agentplane 0.3.8 → 0.3.10

package/dist/runner/usecases/task-run-lifecycle-shared.js

@@ -1,6 +1,7 @@
 import path from "node:path";
 import { loadCommandContext } from "../../commands/shared/task-backend.js";
 import { CliError } from "../../shared/errors.js";
+import { makeReadOnlyUsecaseContext } from "../../usecases/context/resolve-context.js";
 import { createRunnerAdapter } from "../adapters/index.js";
 import { runnerAdapterCancelledResult } from "../adapters/shared.js";
 import { evolveRunnerRunState } from "../artifacts.js";
@@ -139,14 +140,15 @@ export function buildSyntheticCancelledState(opts) {
     });
 }
 export async function loadExistingRunnerExecution(opts) {
-    const ctx = opts.ctx ??
+    const command = opts.ctx ??
         (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
+    const executionContext = await makeReadOnlyUsecaseContext(command);
     if (opts.require_task_doing !== false) {
-        assertCurrentTaskDoing(opts.task_id, await ctx.taskBackend.getTask(opts.task_id));
+        assertCurrentTaskDoing(opts.task_id, await executionContext.backend.task_backend.getTask(opts.task_id));
     }
     const repository = RunnerRunRepository.forTaskRun({
-        git_root: ctx.resolvedProject.gitRoot,
-        workflow_dir: ctx.config.paths.workflow_dir,
+        git_root: executionContext.repo.git_root,
+        workflow_dir: executionContext.repo.workflow_dir,
         task_id: opts.task_id,
         run_id: opts.run_id,
     });
@@ -160,10 +162,10 @@ export async function loadExistingRunnerExecution(opts) {
     }
     assertRunnerBundleMatchesTask(record.bundle, opts.task_id, opts.run_id);
     assertRunnerTaskExecutable(record.bundle);
-    const adapter = createRunnerAdapter(ctx.config);
+    const adapter = createRunnerAdapter(executionContext.config);
     const invocation = await adapter.prepare(record.bundle);
     return {
-        ctx,
+        ctx: executionContext.command,
         bundle: record.bundle,
         invocation,
         state: record.state,

package/dist/runner/usecases/task-run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-run.d.ts","sourceRoot":"","sources":["../../../src/runner/usecases/task-run.ts"],"names":[],"mappings":"AACA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAgBhG,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,2BAA2B,GAAG;IACtE,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAiGF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAc5E;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,UAAU,CAAC,EAAE,gBAAgB,GAC5B,MAAM,CAiCR;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAmFvC;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAgDvC"}
+{"version":3,"file":"task-run.d.ts","sourceRoot":"","sources":["../../../src/runner/usecases/task-run.ts"],"names":[],"mappings":"AACA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAuBhG,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,EACxB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,2BAA2B,GAAG;IACxC,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG,2BAA2B,GAAG;IACtE,MAAM,EAAE,YAAY,CAAC;CACtB,CAAC;AAkHF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,mBAAmB,GAAG,IAAI,CAc5E;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,UAAU,CAAC,EAAE,gBAAgB,GAC5B,MAAM,CAiCR;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAoHvC;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAgDvC"}

package/dist/runner/usecases/task-run.js

@@ -1,6 +1,11 @@
 import { exitCodeForError } from "../../cli/exit-codes.js";
 import { loadCommandContext } from "../../commands/shared/task-backend.js";
 import { CliError } from "../../shared/errors.js";
+import { resolveRunnerAdapterCapabilityRegistry } from "../../runtime/capabilities/index.js";
+import { consumeExecutionProfileBudget } from "../../runtime/execution-profile/index.js";
+import { appendFrameworkExplainBehaviorInputs, } from "../../runtime/explain/index.js";
+import { buildFrameworkProtocolSurface } from "../../runtime/protocol/index.js";
+import { makeReadOnlyUsecaseContext } from "../../usecases/context/resolve-context.js";
 import { evolveRunnerRunState } from "../artifacts.js";
 import { createRunnerAdapter } from "../adapters/index.js";
 import { readRecipeRunProfile } from "../adapters/recipe-run-profile.js";
@@ -11,7 +16,6 @@ import { createRunnerRunId } from "../run-id.js";
 import { persistRunnerOutcomeToTask } from "../task-state.js";
 import { RunnerRunRepository } from "../run-repository.js";
 import { resolveTaskRunnerPaths } from "../task-run-paths.js";
-import { resolveRunnerTimeoutPolicy, resolveRunnerTracePolicy } from "../config.js";
 import { normalizeRecipeArtifactPrefixes } from "../result-manifest-policy.js";
 import { RUNNER_API_VERSION, RUNNER_BUNDLE_SCHEMA_VERSION, } from "../types.js";
 class RunnerPreparationCliError extends CliError {
@@ -28,6 +32,18 @@ class RunnerPreparationCliError extends CliError {
         this.state = opts.state;
     }
 }
+function collectFrameworkExplainBehaviorInputs(prompts) {
+    return prompts.flatMap((prompt) => prompt.resolution
+        ? [
+            {
+                id: prompt.id,
+                category: "prompt",
+                ...(prompt.source ? { source: prompt.source } : {}),
+                resolution: prompt.resolution,
+            },
+        ]
+        : []);
+}
 function isEnforcedCapabilityLevel(level) {
     return level === "native" || level === "wrapper";
 }
@@ -148,21 +164,39 @@ export function renderTaskRunnerBootstrap(bundle, invocation) {
     ].join("\n");
 }
 export async function prepareTaskRunnerExecution(opts) {
-    const ctx = opts.ctx ??
+    const command = opts.ctx ??
         (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
+    const executionContext = await makeReadOnlyUsecaseContext(command);
+    const target = opts.target ?? { kind: "task", task_id: opts.task_id };
+    void executionContext.policy.evaluate({
+        action: target.kind === "recipe_scenario" ? "scenario_execute" : "task_run",
+        config: executionContext.config,
+        taskId: opts.task_id,
+        git: { stagedPaths: [] },
+    });
+    let executionProfile = consumeExecutionProfileBudget({
+        runtime: executionContext.executionProfile,
+        phase: "discovery",
+    });
     const taskEnvelope = await assembleRunnerTaskContext({
-        ctx,
+        ctx: executionContext.command,
         cwd: opts.cwd,
         rootOverride: opts.rootOverride ?? null,
         task_id: opts.task_id,
     });
     const base_prompts = await collectRunnerBasePrompts({
-        git_root: taskEnvelope.repository.git_root,
+        git_root: executionContext.repo.git_root,
         owner_id: taskEnvelope.task.data.owner,
-        agents_dir: ctx.config.paths.agents_dir,
+        agents_dir: executionContext.harness.workflow.paths.agents_dir,
         recipe: opts.recipe,
+        harness: executionContext.harness,
+        execution_profile: executionProfile,
     });
-    const adapter = createRunnerAdapter(ctx.config);
+    const framework_explain = appendFrameworkExplainBehaviorInputs(executionContext.frameworkExplain, collectFrameworkExplainBehaviorInputs(base_prompts));
+    const framework_protocol = buildFrameworkProtocolSurface({
+        explain: framework_explain,
+    });
+    const adapter = createRunnerAdapter(executionContext.config);
     const configured_adapter_id = adapter.id === "custom" ? "custom" : "codex";
     const run_id = opts.run_id ?? createRunnerRunId();
     const artifact_paths = resolveTaskRunnerPaths({
@@ -174,8 +208,10 @@ export async function prepareTaskRunnerExecution(opts) {
     const bundle = {
         schema_version: RUNNER_BUNDLE_SCHEMA_VERSION,
         runner_api_version: RUNNER_API_VERSION,
-        target: opts.target ?? { kind: "task", task_id: opts.task_id },
+        target,
         base_prompts,
+        framework_explain,
+        framework_protocol,
         repository: taskEnvelope.repository,
         task: taskEnvelope.task,
         recipe: opts.recipe,
@@ -184,21 +220,32 @@ export async function prepareTaskRunnerExecution(opts) {
             mode: opts.mode,
             run_id,
             artifact_paths,
-            trace_policy: resolveRunnerTracePolicy(ctx.config),
-            timeout_policy: resolveRunnerTimeoutPolicy(ctx.config),
+            profile_runtime: executionProfile,
+            trace_policy: executionProfile.runner.trace_policy,
+            timeout_policy: executionProfile.runner.timeout_policy,
             approvals: {
-                require_plan: ctx.config.agents?.approvals.require_plan,
-                require_verify: ctx.config.agents?.approvals.require_verify,
-                require_network: ctx.config.agents?.approvals.require_network,
+                require_plan: executionContext.approvals.require_plan,
+                require_verify: executionContext.approvals.require_verify,
+                require_network: executionContext.approvals.require_network,
             },
         },
     };
+    executionProfile = consumeExecutionProfileBudget({
+        runtime: bundle.execution.profile_runtime ?? executionProfile,
+        phase: "implementation",
+    });
+    bundle.execution.profile_runtime = executionProfile;
     bundle.execution.adapter_capabilities = adapter.describeCapabilities(bundle);
     bundle.execution.policy_decision = buildRunnerPolicyDecision({
         adapter_id: bundle.execution.adapter_id,
         capabilities: bundle.execution.adapter_capabilities,
         recipe: bundle.recipe,
     });
+    bundle.execution.adapter_capability_registry = resolveRunnerAdapterCapabilityRegistry({
+        adapter_id: bundle.execution.adapter_id,
+        capabilities: bundle.execution.adapter_capabilities,
+        requested: bundle.execution.policy_decision.requested,
+    });
     assertRunnerTaskExecutable(bundle);
     try {
         assertRunnerPolicyCompatibility(bundle);

package/dist/runtime/approvals/index.d.ts

@@ -0,0 +1,3 @@
+export type { ApprovalDecisionSource, ApprovalRequest, ApprovalRequirement, ApprovalResolveOptions, ApprovalRuntimeOptions, EffectiveApprovalSettings, } from "./types.js";
+export { ApprovalRuntime, createApprovalRuntime, resolveEffectiveApprovalSettings, } from "./runtime.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/approvals/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/approvals/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,sBAAsB,EACtB,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,gCAAgC,GACjC,MAAM,cAAc,CAAC"}

package/dist/runtime/approvals/index.js

@@ -0,0 +1 @@
+export { ApprovalRuntime, createApprovalRuntime, resolveEffectiveApprovalSettings, } from "./runtime.js";

package/dist/runtime/approvals/runtime.d.ts

@@ -0,0 +1,12 @@
+import type { AgentplaneConfig } from "@agentplaneorg/core";
+import type { ApprovalRequest, ApprovalRequirement, ApprovalRuntimeOptions, ApprovalResolveOptions, EffectiveApprovalSettings } from "./types.js";
+export declare function resolveEffectiveApprovalSettings(config: AgentplaneConfig): EffectiveApprovalSettings;
+export declare class ApprovalRuntime {
+    private readonly config;
+    private readonly policy;
+    constructor(opts: ApprovalRuntimeOptions);
+    resolve(opts: ApprovalResolveOptions): ApprovalRequirement;
+    ensure(opts: ApprovalRequest): Promise<ApprovalRequirement>;
+}
+export declare function createApprovalRuntime(opts: ApprovalRuntimeOptions): ApprovalRuntime;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime/approvals/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../src/runtime/approvals/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAM5D,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAEpB,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,gBAAgB,GACvB,yBAAyB,CAuB3B;AAmGD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmB;IAC1C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;gBAE1B,IAAI,EAAE,sBAAsB;IAKxC,OAAO,CAAC,IAAI,EAAE,sBAAsB,GAAG,mBAAmB;IASpD,MAAM,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC;CA0BlE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,sBAAsB,GAAG,eAAe,CAEnF"}

package/dist/runtime/approvals/runtime.js

@@ -0,0 +1,154 @@
+import { promptYesNo } from "../../cli/prompts.js";
+import { PolicyEngine } from "../../policy/engine.js";
+import { CliError } from "../../shared/errors.js";
+export function resolveEffectiveApprovalSettings(config) {
+    const approvals = config.agents?.approvals;
+    const base = {
+        require_plan: approvals?.require_plan === true,
+        require_network: approvals?.require_network === true,
+        require_verify: approvals?.require_verify === true,
+        require_force: approvals?.require_force === true,
+    };
+    if (config.execution.profile === "conservative") {
+        return {
+            ...base,
+            require_network: true,
+            require_force: true,
+        };
+    }
+    return base;
+}
+function resolveRequirement(opts) {
+    const approvals = resolveEffectiveApprovalSettings(opts.config);
+    const decision = opts.policy.evaluate({
+        action: opts.action,
+        config: opts.config,
+        taskId: opts.taskId ?? "",
+        git: { stagedPaths: [] },
+    });
+    const classification = decision.action;
+    const configuredNetwork = opts.config.agents?.approvals?.require_network === true;
+    const configuredForce = opts.config.agents?.approvals?.require_force === true;
+    const conservativeProfile = opts.config.execution.profile === "conservative";
+    switch (classification.approval) {
+        case "network_access": {
+            return {
+                action: classification,
+                approvals,
+                required: approvals.require_network === true,
+                source: approvals.require_network
+                    ? configuredNetwork
+                        ? "config"
+                        : conservativeProfile
+                            ? "execution_profile"
+                            : "none"
+                    : "none",
+                reason: "Network access requires explicit approval",
+            };
+        }
+        case "force_action": {
+            return {
+                action: classification,
+                approvals,
+                required: approvals.require_force === true,
+                source: approvals.require_force
+                    ? configuredForce
+                        ? "config"
+                        : conservativeProfile
+                            ? "execution_profile"
+                            : "none"
+                    : "none",
+                reason: "Force action requires explicit approval",
+            };
+        }
+        case "policy_write": {
+            return {
+                action: classification,
+                approvals,
+                required: false,
+                source: "builtin",
+                reason: "Policy writes require explicit approval",
+            };
+        }
+        case "config_write": {
+            return {
+                action: classification,
+                approvals,
+                required: false,
+                source: "builtin",
+                reason: "Config writes require explicit approval",
+            };
+        }
+        case "dangerous_fs": {
+            return {
+                action: classification,
+                approvals,
+                required: false,
+                source: "builtin",
+                reason: "Potentially dangerous file operations require approval",
+            };
+        }
+        case "git_push": {
+            return {
+                action: classification,
+                approvals,
+                required: false,
+                source: "builtin",
+                reason: "Git push requires explicit approval",
+            };
+        }
+        default: {
+            return {
+                action: classification,
+                approvals,
+                required: false,
+                source: "none",
+                reason: `${classification.summary} does not require an approval gate`,
+            };
+        }
+    }
+}
+export class ApprovalRuntime {
+    config;
+    policy;
+    constructor(opts) {
+        this.config = opts.config;
+        this.policy = opts.policy ?? new PolicyEngine();
+    }
+    resolve(opts) {
+        return resolveRequirement({
+            config: this.config,
+            action: opts.action,
+            taskId: opts.taskId,
+            policy: this.policy,
+        });
+    }
+    async ensure(opts) {
+        const requirement = this.resolve({
+            action: opts.action,
+            taskId: opts.taskId,
+        });
+        if (!requirement.required || opts.yes)
+            return requirement;
+        const interactive = opts.interactive ?? Boolean(process.stdin.isTTY);
+        if (!interactive) {
+            throw new CliError({
+                exitCode: 3,
+                code: "E_VALIDATION",
+                message: `${requirement.reason} (pass --yes): ${opts.reason}`,
+            });
+        }
+        const approved = await promptYesNo(`Allow ${opts.action}? ${opts.reason}`, false);
+        if (!approved) {
+            throw new CliError({
+                exitCode: 3,
+                code: "E_VALIDATION",
+                message: `${requirement.reason} denied: ${opts.reason}`,
+            });
+        }
+        return requirement;
+    }
+}
+export function createApprovalRuntime(opts) {
+    return new ApprovalRuntime(opts);
+}

package/dist/runtime/approvals/types.d.ts

@@ -0,0 +1,31 @@
+import type { AgentplaneConfig } from "@agentplaneorg/core";
+import type { PolicyEngine } from "../../policy/engine.js";
+import type { PolicyActionDescriptor, PolicyActionId } from "../../policy/taxonomy.js";
+export type EffectiveApprovalSettings = {
+    require_plan: boolean;
+    require_network: boolean;
+    require_verify: boolean;
+    require_force: boolean;
+};
+export type ApprovalDecisionSource = "none" | "config" | "execution_profile" | "builtin";
+export type ApprovalRequirement = {
+    action: PolicyActionDescriptor;
+    required: boolean;
+    reason: string;
+    source: ApprovalDecisionSource;
+    approvals: EffectiveApprovalSettings;
+};
+export type ApprovalResolveOptions = {
+    action: PolicyActionId;
+    taskId?: string;
+};
+export type ApprovalRequest = ApprovalResolveOptions & {
+    yes: boolean;
+    reason: string;
+    interactive?: boolean;
+};
+export type ApprovalRuntimeOptions = {
+    config: AgentplaneConfig;
+    policy?: PolicyEngine;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/approvals/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime/approvals/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAEvF,MAAM,MAAM,yBAAyB,GAAG;IACtC,YAAY,EAAE,OAAO,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,QAAQ,GAAG,mBAAmB,GAAG,SAAS,CAAC;AAEzF,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,sBAAsB,CAAC;IAC/B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,sBAAsB,CAAC;IAC/B,SAAS,EAAE,yBAAyB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,sBAAsB,GAAG;IACrD,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB,CAAC"}

package/dist/runtime/approvals/types.js

@@ -0,0 +1 @@
+export {};

package/dist/runtime/behavior/index.d.ts

@@ -0,0 +1,3 @@
+export { resolveBehavior, stripBehaviorValue } from "./resolve.js";
+export type { BehaviorCandidate, BehaviorLayer, BehaviorResolutionEntry, BehaviorResolutionTrace, ResolvedBehavior, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/behavior/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/behavior/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACnE,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/runtime/behavior/index.js

@@ -0,0 +1 @@
+export { resolveBehavior, stripBehaviorValue } from "./resolve.js";

package/dist/runtime/behavior/resolve.d.ts

@@ -0,0 +1,7 @@
+import type { BehaviorCandidate, BehaviorResolutionTrace, ResolvedBehavior } from "./types.js";
+export declare function resolveBehavior<TValue, TMetadata = Record<string, unknown>>(opts: {
+    key: string;
+    candidates: readonly BehaviorCandidate<TValue, TMetadata>[];
+}): ResolvedBehavior<TValue, TMetadata>;
+export declare function stripBehaviorValue<TValue, TMetadata>(resolved: ResolvedBehavior<TValue, TMetadata>): BehaviorResolutionTrace<TMetadata>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/runtime/behavior/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/runtime/behavior/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iBAAiB,EAGjB,uBAAuB,EACvB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAyDpB,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE;IACjF,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,SAAS,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;CAC7D,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAyBtC;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,SAAS,EAClD,QAAQ,EAAE,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,GAC5C,uBAAuB,CAAC,SAAS,CAAC,CAOpC"}

package/dist/runtime/behavior/resolve.js

@@ -0,0 +1,66 @@
+const BEHAVIOR_LAYER_RANK = {
+    harness: 0,
+    extension: 1,
+    user: 2,
+    builtin: 3,
+};
+function normalizeKey(key) {
+    const normalized = key.trim();
+    if (!normalized) {
+        throw new Error("Behavior resolution requires a non-empty key.");
+    }
+    return normalized;
+}
+function rankCandidates(candidates) {
+    return candidates.map((candidate, index) => ({
+        ...candidate,
+        order: candidate.order ?? 0,
+        index,
+    }));
+}
+function compareCandidates(left, right) {
+    return (BEHAVIOR_LAYER_RANK[left.layer] - BEHAVIOR_LAYER_RANK[right.layer] ||
+        left.order - right.order ||
+        left.source.localeCompare(right.source) ||
+        left.index - right.index);
+}
+function toTraceEntry(candidate, selected) {
+    return {
+        layer: candidate.layer,
+        source: candidate.source,
+        order: candidate.order,
+        selected,
+        ...(candidate.metadata ? { metadata: structuredClone(candidate.metadata) } : {}),
+    };
+}
+export function resolveBehavior(opts) {
+    const key = normalizeKey(opts.key);
+    if (opts.candidates.length === 0) {
+        throw new Error(`Behavior resolution requires at least one candidate: ${key}`);
+    }
+    const ranked = rankCandidates(opts.candidates).toSorted(compareCandidates);
+    const winner = ranked[0];
+    if (!winner) {
+        throw new Error(`Behavior resolution lost its winner unexpectedly: ${key}`);
+    }
+    const trace = ranked.map((candidate, index) => toTraceEntry(candidate, index === 0));
+    const [winnerTrace, ...conflicts] = trace;
+    if (!winnerTrace) {
+        throw new Error(`Behavior resolution trace is unexpectedly empty: ${key}`);
+    }
+    return {
+        key,
+        value: winner.value,
+        winner: winnerTrace,
+        conflicts,
+        trace,
+    };
+}
+export function stripBehaviorValue(resolved) {
+    return {
+        key: resolved.key,
+        winner: resolved.winner,
+        conflicts: resolved.conflicts,
+        trace: resolved.trace,
+    };
+}

package/dist/runtime/behavior/types.d.ts

@@ -0,0 +1,25 @@
+export type BehaviorLayer = "harness" | "extension" | "user" | "builtin";
+export type BehaviorCandidate<TValue, TMetadata = Record<string, unknown>> = {
+    layer: BehaviorLayer;
+    source: string;
+    value: TValue;
+    order?: number;
+    metadata?: TMetadata;
+};
+export type BehaviorResolutionEntry<TMetadata = Record<string, unknown>> = {
+    layer: BehaviorLayer;
+    source: string;
+    order: number;
+    selected: boolean;
+    metadata?: TMetadata;
+};
+export type BehaviorResolutionTrace<TMetadata = Record<string, unknown>> = {
+    key: string;
+    winner: BehaviorResolutionEntry<TMetadata>;
+    conflicts: BehaviorResolutionEntry<TMetadata>[];
+    trace: BehaviorResolutionEntry<TMetadata>[];
+};
+export type ResolvedBehavior<TValue, TMetadata = Record<string, unknown>> = BehaviorResolutionTrace<TMetadata> & {
+    value: TValue;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/runtime/behavior/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/runtime/behavior/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzE,MAAM,MAAM,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IAC3E,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IACzE,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI;IACzE,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,uBAAuB,CAAC,SAAS,CAAC,CAAC;IAC3C,SAAS,EAAE,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;IAChD,KAAK,EAAE,uBAAuB,CAAC,SAAS,CAAC,EAAE,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,gBAAgB,CAC1B,MAAM,EACN,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IACjC,uBAAuB,CAAC,SAAS,CAAC,GAAG;IACvC,KAAK,EAAE,MAAM,CAAC;CACf,CAAC"}

package/dist/runtime/behavior/types.js

@@ -0,0 +1 @@
+export {};

package/dist/runtime/capabilities/backend.d.ts

@@ -0,0 +1,7 @@
+import type { TaskBackendCapabilities } from "../../backends/task-backend.js";
+import type { AgentplaneCapabilityRegistry } from "./types.js";
+export declare function resolveTaskBackendCapabilityRegistry(opts: {
+    backend_id: string;
+    capabilities: TaskBackendCapabilities | null | undefined;
+}): AgentplaneCapabilityRegistry;
+//# sourceMappingURL=backend.d.ts.map

package/dist/runtime/capabilities/backend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../../src/runtime/capabilities/backend.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAG9E,OAAO,KAAK,EAA6B,4BAA4B,EAAE,MAAM,YAAY,CAAC;AA8E1F,wBAAgB,oCAAoC,CAAC,IAAI,EAAE;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,uBAAuB,GAAG,IAAI,GAAG,SAAS,CAAC;CAC1D,GAAG,4BAA4B,CAsD/B"}

package/dist/runtime/capabilities/backend.js

@@ -0,0 +1,104 @@
+import { createCapabilityRegistry } from "./registry.js";
+const BOOLEAN_CAPABILITY_FIELDS = [
+    {
+        field: "reads_from_projection_by_default",
+        summary: "Reads task data from the projection by default",
+    },
+    {
+        field: "writes_task_readmes",
+        summary: "Writes task README documents through the backend",
+    },
+    {
+        field: "supports_task_revisions",
+        summary: "Supports backend task revisions",
+    },
+    {
+        field: "supports_revision_guarded_writes",
+        summary: "Supports revision-guarded writes",
+    },
+    {
+        field: "may_access_network_on_read",
+        summary: "May access the network while reading tasks",
+    },
+    {
+        field: "may_access_network_on_write",
+        summary: "May access the network while writing tasks",
+    },
+    {
+        field: "supports_projection_refresh",
+        summary: "Supports projection refresh",
+    },
+    {
+        field: "supports_push_sync",
+        summary: "Supports push synchronization",
+    },
+    {
+        field: "supports_snapshot_export",
+        summary: "Supports projection or task snapshot export",
+    },
+];
+const VALUE_CAPABILITY_FIELDS = [
+    { field: "canonical_source", summary: "Canonical task source mode" },
+    { field: "projection", summary: "Projection storage mode" },
+    { field: "projection_read_mode", summary: "Projection read mode" },
+];
+function source(backendId) {
+    return {
+        id: "backend",
+        detail: backendId,
+    };
+}
+function fieldId(backendId, field) {
+    return `backend.${backendId}.${field}`;
+}
+export function resolveTaskBackendCapabilityRegistry(opts) {
+    if (!opts.capabilities) {
+        return createCapabilityRegistry([
+            {
+                id: fieldId(opts.backend_id, "capabilities"),
+                kind: "backend_field",
+                availability: "unavailable",
+                source: source(opts.backend_id),
+                summary: "Declared task backend capabilities",
+                reason: "The task backend did not expose a capability descriptor.",
+                metadata: { backend_id: opts.backend_id },
+            },
+        ]);
+    }
+    const entries = [];
+    for (const field of VALUE_CAPABILITY_FIELDS) {
+        const value = opts.capabilities[field.field];
+        entries.push({
+            id: fieldId(opts.backend_id, field.field),
+            kind: "backend_field",
+            availability: value === undefined ? "unavailable" : "available",
+            source: source(opts.backend_id),
+            summary: field.summary,
+            value,
+            ...(value === undefined
+                ? {
+                    reason: "The task backend omitted this capability field.",
+                }
+                : {}),
+            metadata: { backend_id: opts.backend_id, field: field.field },
+        });
+    }
+    for (const field of BOOLEAN_CAPABILITY_FIELDS) {
+        const value = opts.capabilities[field.field];
+        entries.push({
+            id: fieldId(opts.backend_id, field.field),
+            kind: "backend_field",
+            availability: value ? "available" : "unavailable",
+            source: source(opts.backend_id),
+            summary: field.summary,
+            value,
+            ...(value
+                ? {}
+                : {
+                    reason: "The task backend declares this feature unavailable.",
+                }),
+            metadata: { backend_id: opts.backend_id, field: field.field },
+        });
+    }
+    return createCapabilityRegistry(entries);
+}

package/dist/runtime/capabilities/index.d.ts

@@ -0,0 +1,6 @@
+export { createCapabilityRegistry, getCapabilityEntries, listCapabilities, mergeCapabilityRegistries, } from "./registry.js";
+export { resolveTaskBackendCapabilityRegistry } from "./backend.js";
+export { resolveRecipeCapabilityRegistry } from "./recipe.js";
+export { resolveRunnerAdapterCapabilityRegistry } from "./runner.js";
+export type { AgentplaneCapabilityAvailability, AgentplaneCapabilityEntry, AgentplaneCapabilityFilter, AgentplaneCapabilityKind, AgentplaneCapabilityRegistry, AgentplaneCapabilitySourceId, AgentplaneCapabilitySourceRef, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map