAa,EAAE,KAAK;QACpB,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;KAC7C,CAAC;AACJ,CAAC"}

package/dist/src/orgrt/runner-resolve.d.ts

@@ -0,0 +1,43 @@
+import type { AgentRunner } from './agent-runner.js';
+import type { ProviderConfig } from './types.js';
+/** Resolve which AgentRunner hosts an org's role sessions.
+ *  Precedence: role `runtime` field > org def `runtime` field >
+ *  MONOMIND_RUNTIME env > auto-resolve from provider kind > undefined (the
+ *  default path, where session.ts falls back to ClaudeAgentRunner). Returning
+ *  undefined for the default path keeps Claude/Antigravity orgs byte-for-byte
+ *  unchanged. Callers pass `role.runtime ?? def.runtime` as `orgRuntime`
+ *  (see resolveRoleRunner). */
+export type RuntimeKind = 'claude' | 'kimicode' | 'opencode' | 'vercel' | 'codex' | 'antigravity' | 'grok' | 'qwen' | 'crush' | 'copilot' | 'pi'
+/** Opt-in alternate to 'pi': keeps the pi subprocess alive for the whole
+ *  mailbox session (--mode rpc) instead of spawning fresh per turn — see
+ *  pi-rpc-runner.ts's header for the protocol source (live-verified
+ *  against pi v0.73.1, issue #179). Prefer plain 'pi' unless you
+ *  specifically want session-lifetime context continuity. */
+ | 'pi-rpc'
+/** Opt-in alternate to 'qwen': keeps the qwen subprocess alive for the
+ *  whole mailbox session (--input-format/--output-format stream-json)
+ *  instead of spawning fresh per turn — see qwen-rpc-runner.ts's header
+ *  for the protocol source (live-verified against qwen-code v0.21.13,
+ *  issue #182). One gap not independently re-verified: whether `result`
+ *  fires exactly once per turn even when qwen runs several of its own
+ *  native tools in sequence first (inferred by symmetry with the non-RPC
+ *  QwenAgentRunner, not separately live-tested for this runner). Prefer
+ *  plain 'qwen' unless you specifically want session-lifetime context
+ *  continuity. */
+ | 'qwen-rpc'
+/** Nous Research's Hermes Agent CLI (`hermes`), spawned fresh per
+ *  tool-call round like 'codex' — but with NO session-resume flag in
+ *  headless mode (see hermes-runner.ts's header): every round resends the
+ *  full transcript, and args.resume across mailbox messages cannot be
+ *  honored. Docs-only verified, streamsIncrementally: false — see
+ *  runner-registry.ts. */
+ | 'hermes';
+export type ProviderKind = 'subscription' | 'api-key' | 'base-url' | 'bedrock' | 'vertex' | 'gemini' | 'openai' | 'vercel-api-key' | 'codex' | 'antigravity';
+export declare function resolveRunner(orgRuntime?: RuntimeKind, providerKind?: ProviderKind, provider?: ProviderConfig): AgentRunner | undefined;
+/** Per-session variant: a role's own `runtime` field wins over the org-level
+ *  one (and the env var) — including `role.runtime === 'claude'`, which forces
+ *  the default Claude path even when the org/env select another runtime.
+ *  Roles without a `runtime` inherit the org-level resolution unchanged.
+ *  If no explicit runtime is set, auto-resolve from the provider kind. */
+export declare function resolveRoleRunner(roleRuntime?: RuntimeKind, orgRuntime?: RuntimeKind, roleProviderKind?: ProviderKind, orgProviderKind?: ProviderKind, roleProvider?: ProviderConfig): AgentRunner | undefined;
+//# sourceMappingURL=runner-resolve.d.ts.map

package/dist/src/orgrt/runner-resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-resolve.d.ts","sourceRoot":"","sources":["../../../src/orgrt/runner-resolve.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAarD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD;;;;;;+BAM+B;AAC/B,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,UAAU,GACV,UAAU,GACV,QAAQ,GACR,OAAO,GACP,aAAa,GACb,MAAM,GACN,MAAM,GACN,OAAO,GACP,SAAS,GACT,IAAI;AACN;;;;6DAI6D;GAC3D,QAAQ;AACV;;;;;;;;;kBASkB;GAChB,UAAU;AACZ;;;;;0BAK0B;GACxB,QAAQ,CAAC;AACb,MAAM,MAAM,YAAY,GACpB,cAAc,GACd,SAAS,GACT,UAAU,GACV,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,gBAAgB,GAChB,OAAO,GACP,aAAa,CAAC;AAUlB,wBAAgB,aAAa,CAC3B,UAAU,CAAC,EAAE,WAAW,EACxB,YAAY,CAAC,EAAE,YAAY,EAC3B,QAAQ,CAAC,EAAE,cAAc,GACxB,WAAW,GAAG,SAAS,CA8BzB;AAED;;;;0EAI0E;AAC1E,wBAAgB,iBAAiB,CAC/B,WAAW,CAAC,EAAE,WAAW,EACzB,UAAU,CAAC,EAAE,WAAW,EACxB,gBAAgB,CAAC,EAAE,YAAY,EAC/B,eAAe,CAAC,EAAE,YAAY,EAC9B,YAAY,CAAC,EAAE,cAAc,GAC5B,WAAW,GAAG,SAAS,CAIzB"}

package/dist/src/orgrt/runner-resolve.js

@@ -0,0 +1,77 @@
+import { AntigravityAgentRunner } from './antigravity-runner.js';
+import { CodexAgentRunner } from './codex-runner.js';
+import { CopilotAgentRunner } from './copilot-runner.js';
+import { CrushAgentRunner } from './crush-runner.js';
+import { GrokAgentRunner } from './grok-runner.js';
+import { HermesAgentRunner } from './hermes-runner.js';
+import { KimiCodeAgentRunner } from './kimicode-runner.js';
+import { OpencodeAgentRunner } from './opencode-runner.js';
+import { PiRpcAgentRunner } from './pi-rpc-runner.js';
+import { PiAgentRunner } from './pi-runner.js';
+import { QwenRpcAgentRunner } from './qwen-rpc-runner.js';
+import { QwenAgentRunner } from './qwen-runner.js';
+import { VercelAgentRunner } from './vercel-runner.js';
+/** Auto-resolve runtime from provider kind. Returns undefined for Claude default. */
+function autoRuntimeFromProvider(kind) {
+    if (kind === 'vercel-api-key')
+        return 'vercel';
+    if (kind === 'codex')
+        return 'codex';
+    if (kind === 'antigravity')
+        return 'antigravity';
+    return undefined;
+}
+export function resolveRunner(orgRuntime, providerKind, provider) {
+    const selected = orgRuntime ??
+        autoRuntimeFromProvider(providerKind) ??
+        process.env.MONOMIND_RUNTIME;
+    if (selected === 'opencode')
+        return new OpencodeAgentRunner();
+    if (selected === 'kimicode')
+        return new KimiCodeAgentRunner();
+    if (selected === 'vercel')
+        return new VercelAgentRunner();
+    if (selected === 'codex')
+        return new CodexAgentRunner();
+    if (selected === 'antigravity')
+        return new AntigravityAgentRunner();
+    if (selected === 'grok')
+        return new GrokAgentRunner();
+    if (selected === 'qwen')
+        return new QwenAgentRunner();
+    if (selected === 'crush') {
+        // Issue #177: usage-proxy accounting is opt-in via provider.usageProxy +
+        // provider.baseUrl (the upstream the crush CLI's own provider config
+        // points at). Absent either, CrushAgentRunner falls back to its
+        // documented 0-token behavior — this never blocks a turn either way.
+        if (provider?.usageProxy && provider.baseUrl) {
+            return new CrushAgentRunner({
+                usageProxy: { upstreamBaseUrl: provider.baseUrl, baseUrlEnvVar: provider.usageProxyEnvVar },
+            });
+        }
+        return new CrushAgentRunner();
+    }
+    if (selected === 'copilot')
+        return new CopilotAgentRunner();
+    if (selected === 'pi')
+        return new PiAgentRunner();
+    if (selected === 'pi-rpc')
+        return new PiRpcAgentRunner();
+    if (selected === 'qwen-rpc')
+        return new QwenRpcAgentRunner();
+    if (selected === 'hermes')
+        return new HermesAgentRunner();
+    return undefined;
+}
+/** Per-session variant: a role's own `runtime` field wins over the org-level
+ *  one (and the env var) — including `role.runtime === 'claude'`, which forces
+ *  the default Claude path even when the org/env select another runtime.
+ *  Roles without a `runtime` inherit the org-level resolution unchanged.
+ *  If no explicit runtime is set, auto-resolve from the provider kind. */
+export function resolveRoleRunner(roleRuntime, orgRuntime, roleProviderKind, orgProviderKind, roleProvider) {
+    const explicit = roleRuntime ?? orgRuntime;
+    if (explicit)
+        return resolveRunner(explicit, undefined, roleProvider);
+    return resolveRunner(undefined, roleProviderKind ?? orgProviderKind, roleProvider);
+}
+//# sourceMappingURL=runner-resolve.js.map

package/dist/src/orgrt/runner-resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-resolve.js","sourceRoot":"","sources":["../../../src/orgrt/runner-resolve.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAyDvD,qFAAqF;AACrF,SAAS,uBAAuB,CAAC,IAAmB;IAClD,IAAI,IAAI,KAAK,gBAAgB;QAAE,OAAO,QAAQ,CAAC;IAC/C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,aAAa,CAAC;IACjD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,UAAwB,EACxB,YAA2B,EAC3B,QAAyB;IAEzB,MAAM,QAAQ,GACZ,UAAU;QACV,uBAAuB,CAAC,YAAY,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,gBAA4C,CAAC;IAC5D,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,mBAAmB,EAAE,CAAC;IAC9D,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,mBAAmB,EAAE,CAAC;IAC9D,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC1D,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC;IACxD,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,IAAI,sBAAsB,EAAE,CAAC;IACpE,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,IAAI,eAAe,EAAE,CAAC;IACtD,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,IAAI,eAAe,EAAE,CAAC;IACtD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,yEAAyE;QACzE,qEAAqE;QACrE,gEAAgE;QAChE,qEAAqE;QACrE,IAAI,QAAQ,EAAE,UAAU,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC7C,OAAO,IAAI,gBAAgB,CAAC;gBAC1B,UAAU,EAAE,EAAE,eAAe,EAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,gBAAgB,EAAE;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,gBAAgB,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,kBAAkB,EAAE,CAAC;IAC5D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,aAAa,EAAE,CAAC;IAClD,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,gBAAgB,EAAE,CAAC;IACzD,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,kBAAkB,EAAE,CAAC;IAC7D,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,iBAAiB,EAAE,CAAC;IAC1D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;0EAI0E;AAC1E,MAAM,UAAU,iBAAiB,CAC/B,WAAyB,EACzB,UAAwB,EACxB,gBAA+B,EAC/B,eAA8B,EAC9B,YAA6B;IAE7B,MAAM,QAAQ,GAAG,WAAW,IAAI,UAAU,CAAC;IAC3C,IAAI,QAAQ;QAAE,OAAO,aAAa,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACtE,OAAO,aAAa,CAAC,SAAS,EAAE,gBAAgB,IAAI,eAAe,EAAE,YAAY,CAAC,CAAC;AACrF,CAAC"}

package/dist/src/orgrt/session-gate.d.ts

@@ -0,0 +1,34 @@
+import type { RoleFence } from './fence.js';
+import type { Decision, PolicyEngine } from './policy.js';
+import type { SessionOpts } from './session-types.js';
+import type { DecisionKind } from './types.js';
+/** The SDK's `canUseTool` gate, composed from two independent layers: PolicyEngine's
+ *  static config checks (deny/allow lists, path scoping, git level, web allowlist,
+ *  budget), then — only for calls policy would allow — the human-approval guardrail
+ *  (`beforeTool`, i.e. daemon.checkApproval) for whatever action names it treats as
+ *  sensitive (Bash/WebFetch/WebSearch/org_complete). Exported standalone so this
+ *  composition is unit-testable without spinning up a real SDK session: previously
+ *  `beforeTool` was wired into SessionOpts but never actually called from here, so
+ *  none of those sensitive actions ever paused for a human. */
+export declare function gatedCanUseTool(policy: PolicyEngine, beforeTool: SessionOpts['beforeTool'], roleId: string, fence?: RoleFence, 
+/** Optional hook invoked whenever this gate denies a tool call — wired to
+ *  daemon.recordDecision() so denials show up in `org decisions` traces.
+ *  #290: `kind` names WHICH of this function's four deny paths fired, so a
+ *  consumer never has to tell a fence block from a routine pending approval
+ *  by matching the English in the message. */
+onDeny?: (toolName: string, input: Record<string, unknown>, decision: Extract<Decision, {
+    behavior: 'deny';
+}>, kind: DecisionKind) => void, 
+/** ORG-9: reports whether this role has a pending (unresolved) decision gate.
+ *  org_gate is documented as creating a "hard-blocking" checkpoint, but until
+ *  this was wired in nothing actually stopped tool use while a gate sat
+ *  pending — only approvals did that. When set and true, ALL tool calls are
+ *  denied (not just the sensitive subset approvals gate) until the gate is
+ *  resolved, matching the "hard-blocking" description. */
+hasPendingGate?: () => boolean): (toolName: string, input: Record<string, unknown>, 
+/** #289: the harness's id for this call, forwarded to policy.decide so the
+ *  invocation event can be joined to the later tool_result event. */
+meta?: {
+    toolUseId?: string;
+}) => Promise<Decision>;
+//# sourceMappingURL=session-gate.d.ts.map

package/dist/src/orgrt/session-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-gate.d.ts","sourceRoot":"","sources":["../../../src/orgrt/session-gate.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;+DAO+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,WAAW,CAAC,YAAY,CAAC,EACrC,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,SAAS;AACjB;;;;8CAI8C;AAC9C,MAAM,CAAC,EAAE,CACP,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EACjD,IAAI,EAAE,YAAY,KACf,IAAI;AACT;;;;;0DAK0D;AAC1D,cAAc,CAAC,EAAE,MAAM,OAAO,GAC7B,CACD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;AAC9B;qEACqE;AACrE,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,QAAQ,CAAC,CAsDrB"}

package/dist/src/orgrt/session-gate.js

@@ -0,0 +1,74 @@
+import { scanInput } from './fence.js';
+/** The SDK's `canUseTool` gate, composed from two independent layers: PolicyEngine's
+ *  static config checks (deny/allow lists, path scoping, git level, web allowlist,
+ *  budget), then — only for calls policy would allow — the human-approval guardrail
+ *  (`beforeTool`, i.e. daemon.checkApproval) for whatever action names it treats as
+ *  sensitive (Bash/WebFetch/WebSearch/org_complete). Exported standalone so this
+ *  composition is unit-testable without spinning up a real SDK session: previously
+ *  `beforeTool` was wired into SessionOpts but never actually called from here, so
+ *  none of those sensitive actions ever paused for a human. */
+export function gatedCanUseTool(policy, beforeTool, roleId, fence, 
+/** Optional hook invoked whenever this gate denies a tool call — wired to
+ *  daemon.recordDecision() so denials show up in `org decisions` traces.
+ *  #290: `kind` names WHICH of this function's four deny paths fired, so a
+ *  consumer never has to tell a fence block from a routine pending approval
+ *  by matching the English in the message. */
+onDeny, 
+/** ORG-9: reports whether this role has a pending (unresolved) decision gate.
+ *  org_gate is documented as creating a "hard-blocking" checkpoint, but until
+ *  this was wired in nothing actually stopped tool use while a gate sat
+ *  pending — only approvals did that. When set and true, ALL tool calls are
+ *  denied (not just the sensitive subset approvals gate) until the gate is
+ *  resolved, matching the "hard-blocking" description. */
+hasPendingGate) {
+    return async (toolName, input, meta) => {
+        if (hasPendingGate?.()) {
+            const decision = {
+                behavior: 'deny',
+                message: `Tool "${toolName}" is blocked — awaiting gate resolution. A decision gate is pending; wait for a human to approve or reject it via 'monomind org gate-approve/gate-reject'.`,
+            };
+            onDeny?.(toolName, input, decision, 'gate-pending');
+            return decision;
+        }
+        if (fence) {
+            const text = typeof input.command === 'string'
+                ? input.command
+                : typeof input.content === 'string'
+                    ? input.content
+                    : typeof input.url === 'string'
+                        ? input.url
+                        : JSON.stringify(input);
+            const fenceDecision = await scanInput(fence.instance, text, fence.abortThreshold);
+            if (fenceDecision.behavior === 'deny') {
+                onDeny?.(toolName, input, fenceDecision, 'fence-block');
+                return fenceDecision;
+            }
+        }
+        const decision = await policy.decide(toolName, input, meta?.toolUseId);
+        if (decision.behavior === 'deny') {
+            onDeny?.(toolName, input, decision, 'policy-deny');
+            return decision;
+        }
+        if (!beforeTool)
+            return decision;
+        const approved = await beforeTool(roleId, toolName, input);
+        if (approved === false) {
+            const denied = {
+                behavior: 'deny',
+                message: `Tool "${toolName}" was denied by guardrail approval`,
+            };
+            onDeny?.(toolName, input, denied, 'approval-denied');
+            return denied;
+        }
+        if (approved === null) {
+            const pending = {
+                behavior: 'deny',
+                message: `Tool "${toolName}" is pending human approval — it will be available once approved or denied via 'monomind org approve/deny'.`,
+            };
+            onDeny?.(toolName, input, pending, 'approval-pending');
+            return pending;
+        }
+        return decision;
+    };
+}
+//# sourceMappingURL=session-gate.js.map

package/dist/src/orgrt/session-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-gate.js","sourceRoot":"","sources":["../../../src/orgrt/session-gate.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAKvC;;;;;;;+DAO+D;AAC/D,MAAM,UAAU,eAAe,CAC7B,MAAoB,EACpB,UAAqC,EACrC,MAAc,EACd,KAAiB;AACjB;;;;8CAI8C;AAC9C,MAKS;AACT;;;;;0DAK0D;AAC1D,cAA8B;IAQ9B,OAAO,KAAK,EACV,QAAgB,EAChB,KAA8B,EAC9B,IAA6B,EACV,EAAE;QACrB,IAAI,cAAc,EAAE,EAAE,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAa;gBACzB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS,QAAQ,4JAA4J;aACvL,CAAC;YACF,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;YACpD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;gBAC/B,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;oBACjC,CAAC,CAAC,KAAK,CAAC,OAAO;oBACf,CAAC,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;wBAC7B,CAAC,CAAC,KAAK,CAAC,GAAG;wBACX,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAChC,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;YAClF,IAAI,aAAa,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACtC,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;gBACxD,OAAO,aAAa,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACvE,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;YACnD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,OAAO,QAAQ,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3D,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,MAAM,MAAM,GAAa;gBACvB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS,QAAQ,oCAAoC;aAC/D,CAAC;YACF,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,CAAC,CAAC;YACrD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,OAAO,GAAa;gBACxB,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,SAAS,QAAQ,6GAA6G;aACxI,CAAC;YACF,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC;YACvD,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/orgrt/session-prompt.d.ts

@@ -0,0 +1,31 @@
+import type { SessionOpts } from './session-types.js';
+import type { OrgDef, OrgRole } from './types.js';
+/**
+ * Resolves the extra system-prompt block for a role: its pinned library
+ * skills and on-demand skill catalog (skill-library.ts) plus the role's own
+ * `instructions_file`, if any — all optional and independent. A missing or
+ * unreadable `instructions_file` is skipped (not an error): a role shouldn't
+ * fail to start a session over a stale/typo'd custom-file path.
+ */
+export declare function resolveRoleExtraGuidance(role: OrgRole, projectRoot?: string): string | undefined;
+/** Resolve the model string for a role: explicit adapter_config.model wins;
+ *  otherwise fall back to the vendor/runtime default.
+ *
+ *  Vendor defaults are read straight off VERCEL_PROVIDERS, which already
+ *  carries a defaultModel per vendor. A second hand-kept table lived here and
+ *  restated all sixteen of them — two lists of per-vendor defaults that would
+ *  eventually disagree, which is precisely the drift #252 was. An empty
+ *  registry default (openai-compatible, which serves arbitrary endpoints) is
+ *  falsy and so falls through to the runtime switch, as it always did. */
+export declare function resolveModel(role: OrgRole, runtime?: string, vendor?: string): string;
+/** Role briefing given to each agent session (SDK systemPrompt option).
+ *  `extraGuidance` carries pre-resolved text the caller already loaded from
+ *  disk — the role's library skills and/or its own `instructions_file`,
+ *  if either resolved to something. Kept as a plain string param (not read here)
+ *  so this function stays synchronous/pure and trivially testable. */
+export declare function buildRolePrompt(role: OrgRole, def: Pick<OrgDef, 'name' | 'goal'>, roster: string[], glossary?: string[], extraGuidance?: string, 
+/** M2: one line per endpoint role (endpointBriefingLines) — boss only. */
+endpointBriefing?: string[]): string;
+/** The system prompt one session of this role is built with. */
+export declare function rolePromptFor(opts: SessionOpts): string;
+//# sourceMappingURL=session-prompt.d.ts.map

package/dist/src/orgrt/session-prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-prompt.d.ts","sourceRoot":"","sources":["../../../src/orgrt/session-prompt.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAGlD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAahG;AAED;;;;;;;;0EAQ0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBrF;AAED;;;;sEAIsE;AACtE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAClC,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,EACnB,aAAa,CAAC,EAAE,MAAM;AACtB,0EAA0E;AAC1E,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAC1B,MAAM,CA8BR;AAED,gEAAgE;AAChE,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAavD"}