@monoes/monomindcli 2.16.2 → 2.16.4

package/dist/src/orgrt/sandbox-deny-write.d.ts

@@ -28,6 +28,15 @@
  * never relied on this layer: their permission rules (`Edit(//dir/**)`) and
  * the PolicyEngine deny lists keep the unexpanded directory.
  *
+ * An empty regular file among those children is left out: it is one of
+ * those stubs, which the SDK deletes when the sandbox that made it ends. The
+ * restrictions are built when the role's process starts, so a stub captured
+ * then could be gone by the next Bash call, and bwrap dies binding a missing
+ * source ("Can't find source path ~/.claude/local", 2.16.2 release run). The
+ * SDK denies that name itself. A path the SDK adds and loses the same way is
+ * the sandbox-fault restart's to recover (sandbox-fault.ts): a new process
+ * builds its restrictions again from what exists then.
+ *
  * Linux only: seatbelt (macOS) denies by path rule, needs no mount points,
  * and keeps the whole directory read-only.
  */
@@ -40,7 +49,8 @@ export interface ExpandedDenyWrite {
 }
 /**
  * Replaces every deny-write path that equals or contains one of `keepWritable`
- * (the role's cwd, ~/.claude) with its existing children, recursively. A path
+ * (the role's cwd, ~/.claude) with its existing children (less the SDK's
+ * empty stubs), recursively. A path
  * that cannot be listed (missing, unreadable, not a directory) is kept as-is,
  * so the old — stricter — behaviour is the fallback.
  */

package/dist/src/orgrt/sandbox-deny-write.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-deny-write.d.ts","sourceRoot":"","sources":["../../../src/orgrt/sandbox-deny-write.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAiBH,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;iEAC6D;IAC7D,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EAAE,EACf,YAAY,EAAE,MAAM,EAAE,EACtB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,iBAAiB,CAuBnB;AAED;;kBAEkB;AAClB,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAGhE"}
+{"version":3,"file":"sandbox-deny-write.d.ts","sourceRoot":"","sources":["../../../src/orgrt/sandbox-deny-write.ts"],"names":[],"mappings":"AACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AA2BH,MAAM,WAAW,iBAAiB;IAChC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;iEAC6D;IAC7D,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,EAAE,EACf,YAAY,EAAE,MAAM,EAAE,EACtB,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,iBAAiB,CAuBnB;AAED;;kBAEkB;AAClB,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAGhE"}

package/dist/src/orgrt/sandbox-deny-write.js

@@ -29,6 +29,15 @@
  * never relied on this layer: their permission rules (`Edit(//dir/**)`) and
  * the PolicyEngine deny lists keep the unexpanded directory.
  *
+ * An empty regular file among those children is left out: it is one of
+ * those stubs, which the SDK deletes when the sandbox that made it ends. The
+ * restrictions are built when the role's process starts, so a stub captured
+ * then could be gone by the next Bash call, and bwrap dies binding a missing
+ * source ("Can't find source path ~/.claude/local", 2.16.2 release run). The
+ * SDK denies that name itself. A path the SDK adds and loses the same way is
+ * the sandbox-fault restart's to recover (sandbox-fault.ts): a new process
+ * builds its restrictions again from what exists then.
+ *
  * Linux only: seatbelt (macOS) denies by path rule, needs no mount points,
  * and keeps the whole directory read-only.
  */
@@ -44,9 +53,20 @@ const real = (p) => {
 };
 /** Is `target` equal to, or nested under, `container`? */
 const within = (container, target) => target === container || target.startsWith(container.endsWith(sep) ? container : container + sep);
+/** A 0-byte regular file: bwrap's mount-point stub for an SDK /dev/null bind. */
+const isStub = (p) => {
+    try {
+        const st = lstatSync(p);
+        return st.isFile() && st.size === 0;
+    }
+    catch {
+        return true; // already gone
+    }
+};
 /**
  * Replaces every deny-write path that equals or contains one of `keepWritable`
- * (the role's cwd, ~/.claude) with its existing children, recursively. A path
+ * (the role's cwd, ~/.claude) with its existing children (less the SDK's
+ * empty stubs), recursively. A path
  * that cannot be listed (missing, unreadable, not a directory) is kept as-is,
  * so the old — stricter — behaviour is the fallback.
  */
@@ -73,7 +93,8 @@ export function expandDenyWrite(paths, keepWritable, platform = process.platform
         }
         mountPoints.push(p);
         for (const e of entries)
-            visit(join(p, e));
+            if (!isStub(join(p, e)))
+                visit(join(p, e));
     };
     for (const p of paths)
         visit(p);

package/dist/src/orgrt/sandbox-deny-write.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-deny-write.js","sourceRoot":"","sources":["../../../src/orgrt/sandbox-deny-write.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAW,EAAE,CAC5D,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;AAUnG;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAe,EACf,YAAsB,EACtB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAQ,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpE,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;kBAEkB;AAClB,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,KAAe;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"sandbox-deny-write.js","sourceRoot":"","sources":["../../../src/orgrt/sandbox-deny-write.ts"],"names":[],"mappings":"AAAA,yDAAyD;AACzD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAEH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC,CAAC;AAEF,0DAA0D;AAC1D,MAAM,MAAM,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAW,EAAE,CAC5D,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;AAEnG,iFAAiF;AACjF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAW,EAAE;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,eAAe;IAC9B,CAAC;AACH,CAAC,CAAC;AAUF;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAe,EACf,YAAsB,EACtB,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IAE5C,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAQ,EAAE;QAChC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpE,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED;;kBAEkB;AAClB,MAAM,UAAU,YAAY,CAAC,CAAS,EAAE,KAAe;IACrD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/src/orgrt/sandbox-fault.d.ts

@@ -3,7 +3,11 @@ import type { OrgBus } from './bus.js';
 /** A Bash result that is bubblewrap's own error, not the command's: the OS
  *  sandbox failed to start (2.16.0 release run: 31 of these, and a QA role
  *  that silently lost Bash for ~7 minutes). A new runner process builds a new
- *  sandbox, so ending the process is the recovery. */
+ *  sandbox, so ending the process is the recovery. Only a setup failure that
+ *  is the whole result counts — after the tool's own "Exit code N" line — so
+ *  a command that runs bwrap itself and prints its errors among other output
+ *  (2.16.2 release run: "bwrap: : No such file or directory" in a reaper
+ *  repro) is the command's output, not a fault. */
 export declare function isSandboxFault(m: Pick<AgentMessage, 'tool' | 'text'>): boolean;
 /** #331: a tool result that is the runner's tool-permission channel failing,
  *  not the tool: the CLI could not ask the SDK host whether the call may run,

package/dist/src/orgrt/sandbox-fault.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-fault.d.ts","sourceRoot":"","sources":["../../../src/orgrt/sandbox-fault.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGvC;;;sDAGsD;AACtD,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAE9E;AAED;;;;;mEAKmE;AACnE,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAE9E;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjD,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C;uBACuB;AACvB,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAqCtC,0EAA0E;AAC1E,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS;IACtC,QAAQ,CAAC,IAAI,EAAE,YAAY;IAF7B,YACW,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,GAAE,YAAwB,EAQxC;CACF;AAED,UAAU,OAAO;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACvF;AAED,8EAA8E;AAC9E,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,CAAC;IAH9B,OAAO,CAAC,IAAI,CAA6B;IACzC,OAAO,CAAC,QAAQ,CAAqB;IAErC,YAA6B,CAAC,EAAE,OAAO,EAAI;IAE3C,8CAA8C;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;KAAE,CAgCpF;IAED;oDACgD;IAChD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,YAAwB,GAAG,MAAM,CAW7D;IAED,OAAO,CAAC,OAAO;CAoBhB"}
+{"version":3,"file":"sandbox-fault.d.ts","sourceRoot":"","sources":["../../../src/orgrt/sandbox-fault.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAQvC;;;;;;;mDAOmD;AACnD,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAK9E;AAED;;;;;mEAKmE;AACnE,wBAAgB,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,GAAG,OAAO,CAE9E;AAED,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC;AAEjD,0EAA0E;AAC1E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C;uBACuB;AACvB,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAqCtC,0EAA0E;AAC1E,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS;IACtC,QAAQ,CAAC,IAAI,EAAE,YAAY;IAF7B,YACW,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,IAAI,GAAE,YAAwB,EAQxC;CACF;AAED,UAAU,OAAO;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACvF;AAED,8EAA8E;AAC9E,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,CAAC;IAH9B,OAAO,CAAC,IAAI,CAA6B;IACzC,OAAO,CAAC,QAAQ,CAAqB;IAErC,YAA6B,CAAC,EAAE,OAAO,EAAI;IAE3C,8CAA8C;IAC9C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAAA;KAAE,CAgCpF;IAED;oDACgD;IAChD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,YAAwB,GAAG,MAAM,CAW7D;IAED,OAAO,CAAC,OAAO;CAoBhB"}

package/dist/src/orgrt/sandbox-fault.js

@@ -1,11 +1,23 @@
 // packages/@monomind/cli/src/orgrt/sandbox-fault.ts
 import { Mailbox } from './mailbox.js';
+/** The message families bubblewrap itself dies with while it sets the sandbox
+ *  up, before it execs the command (bubblewrap 0.13 `die`/`die_with_error`). */
+const BWRAP_SETUP_FAILURE = /^bwrap: (?:Can't |Creating |Failed to |No permissions to create |setting up |Unable to |Unexpected |execvp\b)/;
 /** A Bash result that is bubblewrap's own error, not the command's: the OS
  *  sandbox failed to start (2.16.0 release run: 31 of these, and a QA role
  *  that silently lost Bash for ~7 minutes). A new runner process builds a new
- *  sandbox, so ending the process is the recovery. */
+ *  sandbox, so ending the process is the recovery. Only a setup failure that
+ *  is the whole result counts — after the tool's own "Exit code N" line — so
+ *  a command that runs bwrap itself and prints its errors among other output
+ *  (2.16.2 release run: "bwrap: : No such file or directory" in a reaper
+ *  repro) is the command's output, not a fault. */
 export function isSandboxFault(m) {
-    return m.tool === 'Bash' && (m.text ?? '').startsWith('bwrap: ');
+    if (m.tool !== 'Bash')
+        return false;
+    const lines = (m.text ?? '').trim().split('\n');
+    if (/^Exit code \d+$/.test(lines[0]))
+        lines.shift();
+    return lines.length === 1 && BWRAP_SETUP_FAILURE.test(lines[0]);
 }
 /** #331: a tool result that is the runner's tool-permission channel failing,
  *  not the tool: the CLI could not ask the SDK host whether the call may run,

package/dist/src/orgrt/sandbox-fault.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-fault.js","sourceRoot":"","sources":["../../../src/orgrt/sandbox-fault.ts"],"names":[],"mappings":"AAAA,oDAAoD;AAIpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC;;;sDAGsD;AACtD,MAAM,UAAU,cAAc,CAAC,CAAsC;IACnE,OAAO,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC;AAED;;;;;mEAKmE;AACnE,MAAM,UAAU,cAAc,CAAC,CAAsC;IACnE,OAAO,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAID,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C;uBACuB;AACvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,MAAM,GAWR;IACF,OAAO,EAAE;QACP,MAAM,EAAE,6BAA6B;QACrC,IAAI,EAAE,8BAA8B;QACpC,SAAS,EAAE,2BAA2B;QACtC,SAAS,EAAE,4BAA4B;QACvC,YAAY,EAAE,0NAA0N;QACxO,OAAO,EAAE,4BAA4B;QACrC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAClB,uBAAuB,IAAI,uDAAuD,GAAG,SAAS,oBAAoB,0LAA0L;KAC/S;IACD,qEAAqE;IACrE,OAAO,EAAE;QACP,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,gCAAgC;QACtC,SAAS,EAAE,gCAAgC;QAC3C,SAAS,EAAE,uCAAuC;QAClD,YAAY,EAAE,kSAAkS;QAChT,OAAO,EAAE,uCAAuC;QAChD,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAClB,mCAAmC,IAAI,sBAAsB,GAAG,SAAS,oBAAoB,oOAAoO;KACpU;CACF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B,SAAS;IACT,IAAI;IAFf,YACW,SAA6B,EAC7B,IAAI,GAAiB,SAAS;QAEvC,KAAK,CACH,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,8BAA8B,6BAA6B,yBAAyB;YACtF,CAAC,CAAC,gCAAgC,CACrC,CAAC;yBAPO,SAAS;oBACT,IAAI;QAOb,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAUD,8EAA8E;AAC9E,MAAM,OAAO,aAAa;IAIK,CAAC;IAHtB,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,YAA6B,CAAU;iBAAV,CAAC;IAAY,CAAC;IAE3C,8CAA8C;IAC9C,KAAK,CAAC,GAAW;QACf,MAAM,WAAW,GAAiC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE;gBACxB,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;oBAAE,OAAO;gBACrC,MAAM,IAAI,GAA6B,cAAc,CAAC,CAAC,CAAC;oBACtD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;wBACjB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;oBAAE,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC;gBACrE,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAClB,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM;oBACnB,MAAM,EAAE,GAAG,IAAI,QAAQ;oBACvB,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;oBAC3E,IAAI,EAAE;wBACJ,OAAO,EAAE,GAAG;wBACZ,WAAW,EAAE,CAAC;wBACd,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD;iBACF,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO;gBACpC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,oBAAoB;oBAC/D,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC;IACJ,CAAC;IAED;oDACgD;IAChD,SAAS,CAAC,GAAW,EAAE,IAAI,GAAiB,SAAS;QACnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM;YACnB,MAAM,EAAE,GAAG,IAAI,UAAU;YACzB,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,4BAA4B,GAAG,KAAK,CAAC,IAAI,oBAAoB,GAAG;YAC9F,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE;SAC/D,CAAC,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;IACnE,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,IAAkB;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;YAAE,OAAO;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,GAAG,IAAI,kBAAkB;YACjC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,QAAQ,GAAG,UAAU,oBAAoB,YAAY,WAAW,CAAC,CAAC,CAAC,YAAY,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAClI,IAAI,EAAE;gBACJ,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,oBAAoB;gBAC9B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CACtF,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"sandbox-fault.js","sourceRoot":"","sources":["../../../src/orgrt/sandbox-fault.ts"],"names":[],"mappings":"AAAA,oDAAoD;AAIpD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC;gFACgF;AAChF,MAAM,mBAAmB,GACvB,+GAA+G,CAAC;AAElH;;;;;;;mDAOmD;AACnD,MAAM,UAAU,cAAc,CAAC,CAAsC;IACnE,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IACpD,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;mEAKmE;AACnE,MAAM,UAAU,cAAc,CAAC,CAAsC;IACnE,OAAO,0DAA0D,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AACvF,CAAC;AAID,0EAA0E;AAC1E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C;uBACuB;AACvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAEtC,MAAM,MAAM,GAWR;IACF,OAAO,EAAE;QACP,MAAM,EAAE,6BAA6B;QACrC,IAAI,EAAE,8BAA8B;QACpC,SAAS,EAAE,2BAA2B;QACtC,SAAS,EAAE,4BAA4B;QACvC,YAAY,EAAE,0NAA0N;QACxO,OAAO,EAAE,4BAA4B;QACrC,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAClB,uBAAuB,IAAI,uDAAuD,GAAG,SAAS,oBAAoB,0LAA0L;KAC/S;IACD,qEAAqE;IACrE,OAAO,EAAE;QACP,MAAM,EAAE,CAAC;QACT,IAAI,EAAE,gCAAgC;QACtC,SAAS,EAAE,gCAAgC;QAC3C,SAAS,EAAE,uCAAuC;QAClD,YAAY,EAAE,kSAAkS;QAChT,OAAO,EAAE,uCAAuC;QAChD,IAAI,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAClB,mCAAmC,IAAI,sBAAsB,GAAG,SAAS,oBAAoB,oOAAoO;KACpU;CACF,CAAC;AAEF,0EAA0E;AAC1E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAE/B,SAAS;IACT,IAAI;IAFf,YACW,SAA6B,EAC7B,IAAI,GAAiB,SAAS;QAEvC,KAAK,CACH,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,8BAA8B,6BAA6B,yBAAyB;YACtF,CAAC,CAAC,gCAAgC,CACrC,CAAC;yBAPO,SAAS;oBACT,IAAI;QAOb,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAUD,8EAA8E;AAC9E,MAAM,OAAO,aAAa;IAIK,CAAC;IAHtB,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjC,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,YAA6B,CAAU;iBAAV,CAAC;IAAY,CAAC;IAE3C,8CAA8C;IAC9C,KAAK,CAAC,GAAW;QACf,MAAM,WAAW,GAAiC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAC7E,OAAO;YACL,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE;gBACxB,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa;oBAAE,OAAO;gBACrC,MAAM,IAAI,GAA6B,cAAc,CAAC,CAAC,CAAC;oBACtD,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;wBACjB,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,SAAS,CAAC;gBAChB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,SAAS;oBAAE,WAAW,CAAC,OAAO,GAAG,CAAC,CAAC;gBACrE,IAAI,CAAC,IAAI;oBAAE,OAAO;gBAClB,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,OAAO;oBACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM;oBACnB,MAAM,EAAE,GAAG,IAAI,QAAQ;oBACvB,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;oBAC3E,IAAI,EAAE;wBACJ,OAAO,EAAE,GAAG;wBACZ,WAAW,EAAE,CAAC;wBACd,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACrD;iBACF,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO;gBACpC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,oBAAoB;oBAC/D,MAAM,IAAI,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC;IACJ,CAAC;IAED;oDACgD;IAChD,SAAS,CAAC,GAAW,EAAE,IAAI,GAAiB,SAAS;QACnD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM;YACnB,MAAM,EAAE,GAAG,IAAI,UAAU;YACzB,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,4BAA4B,GAAG,KAAK,CAAC,IAAI,oBAAoB,GAAG;YAC9F,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,oBAAoB,EAAE;SAC/D,CAAC,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,eAAe,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;IACnE,CAAC;IAEO,OAAO,CAAC,GAAW,EAAE,IAAkB;QAC7C,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;YAAE,OAAO;QAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,GAAG,IAAI,kBAAkB;YACjC,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,QAAQ,GAAG,UAAU,oBAAoB,YAAY,WAAW,CAAC,CAAC,CAAC,YAAY,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAClI,IAAI,EAAE;gBACJ,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,oBAAoB;gBAC9B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxC;SACF,CAAC,CAAC;QACH,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CACtF,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;IACJ,CAAC;CACF"}

package/dist/src/orgrt/session.d.ts

@@ -6,6 +6,8 @@ import type { RoleFence } from './fence.js';
 import type { LoadoutSummary, ResolvedLoadout } from './loadouts.js';
 import { Mailbox } from './mailbox.js';
 import type { Decision, PolicyEngine } from './policy.js';
+import { type TaskProcesses } from './task-cancel.js';
+import type { RolePick, TaskPick } from './task-match.js';
 import { type DecisionKind, type OrgDef, type OrgRole } from './types.js';
 import { SessionLedger } from './session-ledger.js';
 /**
@@ -156,6 +158,9 @@ export interface SessionOpts {
      *  without reaching into runAgentSession's internals. An attempt's own abort
      *  (the silent-stream kill) never propagates back to it (#256). */
     externalAbort?: AbortController;
+    /** Lets org_task_cancel end this role's task-scoped process for the
+     *  cancelled task (task-cancel.ts). */
+    taskProcesses?: TaskProcesses;
     /** Override how long a session's first stream pull may stay silent before
      *  the attempt is aborted and retried (tests only; default 4 minutes). */
     silentSessionMs?: number;
@@ -193,11 +198,16 @@ export interface SessionOpts {
     /** Task DAG: create a task with dependencies. `loadout` (ADR-O001 D7) is
      *  the catalog entry the caller selected; only offered when the org has a
      *  catalog (`loadoutCatalog`). */
-    createTask?: (role: string, title: string, assignee: string, deps: string[], loadout?: string, brief?: string) => string;
-    /** Resolves `assignee: "auto"` on org_task: the decision model (or, without
-     *  one, a keyword match over role titles/responsibilities) picks the role.
-     *  null = no role fits; the caller must name one. */
-    pickAssignee?: (title: string) => Promise<string | null>;
+    createTask?: (role: string, title: string, assignee: string, deps: string[], loadout?: string, brief?: string, pick?: TaskPick) => string;
+    /** Resolves `assignee: "auto"` on org_task from the title and brief: the
+     *  decision model (or, without one, a keyword match over role titles and
+     *  responsibilities) picks among the agent roles other than `caller`.
+     *  `role: null` = no role fits (or the best ones tie); the caller must name
+     *  one. The pick is recorded on the task (OrgTask.pick). */
+    pickAssignee?: (title: string, brief: string | undefined, caller: string) => Promise<RolePick>;
+    /** Called after org_skill_load served one of the role's skills, so the
+     *  daemon can record it against a task that suggested it. */
+    onSkillLoad?: (role: string, name: string) => void;
     /** ADR-O001 D7: the org's loadout catalog. Set only when the org declares
      *  one; it adds the optional `loadout` argument to org_task/org_plan_graph.
      *  Unset, those tools are byte-identical to before (same gating idea as
@@ -279,7 +289,6 @@ export declare function runAgentSession(opts: SessionOpts): Promise<void>;
  *
  *  Behaviour is identical to the old inline definitions: conditional tools are
  *  gated on their callback being present, org_send/ask_human are always added. */
-/** org_task's assignee value that asks for automatic role selection. */
-export declare const AUTO_ASSIGNEE = "auto";
+export { AUTO_ASSIGNEE } from './task-tools.js';
 export declare function buildOrgTools(opts: SessionOpts): OrgToolDef[];
 //# sourceMappingURL=session.d.ts.map

package/dist/src/orgrt/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/orgrt/session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAE5D,OAAO,KAAK,EAAgB,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG/E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAKtE,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,MAAM,EACX,KAAK,OAAO,EAEb,MAAM,YAAY,CAAC;AAqBpB,OAAO,EAIL,aAAa,EACd,MAAM,qBAAqB,CAAC;AAI7B;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAahG;AAED;;;;;;;;0EAQ0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBrF;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB;;;;;;;+DAO+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,WAAW,CAAC,YAAY,CAAC,EACrC,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,SAAS;AACjB;;;;8CAI8C;AAC9C,MAAM,CAAC,EAAE,CACP,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EACjD,IAAI,EAAE,YAAY,KACf,IAAI;AACT;;;;;0DAK0D;AAC1D,cAAc,CAAC,EAAE,MAAM,OAAO,GAC7B,CACD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;AAC9B;qEACqE;AACrE,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,QAAQ,CAAC,CAsDrB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;8DAE0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;2EAEuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;mDAE+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,KAAK,IAAI,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IACvF,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnF;;;uEAGmE;IACnE,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,EAClD,aAAa,CAAC,EAAE,MAAM,KACnB,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/B;;6CAEyC;IACzC,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,KACE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB;mEAC+D;IAC/D,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,oGAAoG;IACpG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,iFAAiF;IACjF,KAAK,CAAC,EAAE,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QACP,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAChE,KAAK,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACrF,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC9C,KACE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kFAAkF;IAClF,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE;;;4EAGwE;IACxE,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B;;oFAEgF;IAChF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC;IAC3F;;6DAEyD;IACzD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB;;iEAE6D;IAC7D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;uEAKmE;IACnE,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC;8EAC0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gHAAgH;IAChH,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,sFAAsF;IACtF,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;6EACyE;IACzE,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB;;yEAEqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;wEAEoE;IACpE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,4CAA4C;IAC5C,cAAc,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;IACtF,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,kDAAkD;IAClD,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E;;sCAEkC;IAClC,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,KACX,MAAM,CAAC;IACZ;;yDAEqD;IACrD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzD;;;;6EAIyE;IACzE,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC;;;;;0DAKsD;IACtD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;yEAEqE;IACrE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,eAAe,GAAG,SAAS,CAAC;IAC7D;;;sEAGkE;IAClE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,KAAK,MAAM,CAAC;IAClG;;;;gCAI4B;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;qDAEiD;IACjD,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1F,kDAAkD;IAClD,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,KAC5C,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACvE;;;;8EAI0E;IAC1E,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,mBAAmB,CAAC,EAAE,MAAM,KACzB,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,KACA,MAAM,CAAC;CACb;AAED;;;;sEAIsE;AACtE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAClC,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,EACnB,aAAa,CAAC,EAAE,MAAM;AACtB,0EAA0E;AAC1E,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAC1B,MAAM,CA8BR;AAkBD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtE;AAq9BD;;;;;;kFAMkF;AAClF,wEAAwE;AACxE,eAAO,MAAM,aAAa,SAAS,CAAC;AAEpC,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,EAAE,CAgb7D"}
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../../src/orgrt/session.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gCAAgC,CAAC;AAE5D,OAAO,KAAK,EAAgB,WAAW,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAO/E,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAItE,OAAO,EAIL,KAAK,aAAa,EAEnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,MAAM,EACX,KAAK,OAAO,EAEb,MAAM,YAAY,CAAC;AAqBpB,OAAO,EAIL,aAAa,EACd,MAAM,qBAAqB,CAAC;AAK7B;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAahG;AAED;;;;;;;;0EAQ0E;AAC1E,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBrF;AAED,MAAM,MAAM,SAAS,GAAG,CACtB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB;;;;;;;+DAO+D;AAC/D,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,UAAU,EAAE,WAAW,CAAC,YAAY,CAAC,EACrC,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,SAAS;AACjB;;;;8CAI8C;AAC9C,MAAM,CAAC,EAAE,CACP,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,EACjD,IAAI,EAAE,YAAY,KACf,IAAI;AACT;;;;;0DAK0D;AAC1D,cAAc,CAAC,EAAE,MAAM,OAAO,GAC7B,CACD,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;AAC9B;qEACqE;AACrE,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAC1B,OAAO,CAAC,QAAQ,CAAC,CAsDrB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ;;8DAE0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;2EAEuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;mDAE+C;IAC/C,kBAAkB,CAAC,EAAE,MAAM,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,KAAK,IAAI,IAAI,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IACvF,OAAO,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnF;;;uEAGmE;IACnE,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,EAC1C,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,EAClD,aAAa,CAAC,EAAE,MAAM,KACnB,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAC/B;;6CAEyC;IACzC,aAAa,CAAC,EAAE,CACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;QACJ,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;KAClB,KACE,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB;mEAC+D;IAC/D,oBAAoB,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,oGAAoG;IACpG,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,iFAAiF;IACjF,KAAK,CAAC,EAAE,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QACP,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAChE,KAAK,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QACrF,KAAK,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC9C,KACE,OAAO,CAAC,MAAM,CAAC,CAAC;IACrB;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kFAAkF;IAClF,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnE;;;4EAGwE;IACxE,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC3B,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7B;;oFAEgF;IAChF,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,KAAK,IAAI,CAAC;IAC3F;;6DAEyD;IACzD,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB;;iEAE6D;IAC7D,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;uEAKmE;IACnE,aAAa,CAAC,EAAE,eAAe,CAAC;IAChC;2CACuC;IACvC,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;8EAC0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gHAAgH;IAChH,aAAa,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACzC,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,sFAAsF;IACtF,WAAW,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;6EACyE;IACzE,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB;;yEAEqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;wEAEoE;IACpE,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,4CAA4C;IAC5C,cAAc,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC;IACtF,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,kDAAkD;IAClD,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,wEAAwE;IACxE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9E;;sCAEkC;IAClC,UAAU,CAAC,EAAE,CACX,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,CAAC,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,QAAQ,KACZ,MAAM,CAAC;IACZ;;;;gEAI4D;IAC5D,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/F;iEAC6D;IAC7D,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD;;;;6EAIyE;IACzE,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC;;;;;0DAKsD;IACtD,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B;;yEAEqE;IACrE,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,eAAe,GAAG,SAAS,CAAC;IAC7D;;;sEAGkE;IAClE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,KAAK,MAAM,CAAC;IAClG;;;;gCAI4B;IAC5B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;qDAEiD;IACjD,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IAC1F,kDAAkD;IAClD,SAAS,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACxC,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,KAC5C,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC;IACzE,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;IACvE;;;;8EAI0E;IAC1E,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,mBAAmB,CAAC,EAAE,MAAM,KACzB,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,CACV,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,EAAE,KACA,MAAM,CAAC;CACb;AAED;;;;sEAIsE;AACtE,wBAAgB,eAAe,CAC7B,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,EAClC,MAAM,EAAE,MAAM,EAAE,EAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,EACnB,aAAa,CAAC,EAAE,MAAM;AACtB,0EAA0E;AAC1E,gBAAgB,CAAC,EAAE,MAAM,EAAE,GAC1B,MAAM,CA8BR;AAkBD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAWtE;AAq+BD;;;;;;kFAMkF;AAClF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,wBAAgB,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,EAAE,CAsX7D"}

package/dist/src/orgrt/session.js

@@ -1,14 +1,16 @@
 // packages/@monomind/cli/src/orgrt/session.ts
 import { z } from 'zod';
 import { ClaudeAgentRunner, defaultClaudeRunner } from './agent-runner.js';
-import { claudeBashTimeoutEnv } from './bash-timeout.js';
+import { CLAUDE_SANDBOX_CWD_ENV, claudeBashTimeoutEnv, claudeSandboxCwdNote, } from './bash-timeout.js';
 import { endpointBriefingLines } from './endpoint-roles.js';
 import { scanInput } from './fence.js';
 import { Mailbox } from './mailbox.js';
 import { summarizeToolOutput } from './policy.js';
 import { FaultRestarts, ProcessFaultError } from './sandbox-fault.js';
 import { StateDetector } from './state-detector.js';
+import { linkAbort, queueCancelNotice, TaskCancelledError, trackTaskProcess, } from './task-cancel.js';
 import { MAX_TASK_BRIEF } from './task-dag.js';
+import { orgTaskTool } from './task-tools.js';
 import { MAX_BLOCK_RECHECK_MINUTES, } from './types.js';
 /** How long an SDK stream may stay open with zero messages before we say so.
  *  Comfortably longer than a slow first turn, shorter than the idle watchdog's
@@ -27,7 +29,8 @@ import { expandRolePromptVars, promptVarsFor } from './prompt-vars.js';
 import { resolveProviderEnv, resolveRoleProvider } from './provider.js';
 import { resolveRoleGitEnforcement, roleAuthorityMask } from './role-sandbox.js';
 import { mailRouteKey, ROLE_SESSION_KEY, resolveSessionScope, SessionLedger, } from './session-ledger.js';
-import { loadSkillText, roleSkillGuidance, roleSkillNames } from './skill-library.js';
+import { roleSkillGuidance } from './skill-library.js';
+import { skillTools } from './skill-tools.js';
 import { DEFAULT_CLAUDE_MODEL, VERCEL_PROVIDERS } from './vercel-providers.js';
 /**
  * Resolves the extra system-prompt block for a role: its pinned library
@@ -398,8 +401,13 @@ async function runAgentSessionLoop(opts) {
         let sessionId;
         let hitTurnLimit = false;
         const attempt = { replied: false };
+        // Task scope: this process works on one task, so cancelling it ends it.
+        const tracked = trackTaskProcess(opts.taskProcesses, scope, sessionKey);
         try {
-            const res = await runOneSession(sessionOpts, resumeSessionId, sessionCostTotals, attempt, sessionTokenTotals, streamOpts, faultRestarts.watch(sessionKey));
+            const res = await runOneSession(sessionOpts, resumeSessionId, sessionCostTotals, attempt, sessionTokenTotals, streamOpts, faultRestarts.watch(sessionKey), tracked?.signal);
+            // Cancelled as the process was ending on its own: still owed the notice.
+            if (tracked?.signal.aborted)
+                throw tracked.signal.reason;
             sessionId = res.sessionId;
             hitTurnLimit = res.hitTurnLimit;
             resumeSessionId = sessionId;
@@ -433,7 +441,14 @@ async function runAgentSessionLoop(opts) {
             // very next check below (`mailbox.isClosed || mailbox.isDraining`)
             // returns immediately — so rethrowing here costs nothing.
             const stopping = mailbox.isClosed || (opts.externalAbort?.signal.aborted ?? false);
-            if (!stopping && err instanceof ProcessFaultError) {
+            if (!stopping && err instanceof TaskCancelledError) {
+                // Its work is abandoned: the notice starts a fresh, small session.
+                sessionId = undefined;
+                resumeSessionId = undefined;
+                ledger.drop({ role: opts.role.id, runtime: runtimeKey, taskKey: sessionKey });
+                queueCancelNotice(err, mailbox, opts.bus, opts.role.id, sessionKey);
+            }
+            else if (!stopping && err instanceof ProcessFaultError) {
                 // Same session, new process: resume it and tell the role why.
                 resumeSessionId = err.sessionId ?? resumeSessionId;
                 if (scope === 'task' && err.sessionId) {
@@ -516,6 +531,9 @@ async function runAgentSessionLoop(opts) {
                 throw err;
             }
         }
+        finally {
+            tracked?.release();
+        }
         // The dead session's generator may still hold the waker - drop it so a
         // push() before the next stream() starts only queues instead of being
         // consumed by the abandoned generator (silent message loss).
@@ -641,7 +659,7 @@ function emitUsage(bus, from, t, costUsd, subtype) {
  *  resuming on restart) and whether it ended by hitting the turn limit (so the
  *  caller can push a continuation) when the stream ends (mailbox closed or
  *  maxTurns reached). */
-async function runOneSession(opts, resume, costTotals, progress, tokenTotals, streamOpts, faultWatch) {
+async function runOneSession(opts, resume, costTotals, progress, tokenTotals, streamOpts, faultWatch, cancelled) {
     const { org, role, bus, policy, mailbox, cwd } = opts;
     // Each call starts a new runner process, whose cumulative totals may or may
     // not continue the previous one's (cumulative-meter.ts).
@@ -713,6 +731,9 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
         onExternalAbort();
     else
         external?.addEventListener('abort', onExternalAbort, { once: true });
+    // org_task_cancel for this process's task: end it the same way (task-cancel.ts).
+    // Already aborted when it landed during the setup awaits above.
+    const unlinkCancelled = linkAbort(cancelled, abort);
     try {
         // #258: policy.git enforced where git runs, not only by Bash text
         // classification — guard env for every runtime, OS sandbox + file-tool
@@ -745,7 +766,9 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
             tools,
             // No options = the pre-D3 stream, exactly.
             prompt: streamOpts ? mailbox.stream('', streamOpts) : mailbox.stream(),
-            systemPrompt: rolePromptFor(opts),
+            systemPrompt: gitEnforcement.claudeRestrictions?.sandbox
+                ? `${rolePromptFor(opts)}\n\n${claudeSandboxCwdNote(cwd)}`
+                : rolePromptFor(opts),
             model,
             cwd,
             effort: tier?.effort,
@@ -766,6 +789,7 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
                     ? { ANTHROPIC_MODEL: model, ANTHROPIC_SMALL_FAST_MODEL: model }
                     : {}),
                 ...gitEnforcement.env,
+                ...(gitEnforcement.claudeRestrictions?.sandbox ? CLAUDE_SANDBOX_CWD_ENV : {}),
                 // No MONOMIND_HOOK_QUIET / MONOMIND_GRAPH_GATE / MONOMIND_SDK_AGENT
                 // here (#249): every CLI hands this env to its shell tool, so they
                 // reached every command the role ran and silently muted monomind's
@@ -894,6 +918,8 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
             if (process.env.MONOMIND_DEBUG) {
                 console.error(`[orgrt:${org}/${role.id}] runner message type=${m.type} subtype=${String(m.subtype ?? '-')}`);
             }
+            if (cancelled?.aborted)
+                throw cancelled.reason;
             mailbox.observeTurn(m.type); // the prompt stream outlives a live turn (#331)
             if (m.session_id) {
                 sessionId = m.session_id;
@@ -1111,6 +1137,8 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
                 opts.onTurnEnd?.();
             }
         }
+        if (cancelled?.aborted)
+            throw cancelled.reason;
         bus.emit({ type: 'status', from: role.id, msg: 'session ended' });
         return { sessionId, hitTurnLimit };
     }
@@ -1122,6 +1150,8 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
         // Ending the process was the point; sandbox-fault.ts already audited it.
         if (err instanceof ProcessFaultError)
             throw err;
+        if (cancelled?.aborted)
+            throw cancelled.reason;
         // org_complete / org stop close the mailbox and abort every session: a
         // normal stop, not a failure. The daemon still classifies it.
         const message = err instanceof Error ? err.message : String(err);
@@ -1159,17 +1189,11 @@ async function runOneSession(opts, resume, costTotals, progress, tokenTotals, st
         // mid-stream by a throw from outliving it now that an org stop can no
         // longer reach it.
         external?.removeEventListener('abort', onExternalAbort);
+        unlinkCancelled();
         abort.abort();
         providerSet?.close();
     }
 }
-/** ADR-O001 D7: org_task's description suffix for an org with a catalog. */
-function loadoutHelp(catalog) {
-    const list = catalog
-        .map((l) => (l.description ? `${l.name} (${l.description})` : l.name))
-        .join(', ');
-    return ` Optionally select a "loadout" — the named, stable specialisation the assignee's session is built with: ${list}. Select by kind of work; put everything specific to this task (which diff, criteria, what failed last time) in its "brief", not in the choice of loadout. The selection is recorded on the task and reused on every retry.`;
-}
 /** Build the org tool surface as platform-agnostic OrgToolDef[]. The handlers
  *  close over sessionOpts callbacks (deliver, recall, remember, …) — same
  *  wiring as the previous inline createSdkMcpServer block, just decoupled from
@@ -1177,8 +1201,7 @@ function loadoutHelp(catalog) {
  *
  *  Behaviour is identical to the old inline definitions: conditional tools are
  *  gated on their callback being present, org_send/ask_human are always added. */
-/** org_task's assignee value that asks for automatic role selection. */
-export const AUTO_ASSIGNEE = 'auto';
+export { AUTO_ASSIGNEE } from './task-tools.js';
 export function buildOrgTools(opts) {
     const { role, deliver } = opts;
     const tools = [];
@@ -1192,22 +1215,7 @@ export function buildOrgTools(opts) {
             handler: async (args) => text(await searchKnowledge(role.id, args.query)),
         });
     }
-    const skillRoot = opts.orgRoot ?? opts.cwd;
-    const allowedSkills = roleSkillNames(role, skillRoot);
-    if (allowedSkills.length) {
-        tools.push({
-            name: 'org_skill_load',
-            description: `Load the full text of one of your skills (or one of its reference files) when the work in front of you calls for it. Your skills: ${allowedSkills.join(', ')}.`,
-            schema: { name: z.string(), file: z.string().optional() },
-            handler: async (args) => {
-                const name = args.name;
-                if (!allowedSkills.includes(name)) {
-                    return text(`ERROR: "${name}" is not one of your skills. Yours: ${allowedSkills.join(', ')}`);
-                }
-                return text(loadSkillText(name, args.file, skillRoot));
-            },
-        });
-    }
+    tools.push(...skillTools(role, opts.orgRoot ?? opts.cwd, opts.onSkillLoad));
     const recall = opts.recall;
     if (recall) {
         tools.push({
@@ -1319,40 +1327,12 @@ export function buildOrgTools(opts) {
     const loadoutArg = catalog
         ? { loadout: z.enum(catalog.map((l) => l.name)).optional() }
         : {};
-    // Sent with the dispatch itself (decisions.ts dispatchLine), so the
+    // Sent with the dispatch itself (task-provenance.ts dispatchLine), so the
     // instructions arrive with the task instead of in a follow-up message.
     const briefArg = z.string().max(MAX_TASK_BRIEF).optional();
-    const createTask = opts.createTask;
-    if (createTask) {
-        tools.push({
-            name: 'org_task',
-            description: `Create a task in the DAG with optional dependencies. Dependencies must be existing task IDs. Tasks become ready when all deps are done, then get dispatched to the assignee. Put the assignee's instructions — scope, acceptance criteria, paths, what failed last time — in \`brief\` (up to ${MAX_TASK_BRIEF} characters): it is delivered in the same message as the title whenever the task is dispatched, while a separate org_send can arrive after the assignee has already started.` +
-                (opts.pickAssignee
-                    ? ` Set assignee to "${AUTO_ASSIGNEE}" to have the role chosen for you from the task title.`
-                    : '') +
-                (catalog ? loadoutHelp(catalog) : ''),
-            schema: {
-                title: z.string(),
-                assignee: z.string(),
-                deps: z.array(z.string()).default([]),
-                brief: briefArg,
-                ...loadoutArg,
-            },
-            handler: async (args) => {
-                let assignee = args.assignee;
-                if (assignee === AUTO_ASSIGNEE && opts.pickAssignee) {
-                    const picked = await opts.pickAssignee(args.title);
-                    if (!picked) {
-                        return text(JSON.stringify({
-                            error: `assignee "${AUTO_ASSIGNEE}": no role fits this task title — name the assignee explicitly`,
-                        }));
-                    }
-                    assignee = picked;
-                }
-                return text(createTask(role.id, args.title, assignee, args.deps ?? [], args.loadout, args.brief));
-            },
-        });
-    }
+    const orgTask = orgTaskTool(opts, loadoutArg, briefArg);
+    if (orgTask)
+        tools.push(orgTask);
     const completeTask = opts.completeTask;
     if (completeTask) {
         tools.push({
@@ -1429,7 +1409,7 @@ export function buildOrgTools(opts) {
     if (cancelTask) {
         tools.push({
             name: 'org_task_cancel',
-            description: 'Cancel a task as moot. The task becomes "cancelled" and unblocks downstream work.',
+            description: 'Cancel a task as moot. The task becomes "cancelled" and unblocks downstream work. Its assignee is told to stop and not to commit or report further work for it; a role that runs one session per task has that session\'s process ended at once.',
             schema: { taskId: z.string(), reason: z.string().optional() },
             handler: async (args) => text(cancelTask(role.id, args.taskId, args.reason)),
         });