@ordewell/core 0.10.4 → 0.10.6

package/dist/{IRunner-D_UkkMbJ.d.ts → IFileSystem-C4_mpfze.d.ts}

@@ -1,5 +1,5 @@
 import { ChildProcess } from 'child_process';
-import { a2 as RunnerId, ar as UsageRecord, ad as SubagentOutcome, d as DiscoveredModel, am as TaskSkillSnapshot } from './Task-DZs9eKgg.js';
+import { a4 as RunnerId, av as UsageRecord, ag as SubagentOutcome, a5 as RunnerSessionCost, d as DiscoveredModel, ap as TaskSkillSnapshot } from './Task-C0o4i3Nn.js';
 import { z } from 'zod/v4';
 
 /**
@@ -791,6 +791,7 @@ declare const taskOutputInput: z.ZodObject<{
         runner_loaded: "runner_loaded";
         compaction: "compaction";
         command_output: "command_output";
+        model_switched: "model_switched";
         text_delta: "text_delta";
         turn_start: "turn_start";
         message_queued: "message_queued";
@@ -1060,6 +1061,11 @@ interface RunnerCommand {
     /** Other names the runner answers to for the same command. */
     aliases?: string[];
 }
+/** A model as a runner lists it: the id it accepts, which is the one a plan holds, and the name it shows. */
+interface RunnerModelRef {
+    model: string;
+    label?: string;
+}
 /** An MCP server a runner loaded for a task, and the state the runner reported it in. */
 interface RunnerMcpServer {
     name: string;
@@ -1077,6 +1083,15 @@ declare function findRunnerCommand(commands: readonly RunnerCommand[], name: str
  * surfaces — is already provider-agnostic, so an adapter is the entire cost of
  * teaching Ordewell to plan with another agent.
  */
+/**
+ * A runner's structured word that its account's usage limit ended the turn
+ * (ADR-0018, U1). `resetsAt` (ISO) is when, where the runner's own limit state
+ * says so; without it the reset is read from the error's words, as for a
+ * runner that reports the limit in words alone.
+ */
+interface UsageLimitSignal {
+    resetsAt?: string;
+}
 /**
  * One normalized event from a running agent turn. Deliberately smaller than
  * any single agent's native protocol: this is the intersection Ordewell can act
@@ -1086,22 +1101,28 @@ declare function findRunnerCommand(commands: readonly RunnerCommand[], name: str
  */
 type AgentEvent = 
 /**
- * A complete run of the assistant's reply. Concatenated in order to form the
- * turn's text. When the same run already streamed as `assistant_text_delta`,
- * this is the authoritative copy of it — it replaces the deltas, it is not
- * appended after them.
+ * A complete run of the assistant's reply — one text block, message or
+ * part — under `runId`, the runner's own id for it. It is the authoritative
+ * copy of the deltas streamed under the same id: it replaces them wherever
+ * they now sit, it is not appended after them. No run carries the
+ * paragraph break between it and the one before; a consumer joining runs
+ * puts one there itself.
  */
 {
     type: 'assistant_text';
+    runId: string;
     text: string;
 }
 /**
- * An incremental piece of the assistant's reply, for agents that stream
- * partial messages. The planner's own text only: a subagent's words never
- * arrive here, so they can never become the reply.
+ * An incremental piece of the run `runId`, for agents that stream partial
+ * messages. A run's first delta marks where it began, which is where it
+ * stays when its complete copy arrives after later steps. The planner's own
+ * text only: a subagent's words never arrive here, so they can never
+ * become the reply.
  */
  | {
     type: 'assistant_text_delta';
+    runId: string;
     text: string;
 }
 /**
@@ -1216,10 +1237,16 @@ type AgentEvent =
     type: 'message_dropped';
     id: string;
 }
-/** The turn failed. Carries the agent's own words — never a Ordewell paraphrase. */
+/**
+ * The turn failed. Carries the agent's own words — never a Ordewell paraphrase.
+ * `usageLimit` is set where the runner's protocol says in a field, not only
+ * in words, whether its account's usage limit failed the turn: `false` when
+ * the field names another cause, which its words then cannot overrule.
+ */
  | {
     type: 'error';
     message: string;
+    usageLimit?: UsageLimitSignal | false;
 }
 /**
  * What the runner loaded for this process from the user's and the
@@ -1242,6 +1269,28 @@ type AgentEvent =
  | {
     type: 'command_output';
     text: string;
+}
+/**
+ * The runner's main thread now answers on another model, after a model
+ * command sent through the task's chat (#106): the user's own choice, which
+ * the plan follows. Each side is named by the id the runner lists it under,
+ * the one a plan holds. `effort` only where the runner reports one.
+ */
+ | {
+    type: 'model_switched';
+    from: RunnerModelRef;
+    to: RunnerModelRef;
+    effort?: string;
+}
+/**
+ * The runner's main thread now answers on another model with no model
+ * command before it (#106). Nobody in the chat chose it, so the plan does
+ * not follow; the drift is reported so it is stated, not hidden.
+ */
+ | {
+    type: 'model_drifted';
+    from: RunnerModelRef;
+    to: RunnerModelRef;
 };
 /**
  * What a planner's permission request is for, read from the runner's own
@@ -1289,6 +1338,8 @@ interface AgentStartCommon {
      * degrades to a fresh session seeded from the stored history, not an error.
      */
     resumeSessionId?: string;
+    /** What was counted of the cost of `resumeSessionId` before, for a runner that reports a running total. */
+    resumeCost?: RunnerSessionCost;
 }
 /** The read-only planner (ADR-0008/0009). The only start `CliAgentAiService` can express. */
 interface PlannerStartOptions extends AgentStartCommon {
@@ -1372,6 +1423,8 @@ interface AgentAdapter {
     send(message: string, onEvent: (event: AgentEvent) => void, signal?: AbortSignal, onActivity?: () => void): Promise<void>;
     /** The agent's native session id once it has announced one. Resumption hint only. */
     nativeSessionId(): string | null;
+    /** What has been counted of the session's running cost, for a runner that reports one; null while unknown. */
+    sessionCost?(): RunnerSessionCost | null;
     /** Kill the process and release its resources. Idempotent. */
     dispose(): void;
     /**
@@ -1396,9 +1449,10 @@ interface AgentAdapter {
     /**
      * Answer an open `permission_request`. False when the id is not open — it
      * was answered, cancelled, or never asked. Absent on an adapter that leaves
-     * no planner request open.
+     * no planner request open. HTTP replies resolve only after delivery and
+     * reject on failure, leaving the request open for another attempt.
      */
-    answerPermission?(id: string, decision: ApprovalDecision): boolean;
+    answerPermission?(id: string, decision: ApprovalDecision): boolean | Promise<boolean>;
 }
 /** What an adapter adds to run a task rather than a planner (ADR-0018). */
 interface TaskModeAgentAdapter extends AgentAdapter {
@@ -1432,7 +1486,7 @@ interface TaskModeAgentAdapter extends AgentAdapter {
      * mid-turn.
      */
     steer?(id: string, text: string): Promise<boolean>;
-    answerPermission(id: string, decision: ApprovalDecision): boolean;
+    answerPermission(id: string, decision: ApprovalDecision): boolean | Promise<boolean>;
     /**
      * The slash commands the runner offers this session — its built-ins, the
      * user's and the project's skills and custom commands (#66) — as it
@@ -1768,6 +1822,8 @@ interface IRunnerSession {
     interrupt(): Promise<void>;
     /** The runner's own session id once announced — what a continue resumes (ADR-0018, K1). */
     nativeSessionId(): string | null;
+    /** What has been counted of that session's running cost, for a runner that reports one; null while unknown. */
+    sessionCost?(): RunnerSessionCost | null;
     /**
      * The slash commands the runner offers this task (#66): its built-ins and
      * the user's and the project's skills and custom commands. Empty for a
@@ -1784,9 +1840,10 @@ interface IRunnerSession {
     invokeCommand(name: string, args?: string): string;
     /**
      * Answer a `permission_request` this session emitted, by its event id. False
-     * when it is no longer open — answered, withdrawn, or never asked.
+     * when it is no longer open — answered, withdrawn, or never asked. An HTTP
+     * answer settles after delivery; on failure it stays open and returns false.
      */
-    answerPermission(id: string, decision: ApprovalDecision): boolean;
+    answerPermission(id: string, decision: ApprovalDecision): boolean | Promise<boolean>;
     /**
      * The runner's `task_complete` calls on this attempt's token (ADR-0022):
      * the only completion evidence, for `VerdictEngine` to weigh.
@@ -1826,6 +1883,18 @@ interface IRunner {
         env?: Record<string, string>;
         /** The runner's own session to continue in (ADR-0018, K1). */
         resumeSessionId?: string;
+        /** What was counted of that session's running cost before, so its first turn is counted from there. */
+        resumeCost?: RunnerSessionCost;
+        /**
+         * The model that session last ran on and its window, so a resumed turn that
+         * states none is measured as before. Runners ignore it; the window fill
+         * that wraps one reads it.
+         */
+        resumeWindow?: {
+            source?: string;
+            model?: string;
+            contextWindow?: number;
+        };
         /**
          * Which run of the task this is, from 1. A structured runner binds the
          * attempt's MCP token to it (ADR-0022, A2).
@@ -1844,4 +1913,79 @@ interface IRunner {
     activeCount: number;
 }
 
-export { type OwnerOnlyFile as $, AUTO_COMMANDS as A, type IRunnerSession as B, type CatalogModel as C, DEFAULT_PLANNER_ALLOWLIST as D, type EditPlanArgs as E, type FetchAllProviderModelsOptions as F, GIT_READONLY_SUBCOMMANDS as G, type InvokedCommand as H, type IApproval as I, type ListModelsArgs as J, type ListRunnersArgs as K, LineBuffer as L, type LoadSkillArgs as M, type McpClientConfig as N, type McpCredential as O, type McpTool as P, type McpToolContext as Q, type McpToolReply as R, type MessageTaskArgs as S, ModelCatalog as T, type ModelShortcut as U, ORCHESTRATOR_SHORTCUTS as V, ORDEWELL_MCP_PATH as W, ORDEWELL_MCP_SERVER_NAME as X, type OneTaskArgs as Y, type OrchestratorOption as Z, OrdewellMcpServer as _, type AgentAdapter as a, researchShellWarning as a$, PLANNER_EXECUTION_TOOLS as a0, PLANNER_TOOLS as a1, type PlannerAllowlist as a2, type PlannerBackendId as a3, type PlannerStartOptions as a4, type PlannerTokenScope as a5, type PlannerToolHandler as a6, type ProjectMcpServer as a7, type ProviderCredentialSource as a8, type ProviderModelLists as a9, type TaskCompleteArgs as aA, type TaskDiffArgs as aB, type TaskMessageFrom as aC, type TaskModeAgentAdapter as aD, TaskModeUnsupportedError as aE, type TaskOutputArgs as aF, type TaskQueryArgs as aG, type TaskRunnerFlags as aH, type TaskStartOptions as aI, type TaskTokenScope as aJ, type TaskToolHandler as aK, approvalScopes as aL, classifyCommand as aM, clearResearchShellCache as aN, collectProviderCredentials as aO, commandAllowedBy as aP, effectiveApprovalMode as aQ, enabledRunners as aR, fetchAllProviderModels as aS, findRunnerCommand as aT, isGranted as aU, isRunnerApproval as aV, knownModelId as aW, mcpClientConfig as aX, ownerOnlyConfigFile as aY, parseAllowlist as aZ, parseApprovalModeSetting as a_, type ProviderModelsResult as aa, type QueuedTaskMessage as ab, REFUSED_COMMANDS as ac, type ResearchShell as ad, type ResearchShellDeps as ae, type RetryTaskArgs as af, type RunCommandArgs as ag, type RunPlanArgs as ah, type RunnerCommand as ai, type RunnerCommandKind as aj, type RunnerEntry as ak, type RunnerFeatures as al, type RunnerManifest as am, type RunnerMcpServer as an, type RunnerMode as ao, type RunnerModelDiscovery as ap, RunnerRegistry as aq, type ShellDialect as ar, type SpawnFn as as, type StandingDecision as at, type StructuredEvent as au, type StructuredTurnEnd as av, type SubmitPlanArgs as aw, TASK_COMPLETE_TOOL as ax, TASK_COMPLETION_CONTRACT as ay, TASK_TOOLS as az, type AgentAdapterFactory as b, researchToolsPath as b0, resolveModelShortcut as b1, resolveProvider as b2, resolveResearchShell as b3, scopeAllowed as b4, sharedMcpServer as b5, toApprovalDecision as b6, toOrchestratorOptions as b7, toolAllowed as b8, type AgentEvent as c, type AgentProcessDeps as d, type AgentStartOptions as e, type AiProvider as f, type AllProviderModels as g, type AnswerApprovalArgs as h, type ApprovalAnswer as i, type ApprovalDecision as j, type ApprovalKind as k, type ApprovalMode as l, type ApprovalModeSetting as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type CheckpointAnswer as r, type CheckpointArgs as s, type CommandClassification as t, type CommandTier as u, type CommandWords as v, DENY_ALL as w, type DiscoveryCommand as x, type IConfig as y, type IRunner as z };
+interface ToolOutcome {
+    success: boolean;
+    output: string;
+    truncated: boolean;
+}
+interface ReadFileOpts {
+    maxBytes?: number;
+    offset?: number;
+    limit?: number;
+}
+/**
+ * `content` returns matching lines, `files` only the paths that matched, and
+ * `count` a per-file tally. Cheap models otherwise grep and then read whole
+ * files to answer "which files touch this", burning rounds against the budget.
+ */
+type GrepOutputMode = 'content' | 'files' | 'count';
+interface GrepOptions {
+    /** File glob filter, e.g. `*.ts`. */
+    include?: string;
+    /** Search root. Relative to the workspace unless approved as external. */
+    path?: string;
+    outputMode?: GrepOutputMode;
+    /** Lines of context around each match (`content` mode only). */
+    contextBefore?: number;
+    contextAfter?: number;
+    /** Treat the pattern as a literal string rather than a regex. */
+    literal?: boolean;
+    caseInsensitive?: boolean;
+    /** Global cap on returned rows. Defaults to {@link GREP_DEFAULT_HEAD_LIMIT}. */
+    headLimit?: number;
+}
+interface GlobOptions {
+    /** Search root. Relative to the workspace unless approved as external. */
+    path?: string;
+    headLimit?: number;
+}
+interface FindSymbolOptions {
+    /** Language id or file extension, e.g. `typescript` or `.go`. Narrows the keyword set. */
+    language?: string;
+    /** Search root. Relative to the workspace unless approved as external. */
+    path?: string;
+}
+/** Global row cap for grep. A per-file cap is not a budget — see PoolFileSystem. */
+declare const GREP_DEFAULT_HEAD_LIMIT = 100;
+/**
+ * Directories that are never interesting to a planner and would otherwise eat
+ * the result budget. Applied by every search entry point, not just `glob` —
+ * `dist/` and `.ordewell/` are frequently not gitignored.
+ */
+declare const SEARCH_EXCLUSIONS: string[];
+interface IFileSystem {
+    readFile(path: string, opts?: ReadFileOpts): Promise<ToolOutcome>;
+    readFiles(paths: string[]): Promise<ToolOutcome>;
+    glob(pattern: string, opts?: GlobOptions): Promise<ToolOutcome>;
+    grep(pattern: string, opts?: GrepOptions): Promise<ToolOutcome>;
+    listDir(path: string, depth?: number): Promise<ToolOutcome>;
+    /**
+     * `signal` stops the planning turn this command belongs to: adapters kill
+     * the spawned child rather than let it run out its own timeout. The other
+     * tools here are short enough that the loop's between-call abort check is
+     * indistinguishable from cancelling them mid-flight; a `bash` call is not.
+     */
+    bash(command: string, signal?: AbortSignal): Promise<ToolOutcome>;
+    /** Definition-first lookup for one symbol. See `symbolPatterns.ts`. */
+    findSymbol(symbol: string, opts?: FindSymbolOptions): Promise<ToolOutcome>;
+    getWorkspaceRoot(): string;
+    /**
+     * Inject the human-approval channel for out-of-envelope access. Optional so
+     * test doubles stay small; every adapter extending `BaseFileSystem` has it.
+     */
+    setApproval?(approval: IApproval): void;
+    /** Held credentials read live by the outbound secret check. */
+    setOutboundSecrets?(secrets: () => Iterable<string>): void;
+}
+
+export { ORCHESTRATOR_SHORTCUTS as $, AUTO_COMMANDS as A, type GlobOptions as B, type CatalogModel as C, DEFAULT_PLANNER_ALLOWLIST as D, type EditPlanArgs as E, type FetchAllProviderModelsOptions as F, GIT_READONLY_SUBCOMMANDS as G, type GrepOptions as H, type GrepOutputMode as I, type IApproval as J, type IConfig as K, type IFileSystem as L, type IRunner as M, type IRunnerSession as N, type InvokedCommand as O, LineBuffer as P, type ListModelsArgs as Q, type ListRunnersArgs as R, type LoadSkillArgs as S, type McpClientConfig as T, type McpCredential as U, type McpTool as V, type McpToolContext as W, type McpToolReply as X, type MessageTaskArgs as Y, ModelCatalog as Z, type ModelShortcut as _, type AgentAdapter as a, effectiveApprovalMode as a$, ORDEWELL_MCP_PATH as a0, ORDEWELL_MCP_SERVER_NAME as a1, type OneTaskArgs as a2, type OrchestratorOption as a3, OrdewellMcpServer as a4, type OwnerOnlyFile as a5, PLANNER_EXECUTION_TOOLS as a6, PLANNER_TOOLS as a7, type PlannerAllowlist as a8, type PlannerBackendId as a9, type ShellDialect as aA, type SpawnFn as aB, type StandingDecision as aC, type StructuredEvent as aD, type StructuredTurnEnd as aE, type SubmitPlanArgs as aF, TASK_COMPLETE_TOOL as aG, TASK_COMPLETION_CONTRACT as aH, TASK_TOOLS as aI, type TaskCompleteArgs as aJ, type TaskDiffArgs as aK, type TaskMessageFrom as aL, type TaskModeAgentAdapter as aM, TaskModeUnsupportedError as aN, type TaskOutputArgs as aO, type TaskQueryArgs as aP, type TaskRunnerFlags as aQ, type TaskStartOptions as aR, type TaskTokenScope as aS, type TaskToolHandler as aT, type ToolOutcome as aU, type UsageLimitSignal as aV, approvalScopes as aW, classifyCommand as aX, clearResearchShellCache as aY, collectProviderCredentials as aZ, commandAllowedBy as a_, type PlannerStartOptions as aa, type PlannerTokenScope as ab, type PlannerToolHandler as ac, type ProjectMcpServer as ad, type ProviderCredentialSource as ae, type ProviderModelLists as af, type ProviderModelsResult as ag, type QueuedTaskMessage as ah, REFUSED_COMMANDS as ai, type ReadFileOpts as aj, type ResearchShell as ak, type ResearchShellDeps as al, type RetryTaskArgs as am, type RunCommandArgs as an, type RunPlanArgs as ao, type RunnerCommand as ap, type RunnerCommandKind as aq, type RunnerEntry as ar, type RunnerFeatures as as, type RunnerManifest as at, type RunnerMcpServer as au, type RunnerMode as av, type RunnerModelDiscovery as aw, type RunnerModelRef as ax, RunnerRegistry as ay, SEARCH_EXCLUSIONS as az, type AgentAdapterFactory as b, enabledRunners as b0, fetchAllProviderModels as b1, findRunnerCommand as b2, isGranted as b3, isRunnerApproval as b4, knownModelId as b5, mcpClientConfig as b6, ownerOnlyConfigFile as b7, parseAllowlist as b8, parseApprovalModeSetting as b9, researchShellWarning as ba, researchToolsPath as bb, resolveModelShortcut as bc, resolveProvider as bd, resolveResearchShell as be, scopeAllowed as bf, sharedMcpServer as bg, toApprovalDecision as bh, toOrchestratorOptions as bi, toolAllowed as bj, type AgentEvent as c, type AgentProcessDeps as d, type AgentStartOptions as e, type AiProvider as f, type AllProviderModels as g, type AnswerApprovalArgs as h, type ApprovalAnswer as i, type ApprovalDecision as j, type ApprovalKind as k, type ApprovalMode as l, type ApprovalModeSetting as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type CheckpointAnswer as r, type CheckpointArgs as s, type CommandClassification as t, type CommandTier as u, type CommandWords as v, DENY_ALL as w, type DiscoveryCommand as x, type FindSymbolOptions as y, GREP_DEFAULT_HEAD_LIMIT as z };

package/dist/{IRunner-NtTHQgLR.d.mts → IFileSystem-DUgeWWQN.d.mts}

@@ -1,5 +1,5 @@
 import { ChildProcess } from 'child_process';
-import { a2 as RunnerId, ar as UsageRecord, ad as SubagentOutcome, d as DiscoveredModel, am as TaskSkillSnapshot } from './Task-DZs9eKgg.mjs';
+import { a4 as RunnerId, av as UsageRecord, ag as SubagentOutcome, a5 as RunnerSessionCost, d as DiscoveredModel, ap as TaskSkillSnapshot } from './Task-C0o4i3Nn.mjs';
 import { z } from 'zod/v4';
 
 /**
@@ -791,6 +791,7 @@ declare const taskOutputInput: z.ZodObject<{
         runner_loaded: "runner_loaded";
         compaction: "compaction";
         command_output: "command_output";
+        model_switched: "model_switched";
         text_delta: "text_delta";
         turn_start: "turn_start";
         message_queued: "message_queued";
@@ -1060,6 +1061,11 @@ interface RunnerCommand {
     /** Other names the runner answers to for the same command. */
     aliases?: string[];
 }
+/** A model as a runner lists it: the id it accepts, which is the one a plan holds, and the name it shows. */
+interface RunnerModelRef {
+    model: string;
+    label?: string;
+}
 /** An MCP server a runner loaded for a task, and the state the runner reported it in. */
 interface RunnerMcpServer {
     name: string;
@@ -1077,6 +1083,15 @@ declare function findRunnerCommand(commands: readonly RunnerCommand[], name: str
  * surfaces — is already provider-agnostic, so an adapter is the entire cost of
  * teaching Ordewell to plan with another agent.
  */
+/**
+ * A runner's structured word that its account's usage limit ended the turn
+ * (ADR-0018, U1). `resetsAt` (ISO) is when, where the runner's own limit state
+ * says so; without it the reset is read from the error's words, as for a
+ * runner that reports the limit in words alone.
+ */
+interface UsageLimitSignal {
+    resetsAt?: string;
+}
 /**
  * One normalized event from a running agent turn. Deliberately smaller than
  * any single agent's native protocol: this is the intersection Ordewell can act
@@ -1086,22 +1101,28 @@ declare function findRunnerCommand(commands: readonly RunnerCommand[], name: str
  */
 type AgentEvent = 
 /**
- * A complete run of the assistant's reply. Concatenated in order to form the
- * turn's text. When the same run already streamed as `assistant_text_delta`,
- * this is the authoritative copy of it — it replaces the deltas, it is not
- * appended after them.
+ * A complete run of the assistant's reply — one text block, message or
+ * part — under `runId`, the runner's own id for it. It is the authoritative
+ * copy of the deltas streamed under the same id: it replaces them wherever
+ * they now sit, it is not appended after them. No run carries the
+ * paragraph break between it and the one before; a consumer joining runs
+ * puts one there itself.
  */
 {
     type: 'assistant_text';
+    runId: string;
     text: string;
 }
 /**
- * An incremental piece of the assistant's reply, for agents that stream
- * partial messages. The planner's own text only: a subagent's words never
- * arrive here, so they can never become the reply.
+ * An incremental piece of the run `runId`, for agents that stream partial
+ * messages. A run's first delta marks where it began, which is where it
+ * stays when its complete copy arrives after later steps. The planner's own
+ * text only: a subagent's words never arrive here, so they can never
+ * become the reply.
  */
  | {
     type: 'assistant_text_delta';
+    runId: string;
     text: string;
 }
 /**
@@ -1216,10 +1237,16 @@ type AgentEvent =
     type: 'message_dropped';
     id: string;
 }
-/** The turn failed. Carries the agent's own words — never a Ordewell paraphrase. */
+/**
+ * The turn failed. Carries the agent's own words — never a Ordewell paraphrase.
+ * `usageLimit` is set where the runner's protocol says in a field, not only
+ * in words, whether its account's usage limit failed the turn: `false` when
+ * the field names another cause, which its words then cannot overrule.
+ */
  | {
     type: 'error';
     message: string;
+    usageLimit?: UsageLimitSignal | false;
 }
 /**
  * What the runner loaded for this process from the user's and the
@@ -1242,6 +1269,28 @@ type AgentEvent =
  | {
     type: 'command_output';
     text: string;
+}
+/**
+ * The runner's main thread now answers on another model, after a model
+ * command sent through the task's chat (#106): the user's own choice, which
+ * the plan follows. Each side is named by the id the runner lists it under,
+ * the one a plan holds. `effort` only where the runner reports one.
+ */
+ | {
+    type: 'model_switched';
+    from: RunnerModelRef;
+    to: RunnerModelRef;
+    effort?: string;
+}
+/**
+ * The runner's main thread now answers on another model with no model
+ * command before it (#106). Nobody in the chat chose it, so the plan does
+ * not follow; the drift is reported so it is stated, not hidden.
+ */
+ | {
+    type: 'model_drifted';
+    from: RunnerModelRef;
+    to: RunnerModelRef;
 };
 /**
  * What a planner's permission request is for, read from the runner's own
@@ -1289,6 +1338,8 @@ interface AgentStartCommon {
      * degrades to a fresh session seeded from the stored history, not an error.
      */
     resumeSessionId?: string;
+    /** What was counted of the cost of `resumeSessionId` before, for a runner that reports a running total. */
+    resumeCost?: RunnerSessionCost;
 }
 /** The read-only planner (ADR-0008/0009). The only start `CliAgentAiService` can express. */
 interface PlannerStartOptions extends AgentStartCommon {
@@ -1372,6 +1423,8 @@ interface AgentAdapter {
     send(message: string, onEvent: (event: AgentEvent) => void, signal?: AbortSignal, onActivity?: () => void): Promise<void>;
     /** The agent's native session id once it has announced one. Resumption hint only. */
     nativeSessionId(): string | null;
+    /** What has been counted of the session's running cost, for a runner that reports one; null while unknown. */
+    sessionCost?(): RunnerSessionCost | null;
     /** Kill the process and release its resources. Idempotent. */
     dispose(): void;
     /**
@@ -1396,9 +1449,10 @@ interface AgentAdapter {
     /**
      * Answer an open `permission_request`. False when the id is not open — it
      * was answered, cancelled, or never asked. Absent on an adapter that leaves
-     * no planner request open.
+     * no planner request open. HTTP replies resolve only after delivery and
+     * reject on failure, leaving the request open for another attempt.
      */
-    answerPermission?(id: string, decision: ApprovalDecision): boolean;
+    answerPermission?(id: string, decision: ApprovalDecision): boolean | Promise<boolean>;
 }
 /** What an adapter adds to run a task rather than a planner (ADR-0018). */
 interface TaskModeAgentAdapter extends AgentAdapter {
@@ -1432,7 +1486,7 @@ interface TaskModeAgentAdapter extends AgentAdapter {
      * mid-turn.
      */
     steer?(id: string, text: string): Promise<boolean>;
-    answerPermission(id: string, decision: ApprovalDecision): boolean;
+    answerPermission(id: string, decision: ApprovalDecision): boolean | Promise<boolean>;
     /**
      * The slash commands the runner offers this session — its built-ins, the
      * user's and the project's skills and custom commands (#66) — as it
@@ -1768,6 +1822,8 @@ interface IRunnerSession {
     interrupt(): Promise<void>;
     /** The runner's own session id once announced — what a continue resumes (ADR-0018, K1). */
     nativeSessionId(): string | null;
+    /** What has been counted of that session's running cost, for a runner that reports one; null while unknown. */
+    sessionCost?(): RunnerSessionCost | null;
     /**
      * The slash commands the runner offers this task (#66): its built-ins and
      * the user's and the project's skills and custom commands. Empty for a
@@ -1784,9 +1840,10 @@ interface IRunnerSession {
     invokeCommand(name: string, args?: string): string;
     /**
      * Answer a `permission_request` this session emitted, by its event id. False
-     * when it is no longer open — answered, withdrawn, or never asked.
+     * when it is no longer open — answered, withdrawn, or never asked. An HTTP
+     * answer settles after delivery; on failure it stays open and returns false.
      */
-    answerPermission(id: string, decision: ApprovalDecision): boolean;
+    answerPermission(id: string, decision: ApprovalDecision): boolean | Promise<boolean>;
     /**
      * The runner's `task_complete` calls on this attempt's token (ADR-0022):
      * the only completion evidence, for `VerdictEngine` to weigh.
@@ -1826,6 +1883,18 @@ interface IRunner {
         env?: Record<string, string>;
         /** The runner's own session to continue in (ADR-0018, K1). */
         resumeSessionId?: string;
+        /** What was counted of that session's running cost before, so its first turn is counted from there. */
+        resumeCost?: RunnerSessionCost;
+        /**
+         * The model that session last ran on and its window, so a resumed turn that
+         * states none is measured as before. Runners ignore it; the window fill
+         * that wraps one reads it.
+         */
+        resumeWindow?: {
+            source?: string;
+            model?: string;
+            contextWindow?: number;
+        };
         /**
          * Which run of the task this is, from 1. A structured runner binds the
          * attempt's MCP token to it (ADR-0022, A2).
@@ -1844,4 +1913,79 @@ interface IRunner {
     activeCount: number;
 }
 
-export { type OwnerOnlyFile as $, AUTO_COMMANDS as A, type IRunnerSession as B, type CatalogModel as C, DEFAULT_PLANNER_ALLOWLIST as D, type EditPlanArgs as E, type FetchAllProviderModelsOptions as F, GIT_READONLY_SUBCOMMANDS as G, type InvokedCommand as H, type IApproval as I, type ListModelsArgs as J, type ListRunnersArgs as K, LineBuffer as L, type LoadSkillArgs as M, type McpClientConfig as N, type McpCredential as O, type McpTool as P, type McpToolContext as Q, type McpToolReply as R, type MessageTaskArgs as S, ModelCatalog as T, type ModelShortcut as U, ORCHESTRATOR_SHORTCUTS as V, ORDEWELL_MCP_PATH as W, ORDEWELL_MCP_SERVER_NAME as X, type OneTaskArgs as Y, type OrchestratorOption as Z, OrdewellMcpServer as _, type AgentAdapter as a, researchShellWarning as a$, PLANNER_EXECUTION_TOOLS as a0, PLANNER_TOOLS as a1, type PlannerAllowlist as a2, type PlannerBackendId as a3, type PlannerStartOptions as a4, type PlannerTokenScope as a5, type PlannerToolHandler as a6, type ProjectMcpServer as a7, type ProviderCredentialSource as a8, type ProviderModelLists as a9, type TaskCompleteArgs as aA, type TaskDiffArgs as aB, type TaskMessageFrom as aC, type TaskModeAgentAdapter as aD, TaskModeUnsupportedError as aE, type TaskOutputArgs as aF, type TaskQueryArgs as aG, type TaskRunnerFlags as aH, type TaskStartOptions as aI, type TaskTokenScope as aJ, type TaskToolHandler as aK, approvalScopes as aL, classifyCommand as aM, clearResearchShellCache as aN, collectProviderCredentials as aO, commandAllowedBy as aP, effectiveApprovalMode as aQ, enabledRunners as aR, fetchAllProviderModels as aS, findRunnerCommand as aT, isGranted as aU, isRunnerApproval as aV, knownModelId as aW, mcpClientConfig as aX, ownerOnlyConfigFile as aY, parseAllowlist as aZ, parseApprovalModeSetting as a_, type ProviderModelsResult as aa, type QueuedTaskMessage as ab, REFUSED_COMMANDS as ac, type ResearchShell as ad, type ResearchShellDeps as ae, type RetryTaskArgs as af, type RunCommandArgs as ag, type RunPlanArgs as ah, type RunnerCommand as ai, type RunnerCommandKind as aj, type RunnerEntry as ak, type RunnerFeatures as al, type RunnerManifest as am, type RunnerMcpServer as an, type RunnerMode as ao, type RunnerModelDiscovery as ap, RunnerRegistry as aq, type ShellDialect as ar, type SpawnFn as as, type StandingDecision as at, type StructuredEvent as au, type StructuredTurnEnd as av, type SubmitPlanArgs as aw, TASK_COMPLETE_TOOL as ax, TASK_COMPLETION_CONTRACT as ay, TASK_TOOLS as az, type AgentAdapterFactory as b, researchToolsPath as b0, resolveModelShortcut as b1, resolveProvider as b2, resolveResearchShell as b3, scopeAllowed as b4, sharedMcpServer as b5, toApprovalDecision as b6, toOrchestratorOptions as b7, toolAllowed as b8, type AgentEvent as c, type AgentProcessDeps as d, type AgentStartOptions as e, type AiProvider as f, type AllProviderModels as g, type AnswerApprovalArgs as h, type ApprovalAnswer as i, type ApprovalDecision as j, type ApprovalKind as k, type ApprovalMode as l, type ApprovalModeSetting as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type CheckpointAnswer as r, type CheckpointArgs as s, type CommandClassification as t, type CommandTier as u, type CommandWords as v, DENY_ALL as w, type DiscoveryCommand as x, type IConfig as y, type IRunner as z };
+interface ToolOutcome {
+    success: boolean;
+    output: string;
+    truncated: boolean;
+}
+interface ReadFileOpts {
+    maxBytes?: number;
+    offset?: number;
+    limit?: number;
+}
+/**
+ * `content` returns matching lines, `files` only the paths that matched, and
+ * `count` a per-file tally. Cheap models otherwise grep and then read whole
+ * files to answer "which files touch this", burning rounds against the budget.
+ */
+type GrepOutputMode = 'content' | 'files' | 'count';
+interface GrepOptions {
+    /** File glob filter, e.g. `*.ts`. */
+    include?: string;
+    /** Search root. Relative to the workspace unless approved as external. */
+    path?: string;
+    outputMode?: GrepOutputMode;
+    /** Lines of context around each match (`content` mode only). */
+    contextBefore?: number;
+    contextAfter?: number;
+    /** Treat the pattern as a literal string rather than a regex. */
+    literal?: boolean;
+    caseInsensitive?: boolean;
+    /** Global cap on returned rows. Defaults to {@link GREP_DEFAULT_HEAD_LIMIT}. */
+    headLimit?: number;
+}
+interface GlobOptions {
+    /** Search root. Relative to the workspace unless approved as external. */
+    path?: string;
+    headLimit?: number;
+}
+interface FindSymbolOptions {
+    /** Language id or file extension, e.g. `typescript` or `.go`. Narrows the keyword set. */
+    language?: string;
+    /** Search root. Relative to the workspace unless approved as external. */
+    path?: string;
+}
+/** Global row cap for grep. A per-file cap is not a budget — see PoolFileSystem. */
+declare const GREP_DEFAULT_HEAD_LIMIT = 100;
+/**
+ * Directories that are never interesting to a planner and would otherwise eat
+ * the result budget. Applied by every search entry point, not just `glob` —
+ * `dist/` and `.ordewell/` are frequently not gitignored.
+ */
+declare const SEARCH_EXCLUSIONS: string[];
+interface IFileSystem {
+    readFile(path: string, opts?: ReadFileOpts): Promise<ToolOutcome>;
+    readFiles(paths: string[]): Promise<ToolOutcome>;
+    glob(pattern: string, opts?: GlobOptions): Promise<ToolOutcome>;
+    grep(pattern: string, opts?: GrepOptions): Promise<ToolOutcome>;
+    listDir(path: string, depth?: number): Promise<ToolOutcome>;
+    /**
+     * `signal` stops the planning turn this command belongs to: adapters kill
+     * the spawned child rather than let it run out its own timeout. The other
+     * tools here are short enough that the loop's between-call abort check is
+     * indistinguishable from cancelling them mid-flight; a `bash` call is not.
+     */
+    bash(command: string, signal?: AbortSignal): Promise<ToolOutcome>;
+    /** Definition-first lookup for one symbol. See `symbolPatterns.ts`. */
+    findSymbol(symbol: string, opts?: FindSymbolOptions): Promise<ToolOutcome>;
+    getWorkspaceRoot(): string;
+    /**
+     * Inject the human-approval channel for out-of-envelope access. Optional so
+     * test doubles stay small; every adapter extending `BaseFileSystem` has it.
+     */
+    setApproval?(approval: IApproval): void;
+    /** Held credentials read live by the outbound secret check. */
+    setOutboundSecrets?(secrets: () => Iterable<string>): void;
+}
+
+export { ORCHESTRATOR_SHORTCUTS as $, AUTO_COMMANDS as A, type GlobOptions as B, type CatalogModel as C, DEFAULT_PLANNER_ALLOWLIST as D, type EditPlanArgs as E, type FetchAllProviderModelsOptions as F, GIT_READONLY_SUBCOMMANDS as G, type GrepOptions as H, type GrepOutputMode as I, type IApproval as J, type IConfig as K, type IFileSystem as L, type IRunner as M, type IRunnerSession as N, type InvokedCommand as O, LineBuffer as P, type ListModelsArgs as Q, type ListRunnersArgs as R, type LoadSkillArgs as S, type McpClientConfig as T, type McpCredential as U, type McpTool as V, type McpToolContext as W, type McpToolReply as X, type MessageTaskArgs as Y, ModelCatalog as Z, type ModelShortcut as _, type AgentAdapter as a, effectiveApprovalMode as a$, ORDEWELL_MCP_PATH as a0, ORDEWELL_MCP_SERVER_NAME as a1, type OneTaskArgs as a2, type OrchestratorOption as a3, OrdewellMcpServer as a4, type OwnerOnlyFile as a5, PLANNER_EXECUTION_TOOLS as a6, PLANNER_TOOLS as a7, type PlannerAllowlist as a8, type PlannerBackendId as a9, type ShellDialect as aA, type SpawnFn as aB, type StandingDecision as aC, type StructuredEvent as aD, type StructuredTurnEnd as aE, type SubmitPlanArgs as aF, TASK_COMPLETE_TOOL as aG, TASK_COMPLETION_CONTRACT as aH, TASK_TOOLS as aI, type TaskCompleteArgs as aJ, type TaskDiffArgs as aK, type TaskMessageFrom as aL, type TaskModeAgentAdapter as aM, TaskModeUnsupportedError as aN, type TaskOutputArgs as aO, type TaskQueryArgs as aP, type TaskRunnerFlags as aQ, type TaskStartOptions as aR, type TaskTokenScope as aS, type TaskToolHandler as aT, type ToolOutcome as aU, type UsageLimitSignal as aV, approvalScopes as aW, classifyCommand as aX, clearResearchShellCache as aY, collectProviderCredentials as aZ, commandAllowedBy as a_, type PlannerStartOptions as aa, type PlannerTokenScope as ab, type PlannerToolHandler as ac, type ProjectMcpServer as ad, type ProviderCredentialSource as ae, type ProviderModelLists as af, type ProviderModelsResult as ag, type QueuedTaskMessage as ah, REFUSED_COMMANDS as ai, type ReadFileOpts as aj, type ResearchShell as ak, type ResearchShellDeps as al, type RetryTaskArgs as am, type RunCommandArgs as an, type RunPlanArgs as ao, type RunnerCommand as ap, type RunnerCommandKind as aq, type RunnerEntry as ar, type RunnerFeatures as as, type RunnerManifest as at, type RunnerMcpServer as au, type RunnerMode as av, type RunnerModelDiscovery as aw, type RunnerModelRef as ax, RunnerRegistry as ay, SEARCH_EXCLUSIONS as az, type AgentAdapterFactory as b, enabledRunners as b0, fetchAllProviderModels as b1, findRunnerCommand as b2, isGranted as b3, isRunnerApproval as b4, knownModelId as b5, mcpClientConfig as b6, ownerOnlyConfigFile as b7, parseAllowlist as b8, parseApprovalModeSetting as b9, researchShellWarning as ba, researchToolsPath as bb, resolveModelShortcut as bc, resolveProvider as bd, resolveResearchShell as be, scopeAllowed as bf, sharedMcpServer as bg, toApprovalDecision as bh, toOrchestratorOptions as bi, toolAllowed as bj, type AgentEvent as c, type AgentProcessDeps as d, type AgentStartOptions as e, type AiProvider as f, type AllProviderModels as g, type AnswerApprovalArgs as h, type ApprovalAnswer as i, type ApprovalDecision as j, type ApprovalKind as k, type ApprovalMode as l, type ApprovalModeSetting as m, ApprovalPolicy as n, type ApprovalPolicyOptions as o, type ApprovalRequest as p, type ApprovalSource as q, type CheckpointAnswer as r, type CheckpointArgs as s, type CommandClassification as t, type CommandTier as u, type CommandWords as v, DENY_ALL as w, type DiscoveryCommand as x, type FindSymbolOptions as y, GREP_DEFAULT_HEAD_LIMIT as z };

package/dist/{ModeResolver-wnTFsDnF.d.mts → ModeResolver-4qNjxcDs.d.mts}

@@ -1,4 +1,4 @@
-import { a2 as RunnerId } from './Task-DZs9eKgg.mjs';
+import { a4 as RunnerId } from './Task-C0o4i3Nn.mjs';
 
 interface RunnerModeInfo {
     id: string;

package/dist/{ModeResolver-Dy3Ef6p-.d.ts → ModeResolver-DGK2rWHE.d.ts}

@@ -1,4 +1,4 @@
-import { a2 as RunnerId } from './Task-DZs9eKgg.js';
+import { a4 as RunnerId } from './Task-C0o4i3Nn.js';
 
 interface RunnerModeInfo {
     id: string;