@phamvuhoang/otto-core 0.1.0

package/dist/pacing.js

@@ -0,0 +1,33 @@
+function abortError() {
+    const err = new Error("sleep aborted");
+    err.name = "AbortError";
+    return err;
+}
+/** Abortable delay. Resolves after `ms`; rejects with an AbortError if `signal` fires. */
+export function sleep(ms, signal) {
+    if (ms <= 0)
+        return Promise.resolve();
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted)
+            return reject(abortError());
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(abortError());
+        };
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+export const THROTTLE_RE = /429|overload|rate.?limit/i;
+/** True when a result's `api_error_status` looks like provider throttling. */
+export function isThrottle(apiErrorStatus) {
+    return apiErrorStatus != null && THROTTLE_RE.test(apiErrorStatus);
+}
+/** Adaptive cooldown multiplier: reset to 1 when healthy, else double up to `cap`. */
+export function nextCooldownFactor(prev, throttled, cap = 8) {
+    return throttled ? Math.min(prev * 2, cap) : 1;
+}
+//# sourceMappingURL=pacing.js.map

package/dist/pacing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pacing.js","sourceRoot":"","sources":["../src/pacing.ts"],"names":[],"mappings":"AAAA,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACvC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;IACxB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,KAAK,CAAC,EAAU,EAAE,MAAoB;IACpD,IAAI,EAAE,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IACtC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QACvB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,UAAU,UAAU,CAAC,cAA6B;IACtD,OAAO,cAAc,IAAI,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACpE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,SAAkB,EAClB,GAAG,GAAG,CAAC;IAEP,OAAO,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/panel.d.ts

@@ -0,0 +1,24 @@
+import type { StageResult } from "./runner.js";
+/** Per-sub-agent control returned by the loop: budget-stop + adaptive cooldown. */
+export type PanelStageControl = {
+    stop: boolean;
+    cooldownFactor: number;
+};
+export type RunPanelOptions = {
+    lenses: string[];
+    workspaceDir: string;
+    packageDir: string;
+    iteration: number;
+    maxRetries: number;
+    cooldownMs: number;
+    signal?: AbortSignal;
+    /**
+     * Called after every panel sub-agent (each lens + synth) so the loop owns
+     * budget + adaptive pacing for them too. Returns whether the budget is now
+     * exhausted (stop the panel) and the current adaptive cooldown factor.
+     */
+    onStage?: (sr: StageResult) => PanelStageControl;
+};
+/** Harness-orchestrated reviewer panel: read-only lens reviews → one synth fix(review) commit. */
+export declare function runPanel(opts: RunPanelOptions): Promise<StageResult>;
+//# sourceMappingURL=panel.d.ts.map

package/dist/panel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel.d.ts","sourceRoot":"","sources":["../src/panel.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAmE/C,mFAAmF;AACnF,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1E,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,WAAW,KAAK,iBAAiB,CAAC;CAClD,CAAC;AAkBF,kGAAkG;AAClG,wBAAsB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,WAAW,CAAC,CAuJ1E"}

package/dist/panel.js

@@ -0,0 +1,202 @@
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { join, posix } from "node:path";
+import { git } from "./git.js";
+import { executeStage } from "./stage-exec.js";
+import { sleep } from "./pacing.js";
+import { bold, dim, green, red, SYM } from "./stream-render.js";
+const LENS_STAGE = {
+    name: "review-lens",
+    template: "review-lens.md",
+    permissionMode: "bypassPermissions",
+};
+const VERIFY_STAGE = {
+    name: "review-verify",
+    template: "review-verify.md",
+    permissionMode: "bypassPermissions",
+};
+const SYNTH_STAGE = {
+    name: "review-synth",
+    template: "review-synth.md",
+    permissionMode: "bypassPermissions",
+};
+/** Phase start line: `● review · <label>`. */
+function phaseLine(label) {
+    process.stderr.write(`${bold(SYM.bullet)} ${bold("review")} ${dim(`· ${label}`)}\n`);
+}
+/** Phase outcome line: `  ⎿ ✓ <note>` (ok) or `  ⎿ ✗ <note>` (anomaly). */
+function outcomeLine(note, ok = true) {
+    const mark = ok ? green(SYM.check) : red(SYM.cross);
+    process.stderr.write(`${dim(SYM.cont)} ${mark} ${dim(note)}\n`);
+}
+/** Human count of a lens's findings from its free-form output ("skip" = no commit to review). */
+function findingsNote(result) {
+    const t = result.trim();
+    if (/<lens>\s*SKIP\s*<\/lens>/i.test(t))
+        return "skipped (no commit)";
+    const n = t
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => /^[-*]\s+\S/.test(l)).length;
+    if (n === 0)
+        return "no findings";
+    return `${n} finding${n === 1 ? "" : "s"}`;
+}
+function readVerdicts(panelHostDir) {
+    try {
+        const txt = readFileSync(join(panelHostDir, "verdicts.md"), "utf8");
+        return {
+            exists: true,
+            confirmed: (txt.match(/^\s*CONFIRMED\b/gim) || []).length,
+            rejected: (txt.match(/^\s*REJECTED\b/gim) || []).length,
+        };
+    }
+    catch {
+        return { exists: false, confirmed: 0, rejected: 0 };
+    }
+}
+/** True if the worktree has uncommitted changes (tracked edits or new untracked
+ *  files), excluding gitignored paths. Null git output (e.g. no repo) = not dirty. */
+function worktreeDirty(workspaceDir) {
+    const s = git(["status", "--porcelain"], workspaceDir);
+    return s != null && s !== "";
+}
+/** Tracked-only worktree dirtiness ("" = clean). Untracked files are ignored. */
+function trackedStatus(workspaceDir) {
+    return git(["status", "--porcelain", "--untracked-files=no"], workspaceDir);
+}
+/** True if HEAD moved or a tracked file changed since `baseHead`. */
+function lensMutatedRepo(workspaceDir, baseHead) {
+    if (baseHead == null)
+        return false;
+    if (git(["rev-parse", "HEAD"], workspaceDir) !== baseHead)
+        return true;
+    // Tracked-only: a lens scratch file (untracked) is harmless — synth diffs HEAD.
+    return trackedStatus(workspaceDir) !== "";
+}
+/** Harness-orchestrated reviewer panel: read-only lens reviews → one synth fix(review) commit. */
+export async function runPanel(opts) {
+    const { lenses, workspaceDir, packageDir, iteration, maxRetries, cooldownMs, signal, onStage, } = opts;
+    const panelRel = `panel-${process.pid}-${iteration}-${Date.now()}`;
+    const panelHostDir = join(workspaceDir, ".otto-tmp", panelRel);
+    mkdirSync(panelHostDir, { recursive: true });
+    // Lenses are contractually read-only; synth owns the single fix(review:) commit.
+    // Snapshot HEAD so we can detect + undo a lens that edits or commits despite the
+    // prompt (it runs bypassPermissions, so the OS would let it). We only ENFORCE
+    // (reset --hard) when the worktree starts tracked-clean — otherwise a reset would
+    // discard pre-existing uncommitted user changes, so we disable the guard and warn.
+    const baseHead = git(["rev-parse", "HEAD"], workspaceDir);
+    const enforceReadOnly = baseHead != null && trackedStatus(workspaceDir) === "";
+    if (baseHead != null && !enforceReadOnly) {
+        process.stderr.write(`${red(SYM.cross)} ${dim("worktree has uncommitted tracked changes — panel lens read-only enforcement disabled (won't risk your changes)")}\n`);
+    }
+    const findingsDirRef = `./${posix.join(".otto-tmp", panelRel)}/`;
+    // Restore HEAD if a contractually read-only sub-agent (lens or verifier)
+    // committed or edited tracked files despite the prompt. Only safe when the
+    // worktree started clean, so reset --hard can discard only the sub-agent's
+    // own changes — never pre-existing work. Returns true if it had to restore.
+    const restoreIfMutated = (who) => {
+        if (enforceReadOnly && lensMutatedRepo(workspaceDir, baseHead)) {
+            process.stderr.write(`${red(SYM.cross)} ${dim(`${who} mutated the repo (read-only violation) — restoring to ${baseHead.slice(0, 8)}`)}\n`);
+            git(["reset", "--hard", baseHead], workspaceDir);
+            return true;
+        }
+        return false;
+    };
+    try {
+        // 1. Lenses — each finds defects through one lens, read-only.
+        for (let i = 0; i < lenses.length; i++) {
+            const lens = lenses[i];
+            phaseLine(`${lens} lens (${i + 1}/${lenses.length})`);
+            const sr = await executeStage({
+                stage: LENS_STAGE,
+                vars: { LENS: lens },
+                workspaceDir,
+                packageDir,
+                iteration,
+                maxRetries,
+                signal,
+                logLabel: `lens-${lens}`,
+            });
+            restoreIfMutated(`lens ${lens}`);
+            writeFileSync(join(panelHostDir, `findings-${lens}.md`), sr.result, "utf8");
+            outcomeLine(findingsNote(sr.result));
+            const ctrl = onStage?.(sr) ?? { stop: false, cooldownFactor: 1 };
+            if (ctrl.stop)
+                return sr; // budget exhausted — skip remaining lenses + verify + synth
+            if (cooldownMs > 0)
+                await sleep(cooldownMs * ctrl.cooldownFactor, signal);
+        }
+        // 2. Adversarial verify — a skeptic refutes the lens findings, writing
+        //    verdicts.md (CONFIRMED/REJECTED) so synth only fixes survivors.
+        phaseLine("adversarial verify");
+        const verify = await executeStage({
+            stage: VERIFY_STAGE,
+            vars: { FINDINGS_DIR: findingsDirRef },
+            workspaceDir,
+            packageDir,
+            iteration,
+            maxRetries,
+            signal,
+            logLabel: "verify",
+        });
+        restoreIfMutated("verify");
+        const verdicts = readVerdicts(panelHostDir);
+        if (verdicts.exists) {
+            outcomeLine(`${verdicts.confirmed} confirmed, ${verdicts.rejected} rejected`);
+        }
+        else {
+            outcomeLine("verifier wrote no verdicts.md (contract violation)", false);
+        }
+        const vctrl = onStage?.(verify) ?? { stop: false, cooldownFactor: 1 };
+        if (vctrl.stop)
+            return verify; // budget exhausted — skip synth
+        // Contract gate: the verifier MUST write verdicts.md (the template emits
+        // `none` when there were no findings). Its absence means synth would run
+        // with no validated input — so skip the fix stage rather than let synth
+        // patch from unverified findings. Forward progress is preserved: the
+        // implementer's commit stands, just unreviewed this iteration.
+        if (!verdicts.exists) {
+            outcomeLine("skipping synth — no validated verdicts to act on", false);
+            return verify;
+        }
+        if (cooldownMs > 0)
+            await sleep(cooldownMs * vctrl.cooldownFactor, signal);
+        // 3. Synth — fix only CONFIRMED findings in one fix(review:) commit.
+        phaseLine("synthesize & fix");
+        const synth = await executeStage({
+            stage: SYNTH_STAGE,
+            vars: { FINDINGS_DIR: findingsDirRef },
+            workspaceDir,
+            packageDir,
+            iteration,
+            maxRetries,
+            signal,
+            logLabel: "synth",
+        });
+        // Report from real signals: HEAD movement AND worktree cleanliness. A bare
+        // HEAD check would call an edit-without-commit (or a `commit -am` that missed
+        // a new file) "clean" — surface the dirty tree instead of hiding it.
+        const after = git(["rev-parse", "HEAD"], workspaceDir);
+        const committed = baseHead != null && after != null && after !== baseHead;
+        const dirty = worktreeDirty(workspaceDir);
+        const subject = git(["log", "-1", "--pretty=%s"], workspaceDir) ?? "fix(review)";
+        if (committed && !dirty) {
+            outcomeLine(`committed: ${subject}`);
+        }
+        else if (committed && dirty) {
+            outcomeLine(`committed: ${subject} — but uncommitted changes remain`, false);
+        }
+        else if (dirty) {
+            outcomeLine("synth edited the worktree but did not commit — left dirty", false);
+        }
+        else {
+            outcomeLine("clean — no fix needed");
+        }
+        onStage?.(synth);
+        return synth;
+    }
+    finally {
+        rmSync(panelHostDir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=panel.js.map

package/dist/panel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"panel.js","sourceRoot":"","sources":["../src/panel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAC/B,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEpC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AAEhE,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE,gBAAgB;IAC1B,cAAc,EAAE,mBAAmB;CACpC,CAAC;AACF,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,eAAe;IACrB,QAAQ,EAAE,kBAAkB;IAC5B,cAAc,EAAE,mBAAmB;CACpC,CAAC;AACF,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,iBAAiB;IAC3B,cAAc,EAAE,mBAAmB;CACpC,CAAC;AAEF,8CAA8C;AAC9C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,IAAI,CAC/D,CAAC;AACJ,CAAC;AACD,2EAA2E;AAC3E,SAAS,WAAW,CAAC,IAAY,EAAE,EAAE,GAAG,IAAI;IAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,iGAAiG;AACjG,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACtE,MAAM,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAClC,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC7C,CAAC;AAMD,SAAS,YAAY,CAAC,YAAoB;IACxC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC;QACpE,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;YACzD,QAAQ,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM;SACxD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;AACH,CAAC;AAED;sFACsF;AACtF,SAAS,aAAa,CAAC,YAAoB;IACzC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;AAC/B,CAAC;AAqBD,iFAAiF;AACjF,SAAS,aAAa,CAAC,YAAoB;IACzC,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,aAAa,EAAE,sBAAsB,CAAC,EAAE,YAAY,CAAC,CAAC;AAC9E,CAAC;AAED,qEAAqE;AACrE,SAAS,eAAe,CACtB,YAAoB,EACpB,QAAuB;IAEvB,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,gFAAgF;IAChF,OAAO,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,MAAM,EACJ,MAAM,EACN,YAAY,EACZ,UAAU,EACV,SAAS,EACT,UAAU,EACV,UAAU,EACV,MAAM,EACN,OAAO,GACR,GAAG,IAAI,CAAC;IACT,MAAM,QAAQ,GAAG,SAAS,OAAO,CAAC,GAAG,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACnE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC/D,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,iFAAiF;IACjF,iFAAiF;IACjF,8EAA8E;IAC9E,kFAAkF;IAClF,mFAAmF;IACnF,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,eAAe,GACnB,QAAQ,IAAI,IAAI,IAAI,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IACzD,IAAI,QAAQ,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,gHAAgH,CAAC,IAAI,CAC/I,CAAC;IACJ,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC;IAEjE,yEAAyE;IACzE,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,gBAAgB,GAAG,CAAC,GAAW,EAAW,EAAE;QAChD,IAAI,eAAe,IAAI,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC/D,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,0DAA0D,QAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,CACtH,CAAC;YACF,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAS,CAAC,EAAE,YAAY,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,8DAA8D;QAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACvB,SAAS,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;YACtD,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC;gBAC5B,KAAK,EAAE,UAAU;gBACjB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;gBACpB,YAAY;gBACZ,UAAU;gBACV,SAAS;gBACT,UAAU;gBACV,MAAM;gBACN,QAAQ,EAAE,QAAQ,IAAI,EAAE;aACzB,CAAC,CAAC;YACH,gBAAgB,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;YACjC,aAAa,CACX,IAAI,CAAC,YAAY,EAAE,YAAY,IAAI,KAAK,CAAC,EACzC,EAAE,CAAC,MAAM,EACT,MAAM,CACP,CAAC;YACF,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAErC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;YACjE,IAAI,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC,CAAC,4DAA4D;YACtF,IAAI,UAAU,GAAG,CAAC;gBAAE,MAAM,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC5E,CAAC;QAED,uEAAuE;QACvE,qEAAqE;QACrE,SAAS,CAAC,oBAAoB,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,KAAK,EAAE,YAAY;YACnB,IAAI,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE;YACtC,YAAY;YACZ,UAAU;YACV,SAAS;YACT,UAAU;YACV,MAAM;YACN,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAC;QACH,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,WAAW,CACT,GAAG,QAAQ,CAAC,SAAS,eAAe,QAAQ,CAAC,QAAQ,WAAW,CACjE,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC;QACtE,IAAI,KAAK,CAAC,IAAI;YAAE,OAAO,MAAM,CAAC,CAAC,gCAAgC;QAE/D,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,+DAA+D;QAC/D,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YACrB,WAAW,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;YACvE,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,UAAU,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAE3E,qEAAqE;QACrE,SAAS,CAAC,kBAAkB,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC;YAC/B,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE;YACtC,YAAY;YACZ,UAAU;YACV,SAAS;YACT,UAAU;YACV,MAAM;YACN,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,2EAA2E;QAC3E,8EAA8E;QAC9E,qEAAqE;QACrE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,QAAQ,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,QAAQ,CAAC;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,OAAO,GACX,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,IAAI,aAAa,CAAC;QACnE,IAAI,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC;YACxB,WAAW,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YAC9B,WAAW,CACT,cAAc,OAAO,mCAAmC,EACxD,KAAK,CACN,CAAC;QACJ,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,WAAW,CACT,2DAA2D,EAC3D,KAAK,CACN,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,WAAW,CAAC,uBAAuB,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;QACjB,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/rate-limit.d.ts

@@ -0,0 +1,16 @@
+import type { StageResult } from "./runner.js";
+/** Thrown when a stage hit a usage/session/rate limit. `resetsAt` is unix seconds
+ *  (from the rate_limit_event) or null if the limit gave no reset time. */
+export declare class RateLimitError extends Error {
+    readonly resetsAt: number | null;
+    constructor(message: string, resetsAt: number | null);
+}
+/** True if a `result` event signals a usage/session/rate limit:
+ *  is_error with an HTTP 429, or the CLI's "session limit" result text. */
+export declare function isLimitResult(r: StageResult): boolean;
+/** resetsAt (unix seconds) from a `rate_limit_event`, else null. */
+export declare function resetsAtFromEvent(ev: unknown): number | null;
+/** Milliseconds to wait before retrying. With a resetsAt: time until it + buffer
+ *  (never negative). Without: the fallback. */
+export declare function computeWaitMs(resetsAt: number | null, nowMs: number, bufferMs: number, fallbackMs: number): number;
+//# sourceMappingURL=rate-limit.d.ts.map

package/dist/rate-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.d.ts","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE/C;2EAC2E;AAC3E,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;gBACrB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI;CAKrD;AAED;2EAC2E;AAC3E,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAIrD;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAK5D;AAED;+CAC+C;AAC/C,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,EACvB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,MAAM,CAGR"}

package/dist/rate-limit.js

@@ -0,0 +1,35 @@
+/** Thrown when a stage hit a usage/session/rate limit. `resetsAt` is unix seconds
+ *  (from the rate_limit_event) or null if the limit gave no reset time. */
+export class RateLimitError extends Error {
+    resetsAt;
+    constructor(message, resetsAt) {
+        super(message);
+        this.name = "RateLimitError";
+        this.resetsAt = resetsAt;
+    }
+}
+/** True if a `result` event signals a usage/session/rate limit:
+ *  is_error with an HTTP 429, or the CLI's "session limit" result text. */
+export function isLimitResult(r) {
+    if (!r.isError)
+        return false;
+    if (r.apiErrorStatus != null && /429/.test(r.apiErrorStatus))
+        return true;
+    return /session limit|usage limit|rate.?limit/i.test(r.result);
+}
+/** resetsAt (unix seconds) from a `rate_limit_event`, else null. */
+export function resetsAtFromEvent(ev) {
+    const e = (ev ?? {});
+    if (e.type !== "rate_limit_event")
+        return null;
+    const info = (e.rate_limit_info ?? {});
+    return typeof info.resetsAt === "number" ? info.resetsAt : null;
+}
+/** Milliseconds to wait before retrying. With a resetsAt: time until it + buffer
+ *  (never negative). Without: the fallback. */
+export function computeWaitMs(resetsAt, nowMs, bufferMs, fallbackMs) {
+    if (resetsAt == null)
+        return fallbackMs;
+    return Math.max(0, resetsAt * 1000 - nowMs + bufferMs);
+}
+//# sourceMappingURL=rate-limit.js.map

package/dist/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../src/rate-limit.ts"],"names":[],"mappings":"AAEA;2EAC2E;AAC3E,MAAM,OAAO,cAAe,SAAQ,KAAK;IAC9B,QAAQ,CAAgB;IACjC,YAAY,OAAe,EAAE,QAAuB;QAClD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;2EAC2E;AAC3E,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,CAAC,CAAC,cAAc,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,OAAO,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,EAAW;IAC3C,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAA4B,CAAC;IAChD,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;IAClE,OAAO,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAED;+CAC+C;AAC/C,MAAM,UAAU,aAAa,CAC3B,QAAuB,EACvB,KAAa,EACb,QAAgB,EAChB,UAAkB;IAElB,IAAI,QAAQ,IAAI,IAAI;QAAE,OAAO,UAAU,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,GAAG,KAAK,GAAG,QAAQ,CAAC,CAAC;AACzD,CAAC"}

package/dist/render.d.ts

@@ -0,0 +1,8 @@
+export type RenderVars = Record<string, string>;
+export type RenderOptions = {
+    cwd?: string;
+    spillHostDir?: string;
+    spillRefPath?: string;
+};
+export declare function renderTemplate(templatePath: string, vars: RenderVars, opts?: RenderOptions): string;
+//# sourceMappingURL=render.d.ts.map

package/dist/render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAyBA,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,aAAa,GAAG;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAcF,wBAAgB,cAAc,CAC5B,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE,aAAkB,GACvB,MAAM,CA2GR"}

package/dist/render.js

@@ -0,0 +1,130 @@
+import { execSync } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, resolve } from "node:path";
+// SECURITY INVARIANT: the command bodies of the !`cmd`, !?`cmd`, and @spill tags
+// are executed on the HOST shell (see execSync calls below). Templates are trusted
+// (shipped in the npm tarball) and only ever embed STATIC command strings; {{ INPUTS }}
+// is substituted LAST, into the already-expanded text, and is never re-shelled. Never
+// author a tag whose command body interpolates runtime or untrusted data (issue bodies,
+// commit messages, INPUTS, branch names) — that would be direct host RCE. See SECURITY.md.
+// Order matters: !?`...` (try-shell w/ ||| fallback) must match before plain !`...`.
+const SHELL_TRY_TAG = /!\?`([^`]+)`/g;
+const SHELL_TAG = /!`([^`]+)`/g;
+const INCLUDE_TAG = /@include:([^\s`)]+)/g;
+// @spill[?]:<name>=`cmd[|||fallback]` — runs cmd, writes output to spillHostDir/<name>,
+// substitutes the container-relative file path in the prompt. The `?` form treats
+// non-zero exits as success and writes the fallback string instead of throwing.
+const SPILL_TAG = /@spill(\??):([^\s=]+)=`([^`]+)`/g;
+const GENERIC_TAG = /\{\{\s*([A-Z0-9_]+)\s*\}\}/g;
+const TRY_SEP = "|||";
+// Cap on captured stdout for every shell/@spill tag (64 MiB). Large outputs are
+// meant to go through @spill (written to a file), not be inlined into the prompt.
+const SPILL_MAX_BUFFER = 64 * 1024 * 1024;
+function resolveShell() {
+    if (process.platform !== "win32")
+        return "/bin/bash";
+    // Prefer bash.exe (git-for-windows / WSL passthrough) for POSIX redirects + utils.
+    const pathDirs = (process.env.PATH ?? "").split(";");
+    for (const d of pathDirs) {
+        if (!d)
+            continue;
+        const candidate = resolve(d, "bash.exe");
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return "cmd.exe";
+}
+export function renderTemplate(templatePath, vars, opts = {}) {
+    const raw = readFileSync(templatePath, "utf8");
+    const templateDir = dirname(templatePath);
+    const shell = resolveShell();
+    // Expand @include directives recursively until no directives remain.
+    // Each pass resolves relative paths against the including file's directory.
+    function expandIncludes(text, fromDir) {
+        const expanded = text.replace(INCLUDE_TAG, (_match, rel) => {
+            const target = isAbsolute(rel) ? rel : resolve(fromDir, rel);
+            const content = readFileSync(target, "utf8").replace(/\r?\n$/, "");
+            // Recurse so includes within included files are resolved relative to
+            // the included file's own directory.
+            return expandIncludes(content, dirname(target));
+        });
+        return expanded;
+    }
+    const afterInclude = expandIncludes(raw, templateDir);
+    const afterSpill = afterInclude.replace(SPILL_TAG, (_match, q, name, body) => {
+        if (!opts.spillHostDir || !opts.spillRefPath) {
+            throw new Error(`@spill:${name} used but spillHostDir/spillRefPath not provided to renderTemplate`);
+        }
+        // Reject any name that could escape spillHostDir. Templates are trusted
+        // (shipped in the npm tarball) but defense-in-depth — keep file writes
+        // confined to the per-iteration spill dir.
+        if (name.includes("/") ||
+            name.includes("\\") ||
+            name === "." ||
+            name === ".." ||
+            name.includes("..") ||
+            isAbsolute(name)) {
+            throw new Error(`@spill:${name} — name must be a plain filename (no path separators, no ..)`);
+        }
+        const tryMode = q === "?";
+        let cmd = body;
+        let fallback = "";
+        if (tryMode) {
+            const sep = body.lastIndexOf(TRY_SEP);
+            if (sep >= 0) {
+                cmd = body.slice(0, sep);
+                fallback = body.slice(sep + TRY_SEP.length);
+            }
+        }
+        let out;
+        try {
+            out = execSync(cmd, {
+                shell,
+                encoding: "utf8",
+                maxBuffer: SPILL_MAX_BUFFER,
+                cwd: opts.cwd,
+                stdio: ["ignore", "pipe", tryMode ? "ignore" : "pipe"],
+            });
+        }
+        catch (err) {
+            if (!tryMode)
+                throw err;
+            out = fallback;
+        }
+        mkdirSync(opts.spillHostDir, { recursive: true });
+        writeFileSync(join(opts.spillHostDir, name), out, "utf8");
+        return `./${opts.spillRefPath}/${name}`;
+    });
+    const afterShellTry = afterSpill.replace(SHELL_TRY_TAG, (_match, body) => {
+        const sep = body.lastIndexOf(TRY_SEP);
+        const cmd = sep >= 0 ? body.slice(0, sep) : body;
+        const fallback = sep >= 0 ? body.slice(sep + TRY_SEP.length) : "";
+        try {
+            const out = execSync(cmd, {
+                shell,
+                encoding: "utf8",
+                maxBuffer: SPILL_MAX_BUFFER,
+                cwd: opts.cwd,
+                stdio: ["ignore", "pipe", "ignore"],
+            });
+            return out.replace(/\r?\n$/, "");
+        }
+        catch {
+            return fallback;
+        }
+    });
+    const afterShell = afterShellTry.replace(SHELL_TAG, (_match, cmd) => {
+        const out = execSync(cmd, {
+            shell,
+            encoding: "utf8",
+            maxBuffer: 64 * 1024 * 1024,
+            cwd: opts.cwd,
+        });
+        return out.replace(/\r?\n$/, "");
+    });
+    // SECURITY: generic substitution is the last pass and never re-shelled.
+    // INPUTS, LENS, FINDINGS_DIR, etc. are harness constants — no new injection surface.
+    // Unknown {{ TAG }} are left untouched.
+    return afterShell.replace(GENERIC_TAG, (match, key) => Object.prototype.hasOwnProperty.call(vars, key) ? vars[key] : match);
+}
+//# sourceMappingURL=render.js.map

package/dist/render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render.js","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE/D,iFAAiF;AACjF,mFAAmF;AACnF,wFAAwF;AACxF,sFAAsF;AACtF,wFAAwF;AACxF,2FAA2F;AAE3F,qFAAqF;AACrF,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,wFAAwF;AACxF,kFAAkF;AAClF,gFAAgF;AAChF,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,WAAW,GAAG,6BAA6B,CAAC;AAClD,MAAM,OAAO,GAAG,KAAK,CAAC;AACtB,gFAAgF;AAChF,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAY1C,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,WAAW,CAAC;IACrD,mFAAmF;IACnF,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,YAAoB,EACpB,IAAgB,EAChB,OAAsB,EAAE;IAExB,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAE7B,qEAAqE;IACrE,4EAA4E;IAC5E,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;YACjE,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnE,qEAAqE;YACrE,qCAAqC;YACrC,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,YAAY,GAAG,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAEtD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CACrC,SAAS,EACT,CAAC,MAAM,EAAE,CAAS,EAAE,IAAY,EAAE,IAAY,EAAE,EAAE;QAChD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,oEAAoE,CACnF,CAAC;QACJ,CAAC;QACD,wEAAwE;QACxE,uEAAuE;QACvE,2CAA2C;QAC3C,IACE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAClB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,IAAI,KAAK,GAAG;YACZ,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAChB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,8DAA8D,CAC7E,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC;QAC1B,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzB,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE;gBAClB,KAAK;gBACL,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,gBAAgB;gBAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;aACvD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,OAAO;gBAAE,MAAM,GAAG,CAAC;YACxB,GAAG,GAAG,QAAQ,CAAC;QACjB,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1D,OAAO,KAAK,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;IAC1C,CAAC,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,CACtC,aAAa,EACb,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE;gBACxB,KAAK;gBACL,QAAQ,EAAE,MAAM;gBAChB,SAAS,EAAE,gBAAgB;gBAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;aACpC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,QAAQ,CAAC;QAClB,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE;QAC1E,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE;YACxB,KAAK;YACL,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;YAC3B,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IACH,wEAAwE;IACxE,qFAAqF;IACrF,wCAAwC;IACxC,OAAO,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,GAAW,EAAE,EAAE,CAC5D,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CACpE,CAAC;AACJ,CAAC"}

package/dist/retry.d.ts

@@ -0,0 +1,17 @@
+export type WithRetriesOptions = {
+    /** Maximum retries after the initial attempt. Total calls = max + 1. */
+    max: number;
+    /** Wait between attempts. backoffMs[i] is the wait before attempt i+1.
+     *  When attempts exceed array length, the last value is reused. */
+    backoffMs: readonly number[];
+    /** Fires after each failed attempt, before the wait. */
+    onAttempt?: (attempt: number, err: unknown) => void;
+    /** Injected for tests so no real wall-clock waits occur. */
+    sleep?: (ms: number) => Promise<void>;
+};
+export declare const DEFAULT_BACKOFF_MS: readonly number[];
+export declare const DEFAULT_MAX_RETRIES = 3;
+export declare function withRetries<T>(fn: () => Promise<T>, opts: WithRetriesOptions): Promise<T>;
+/** Wait that withRetries will impose before the Nth retry (1-indexed). */
+export declare function backoffFor(backoffMs: readonly number[], attempt: number): number;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GAAG;IAC/B,wEAAwE;IACxE,GAAG,EAAE,MAAM,CAAC;IACZ;uEACmE;IACnE,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,wDAAwD;IACxD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACpD,4DAA4D;IAC5D,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA6B,CAAC;AAC9E,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAMrC,wBAAsB,WAAW,CAAC,CAAC,EACjC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,CAAC,CAAC,CAoBZ;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,CACxB,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,EAAE,MAAM,GACd,MAAM,CAER"}

package/dist/retry.js

@@ -0,0 +1,34 @@
+export const DEFAULT_BACKOFF_MS = [5_000, 30_000, 120_000];
+export const DEFAULT_MAX_RETRIES = 3;
+function defaultSleep(ms) {
+    return new Promise((res) => setTimeout(res, ms));
+}
+export async function withRetries(fn, opts) {
+    const sleep = opts.sleep ?? defaultSleep;
+    let lastErr;
+    for (let attempt = 0; attempt <= opts.max; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastErr = err;
+            if (err?.name === "AbortError")
+                throw err;
+            if (err?.name === "RateLimitError")
+                throw err;
+            if (attempt === opts.max)
+                break;
+            opts.onAttempt?.(attempt + 1, err);
+            const backoff = opts.backoffMs[attempt] ??
+                opts.backoffMs[opts.backoffMs.length - 1] ??
+                0;
+            await sleep(backoff);
+        }
+    }
+    throw lastErr;
+}
+/** Wait that withRetries will impose before the Nth retry (1-indexed). */
+export function backoffFor(backoffMs, attempt) {
+    return backoffMs[attempt - 1] ?? backoffMs[backoffMs.length - 1] ?? 0;
+}
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,EAAoB,EACpB,IAAwB;IAExB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;QACrD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,GAAG,GAAG,CAAC;YACd,IAAK,GAAa,EAAE,IAAI,KAAK,YAAY;gBAAE,MAAM,GAAG,CAAC;YACrD,IAAK,GAAa,EAAE,IAAI,KAAK,gBAAgB;gBAAE,MAAM,GAAG,CAAC;YACzD,IAAI,OAAO,KAAK,IAAI,CAAC,GAAG;gBAAE,MAAM;YAChC,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;YACnC,MAAM,OAAO,GACX,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;gBACzC,CAAC,CAAC;YACJ,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CACxB,SAA4B,EAC5B,OAAe;IAEf,OAAO,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;AACxE,CAAC"}

package/dist/run-bin.d.ts

@@ -0,0 +1,35 @@
+import type { Stage } from "./stages.js";
+export type RunBinConfig = {
+    /** Bin name for usage/version/config output (e.g. "otto-afk"). */
+    bin: string;
+    /** Positional-arg usage string (e.g. "<plan-and-prd> <iterations>"). */
+    usage: string;
+    /** One-line description for --help. */
+    desc: string;
+    /** Stage chain; first stage is the gate. */
+    stages: [Stage, ...Stage[]];
+    /**
+     * Whether the bin takes a leading input positional before <iterations>.
+     * `true`  → argv is `<inputs> <iterations>` (otto-afk; inputs = rest[0]).
+     * `false` → argv is `<iterations>`          (otto-ghafk; inputs = "").
+     */
+    takesInputArg: boolean;
+    cliVersion?: string;
+    /** Whether this bin supports --watch. Only otto-ghafk sets this. */
+    supportsWatch?: boolean;
+    /** Alternate gate stage used when --issue is set. Only otto-ghafk sets this. */
+    issueStage?: Stage;
+    /** Single read-only gate stage used when --verify is set. Only otto-afk sets this. */
+    verifyStage?: Stage;
+    /** Gate stage used when --apply-review is set. Only otto-afk sets this. */
+    applyReviewStage?: Stage;
+    /** Run mode identifier threaded into runLoop state (e.g. "afk" / "ghafk"). */
+    mode: string;
+};
+/**
+ * Shared entry for the AFK bins: parse flags, handle --version/--help/--print-config,
+ * resolve the workspace / package dirs, validate the positional args,
+ * optionally fork into the background (--detach), then drive runLoop.
+ */
+export declare function runBin(argv: string[], cfg: RunBinConfig): Promise<void>;
+//# sourceMappingURL=run-bin.d.ts.map

package/dist/run-bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-bin.d.ts","sourceRoot":"","sources":["../src/run-bin.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,MAAM,YAAY,GAAG;IACzB,kEAAkE;IAClE,GAAG,EAAE,MAAM,CAAC;IACZ,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;IACd,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,4CAA4C;IAC5C,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC5B;;;;OAIG;IACH,aAAa,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,UAAU,CAAC,EAAE,KAAK,CAAC;IACnB,sFAAsF;IACtF,WAAW,CAAC,EAAE,KAAK,CAAC;IACpB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,KAAK,CAAC;IACzB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAyBF;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAuO7E"}