@orc-brain/core 1.0.0

package/dist/config.js

@@ -0,0 +1,107 @@
+/**
+ * Default orchestrator configuration (§6, §7, §8). These are the recommended
+ * defaults from §14; `orchestrator.toml` overrides land in Phase 2. Values are
+ * exported so the router, budget tracker, and safety layer share one source.
+ */
+/** Recommended defaults (§14: concurrency 3, warn 70%, hard-stop 90%). */
+export const DEFAULT_CONFIG = {
+    concurrency_limit: 3,
+    // Fleet-wide worker cap across all runs (spec 002 §R13). ≥ concurrency_limit
+    // so a single-run setup behaves exactly as before.
+    global_concurrency_limit: 4,
+    budget: {
+        warn_at: 0.7,
+        hard_stop_at: 0.9,
+        per_task_min_usd: 0.5,
+        per_task_max_usd: 5,
+        max_tasks_per_run: 200,
+        max_tasks_per_hour: 120,
+    },
+    routing: {
+        // Order matters: first matching rule wins (§6). R1 (scope pin) is applied
+        // in the router before this table; R5–R7 are dynamic escalations.
+        rules: [
+            {
+                id: "R2",
+                description: "architecture-level planning/research/review → opus",
+                when: { task_types: ["planning", "research", "review"] },
+                model: "opus",
+            },
+            {
+                id: "R3",
+                description: "codegen/refactor/test → sonnet",
+                when: { task_types: ["codegen", "refactor", "test"] },
+                model: "sonnet",
+            },
+            {
+                id: "R4",
+                description: "mechanical work → haiku",
+                when: { task_types: ["mechanical"] },
+                model: "haiku",
+            },
+        ],
+        default_model: "sonnet",
+        // No forced model by default; set via config or ORC_FORCE_MODEL (§6 R-F).
+        force_model: null,
+    },
+    safety: {
+        // Default treats any non-local/non-RFC-1918 host as unknown ⇒ production
+        // (§8.1, Open Decision 12). Seed with real prod hosts to loosen dev friction.
+        prod_host_indicators: [],
+        prod_branches: ["main", "master", "prod", "production", "release/*"],
+        // Open Decision 5: require-approval for VCS/db/infra in dev, allow-with-audit
+        // for filesystem-within-allowlist. Prod scopes always deny regardless.
+        dev_posture: {
+            filesystem: "allow_with_audit",
+            vcs: "require_approval",
+            database: "require_approval",
+            infra: "require_approval",
+            publish: "require_approval",
+            credential: "deny",
+            network: "require_approval",
+        },
+    },
+    limits: {
+        patterns: {
+            session_limit: "session limit|resets? (at )?\\d",
+            weekly_limit: "weekly limit",
+            model_limit: "(opus|sonnet|haiku) limit",
+        },
+        backoff_ms: [60_000, 120_000, 240_000, 480_000, 960_000],
+        backoff_cap_ms: 1_800_000,
+    },
+    planner: {
+        // Pinned to Opus in plan mode with read-only tools (§3). It inspects the
+        // repo to decompose the goal but can never edit or run Bash.
+        model: "opus",
+        allowed_tools: ["Read", "Glob", "Grep"],
+        max_turns: 40,
+    },
+    retry: {
+        // failed → queued, bounded (§5). 3 attempts feeds router R5 (escalate a
+        // tier after ≥2 attempts on the current model).
+        max_attempts: 3,
+    },
+    reporting: {
+        // Interval reports every 15 min while Running (§11, Open Decision 10).
+        interval_minutes: 15,
+    },
+    escalation: {
+        // Halt-scope-and-ask on the 2nd same-rule denial (§8.5, Open Decision 11).
+        block_on_denial_count: 2,
+    },
+    pause: {
+        // 60s grace, then SIGTERM, then SIGKILL after 10s (§5).
+        grace_ms: 60_000,
+        sigkill_after_ms: 10_000,
+    },
+    autoLoop: {
+        // Opt-in; default is the static plan-once behavior (autonomous-loop.md §3.5,
+        // AC1). Supervised keeps the human approval gate; runaway ceiling of 5.
+        enabled: false,
+        mode: "supervised",
+        replan_on: "scope",
+        max_replan_cycles: 5,
+    },
+};
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,cAAc,GAAuB;IAChD,iBAAiB,EAAE,CAAC;IACpB,6EAA6E;IAC7E,mDAAmD;IACnD,wBAAwB,EAAE,CAAC;IAC3B,MAAM,EAAE;QACN,OAAO,EAAE,GAAG;QACZ,YAAY,EAAE,GAAG;QACjB,gBAAgB,EAAE,GAAG;QACrB,gBAAgB,EAAE,CAAC;QACnB,iBAAiB,EAAE,GAAG;QACtB,kBAAkB,EAAE,GAAG;KACxB;IACD,OAAO,EAAE;QACP,0EAA0E;QAC1E,kEAAkE;QAClE,KAAK,EAAE;YACL;gBACE,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,oDAAoD;gBACjE,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACxD,KAAK,EAAE,MAAM;aACd;YACD;gBACE,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,gCAAgC;gBAC7C,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE;gBACrD,KAAK,EAAE,QAAQ;aAChB;YACD;gBACE,EAAE,EAAE,IAAI;gBACR,WAAW,EAAE,yBAAyB;gBACtC,IAAI,EAAE,EAAE,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE;gBACpC,KAAK,EAAE,OAAO;aACf;SACF;QACD,aAAa,EAAE,QAAQ;QACvB,0EAA0E;QAC1E,WAAW,EAAE,IAAI;KAClB;IACD,MAAM,EAAE;QACN,yEAAyE;QACzE,8EAA8E;QAC9E,oBAAoB,EAAE,EAAE;QACxB,aAAa,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,CAAC;QACpE,8EAA8E;QAC9E,uEAAuE;QACvE,WAAW,EAAE;YACX,UAAU,EAAE,kBAAkB;YAC9B,GAAG,EAAE,kBAAkB;YACvB,QAAQ,EAAE,kBAAkB;YAC5B,KAAK,EAAE,kBAAkB;YACzB,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,MAAM;YAClB,OAAO,EAAE,kBAAkB;SAC5B;KACF;IACD,MAAM,EAAE;QACN,QAAQ,EAAE;YACR,aAAa,EAAE,iCAAiC;YAChD,YAAY,EAAE,cAAc;YAC5B,WAAW,EAAE,2BAA2B;SACzC;QACD,UAAU,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;QACxD,cAAc,EAAE,SAAS;KAC1B;IACD,OAAO,EAAE;QACP,yEAAyE;QACzE,6DAA6D;QAC7D,KAAK,EAAE,MAAM;QACb,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QACvC,SAAS,EAAE,EAAE;KACd;IACD,KAAK,EAAE;QACL,wEAAwE;QACxE,gDAAgD;QAChD,YAAY,EAAE,CAAC;KAChB;IACD,SAAS,EAAE;QACT,uEAAuE;QACvE,gBAAgB,EAAE,EAAE;KACrB;IACD,UAAU,EAAE;QACV,2EAA2E;QAC3E,qBAAqB,EAAE,CAAC;KACzB;IACD,KAAK,EAAE;QACL,wDAAwD;QACxD,QAAQ,EAAE,MAAM;QAChB,gBAAgB,EAAE,MAAM;KACzB;IACD,QAAQ,EAAE;QACR,6EAA6E;QAC7E,wEAAwE;QACxE,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,OAAO;QAClB,iBAAiB,EAAE,CAAC;KACrB;CACF,CAAC"}

package/dist/escalation.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Escalation manager (§8.5). The safety layer denies a blocked tool call and
+ * notifies this manager. On the Nth same-rule denial within one task
+ * (`escalation.block_on_denial_count`, default 2), the task transitions to
+ * `blocked`, an {@link Escalation} is raised for the operator, and the run keeps
+ * going elsewhere. Resolution (deny-&-instruct / approve-once / skip) is applied
+ * by the orchestrator, which owns task-state transitions.
+ *
+ * Default posture is halt-scope-and-ask, never log-and-skip: silent skips hide
+ * broken assumptions.
+ */
+import type { Escalation, OrchestratorConfig } from "@orc-brain/shared";
+import type { Store } from "./store/index.js";
+import type { EventBus } from "./eventBus.js";
+/** A single denial the safety layer reports for escalation accounting. */
+export interface DenialInput {
+    run_id: string | null;
+    task_id: string | null;
+    rule_id: string;
+    tool_name: string;
+    /** Redacted, truncated tool input for operator display (§8.6). */
+    input_summary: string;
+    stated_intent?: string | null;
+}
+/** Detects blockable denials and raises escalations (§8.5). */
+export declare class EscalationManager {
+    private readonly store;
+    private readonly bus;
+    private readonly config;
+    /** Per-(task,rule) denial counter for the current run session. */
+    private readonly counts;
+    /** Invoked when a task must be blocked so a worker can be interrupted. */
+    onBlock?: (taskId: string, escalation: Escalation) => void;
+    constructor(store: Store, bus: EventBus, config: OrchestratorConfig);
+    /**
+     * Records a denial. Returns the raised {@link Escalation} when this denial
+     * crossed the block threshold, otherwise null.
+     */
+    recordDenial(d: DenialInput): Escalation | null;
+    /** Clears the denial counters for a task (e.g., after resolution). */
+    clearTask(taskId: string): void;
+}
+//# sourceMappingURL=escalation.d.ts.map

package/dist/escalation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation.d.ts","sourceRoot":"","sources":["../src/escalation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,+DAA+D;AAC/D,qBAAa,iBAAiB;IAO1B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,MAAM;IARzB,kEAAkE;IAClE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,0EAA0E;IAC1E,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;gBAGxC,KAAK,EAAE,KAAK,EACZ,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,kBAAkB;IAG7C;;;OAGG;IACH,YAAY,CAAC,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,IAAI;IA8C/C,sEAAsE;IACtE,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;CAKhC"}

package/dist/escalation.js

@@ -0,0 +1,81 @@
+/**
+ * Escalation manager (§8.5). The safety layer denies a blocked tool call and
+ * notifies this manager. On the Nth same-rule denial within one task
+ * (`escalation.block_on_denial_count`, default 2), the task transitions to
+ * `blocked`, an {@link Escalation} is raised for the operator, and the run keeps
+ * going elsewhere. Resolution (deny-&-instruct / approve-once / skip) is applied
+ * by the orchestrator, which owns task-state transitions.
+ *
+ * Default posture is halt-scope-and-ask, never log-and-skip: silent skips hide
+ * broken assumptions.
+ */
+/** Detects blockable denials and raises escalations (§8.5). */
+export class EscalationManager {
+    store;
+    bus;
+    config;
+    /** Per-(task,rule) denial counter for the current run session. */
+    counts = new Map();
+    /** Invoked when a task must be blocked so a worker can be interrupted. */
+    onBlock;
+    constructor(store, bus, config) {
+        this.store = store;
+        this.bus = bus;
+        this.config = config;
+    }
+    /**
+     * Records a denial. Returns the raised {@link Escalation} when this denial
+     * crossed the block threshold, otherwise null.
+     */
+    recordDenial(d) {
+        if (!d.task_id || !d.run_id)
+            return null;
+        const key = `${d.task_id}:${d.rule_id}`;
+        const n = (this.counts.get(key) ?? 0) + 1;
+        this.counts.set(key, n);
+        if (n < this.config.escalation.block_on_denial_count)
+            return null;
+        // Avoid raising a duplicate escalation for an already-blocked task+rule.
+        const existing = this.store
+            .listOpenEscalations(d.run_id)
+            .find((e) => e.task_id === d.task_id && e.rule_id === d.rule_id);
+        if (existing)
+            return null;
+        this.store.updateTask(d.task_id, { status: "blocked" });
+        const escalation = this.store.insertEscalation({
+            run_id: d.run_id,
+            task_id: d.task_id,
+            rule_id: d.rule_id,
+            tool_name: d.tool_name,
+            input_summary: d.input_summary,
+            stated_intent: d.stated_intent ?? null,
+        });
+        this.bus.publish({
+            type: "escalation.new",
+            run_id: d.run_id,
+            payload: {
+                escalation_id: escalation.id,
+                task_id: d.task_id,
+                rule_id: d.rule_id,
+                tool_name: d.tool_name,
+                input_summary: d.input_summary,
+                stated_intent: escalation.stated_intent ?? undefined,
+            },
+        });
+        this.bus.publish({
+            type: "task.state",
+            run_id: d.run_id,
+            payload: { task_id: d.task_id, scope_id: "", status: "blocked" },
+        });
+        this.onBlock?.(d.task_id, escalation);
+        return escalation;
+    }
+    /** Clears the denial counters for a task (e.g., after resolution). */
+    clearTask(taskId) {
+        for (const key of [...this.counts.keys()]) {
+            if (key.startsWith(`${taskId}:`))
+                this.counts.delete(key);
+        }
+    }
+}
+//# sourceMappingURL=escalation.js.map

package/dist/escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escalation.js","sourceRoot":"","sources":["../src/escalation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAiBH,+DAA+D;AAC/D,MAAM,OAAO,iBAAiB;IAOT;IACA;IACA;IARnB,kEAAkE;IACjD,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,0EAA0E;IAC1E,OAAO,CAAoD;IAE3D,YACmB,KAAY,EACZ,GAAa,EACb,MAA0B;QAF1B,UAAK,GAAL,KAAK,CAAO;QACZ,QAAG,GAAH,GAAG,CAAU;QACb,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ;;;OAGG;IACH,YAAY,CAAC,CAAc;QACzB,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAExB,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,qBAAqB;YAAE,OAAO,IAAI,CAAC;QAElE,yEAAyE;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK;aACxB,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC;aAC7B,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC;QACnE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE1B,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACxD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC7C,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,aAAa,EAAE,CAAC,CAAC,aAAa;YAC9B,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;SACvC,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YACf,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,CAAC,EAAE;gBAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,SAAS,EAAE,CAAC,CAAC,SAAS;gBACtB,aAAa,EAAE,CAAC,CAAC,aAAa;gBAC9B,aAAa,EAAE,UAAU,CAAC,aAAa,IAAI,SAAS;aACrD;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;YACf,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE;SACjE,CAAC,CAAC;QAEH,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACtC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,sEAAsE;IACtE,SAAS,CAAC,MAAc;QACtB,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;CACF"}

package/dist/eventBus.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Event bus (§3): in-process typed pub/sub. Every event is *synchronously
+ * appended to the store before fan-out*, so the persisted log is never behind
+ * the UI. The store assigns the monotonic `seq` used as the SSE `id:` for
+ * Last-Event-ID resume.
+ */
+import type { BusEvent } from "@orc-brain/shared";
+import type { Store } from "./store/index.js";
+/** A subscriber receives every published event, in order. */
+export type BusSubscriber = (event: BusEvent) => void;
+/** Input to {@link EventBus.publish}: everything but the store-assigned `seq`. */
+export type PublishInput = Omit<BusEvent, "seq" | "ts"> & {
+    ts?: string;
+};
+/** Typed in-process event bus backed by the persistent store. */
+export declare class EventBus {
+    private readonly store;
+    private readonly subscribers;
+    constructor(store: Store);
+    /** Subscribes to all events; returns an unsubscribe function. */
+    subscribe(fn: BusSubscriber): () => void;
+    /**
+     * Persists then fans out an event. Persistence happens first and
+     * synchronously (better-sqlite3), guaranteeing the store is never behind a
+     * delivered event. Subscriber exceptions are isolated so one bad listener
+     * cannot break delivery to the others or the caller.
+     */
+    publish(input: PublishInput): BusEvent;
+}
+//# sourceMappingURL=eventBus.d.ts.map

package/dist/eventBus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventBus.d.ts","sourceRoot":"","sources":["../src/eventBus.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,CAAC;AAEtD,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,iEAAiE;AACjE,qBAAa,QAAQ;IAGP,OAAO,CAAC,QAAQ,CAAC,KAAK;IAFlC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;gBAE3B,KAAK,EAAE,KAAK;IAEzC,iEAAiE;IACjE,SAAS,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,IAAI;IAKxC;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,QAAQ;CAevC"}

package/dist/eventBus.js

@@ -0,0 +1,42 @@
+/**
+ * Event bus (§3): in-process typed pub/sub. Every event is *synchronously
+ * appended to the store before fan-out*, so the persisted log is never behind
+ * the UI. The store assigns the monotonic `seq` used as the SSE `id:` for
+ * Last-Event-ID resume.
+ */
+/** Typed in-process event bus backed by the persistent store. */
+export class EventBus {
+    store;
+    subscribers = new Set();
+    constructor(store) {
+        this.store = store;
+    }
+    /** Subscribes to all events; returns an unsubscribe function. */
+    subscribe(fn) {
+        this.subscribers.add(fn);
+        return () => this.subscribers.delete(fn);
+    }
+    /**
+     * Persists then fans out an event. Persistence happens first and
+     * synchronously (better-sqlite3), guaranteeing the store is never behind a
+     * delivered event. Subscriber exceptions are isolated so one bad listener
+     * cannot break delivery to the others or the caller.
+     */
+    publish(input) {
+        const ts = input.ts ?? new Date().toISOString();
+        const withoutSeq = { ...input, ts };
+        const seq = this.store.appendEvent(withoutSeq);
+        const event = { ...withoutSeq, seq };
+        for (const fn of this.subscribers) {
+            try {
+                fn(event);
+            }
+            catch (err) {
+                // Never let a subscriber failure propagate to the publisher.
+                console.error("[eventBus] subscriber threw:", err);
+            }
+        }
+        return event;
+    }
+}
+//# sourceMappingURL=eventBus.js.map

package/dist/eventBus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eventBus.js","sourceRoot":"","sources":["../src/eventBus.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,iEAAiE;AACjE,MAAM,OAAO,QAAQ;IAGU;IAFZ,WAAW,GAAG,IAAI,GAAG,EAAiB,CAAC;IAExD,YAA6B,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;IAAG,CAAC;IAE7C,iEAAiE;IACjE,SAAS,CAAC,EAAiB;QACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzB,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAmB;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,UAAU,GAAG,EAAE,GAAG,KAAK,EAAE,EAAE,EAA2B,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,EAAE,GAAG,UAAU,EAAE,GAAG,EAAc,CAAC;QACjD,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,CAAC;YACZ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,6DAA6D;gBAC7D,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/goalJudge.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Hybrid goal-satisfaction evaluator (.specs/active/autonomous-loop.md §3.4, G3;
+ * spec §4 success_criteria). Decides whether a run's success criteria are met so
+ * the autonomous controller can finish (or trigger another re-plan cycle),
+ * replacing the DAG-exhaustion-only check in `Orchestrator.maybeFinish`.
+ *
+ * Two passes:
+ *   1. Deterministic — criteria written as `` `$ <cmd>` `` are shell checks. Each
+ *      is routed through the SAME {@link SafetyLayer} as a worker (Golden Rule 2,
+ *      R3): a denied command is NEVER executed — it is recorded as unmet and
+ *      audited. An allowed command runs; exit 0 = met.
+ *   2. Judge — remaining prose criteria go to an Opus plan-mode (read-only)
+ *      session that inspects the repo and returns met/unmet + rationale.
+ *
+ * Deterministic failures are authoritative: the judge can never flip a failing
+ * command check to satisfied (AC4).
+ */
+import type { Environment, OrchestratorConfig } from "@orc-brain/shared";
+import { SafetyLayer } from "./safety/index.js";
+import type { AuditSink } from "./safety/index.js";
+import type { PlanQueryFn } from "./planner.js";
+/** Runs a shell command in `cwd`; returns its exit code (non-zero on failure). */
+export type CommandRunner = (command: string, cwd: string) => {
+    exitCode: number;
+};
+/** The evaluator's verdict for a run's criteria. */
+export interface GoalVerdict {
+    satisfied: boolean;
+    /** Descriptions of the criteria still unmet (empty when satisfied). */
+    unmet: string[];
+    /** Human-readable explanation, joined across criteria. */
+    rationale: string;
+}
+/** Inputs for one evaluation pass over a goal's aggregated criteria. */
+export interface EvaluateInput {
+    run_id: string | null;
+    goal_id: string;
+    title: string;
+    objective: string;
+    cwd: string;
+    environment: Environment;
+    /** Aggregated success-criteria descriptions (goal + verified scopes). */
+    criteria: string[];
+}
+/** A per-criterion judge result. */
+interface JudgeResult {
+    met: boolean;
+    rationale: string;
+}
+/**
+ * Parses an executable criterion (Open Decision 2): a description of the form
+ * `` `$ <cmd>` `` or `$ <cmd>` marks a deterministic shell check. Returns the
+ * command, or null when the criterion is prose for the judge.
+ */
+export declare function parseCommandCriterion(description: string): string | null;
+/** Builds the judge prompt for prose criteria (read-only, plan-mode session). */
+export declare function buildJudgePrompt(title: string, objective: string, criteria: string[]): string;
+/** The hybrid evaluator (autonomous-loop.md §3.4). */
+export declare class GoalJudge {
+    private readonly config;
+    private readonly safety;
+    private readonly audit;
+    private readonly runCommand;
+    private readonly judgeQueryFn?;
+    constructor(config: OrchestratorConfig, safety: SafetyLayer, audit: AuditSink, opts?: {
+        runCommand?: CommandRunner;
+        judgeQueryFn?: PlanQueryFn;
+    });
+    /**
+     * Evaluates a run's criteria (autonomous-loop.md §3.4). Deterministic command
+     * checks run first through the safety layer; remaining prose criteria go to
+     * the judge. `satisfied` is true only when EVERY criterion is met.
+     */
+    evaluate(input: EvaluateInput): Promise<GoalVerdict>;
+    /** Records a blocked criterion command in the audit log (§8.6, AC5). */
+    private auditDenied;
+    /**
+     * Runs the read-only judge session over prose criteria and returns one result
+     * per criterion (in order). If no judge session is wired, or the session
+     * yields nothing usable, every prose criterion defaults to NOT met (strict).
+     */
+    private judgeProse;
+}
+/**
+ * Extracts judge results from an SDK stream: prefers `structured_output.results`,
+ * falls back to a fenced/loose JSON object with a `results` array. Defensive
+ * (no validation library): anything unparseable yields an empty array so callers
+ * treat all criteria as not met.
+ */
+export declare function parseJudgeResults(structured: unknown, finalText: string): JudgeResult[];
+export {};
+//# sourceMappingURL=goalJudge.d.ts.map

package/dist/goalJudge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goalJudge.d.ts","sourceRoot":"","sources":["../src/goalJudge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAKH,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAEnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAsB,MAAM,mBAAmB,CAAC;AAIvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,kFAAkF;AAClF,MAAM,MAAM,aAAa,GAAG,CAC1B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,KACR;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1B,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,WAAW,CAAC;IACzB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,oCAAoC;AACpC,UAAU,WAAW;IACnB,GAAG,EAAE,OAAO,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAGxE;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAAE,GACjB,MAAM,CAmBR;AAgCD,sDAAsD;AACtD,qBAAa,SAAS;IAKlB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,KAAK;IANxB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAc;gBAGzB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,WAAW,EACnB,KAAK,EAAE,SAAS,EACjC,IAAI,GAAE;QAAE,UAAU,CAAC,EAAE,aAAa,CAAC;QAAC,YAAY,CAAC,EAAE,WAAW,CAAA;KAAO;IAMvE;;;;OAIG;IACG,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC;IA4D1D,wEAAwE;IACxE,OAAO,CAAC,WAAW;IAwBnB;;;;OAIG;YACW,UAAU;CA2CzB;AAMD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,OAAO,EACnB,SAAS,EAAE,MAAM,GAChB,WAAW,EAAE,CA2Bf"}