@orion-agents/orion-code 0.3.1 → 0.3.4

package/dist/runtime/product-orion-runtime.d.ts

@@ -2,12 +2,14 @@ import type { Store } from '../framework/store';
 import type { OrionCodeCLIConfig } from '../services/config';
 import type { CompactCoordinator } from '../services/compact/coordinator';
 import { LLMService } from '../services/llm';
+import type { ProviderRequestGate } from '../services/provider-resilience/request-gate';
 import { type BuiltinToolCatalogV1 } from './builtin-tool-provider';
 import type { McpConnectorV1, McpServerDescriptorInputV1 } from './mcp';
 import { type OrionRuntimeV1 } from './orion-runtime-v1';
 import type { SkillProviderV1 } from './skills';
 import type { FirstPartyApprovalHandlerV1 } from './first-party-tool-services';
 import type { ThreadSessionRuntimeActivationV1 } from './thread-session-view';
+import { type WorkspaceMutationCoordinatorV1 } from './step-snapshot';
 import type { SubagentThreadReceiptV1 } from './subagent-thread-runtime';
 import { type SubagentRole } from './subagents/types';
 export interface ProductOrionRuntimeOptionsV1 {
@@ -22,6 +24,9 @@ export interface ProductOrionRuntimeOptionsV1 {
     readonly mcpDescriptors?: readonly McpServerDescriptorInputV1[];
     readonly mcpConnector?: McpConnectorV1;
     readonly approvalHandler?: FirstPartyApprovalHandlerV1;
+    readonly workspaceMutationCoordinator?: WorkspaceMutationCoordinatorV1;
+    /** Workspace-scoped provider concurrency/cooldown authority shared by root and child calls. */
+    readonly providerRequestGate?: ProviderRequestGate;
     /** Must create a distinct mutable provider client for every child request. */
     readonly createSubagentModelExecutor?: (input: {
         readonly role: SubagentRole;

package/dist/runtime/product-orion-runtime.js

@@ -19,6 +19,7 @@ const legacy_thread_materializer_1 = require("./legacy-thread-materializer");
 const orion_runtime_v1_1 = require("./orion-runtime-v1");
 const prompts_1 = require("./prompts");
 const canonical_1 = require("./protocol/canonical");
+const plan_review_1 = require("./plan-review");
 const session_history_recovery_1 = require("./session-history-recovery");
 const step_snapshot_1 = require("./step-snapshot");
 const production_1 = require("./subagents/production");
@@ -31,7 +32,6 @@ const turn_commit_1 = require("./turn-commit");
 /** Build one explicit OrionRuntime owner for a legacy Session/v2 Thread identity. */
 function createProductOrionRuntimeV1(options, sessionId, activation) {
     let promptState;
-    const scheduledPlanReceipts = new Set();
     let openedStorage = activation
         ? openedStorageFromActivation(options.cwd, sessionId, activation)
         : (0, legacy_thread_materializer_1.openSessionStorageV1)(options.cwd, sessionId);
@@ -103,6 +103,7 @@ function createProductOrionRuntimeV1(options, sessionId, activation) {
             connector: options.mcpConnector ?? INERT_MCP_CONNECTOR,
         },
         approvalHandler: options.approvalHandler,
+        workspaceMutationCoordinator: options.workspaceMutationCoordinator,
         ...(subagents ? { subagents } : {}),
         resolveCapabilityConfiguration: async (input, context) => {
             if (!promptState || promptState.turnId !== input.turnId) {
@@ -166,21 +167,20 @@ function createProductOrionRuntimeV1(options, sessionId, activation) {
                 synchronizeSessionThreadReadModel(sessionId, storage.generation, runtime.graph.eventStore);
                 const planReceipt = planReceiptFromCommit(durableCommit);
                 if (planReceipt) {
-                    projectPlanReceipt(options.store, planReceipt);
-                    schedulePlanExecution(runtime, planReceipt, scheduledPlanReceipts);
+                    const review = (0, plan_review_1.ensurePlanReviewRequestedV1)(runtime.graph.eventStore, planReceipt, options.store.getSnapshot().currentModel);
+                    projectPlanReceipt(options.store, planReceipt, review.status);
                 }
             },
-            onRuntimeStarted: ({ restoredCommit, thread, eventStore }) => {
+            onRuntimeStarted: ({ restoredCommit, eventStore }) => {
                 synchronizeSessionThreadReadModel(sessionId, storage.generation, eventStore);
                 if (restoredCommit)
                     projectRestoredTurnCommit(options.store, restoredCommit);
-                const planReceipt = restoredCommit ? planReceiptFromCommit(restoredCommit) : undefined;
+                const planReceipt = latestDurablePlanReceipt(eventStore);
                 if (!planReceipt)
                     return;
-                projectPlanReceipt(options.store, planReceipt);
-                if (thread.getProjection().queue.length === 0) {
-                    schedulePlanExecution(runtime, planReceipt, scheduledPlanReceipts);
-                }
+                const review = (0, plan_review_1.ensurePlanReviewRequestedV1)(eventStore, planReceipt, options.store.getSnapshot().currentModel);
+                projectPlanReceipt(options.store, planReceipt, review.status);
+                (0, plan_review_1.recoverResolvedPlanReviewV1)(runtime);
             },
         },
     });
@@ -366,6 +366,7 @@ function createProductSubagentCompositionV1(options, model) {
                     modelLabel: model.modelId,
                     rootObjectiveSummary: input.input,
                     abortSignal: input.abortSignal,
+                    sharedGate: options.providerRequestGate,
                 });
                 if (!bundle) {
                     productionRuntime.close('subagent_turn_unavailable');
@@ -873,36 +874,15 @@ function productPlanReturnMode(store) {
     const snapshot = store.getSnapshot();
     return snapshot.agentMode === 'auto' || snapshot.planReturnMode === 'auto' ? 'auto' : 'build';
 }
-function projectPlanReceipt(store, receipt) {
-    const agentMode = receipt.returnMode === 'auto' ? 'auto' : 'interactive';
+function projectPlanReceipt(store, receipt, reviewStatus) {
+    const agentMode = reviewStatus === 'awaiting_review' || reviewStatus === 'continued' ? 'plan' : 'interactive';
     store.setState({
         agentMode,
-        planMode: false,
-        planReturnMode: agentMode,
+        planMode: agentMode === 'plan',
+        planReturnMode: receipt.returnMode === 'auto' ? 'auto' : 'interactive',
         currentPlan: receipt.plan,
     });
 }
-function schedulePlanExecution(runtime, receipt, scheduled) {
-    if (scheduled.has(receipt.digest))
-        return;
-    const admission = runtime.thread.dispatch({
-        type: 'turn.start',
-        data: {
-            input: [
-                `Execute durable PlanReceipt ${receipt.digest}.`,
-                'Continue autonomously from the saved plan and verify the implementation before finishing.',
-            ].join(' '),
-            mode: receipt.returnMode,
-        },
-    });
-    if (admission.status === 'rejected') {
-        throw new Error(`Saved plan execution was not admitted: ${admission.reason}.`);
-    }
-    if (admission.status !== 'started' && admission.status !== 'queued') {
-        throw new Error(`Saved plan execution returned unexpected admission: ${admission.status}.`);
-    }
-    scheduled.add(receipt.digest);
-}
 function legacyHistory(sessionId) {
     return (0, session_history_recovery_1.normalizeSessionModelHistoryV1)((0, session_storage_1.readSessionMessages)(sessionId).map(message => ({
         role: message.role,
@@ -922,7 +902,8 @@ function createProductAuthority(options, mode) {
     // AUTO is an explicit full-action consent mode. It bypasses interactive
     // approval only; capability, containment, hard policy and sandbox checks
     // remain unchanged and still precede execution.
-    const confirmation = mode === 'auto' ? 'allow' : options.config.toolConfirmation;
+    const configuredConfirmation = options.config.toolConfirmation;
+    const confirmation = mode === 'auto' && configuredConfirmation !== 'deny' ? 'allow' : configuredConfirmation;
     return (0, step_snapshot_1.createAuthoritySnapshotV1)({
         authorityId: `project:${(0, canonical_1.digestRuntimeValue)(options.cwd).slice(0, 16)}:${mode ?? 'base'}`,
         projectRoot: options.cwd,

package/dist/runtime/protocol/runtime-protocol-v1.d.ts

@@ -331,6 +331,79 @@ export declare const RUNTIME_EVENT_DEFINITIONS_V1: {
         readonly required: readonly ["commitId", "terminal", "digest", "receipt"];
         readonly additionalProperties: false;
     };
+    readonly 'plan.review_requested': {
+        readonly type: "object";
+        readonly properties: {
+            readonly reviewId: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly revision: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly planDigest: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly planReceiptDigest: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly createdAt: {
+                readonly type: "integer";
+                readonly minimum: 0;
+            };
+            readonly createdModel: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly returnMode: {
+                readonly type: "string";
+                readonly enum: readonly ["build", "auto"];
+            };
+        };
+        readonly required: readonly ["reviewId", "revision", "planDigest", "planReceiptDigest", "createdAt", "createdModel", "returnMode"];
+        readonly additionalProperties: false;
+    };
+    readonly 'plan.review_resolved': {
+        readonly type: "object";
+        readonly properties: {
+            readonly reviewId: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly previousRevision: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly revision: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly planDigest: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+            readonly action: {
+                readonly type: "string";
+                readonly enum: readonly ["approve", "continue", "cancel"];
+            };
+            readonly resolvedAt: {
+                readonly type: "integer";
+                readonly minimum: 0;
+            };
+            readonly feedback: {
+                readonly type: "string";
+            };
+            readonly feedbackDigest: {
+                readonly type: "string";
+                readonly minLength: 1;
+            };
+        };
+        readonly required: readonly ["reviewId", "previousRevision", "revision", "planDigest", "action", "resolvedAt"];
+        readonly additionalProperties: false;
+    };
     readonly 'turn.completed': {
         readonly type: "object";
         readonly properties: {

package/dist/runtime/protocol/runtime-protocol-v1.js

@@ -167,6 +167,43 @@ exports.RUNTIME_EVENT_DEFINITIONS_V1 = {
         required: ['commitId', 'terminal', 'digest', 'receipt'],
         additionalProperties: false,
     },
+    'plan.review_requested': {
+        type: 'object',
+        properties: {
+            reviewId: nonEmptyString,
+            revision: nonEmptyString,
+            planDigest: nonEmptyString,
+            planReceiptDigest: nonEmptyString,
+            createdAt: nonNegativeInteger,
+            createdModel: nonEmptyString,
+            returnMode: { type: 'string', enum: ['build', 'auto'] },
+        },
+        required: [
+            'reviewId',
+            'revision',
+            'planDigest',
+            'planReceiptDigest',
+            'createdAt',
+            'createdModel',
+            'returnMode',
+        ],
+        additionalProperties: false,
+    },
+    'plan.review_resolved': {
+        type: 'object',
+        properties: {
+            reviewId: nonEmptyString,
+            previousRevision: nonEmptyString,
+            revision: nonEmptyString,
+            planDigest: nonEmptyString,
+            action: { type: 'string', enum: ['approve', 'continue', 'cancel'] },
+            resolvedAt: nonNegativeInteger,
+            feedback: string,
+            feedbackDigest: nonEmptyString,
+        },
+        required: ['reviewId', 'previousRevision', 'revision', 'planDigest', 'action', 'resolvedAt'],
+        additionalProperties: false,
+    },
     'turn.completed': {
         type: 'object',
         properties: { outcome: string },

package/dist/runtime/release-receipts.d.ts

@@ -5,10 +5,16 @@ export declare const SUPPORTED_RELEASE_NODE_FLOORS_V1: Readonly<Record<Supported
 export declare const SUPPORTED_RELEASE_VERSION_LINE_V1: "0.3.x";
 export declare const WEB_E2E_LEGACY_SCENARIOS_V1: readonly ["E2E-P0-01", "E2E-P0-02", "E2E-P0-03", "E2E-P0-04", "E2E-P0-05", "E2E-P0-06", "E2E-P0-07", "E2E-P0-08", "SET-P0-01", "SET-P0-02", "SET-P0-03", "SET-P0-04", "SET-P0-05", "SET-P0-06", "SET-P0-07", "SET-P0-08", "SET-P0-09", "SET-P0-10", "SET-P0-11", "SET-P0-12", "SET-P0-13", "SET-P0-14"];
 export declare const WEB_E2E_WEB31_SCENARIOS_V1: readonly ["WEB31-P0-01", "WEB31-P0-02", "WEB31-P0-03", "WEB31-P0-04", "WEB31-P0-05", "WEB31-P0-06", "WEB31-P0-07", "WEB31-P0-08", "WEB31-P0-09", "WEB31-P0-10", "WEB31-P0-11", "WEB31-P0-12"];
-export declare const WEB_E2E_FULL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12")[];
-export declare const WEB_E2E_SETTINGS_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12")[];
+export declare const WEB_E2E_WEB32_SCENARIOS_V1: readonly ["WEB32-P0-01", "WEB32-P0-02", "WEB32-P0-03", "WEB32-P0-04", "WEB32-P0-05", "WEB32-P0-06", "WEB32-P0-07", "WEB32-P0-08", "WEB32-P0-09", "WEB32-P0-10", "WEB32-P0-11", "WEB32-P0-12"];
+export declare const WEB_E2E_WEB33_THEME_SCENARIOS_V1: readonly ["WEB33-P0-01", "WEB33-P0-02", "WEB33-P0-03", "WEB33-P0-04", "WEB33-P0-05", "WEB33-P0-06", "WEB33-P0-07", "WEB33-P0-08", "WEB33-P0-09", "WEB33-P0-10", "WEB33-P0-11", "WEB33-P0-12"];
+export declare const WEB_E2E_WEB33_SESSION_SCENARIOS_V1: readonly ["WEB33-P0-16", "WEB33-P0-17", "WEB33-P0-18", "WEB33-P0-19", "WEB33-P0-20", "WEB33-P0-21", "WEB33-P0-22", "WEB33-P0-23", "WEB33-P0-24"];
+export declare const WEB_E2E_WEB33_SCENARIOS_V1: readonly ("WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
+export declare const WEB_E2E_FULL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12" | "WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
+export declare const WEB_E2E_SETTINGS_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12" | "WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
 export declare const WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1: readonly ["WEB31-P0-01", "WEB31-P0-02", "WEB31-P0-08", "WEB31-P0-09", "WEB31-P0-10", "WEB31-P0-12"];
-export declare const WEB_E2E_CRITICAL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12")[];
+export declare const WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1: readonly ["WEB32-P0-01", "WEB32-P0-04", "WEB32-P0-05", "WEB32-P0-06", "WEB32-P0-09", "WEB32-P0-11", "WEB32-P0-12"];
+export declare const WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1: readonly ["WEB33-P0-01", "WEB33-P0-03", "WEB33-P0-08", "WEB33-P0-10", "WEB33-P0-12", "WEB33-P0-16", "WEB33-P0-17", "WEB33-P0-18", "WEB33-P0-20", "WEB33-P0-21", "WEB33-P0-23", "WEB33-P0-24"];
+export declare const WEB_E2E_CRITICAL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12" | "WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
 export type ReleaseGateDecisionV1 = 'GO' | 'NO_GO';
 export interface TarballArtifactReceiptV1 {
     readonly version: typeof RELEASE_RECEIPT_VERSION_V1;

package/dist/runtime/release-receipts.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WEB_E2E_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_SETTINGS_SCENARIOS_V1 = exports.WEB_E2E_FULL_SCENARIOS_V1 = exports.WEB_E2E_WEB31_SCENARIOS_V1 = exports.WEB_E2E_LEGACY_SCENARIOS_V1 = exports.SUPPORTED_RELEASE_VERSION_LINE_V1 = exports.SUPPORTED_RELEASE_NODE_FLOORS_V1 = exports.SUPPORTED_RELEASE_NODE_MAJORS_V1 = exports.RELEASE_RECEIPT_VERSION_V1 = void 0;
+exports.WEB_E2E_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_SETTINGS_SCENARIOS_V1 = exports.WEB_E2E_FULL_SCENARIOS_V1 = exports.WEB_E2E_WEB33_SCENARIOS_V1 = exports.WEB_E2E_WEB33_SESSION_SCENARIOS_V1 = exports.WEB_E2E_WEB33_THEME_SCENARIOS_V1 = exports.WEB_E2E_WEB32_SCENARIOS_V1 = exports.WEB_E2E_WEB31_SCENARIOS_V1 = exports.WEB_E2E_LEGACY_SCENARIOS_V1 = exports.SUPPORTED_RELEASE_VERSION_LINE_V1 = exports.SUPPORTED_RELEASE_NODE_FLOORS_V1 = exports.SUPPORTED_RELEASE_NODE_MAJORS_V1 = exports.RELEASE_RECEIPT_VERSION_V1 = void 0;
 exports.createTarballArtifactReceiptV1 = createTarballArtifactReceiptV1;
 exports.verifyTarballArtifactReceiptV1 = verifyTarballArtifactReceiptV1;
 exports.createRuntimeMatrixReceiptV1 = createRuntimeMatrixReceiptV1;
@@ -58,9 +58,54 @@ exports.WEB_E2E_WEB31_SCENARIOS_V1 = Object.freeze([
     'WEB31-P0-11',
     'WEB31-P0-12',
 ]);
+exports.WEB_E2E_WEB32_SCENARIOS_V1 = Object.freeze([
+    'WEB32-P0-01',
+    'WEB32-P0-02',
+    'WEB32-P0-03',
+    'WEB32-P0-04',
+    'WEB32-P0-05',
+    'WEB32-P0-06',
+    'WEB32-P0-07',
+    'WEB32-P0-08',
+    'WEB32-P0-09',
+    'WEB32-P0-10',
+    'WEB32-P0-11',
+    'WEB32-P0-12',
+]);
+exports.WEB_E2E_WEB33_THEME_SCENARIOS_V1 = Object.freeze([
+    'WEB33-P0-01',
+    'WEB33-P0-02',
+    'WEB33-P0-03',
+    'WEB33-P0-04',
+    'WEB33-P0-05',
+    'WEB33-P0-06',
+    'WEB33-P0-07',
+    'WEB33-P0-08',
+    'WEB33-P0-09',
+    'WEB33-P0-10',
+    'WEB33-P0-11',
+    'WEB33-P0-12',
+]);
+exports.WEB_E2E_WEB33_SESSION_SCENARIOS_V1 = Object.freeze([
+    'WEB33-P0-16',
+    'WEB33-P0-17',
+    'WEB33-P0-18',
+    'WEB33-P0-19',
+    'WEB33-P0-20',
+    'WEB33-P0-21',
+    'WEB33-P0-22',
+    'WEB33-P0-23',
+    'WEB33-P0-24',
+]);
+exports.WEB_E2E_WEB33_SCENARIOS_V1 = Object.freeze([
+    ...exports.WEB_E2E_WEB33_THEME_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB33_SESSION_SCENARIOS_V1,
+]);
 exports.WEB_E2E_FULL_SCENARIOS_V1 = Object.freeze([
     ...exports.WEB_E2E_LEGACY_SCENARIOS_V1,
     ...exports.WEB_E2E_WEB31_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB32_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB33_SCENARIOS_V1,
 ]);
 exports.WEB_E2E_SETTINGS_SCENARIOS_V1 = Object.freeze(exports.WEB_E2E_FULL_SCENARIOS_V1.filter(id => id.startsWith('SET-P0-')));
 exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = Object.freeze([
@@ -71,10 +116,35 @@ exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = Object.freeze([
     'WEB31-P0-10',
     'WEB31-P0-12',
 ]);
+exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1 = Object.freeze([
+    'WEB32-P0-01',
+    'WEB32-P0-04',
+    'WEB32-P0-05',
+    'WEB32-P0-06',
+    'WEB32-P0-09',
+    'WEB32-P0-11',
+    'WEB32-P0-12',
+]);
+exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1 = Object.freeze([
+    'WEB33-P0-01',
+    'WEB33-P0-03',
+    'WEB33-P0-08',
+    'WEB33-P0-10',
+    'WEB33-P0-12',
+    'WEB33-P0-16',
+    'WEB33-P0-17',
+    'WEB33-P0-18',
+    'WEB33-P0-20',
+    'WEB33-P0-21',
+    'WEB33-P0-23',
+    'WEB33-P0-24',
+]);
 exports.WEB_E2E_CRITICAL_SCENARIOS_V1 = Object.freeze([
     ...exports.WEB_E2E_LEGACY_SCENARIOS_V1.slice(0, 4),
     ...exports.WEB_E2E_SETTINGS_SCENARIOS_V1,
     ...exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1,
 ]);
 function createTarballArtifactReceiptV1(input) {
     assertIsoTimestamp(input.createdAt, 'artifact createdAt');
@@ -221,6 +291,8 @@ function createWebE2EReleaseReceiptV1(input) {
             `consecutive=${primaryTimelineIsConsecutive}`,
     });
     const runtimeMajors = runtimeRuns.map(run => run.environment.nodeMajor);
+    const runtimeRunIds = new Set(runtimeRuns.map(run => run.runId));
+    const runtimeManifestDigests = new Set(runtimeRuns.map(run => run.manifestDigest));
     checks.push({
         id: 'node_matrix_complete',
         status: runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
@@ -229,6 +301,21 @@ function createWebE2EReleaseReceiptV1(input) {
             : 'fail',
         detail: `expected=${exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.join(',')} observed=${runtimeMajors.join(',') || 'none'}`,
     });
+    checks.push({
+        id: 'node_matrix_runs_unique',
+        status: runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+            runtimeRunIds.size === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+            runtimeManifestDigests.size === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length
+            ? 'pass'
+            : 'fail',
+        detail: `runs=${runtimeRuns.length} uniqueRunIds=${runtimeRunIds.size} ` +
+            `uniqueManifests=${runtimeManifestDigests.size}`,
+    });
+    checks.push({
+        id: 'live_canary',
+        status: input.liveCanary === 'FAIL' ? 'fail' : 'pass',
+        detail: `observed=${input.liveCanary}`,
+    });
     const primaryCoverage = primaryRuns.length === 3 &&
         primaryRuns.every(run => run.role === 'primary' && sameOrderedValues(run.scenarioIds, exports.WEB_E2E_FULL_SCENARIOS_V1));
     const runtimeCoverage = runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
@@ -310,6 +397,38 @@ function createWebE2EReleaseReceiptV1(input) {
             ? `all WEB31 journeys passed in three primary runs; critical Web/PTY journeys passed on Node ${runtimeMajors.join(',')} using one tgz`
             : 'WEB31 full or critical exact-tarball coverage is missing, skipped, failed, or dirty',
     });
+    const web32PrimaryComplete = primaryRuns.length === 3 &&
+        primaryRuns.every(run => run.decision === 'GO' &&
+            run.cleanEvidence &&
+            exports.WEB_E2E_WEB32_SCENARIOS_V1.every(id => run.scenarioIds.includes(id)));
+    const web32MatrixComplete = runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+        runtimeRuns.every(run => run.decision === 'GO' &&
+            run.cleanEvidence &&
+            run.tarballSha256 === input.tarballSha256 &&
+            exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1.every(id => run.scenarioIds.includes(id)));
+    checks.push({
+        id: 'WEB32-P0-12',
+        status: web32PrimaryComplete && web32MatrixComplete ? 'pass' : 'fail',
+        detail: web32PrimaryComplete && web32MatrixComplete
+            ? `all WEB32 journeys passed in three primary runs; critical Composer/Layout journeys passed on Node ${runtimeMajors.join(',')} using one tgz`
+            : 'WEB32 full or critical exact-tarball coverage is missing, skipped, failed, or dirty',
+    });
+    const web33PrimaryComplete = primaryRuns.length === 3 &&
+        primaryRuns.every(run => run.decision === 'GO' &&
+            run.cleanEvidence &&
+            exports.WEB_E2E_WEB33_SCENARIOS_V1.every(id => run.scenarioIds.includes(id)));
+    const web33MatrixComplete = runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+        runtimeRuns.every(run => run.decision === 'GO' &&
+            run.cleanEvidence &&
+            run.tarballSha256 === input.tarballSha256 &&
+            exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1.every(id => run.scenarioIds.includes(id)));
+    checks.push({
+        id: 'WEB33-P0-24',
+        status: web33PrimaryComplete && web33MatrixComplete ? 'pass' : 'fail',
+        detail: web33PrimaryComplete && web33MatrixComplete
+            ? `all WEB33 journeys passed in three primary runs; critical theme/session journeys passed on Node ${runtimeMajors.join(',')} using one tgz`
+            : 'WEB33 full or critical exact-tarball coverage is missing, skipped, failed, or dirty',
+    });
     const decision = checks.every(check => check.status === 'pass')
         ? 'GO'
         : 'NO_GO';

package/dist/runtime/session-composer-control.d.ts

@@ -0,0 +1,136 @@
+import type { OrionCodeCLIConfig } from '../services/config';
+import { type CompactCoordinator } from '../services/compact';
+import type { Store } from '../framework/store';
+import type { LLMService } from '../services/llm';
+import { type ContextUsageSnapshot } from '../services/model-context';
+import { type EffortLevel, type EffortPreference, type ResolvedEffort } from '../services/effort';
+import { type ToolConfirmationPolicy } from '../services/global-config';
+import { type SessionMeta } from '../services/session-storage';
+import type { ModelSwitchResult } from './model-coordinator';
+import type { ModelCoordinator } from './model-coordinator';
+export type SessionControlValueSourceV1 = 'session' | 'project' | 'global' | 'model-default';
+export interface SessionModelCatalogEntryV1 {
+    readonly id: string;
+    readonly label: string;
+    readonly providerId: string;
+    readonly providerLabel: string;
+    readonly contextWindow: number;
+    readonly maxOutputTokens: number;
+    readonly reasoning: boolean;
+    readonly effortLevels: readonly EffortLevel[];
+    readonly defaultEffort?: EffortLevel;
+    readonly aliases: readonly string[];
+    readonly fingerprint: string;
+}
+export interface SessionModelCatalogV1 {
+    readonly revision: string;
+    readonly models: readonly SessionModelCatalogEntryV1[];
+    readonly unavailableProviders: readonly {
+        readonly id: string;
+        readonly reason: string;
+    }[];
+}
+export interface SessionPermissionSelectionV1 {
+    readonly effective: ToolConfirmationPolicy;
+    readonly override: ToolConfirmationPolicy | null;
+    readonly projectDefault: ToolConfirmationPolicy;
+    readonly source: 'session' | 'project';
+}
+export interface SessionModelSelectionV1 {
+    readonly modelId: string;
+    readonly providerId: string | null;
+    readonly providerLabel: string | null;
+    readonly contextWindow: number;
+    readonly maxOutputTokens: number;
+    readonly effort: {
+        readonly requested: EffortPreference;
+        readonly effective: EffortLevel | null;
+        readonly source: ResolvedEffort['source'];
+        readonly supported: boolean;
+        readonly supportedLevels: readonly EffortLevel[];
+        readonly warning?: string;
+    };
+}
+export interface SessionComposerRuntimeStateV1 {
+    readonly sessionId: string;
+    readonly model: SessionModelSelectionV1;
+    readonly permission: SessionPermissionSelectionV1;
+    readonly contextUsage: ContextUsageSnapshot | null;
+    readonly pending: {
+        readonly model: {
+            readonly modelId: string;
+            readonly effort: EffortPreference;
+        } | null;
+        readonly permission: {
+            readonly override: ToolConfirmationPolicy | null;
+        } | null;
+    };
+    readonly lastError: {
+        readonly code: SessionComposerControlError['code'];
+        readonly message: string;
+    } | null;
+}
+export interface SessionModelSwitchReceiptV1 {
+    readonly receiptId: string;
+    readonly fromModelId: string;
+    readonly toModelId: string;
+    readonly requestedEffort: EffortPreference;
+    readonly compacted: boolean;
+    readonly compactRequired: boolean;
+    readonly compactPreflight: NonNullable<ModelSwitchResult['compactPreflight']> | 'deferred';
+    readonly appliesFrom: 'immediate' | 'next-logical-request';
+    readonly sessionPreferencesDigest: string;
+}
+export interface SessionPermissionReceiptV1 {
+    readonly receiptId: string;
+    readonly previous: SessionPermissionSelectionV1;
+    readonly current: SessionPermissionSelectionV1;
+    readonly appliesFrom: 'immediate' | 'next-tool-admission';
+    readonly sessionPreferencesDigest: string;
+}
+export interface SessionComposerControlServiceOptionsV1 {
+    readonly cwd: string;
+    readonly config: OrionCodeCLIConfig;
+    readonly store: Store;
+    readonly llm: LLMService | null;
+    readonly compactCoordinator: CompactCoordinator;
+    readonly modelCoordinator?: ModelCoordinator;
+    readonly getSession: () => SessionMeta | null;
+    readonly ensureSession: () => SessionMeta;
+    readonly projectToolConfirmation: () => ToolConfirmationPolicy;
+    readonly applySessionState: (session: SessionMeta | null) => void;
+    readonly rebindSessionRuntime: () => Promise<void>;
+    readonly runtimeIdle: () => boolean;
+}
+export declare class SessionComposerControlError extends Error {
+    readonly code: 'runtime_busy' | 'model_unavailable' | 'model_effort_unsupported' | 'model_switch_rolled_back' | 'permission_override_rejected' | 'composer_control_conflict' | 'composer_recovery_required' | 'session_unavailable';
+    constructor(code: 'runtime_busy' | 'model_unavailable' | 'model_effort_unsupported' | 'model_switch_rolled_back' | 'permission_override_rejected' | 'composer_control_conflict' | 'composer_recovery_required' | 'session_unavailable', message: string);
+}
+/** Product-owned Session control service shared by slash commands and Web. */
+export declare class SessionComposerControlServiceV1 {
+    private readonly options;
+    private pendingModel;
+    private lastError;
+    private readonly listeners;
+    constructor(options: SessionComposerControlServiceOptionsV1);
+    subscribe(listener: () => void): () => void;
+    describe(): SessionComposerRuntimeStateV1;
+    describeSession(session: SessionMeta): SessionComposerRuntimeStateV1;
+    catalog(): SessionModelCatalogV1;
+    selectModel(input: {
+        readonly modelId: string;
+        readonly effort?: EffortPreference;
+    }): Promise<SessionModelSwitchReceiptV1>;
+    setEffort(effort: EffortPreference): Promise<SessionModelSwitchReceiptV1>;
+    setPermissionOverride(override: ToolConfirmationPolicy | null): Promise<SessionPermissionReceiptV1>;
+    /** Apply controls queued during an active turn before the next logical request starts. */
+    applyPendingAtLogicalBoundary(): Promise<void>;
+    private project;
+    private resolveProfile;
+    private legacyProfile;
+    private resolveEffort;
+    private emitChanged;
+    private failControl;
+    private commitCompact;
+}
+//# sourceMappingURL=session-composer-control.d.ts.map