@monoes/monomindcli 2.16.13 → 2.16.14

package/dist/src/orgrt/session-stream.js

@@ -0,0 +1,173 @@
+// packages/@monomind/cli/src/orgrt/session-stream.ts
+// Extracted from session-run.ts — opening one role session's runner stream:
+// the AgentRunner.run() arguments and the silent-first-pull guard.
+import { join } from 'node:path';
+import { ClaudeAgentRunner } from './agent-runner.js';
+import { CLAUDE_SANDBOX_CWD_ENV, claudeBashTimeoutEnv, claudeSandboxCwdNote, } from './bash-timeout.js';
+import { resolveProviderEnv } from './provider.js';
+import { gatedCanUseTool } from './session-gate.js';
+import { rolePromptFor } from './session-prompt.js';
+/** How long an SDK stream may stay open with zero messages before we say so.
+ *  Comfortably longer than a slow first turn, shorter than the idle watchdog's
+ *  10-minute window so the specific cause is reported before the generic
+ *  "boss appears hung". */
+const SILENT_SESSION_MS = 4 * 60_000;
+/** The AgentRunner.run() arguments for one session, built by runOneSession. */
+export function sessionRunArgs(opts, s) {
+    const { org, role, policy, mailbox, cwd } = opts;
+    const { runner, tools, streamOpts, gitEnforcement, model, tier, prov, resume, authorityMask, abort, } = s;
+    return {
+        tools,
+        // No options = the pre-D3 stream, exactly.
+        prompt: streamOpts ? mailbox.stream('', streamOpts) : mailbox.stream(),
+        systemPrompt: gitEnforcement.claudeRestrictions?.sandbox
+            ? `${rolePromptFor(opts)}\n\n${claudeSandboxCwdNote(cwd)}`
+            : rolePromptFor(opts),
+        model,
+        cwd,
+        effort: tier?.effort,
+        env: {
+            ...resolveProviderEnv(prov.cfg),
+            // D8: how a NON-Claude provider expresses the tier's effort level.
+            // Empty for Claude (handled natively by ClaudeAgentRunner) and for a
+            // provider that declares no mechanism — which simply ignores effort.
+            ...(tier?.env ?? {}),
+            // Claude Code's 2-minute Bash default is too short for org work.
+            ...(runner instanceof ClaudeAgentRunner
+                ? claudeBashTimeoutEnv(opts.def?.run_config?.bash_timeout_ms)
+                : {}),
+            // Custom-endpoint providers (named-provider path): pin the engine's
+            // model env so background/haiku tasks also route to the endpoint's
+            // model instead of erroring on an Anthropic-only default.
+            ...(prov.cfg?.authToken ? { ANTHROPIC_MODEL: model, ANTHROPIC_SMALL_FAST_MODEL: model } : {}),
+            ...gitEnforcement.env,
+            ...(gitEnforcement.claudeRestrictions?.sandbox ? CLAUDE_SANDBOX_CWD_ENV : {}),
+            // No MONOMIND_HOOK_QUIET / MONOMIND_GRAPH_GATE / MONOMIND_SDK_AGENT
+            // here (#249): every CLI hands this env to its shell tool, so they
+            // reached every command the role ran and silently muted monomind's
+            // own hooks, graph gate and tests inside the role. ClaudeAgentRunner
+            // loads no filesystem hooks (settingSources: []). The codex/kimi/
+            // opencode hook bridges generated by `monomind init` read the
+            // MONOMIND_ORG_ROLE marker below and set the quieting vars on the
+            // hook-handler process they spawn — hooks stay quiet, commands don't.
+            //
+            // Per-role scoping for runners that persist state under the org dir
+            // (VercelAgentRunner session files). Without these, session files would
+            // land in args.cwd (project root for workspace:'repo') under the literal
+            // 'default' roleId, polluting the repo and making files unattributable.
+            MONOMIND_ORG_DIR: opts.orgDir ?? opts.cwd,
+            MONOMIND_ROLE_ID: role.id,
+            // M1: attribution for anything the role runs (C-16).
+            MONOMIND_ORG_NAME: org,
+            MONOMIND_ORG_ROLE: role.id,
+            ...(opts.run ? { MONOMIND_ORG_RUN: opts.run } : {}),
+            ...(opts.orgRoot ? { MONOMIND_ORG_ROOT: opts.orgRoot } : {}),
+        },
+        maxTurns: opts.maxTurns ?? 30,
+        maxToolRounds: role.max_tool_rounds ?? opts.def?.run_config?.max_tool_rounds,
+        resume,
+        claudeRestrictions: gitEnforcement.claudeRestrictions,
+        authorityMask,
+        // ADR-O001 D2: tool results are 76% of a role's context mass and nothing
+        // bounded them. Under the ORG STATE dir (never the workspace cwd, which
+        // may be the repo), and under orgRoot — which file-roots.ts already
+        // makes readable to the role's file tools and role-sandbox.ts already
+        // makes readable to Bash — so the path in the digest actually resolves
+        // when the role decides it needs the full text.
+        toolSpillDir: join(opts.orgDir ?? opts.cwd, 'tool-results', role.id.replace(/[^a-zA-Z0-9_.-]/g, '_')),
+        canUseTool: gatedCanUseTool(policy, opts.beforeTool, role.id, opts.fence, opts.onDecision
+            ? (toolName, _input, decision, kind) => opts.onDecision?.(role.id, toolName, decision.message ?? 'denied', kind)
+            : undefined, opts.hasPendingGate),
+        // test seam forwarded through extras: lets the scripted fake SDK
+        // (test-loop.ts) drive org_send and tool calls through the real
+        // deliver/policy paths; the real SDK ignores it.
+        extras: opts.runner
+            ? undefined
+            : {
+                _orgTest: {
+                    deliver: (to, subject, body) => opts.deliver(role.id, to, subject, body),
+                    callTool: (name, input) => policy.decide(name, input),
+                },
+            },
+        signal: abort.signal,
+        // VercelAgentRunner-only fields — ignored by other runners.
+        vendor: role.provider?.vendor,
+        providerConfig: role.provider,
+    };
+}
+// A silent session is its own failure mode, and until now an unnameable
+// one: nine consecutive cycles of a scheduled org opened all seven streams
+// and yielded NOTHING - no assistant message, no result, no error, and no
+// stream end. The only symptom was the idle watchdog reporting the boss
+// "appears hung" twenty minutes later, which described neither the scope
+// (every role) nor the cause.
+//
+// Naming it used to be all this did: log an audit event at 4 minutes and
+// then keep waiting on the same stuck `for await`, so recovery still
+// depended on the org-wide idle watchdog (10m nudge + 10m stop = 20m of
+// dead time per cycle - and it kills the WHOLE run, not just the stuck
+// session). Only the FIRST pull from the stream is raced against the
+// timeout: once any message has arrived the session is demonstrably
+// alive, so a slow-but-working tool call is never mistaken for a stall.
+// On silence, abandon this attempt (best-effort iterator.return() to
+// signal the SDK) and throw - the caller's crash-retry-with-backoff loop
+// (daemon.ts's `runtime.done`) already knows how to retry a failed
+// session with a fresh query() call and, for the boss, escalate to a
+// whole-org restart if it keeps failing. That gives the SDK several
+// fresh attempts within a single cycle instead of one silent attempt
+// followed by twenty minutes of nothing.
+export async function openSessionStream(opts, stream, abort) {
+    const { org, role, bus } = opts;
+    const openedAt = Date.now();
+    const iterator = stream[Symbol.asyncIterator]();
+    const SILENT = Symbol('silent');
+    let silentTimer;
+    const silentMs = opts.silentSessionMs ?? SILENT_SESSION_MS;
+    const firstPull = await Promise.race([
+        iterator.next(),
+        new Promise((resolve) => {
+            silentTimer = setTimeout(() => resolve(SILENT), silentMs);
+            silentTimer.unref?.();
+        }),
+    ]);
+    clearTimeout(silentTimer);
+    if (firstPull === SILENT) {
+        bus.emit({
+            type: 'audit',
+            from: role.id,
+            reason: 'session-silent',
+            msg: `SDK stream open ${Math.round((Date.now() - openedAt) / 1000)}s with zero messages - aborting this attempt and retrying. Set MONOMIND_DEBUG=1 to log raw message types.`,
+        });
+        // Kill the runner's subprocess FIRST: iterator.return() below cannot
+        // reach a runner blocked in its stdout loop, and the retry would
+        // otherwise spawn a second CLI next to the still-running first one.
+        abort.abort();
+        try {
+            await Promise.race([
+                iterator.return?.(undefined) ?? Promise.resolve(),
+                new Promise((r) => {
+                    const t = setTimeout(() => r(), 2_000);
+                    t.unref?.();
+                }),
+            ]);
+        }
+        catch {
+            /* best-effort */
+        }
+        throw new Error(`org "${org}" role "${role.id}": SDK stream silent for ${Math.round(silentMs / 1000)}s with zero messages`);
+    }
+    const first = firstPull;
+    // Replay the first pulled message, then continue draining normally.
+    async function* rest() {
+        if (!first.done)
+            yield first.value;
+        while (true) {
+            const r = await iterator.next();
+            if (r.done)
+                return;
+            yield r.value;
+        }
+    }
+    return rest();
+}
+//# sourceMappingURL=session-stream.js.map

package/dist/src/orgrt/session-stream.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-stream.js","sourceRoot":"","sources":["../../../src/orgrt/session-stream.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,4EAA4E;AAC5E,mEAAmE;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAG3B,OAAO,EAAE,kBAAkB,EAA4B,MAAM,eAAe,CAAC;AAE7E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD;;;2BAG2B;AAC3B,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AAErC,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAC5B,IAAiB,EACjB,CAWC;IAED,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjD,MAAM,EACJ,MAAM,EACN,KAAK,EACL,UAAU,EACV,cAAc,EACd,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,aAAa,EACb,KAAK,GACN,GAAG,CAAC,CAAC;IACN,OAAO;QACL,KAAK;QACL,2CAA2C;QAC3C,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE;QACtE,YAAY,EAAE,cAAc,CAAC,kBAAkB,EAAE,OAAO;YACtD,CAAC,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,oBAAoB,CAAC,GAAG,CAAC,EAAE;YAC1D,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC;QACvB,KAAK;QACL,GAAG;QACH,MAAM,EAAE,IAAI,EAAE,MAAM;QACpB,GAAG,EAAE;YACH,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,mEAAmE;YACnE,qEAAqE;YACrE,qEAAqE;YACrE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;YACpB,iEAAiE;YACjE,GAAG,CAAC,MAAM,YAAY,iBAAiB;gBACrC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe,CAAC;gBAC7D,CAAC,CAAC,EAAE,CAAC;YACP,oEAAoE;YACpE,mEAAmE;YACnE,0DAA0D;YAC1D,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7F,GAAG,cAAc,CAAC,GAAG;YACrB,GAAG,CAAC,cAAc,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,qEAAqE;YACrE,kEAAkE;YAClE,8DAA8D;YAC9D,kEAAkE;YAClE,sEAAsE;YACtE,EAAE;YACF,oEAAoE;YACpE,wEAAwE;YACxE,yEAAyE;YACzE,wEAAwE;YACxE,gBAAgB,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG;YACzC,gBAAgB,EAAE,IAAI,CAAC,EAAE;YACzB,qDAAqD;YACrD,iBAAiB,EAAE,GAAG;YACtB,iBAAiB,EAAE,IAAI,CAAC,EAAE;YAC1B,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;QACD,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,EAAE;QAC7B,aAAa,EAAE,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,GAAG,EAAE,UAAU,EAAE,eAAe;QAC5E,MAAM;QACN,kBAAkB,EAAE,cAAc,CAAC,kBAAkB;QACrD,aAAa;QACb,yEAAyE;QACzE,wEAAwE;QACxE,oEAAoE;QACpE,sEAAsE;QACtE,uEAAuE;QACvE,gDAAgD;QAChD,YAAY,EAAE,IAAI,CAChB,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EACvB,cAAc,EACd,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CACzC;QACD,UAAU,EAAE,eAAe,CACzB,MAAM,EACN,IAAI,CAAC,UAAU,EACf,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,UAAU;YACb,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CACnC,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,OAAO,IAAI,QAAQ,EAAE,IAAI,CAAC;YAC5E,CAAC,CAAC,SAAS,EACb,IAAI,CAAC,cAAc,CACpB;QACD,iEAAiE;QACjE,gEAAgE;QAChE,iDAAiD;QACjD,MAAM,EAAE,IAAI,CAAC,MAAM;YACjB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC;gBACE,QAAQ,EAAE;oBACR,OAAO,EAAE,CAAC,EAAU,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE,CACrD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC;oBAC1C,QAAQ,EAAE,CAAC,IAAY,EAAE,KAA8B,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC;iBACvF;aACF;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,4DAA4D;QAC5D,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM;QAC7B,cAAc,EAAE,IAAI,CAAC,QAAQ;KACvB,CAAC;AACX,CAAC;AAED,wEAAwE;AACxE,2EAA2E;AAC3E,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,8BAA8B;AAC9B,EAAE;AACF,yEAAyE;AACzE,qEAAqE;AACrE,wEAAwE;AACxE,uEAAuE;AACvE,qEAAqE;AACrE,oEAAoE;AACpE,wEAAwE;AACxE,qEAAqE;AACrE,yEAAyE;AACzE,mEAAmE;AACnE,qEAAqE;AACrE,oEAAoE;AACpE,qEAAqE;AACrE,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAiB,EACjB,MAAmC,EACnC,KAAsB;IAEtB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,WAAsD,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,IAAI,iBAAiB,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;QACnC,QAAQ,CAAC,IAAI,EAAE;QACf,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,EAAE;YACrC,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;YACzD,WAAsC,CAAC,KAAK,EAAE,EAAE,CAAC;QACpD,CAAC,CAAC;KACH,CAAC,CAAC;IACH,YAAY,CAAC,WAAW,CAAC,CAAC;IAC1B,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,CAAC,EAAE;YACb,MAAM,EAAE,gBAAgB;YACxB,GAAG,EAAE,mBAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,2GAA2G;SAC9K,CAAC,CAAC;QACH,qEAAqE;QACrE,iEAAiE;QACjE,oEAAoE;QACpE,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,QAAQ,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;gBACjD,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE;oBACtB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBACtC,CAA4B,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1C,CAAC,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,MAAM,IAAI,KAAK,CACb,QAAQ,GAAG,WAAW,IAAI,CAAC,EAAE,4BAA4B,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAiC,SAAS,CAAC;IAEtD,oEAAoE;IACpE,KAAK,SAAS,CAAC,CAAC,IAAI;QAClB,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,KAAK,CAAC;QACnC,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,IAAI;gBAAE,OAAO;YACnB,MAAM,CAAC,CAAC,KAAK,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC"}

package/dist/src/orgrt/session-types.d.ts

@@ -0,0 +1,219 @@
+import type { query } from '@anthropic-ai/claude-agent-sdk';
+import type { AgentRunner, OrgToolDef } from './agent-runner.js';
+import type { OrgBus } from './bus.js';
+import type { TaskEvidence } from './completion-gate.js';
+import type { RoleFence } from './fence.js';
+import type { LoadoutSummary, ResolvedLoadout } from './loadouts.js';
+import type { Mailbox } from './mailbox.js';
+import type { PolicyEngine } from './policy.js';
+import type { SessionLedger } from './session-ledger.js';
+import type { TaskProcesses } from './task-cancel.js';
+import type { RolePick, TaskPick } from './task-match.js';
+import type { DecisionKind, OrgDef, OrgRole } from './types.js';
+export type DeliverFn = (from: string, to: string, subject: string, body: string) => Promise<string>;
+export interface SessionOpts {
+    org: string;
+    role: OrgRole;
+    bus: OrgBus;
+    policy: PolicyEngine;
+    mailbox: Mailbox;
+    cwd: string;
+    /** Org state directory (`.monomind/orgs/<name>`). Used to pass
+     *  MONOMIND_ORG_DIR to runners that persist per-role state (VercelAgentRunner
+     *  stores session history under `<orgDir>/sessions/`). */
+    orgDir?: string;
+    /** Project root for resolving `adapter_config.provider` named providers
+     *  (config search must start at the project root even when the role's
+     *  workspace cwd is an isolated scratch dir). Defaults to opts.cwd. */
+    orgRoot?: string;
+    /** Run id of the org run this session belongs to (MONOMIND_ORG_RUN). */
+    run?: string;
+    /** M1: build this session's tool-provider tools (role `tool_providers`).
+     *  Called once per session start; the returned set is closed (provider
+     *  processes killed) when the session ends. */
+    buildProviderTools?: () => Promise<{
+        tools: OrgToolDef[];
+        close(): void;
+    } | undefined>;
+    deliver: DeliverFn;
+    askHuman?: (role: string, question: string, blocking?: boolean) => Promise<string>;
+    /** Coordinator-only: records the run's outcome (daemon persists it to run
+     *  history) — #302: the daemon gathers the facts, calls the completion
+     *  gate, and returns a refusal string instead of recording anything when
+     *  the call is unsatisfiable; `null`/`undefined` means allowed. */
+    onComplete?: (role: string, outcome: 'achieved' | 'partial' | 'failed', summary: string, blocker?: 'budget' | 'human' | 'external' | 'time', blockerDetail?: string) => string | null | undefined;
+    /** Present only for the selected coordinator (same gating pattern as
+     *  onComplete) — mid-run role replacement. Returns the JSON-shaped
+     *  RespawnReceipt (see role-slot.ts). */
+    onRespawnRole?: (callerId: string, args: {
+        roleId: string;
+        runtime?: string;
+        model?: string;
+        providerName?: string;
+        budgetTokens?: number;
+        reason: string;
+        briefing: string;
+    }) => Promise<unknown>;
+    /** Present only for the selected coordinator. Returns the JSON-shaped
+     *  runtime/named-provider listing (see runtime-options.ts). */
+    onListRuntimeOptions?: () => Promise<unknown>;
+    /** Search the org's accumulated cross-run memory (memory_namespace). */
+    recall?: (role: string, query: string) => Promise<string>;
+    /** Write a memory deliberately: scope 'org' (shared, default) or 'agent' (private to this role). */
+    remember?: (role: string, content: string, scope: 'org' | 'agent') => Promise<string>;
+    /** Persist extracted entities/relations/rules into the org's knowledge graph. */
+    learn?: (role: string, payload: {
+        nodes?: {
+            name: string;
+            type?: string;
+            description?: string;
+        }[];
+        edges?: {
+            source: string;
+            target: string;
+            relation: string;
+            description?: string;
+        }[];
+        rules?: {
+            rule: string;
+            context?: string;
+        }[];
+    }) => Promise<string>;
+    /** Top existing KG entity names - injected into the coordinator prompt so
+     *  extraction reuses canonical names instead of minting near-duplicates. */
+    glossary?: string[];
+    /** Search the user's Second Brain (project documents + personal global brain). */
+    searchKnowledge?: (role: string, query: string) => Promise<string>;
+    /** Guardrail beforeTool hook: checks if a tool call requires approval before execution.
+     *  `input` is the tool's actual call arguments — required so the approval cache can
+     *  key on what's actually being called (e.g. the Bash command, the WebFetch url),
+     *  not just the tool name; see approvals.ts's checkApproval for why. */
+    beforeTool?: (role: string, toolName: string, input: Record<string, unknown>) => Promise<boolean | null>;
+    /** Called whenever gatedCanUseTool denies a tool call — wired to daemon.recordDecision()
+     *  so those denials show up in `org decisions` traces. `kind` (#290) says which
+     *  deny path fired, so the trace is machine-readable rather than prose-only. */
+    onDecision?: (role: string, toolName: string, message: string, kind: DecisionKind) => void;
+    /** ORG-9: reports whether this role currently has a pending decision gate —
+     *  wired to daemon.listGates(org, 'pending'). When true, gatedCanUseTool
+     *  denies every tool call until the gate is resolved. */
+    hasPendingGate?: () => boolean;
+    def?: OrgDef;
+    maxTurns?: number;
+    queryFn?: typeof query;
+    /** Provider-agnostic runner. Takes precedence over queryFn. When unset,
+     *  session.ts builds a ClaudeAgentRunner from queryFn (or the default),
+     *  preserving the previous Claude-only behaviour exactly. */
+    runner?: AgentRunner;
+    /** Caller-owned cancellation handle for THIS incarnation. Every session
+     *  attempt runs on its own AbortController linked to this one: aborting it
+     *  aborts the in-flight attempt, which lets the daemon force-stop a specific
+     *  incarnation (org stop, mid-run role replacement's forced-stop step)
+     *  without reaching into runAgentSession's internals. An attempt's own abort
+     *  (the silent-stream kill) never propagates back to it (#256). */
+    externalAbort?: AbortController;
+    /** Lets org_task_cancel end this role's task-scoped process for the
+     *  cancelled task (task-cancel.ts). */
+    taskProcesses?: TaskProcesses;
+    /** Override how long a session's first stream pull may stay silent before
+     *  the attempt is aborted and retried (tests only; default 4 minutes). */
+    silentSessionMs?: number;
+    /** ID of the last message received by this agent (for threading responses). Function to ensure live reading. */
+    lastMessageId?: () => string | undefined;
+    /** Callback for each output line — feeds ScrollbackBuffer. */
+    onOutput?: (line: string) => void;
+    /** Callback when the SDK assigns a session ID — enables checkpoint resume (P2-13). */
+    onSessionId?: (id: string) => void;
+    /** Called once per finished turn (the runner's `result` message), so the
+     *  daemon can check what the role left open before its session parks. */
+    onTurnEnd?: () => void;
+    /** SDK session ID persisted in a checkpoint from a prior run — when set, the
+     *  first query() call resumes it instead of starting a fresh conversation
+     *  (P2-13: this is what actually makes checkpoint resume resume). */
+    resumeSessionId?: string;
+    /** ADR-O001 D3: the run's task-keyed session records. Every session run is
+     *  recorded here (sessionIdBefore/After) in every scope; only
+     *  `session_scope: 'task'` resumes from it. Omitted = in-memory. */
+    sessionLedger?: SessionLedger;
+    /** Circuit breaker config for this role. */
+    circuitBreaker?: {
+        threshold: number;
+        state: {
+            failures: number;
+            tripped: boolean;
+        };
+    };
+    /** Called when the coordinator's context window is exhausted. */
+    onContextLimit?: () => void;
+    /** MonoFence guardrail instance for this role. */
+    fence?: RoleFence;
+    /** Decision gate: creates a hard-blocking human-approval checkpoint. */
+    onGate?: (role: string, name: string, description: string) => Promise<string>;
+    /** Task DAG: create a task with dependencies. `loadout` (ADR-O001 D7) is
+     *  the catalog entry the caller selected; only offered when the org has a
+     *  catalog (`loadoutCatalog`). */
+    createTask?: (role: string, title: string, assignee: string, deps: string[], loadout?: string, brief?: string, pick?: TaskPick) => string;
+    /** Resolves `assignee: "auto"` on org_task from the title and brief: the
+     *  decision model (or, without one, a keyword match over role titles and
+     *  responsibilities) picks among the agent roles other than `caller`.
+     *  `role: null` = no role fits (or the best ones tie); the caller must name
+     *  one. The pick is recorded on the task (OrgTask.pick). */
+    pickAssignee?: (title: string, brief: string | undefined, caller: string) => Promise<RolePick>;
+    /** Called after org_skill_load served one of the role's skills, so the
+     *  daemon can record it against a task that suggested it. */
+    onSkillLoad?: (role: string, name: string) => void;
+    /** ADR-O001 D7: the org's loadout catalog. Set only when the org declares
+     *  one; it adds the optional `loadout` argument to org_task/org_plan_graph.
+     *  Unset, those tools are byte-identical to before (same gating idea as
+     *  `requireTaskEvidence`). Identical for every role and every loadout, so
+     *  the tool list — prefix position 0 — never varies with the loadout. */
+    loadoutCatalog?: LoadoutSummary[];
+    /** ADR-O001 D7: the loadout THIS session's system prompt is built with.
+     *  Plain data resolved by the caller before the session starts, so it is
+     *  fixed for the session's whole life — every maxTurns/crash restart
+     *  rebuilds the identical prompt, and nothing can edit it mid-session.
+     *  D3 hook: a task-keyed session for (role, taskKey) passes
+     *  `resolveLoadout(def, task.loadout, root)` here. */
+    loadout?: ResolvedLoadout;
+    /** ADR-O001 D3 x D7: in task scope each task's session is built with that
+     *  task's recorded loadout (undefined = none selected) instead of the
+     *  incarnation's `loadout`, which then only serves untagged mail. */
+    loadoutFor?: (taskId: string) => ResolvedLoadout | undefined;
+    /** Task DAG: mark a task as completed. `evidence` is ADR-O001 D5's
+     *  machine-checkable proof — acceptance commands with their real exit
+     *  codes, pinned to a commit sha. Only demanded when the org sets
+     *  run_config.completion_evidence (see `requireTaskEvidence`). */
+    completeTask?: (role: string, taskId: string, result?: string, evidence?: TaskEvidence) => string;
+    /** run_config.completion_evidence: when true, org_task_done advertises the
+     *  evidence argument as required. Off by default, so a role in an org that
+     *  has not opted in sees a byte-identical tool description (D7: the tool
+     *  list is prefix position 0 — changing it for every org would invalidate
+     *  every cached prompt). */
+    requireTaskEvidence?: boolean;
+    /** ADR-O001 D6: request an artifact-only review. Set only when the org has
+     *  a role with review_input: 'artifact-only'; otherwise org_review is not
+     *  registered and the tool list is unchanged. */
+    requestReview?: (role: string, taskId: string, reviewer: string, base?: string) => string;
+    /** Task DAG: list all tasks, or just `taskId`. */
+    listTasks?: (taskId?: string) => string;
+    splitTask?: (role: string, parentId: string, children: {
+        title: string;
+        assignee: string;
+    }[]) => string;
+    mergeTask?: (role: string, sourceId: string, targetId: string) => string;
+    cancelTask?: (role: string, taskId: string, reason?: string) => string;
+    /** Task DAG: mark a 'running' task as waiting on a real-world time (not a
+     *  dependency) — e.g. a scheduled soak test, a CI run, a human-set
+     *  deadline. The idle watchdog skips nudging while any task is actively
+     *  blocked, auto-resumes (re-dispatches) it once the time passes, and
+     *  wakes its assignee to re-check it every recheckAfterMinutes (#329). */
+    blockTask?: (role: string, taskId: string, untilIso: string, reason?: string, recheckAfterMinutes?: number) => string;
+    planGraph?: (role: string, specs: {
+        name: string;
+        title: string;
+        assignee: string;
+        after?: string[];
+        loadout?: string;
+        brief?: string;
+    }[]) => string;
+}
+//# sourceMappingURL=session-types.d.ts.map

package/dist/src/orgrt/session-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-types.d.ts","sourceRoot":"","sources":["../../../src/orgrt/session-types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEhE,MAAM,MAAM,SAAS,GAAG,CACtB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;8DAE0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;2EAEuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;mDAE+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,KAAK,IAAI,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IACvF,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnF;;;uEAGmE;IACnE,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,EAClD,aAAa,CAAC,EAAE,MAAM,KACnB,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/B;;6CAEyC;IACzC,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,KACE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB;mEAC+D;IAC/D,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,oGAAoG;IACpG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,iFAAiF;IACjF,KAAK,CAAC,EAAE,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QACP,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAChE,KAAK,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACrF,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC9C,KACE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kFAAkF;IAClF,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE;;;4EAGwE;IACxE,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B;;oFAEgF;IAChF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC;IAC3F;;6DAEyD;IACzD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB;;iEAE6D;IAC7D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;uEAKmE;IACnE,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC;2CACuC;IACvC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;8EAC0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gHAAgH;IAChH,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,sFAAsF;IACtF,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;6EACyE;IACzE,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB;;yEAEqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;wEAEoE;IACpE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,4CAA4C;IAC5C,cAAc,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;IACtF,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,kDAAkD;IAClD,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E;;sCAEkC;IAClC,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,QAAQ,KACZ,MAAM,CAAC;IACZ;;;;gEAI4D;IAC5D,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/F;iEAC6D;IAC7D,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD;;;;6EAIyE;IACzE,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC;;;;;0DAKsD;IACtD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;yEAEqE;IACrE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,eAAe,GAAG,SAAS,CAAC;IAC7D;;;sEAGkE;IAClE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,KAAK,MAAM,CAAC;IAClG;;;;gCAI4B;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;qDAEiD;IACjD,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1F,kDAAkD;IAClD,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,KAC5C,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACvE;;;;8EAI0E;IAC1E,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,mBAAmB,CAAC,EAAE,MAAM,KACzB,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,KACA,MAAM,CAAC;CACb"}

package/dist/src/orgrt/session-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-types.js.map

package/dist/src/orgrt/session-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-types.js","sourceRoot":"","sources":["../../../src/orgrt/session-types.ts"],"names":[],"mappings":""}

package/dist/src/orgrt/session-usage.d.ts

@@ -0,0 +1,29 @@
+import type { AgentMessage } from './agent-runner.js';
+import type { OrgBus } from './bus.js';
+import type { CumulativeMeter } from './cumulative-meter.js';
+import type { TokenUsage } from './policy.js';
+/** ADR-O001 D1 — token-metering helpers.
+ *
+ *  `cache_read_input_tokens` and `cache_creation_input_tokens` are siblings
+ *  of `input_tokens` in the Anthropic API, not subsets of it, and both are
+ *  billable. Everything below therefore sums all four. */
+export declare function totalTokens(u: TokenUsage): number;
+export declare function addTo(target: TokenUsage, add: TokenUsage): void;
+/** One model turn's own usage, off an 'assistant' (or per-turn 'result')
+ *  message. */
+export declare function turnBreakdown(m: AgentMessage): TokenUsage;
+/** What a 'result' message says this mailbox message consumed.
+ *
+ *  When the runner reports `cumulative_tokens` (the Claude SDK's whole-pipeline
+ *  `modelUsage`, which unlike `usage` includes Task subagents and sidechains),
+ *  that value is CUMULATIVE per session — the same lifecycle as
+ *  `total_cost_usd` — so it is converted to a delta by the meter (see
+ *  cumulative-meter.ts). Without `cumulative_tokens` the per-turn fields are
+ *  used as before. */
+export declare function resultBreakdown(m: AgentMessage, tokenTotals: CumulativeMeter<TokenUsage> | undefined, sid: string): TokenUsage;
+/** ADR-O001 D1: the four quantities travel separately so every downstream
+ *  consumer (forwarder → dashboard state.json, reporting, `org costs`) can
+ *  record real values instead of the 0s they used to persist. `tokens` stays
+ *  the single billable total. */
+export declare function emitUsage(bus: OrgBus, from: string, t: TokenUsage, costUsd: number | undefined, subtype: string | undefined): void;
+//# sourceMappingURL=session-usage.d.ts.map

package/dist/src/orgrt/session-usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-usage.d.ts","sourceRoot":"","sources":["../../../src/orgrt/session-usage.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;0DAI0D;AAC1D,wBAAgB,WAAW,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAEjD;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,IAAI,CAK/D;AAED;eACe;AACf,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,UAAU,CAOzD;AAED;;;;;;;sBAOsB;AACtB,wBAAgB,eAAe,CAC7B,CAAC,EAAE,YAAY,EACf,WAAW,EAAE,eAAe,CAAC,UAAU,CAAC,GAAG,SAAS,EACpD,GAAG,EAAE,MAAM,GACV,UAAU,CAUZ;AAED;;;iCAGiC;AACjC,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,CAAC,EAAE,UAAU,EACb,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,IAAI,CAcN"}

package/dist/src/orgrt/session-usage.js

@@ -0,0 +1,64 @@
+/** ADR-O001 D1 — token-metering helpers.
+ *
+ *  `cache_read_input_tokens` and `cache_creation_input_tokens` are siblings
+ *  of `input_tokens` in the Anthropic API, not subsets of it, and both are
+ *  billable. Everything below therefore sums all four. */
+export function totalTokens(u) {
+    return u.input + u.output + u.cacheRead + u.cacheCreation;
+}
+export function addTo(target, add) {
+    target.input += add.input;
+    target.output += add.output;
+    target.cacheRead += add.cacheRead;
+    target.cacheCreation += add.cacheCreation;
+}
+/** One model turn's own usage, off an 'assistant' (or per-turn 'result')
+ *  message. */
+export function turnBreakdown(m) {
+    return {
+        input: m.input_tokens ?? 0,
+        output: m.output_tokens ?? 0,
+        cacheRead: m.cache_read_input_tokens ?? 0,
+        cacheCreation: m.cache_creation_input_tokens ?? 0,
+    };
+}
+/** What a 'result' message says this mailbox message consumed.
+ *
+ *  When the runner reports `cumulative_tokens` (the Claude SDK's whole-pipeline
+ *  `modelUsage`, which unlike `usage` includes Task subagents and sidechains),
+ *  that value is CUMULATIVE per session — the same lifecycle as
+ *  `total_cost_usd` — so it is converted to a delta by the meter (see
+ *  cumulative-meter.ts). Without `cumulative_tokens` the per-turn fields are
+ *  used as before. */
+export function resultBreakdown(m, tokenTotals, sid) {
+    const cum = m.cumulative_tokens;
+    if (!cum)
+        return turnBreakdown(m);
+    const now = {
+        input: cum.input,
+        output: cum.output,
+        cacheRead: cum.cache_read,
+        cacheCreation: cum.cache_creation,
+    };
+    return tokenTotals ? tokenTotals.delta(sid, now) : now;
+}
+/** ADR-O001 D1: the four quantities travel separately so every downstream
+ *  consumer (forwarder → dashboard state.json, reporting, `org costs`) can
+ *  record real values instead of the 0s they used to persist. `tokens` stays
+ *  the single billable total. */
+export function emitUsage(bus, from, t, costUsd, subtype) {
+    bus.emit({
+        type: 'usage',
+        from,
+        data: {
+            tokens: totalTokens(t),
+            cost_usd: costUsd,
+            subtype,
+            tokens_in: t.input,
+            tokens_out: t.output,
+            cache_read: t.cacheRead,
+            cache_creation: t.cacheCreation,
+        },
+    });
+}
+//# sourceMappingURL=session-usage.js.map

package/dist/src/orgrt/session-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-usage.js","sourceRoot":"","sources":["../../../src/orgrt/session-usage.ts"],"names":[],"mappings":"AAOA;;;;0DAI0D;AAC1D,MAAM,UAAU,WAAW,CAAC,CAAa;IACvC,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,aAAa,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAkB,EAAE,GAAe;IACvD,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC;IAC1B,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IAC5B,MAAM,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC;IAClC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,aAAa,CAAC;AAC5C,CAAC;AAED;eACe;AACf,MAAM,UAAU,aAAa,CAAC,CAAe;IAC3C,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,YAAY,IAAI,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,aAAa,IAAI,CAAC;QAC5B,SAAS,EAAE,CAAC,CAAC,uBAAuB,IAAI,CAAC;QACzC,aAAa,EAAE,CAAC,CAAC,2BAA2B,IAAI,CAAC;KAClD,CAAC;AACJ,CAAC;AAED;;;;;;;sBAOsB;AACtB,MAAM,UAAU,eAAe,CAC7B,CAAe,EACf,WAAoD,EACpD,GAAW;IAEX,MAAM,GAAG,GAAG,CAAC,CAAC,iBAAiB,CAAC;IAChC,IAAI,CAAC,GAAG;QAAE,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAe;QACtB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,aAAa,EAAE,GAAG,CAAC,cAAc;KAClC,CAAC;IACF,OAAO,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACzD,CAAC;AAED;;;iCAGiC;AACjC,MAAM,UAAU,SAAS,CACvB,GAAW,EACX,IAAY,EACZ,CAAa,EACb,OAA2B,EAC3B,OAA2B;IAE3B,GAAG,CAAC,IAAI,CAAC;QACP,IAAI,EAAE,OAAO;QACb,IAAI;QACJ,IAAI,EAAE;YACJ,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;YACtB,QAAQ,EAAE,OAAO;YACjB,OAAO;YACP,SAAS,EAAE,CAAC,CAAC,KAAK;YAClB,UAAU,EAAE,CAAC,CAAC,MAAM;YACpB,UAAU,EAAE,CAAC,CAAC,SAAS;YACvB,cAAc,EAAE,CAAC,CAAC,aAAa;SAChC;KACF,CAAC,CAAC;AACL,CAAC"}