@ordewell/core 0.10.2 → 0.10.3

package/dist/{IRunner---PfQVdc.d.mts → IRunner-QBdYcatb.d.ts}

@@ -1,5 +1,5 @@
 import { ChildProcess } from 'child_process';
-import { aq as UsageRecord, ac as SubagentOutcome, c as DiscoveredModel, a1 as RunnerId, al as TaskSkillSnapshot } from './Task-AfA1m4qW.mjs';
+import { a2 as RunnerId, ar as UsageRecord, ad as SubagentOutcome, d as DiscoveredModel, am as TaskSkillSnapshot } from './Task-CRVIqSfy.js';
 import { z } from 'zod/v4';
 
 /**
@@ -463,6 +463,198 @@ interface IApproval {
 /** Denies everything. The safe default when a surface wires no approval channel. */
 declare const DENY_ALL: IApproval;
 
+interface CatalogModel {
+    id: string;
+    name: string;
+    description: string;
+    pricing: {
+        prompt: string;
+        completion: string;
+    };
+    contextLength: number;
+}
+declare class ModelCatalog {
+    static fetchModels(apiKey: string, baseUrl?: string, fetchImpl?: typeof fetch): Promise<CatalogModel[]>;
+    /**
+     * Delete the on-disk catalog cache for a base URL so the next fetch re-runs.
+     * Used by the resolver's `invalidate()` in production (no injected fetch);
+     * best-effort — a missing file or unreadable dir is a no-op.
+     */
+    static clearCache(baseUrl?: string): void;
+    private static readCache;
+    private static writeCache;
+}
+
+interface ModelShortcut {
+    label: string;
+    id: string;
+    provider: string;
+    description: string;
+    pricing?: string;
+}
+declare const ORCHESTRATOR_SHORTCUTS: ModelShortcut[];
+declare function resolveModelShortcut(input: string, shortcuts: ModelShortcut[]): string | null;
+/**
+ * Resolves a value to a model id ONLY when it is in the supplied catalog
+ * option list — either directly or via a shortcut label. Free-typed, unknown,
+ * or not-currently-available values return null, so callers never store an id
+ * the user couldn't have selected from the list. Keeps model-setting list-only.
+ */
+declare function knownModelId(value: string, optionIds: string[], shortcuts: ModelShortcut[]): string | null;
+
+type ProviderModelLists = Record<string, string[]>;
+interface OrchestratorOption {
+    id: string;
+    label: string;
+    provider: string;
+    apiProvider: AiProvider;
+    description?: string;
+    pricing?: string;
+    /** The model's context window when the catalog reports one (#49). */
+    contextWindow?: number;
+}
+
+interface FetchAllProviderModelsOptions {
+    apiKeys: Record<string, string>;
+    baseUrls: Record<string, string>;
+    fetchImpl?: typeof fetch;
+}
+type AllProviderModels = Record<string, CatalogModel[]>;
+/**
+ * Result of a picker-catalog fetch fan-out: the per-provider model lists plus
+ * the per-provider failures. `errors` is keyed by provider id and holds the
+ * failure message for any provider whose catalog fetch rejected — the seam the
+ * surfaces (CLI, VS Code) use to flag "this configured provider didn't work"
+ * rather than silently showing a short list.
+ */
+interface ProviderModelsResult {
+    models: AllProviderModels;
+    errors: Record<string, string>;
+}
+/** The provider config fields the discovery fan-out needs. */
+interface ProviderCredentialSource {
+    getProviderApiKey(provider: AiProvider): string;
+    getProviderBaseUrl(provider: AiProvider): string;
+    openaiCompatibleBaseUrl: string;
+}
+/**
+ * Collect the API keys and base URLs the picker fan-out should probe, applying
+ * the single "configured" policy shared by every surface (CLI + VS Code):
+ *  - a preset is discovered only when it has an API key (OpenRouter included —
+ *    its public catalog is not probed keyless, matching the product rule that
+ *    only key-configured providers appear);
+ *  - `openai_compatible` is discovered only when an explicit endpoint is set
+ *    (keyless local servers like ollama / LM Studio).
+ * Base URLs are handed through only for providers that pass the gate, so the
+ * fan-out never touches an unconfigured third-party endpoint.
+ */
+declare function collectProviderCredentials(config: ProviderCredentialSource): {
+    apiKeys: Record<string, string>;
+    baseUrls: Record<string, string>;
+};
+declare function fetchAllProviderModels(opts: FetchAllProviderModelsOptions): Promise<ProviderModelsResult>;
+declare function resolveProvider(modelId: string, providerModelLists: Record<string, string[]>): AiProvider | null;
+declare function toOrchestratorOptions(providerModels: AllProviderModels, shortcuts: ModelShortcut[]): OrchestratorOption[];
+
+/** An LLM vendor reached over HTTP. A closed set: each one has its own registration in `ProviderRegistry`. */
+type AiProvider = 'google' | 'openrouter' | 'openai_compatible' | 'openai' | 'xai' | 'groq' | 'deepseek' | 'together' | 'mistral' | 'anthropic' | 'fireworks' | 'perplexity' | 'zhipu' | 'kimi' | 'cerebras' | 'deepinfra' | 'doubao' | 'qwen' | 'hunyuan' | 'baichuan' | 'minimax' | 'yi' | 'stepfun' | 'siliconflow' | 'cohere' | 'novita';
+/**
+ * Who plans: an API vendor, or the id of a runner serving as a *harness
+ * planner* (ADR-0009) — a coding agent CLI already installed on the machine,
+ * driven as the planner over its own programmatic transport and authenticated
+ * by the subscription the user already holds. Runners sit in the provider axis
+ * deliberately: "what plans for me?" is one question, and it belongs in one
+ * setting. The runner half is open — any built-in runner with a connector can
+ * plan — so it is checked against the registry, not by the type:
+ * `isApiProvider` narrows to a vendor, `isCliProvider` tells a harness planner.
+ */
+type PlannerBackendId = AiProvider | RunnerId;
+interface IConfig {
+    aiProvider: PlannerBackendId;
+    apiKey: string;
+    planningModel: string;
+    enabledRunners: string[];
+    maxParallelSessions: number;
+    researchEnabled: boolean;
+    researchMaxSteps: number;
+    researchMaxFileSize: number;
+    openAiBaseUrl: string;
+    openAiApiKey: string;
+    /** Provider keys + base URL the ModelResolver uses to fetch the picker catalogs. */
+    openrouterKey: string;
+    geminiKey: string;
+    geminiBaseUrl?: string;
+    /** Base URL + API key for a user-provided OpenAI-compatible endpoint (ollama, vLLM, LM Studio, etc.). */
+    openaiCompatibleBaseUrl: string;
+    openaiCompatibleApiKey: string;
+    orchestratorModel: string;
+    geminiModel: string;
+    /** Model for research subagents (issue #34); defaults to the (cheap) planner model. */
+    researchSubagentModel: string;
+    /**
+     * Thinking effort / model variant for a harness planner (ADR-0009), chosen
+     * from the agent's own discovered variants. Separate from the per-task
+     * efforts the plan carries — this one is the planner's own dial.
+     */
+    plannerThinkingEffort?: string;
+    planMapEnabled: boolean;
+    autonomousMode: boolean;
+    /**
+     * Run each AI task in its own git worktree and integrate the results on a
+     * per-run branch (ADR-0013). Non-git workspaces fall back to the shared
+     * workspace root regardless of this flag.
+     */
+    worktreeIsolation: boolean;
+    /**
+     * Shell command run in a fresh task worktree instead of symlinking ignored
+     * artifacts from the main worktree — for repos where sharing `node_modules`
+     * or a virtualenv is wrong.
+     */
+    worktreeSetupCommand?: string;
+    /**
+     * Repositories of the repo group listed by hand, relative to the workspace
+     * (ADR-0014). When non-empty the group is exactly these, replacing the
+     * repositories auto-detected directly inside the folder; needed for ones
+     * deeper than that, which are never auto-detected.
+     */
+    workspaceRepos: string[];
+    /**
+     * Extra paths or globs, relative to each repo root, linked from the real repo
+     * into its task worktree where they exist — gitignored local state such as
+     * `*.tfstate` that a task must use, not a copy of.
+     */
+    worktreeLinks: string[];
+    /**
+     * How many conflict repairs one task may go through before its conflict is
+     * left for a person (ADR-0015); 0 turns repair off.
+     */
+    conflictRepairAttempts: number;
+    /**
+     * What to do when planner research reaches outside its default envelope — an
+     * out-of-workspace path, a shell command beyond the auto-allowed read-only
+     * set, an MCP tool. `ask` prompts the user (and denies where no surface can
+     * prompt, such as headless runs); `allow` and `deny` skip the prompt
+     * entirely; `auto` follows {@link autonomousMode} (ADR-0026).
+     */
+    approvalMode: ApprovalModeSetting;
+    /** Allowlist entries granted up front, beside the defaults (ADR-0026, `plannerAllowlist.ts`). */
+    approvalPreApproved: string[];
+    /** Whether the built-in allowlist of read-only command families and MCP tools applies. */
+    approvalDefaults: boolean;
+    /** How many fetches and searches one planner turn may make (ADR-0027). User-only, like the approval settings. */
+    webReadBudget: number;
+    /** Get the base URL for an OpenAI-compatible provider. */
+    getProviderBaseUrl(provider: AiProvider): string;
+    /** Get the API key for a provider. */
+    getProviderApiKey(provider: AiProvider): string;
+    /**
+     * Push the canonical provider routing lists in (sole producer: ModelResolver).
+     * Config consumes them when resolving a chosen model id to its serving API.
+     */
+    setProviderModelLists(lists: ProviderModelLists): void;
+}
+declare function enabledRunners(cfg: IConfig): RunnerId[];
+
 /**
  * The tools of the Ordewell MCP server, per token role (ADR-0022), and the
  * handler interfaces the session side implements to answer them.
@@ -588,24 +780,24 @@ declare const taskOutputInput: z.ZodObject<{
         error: "error";
         command: "command";
         thinking: "thinking";
-        turn_end: "turn_end";
-        message_delivered: "message_delivered";
         thinking_delta: "thinking_delta";
         tool_call: "tool_call";
         tool_result: "tool_result";
         usage: "usage";
         subagent_started: "subagent_started";
         subagent_finished: "subagent_finished";
+        turn_end: "turn_end";
+        message_delivered: "message_delivered";
         runner_loaded: "runner_loaded";
         compaction: "compaction";
         command_output: "command_output";
+        text_delta: "text_delta";
         turn_start: "turn_start";
         message_queued: "message_queued";
         message_removed: "message_removed";
         message_undelivered: "message_undelivered";
         message_handed_over: "message_handed_over";
         task_skills: "task_skills";
-        text_delta: "text_delta";
         approval_requested: "approval_requested";
         approval_decided: "approval_decided";
         approval_withdrawn: "approval_withdrawn";
@@ -1380,6 +1572,12 @@ interface RunnerModelDiscovery {
         modelId: string;
         modelLabel: string;
     }[];
+    /**
+     * The runner names its models `provider/model` (OpenCode), so an id of that
+     * shape can be its own rather than an OpenRouter slug left from a vendor
+     * planner.
+     */
+    providerQualifiedIds?: boolean;
     /**
      * HTTP API discovery — tried BEFORE command discovery. When the runner's CLI
      * has no model-listing subcommand (Claude Code), an API endpoint can serve as
@@ -1423,198 +1621,6 @@ interface RunnerEntry {
     manifest: RunnerManifest;
 }
 
-interface CatalogModel {
-    id: string;
-    name: string;
-    description: string;
-    pricing: {
-        prompt: string;
-        completion: string;
-    };
-    contextLength: number;
-}
-declare class ModelCatalog {
-    static fetchModels(apiKey: string, baseUrl?: string, fetchImpl?: typeof fetch): Promise<CatalogModel[]>;
-    /**
-     * Delete the on-disk catalog cache for a base URL so the next fetch re-runs.
-     * Used by the resolver's `invalidate()` in production (no injected fetch);
-     * best-effort — a missing file or unreadable dir is a no-op.
-     */
-    static clearCache(baseUrl?: string): void;
-    private static readCache;
-    private static writeCache;
-}
-
-interface ModelShortcut {
-    label: string;
-    id: string;
-    provider: string;
-    description: string;
-    pricing?: string;
-}
-declare const ORCHESTRATOR_SHORTCUTS: ModelShortcut[];
-declare function resolveModelShortcut(input: string, shortcuts: ModelShortcut[]): string | null;
-/**
- * Resolves a value to a model id ONLY when it is in the supplied catalog
- * option list — either directly or via a shortcut label. Free-typed, unknown,
- * or not-currently-available values return null, so callers never store an id
- * the user couldn't have selected from the list. Keeps model-setting list-only.
- */
-declare function knownModelId(value: string, optionIds: string[], shortcuts: ModelShortcut[]): string | null;
-
-type ProviderModelLists = Record<string, string[]>;
-interface OrchestratorOption {
-    id: string;
-    label: string;
-    provider: string;
-    apiProvider: AiProvider;
-    description?: string;
-    pricing?: string;
-    /** The model's context window when the catalog reports one (#49). */
-    contextWindow?: number;
-}
-
-interface FetchAllProviderModelsOptions {
-    apiKeys: Record<string, string>;
-    baseUrls: Record<string, string>;
-    fetchImpl?: typeof fetch;
-}
-type AllProviderModels = Record<string, CatalogModel[]>;
-/**
- * Result of a picker-catalog fetch fan-out: the per-provider model lists plus
- * the per-provider failures. `errors` is keyed by provider id and holds the
- * failure message for any provider whose catalog fetch rejected — the seam the
- * surfaces (CLI, VS Code) use to flag "this configured provider didn't work"
- * rather than silently showing a short list.
- */
-interface ProviderModelsResult {
-    models: AllProviderModels;
-    errors: Record<string, string>;
-}
-/** The provider config fields the discovery fan-out needs. */
-interface ProviderCredentialSource {
-    getProviderApiKey(provider: AiProvider): string;
-    getProviderBaseUrl(provider: AiProvider): string;
-    openaiCompatibleBaseUrl: string;
-}
-/**
- * Collect the API keys and base URLs the picker fan-out should probe, applying
- * the single "configured" policy shared by every surface (CLI + VS Code):
- *  - a preset is discovered only when it has an API key (OpenRouter included —
- *    its public catalog is not probed keyless, matching the product rule that
- *    only key-configured providers appear);
- *  - `openai_compatible` is discovered only when an explicit endpoint is set
- *    (keyless local servers like ollama / LM Studio).
- * Base URLs are handed through only for providers that pass the gate, so the
- * fan-out never touches an unconfigured third-party endpoint.
- */
-declare function collectProviderCredentials(config: ProviderCredentialSource): {
-    apiKeys: Record<string, string>;
-    baseUrls: Record<string, string>;
-};
-declare function fetchAllProviderModels(opts: FetchAllProviderModelsOptions): Promise<ProviderModelsResult>;
-declare function resolveProvider(modelId: string, providerModelLists: Record<string, string[]>): AiProvider | null;
-declare function toOrchestratorOptions(providerModels: AllProviderModels, shortcuts: ModelShortcut[]): OrchestratorOption[];
-
-/** An LLM vendor reached over HTTP. A closed set: each one has its own registration in `ProviderRegistry`. */
-type AiProvider = 'google' | 'openrouter' | 'openai_compatible' | 'openai' | 'xai' | 'groq' | 'deepseek' | 'together' | 'mistral' | 'anthropic' | 'fireworks' | 'perplexity' | 'zhipu' | 'kimi' | 'cerebras' | 'deepinfra' | 'doubao' | 'qwen' | 'hunyuan' | 'baichuan' | 'minimax' | 'yi' | 'stepfun' | 'siliconflow' | 'cohere' | 'novita';
-/**
- * Who plans: an API vendor, or the id of a runner serving as a *harness
- * planner* (ADR-0009) — a coding agent CLI already installed on the machine,
- * driven as the planner over its own programmatic transport and authenticated
- * by the subscription the user already holds. Runners sit in the provider axis
- * deliberately: "what plans for me?" is one question, and it belongs in one
- * setting. The runner half is open — any built-in runner with a connector can
- * plan — so it is checked against the registry, not by the type:
- * `isApiProvider` narrows to a vendor, `isCliProvider` tells a harness planner.
- */
-type PlannerBackendId = AiProvider | RunnerId;
-interface IConfig {
-    aiProvider: PlannerBackendId;
-    apiKey: string;
-    planningModel: string;
-    enabledRunners: string[];
-    maxParallelSessions: number;
-    researchEnabled: boolean;
-    researchMaxSteps: number;
-    researchMaxFileSize: number;
-    openAiBaseUrl: string;
-    openAiApiKey: string;
-    /** Provider keys + base URL the ModelResolver uses to fetch the picker catalogs. */
-    openrouterKey: string;
-    geminiKey: string;
-    geminiBaseUrl?: string;
-    /** Base URL + API key for a user-provided OpenAI-compatible endpoint (ollama, vLLM, LM Studio, etc.). */
-    openaiCompatibleBaseUrl: string;
-    openaiCompatibleApiKey: string;
-    orchestratorModel: string;
-    geminiModel: string;
-    /** Model for research subagents (issue #34); defaults to the (cheap) planner model. */
-    researchSubagentModel: string;
-    /**
-     * Thinking effort / model variant for a harness planner (ADR-0009), chosen
-     * from the agent's own discovered variants. Separate from the per-task
-     * efforts the plan carries — this one is the planner's own dial.
-     */
-    plannerThinkingEffort?: string;
-    planMapEnabled: boolean;
-    autonomousMode: boolean;
-    /**
-     * Run each AI task in its own git worktree and integrate the results on a
-     * per-run branch (ADR-0013). Non-git workspaces fall back to the shared
-     * workspace root regardless of this flag.
-     */
-    worktreeIsolation: boolean;
-    /**
-     * Shell command run in a fresh task worktree instead of symlinking ignored
-     * artifacts from the main worktree — for repos where sharing `node_modules`
-     * or a virtualenv is wrong.
-     */
-    worktreeSetupCommand?: string;
-    /**
-     * Repositories of the repo group listed by hand, relative to the workspace
-     * (ADR-0014). When non-empty the group is exactly these, replacing the
-     * repositories auto-detected directly inside the folder; needed for ones
-     * deeper than that, which are never auto-detected.
-     */
-    workspaceRepos: string[];
-    /**
-     * Extra paths or globs, relative to each repo root, linked from the real repo
-     * into its task worktree where they exist — gitignored local state such as
-     * `*.tfstate` that a task must use, not a copy of.
-     */
-    worktreeLinks: string[];
-    /**
-     * How many conflict repairs one task may go through before its conflict is
-     * left for a person (ADR-0015); 0 turns repair off.
-     */
-    conflictRepairAttempts: number;
-    /**
-     * What to do when planner research reaches outside its default envelope — an
-     * out-of-workspace path, a shell command beyond the auto-allowed read-only
-     * set, an MCP tool. `ask` prompts the user (and denies where no surface can
-     * prompt, such as headless runs); `allow` and `deny` skip the prompt
-     * entirely; `auto` follows {@link autonomousMode} (ADR-0026).
-     */
-    approvalMode: ApprovalModeSetting;
-    /** Allowlist entries granted up front, beside the defaults (ADR-0026, `plannerAllowlist.ts`). */
-    approvalPreApproved: string[];
-    /** Whether the built-in allowlist of read-only command families and MCP tools applies. */
-    approvalDefaults: boolean;
-    /** How many fetches and searches one planner turn may make (ADR-0027). User-only, like the approval settings. */
-    webReadBudget: number;
-    /** Get the base URL for an OpenAI-compatible provider. */
-    getProviderBaseUrl(provider: AiProvider): string;
-    /** Get the API key for a provider. */
-    getProviderApiKey(provider: AiProvider): string;
-    /**
-     * Push the canonical provider routing lists in (sole producer: ModelResolver).
-     * Config consumes them when resolving a chosen model id to its serving API.
-     */
-    setProviderModelLists(lists: ProviderModelLists): void;
-}
-declare function enabledRunners(cfg: IConfig): RunnerId[];
-
 declare class RunnerRegistry {
     private readonly runners;
     private readonly unavailableModes;

package/dist/{ModeResolver-DrMU-5lw.d.ts → ModeResolver-BOU90Nn-.d.ts}

@@ -1,4 +1,4 @@
-import { a1 as RunnerId } from './Task-AfA1m4qW.js';
+import { a2 as RunnerId } from './Task-CRVIqSfy.js';
 
 interface RunnerModeInfo {
     id: string;

package/dist/{ModeResolver-CjQ7zqTN.d.mts → ModeResolver-geqjKkLY.d.mts}

@@ -1,4 +1,4 @@
-import { a1 as RunnerId } from './Task-AfA1m4qW.mjs';
+import { a2 as RunnerId } from './Task-CRVIqSfy.mjs';
 
 interface RunnerModeInfo {
     id: string;

package/dist/{Task-AfA1m4qW.d.mts → Task-CRVIqSfy.d.mts}

@@ -932,7 +932,8 @@ interface TaskOutputSummary {
 type TaskType = 'ai' | 'user';
 /**
  * `skipped` is terminal and verdict-less: the task will not be waited for, and
- * nothing it did lands. Its dependents go ahead without it.
+ * nothing it did lands. Its dependents go ahead without it once the work it
+ * waited on is done.
  */
 type TaskStatus = 'pending' | 'approved' | 'in_progress' | 'completed' | 'failed' | 'blocked' | 'awaiting_user' | 'skipped';
 type TaskMode = string;
@@ -1298,9 +1299,17 @@ interface LegacyPlanState {
      * The tasks the user approved to run: every task when they executed the
      * plan, and each one they started or retried themselves since. A command
      * from anyone else starts only these (ADR-0029); a task the planner added
-     * after the approval waits for the user's.
+     * after the approval waits for the user's. Only tasks still in the plan: a
+     * task that leaves takes its approval with it.
      */
     approvedTasks?: string[];
+    /**
+     * The user approved the plan to run: Execute plan, signing off a review, or
+     * autorun's start (ADR-0029, ADR-0030). Kept apart from {@link status},
+     * which surfaces rewrite for display; a user's start of one task approves
+     * that task, not the plan.
+     */
+    approved?: boolean;
 }
 interface Message {
     id: string;
@@ -1314,7 +1323,8 @@ interface TaskSnapshot extends Task {
     retryCount: number;
     finalized: boolean;
 }
-type PlanState = {
+/** The plan a surface reads whole carries the approval record, so it can tell which tasks wait for the user (ADR-0035). */
+type PlanState = ({
     phase: 'planning';
     history: Message[];
     message: string;
@@ -1328,7 +1338,7 @@ type PlanState = {
     goal: string;
     runners: string[];
     status: PlanStatus;
-};
+}) & ApprovalRecord;
 declare function migratePlanState(raw: unknown): PlanState;
 
 declare function createTask(overrides?: Partial<Task>): Task;
@@ -1365,5 +1375,14 @@ interface TaskWithParent {
 declare function flattenTasksWithParents(tasks: readonly Task[]): TaskWithParent[];
 /** A task paused on its runner's usage limit, whether it resumes on its own or waits for the user (#84). */
 declare function pausedOnLimit(task: Readonly<Task>): boolean;
+/** The user's approval record, as a plan carries it (ADR-0029). */
+type ApprovalRecord = Pick<LegacyPlanState, 'approved' | 'approvedTasks'>;
+/**
+ * A task the scheduler leaves for the user (ADR-0035): an AI task not started
+ * yet, in a plan they approved, outside their approval record — the planner
+ * added it since. It starts once they start it or execute the plan. In a plan
+ * they never approved nothing is theirs yet, so nothing is singled out.
+ */
+declare function waitsForApproval(task: Pick<Task, 'id' | 'type' | 'status'>, record: ApprovalRecord): boolean;
 
-export { type ResearchToolType as $, type AttemptUsage as A, BUILTIN_SKILL_NAMES as B, type ConversationMessage as C, DEFAULT_RUNNERS as D, type ExecutionActor as E, type IsolationView as F, type GuardTarget as G, type PlanIsolation as H, type IWorktreeIsolation as I, type PlanState as J, type PlanStatus as K, type LegacyPlanState as L, type ModelUsage as M, type PlanUsage as N, type PlannerUsage as O, type PendingPlanTurn as P, type PrepareIntent as Q, type PreparedTask as R, type PreservedWork as S, type PreviousWork as T, type RefusedRemoval as U, type RepairEvidence as V, type RepoGroupLayout as W, type ResearchLogEntry as X, type ResearchProgress as Y, type ResearchStep as Z, type ResearchStepOutcome as _, type AwaitingReason as a, type RunSettings as a0, type RunnerId as a1, type SetupFailure as a2, type ShadowedSkill as a3, type SkillAppliesTo as a4, type SkillCatalog as a5, type SkillInfo as a6, type SkillLoad as a7, type SkillLoadNotice as a8, type SkillMetadata as a9, createSkillsService as aA, createTask as aB, endAttemptUsage as aC, flattenTasks as aD, flattenTasksWithParents as aE, isAwaitingReason as aF, isMeasured as aG, isSupervisorLevel as aH, isUserMessage as aI, migratePlanState as aJ, partedPromptUsage as aK, pausedOnLimit as aL, planUsage as aM, plannerContextFill as aN, rejoinPlanTree as aO, startAttemptUsage as aP, usageLine as aQ, type SkillSource as aa, SkillsService as ab, type SubagentOutcome as ac, type SupervisorLevel as ad, type Task as ae, type TaskDiffRead as af, type TaskDiffResult as ag, type TaskIsolation as ah, type TaskIsolationState as ai, type TaskModelAssignment as aj, type TaskSkillNotice as ak, type TaskSkillSnapshot as al, type TaskSnapshot as am, type TaskStatus as an, type TreeSnapshot as ao, type UsageLine as ap, type UsageRecord as aq, type UsageTotals as ar, type Verdict as as, type VerificationCheck as at, addAttemptUsage as au, addModelUsage as av, addPlannerUsage as aw, addUsage as ax, addUsageTotals as ay, createEmptyPlan as az, DEFAULT_SUPERVISOR_RETRY_LIMIT as b, type DiscoveredModel as c, type ExecutionCommandName as d, type ExecutionRecord as e, type GuardTrip as f, type IntegrationDisposal as g, type InvalidSkill as h, type IsolationAvailability as i, type IsolationHandoff as j, type IsolationHandoffRepo as k, type IsolationInactiveReason as l, type IsolationLandedTask as m, type IsolationLanding as n, type IsolationMergeBlock as o, type IsolationMergeBlockReason as p, type IsolationMergeResult as q, type IsolationOutcome as r, type IsolationPruneResult as s, type IsolationRemoval as t, type IsolationRepo as u, type IsolationRun as v, type IsolationTaskRecord as w, type IsolationTaskRef as x, type IsolationTaskRepo as y, type IsolationTaskStatus as z };
+export { type ResearchStepOutcome as $, type ApprovalRecord as A, BUILTIN_SKILL_NAMES as B, type ConversationMessage as C, DEFAULT_RUNNERS as D, type ExecutionActor as E, type IsolationTaskStatus as F, type GuardTarget as G, type IsolationView as H, type IWorktreeIsolation as I, type PlanIsolation as J, type PlanState as K, type LegacyPlanState as L, type ModelUsage as M, type PlanStatus as N, type PlanUsage as O, type PendingPlanTurn as P, type PlannerUsage as Q, type PrepareIntent as R, type PreparedTask as S, type PreservedWork as T, type PreviousWork as U, type RefusedRemoval as V, type RepairEvidence as W, type RepoGroupLayout as X, type ResearchLogEntry as Y, type ResearchProgress as Z, type ResearchStep as _, type AttemptUsage as a, type ResearchToolType as a0, type RunSettings as a1, type RunnerId as a2, type SetupFailure as a3, type ShadowedSkill as a4, type SkillAppliesTo as a5, type SkillCatalog as a6, type SkillInfo as a7, type SkillLoad as a8, type SkillLoadNotice as a9, createEmptyPlan as aA, createSkillsService as aB, createTask as aC, endAttemptUsage as aD, flattenTasks as aE, flattenTasksWithParents as aF, isAwaitingReason as aG, isMeasured as aH, isSupervisorLevel as aI, isUserMessage as aJ, migratePlanState as aK, partedPromptUsage as aL, pausedOnLimit as aM, planUsage as aN, plannerContextFill as aO, rejoinPlanTree as aP, startAttemptUsage as aQ, usageLine as aR, waitsForApproval as aS, type SkillMetadata as aa, type SkillSource as ab, SkillsService as ac, type SubagentOutcome as ad, type SupervisorLevel as ae, type Task as af, type TaskDiffRead as ag, type TaskDiffResult as ah, type TaskIsolation as ai, type TaskIsolationState as aj, type TaskModelAssignment as ak, type TaskSkillNotice as al, type TaskSkillSnapshot as am, type TaskSnapshot as an, type TaskStatus as ao, type TreeSnapshot as ap, type UsageLine as aq, type UsageRecord as ar, type UsageTotals as as, type Verdict as at, type VerificationCheck as au, addAttemptUsage as av, addModelUsage as aw, addPlannerUsage as ax, addUsage as ay, addUsageTotals as az, type AwaitingReason as b, DEFAULT_SUPERVISOR_RETRY_LIMIT as c, type DiscoveredModel as d, type ExecutionCommandName as e, type ExecutionRecord as f, type GuardTrip as g, type IntegrationDisposal as h, type InvalidSkill as i, type IsolationAvailability as j, type IsolationHandoff as k, type IsolationHandoffRepo as l, type IsolationInactiveReason as m, type IsolationLandedTask as n, type IsolationLanding as o, type IsolationMergeBlock as p, type IsolationMergeBlockReason as q, type IsolationMergeResult as r, type IsolationOutcome as s, type IsolationPruneResult as t, type IsolationRemoval as u, type IsolationRepo as v, type IsolationRun as w, type IsolationTaskRecord as x, type IsolationTaskRef as y, type IsolationTaskRepo as z };

package/dist/{Task-AfA1m4qW.d.ts → Task-CRVIqSfy.d.ts}

@@ -932,7 +932,8 @@ interface TaskOutputSummary {
 type TaskType = 'ai' | 'user';
 /**
  * `skipped` is terminal and verdict-less: the task will not be waited for, and
- * nothing it did lands. Its dependents go ahead without it.
+ * nothing it did lands. Its dependents go ahead without it once the work it
+ * waited on is done.
  */
 type TaskStatus = 'pending' | 'approved' | 'in_progress' | 'completed' | 'failed' | 'blocked' | 'awaiting_user' | 'skipped';
 type TaskMode = string;
@@ -1298,9 +1299,17 @@ interface LegacyPlanState {
      * The tasks the user approved to run: every task when they executed the
      * plan, and each one they started or retried themselves since. A command
      * from anyone else starts only these (ADR-0029); a task the planner added
-     * after the approval waits for the user's.
+     * after the approval waits for the user's. Only tasks still in the plan: a
+     * task that leaves takes its approval with it.
      */
     approvedTasks?: string[];
+    /**
+     * The user approved the plan to run: Execute plan, signing off a review, or
+     * autorun's start (ADR-0029, ADR-0030). Kept apart from {@link status},
+     * which surfaces rewrite for display; a user's start of one task approves
+     * that task, not the plan.
+     */
+    approved?: boolean;
 }
 interface Message {
     id: string;
@@ -1314,7 +1323,8 @@ interface TaskSnapshot extends Task {
     retryCount: number;
     finalized: boolean;
 }
-type PlanState = {
+/** The plan a surface reads whole carries the approval record, so it can tell which tasks wait for the user (ADR-0035). */
+type PlanState = ({
     phase: 'planning';
     history: Message[];
     message: string;
@@ -1328,7 +1338,7 @@ type PlanState = {
     goal: string;
     runners: string[];
     status: PlanStatus;
-};
+}) & ApprovalRecord;
 declare function migratePlanState(raw: unknown): PlanState;
 
 declare function createTask(overrides?: Partial<Task>): Task;
@@ -1365,5 +1375,14 @@ interface TaskWithParent {
 declare function flattenTasksWithParents(tasks: readonly Task[]): TaskWithParent[];
 /** A task paused on its runner's usage limit, whether it resumes on its own or waits for the user (#84). */
 declare function pausedOnLimit(task: Readonly<Task>): boolean;
+/** The user's approval record, as a plan carries it (ADR-0029). */
+type ApprovalRecord = Pick<LegacyPlanState, 'approved' | 'approvedTasks'>;
+/**
+ * A task the scheduler leaves for the user (ADR-0035): an AI task not started
+ * yet, in a plan they approved, outside their approval record — the planner
+ * added it since. It starts once they start it or execute the plan. In a plan
+ * they never approved nothing is theirs yet, so nothing is singled out.
+ */
+declare function waitsForApproval(task: Pick<Task, 'id' | 'type' | 'status'>, record: ApprovalRecord): boolean;
 
-export { type ResearchToolType as $, type AttemptUsage as A, BUILTIN_SKILL_NAMES as B, type ConversationMessage as C, DEFAULT_RUNNERS as D, type ExecutionActor as E, type IsolationView as F, type GuardTarget as G, type PlanIsolation as H, type IWorktreeIsolation as I, type PlanState as J, type PlanStatus as K, type LegacyPlanState as L, type ModelUsage as M, type PlanUsage as N, type PlannerUsage as O, type PendingPlanTurn as P, type PrepareIntent as Q, type PreparedTask as R, type PreservedWork as S, type PreviousWork as T, type RefusedRemoval as U, type RepairEvidence as V, type RepoGroupLayout as W, type ResearchLogEntry as X, type ResearchProgress as Y, type ResearchStep as Z, type ResearchStepOutcome as _, type AwaitingReason as a, type RunSettings as a0, type RunnerId as a1, type SetupFailure as a2, type ShadowedSkill as a3, type SkillAppliesTo as a4, type SkillCatalog as a5, type SkillInfo as a6, type SkillLoad as a7, type SkillLoadNotice as a8, type SkillMetadata as a9, createSkillsService as aA, createTask as aB, endAttemptUsage as aC, flattenTasks as aD, flattenTasksWithParents as aE, isAwaitingReason as aF, isMeasured as aG, isSupervisorLevel as aH, isUserMessage as aI, migratePlanState as aJ, partedPromptUsage as aK, pausedOnLimit as aL, planUsage as aM, plannerContextFill as aN, rejoinPlanTree as aO, startAttemptUsage as aP, usageLine as aQ, type SkillSource as aa, SkillsService as ab, type SubagentOutcome as ac, type SupervisorLevel as ad, type Task as ae, type TaskDiffRead as af, type TaskDiffResult as ag, type TaskIsolation as ah, type TaskIsolationState as ai, type TaskModelAssignment as aj, type TaskSkillNotice as ak, type TaskSkillSnapshot as al, type TaskSnapshot as am, type TaskStatus as an, type TreeSnapshot as ao, type UsageLine as ap, type UsageRecord as aq, type UsageTotals as ar, type Verdict as as, type VerificationCheck as at, addAttemptUsage as au, addModelUsage as av, addPlannerUsage as aw, addUsage as ax, addUsageTotals as ay, createEmptyPlan as az, DEFAULT_SUPERVISOR_RETRY_LIMIT as b, type DiscoveredModel as c, type ExecutionCommandName as d, type ExecutionRecord as e, type GuardTrip as f, type IntegrationDisposal as g, type InvalidSkill as h, type IsolationAvailability as i, type IsolationHandoff as j, type IsolationHandoffRepo as k, type IsolationInactiveReason as l, type IsolationLandedTask as m, type IsolationLanding as n, type IsolationMergeBlock as o, type IsolationMergeBlockReason as p, type IsolationMergeResult as q, type IsolationOutcome as r, type IsolationPruneResult as s, type IsolationRemoval as t, type IsolationRepo as u, type IsolationRun as v, type IsolationTaskRecord as w, type IsolationTaskRef as x, type IsolationTaskRepo as y, type IsolationTaskStatus as z };
+export { type ResearchStepOutcome as $, type ApprovalRecord as A, BUILTIN_SKILL_NAMES as B, type ConversationMessage as C, DEFAULT_RUNNERS as D, type ExecutionActor as E, type IsolationTaskStatus as F, type GuardTarget as G, type IsolationView as H, type IWorktreeIsolation as I, type PlanIsolation as J, type PlanState as K, type LegacyPlanState as L, type ModelUsage as M, type PlanStatus as N, type PlanUsage as O, type PendingPlanTurn as P, type PlannerUsage as Q, type PrepareIntent as R, type PreparedTask as S, type PreservedWork as T, type PreviousWork as U, type RefusedRemoval as V, type RepairEvidence as W, type RepoGroupLayout as X, type ResearchLogEntry as Y, type ResearchProgress as Z, type ResearchStep as _, type AttemptUsage as a, type ResearchToolType as a0, type RunSettings as a1, type RunnerId as a2, type SetupFailure as a3, type ShadowedSkill as a4, type SkillAppliesTo as a5, type SkillCatalog as a6, type SkillInfo as a7, type SkillLoad as a8, type SkillLoadNotice as a9, createEmptyPlan as aA, createSkillsService as aB, createTask as aC, endAttemptUsage as aD, flattenTasks as aE, flattenTasksWithParents as aF, isAwaitingReason as aG, isMeasured as aH, isSupervisorLevel as aI, isUserMessage as aJ, migratePlanState as aK, partedPromptUsage as aL, pausedOnLimit as aM, planUsage as aN, plannerContextFill as aO, rejoinPlanTree as aP, startAttemptUsage as aQ, usageLine as aR, waitsForApproval as aS, type SkillMetadata as aa, type SkillSource as ab, SkillsService as ac, type SubagentOutcome as ad, type SupervisorLevel as ae, type Task as af, type TaskDiffRead as ag, type TaskDiffResult as ah, type TaskIsolation as ai, type TaskIsolationState as aj, type TaskModelAssignment as ak, type TaskSkillNotice as al, type TaskSkillSnapshot as am, type TaskSnapshot as an, type TaskStatus as ao, type TreeSnapshot as ap, type UsageLine as aq, type UsageRecord as ar, type UsageTotals as as, type Verdict as at, type VerificationCheck as au, addAttemptUsage as av, addModelUsage as aw, addPlannerUsage as ax, addUsage as ay, addUsageTotals as az, type AwaitingReason as b, DEFAULT_SUPERVISOR_RETRY_LIMIT as c, type DiscoveredModel as d, type ExecutionCommandName as e, type ExecutionRecord as f, type GuardTrip as g, type IntegrationDisposal as h, type InvalidSkill as i, type IsolationAvailability as j, type IsolationHandoff as k, type IsolationHandoffRepo as l, type IsolationInactiveReason as m, type IsolationLandedTask as n, type IsolationLanding as o, type IsolationMergeBlock as p, type IsolationMergeBlockReason as q, type IsolationMergeResult as r, type IsolationOutcome as s, type IsolationPruneResult as t, type IsolationRemoval as u, type IsolationRepo as v, type IsolationRun as w, type IsolationTaskRecord as x, type IsolationTaskRef as y, type IsolationTaskRepo as z };

package/dist/{chunk-4FEARWTS.mjs → chunk-645FALZX.mjs}

@@ -7,10 +7,10 @@ import {
   plannedTask,
   stripTrailingCommas,
   taskWhere
-} from "./chunk-3LNZDBCX.mjs";
+} from "./chunk-A57ITQE7.mjs";
 import {
   flattenTasksWithParents
-} from "./chunk-CIL3BQIF.mjs";
+} from "./chunk-SM6BV6XS.mjs";
 
 // src/services/PlanValidator.ts
 function parsePlanJson(raw, runners, runnerModes, autonomousDefault = true) {
@@ -27,7 +27,7 @@ function parsePlanJson(raw, runners, runnerModes, autonomousDefault = true) {
   }
   if (matches.length === 0 && sawUnbalanced) {
     throw new PlanParseError(
-      "Plan response appears truncated \u2014 the model likely hit its output length limit before finishing the JSON.",
+      "Plan response appears truncated: the model likely hit its output length limit before finishing the JSON.",
       raw,
       { truncated: true }
     );
@@ -67,7 +67,7 @@ function validatePlanTasks(obj, runners, runnerModes, autonomousDefault = true)
   const ignored = planned.flatMap((p) => p.ignored);
   const warnings = [
     ...ignored.some((i) => i.field === "taskMode") ? [`"taskMode" is not yours to set and was ignored: each task runs in its runner's mode for the user's autonomy level, or its read-only mode when you set "readOnly": true.`] : [],
-    ...ignored.filter((i) => i.field === "readOnly").map((i) => `${i.message} \u2014 it was ignored.`)
+    ...ignored.filter((i) => i.field === "readOnly").map((i) => `${i.message}: it was ignored.`)
   ];
   return warnings.length > 0 ? { ok: true, tasks, warnings } : { ok: true, tasks };
 }
@@ -94,4 +94,4 @@ export {
   validatePlanTasks,
   looksLikePlanAttempt
 };
-//# sourceMappingURL=chunk-4FEARWTS.mjs.map
+//# sourceMappingURL=chunk-645FALZX.mjs.map