@w3kits-com/plugin-opendesign 0.1.8 → 0.1.10

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/critique/persistence.js

@@ -0,0 +1,238 @@
+import { CRITIQUE_RUN_STATUSES, } from '@open-design/contracts/critique';
+/**
+ * Re-export the public contract types and enumeration so existing
+ * daemon-side imports (`./persistence.js`) keep working unchanged. The
+ * canonical definitions live in `@open-design/contracts/critique` so the
+ * web layer can consume the same shapes and the same display order
+ * through the rerun / history endpoints (AGENTS.md requirement that
+ * shared API DTOs live in packages/contracts).
+ *
+ * `CritiquePersistedStatus` extends `CritiqueRunStatus` with the in-flight
+ * `'running'` value so DB-row types can be precisely typed without inline
+ * `as X | 'running'` widens at every call site (lefarcen P2 on PR #1016).
+ * Public DTOs continue to use the terminal-only `CritiqueRunStatus` so a
+ * future endpoint cannot leak a 'running' row through the wire.
+ */
+export { CRITIQUE_RUN_STATUSES };
+// All values accepted by the DB CHECK constraint, derived from the
+// CritiquePersistedStatus union so this set never drifts from the type.
+const ALL_VALID_STATUSES = new Set([
+    ...CRITIQUE_RUN_STATUSES,
+    'running',
+]);
+function serializeRoundsPayload(rounds, recoveryReason) {
+    if (recoveryReason === undefined) {
+        // Store a plain array when no envelope fields are needed, so reads
+        // handle both formats gracefully.
+        return JSON.stringify(rounds);
+    }
+    const payload = { rounds, recoveryReason };
+    return JSON.stringify(payload);
+}
+function parseRoundsPayload(json) {
+    try {
+        const parsed = JSON.parse(json);
+        if (Array.isArray(parsed)) {
+            return { rounds: parsed };
+        }
+        if (parsed !== null && typeof parsed === 'object') {
+            const obj = parsed;
+            const rounds = Array.isArray(obj['rounds'])
+                ? obj['rounds']
+                : [];
+            if (typeof obj['recoveryReason'] === 'string') {
+                return { rounds, recoveryReason: obj['recoveryReason'] };
+            }
+            return { rounds };
+        }
+        return { rounds: [] };
+    }
+    catch {
+        return { rounds: [] };
+    }
+}
+function normalizeRow(raw) {
+    const { rounds } = parseRoundsPayload(raw.roundsJson);
+    return {
+        id: raw.id,
+        projectId: raw.projectId,
+        conversationId: raw.conversationId,
+        artifactPath: raw.artifactPath,
+        status: raw.status,
+        score: raw.score,
+        rounds,
+        transcriptPath: raw.transcriptPath,
+        protocolVersion: Number(raw.protocolVersion),
+        createdAt: Number(raw.createdAt),
+        updatedAt: Number(raw.updatedAt),
+    };
+}
+const COLS = `
+  id,
+  project_id     AS projectId,
+  conversation_id AS conversationId,
+  artifact_path  AS artifactPath,
+  status,
+  score,
+  rounds_json    AS roundsJson,
+  transcript_path AS transcriptPath,
+  protocol_version AS protocolVersion,
+  created_at     AS createdAt,
+  updated_at     AS updatedAt
+`;
+/**
+ * Idempotent. Creates the critique_runs table and the supporting indexes if
+ * they don't exist. Safe to call from the existing migrate(db) flow on every
+ * daemon boot.
+ */
+export function migrateCritique(db) {
+    db.exec(`
+    CREATE TABLE IF NOT EXISTS critique_runs (
+      id TEXT PRIMARY KEY,
+      project_id TEXT NOT NULL,
+      conversation_id TEXT,
+      artifact_path TEXT,
+      status TEXT NOT NULL CHECK (status IN
+        ('shipped','below_threshold','timed_out','interrupted','degraded','failed','legacy','running')),
+      score REAL,
+      rounds_json TEXT NOT NULL DEFAULT '[]',
+      transcript_path TEXT,
+      protocol_version INTEGER NOT NULL,
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL,
+      FOREIGN KEY(project_id) REFERENCES projects(id) ON DELETE CASCADE,
+      FOREIGN KEY(conversation_id) REFERENCES conversations(id) ON DELETE SET NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_critique_runs_project
+      ON critique_runs(project_id, updated_at DESC);
+
+    CREATE INDEX IF NOT EXISTS idx_critique_runs_status
+      ON critique_runs(status);
+  `);
+}
+export function insertCritiqueRun(db, input) {
+    if (!ALL_VALID_STATUSES.has(input.status)) {
+        throw new RangeError(`Invalid critique run status: "${input.status}". Must be one of: ${[...ALL_VALID_STATUSES].join(', ')}`);
+    }
+    const now = Date.now();
+    const rounds = input.rounds ?? [];
+    db.prepare(`INSERT INTO critique_runs
+       (id, project_id, conversation_id, artifact_path, status, score,
+        rounds_json, transcript_path, protocol_version, created_at, updated_at)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(input.id, input.projectId, input.conversationId ?? null, input.artifactPath ?? null, input.status, input.score ?? null, serializeRoundsPayload(rounds), input.transcriptPath ?? null, input.protocolVersion, input.createdAt ?? now, input.updatedAt ?? now);
+    const row = getCritiqueRun(db, input.id);
+    if (row === null) {
+        throw new Error(`Failed to fetch critique run after insert: ${input.id}`);
+    }
+    return row;
+}
+export function getCritiqueRun(db, id) {
+    const raw = db
+        .prepare(`SELECT ${COLS} FROM critique_runs WHERE id = ?`)
+        .get(id);
+    return raw !== undefined ? normalizeRow(raw) : null;
+}
+/**
+ * Updates the patch fields on an existing run. Returns the new row, or null
+ * when the id does not exist. Always updates updated_at.
+ */
+export function updateCritiqueRun(db, id, patch) {
+    const existing = getCritiqueRun(db, id);
+    if (existing === null)
+        return null;
+    const now = Date.now();
+    const updatedAt = patch.updatedAt ?? now;
+    const status = patch.status ?? existing.status;
+    const score = 'score' in patch ? patch.score ?? null : existing.score;
+    const rounds = patch.rounds ?? existing.rounds;
+    const transcriptPath = 'transcriptPath' in patch
+        ? patch.transcriptPath ?? null
+        : existing.transcriptPath;
+    const artifactPath = 'artifactPath' in patch
+        ? patch.artifactPath ?? null
+        : existing.artifactPath;
+    db.prepare(`UPDATE critique_runs
+        SET status = ?,
+            score = ?,
+            rounds_json = ?,
+            transcript_path = ?,
+            artifact_path = ?,
+            updated_at = ?
+      WHERE id = ?`).run(status, score, serializeRoundsPayload(rounds), transcriptPath, artifactPath, updatedAt, id);
+    return getCritiqueRun(db, id);
+}
+export function listCritiqueRunsByProject(db, projectId) {
+    const rows = db
+        .prepare(`SELECT ${COLS}
+         FROM critique_runs
+        WHERE project_id = ?
+        ORDER BY updated_at DESC`)
+        .all(projectId);
+    return rows.map(normalizeRow);
+}
+export function deleteCritiqueRun(db, id) {
+    db.prepare(`DELETE FROM critique_runs WHERE id = ?`).run(id);
+}
+/**
+ * Marks a single 'running' row as 'interrupted' with the supplied
+ * recoveryReason embedded in rounds_json. Mirror of the per-row write in
+ * reconcileStaleRuns(), kept as its own function so the interrupt endpoint
+ * can use it when a request arrives for a row that has no live
+ * AbortController in the registry (the post-daemon-restart window before
+ * reconcileStaleRuns considers the row old enough). Atomic on the
+ * status='running' guard so a row that just transitioned to a different
+ * terminal state is not overwritten.
+ *
+ * Returns true when a row was mutated, false when the id was missing or
+ * not in 'running' status.
+ */
+export function markRunInterruptedRecovery(db, id, recoveryReason, now = Date.now()) {
+    const existing = db
+        .prepare(`SELECT ${COLS} FROM critique_runs WHERE id = ? AND status = 'running'`)
+        .get(id);
+    if (existing === undefined)
+        return false;
+    const { rounds } = parseRoundsPayload(existing.roundsJson);
+    const newPayload = serializeRoundsPayload(rounds, recoveryReason);
+    const result = db
+        .prepare(`UPDATE critique_runs
+          SET status = 'interrupted',
+              rounds_json = ?,
+              updated_at = ?
+        WHERE id = ? AND status = 'running'`)
+        .run(newPayload, now, id);
+    return result.changes > 0;
+}
+/**
+ * Recovery scan called on daemon boot: any run still in a non-terminal status
+ * older than staleAfterMs is marked 'interrupted' with rounds_json.recoveryReason
+ * = 'daemon_restart'. Returns the count of rows mutated.
+ */
+export function reconcileStaleRuns(db, options) {
+    const now = options.now ?? Date.now();
+    const cutoff = now - options.staleAfterMs;
+    const reconcile = db.transaction(() => {
+        const staleRows = db
+            .prepare(`SELECT ${COLS}
+           FROM critique_runs
+          WHERE status = 'running'
+            AND updated_at < ?`)
+            .all(cutoff);
+        if (staleRows.length === 0)
+            return 0;
+        const update = db.prepare(`UPDATE critique_runs
+          SET status = 'interrupted',
+              rounds_json = ?,
+              updated_at = ?
+        WHERE id = ?`);
+        for (const raw of staleRows) {
+            const { rounds } = parseRoundsPayload(raw.roundsJson);
+            const newPayload = serializeRoundsPayload(rounds, 'daemon_restart');
+            update.run(newPayload, now, raw.id);
+        }
+        return staleRows.length;
+    });
+    return reconcile();
+}
+//# sourceMappingURL=persistence.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/critique/persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["../../src/critique/persistence.ts"],"names":[],"mappings":"AACA,OAAO,EACL,qBAAqB,GAItB,MAAM,iCAAiC,CAAC;AAEzC;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,qBAAqB,EAAE,CAAC;AAGjC,mEAAmE;AACnE,wEAAwE;AACxE,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAA0B;IAC/E,GAAG,qBAAqB;IACxB,SAAS;CACV,CAAC,CAAC;AAyDH,SAAS,sBAAsB,CAC7B,MAA8B,EAC9B,cAAuB;IAEvB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,mEAAmE;QACnE,kCAAkC;QAClC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,OAAO,GAAkB,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC1D,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,MAAgC,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,MAAM,GAAG,GAAG,MAAiC,CAAC;YAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACzC,CAAC,CAAE,GAAG,CAAC,QAAQ,CAA4B;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC9C,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC3D,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAiBD,SAAS,YAAY,CAAC,GAAsB;IAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAiC;QAC7C,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,MAAM;QACN,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;QAC5C,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,IAAI,GAAG;;;;;;;;;;;;CAYZ,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,EAAqB;IACnD,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;GAuBP,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,KAAwB;IAExB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,UAAU,CAClB,iCAAiC,KAAK,CAAC,MAAM,sBAAsB,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,EAAE,CAAC,OAAO,CACR;;;8CAG0C,CAC3C,CAAC,GAAG,CACH,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,cAAc,IAAI,IAAI,EAC5B,KAAK,CAAC,YAAY,IAAI,IAAI,EAC1B,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,sBAAsB,CAAC,MAAM,CAAC,EAC9B,KAAK,CAAC,cAAc,IAAI,IAAI,EAC5B,KAAK,CAAC,eAAe,EACrB,KAAK,CAAC,SAAS,IAAI,GAAG,EACtB,KAAK,CAAC,SAAS,IAAI,GAAG,CACvB,CAAC;IACF,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACzC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,8CAA8C,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,EAAqB,EACrB,EAAU;IAEV,MAAM,GAAG,GAAG,EAAE;SACX,OAAO,CAAC,UAAU,IAAI,kCAAkC,CAAC;SACzD,GAAG,CAAC,EAAE,CAAkC,CAAC;IAC5C,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,EAAqB,EACrB,EAAU,EACV,KAAuB;IAEvB,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IAC/C,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;IACtE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IAC/C,MAAM,cAAc,GAClB,gBAAgB,IAAI,KAAK;QACvB,CAAC,CAAC,KAAK,CAAC,cAAc,IAAI,IAAI;QAC9B,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC9B,MAAM,YAAY,GAChB,cAAc,IAAI,KAAK;QACrB,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI;QAC5B,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC;IAE5B,EAAE,CAAC,OAAO,CACR;;;;;;;mBAOe,CAChB,CAAC,GAAG,CACH,MAAM,EACN,KAAK,EACL,sBAAsB,CAAC,MAAM,CAAC,EAC9B,cAAc,EACd,YAAY,EACZ,SAAS,EACT,EAAE,CACH,CAAC;IAEF,OAAO,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,EAAqB,EACrB,SAAiB;IAEjB,MAAM,IAAI,GAAG,EAAE;SACZ,OAAO,CACN,UAAU,IAAI;;;iCAGa,CAC5B;SACA,GAAG,CAAC,SAAS,CAAwB,CAAC;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,EAAqB,EAAE,EAAU;IACjE,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,0BAA0B,CACxC,EAAqB,EACrB,EAAU,EACV,cAAsB,EACtB,MAAc,IAAI,CAAC,GAAG,EAAE;IAExB,MAAM,QAAQ,GAAG,EAAE;SAChB,OAAO,CAAC,UAAU,IAAI,yDAAyD,CAAC;SAChF,GAAG,CAAC,EAAE,CAAkC,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACzC,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,EAAE;SACd,OAAO,CACN;;;;4CAIsC,CACvC;SACA,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,EAAqB,EACrB,OAA+C;IAE/C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC;IAE1C,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;QACpC,MAAM,SAAS,GAAG,EAAE;aACjB,OAAO,CACN,UAAU,IAAI;;;+BAGS,CACxB;aACA,GAAG,CAAC,MAAM,CAAwB,CAAC;QAEtC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAErC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACvB;;;;qBAIe,CAChB,CAAC;QAEF,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,SAAS,CAAC,MAAM,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,EAAY,CAAC;AAC/B,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/critique/ratchet.d.ts

@@ -0,0 +1,100 @@
+/**
+ * M-phase rollout ratchet (Phase 16).
+ *
+ * Phase 15 shipped the rollout resolver. Phase 12 shipped the
+ * observability surface that lets us measure conformance. This module
+ * is the bridge: it takes a window of daily conformance numbers and
+ * answers "given the current rollout phase, should we promote, hold,
+ * or demote?". The answer is a recommendation, not an action. An
+ * operator-driven follow-up wires the actual `OD_CRITIQUE_ROLLOUT_PHASE`
+ * flip into a deploy pipeline; this module's job is to make the
+ * recommendation explicit and auditable so the operator does not have
+ * to read a Grafana panel to know what to do.
+ *
+ * The function is pure: it takes data in and returns a decision out,
+ * with no I/O. That lets the same evaluator drive both the nightly
+ * recommendation log line and the `GET /api/critique/conformance`
+ * endpoint, and lets vitest pin every cell of the decision matrix
+ * without standing up a daemon.
+ *
+ * Spec source: `specs/current/critique-theater.md` § Rollout, which
+ * states the M3 threshold as "14 consecutive days at >= 90% adapter
+ * conformance across the fleet". The clean-parse threshold (>= 95%
+ * runs free of parser_warning) is a sibling gate; both must hold.
+ */
+import type { RolloutPhase } from './rollout.js';
+/**
+ * One day of conformance numbers for one adapter. The nightly cron
+ * collapses every (adapter, brief-template) run into one of these
+ * rows; the evaluator aggregates across adapters per day.
+ */
+export interface ConformanceDay {
+    /** ISO date `YYYY-MM-DD`. */
+    date: string;
+    /** Adapter id (matches `agentId` in the spawn handler). */
+    adapter: string;
+    /** Fraction of runs that hit the `shipped` terminal status, 0..1. */
+    shippedRate: number;
+    /** Fraction of runs with zero parser_warning events, 0..1. */
+    cleanParseRate: number;
+    /** Total runs the day's two rates were computed from. */
+    totalRuns: number;
+}
+export type RatchetDecision = {
+    kind: 'hold';
+    current: RolloutPhase;
+    /** Human-readable reason the rollout is holding at `current`. */
+    reason: string;
+    /** Days in the rolling window that passed every threshold. */
+    passingDays: number;
+    /** Days in the rolling window that have at least one row. */
+    observedDays: number;
+} | {
+    kind: 'promote';
+    from: RolloutPhase;
+    to: RolloutPhase;
+    /** Days in the rolling window that passed every threshold. */
+    evidenceDays: number;
+} | {
+    kind: 'demote';
+    from: RolloutPhase;
+    to: RolloutPhase;
+    /** Human-readable reason the rollout is being walked back. */
+    reason: string;
+};
+export interface EvaluateRolloutParams {
+    current: RolloutPhase;
+    /** Rolling window of daily conformance rows. Order does not matter. */
+    history: ConformanceDay[];
+    /** Window size in days; defaults to 14 (the spec value). */
+    windowDays?: number;
+    /** Minimum shipped-rate per day; defaults to 0.90 (the spec value). */
+    shippedThreshold?: number;
+    /** Minimum clean-parse-rate per day; defaults to 0.95 (the spec value). */
+    cleanParseThreshold?: number;
+    /**
+     * Optional clock for deterministic tests. Production callers omit;
+     * tests pass `() => new Date('2026-05-13T00:00:00Z')` or similar so
+     * the "today" anchor is fixed.
+     */
+    now?: () => Date;
+}
+/**
+ * Evaluate the rollout. Returns one of three decisions:
+ *
+ *   * `promote`: every day in the rolling window had at least one row
+ *     and every per-day fleet aggregate cleared both thresholds.
+ *   * `demote`: at least one day in the rolling window had a fleet
+ *     shipped-rate below the demote-floor (half of `shippedThreshold`).
+ *     The demote-floor is intentionally lower than the promote threshold
+ *     so a single noisy day at, say, 0.88 does not bounce the rollout
+ *     back; the demote signal is for sustained breakage.
+ *   * `hold`: anything else (data gaps, near-misses, or M3 with no
+ *     headroom).
+ *
+ * The function is total: it always returns a decision; M0 cannot demote
+ * (already at the floor) and M3 cannot promote (already at the ceiling).
+ * Both of those collapse to `hold` with a reason-string that explains
+ * why.
+ */
+export declare function evaluateRollout(params: EvaluateRolloutParams): RatchetDecision;

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/critique/ratchet.js

@@ -0,0 +1,192 @@
+/**
+ * M-phase rollout ratchet (Phase 16).
+ *
+ * Phase 15 shipped the rollout resolver. Phase 12 shipped the
+ * observability surface that lets us measure conformance. This module
+ * is the bridge: it takes a window of daily conformance numbers and
+ * answers "given the current rollout phase, should we promote, hold,
+ * or demote?". The answer is a recommendation, not an action. An
+ * operator-driven follow-up wires the actual `OD_CRITIQUE_ROLLOUT_PHASE`
+ * flip into a deploy pipeline; this module's job is to make the
+ * recommendation explicit and auditable so the operator does not have
+ * to read a Grafana panel to know what to do.
+ *
+ * The function is pure: it takes data in and returns a decision out,
+ * with no I/O. That lets the same evaluator drive both the nightly
+ * recommendation log line and the `GET /api/critique/conformance`
+ * endpoint, and lets vitest pin every cell of the decision matrix
+ * without standing up a daemon.
+ *
+ * Spec source: `specs/current/critique-theater.md` § Rollout, which
+ * states the M3 threshold as "14 consecutive days at >= 90% adapter
+ * conformance across the fleet". The clean-parse threshold (>= 95%
+ * runs free of parser_warning) is a sibling gate; both must hold.
+ */
+const PHASE_ORDER = ['M0', 'M1', 'M2', 'M3'];
+function nextPhase(p) {
+    const i = PHASE_ORDER.indexOf(p);
+    return i >= 0 && i < PHASE_ORDER.length - 1 ? PHASE_ORDER[i + 1] ?? null : null;
+}
+function prevPhase(p) {
+    const i = PHASE_ORDER.indexOf(p);
+    return i > 0 ? PHASE_ORDER[i - 1] ?? null : null;
+}
+function isoDay(d) {
+    return d.toISOString().slice(0, 10);
+}
+/**
+ * Compute the set of date strings in the `windowDays` ending today
+ * (inclusive). Pure, no Date side effects on the input.
+ */
+function rollingWindowDates(now, windowDays) {
+    const out = [];
+    for (let i = 0; i < windowDays; i++) {
+        const d = new Date(now.getTime() - i * 24 * 60 * 60 * 1000);
+        out.push(isoDay(d));
+    }
+    return out;
+}
+/**
+ * Evaluate the rollout. Returns one of three decisions:
+ *
+ *   * `promote`: every day in the rolling window had at least one row
+ *     and every per-day fleet aggregate cleared both thresholds.
+ *   * `demote`: at least one day in the rolling window had a fleet
+ *     shipped-rate below the demote-floor (half of `shippedThreshold`).
+ *     The demote-floor is intentionally lower than the promote threshold
+ *     so a single noisy day at, say, 0.88 does not bounce the rollout
+ *     back; the demote signal is for sustained breakage.
+ *   * `hold`: anything else (data gaps, near-misses, or M3 with no
+ *     headroom).
+ *
+ * The function is total: it always returns a decision; M0 cannot demote
+ * (already at the floor) and M3 cannot promote (already at the ceiling).
+ * Both of those collapse to `hold` with a reason-string that explains
+ * why.
+ */
+export function evaluateRollout(params) {
+    const rawWindow = params.windowDays ?? 14;
+    const rawShipped = params.shippedThreshold ?? 0.90;
+    const rawClean = params.cleanParseThreshold ?? 0.95;
+    // Codex + lefarcen P1 on PR #1499: defend at the evaluator entry so a
+    // malformed query string (`?windowDays=0`) or a buggy caller cannot
+    // produce a zero-evidence promotion. A non-positive window would make
+    // `passingDays >= windowDays` trivially true at 0 >= 0, and a
+    // threshold outside [0, 1] would either reject every legitimate day
+    // (> 1) or accept nonsense (< 0). Hold with a clear reason in either
+    // case instead.
+    if (!Number.isFinite(rawWindow) || rawWindow <= 0) {
+        return {
+            kind: 'hold',
+            current: params.current,
+            reason: `invalid windowDays: ${rawWindow}`,
+            passingDays: 0,
+            observedDays: 0,
+        };
+    }
+    if (!Number.isFinite(rawShipped) || rawShipped < 0 || rawShipped > 1) {
+        return {
+            kind: 'hold',
+            current: params.current,
+            reason: `invalid shippedThreshold: ${rawShipped}`,
+            passingDays: 0,
+            observedDays: 0,
+        };
+    }
+    if (!Number.isFinite(rawClean) || rawClean < 0 || rawClean > 1) {
+        return {
+            kind: 'hold',
+            current: params.current,
+            reason: `invalid cleanParseThreshold: ${rawClean}`,
+            passingDays: 0,
+            observedDays: 0,
+        };
+    }
+    const windowDays = Math.floor(rawWindow);
+    const shippedThreshold = rawShipped;
+    const cleanParseThreshold = rawClean;
+    const now = (params.now ?? (() => new Date()))();
+    const windowDates = new Set(rollingWindowDates(now, windowDays));
+    const byDay = new Map();
+    for (const row of params.history) {
+        if (!windowDates.has(row.date))
+            continue;
+        if (!Number.isFinite(row.totalRuns) || row.totalRuns <= 0)
+            continue;
+        if (!Number.isFinite(row.shippedRate) || row.shippedRate < 0 || row.shippedRate > 1)
+            continue;
+        if (!Number.isFinite(row.cleanParseRate) || row.cleanParseRate < 0 || row.cleanParseRate > 1)
+            continue;
+        const agg = byDay.get(row.date) ?? { runs: 0, shipped: 0, clean: 0 };
+        agg.runs += row.totalRuns;
+        agg.shipped += row.shippedRate * row.totalRuns;
+        agg.clean += row.cleanParseRate * row.totalRuns;
+        byDay.set(row.date, agg);
+    }
+    // Walk the window day by day. Count passing days (both thresholds
+    // met) and observed days (any row at all). A day with no rows is
+    // not a failure; it is missing data, which collapses to `hold`.
+    let passingDays = 0;
+    let demoteDay = null;
+    const demoteFloor = shippedThreshold / 2;
+    for (const date of windowDates) {
+        const agg = byDay.get(date);
+        if (agg === undefined)
+            continue;
+        const shippedRate = agg.shipped / agg.runs;
+        const cleanRate = agg.clean / agg.runs;
+        if (shippedRate >= shippedThreshold && cleanRate >= cleanParseThreshold) {
+            passingDays += 1;
+        }
+        if (shippedRate < demoteFloor && demoteDay === null) {
+            demoteDay = date;
+        }
+    }
+    const observedDays = byDay.size;
+    if (demoteDay !== null) {
+        const to = prevPhase(params.current);
+        if (to !== null) {
+            return {
+                kind: 'demote',
+                from: params.current,
+                to,
+                reason: `fleet shipped-rate fell below ${(demoteFloor * 100).toFixed(0)}% on ${demoteDay}`,
+            };
+        }
+        return {
+            kind: 'hold',
+            current: params.current,
+            reason: `would demote (shipped-rate floor breach on ${demoteDay}) but already at M0`,
+            passingDays,
+            observedDays,
+        };
+    }
+    if (passingDays >= windowDays) {
+        const to = nextPhase(params.current);
+        if (to !== null) {
+            return {
+                kind: 'promote',
+                from: params.current,
+                to,
+                evidenceDays: passingDays,
+            };
+        }
+        return {
+            kind: 'hold',
+            current: params.current,
+            reason: `would promote (${passingDays} consecutive passing days) but already at M3`,
+            passingDays,
+            observedDays,
+        };
+    }
+    return {
+        kind: 'hold',
+        current: params.current,
+        reason: observedDays < windowDays
+            ? `insufficient data: ${observedDays} / ${windowDays} days observed`
+            : `near-miss: ${passingDays} / ${windowDays} days cleared the ${(shippedThreshold * 100).toFixed(0)}% / ${(cleanParseThreshold * 100).toFixed(0)}% thresholds`,
+        passingDays,
+        observedDays,
+    };
+}
+//# sourceMappingURL=ratchet.js.map

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/critique/ratchet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ratchet.js","sourceRoot":"","sources":["../../src/critique/ratchet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAkEH,MAAM,WAAW,GAA4B,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,CAAC;AAE/E,SAAS,SAAS,CAAC,CAAe;IAChC,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAClF,CAAC;AAED,SAAS,SAAS,CAAC,CAAe;IAChC,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,CAAO;IACrB,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAS,EAAE,UAAkB;IACvD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAAC,MAA6B;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC;IAEpD,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,8DAA8D;IAC9D,oEAAoE;IACpE,qEAAqE;IACrE,gBAAgB;IAChB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,uBAAuB,SAAS,EAAE;YAC1C,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACrE,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,6BAA6B,UAAU,EAAE;YACjD,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,gCAAgC,QAAQ,EAAE;YAClD,WAAW,EAAE,CAAC;YACd,YAAY,EAAE,CAAC;SAChB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,gBAAgB,GAAG,UAAU,CAAC;IACpC,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACrC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IACjD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,kBAAkB,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAMjE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC;YAAE,SAAS;QACpE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,CAAC,WAAW,GAAG,CAAC;YAAE,SAAS;QAC9F,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,CAAC,cAAc,GAAG,CAAC;YAAE,SAAS;QACvG,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC;QAC1B,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC;QAC/C,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,SAAS,CAAC;QAChD,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,kEAAkE;IAClE,iEAAiE;IACjE,gEAAgE;IAChE,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,MAAM,WAAW,GAAG,gBAAgB,GAAG,CAAC,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS;QAChC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC;QAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC;QACvC,IAAI,WAAW,IAAI,gBAAgB,IAAI,SAAS,IAAI,mBAAmB,EAAE,CAAC;YACxE,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,WAAW,GAAG,WAAW,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACpD,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;IAEhC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,EAAE;gBACF,MAAM,EAAE,iCAAiC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE;aAC3F,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,8CAA8C,SAAS,qBAAqB;YACpF,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;QAC9B,MAAM,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO;gBACL,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM,CAAC,OAAO;gBACpB,EAAE;gBACF,YAAY,EAAE,WAAW;aAC1B,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EAAE,kBAAkB,WAAW,8CAA8C;YACnF,WAAW;YACX,YAAY;SACb,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,MAAM,EACJ,YAAY,GAAG,UAAU;YACvB,CAAC,CAAC,sBAAsB,YAAY,MAAM,UAAU,gBAAgB;YACpE,CAAC,CAAC,cAAc,WAAW,MAAM,UAAU,qBAAqB,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc;QAClK,WAAW;QACX,YAAY;KACb,CAAC;AACJ,CAAC"}

package/dist/__w3kits/webcontainer-runtime/apps/daemon/dist/critique/rollout.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Critique Theater rollout-flag plumbing (Phase 15).
+ *
+ * The plan's rollout track is M0 dark-launch -> M1 settings toggle ->
+ * M2 default-on per skill -> M3 global default. This module is the
+ * intended single decision point every backend caller will consult
+ * to answer "should the orchestrator wire the critique pipeline for
+ * this run?"
+ *
+ * What ships in Phase 15:
+ *
+ *   - `isCritiqueEnabled` as a pure resolver function plus its
+ *     supporting parsers (`parseRolloutPhase`, `parseEnvEnabled`).
+ *     Full unit coverage of the priority matrix.
+ *
+ * Planned consumers (not yet wired; each lands in a focused
+ * follow-up PR):
+ *
+ *   - The orchestrator entry in `apps/daemon/src/server.ts`, before
+ *     it spawns the critique CLI adapter for a generation. The
+ *     current spawn gate still reads `critiqueCfg.enabled` directly;
+ *     swapping that to `isCritiqueEnabled({...})` is the one-line
+ *     change the wireup PR makes.
+ *   - A future settings endpoint that echoes the resolved value to
+ *     the Settings UI. The endpoint does not ship in Phase 15;
+ *     `setCritiqueTheaterEnabled` on the web side is localStorage-
+ *     only this phase, with daemon persistence deferred to the
+ *     Settings UI PR.
+ *   - The conformance harness, so a nightly cycle can run against an
+ *     adapter even when the human-facing flag is off.
+ *
+ * Operators who want to enable the feature today should set
+ * `OD_CRITIQUE_ENABLED=1` rather than relying on the client toggle,
+ * because the spawn-time gate has not been re-pointed at this
+ * resolver yet. The resolver itself is correct and ready; the wiring
+ * change is the only blocker.
+ *
+ * Resolution order (highest priority first):
+ *
+ *   1. Per-skill override declared in `SKILL.md` frontmatter
+ *      (`od.critique.policy: required | opt-in | opt-out`).
+ *   2. Per-project override stored in the project settings table
+ *      (the M1 Settings toggle will write here once the Settings UI
+ *      follow-up adds the daemon-side write path).
+ *   3. Environment override (`OD_CRITIQUE_ENABLED=1`). Useful for
+ *      power users and CI fixtures.
+ *   4. Global default. M0 / M1 = false. M2 = true for skills tagged
+ *      `od.critique.policy: required`. M3 = true globally.
+ */
+export type SkillCritiquePolicy = 'required' | 'opt-in' | 'opt-out' | null;
+export type RolloutPhase = 'M0' | 'M1' | 'M2' | 'M3';
+export interface RolloutInputs {
+    /** Effective rollout phase. Reads from `OD_CRITIQUE_ROLLOUT_PHASE`
+     *  in production; tests pass it directly. */
+    phase: RolloutPhase;
+    /** Skill's `od.critique.policy` value, or `null` if the skill
+     *  did not declare one. */
+    skillPolicy: SkillCritiquePolicy;
+    /** Per-project setting written by the M1 Settings toggle, or
+     *  `null` if the project has not overridden the default. */
+    projectOverride: boolean | null;
+    /** Environment override (`OD_CRITIQUE_ENABLED=1`). */
+    envOverride: boolean | null;
+}
+/**
+ * Returns `true` when the orchestrator should run the critique
+ * pipeline for this generation. Returns `false` when it should skip.
+ *
+ * Decision matrix (first row that matches wins):
+ *
+ *   skillPolicy === 'opt-out'         -> false
+ *   skillPolicy === 'required'        -> true
+ *   projectOverride !== null          -> projectOverride
+ *   envOverride !== null              -> envOverride
+ *   phase === 'M0'                    -> false
+ *   phase === 'M1'                    -> false
+ *   phase === 'M2'                    -> skillPolicy === 'opt-in'
+ *   phase === 'M3'                    -> true
+ */
+export declare function isCritiqueEnabled(input: RolloutInputs): boolean;
+/**
+ * Parse the `OD_CRITIQUE_ROLLOUT_PHASE` env var into a `RolloutPhase`.
+ * Defaults to `M0` (dark-launch) when the value is missing or unknown
+ * so a fresh install never surprises users with the feature on.
+ */
+export declare function parseRolloutPhase(raw: string | undefined): RolloutPhase;
+/**
+ * Parse `OD_CRITIQUE_ENABLED`. Recognises the canonical truthy /
+ * falsy strings; returns `null` when the env var is unset so the
+ * resolver knows to fall through to the rollout phase default
+ * rather than treating "missing" as an explicit `false`.
+ */
+export declare function parseEnvEnabled(raw: string | undefined): boolean | null;