@oisincoveney/pipeline 2.1.1 → 2.3.0

package/dist/claude-settings-config.js

@@ -0,0 +1,44 @@
+import { applyJsonEdit, ensureTrailingNewline, formatJson, isRecord, parseJsonRecord, setIfMissing } from "./json-config-merge.js";
+//#region src/claude-settings-config.ts
+function mergeClaudeSettings(currentText, projection) {
+	if (currentText === void 0) return {
+		content: formatJson(projection),
+		ok: true
+	};
+	const parsed = parseJsonRecord(currentText);
+	if (!parsed.ok) return parsed;
+	return {
+		content: ensureTrailingNewline(applyClaudeProjection(currentText, parsed.value, projection)),
+		ok: true
+	};
+}
+function applyClaudeProjection(currentText, parsed, projection) {
+	return applyPermissionsAllow(applyMcpServersProjection(currentText, parsed, projection), parsed, projection);
+}
+function applyMcpServersProjection(content, parsed, projection) {
+	return Object.entries(projection.mcpServers ?? {}).reduce((nextContent, [name, server]) => setIfMissing(nextContent, parsed, ["mcpServers", name], server), content);
+}
+function applyPermissionsAllow(content, parsed, projection) {
+	const existing = permissionAllowList(parsed);
+	const merged = unionPreservingOrder(existing, projectedAllowList(projection));
+	return sameOrderedList(existing, merged) ? content : applyJsonEdit(content, ["permissions", "allow"], merged);
+}
+function projectedAllowList(projection) {
+	return projection.permissions?.allow ?? [];
+}
+function unionPreservingOrder(existing, extra) {
+	const merged = [...existing];
+	for (const entry of extra) if (!merged.includes(entry)) merged.push(entry);
+	return merged;
+}
+function sameOrderedList(a, b) {
+	return a.length === b.length && a.every((value, index) => value === b[index]);
+}
+function permissionAllowList(parsed) {
+	const permissions = parsed.permissions;
+	if (!isRecord(permissions)) return [];
+	const allow = permissions.allow;
+	return Array.isArray(allow) ? allow.filter((entry) => typeof entry === "string") : [];
+}
+//#endregion
+export { mergeClaudeSettings };

package/dist/cli/program.js

@@ -2,9 +2,8 @@ import { PipelineConfigError } from "../config/schemas.js";
 import { loadPipelineConfig } from "../config/load.js";
 import "../config.js";
 import { createOrchestratorLaunchPlan, createRunnerLaunchPlan } from "../runner.js";
-import { compileWorkflowPlan } from "../workflow-planner.js";
-import { compileScheduleArtifact, generateScheduleArtifact, parseScheduleArtifact } from "../schedule/planner.js";
-import "../schedule-planner.js";
+import { compileWorkflowPlan } from "../planning/compile.js";
+import { compileScheduleArtifact, generateScheduleArtifact, parseScheduleArtifact } from "../planning/generate.js";
 import { loadMokaGlobalConfig } from "../moka-global-config.js";
 import { defaultClusterDoctorNamespace, runClusterDoctor } from "../cluster-doctor.js";
 import { formatCodexAuthSyncResult, syncLocalCodexAuth } from "../codex-auth-sync.js";
@@ -150,7 +149,7 @@ function createCliProgram() {
 		const config = loadPipelineConfig(process.env.PIPELINE_TARGET_PATH ?? process.cwd(), { allowMissingLintFileReferences: true });
 		console.log(renderGatewayConfig(config));
 	});
-	gatewayCommand.command("configure-host").description("Rewrite host MCP config to the singleton pipeline gateway").addOption(new Option("--host <host>", "host config to update").choices(["all", "opencode"]).default("all").argParser(parseCommandHost)).addOption(new Option("--scope <scope>", "config scope to update").choices(["project", "global"]).default("project").argParser(parseGatewayHostScope)).action((flags) => {
+	gatewayCommand.command("configure-host").description("Rewrite host MCP config to the singleton pipeline gateway").addOption(new Option("--host <host>", "host config to update").choices(["all", "opencode"]).default("all").argParser(parseGatewayHost)).addOption(new Option("--scope <scope>", "config scope to update").choices(["project", "global"]).default("project").argParser(parseGatewayHostScope)).action((flags) => {
 		const cwd = process.env.PIPELINE_TARGET_PATH ?? process.cwd();
 		const result = configureGatewayHosts(loadPipelineConfig(cwd, { allowMissingLintFileReferences: true }), {
 			cwd,
@@ -182,7 +181,11 @@ function createCliProgram() {
 		const result = await initPipelineProject({ cwd: process.env.PIPELINE_TARGET_PATH ?? process.cwd() });
 		console.log(formatPipelineInitResult(result));
 	});
-	program.command("install-commands").description("Install generated slash-command adapters into this repository").addOption(new Option("--host <host>", "host command set to install").choices(["all", "opencode"]).default("all").argParser(parseCommandHost)).option("--dry-run", "show planned changes without writing files").option("--check", "fail if generated command files are missing or stale").option("--force", "overwrite manually edited command files").action(async (flags) => {
+	program.command("install-commands").description("Install generated slash-command adapters into this repository").addOption(new Option("--host <host>", "host command set to install").choices([
+		"all",
+		"opencode",
+		"claude-code"
+	]).default("all").argParser(parseCommandHost)).option("--dry-run", "show planned changes without writing files").option("--check", "fail if generated command files are missing or stale").option("--force", "overwrite manually edited command files").action(async (flags) => {
 		const result = await installCommands({
 			...flags,
 			cwd: process.env.PIPELINE_TARGET_PATH ?? process.cwd()
@@ -232,6 +235,10 @@ function parseGatewayHostScope(value) {
 	if (value === "project" || value === "global") return value;
 	throw new Error("scope must be project or global");
 }
+function parseGatewayHost(value) {
+	if (value === "all" || value === "opencode") return value;
+	throw new Error("host must be all or opencode");
+}
 async function runCli(argv) {
 	await createCliProgram().parseAsync(argv, { from: "node" });
 }

package/dist/cli/submit-options.js

@@ -48,7 +48,6 @@ function mokaCommonSubmitOptions(input) {
 		name: input.flags.name,
 		namespace: input.flags.namespace ?? momokaya?.kubernetes.namespace,
 		opencodeAuthSecretName: momokaya?.submit.opencodeAuthSecretName,
-		queueName: input.flags.queueName ?? momokaya?.submit.queueName,
 		serviceAccountName: input.flags.serviceAccount ?? momokaya?.submit.serviceAccountName,
 		worktreePath: input.cwd
 	};
@@ -77,7 +76,7 @@ function submitMokaGraphInput(input, flags, commonOptions) {
 function addRunnerArgoOptions(command, options = {}) {
 	command.option("--name <name>", "Workflow metadata.name").option("--generate-name <prefix>", "Workflow metadata.generateName").option("--namespace <namespace>", "Workflow namespace");
 	if (options.kubeconfig) command.option("--kubeconfig <path>", "kubeconfig path");
-	return command.option("--queue-name <name>", "Kueue LocalQueue label for Workflow pods").option("--service-account <name>", "Workflow service account").option("--image <image>", "runner image").addOption(new Option("--image-pull-policy <policy>", "runner image pull policy").choices([
+	return command.option("--service-account <name>", "Workflow service account").option("--image <image>", "runner image").addOption(new Option("--image-pull-policy <policy>", "runner image pull policy").choices([
 		"Always",
 		"IfNotPresent",
 		"Never"

package/dist/cluster-doctor.js

@@ -10,7 +10,6 @@ const DEFAULT_RESOURCES = {
 	githubAuthSecretName: "oisin-bot-github-auth",
 	imagePullSecretName: "ghcr-pull-secret",
 	opencodeAuthSecretName: "opencode-auth-1",
-	queueName: "pipeline-runner",
 	serviceAccountName: "pipeline-runner"
 };
 const FORBIDDEN_RE = /forbidden/i;
@@ -32,7 +31,6 @@ async function runClusterDoctor(options = {}) {
 			verb: "create",
 			...kubectlOptions
 		}),
-		checkLocalQueue(namespace, resources.queueName, kubectlOptions),
 		checkClusterResource("argo-workflow-crd", [
 			"get",
 			"crd",
@@ -63,7 +61,6 @@ function clusterResources() {
 		githubAuthSecretName: configured.githubAuthSecretName,
 		imagePullSecretName: configured.imagePullSecretName,
 		opencodeAuthSecretName: configured.opencodeAuthSecretName,
-		queueName: configured.queueName,
 		serviceAccountName: configured.serviceAccountName
 	} : DEFAULT_RESOURCES;
 }
@@ -169,15 +166,6 @@ async function checkWorkflowSubmitPermission(namespace, options) {
 		passed: false
 	};
 }
-function checkLocalQueue(namespace, queueName, kubectlOptions) {
-	return checkNamespacedResource(`localqueue/${queueName}`, [
-		"get",
-		"localqueue",
-		queueName,
-		"-n",
-		namespace
-	], `Kueue LocalQueue ${queueName} missing in ${namespace}; runner Workflow pods cannot be admitted to the expected queue.`, kubectlOptions);
-}
 async function checkClusterResource(name, args, kubectlOptions) {
 	const result = await kubectl(args, kubectlOptions);
 	return result.ok ? {

package/dist/commands/pipeline-command.js

@@ -17,7 +17,7 @@ function registerConfiguredEntrypointCommands(program, config, runEntrypoint) {
 	for (const [id, entrypoint] of Object.entries(config.entrypoints)) {
 		if (reservedCommands.has(id)) continue;
 		const command = program.command(id).description(entrypoint.description ?? `Run the ${id} workflow`).argument("<description...>", "task description");
-		if ("schedule" in entrypoint) command.option("--namespace <namespace>", "Workflow namespace").option("--schedule <path>", "approved schedule YAML to submit").option("--kubeconfig <path>", "kubeconfig path").option("--queue-name <name>", "Kueue LocalQueue label for Workflow pods").option("--service-account <name>", "Workflow service account").option("--image <image>", "runner image").option("--image-pull-policy <policy>", "runner image pull policy").option("--image-pull-secret <name>", "imagePullSecret name").option("--event-url <url>", "runner event sink URL");
+		if ("schedule" in entrypoint) command.option("--namespace <namespace>", "Workflow namespace").option("--schedule <path>", "approved schedule YAML to submit").option("--kubeconfig <path>", "kubeconfig path").option("--service-account <name>", "Workflow service account").option("--image <image>", "runner image").option("--image-pull-policy <policy>", "runner image pull policy").option("--image-pull-secret <name>", "imagePullSecret name").option("--event-url <url>", "runner event sink URL");
 		command.action(async (descriptionParts, flags) => {
 			await runEntrypoint(id, descriptionParts.join(" "), flags);
 		});

package/dist/config/defaults.js

@@ -7,356 +7,13 @@ const PIPELINE_CONFIG_PATH = ".pipeline/pipeline.yaml";
 const RUNNERS_CONFIG_PATH = ".pipeline/runners.yaml";
 const PROFILES_CONFIG_PATH = ".pipeline/profiles.yaml";
 const OPENCODE_ECOSYSTEM_MANIFEST_PATH = "defaults/opencode-ecosystem.yaml";
-const PACKAGE_DEFAULT_RUNNERS_YAML = `version: 1
-runners:
-  opencode:
-    type: opencode
-    capabilities:
-      native_subagents: true
-      rules: true
-      skills: true
-      mcp_servers: true
-      tools: [read, list, grep, glob, bash, edit, write]
-      filesystem: [read-only, workspace-write]
-      network: [inherit, disabled]
-      output_formats: [text, json, jsonl, json_schema]
-  command:
-    type: command
-    capabilities:
-      native_subagents: false
-      rules: false
-      skills: false
-      mcp_servers: false
-      tools: [bash]
-      filesystem: [read-only, workspace-write]
-      network: [inherit, disabled]
-      output_formats: [text, json]
-`;
-const PACKAGE_DEFAULT_PROFILES_YAML = `version: 1
-mcp_gateway:
-  provider: toolhive
-  mode: local
-  url: https://pipeline-mcp.momokaya.ee/mcp/
-  url_env: PIPELINE_MCP_GATEWAY_URL
-  authorization_env: PIPELINE_MCP_GATEWAY_AUTHORIZATION
-  default_profile: default
-  backends:
-    context7:
-      locality: shared-remote
-      tool_prefixes: [context7]
-    uidotsh:
-      locality: shared-remote
-      tool_prefixes: [uidotsh]
-    qdrant:
-      locality: repo-scoped-remote
-      tool_prefixes: [qdrant]
-    fallow:
-      locality: repo-local
-      workspace_path_source: PIPELINE_TARGET_PATH
-      required: false
-      tool_prefixes: [fallow]
-    serena:
-      locality: repo-local
-      workspace_path_source: PIPELINE_TARGET_PATH
-      tool_prefixes: [serena]
-    backlog:
-      locality: repo-local
-      workspace_path_source: PIPELINE_TARGET_PATH
-      tool_prefixes: [backlog]
-skills:
-  execute:
-    path: .agents/skills/execute/SKILL.md
-    source_root: package
-  inspect:
-    path: .agents/skills/inspect/SKILL.md
-    source_root: package
-  quick:
-    path: .agents/skills/quick/SKILL.md
-    source_root: package
-  critique:
-    path: .agents/skills/critique/SKILL.md
-    source_root: package
-  doubt:
-    path: .agents/skills/doubt/SKILL.md
-    source_root: package
-  fix:
-    path: .agents/skills/fix/SKILL.md
-    source_root: package
-  library-first-development:
-    path: .agents/skills/library-first-development/SKILL.md
-    source_root: package
-  migrate:
-    path: .agents/skills/migrate/SKILL.md
-    source_root: package
-  optimize:
-    path: .agents/skills/optimize/SKILL.md
-    source_root: package
-  research:
-    path: .agents/skills/research/SKILL.md
-    source_root: package
-  schedule-graph-shaping:
-    path: .agents/skills/schedule-graph-shaping/SKILL.md
-    source_root: package
-  scope:
-    path: .agents/skills/scope/SKILL.md
-    source_root: package
-  secure:
-    path: .agents/skills/secure/SKILL.md
-    source_root: package
-  spec:
-    path: .agents/skills/spec/SKILL.md
-    source_root: package
-  test:
-    path: .agents/skills/test/SKILL.md
-    source_root: package
-  trace:
-    path: .agents/skills/trace/SKILL.md
-    source_root: package
-  verify:
-    path: .agents/skills/verify/SKILL.md
-    source_root: package
-profiles:
-  moka-orchestrator:
-    runner: opencode
-    description: Orchestrate the configured pipeline and enforce gates.
-    instructions: { inline: "Orchestrate the configured pipeline through package-defined entrypoints, native agents, and gates. Do not bypass configured runner subprocesses or package-configured gates." }
-    skills: [execute, quick, inspect]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-  moka-researcher:
-    runner: opencode
-    description: Research the requested task and produce structured findings.
-    instructions: { inline: "Inspect first-party source, tests, docs, and task context for the current task only. Produce concise findings with file references and stop; do not perform open-ended repository exploration." }
-    timeout_ms: 900000
-    skills: [research, spec, scope]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/research.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-  moka-inspector:
-    runner: opencode
-    model: openai/gpt-5.5-low
-    description: Inspect the repository without modifying files.
-    instructions: { inline: "Inspect the repository without modifying files." }
-    skills: [research]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-  moka-schedule-planner:
-    runner: opencode
-    model: openai/gpt-5.5-xhigh
-    description: Refine a baseline schedule into a specialized approved-plan artifact.
-    instructions: { inline: "Generate exactly one workflow named root as an explicit schedule graph. Return YAML only." }
-    timeout_ms: 300000
-    skills: [schedule-graph-shaping]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-  moka-test-writer:
-    runner: opencode
-    scheduling_roles: [implementation]
-    description: Add focused failing tests for the requested behavior.
-    instructions: { inline: "Add focused failing tests for the requested behavior only. Do not change production code. Only edit files matching test paths such as **/*.test.*, **/*.spec.*, **/*_test.*, **/__tests__/**, test/**, or tests/**. Return only valid JSON with top-level changes and verification. Every changes entry must include summary, why, and files. Include risks, followups, and lessons when present. Do not use Markdown fences or prose outside the JSON object." }
-    skills: [test]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash, edit, write]
-    filesystem: { mode: workspace-write, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/implementation.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-  moka-code-writer:
-    runner: opencode
-    scheduling_roles: [implementation]
-    description: Implement production code until the failing tests pass.
-    instructions: { inline: "Implement the smallest production change that satisfies the failing tests. Return only valid JSON with top-level changes and verification. Every changes entry must include summary, why, and files. Include risks, followups, and lessons when present. Do not use Markdown fences or prose outside the JSON object." }
-    skills: [trace, test, fix, library-first-development]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash, edit, write]
-    filesystem: { mode: workspace-write, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/implementation.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-  moka-acceptance-reviewer:
-    runner: opencode
-    scheduling_roles: [coverage]
-    description: Audit the finished change against every acceptance criterion.
-    instructions: { inline: 'Audit the completed change against each canonical acceptance criterion independently. Return only valid JSON with top-level "verdict", "evidence", "acceptance", and optional "violations". Each "acceptance" entry must include "id", "verdict", and non-empty "evidence". Do not use Markdown fences or prose outside the JSON object.' }
-    skills: [critique, doubt]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/acceptance.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-  moka-thermo-nuclear-reviewer:
-    runner: opencode
-    scheduling_roles: [coverage]
-    description: Perform the final thermo-nuclear code quality review of the integration branch.
-    instructions: { inline: "Perform the final code quality review of the integration branch." }
-    skills: [critique]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/review.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-  moka-verifier:
-    runner: opencode
-    scheduling_roles: [coverage]
-    description: Verify checks, implementation fit, and final evidence.
-    instructions: { inline: 'Verify checks, implementation fit, and final evidence. Return only valid JSON with top-level "verdict", "evidence", and optional "violations". Do not use Markdown fences or prose outside the JSON object.' }
-    skills: [verify, critique, secure, optimize]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/verify.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-  moka-learner:
-    runner: opencode
-    model: openai/gpt-5.5-low
-    description: Store durable lessons from the completed run.
-    instructions: { inline: "Store durable lessons from the completed run when useful." }
-    skills: [migrate]
-    mcp_servers: [pipeline-gateway]
-    tools: [read, list, grep, glob, bash]
-    filesystem: { mode: read-only, allow: ["**/*"], deny: ["node_modules/**", "dist/**", ".git/**"] }
-    network: { mode: inherit }
-    output:
-      format: json_schema
-      schema_path: .pipeline/schemas/learn.schema.json
-      repair: { enabled: true, max_attempts: 1 }
-`;
-const PACKAGE_DEFAULT_PIPELINE_YAML = `version: 1
-default_workflow: inspect
-orchestrator:
-  profile: moka-orchestrator
-entrypoints:
-  quick:
-    schedule: quick-schedule
-    description: Compact planner-generated pipeline for small work
-  execute:
-    schedule: execute-schedule
-    description: Full planner-generated pipeline for repository work
-  inspect:
-    workflow: inspect
-    description: Read-only repository inspection
-hooks:
-  functions:
-    generated-defaults-audit:
-      kind: command
-      command: [node, -e, "const fs=require('node:fs'); fs.writeFileSync(process.env.PIPELINE_HOOK_RESULT, JSON.stringify({status:'pass',summary:'Generated defaults audit passed'}));"]
-      trusted: true
-      timeout_ms: 5000
-      output_limit_bytes: 4096
-  on:
-    workflow.start:
-      - id: generated-defaults-audit
-        function: generated-defaults-audit
-        failure: fail
-runner_command:
-  environment:
-    setup:
-      - command: bun
-        args: [install, --frozen-lockfile]
-scheduler:
-  commands:
-    quick:
-      schedule: quick-schedule
-      catalog: quick
-    execute:
-      schedule: execute-schedule
-      catalog: execute
-  node_catalogs:
-    quick:
-      required_categories: [intake, red, green, mechanical, verification]
-      nodes:
-        backlog-intake:
-          category: intake
-          profile: moka-researcher
-          models: [openai/gpt-5.5-medium]
-        red-tests:
-          category: red
-          profile: moka-test-writer
-          models: [openai/gpt-5.5-high, kimi-for-coding/kimi-k2-thinking]
-        green-implementation:
-          category: green
-          profile: moka-code-writer
-          models: [openai/gpt-5.5-high, kimi-for-coding/k2p6, opencode-go/qwen3.7-max]
-        verification:
-          category: verification
-          profile: moka-verifier
-          models: [openai/gpt-5.5-medium]
-    execute:
-      required_categories: [intake, research, red, green, mechanical, acceptance, verification, learn]
-      nodes:
-        backlog-intake:
-          category: intake
-          profile: moka-researcher
-          models: [openai/gpt-5.5-medium]
-        research:
-          category: research
-          profile: moka-researcher
-          models: [openai/gpt-5.5-medium, kimi-for-coding/k2p6]
-        red-tests:
-          category: red
-          profile: moka-test-writer
-          models: [openai/gpt-5.5-high, kimi-for-coding/kimi-k2-thinking]
-        green-backend:
-          category: green
-          profile: moka-code-writer
-          models: [openai/gpt-5.5-high, kimi-for-coding/k2p6, opencode-go/qwen3.7-max]
-        green-frontend:
-          category: green
-          profile: moka-code-writer
-          models: [openai/gpt-5.5-high, kimi-for-coding/k2p6, opencode-go/qwen3.7-max]
-        acceptance-review:
-          category: acceptance
-          profile: moka-acceptance-reviewer
-          models: [openai/gpt-5.5-medium]
-        verification:
-          category: verification
-          profile: moka-verifier
-          models: [openai/gpt-5.5-medium]
-        learn:
-          category: learn
-          profile: moka-learner
-          models: [openai/gpt-5.5-low]
-schedules:
-  quick-schedule:
-    baseline: quick
-    planner_profile: moka-schedule-planner
-    node_catalog: quick
-  execute-schedule:
-    baseline: execute
-    planner_profile: moka-schedule-planner
-    node_catalog: execute
-workflows:
-  inspect:
-    description: Read-only repository inspection workflow.
-    nodes:
-      - id: inspect
-        kind: agent
-        profile: moka-inspector
-`;
+const DEFAULT_PACKAGE_DEFAULTS_ROOT = new URL("../../defaults/", import.meta.url);
+function loadDefaultYaml(filename) {
+	return readFileSync(new URL(filename, DEFAULT_PACKAGE_DEFAULTS_ROOT), "utf8");
+}
+const PACKAGE_DEFAULT_RUNNERS_YAML = loadDefaultYaml("runners.yaml");
+const PACKAGE_DEFAULT_PROFILES_YAML = loadDefaultYaml("profiles.yaml");
+const PACKAGE_DEFAULT_PIPELINE_YAML = loadDefaultYaml("pipeline.yaml");
 const DEFAULT_OPENCODE_ECOSYSTEM_MANIFEST_URL = new URL(`../../${OPENCODE_ECOSYSTEM_MANIFEST_PATH}`, import.meta.url);
 const ecosystemStringArraySchema = z.array(z.string().min(1));
 const ecosystemRuntimeSchema = z.object({

package/dist/config/schemas.d.ts

@@ -220,8 +220,8 @@ declare const configSchema: z.ZodObject<{
     policy: z.ZodOptional<z.ZodObject<{
       commands: z.ZodOptional<z.ZodEnum<{
         allow: "allow";
-        "trusted-only": "trusted-only";
         deny: "deny";
+        "trusted-only": "trusted-only";
       }>>;
       modules: z.ZodOptional<z.ZodEnum<{
         allow: "allow";
@@ -245,8 +245,8 @@ declare const configSchema: z.ZodObject<{
     }, z.core.$strict>>>;
     default_profile: z.ZodOptional<z.ZodString>;
     mode: z.ZodEnum<{
-      hosted: "hosted";
       local: "local";
+      hosted: "hosted";
     }>;
     provider: z.ZodLiteral<"toolhive">;
     authorization_env: z.ZodDefault<z.ZodString>;
@@ -289,10 +289,10 @@ declare const configSchema: z.ZodObject<{
     }, z.core.$strict>>;
     output: z.ZodOptional<z.ZodObject<{
       format: z.ZodEnum<{
+        json_schema: "json_schema";
         text: "text";
         json: "json";
         jsonl: "jsonl";
-        json_schema: "json_schema";
       }>;
       repair: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
@@ -310,6 +310,7 @@ declare const configSchema: z.ZodObject<{
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
     timeout_ms: z.ZodOptional<z.ZodNumber>;
     tools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+      task: "task";
       read: "read";
       list: "list";
       grep: "grep";
@@ -317,7 +318,6 @@ declare const configSchema: z.ZodObject<{
       bash: "bash";
       edit: "edit";
       write: "write";
-      task: "task";
     }>>>;
   }, z.core.$strict>>>;
   runner_command: z.ZodDefault<z.ZodObject<{
@@ -343,8 +343,8 @@ declare const configSchema: z.ZodObject<{
   rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
     path: z.ZodString;
     source_root: z.ZodDefault<z.ZodEnum<{
-      package: "package";
       project: "project";
+      package: "package";
     }>>;
   }, z.core.$strict>>>;
   runners: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -361,14 +361,15 @@ declare const configSchema: z.ZodObject<{
         disabled: "disabled";
       }>>>;
       output_formats: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        json_schema: "json_schema";
         text: "text";
         json: "json";
         jsonl: "jsonl";
-        json_schema: "json_schema";
       }>>>;
       rules: z.ZodOptional<z.ZodBoolean>;
       skills: z.ZodOptional<z.ZodBoolean>;
       tools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        task: "task";
         read: "read";
         list: "list";
         grep: "grep";
@@ -376,7 +377,6 @@ declare const configSchema: z.ZodObject<{
         bash: "bash";
         edit: "edit";
         write: "write";
-        task: "task";
       }>>>;
     }, z.core.$strict>;
     command: z.ZodOptional<z.ZodString>;
@@ -471,8 +471,8 @@ declare const configSchema: z.ZodObject<{
   schedules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     baseline: z.ZodEnum<{
-      execute: "execute";
       quick: "quick";
+      execute: "execute";
     }>;
     max_parallel_nodes: z.ZodOptional<z.ZodNumber>;
     node_catalog: z.ZodOptional<z.ZodString>;
@@ -484,8 +484,8 @@ declare const configSchema: z.ZodObject<{
   skills: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
     path: z.ZodString;
     source_root: z.ZodDefault<z.ZodEnum<{
-      package: "package";
       project: "project";
+      package: "package";
     }>>;
   }, z.core.$strict>>>;
   task_context: z.ZodOptional<z.ZodObject<{