@orc-brain/core 1.0.0

package/dist/goalJudge.js

@@ -0,0 +1,254 @@
+/**
+ * Hybrid goal-satisfaction evaluator (.specs/active/autonomous-loop.md §3.4, G3;
+ * spec §4 success_criteria). Decides whether a run's success criteria are met so
+ * the autonomous controller can finish (or trigger another re-plan cycle),
+ * replacing the DAG-exhaustion-only check in `Orchestrator.maybeFinish`.
+ *
+ * Two passes:
+ *   1. Deterministic — criteria written as `` `$ <cmd>` `` are shell checks. Each
+ *      is routed through the SAME {@link SafetyLayer} as a worker (Golden Rule 2,
+ *      R3): a denied command is NEVER executed — it is recorded as unmet and
+ *      audited. An allowed command runs; exit 0 = met.
+ *   2. Judge — remaining prose criteria go to an Opus plan-mode (read-only)
+ *      session that inspects the repo and returns met/unmet + rationale.
+ *
+ * Deterministic failures are authoritative: the judge can never flip a failing
+ * command check to satisfied (AC4).
+ */
+import { spawnSync } from "node:child_process";
+import { join } from "node:path";
+import { SafetyLayer } from "./safety/index.js";
+import { redactValue } from "./safety/redact.js";
+import { buildSpawnEnv } from "./spawnEnv.js";
+/**
+ * Parses an executable criterion (Open Decision 2): a description of the form
+ * `` `$ <cmd>` `` or `$ <cmd>` marks a deterministic shell check. Returns the
+ * command, or null when the criterion is prose for the judge.
+ */
+export function parseCommandCriterion(description) {
+    const m = description.trim().match(/^`?\s*\$\s+([\s\S]+?)\s*`?$/);
+    return m ? m[1].trim() : null;
+}
+/** Builds the judge prompt for prose criteria (read-only, plan-mode session). */
+export function buildJudgePrompt(title, objective, criteria) {
+    const list = criteria.map((c, i) => `${i}. ${c}`).join("\n");
+    return [
+        "You are the acceptance judge of a local orchestrator. Decide, for each",
+        "success criterion below, whether it is MET by the CURRENT state of the",
+        "repository. You are in read-only mode: inspect with Read/Glob/Grep; do not",
+        "edit anything or run commands. Be strict — if you cannot verify a criterion,",
+        "mark it not met.",
+        "",
+        `# Goal: ${title}`,
+        "## Objective",
+        objective,
+        "",
+        "## Criteria (index. text)",
+        list,
+        "",
+        "Return JSON matching the schema: an object with a `results` array holding,",
+        "for each criterion index in order, `{ met: boolean, rationale: string }`.",
+    ].join("\n");
+}
+/** JSON schema for the judge's structured output (hand-written, no validator dep). */
+const JUDGE_SCHEMA = {
+    type: "object",
+    properties: {
+        results: {
+            type: "array",
+            items: {
+                type: "object",
+                properties: {
+                    met: { type: "boolean" },
+                    rationale: { type: "string" },
+                },
+                required: ["met", "rationale"],
+            },
+        },
+    },
+    required: ["results"],
+};
+/** Default runner: real shell via spawnSync, output discarded, 2-min ceiling. */
+const defaultRunCommand = (command, cwd) => {
+    const res = spawnSync(command, {
+        cwd,
+        shell: true,
+        stdio: "ignore",
+        timeout: 120_000,
+    });
+    return { exitCode: res.status ?? 1 };
+};
+/** The hybrid evaluator (autonomous-loop.md §3.4). */
+export class GoalJudge {
+    config;
+    safety;
+    audit;
+    runCommand;
+    judgeQueryFn;
+    constructor(config, safety, audit, opts = {}) {
+        this.config = config;
+        this.safety = safety;
+        this.audit = audit;
+        this.runCommand = opts.runCommand ?? defaultRunCommand;
+        this.judgeQueryFn = opts.judgeQueryFn;
+    }
+    /**
+     * Evaluates a run's criteria (autonomous-loop.md §3.4). Deterministic command
+     * checks run first through the safety layer; remaining prose criteria go to
+     * the judge. `satisfied` is true only when EVERY criterion is met.
+     */
+    async evaluate(input) {
+        const ctx = {
+            run_id: input.run_id,
+            task_id: null,
+            environment: input.environment,
+            cwd: input.cwd,
+            path_allowlist: [join(input.cwd, "**")],
+            path_denylist: [],
+        };
+        const unmet = [];
+        const notes = [];
+        const prose = [];
+        // Pass 1 — deterministic, safety-gated shell checks (R3).
+        for (const desc of input.criteria) {
+            const command = parseCommandCriterion(desc);
+            if (command === null) {
+                prose.push(desc);
+                continue;
+            }
+            const decision = this.safety.evaluateToolCall("Bash", { command }, ctx);
+            if (decision.verdict === "deny" ||
+                decision.verdict === "require_approval") {
+                // Blocked commands are NEVER executed (Golden Rule 2/3) — audited + unmet.
+                this.auditDenied(ctx, command, decision);
+                unmet.push(desc);
+                notes.push(`"${desc}" blocked by safety rule ` +
+                    `${decision.match?.rule_id ?? "policy"} — not executed`);
+                continue;
+            }
+            const { exitCode } = this.runCommand(command, input.cwd);
+            if (exitCode !== 0) {
+                unmet.push(desc);
+                notes.push(`"${desc}" exited ${exitCode}`);
+            }
+        }
+        // Pass 2 — judge the prose criteria (only if any and a session is available).
+        if (prose.length > 0) {
+            const results = await this.judgeProse(input, prose);
+            prose.forEach((desc, i) => {
+                const r = results[i];
+                if (!r || !r.met) {
+                    unmet.push(desc);
+                    notes.push(`"${desc}": ${r?.rationale ?? "judge did not confirm"}`);
+                }
+            });
+        }
+        return {
+            satisfied: unmet.length === 0,
+            unmet,
+            rationale: notes.join("; ") || "all criteria met",
+        };
+    }
+    /** Records a blocked criterion command in the audit log (§8.6, AC5). */
+    auditDenied(ctx, command, decision) {
+        const event = {
+            ts: new Date().toISOString(),
+            run_id: ctx.run_id,
+            task_id: ctx.task_id,
+            session_id: null,
+            kind: "hook_block",
+            tool_name: "Bash",
+            tool_input_hash: null,
+            tool_input: redactValue({ command }),
+            decision: "deny",
+            rule_id: decision.match?.rule_id ?? "policy",
+            detail: {
+                source: "goal_judge_criterion",
+                reason: decision.match?.reason ?? "policy",
+            },
+        };
+        this.audit.record(event);
+    }
+    /**
+     * Runs the read-only judge session over prose criteria and returns one result
+     * per criterion (in order). If no judge session is wired, or the session
+     * yields nothing usable, every prose criterion defaults to NOT met (strict).
+     */
+    async judgeProse(input, criteria) {
+        if (!this.judgeQueryFn)
+            return criteria.map(() => notMet("no judge session"));
+        const options = {
+            cwd: input.cwd,
+            model: this.config.planner.model,
+            permissionMode: "plan",
+            allowedTools: this.config.planner.allowed_tools,
+            maxTurns: this.config.planner.max_turns,
+            outputFormat: { type: "json_schema", schema: JUDGE_SCHEMA },
+            env: buildSpawnEnv(),
+        };
+        const prompt = buildJudgePrompt(input.title, input.objective, criteria);
+        const q = this.judgeQueryFn({ prompt, options });
+        let structured;
+        let finalText = "";
+        for await (const message of q) {
+            if (message.type === "assistant") {
+                for (const block of (message.message?.content ?? [])) {
+                    const b = block;
+                    if (b.type === "text" && b.text)
+                        finalText += b.text;
+                }
+            }
+            else if (message.type === "result") {
+                if (message.subtype !== "success") {
+                    return criteria.map(() => notMet(`judge session failed`));
+                }
+                structured = message
+                    .structured_output;
+                finalText = message.result ?? finalText;
+            }
+        }
+        const parsed = parseJudgeResults(structured, finalText);
+        // Missing entries default to not met (strict): align by index.
+        return criteria.map((_, i) => parsed[i] ?? notMet("judge omitted this criterion"));
+    }
+}
+function notMet(rationale) {
+    return { met: false, rationale };
+}
+/**
+ * Extracts judge results from an SDK stream: prefers `structured_output.results`,
+ * falls back to a fenced/loose JSON object with a `results` array. Defensive
+ * (no validation library): anything unparseable yields an empty array so callers
+ * treat all criteria as not met.
+ */
+export function parseJudgeResults(structured, finalText) {
+    const fromObj = (obj) => {
+        const results = obj?.results;
+        if (!Array.isArray(results))
+            return [];
+        return results.map((r) => ({
+            met: r?.met === true,
+            rationale: typeof r?.rationale === "string"
+                ? r.rationale
+                : "",
+        }));
+    };
+    if (structured && typeof structured === "object") {
+        const r = fromObj(structured);
+        if (r.length)
+            return r;
+    }
+    const fenced = finalText.match(/```(?:json)?\s*([\s\S]*?)```/i);
+    const raw = fenced ? fenced[1] : finalText;
+    const start = raw.indexOf("{");
+    const end = raw.lastIndexOf("}");
+    if (start === -1 || end === -1 || end < start)
+        return [];
+    try {
+        return fromObj(JSON.parse(raw.slice(start, end + 1)));
+    }
+    catch {
+        return [];
+    }
+}
+//# sourceMappingURL=goalJudge.js.map

package/dist/goalJudge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goalJudge.js","sourceRoot":"","sources":["../src/goalJudge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGhD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAoC9C;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAC9B,KAAa,EACb,SAAiB,EACjB,QAAkB;IAElB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,OAAO;QACL,wEAAwE;QACxE,wEAAwE;QACxE,4EAA4E;QAC5E,8EAA8E;QAC9E,kBAAkB;QAClB,EAAE;QACF,WAAW,KAAK,EAAE;QAClB,cAAc;QACd,SAAS;QACT,EAAE;QACF,2BAA2B;QAC3B,IAAI;QACJ,EAAE;QACF,4EAA4E;QAC5E,2EAA2E;KAC5E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oBACxB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC9B;gBACD,QAAQ,EAAE,CAAC,KAAK,EAAE,WAAW,CAAC;aAC/B;SACF;KACF;IACD,QAAQ,EAAE,CAAC,SAAS,CAAC;CACb,CAAC;AAEX,iFAAiF;AACjF,MAAM,iBAAiB,GAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IACxD,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,EAAE;QAC7B,GAAG;QACH,KAAK,EAAE,IAAI;QACX,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;AACvC,CAAC,CAAC;AAEF,sDAAsD;AACtD,MAAM,OAAO,SAAS;IAKD;IACA;IACA;IANF,UAAU,CAAgB;IAC1B,YAAY,CAAe;IAE5C,YACmB,MAA0B,EAC1B,MAAmB,EACnB,KAAgB,EACjC,OAAmE,EAAE;QAHpD,WAAM,GAAN,MAAM,CAAoB;QAC1B,WAAM,GAAN,MAAM,CAAa;QACnB,UAAK,GAAL,KAAK,CAAW;QAGjC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC;QACvD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,KAAoB;QACjC,MAAM,GAAG,GAAuB;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,cAAc,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACvC,aAAa,EAAE,EAAE;SAClB,CAAC;QACF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,0DAA0D;QAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;YACxE,IACE,QAAQ,CAAC,OAAO,KAAK,MAAM;gBAC3B,QAAQ,CAAC,OAAO,KAAK,kBAAkB,EACvC,CAAC;gBACD,2EAA2E;gBAC3E,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,KAAK,CAAC,IAAI,CACR,IAAI,IAAI,2BAA2B;oBACjC,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ,iBAAiB,CAC1D,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YACzD,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACnB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,YAAY,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QAED,8EAA8E;QAC9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;gBACxB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;gBACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;oBACjB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjB,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,SAAS,IAAI,uBAAuB,EAAE,CAAC,CAAC;gBACtE,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,SAAS,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC;YAC7B,KAAK;YACL,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB;SAClD,CAAC;IACJ,CAAC;IAED,wEAAwE;IAChE,WAAW,CACjB,GAAuB,EACvB,OAAe,EACf,QAAsB;QAEtB,MAAM,KAAK,GAAe;YACxB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,UAAU,EAAE,IAAI;YAChB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,MAAM;YACjB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;YACpC,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,QAAQ;YAC5C,MAAM,EAAE;gBACN,MAAM,EAAE,sBAAsB;gBAC9B,MAAM,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,QAAQ;aAC3C;SACF,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,UAAU,CACtB,KAAoB,EACpB,QAAkB;QAElB,IAAI,CAAC,IAAI,CAAC,YAAY;YACpB,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAExD,MAAM,OAAO,GAAY;YACvB,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK;YAChC,cAAc,EAAE,MAAM;YACtB,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa;YAC/C,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS;YACvC,YAAY,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE;YAC3D,GAAG,EAAE,aAAa,EAAwC;SAC3D,CAAC;QACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEjD,IAAI,UAAmB,CAAC;QACxB,IAAI,SAAS,GAAG,EAAE,CAAC;QACnB,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,CAA8B,EAAE,CAAC;YAC3D,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACjC,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAc,EAAE,CAAC;oBAClE,MAAM,CAAC,GAAG,KAAwC,CAAC;oBACnD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;wBAAE,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC;gBACvD,CAAC;YACH,CAAC;iBAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBAClC,OAAO,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC5D,CAAC;gBACD,UAAU,GAAI,OAA2C;qBACtD,iBAAiB,CAAC;gBACrB,SAAS,GAAI,OAA+B,CAAC,MAAM,IAAI,SAAS,CAAC;YACnE,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxD,+DAA+D;QAC/D,OAAO,QAAQ,CAAC,GAAG,CACjB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,8BAA8B,CAAC,CAC9D,CAAC;IACJ,CAAC;CACF;AAED,SAAS,MAAM,CAAC,SAAiB;IAC/B,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAmB,EACnB,SAAiB;IAEjB,MAAM,OAAO,GAAG,CAAC,GAAY,EAAiB,EAAE;QAC9C,MAAM,OAAO,GAAI,GAAoC,EAAE,OAAO,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,CAAC;QACvC,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzB,GAAG,EAAG,CAAuB,EAAE,GAAG,KAAK,IAAI;YAC3C,SAAS,EACP,OAAQ,CAA6B,EAAE,SAAS,KAAK,QAAQ;gBAC3D,CAAC,CAAE,CAA2B,CAAC,SAAS;gBACxC,CAAC,CAAC,EAAE;SACT,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;IAEF,IAAI,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK;QAAE,OAAO,EAAE,CAAC;IACzD,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,30 @@
+/** Public surface of the orc-brain orchestrator core. See specs/001-orchestrator-spec.md (source of truth). */
+export * from "./orchestrator.js";
+export * from "./planner.js";
+export * from "./planValidation.js";
+export * from "./goalJudge.js";
+export * from "./autoLoop.js";
+export * from "./escalation.js";
+export * from "./reporting.js";
+export * from "./backpressure.js";
+export * from "./workerManager.js";
+export * from "./modelRouter.js";
+export * from "./budgetTracker.js";
+export * from "./eventBus.js";
+export * from "./spawnEnv.js";
+export * from "./worktrees.js";
+export * from "./pacing.js";
+export * from "./config.js";
+export * from "./system.js";
+export * from "./preflight.js";
+export * from "./safety/index.js";
+export * from "./safety/envClassifier.js";
+export * from "./safety/denyRules.js";
+export * from "./safety/limitSignals.js";
+export * from "./safety/redact.js";
+export * from "./safety/paths.js";
+export * from "./store/index.js";
+export * from "./plugins/secrets.js";
+export * from "./plugins/host.js";
+export * from "./plugins/registry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAE/G,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC"}

package/dist/index.js

@@ -0,0 +1,30 @@
+/** Public surface of the orc-brain orchestrator core. See specs/001-orchestrator-spec.md (source of truth). */
+export * from "./orchestrator.js";
+export * from "./planner.js";
+export * from "./planValidation.js";
+export * from "./goalJudge.js";
+export * from "./autoLoop.js";
+export * from "./escalation.js";
+export * from "./reporting.js";
+export * from "./backpressure.js";
+export * from "./workerManager.js";
+export * from "./modelRouter.js";
+export * from "./budgetTracker.js";
+export * from "./eventBus.js";
+export * from "./spawnEnv.js";
+export * from "./worktrees.js";
+export * from "./pacing.js";
+export * from "./config.js";
+export * from "./system.js";
+export * from "./preflight.js";
+export * from "./safety/index.js";
+export * from "./safety/envClassifier.js";
+export * from "./safety/denyRules.js";
+export * from "./safety/limitSignals.js";
+export * from "./safety/redact.js";
+export * from "./safety/paths.js";
+export * from "./store/index.js";
+export * from "./plugins/secrets.js";
+export * from "./plugins/host.js";
+export * from "./plugins/registry.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAE/G,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,mBAAmB,CAAC;AAClC,cAAc,uBAAuB,CAAC"}

package/dist/modelRouter.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Model router (§6): deterministic, rule-based, explainable, reproducible. No
+ * LLM in the routing decision itself — the Planner already labelled each task
+ * with `task_type`. Every decision carries the rule that fired and a reason,
+ * emitted as a `routing_decision` audit event by the caller.
+ */
+import type { BudgetState, ModelName, ModelTier, RoutingConfig, TaskType } from "@orc-brain/shared";
+/** Output of a routing decision. */
+export interface RoutingDecision {
+    model: ModelName;
+    rule_id: string;
+    reason: string;
+    /** Set when R7 routed around a rate-limited model. */
+    degraded?: boolean;
+    /** Set when R5 escalated after repeated failures. */
+    escalated_from?: ModelName;
+}
+/** Dynamic signals that influence routing beyond the static table. */
+export interface RoutingContext {
+    /** Current budget backpressure state (R6). */
+    budget_state?: BudgetState;
+    /** Models currently quarantined by rate limits (R7). */
+    quarantined?: ModelName[];
+    /** Attempt count for escalation (R5). */
+    attempt?: number;
+    /** Model used on the previous attempt, for escalation bumps (R5). */
+    previous_model?: ModelName;
+}
+/**
+ * Computes the model for a task (§6). Rule precedence:
+ * R-F forced model → R1 scope pin → R5 escalation → R6 budget warn cap →
+ * R7 rate-limit reroute → R2–R4 static table.
+ */
+export declare function routeModel(input: {
+    task_type: TaskType;
+    model_tier: ModelTier;
+    routing: RoutingConfig;
+    ctx?: RoutingContext;
+}): RoutingDecision;
+//# sourceMappingURL=modelRouter.d.ts.map

package/dist/modelRouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelRouter.d.ts","sourceRoot":"","sources":["../src/modelRouter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,SAAS,EACT,SAAS,EACT,aAAa,EACb,QAAQ,EACT,MAAM,mBAAmB,CAAC;AAE3B,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,sDAAsD;IACtD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,cAAc,CAAC,EAAE,SAAS,CAAC;CAC5B;AAED,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,8CAA8C;IAC9C,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B,wDAAwD;IACxD,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,yCAAyC;IACzC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,cAAc,CAAC,EAAE,SAAS,CAAC;CAC5B;AA8CD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE;IAChC,SAAS,EAAE,QAAQ,CAAC;IACpB,UAAU,EAAE,SAAS,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,GAAG,CAAC,EAAE,cAAc,CAAC;CACtB,GAAG,eAAe,CAsElB"}

package/dist/modelRouter.js

@@ -0,0 +1,114 @@
+/**
+ * Model router (§6): deterministic, rule-based, explainable, reproducible. No
+ * LLM in the routing decision itself — the Planner already labelled each task
+ * with `task_type`. Every decision carries the rule that fired and a reason,
+ * emitted as a `routing_decision` audit event by the caller.
+ */
+const TIER_ORDER = ["haiku", "sonnet", "opus"];
+/** Bumps a model up one tier (haiku→sonnet→opus), capped at opus. */
+function bumpTier(model) {
+    const idx = TIER_ORDER.indexOf(model);
+    if (idx < 0)
+        return "opus";
+    return TIER_ORDER[Math.min(idx + 1, TIER_ORDER.length - 1)];
+}
+/** Routes around a quarantined model (R7): opus→sonnet→haiku. */
+function routeAround(model, quarantined) {
+    let m = model;
+    const order = ["opus", "sonnet", "haiku"];
+    let guard = 0;
+    while (quarantined.includes(m) && guard++ < order.length) {
+        const idx = order.indexOf(m);
+        m = order[Math.min(idx + 1, order.length - 1)];
+        if (idx === order.length - 1)
+            break; // haiku is the floor
+    }
+    return m;
+}
+/** Maps a scope tier to a concrete model, or null for `auto`. */
+function tierToModel(tier) {
+    return tier === "auto" ? null : tier;
+}
+/** Selects a model from the static table for a task type (§6 R2–R4). */
+function fromTable(taskType, routing) {
+    for (const rule of routing.rules) {
+        if (rule.when.task_types?.includes(taskType)) {
+            return { model: rule.model, rule_id: rule.id, reason: rule.description };
+        }
+    }
+    return {
+        model: routing.default_model,
+        rule_id: "R0",
+        reason: "default model (no rule matched)",
+    };
+}
+/**
+ * Computes the model for a task (§6). Rule precedence:
+ * R-F forced model → R1 scope pin → R5 escalation → R6 budget warn cap →
+ * R7 rate-limit reroute → R2–R4 static table.
+ */
+export function routeModel(input) {
+    const { task_type, model_tier, routing } = input;
+    const ctx = input.ctx ?? {};
+    // R-F: an operator-forced model wins unconditionally — "always use it" means
+    // no escalation, budget cap, or quarantine reroute may move off it.
+    if (routing.force_model) {
+        return {
+            model: routing.force_model,
+            rule_id: "R-F",
+            reason: `force_model configured: always ${routing.force_model}`,
+        };
+    }
+    const pinned = tierToModel(model_tier);
+    // R1: scope pin wins for the base choice, but escalation/reroute can still act.
+    let base = pinned ?? fromTable(task_type, routing).model;
+    const baseRuleId = pinned ? "R1" : fromTable(task_type, routing).rule_id;
+    const baseReason = pinned
+        ? `scope pinned model_tier=${model_tier}`
+        : fromTable(task_type, routing).reason;
+    let decision = {
+        model: base,
+        rule_id: baseRuleId,
+        reason: baseReason,
+    };
+    // R5: escalation after ≥2 attempts on the current model, bump one tier.
+    if ((ctx.attempt ?? 0) >= 2 && ctx.previous_model) {
+        const bumped = bumpTier(ctx.previous_model);
+        if (bumped !== ctx.previous_model) {
+            decision = {
+                model: bumped,
+                rule_id: "R5",
+                reason: `escalated after ${ctx.attempt} attempts`,
+                escalated_from: ctx.previous_model,
+            };
+            base = bumped;
+        }
+    }
+    // R6: budget warn caps new dispatches at sonnet unless R1 pinned opus.
+    if (ctx.budget_state === "warn" && !(pinned === "opus")) {
+        if (base === "opus") {
+            decision = {
+                ...decision,
+                model: "sonnet",
+                rule_id: "R6",
+                reason: "budget warn: capped at sonnet",
+            };
+            base = "sonnet";
+        }
+    }
+    // R7: quarantined model → route around, flag degraded.
+    const quarantined = ctx.quarantined ?? [];
+    if (quarantined.includes(base)) {
+        const rerouted = routeAround(base, quarantined);
+        if (rerouted !== base) {
+            decision = {
+                model: rerouted,
+                rule_id: "R7",
+                reason: `${base} rate-limited: routed around`,
+                degraded: true,
+            };
+        }
+    }
+    return decision;
+}
+//# sourceMappingURL=modelRouter.js.map

package/dist/modelRouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelRouter.js","sourceRoot":"","sources":["../src/modelRouter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAiCH,MAAM,UAAU,GAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;AAE5D,qEAAqE;AACrE,SAAS,QAAQ,CAAC,KAAgB;IAChC,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAC;AAC/D,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,KAAgB,EAAE,WAAwB;IAC7D,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,MAAM,KAAK,GAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAC;QAChD,IAAI,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,qBAAqB;IAC5D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iEAAiE;AACjE,SAAS,WAAW,CAAC,IAAe;IAClC,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAChB,QAAkB,EAClB,OAAsB;IAEtB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,aAAa;QAC5B,OAAO,EAAE,IAAI;QACb,MAAM,EAAE,iCAAiC;KAC1C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAK1B;IACC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACjD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,EAAE,CAAC;IAE5B,6EAA6E;IAC7E,oEAAoE;IACpE,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,WAAW;YAC1B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,kCAAkC,OAAO,CAAC,WAAW,EAAE;SAChE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,gFAAgF;IAChF,IAAI,IAAI,GAAG,MAAM,IAAI,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IACzE,MAAM,UAAU,GAAG,MAAM;QACvB,CAAC,CAAC,2BAA2B,UAAU,EAAE;QACzC,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC;IAEzC,IAAI,QAAQ,GAAoB;QAC9B,KAAK,EAAE,IAAI;QACX,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,UAAU;KACnB,CAAC;IAEF,wEAAwE;IACxE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5C,IAAI,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,CAAC;YAClC,QAAQ,GAAG;gBACT,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,mBAAmB,GAAG,CAAC,OAAO,WAAW;gBACjD,cAAc,EAAE,GAAG,CAAC,cAAc;aACnC,CAAC;YACF,IAAI,GAAG,MAAM,CAAC;QAChB,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,IAAI,GAAG,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;QACxD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,QAAQ,GAAG;gBACT,GAAG,QAAQ;gBACX,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,+BAA+B;aACxC,CAAC;YACF,IAAI,GAAG,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IAC1C,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,QAAQ,GAAG;gBACT,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,GAAG,IAAI,8BAA8B;gBAC7C,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}