@orion-agents/orion-code 0.3.2 → 0.3.7

package/dist/runtime/product-orion-runtime.d.ts

@@ -2,12 +2,14 @@ import type { Store } from '../framework/store';
 import type { OrionCodeCLIConfig } from '../services/config';
 import type { CompactCoordinator } from '../services/compact/coordinator';
 import { LLMService } from '../services/llm';
+import type { ProviderRequestGate } from '../services/provider-resilience/request-gate';
 import { type BuiltinToolCatalogV1 } from './builtin-tool-provider';
 import type { McpConnectorV1, McpServerDescriptorInputV1 } from './mcp';
 import { type OrionRuntimeV1 } from './orion-runtime-v1';
 import type { SkillProviderV1 } from './skills';
 import type { FirstPartyApprovalHandlerV1 } from './first-party-tool-services';
 import type { ThreadSessionRuntimeActivationV1 } from './thread-session-view';
+import { type WorkspaceMutationCoordinatorV1 } from './step-snapshot';
 import type { SubagentThreadReceiptV1 } from './subagent-thread-runtime';
 import { type SubagentRole } from './subagents/types';
 export interface ProductOrionRuntimeOptionsV1 {
@@ -22,6 +24,9 @@ export interface ProductOrionRuntimeOptionsV1 {
     readonly mcpDescriptors?: readonly McpServerDescriptorInputV1[];
     readonly mcpConnector?: McpConnectorV1;
     readonly approvalHandler?: FirstPartyApprovalHandlerV1;
+    readonly workspaceMutationCoordinator?: WorkspaceMutationCoordinatorV1;
+    /** Workspace-scoped provider concurrency/cooldown authority shared by root and child calls. */
+    readonly providerRequestGate?: ProviderRequestGate;
     /** Must create a distinct mutable provider client for every child request. */
     readonly createSubagentModelExecutor?: (input: {
         readonly role: SubagentRole;

package/dist/runtime/product-orion-runtime.js

@@ -103,6 +103,7 @@ function createProductOrionRuntimeV1(options, sessionId, activation) {
             connector: options.mcpConnector ?? INERT_MCP_CONNECTOR,
         },
         approvalHandler: options.approvalHandler,
+        workspaceMutationCoordinator: options.workspaceMutationCoordinator,
         ...(subagents ? { subagents } : {}),
         resolveCapabilityConfiguration: async (input, context) => {
             if (!promptState || promptState.turnId !== input.turnId) {
@@ -365,6 +366,7 @@ function createProductSubagentCompositionV1(options, model) {
                     modelLabel: model.modelId,
                     rootObjectiveSummary: input.input,
                     abortSignal: input.abortSignal,
+                    sharedGate: options.providerRequestGate,
                 });
                 if (!bundle) {
                     productionRuntime.close('subagent_turn_unavailable');

package/dist/runtime/release-receipts.d.ts

@@ -6,11 +6,15 @@ export declare const SUPPORTED_RELEASE_VERSION_LINE_V1: "0.3.x";
 export declare const WEB_E2E_LEGACY_SCENARIOS_V1: readonly ["E2E-P0-01", "E2E-P0-02", "E2E-P0-03", "E2E-P0-04", "E2E-P0-05", "E2E-P0-06", "E2E-P0-07", "E2E-P0-08", "SET-P0-01", "SET-P0-02", "SET-P0-03", "SET-P0-04", "SET-P0-05", "SET-P0-06", "SET-P0-07", "SET-P0-08", "SET-P0-09", "SET-P0-10", "SET-P0-11", "SET-P0-12", "SET-P0-13", "SET-P0-14"];
 export declare const WEB_E2E_WEB31_SCENARIOS_V1: readonly ["WEB31-P0-01", "WEB31-P0-02", "WEB31-P0-03", "WEB31-P0-04", "WEB31-P0-05", "WEB31-P0-06", "WEB31-P0-07", "WEB31-P0-08", "WEB31-P0-09", "WEB31-P0-10", "WEB31-P0-11", "WEB31-P0-12"];
 export declare const WEB_E2E_WEB32_SCENARIOS_V1: readonly ["WEB32-P0-01", "WEB32-P0-02", "WEB32-P0-03", "WEB32-P0-04", "WEB32-P0-05", "WEB32-P0-06", "WEB32-P0-07", "WEB32-P0-08", "WEB32-P0-09", "WEB32-P0-10", "WEB32-P0-11", "WEB32-P0-12"];
-export declare const WEB_E2E_FULL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12")[];
-export declare const WEB_E2E_SETTINGS_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12")[];
+export declare const WEB_E2E_WEB33_THEME_SCENARIOS_V1: readonly ["WEB33-P0-01", "WEB33-P0-02", "WEB33-P0-03", "WEB33-P0-04", "WEB33-P0-05", "WEB33-P0-06", "WEB33-P0-07", "WEB33-P0-08", "WEB33-P0-09", "WEB33-P0-10", "WEB33-P0-11", "WEB33-P0-12"];
+export declare const WEB_E2E_WEB33_SESSION_SCENARIOS_V1: readonly ["WEB33-P0-16", "WEB33-P0-17", "WEB33-P0-18", "WEB33-P0-19", "WEB33-P0-20", "WEB33-P0-21", "WEB33-P0-22", "WEB33-P0-23", "WEB33-P0-24"];
+export declare const WEB_E2E_WEB33_SCENARIOS_V1: readonly ("WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
+export declare const WEB_E2E_FULL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12" | "WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
+export declare const WEB_E2E_SETTINGS_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12" | "WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
 export declare const WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1: readonly ["WEB31-P0-01", "WEB31-P0-02", "WEB31-P0-08", "WEB31-P0-09", "WEB31-P0-10", "WEB31-P0-12"];
 export declare const WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1: readonly ["WEB32-P0-01", "WEB32-P0-04", "WEB32-P0-05", "WEB32-P0-06", "WEB32-P0-09", "WEB32-P0-11", "WEB32-P0-12"];
-export declare const WEB_E2E_CRITICAL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12")[];
+export declare const WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1: readonly ["WEB33-P0-01", "WEB33-P0-03", "WEB33-P0-08", "WEB33-P0-10", "WEB33-P0-12", "WEB33-P0-16", "WEB33-P0-17", "WEB33-P0-18", "WEB33-P0-20", "WEB33-P0-21", "WEB33-P0-23", "WEB33-P0-24"];
+export declare const WEB_E2E_CRITICAL_SCENARIOS_V1: readonly ("E2E-P0-01" | "E2E-P0-02" | "E2E-P0-03" | "E2E-P0-04" | "E2E-P0-05" | "E2E-P0-06" | "E2E-P0-07" | "E2E-P0-08" | "SET-P0-01" | "SET-P0-02" | "SET-P0-03" | "SET-P0-04" | "SET-P0-05" | "SET-P0-06" | "SET-P0-07" | "SET-P0-08" | "SET-P0-09" | "SET-P0-10" | "SET-P0-11" | "SET-P0-12" | "SET-P0-13" | "SET-P0-14" | "WEB31-P0-01" | "WEB31-P0-02" | "WEB31-P0-03" | "WEB31-P0-04" | "WEB31-P0-05" | "WEB31-P0-06" | "WEB31-P0-07" | "WEB31-P0-08" | "WEB31-P0-09" | "WEB31-P0-10" | "WEB31-P0-11" | "WEB31-P0-12" | "WEB32-P0-01" | "WEB32-P0-02" | "WEB32-P0-03" | "WEB32-P0-04" | "WEB32-P0-05" | "WEB32-P0-06" | "WEB32-P0-07" | "WEB32-P0-08" | "WEB32-P0-09" | "WEB32-P0-10" | "WEB32-P0-11" | "WEB32-P0-12" | "WEB33-P0-01" | "WEB33-P0-02" | "WEB33-P0-03" | "WEB33-P0-04" | "WEB33-P0-05" | "WEB33-P0-06" | "WEB33-P0-07" | "WEB33-P0-08" | "WEB33-P0-09" | "WEB33-P0-10" | "WEB33-P0-11" | "WEB33-P0-12" | "WEB33-P0-16" | "WEB33-P0-17" | "WEB33-P0-18" | "WEB33-P0-19" | "WEB33-P0-20" | "WEB33-P0-21" | "WEB33-P0-22" | "WEB33-P0-23" | "WEB33-P0-24")[];
 export type ReleaseGateDecisionV1 = 'GO' | 'NO_GO';
 export interface TarballArtifactReceiptV1 {
     readonly version: typeof RELEASE_RECEIPT_VERSION_V1;

package/dist/runtime/release-receipts.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WEB_E2E_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_SETTINGS_SCENARIOS_V1 = exports.WEB_E2E_FULL_SCENARIOS_V1 = exports.WEB_E2E_WEB32_SCENARIOS_V1 = exports.WEB_E2E_WEB31_SCENARIOS_V1 = exports.WEB_E2E_LEGACY_SCENARIOS_V1 = exports.SUPPORTED_RELEASE_VERSION_LINE_V1 = exports.SUPPORTED_RELEASE_NODE_FLOORS_V1 = exports.SUPPORTED_RELEASE_NODE_MAJORS_V1 = exports.RELEASE_RECEIPT_VERSION_V1 = void 0;
+exports.WEB_E2E_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = exports.WEB_E2E_SETTINGS_SCENARIOS_V1 = exports.WEB_E2E_FULL_SCENARIOS_V1 = exports.WEB_E2E_WEB33_SCENARIOS_V1 = exports.WEB_E2E_WEB33_SESSION_SCENARIOS_V1 = exports.WEB_E2E_WEB33_THEME_SCENARIOS_V1 = exports.WEB_E2E_WEB32_SCENARIOS_V1 = exports.WEB_E2E_WEB31_SCENARIOS_V1 = exports.WEB_E2E_LEGACY_SCENARIOS_V1 = exports.SUPPORTED_RELEASE_VERSION_LINE_V1 = exports.SUPPORTED_RELEASE_NODE_FLOORS_V1 = exports.SUPPORTED_RELEASE_NODE_MAJORS_V1 = exports.RELEASE_RECEIPT_VERSION_V1 = void 0;
 exports.createTarballArtifactReceiptV1 = createTarballArtifactReceiptV1;
 exports.verifyTarballArtifactReceiptV1 = verifyTarballArtifactReceiptV1;
 exports.createRuntimeMatrixReceiptV1 = createRuntimeMatrixReceiptV1;
@@ -72,10 +72,40 @@ exports.WEB_E2E_WEB32_SCENARIOS_V1 = Object.freeze([
     'WEB32-P0-11',
     'WEB32-P0-12',
 ]);
+exports.WEB_E2E_WEB33_THEME_SCENARIOS_V1 = Object.freeze([
+    'WEB33-P0-01',
+    'WEB33-P0-02',
+    'WEB33-P0-03',
+    'WEB33-P0-04',
+    'WEB33-P0-05',
+    'WEB33-P0-06',
+    'WEB33-P0-07',
+    'WEB33-P0-08',
+    'WEB33-P0-09',
+    'WEB33-P0-10',
+    'WEB33-P0-11',
+    'WEB33-P0-12',
+]);
+exports.WEB_E2E_WEB33_SESSION_SCENARIOS_V1 = Object.freeze([
+    'WEB33-P0-16',
+    'WEB33-P0-17',
+    'WEB33-P0-18',
+    'WEB33-P0-19',
+    'WEB33-P0-20',
+    'WEB33-P0-21',
+    'WEB33-P0-22',
+    'WEB33-P0-23',
+    'WEB33-P0-24',
+]);
+exports.WEB_E2E_WEB33_SCENARIOS_V1 = Object.freeze([
+    ...exports.WEB_E2E_WEB33_THEME_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB33_SESSION_SCENARIOS_V1,
+]);
 exports.WEB_E2E_FULL_SCENARIOS_V1 = Object.freeze([
     ...exports.WEB_E2E_LEGACY_SCENARIOS_V1,
     ...exports.WEB_E2E_WEB31_SCENARIOS_V1,
     ...exports.WEB_E2E_WEB32_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB33_SCENARIOS_V1,
 ]);
 exports.WEB_E2E_SETTINGS_SCENARIOS_V1 = Object.freeze(exports.WEB_E2E_FULL_SCENARIOS_V1.filter(id => id.startsWith('SET-P0-')));
 exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1 = Object.freeze([
@@ -95,11 +125,26 @@ exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1 = Object.freeze([
     'WEB32-P0-11',
     'WEB32-P0-12',
 ]);
+exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1 = Object.freeze([
+    'WEB33-P0-01',
+    'WEB33-P0-03',
+    'WEB33-P0-08',
+    'WEB33-P0-10',
+    'WEB33-P0-12',
+    'WEB33-P0-16',
+    'WEB33-P0-17',
+    'WEB33-P0-18',
+    'WEB33-P0-20',
+    'WEB33-P0-21',
+    'WEB33-P0-23',
+    'WEB33-P0-24',
+]);
 exports.WEB_E2E_CRITICAL_SCENARIOS_V1 = Object.freeze([
     ...exports.WEB_E2E_LEGACY_SCENARIOS_V1.slice(0, 4),
     ...exports.WEB_E2E_SETTINGS_SCENARIOS_V1,
     ...exports.WEB_E2E_WEB31_CRITICAL_SCENARIOS_V1,
     ...exports.WEB_E2E_WEB32_CRITICAL_SCENARIOS_V1,
+    ...exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1,
 ]);
 function createTarballArtifactReceiptV1(input) {
     assertIsoTimestamp(input.createdAt, 'artifact createdAt');
@@ -246,6 +291,8 @@ function createWebE2EReleaseReceiptV1(input) {
             `consecutive=${primaryTimelineIsConsecutive}`,
     });
     const runtimeMajors = runtimeRuns.map(run => run.environment.nodeMajor);
+    const runtimeRunIds = new Set(runtimeRuns.map(run => run.runId));
+    const runtimeManifestDigests = new Set(runtimeRuns.map(run => run.manifestDigest));
     checks.push({
         id: 'node_matrix_complete',
         status: runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
@@ -254,6 +301,21 @@ function createWebE2EReleaseReceiptV1(input) {
             : 'fail',
         detail: `expected=${exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.join(',')} observed=${runtimeMajors.join(',') || 'none'}`,
     });
+    checks.push({
+        id: 'node_matrix_runs_unique',
+        status: runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+            runtimeRunIds.size === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+            runtimeManifestDigests.size === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length
+            ? 'pass'
+            : 'fail',
+        detail: `runs=${runtimeRuns.length} uniqueRunIds=${runtimeRunIds.size} ` +
+            `uniqueManifests=${runtimeManifestDigests.size}`,
+    });
+    checks.push({
+        id: 'live_canary',
+        status: input.liveCanary === 'FAIL' ? 'fail' : 'pass',
+        detail: `observed=${input.liveCanary}`,
+    });
     const primaryCoverage = primaryRuns.length === 3 &&
         primaryRuns.every(run => run.role === 'primary' && sameOrderedValues(run.scenarioIds, exports.WEB_E2E_FULL_SCENARIOS_V1));
     const runtimeCoverage = runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
@@ -351,6 +413,22 @@ function createWebE2EReleaseReceiptV1(input) {
             ? `all WEB32 journeys passed in three primary runs; critical Composer/Layout journeys passed on Node ${runtimeMajors.join(',')} using one tgz`
             : 'WEB32 full or critical exact-tarball coverage is missing, skipped, failed, or dirty',
     });
+    const web33PrimaryComplete = primaryRuns.length === 3 &&
+        primaryRuns.every(run => run.decision === 'GO' &&
+            run.cleanEvidence &&
+            exports.WEB_E2E_WEB33_SCENARIOS_V1.every(id => run.scenarioIds.includes(id)));
+    const web33MatrixComplete = runtimeRuns.length === exports.SUPPORTED_RELEASE_NODE_MAJORS_V1.length &&
+        runtimeRuns.every(run => run.decision === 'GO' &&
+            run.cleanEvidence &&
+            run.tarballSha256 === input.tarballSha256 &&
+            exports.WEB_E2E_WEB33_CRITICAL_SCENARIOS_V1.every(id => run.scenarioIds.includes(id)));
+    checks.push({
+        id: 'WEB33-P0-24',
+        status: web33PrimaryComplete && web33MatrixComplete ? 'pass' : 'fail',
+        detail: web33PrimaryComplete && web33MatrixComplete
+            ? `all WEB33 journeys passed in three primary runs; critical theme/session journeys passed on Node ${runtimeMajors.join(',')} using one tgz`
+            : 'WEB33 full or critical exact-tarball coverage is missing, skipped, failed, or dirty',
+    });
     const decision = checks.every(check => check.status === 'pass')
         ? 'GO'
         : 'NO_GO';

package/dist/runtime/rich-text/ansi-parser.js

@@ -204,14 +204,24 @@ function parseSgrParams(params) {
                 setForeground(change, named('white'));
                 break;
             // Unrecognised SGR codes are ignored (they are still valid SGR).
-            default: break;
+            default:
+                break;
         }
     }
     if (!hasAny)
         return null;
     return change;
 }
-const VALID_NAMED_COLORS = ['black', 'red', 'green', 'yellow', 'blue', 'magenta', 'cyan', 'white'];
+const VALID_NAMED_COLORS = [
+    'black',
+    'red',
+    'green',
+    'yellow',
+    'blue',
+    'magenta',
+    'cyan',
+    'white',
+];
 function named(name) {
     // The SGR code mapping only produces valid named colors, but guard anyway.
     const value = VALID_NAMED_COLORS.includes(name)

package/dist/runtime/rich-text/layout.js

@@ -32,10 +32,12 @@ function layoutBlock(block, width, theme, indent) {
             return layoutTable(block, width, theme, indent);
         case 'rule': {
             const available = Math.max(1, width - indent);
-            return [[
+            return [
+                [
                     { text: ' '.repeat(indent), style: theme('muted') },
                     { text: '─'.repeat(available), style: theme('muted') },
-                ]];
+                ],
+            ];
         }
     }
 }
@@ -80,10 +82,12 @@ function layoutList(block, width, theme, indent) {
     return rows;
 }
 function layoutQuote(block, width, theme, indent) {
-    const prefix = [{
+    const prefix = [
+        {
             text: `${' '.repeat(normalizeIndent(indent, width))}> `,
             style: theme('muted'),
-        }];
+        },
+    ];
     const prefixWidth = rowWidth(prefix);
     const childWidth = Math.max(1, width - prefixWidth);
     const rows = [];
@@ -105,14 +109,9 @@ function layoutCode(lines, width, theme, indent, language) {
     const rows = [];
     if (language) {
         const labelStyle = mergeStyles(style, theme('muted'));
-        const labelPrefix = safeIndent > 0
-            ? [{ text: ' '.repeat(safeIndent), style: labelStyle }]
-            : [];
+        const labelPrefix = safeIndent > 0 ? [{ text: ' '.repeat(safeIndent), style: labelStyle }] : [];
         const label = truncateToWidth(language, available);
-        rows.push(clampRow([
-            ...labelPrefix,
-            ...padRow([{ text: label, style: labelStyle }], available, labelStyle),
-        ], width));
+        rows.push(clampRow([...labelPrefix, ...padRow([{ text: label, style: labelStyle }], available, labelStyle)], width));
     }
     for (const line of lines.length > 0 ? lines : ['']) {
         const wrapped = wrapStyledSpans([{ text: line, style }], available, false);
@@ -157,9 +156,7 @@ function layoutTable(block, width, theme, indent) {
     if (columnWidth < 4)
         return layoutTableAsKeyValue(block, width, theme, safeIndent);
     const rows = [];
-    const indentSpan = safeIndent > 0
-        ? [{ text: ' '.repeat(safeIndent), style: theme('assistantText') }]
-        : [];
+    const indentSpan = safeIndent > 0 ? [{ text: ' '.repeat(safeIndent), style: theme('assistantText') }] : [];
     const header = [...indentSpan];
     for (let column = 0; column < columnCount; column++) {
         const text = block.headers[column]?.map(span => span.text).join('') ?? '';
@@ -195,7 +192,9 @@ function layoutTableAsKeyValue(block, width, theme, indent) {
             const value = sourceRow[column] ?? [];
             const prefix = [{ text: `${prefixIndent}${key}: `, style: theme('heading') }];
             const safePrefix = clampRow(prefix, Math.max(1, width - 1));
-            const continuation = [{ text: ' '.repeat(rowWidth(safePrefix)), style: theme('muted') }];
+            const continuation = [
+                { text: ' '.repeat(rowWidth(safePrefix)), style: theme('muted') },
+            ];
             const styledValue = value.map(span => ({
                 text: span.text,
                 style: resolveSpanStyle(span, theme('assistantText'), theme),
@@ -214,10 +213,7 @@ function layoutPrefixedSpans(spans, width, firstPrefix, continuationPrefix, soft
         return hasContent ? [prefixRow, ...body.map(row => clampRow(row, width))] : [prefixRow];
     }
     const bodyRows = wrapStyledSpans(spans, width - prefixWidth, softWrap);
-    return bodyRows.map((row, index) => clampRow([
-        ...(index === 0 ? firstPrefix : continuationPrefix),
-        ...row,
-    ], width));
+    return bodyRows.map((row, index) => clampRow([...(index === 0 ? firstPrefix : continuationPrefix), ...row], width));
 }
 function wrapStyledSpans(spans, width, softWrap) {
     const safeWidth = normalizeWidth(width);

package/dist/runtime/step-snapshot.d.ts

@@ -133,6 +133,7 @@ export declare class ToolRouterSnapshotV1 {
     assertIntegrity(): void;
 }
 export interface BoundToolExecutionRequestV1 {
+    readonly invocationId: string;
     readonly snapshot: StepSnapshotV1;
     readonly toolName: string;
     readonly args: Record<string, unknown>;
@@ -140,6 +141,15 @@ export interface BoundToolExecutionRequestV1 {
     readonly enforcement: 'full' | 'partial' | 'none';
     readonly abortSignal?: AbortSignal;
 }
+export interface WorkspaceMutationCoordinatorV1 {
+    runWorkspaceMutation<T>(input: {
+        readonly workspaceId: string;
+        readonly invocationId: string;
+        readonly toolName: string;
+        readonly args: Readonly<Record<string, unknown>>;
+        readonly abortSignal?: AbortSignal;
+    }, operation: () => T | Promise<T>): Promise<T>;
+}
 export interface BoundToolExecutionResultV1 {
     readonly terminal: 'completed' | 'failed' | 'interrupted' | 'indeterminate';
     readonly result: ToolResult;
@@ -147,6 +157,8 @@ export interface BoundToolExecutionResultV1 {
 }
 /** The only runtime primitive allowed to call a frozen concrete tool executor. */
 export declare class ExecutionService {
+    private readonly workspaceMutations?;
+    constructor(workspaceMutations?: WorkspaceMutationCoordinatorV1 | undefined);
     run(request: BoundToolExecutionRequestV1): Promise<BoundToolExecutionResultV1>;
 }
 export interface StepSnapshotV1 {

package/dist/runtime/step-snapshot.js

@@ -105,6 +105,9 @@ class ToolRouterSnapshotV1 {
 exports.ToolRouterSnapshotV1 = ToolRouterSnapshotV1;
 /** The only runtime primitive allowed to call a frozen concrete tool executor. */
 class ExecutionService {
+    constructor(workspaceMutations) {
+        this.workspaceMutations = workspaceMutations;
+    }
     async run(request) {
         const startedAt = Date.now();
         request.snapshot.toolRouter.assertIntegrity();
@@ -132,7 +135,17 @@ class ExecutionService {
         const timeout = setTimeout(() => timeoutController.abort(new Error('Tool invocation timed out')), request.snapshot.executionPolicy.timeoutMs);
         timeout.unref?.();
         try {
-            const result = await request.snapshot.toolRouter.executeBound(EXECUTION_SERVICE_TOKEN, request.toolName, structuredClone(request.args), { ...request.context, abortSignal: timeoutController.signal });
+            const execute = () => request.snapshot.toolRouter.executeBound(EXECUTION_SERVICE_TOKEN, request.toolName, structuredClone(request.args), { ...request.context, abortSignal: timeoutController.signal });
+            const descriptor = request.snapshot.toolRouter.resolveDescriptor(request.toolName);
+            const result = descriptor?.risk.effect === 'workspace_write' && this.workspaceMutations
+                ? await this.workspaceMutations.runWorkspaceMutation({
+                    workspaceId: request.snapshot.authority.projectRoot,
+                    invocationId: request.invocationId,
+                    toolName: request.toolName,
+                    args: request.args,
+                    abortSignal: timeoutController.signal,
+                }, execute)
+                : await execute();
             const presented = persistLargeToolOutput(request.context.cwd, request.toolName, result);
             return {
                 terminal: timeoutController.signal.aborted

package/dist/runtime/subagent-thread-runtime.js

@@ -624,7 +624,7 @@ function replayAllEvents(store) {
     const events = [];
     let cursor = 0;
     while (true) {
-        const page = store.replay(cursor);
+        const page = store.replay(cursor, undefined, 'subagent_receipt_journal');
         events.push(...page.events);
         if (!page.hasMore)
             return events;

package/dist/runtime/subagents/budget.js

@@ -122,7 +122,10 @@ class SubagentBudgetLedger {
     }
     snapshot() {
         const used = (0, types_1.sumSubtaskUsage)(this.reconciled);
-        const reservedModelRequests = (0, types_1.sumSubtaskUsage)(Array.from(this.reserved.entries()).map(([, n]) => ({ ...types_1.EMPTY_SUBTASK_USAGE, modelRequests: n }))).modelRequests;
+        const reservedModelRequests = (0, types_1.sumSubtaskUsage)(Array.from(this.reserved.entries()).map(([, n]) => ({
+            ...types_1.EMPTY_SUBTASK_USAGE,
+            modelRequests: n,
+        }))).modelRequests;
         const availableModelRequests = this.availableModelRequests();
         return {
             reservedModelRequests,

package/dist/runtime/subagents/policy.js

@@ -162,7 +162,9 @@ function clampSubagentConfig(config) {
     const clamp = (value, bounds) => Math.max(bounds.min, Math.min(bounds.max, Math.floor(value) || bounds.min));
     const roles = Array.from(new Set(config.roles)).filter(r => ['research', 'review', 'test-investigate'].includes(r));
     const clampedRoles = roles.length > 0 ? roles : DEFAULT_ROLES;
-    const mode = ['off', 'explicit', 'auto'].includes(config.mode) ? config.mode : 'auto';
+    const mode = ['off', 'explicit', 'auto'].includes(config.mode)
+        ? config.mode
+        : 'auto';
     return {
         mode,
         maxParallel: clamp(config.maxParallel, types_1.SUBAGENT_LIMITS.maxParallel),
@@ -217,9 +219,14 @@ function hasMultipleInvestigationDirections(objective) {
     const lower = objective.toLowerCase();
     // Conjunctions that signal multiple independent directions.
     const multiMarkers = [
-        / and /, /, and /, / or /,
-        / both /, / each /,
-        / parallel/, /separately/, /independently/,
+        / and /,
+        /, and /,
+        / or /,
+        / both /,
+        / each /,
+        / parallel/,
+        /separately/,
+        /independently/,
         / respectively/,
         // CJK: multiple items or separation
         /(和|与|以及|分别|并行|独立|同时)/,

package/dist/runtime/subagents/provider-gate.js

@@ -40,9 +40,8 @@ class SubagentProviderGate {
         this.cooldownTimer = null;
         const maxConcurrent = Number(options.maxConcurrent);
         // N12: guard against NaN/undefined/negative — clamp to 1 as safe minimum.
-        this.maxConcurrent = Number.isFinite(maxConcurrent) && maxConcurrent >= 1
-            ? Math.floor(maxConcurrent)
-            : 1;
+        this.maxConcurrent =
+            Number.isFinite(maxConcurrent) && maxConcurrent >= 1 ? Math.floor(maxConcurrent) : 1;
         this.now = options.now ?? (() => Date.now());
         this.scheduleTimer = options.scheduleTimer ?? defaultScheduleTimer;
         this.sharedGate = options.sharedGate ?? null;
@@ -179,7 +178,10 @@ exports.SubagentProviderGate = SubagentProviderGate;
 function defaultScheduleTimer(fn, ms) {
     const handle = setTimeout(fn, ms);
     // Don't keep the event loop alive solely for a cooldown wake.
-    if (typeof handle === 'object' && handle && 'unref' in handle && typeof handle.unref === 'function') {
+    if (typeof handle === 'object' &&
+        handle &&
+        'unref' in handle &&
+        typeof handle.unref === 'function') {
         handle.unref();
     }
     return {

package/dist/runtime/subagents/research-quality.js

@@ -87,7 +87,9 @@ function researchCostSummary(packet, opts = {}) {
     if (packet.sources.length > packet.request.maxSources) {
         notes.push(`source count exceeded request budget (${packet.sources.length} > ${packet.request.maxSources})`);
     }
-    if (opts.fetchedBytes !== undefined && packet.request.maxFetchBytes > 0 && opts.fetchedBytes > packet.request.maxFetchBytes) {
+    if (opts.fetchedBytes !== undefined &&
+        packet.request.maxFetchBytes > 0 &&
+        opts.fetchedBytes > packet.request.maxFetchBytes) {
         notes.push(`fetched bytes exceeded budget (${opts.fetchedBytes} > ${packet.request.maxFetchBytes})`);
     }
     return {

package/dist/runtime/subagents/research-renderer.js

@@ -126,7 +126,9 @@ function renderTerminal(view) {
 }
 function renderPrint(view) {
     // Stable schema text (not raw concatenated claim text).
-    const claims = view.claims.map(c => `  - ${c.id}: ${c.verification} (${c.bindingStatus})`).join('\n');
+    const claims = view.claims
+        .map(c => `  - ${c.id}: ${c.verification} (${c.bindingStatus})`)
+        .join('\n');
     return [
         `# Research: ${view.objective}`,
         `Status: ${view.stage} | Audit: ${view.auditStatus}`,
@@ -139,7 +141,12 @@ function renderPrint(view) {
 }
 function toLifecycleEvents(view, resolution) {
     const events = [
-        { type: 'research_started', packetId: view.packetId, objective: view.objective, mode: view.mode },
+        {
+            type: 'research_started',
+            packetId: view.packetId,
+            objective: view.objective,
+            mode: view.mode,
+        },
     ];
     for (const s of view.sources) {
         events.push({

package/dist/runtime/subagents/result-parser.js

@@ -46,7 +46,9 @@ function parseFindings(raw) {
             severity: parseSeverity(obj.severity),
             evidence: str(obj.evidence, 1500),
             file: obj.file != null ? str(obj.file, 500) : undefined,
-            line: typeof obj.line === 'number' && Number.isFinite(obj.line) ? Math.max(0, Math.floor(obj.line)) : undefined,
+            line: typeof obj.line === 'number' && Number.isFinite(obj.line)
+                ? Math.max(0, Math.floor(obj.line))
+                : undefined,
         });
         if (out.length >= MAX_FINDINGS)
             break;
@@ -54,7 +56,11 @@ function parseFindings(raw) {
     return out;
 }
 function parseSeverity(value) {
-    if (value === 'critical' || value === 'high' || value === 'medium' || value === 'low' || value === 'info') {
+    if (value === 'critical' ||
+        value === 'high' ||
+        value === 'medium' ||
+        value === 'low' ||
+        value === 'info') {
         return value;
     }
     return undefined;
@@ -163,11 +169,16 @@ function parseSubtaskResult(args) {
 function summarizeFailure(status, content) {
     const tail = truncate(content.trim(), 300);
     switch (status) {
-        case 'timed_out': return `Child timed out. Partial output: ${tail || '(none)'}`;
-        case 'cancelled': return `Child was cancelled. Partial output: ${tail || '(none)'}`;
-        case 'failed': return `Child failed. Output: ${tail || '(none)'}`;
-        case 'rejected': return `Child was rejected by policy before running.`;
-        default: return tail || '(no output)';
+        case 'timed_out':
+            return `Child timed out. Partial output: ${tail || '(none)'}`;
+        case 'cancelled':
+            return `Child was cancelled. Partial output: ${tail || '(none)'}`;
+        case 'failed':
+            return `Child failed. Output: ${tail || '(none)'}`;
+        case 'rejected':
+            return `Child was rejected by policy before running.`;
+        default:
+            return tail || '(no output)';
     }
 }
 //# sourceMappingURL=result-parser.js.map

package/dist/runtime/thread-event-store.d.ts

@@ -1,5 +1,5 @@
 import { type RuntimeEventEnvelopeV1, type RuntimeEventV1 } from './protocol/runtime-protocol-v1';
-import { type ThreadProjectionV1 } from './thread-projection';
+import { type ThreadProjectionDigestVersionV1, type ThreadProjectionV1 } from './thread-projection';
 import type { CompactAuthoritativeSourceV1, CompactCheckpointCommitReceiptV1, CompactCompareAndCommitInputV1, CompactCompareAndCommitResultV1, CompactRuntimeEventV1 } from './compact-transaction';
 export interface AppendRuntimeEventV1<T extends RuntimeEventV1 = RuntimeEventV1> {
     readonly turnId?: string;
@@ -14,6 +14,7 @@ export interface ThreadEventReplayV1 {
     readonly nextCursor: number;
     readonly hasMore: boolean;
 }
+export type ThreadEventReplayReasonV1 = 'direct' | 'capability_receipt_journal' | 'durable_tool_receipt' | 'legacy_materializer' | 'projection_schema_upgrade' | 'runtime_diagnostics_legacy' | 'subagent_receipt_journal' | 'thread_session_view' | 'turn_commit_journal' | 'ui_gap_recovery' | 'ui_initial_history';
 export interface ThreadEventCommitV1 {
     readonly events: readonly RuntimeEventEnvelopeV1[];
     readonly projection: ThreadProjectionV1;
@@ -43,6 +44,8 @@ export interface ThreadVerifiedPrefixV1 {
     readonly cursor: number;
     readonly eventDigest: string;
     readonly projectionDigest: string;
+    /** Missing on receipts written before projection digests were versioned. */
+    readonly projectionDigestVersion?: ThreadProjectionDigestVersionV1;
 }
 /**
  * Crash-safe derived checkpoint for opening a Thread in a fresh process.
@@ -84,11 +87,19 @@ export interface ThreadEventStoreOptionsV1 {
         readonly events: number;
     }) => void;
 }
+export interface ThreadEventStorePerformanceCountersV1 {
+    readonly logScans: number;
+    readonly bytesScanned: number;
+    readonly eventsScanned: number;
+    readonly scanReasons: Readonly<Record<string, number>>;
+}
 export declare class ThreadEventStoreError extends Error {
     readonly code: 'ORION_THREAD_EVENT_CORRUPT' | 'ORION_THREAD_EVENT_LIMIT' | 'ORION_THREAD_EVENT_CURSOR' | 'ORION_THREAD_EVENT_IDENTITY' | 'ORION_THREAD_COMPACT_INVALID' | 'ORION_THREAD_COMPACT_CONFLICT';
     readonly offset?: number | undefined;
     constructor(code: 'ORION_THREAD_EVENT_CORRUPT' | 'ORION_THREAD_EVENT_LIMIT' | 'ORION_THREAD_EVENT_CURSOR' | 'ORION_THREAD_EVENT_IDENTITY' | 'ORION_THREAD_COMPACT_INVALID' | 'ORION_THREAD_COMPACT_CONFLICT', message: string, offset?: number | undefined);
 }
+/** Process-local monotonic read counters for diagnostics and switch budgets. */
+export declare function threadEventStorePerformanceCountersV1(): ThreadEventStorePerformanceCountersV1;
 /**
  * Append-only durable fact store for a single Thread.
  *
@@ -120,14 +131,14 @@ export declare class ThreadEventStore {
     createEphemeral<T extends Extract<RuntimeEventV1, {
         type: 'item.delta';
     }>>(input: AppendRuntimeEventV1<T>): RuntimeEventEnvelopeV1<T>;
-    replay(cursor?: number, limit?: number): ThreadEventReplayV1;
+    replay(cursor?: number, limit?: number, reason?: ThreadEventReplayReasonV1): ThreadEventReplayV1;
     /**
      * Verify and seal an immutable imported prefix. The first call may scan the
      * authoritative log; later processes reuse the prefix receipt while the
      * exact log identity/projection checkpoint remains current. Internal append
      * carries the proof forward because the hash-chained prefix cannot change.
      */
-    verifyDurablePrefix(cursor: number, eventDigest: string, projectionDigest: string): boolean;
+    verifyDurablePrefix(cursor: number, eventDigest: string, projectionDigest: string, projectionDigestVersion?: ThreadProjectionDigestVersionV1): boolean;
     getCursor(): number;
     /**
      * Read the compact persisted receipt without parsing the potentially large